sfcc-dev-mcp 1.0.15 → 1.0.19

package/dist/utils/path-resolver.js

@@ -12,10 +12,30 @@ export class PathResolver {
      */
     static getCurrentWorkingDir() {
         // Get the directory of the current module file
+        // ts-jest may compile with a CommonJS module target in tests; suppress the
+        // diagnostic because runtime uses ESM (NodeNext) where import.meta is valid.
         const __filename = fileURLToPath(import.meta.url);
         const __dirname = path.dirname(__filename);
-        // Return the parent directory (project root)
-        return path.resolve(__dirname, '..');
+        // Return the project root (handles both src/ and dist/ locations)
+        return path.resolve(__dirname, '..', '..');
+    }
+    /**
+     * Root path for bundled AI instructions (AGENTS.md + skills)
+     */
+    static getAiInstructionsPath() {
+        return this.getRelativePath('ai-instructions');
+    }
+    /**
+     * Path to the bundled AGENTS.md
+     */
+    static getAgentsInstructionsFile() {
+        return path.join(this.getAiInstructionsPath(), 'AGENTS.md');
+    }
+    /**
+     * Path to the bundled skills directory
+     */
+    static getSkillsSourcePath() {
+        return path.join(this.getAiInstructionsPath(), 'skills');
     }
     /**
      * Get a path relative to the current working directory
@@ -30,12 +50,6 @@ export class PathResolver {
     static getDocsPath() {
         return this.getRelativePath('docs');
     }
-    /**
-     * Get the best practices docs directory path relative to the current working directory
-     */
-    static getBestPracticesPath() {
-        return this.getRelativePath('docs', 'best-practices');
-    }
     /**
      * Get the SFRA docs directory path relative to the current working directory
      */

package/dist/utils/path-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"path-resolver.js","sourceRoot":"","sources":["../../src/utils/path-resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,OAAO,YAAY;IACvB;;OAEG;IACH,MAAM,CAAC,oBAAoB;QACzB,+CAA+C;QAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE3C,6CAA6C;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,eAAe,CAAC,GAAG,YAAsB;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE/C,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,oBAAoB;QACzB,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,eAAe;QACpB,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;CACF"}
+{"version":3,"file":"path-resolver.js","sourceRoot":"","sources":["../../src/utils/path-resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,OAAO,YAAY;IACvB;;OAEG;IACH,MAAM,CAAC,oBAAoB;QACzB,+CAA+C;QAC/C,2EAA2E;QAC3E,6EAA6E;QAC7E,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE3C,kEAAkE;QAClE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,qBAAqB;QAC1B,OAAO,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,yBAAyB;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,WAAW,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,mBAAmB;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,eAAe,CAAC,GAAG,YAAsB;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE/C,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,eAAe;QACpB,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/utils/path-validation.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Path Validation Utilities
+ *
+ * Provides secure path validation for file operations.
+ * Prevents path traversal attacks and validates file names.
+ */
+export interface PathValidationOptions {
+    /** Allowed file extensions (e.g., ['.md', '.json']) */
+    allowedExtensions?: string[];
+    /** Whether to normalize the name to lowercase */
+    normalizeToLowerCase?: boolean;
+}
+export declare class PathValidationError extends Error {
+    readonly code: string;
+    constructor(message: string, code?: string);
+}
+/**
+ * Validate a file/document name for security issues
+ * @param name - The name to validate
+ * @param fieldName - Human-readable field name for error messages
+ * @throws PathValidationError if validation fails
+ */
+export declare function validateFileName(name: string, fieldName?: string): void;
+/**
+ * Construct and validate a file path within a base directory
+ * @param basePath - The base directory path
+ * @param fileName - The file name (without extension)
+ * @param options - Validation options
+ * @returns The validated, resolved file path
+ * @throws PathValidationError if validation fails
+ */
+export declare function constructValidatedPath(basePath: string, fileName: string, options?: PathValidationOptions): string;
+/**
+ * Validate binary content
+ * @param content - The content to validate
+ * @param fieldName - Human-readable field name for error messages
+ * @throws PathValidationError if content appears to be binary
+ */
+export declare function validateTextContent(content: string, fieldName?: string): void;
+//# sourceMappingURL=path-validation.d.ts.map

package/dist/utils/path-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-validation.d.ts","sourceRoot":"","sources":["../../src/utils/path-validation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,qBAAqB;IACpC,uDAAuD;IACvD,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,iDAAiD;IACjD,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,qBAAa,mBAAoB,SAAQ,KAAK;aACC,IAAI,EAAE,MAAM;gBAA7C,OAAO,EAAE,MAAM,EAAkB,IAAI,GAAE,MAAgC;CAIpF;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,GAAE,MAAe,GAAG,IAAI,CAmB/E;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,qBAA0B,GAClC,MAAM,CAkCR;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,GAAE,MAAkB,GAAG,IAAI,CAQxF"}

package/dist/utils/path-validation.js

@@ -0,0 +1,84 @@
+/**
+ * Path Validation Utilities
+ *
+ * Provides secure path validation for file operations.
+ * Prevents path traversal attacks and validates file names.
+ */
+import * as path from 'path';
+export class PathValidationError extends Error {
+    code;
+    constructor(message, code = 'PATH_VALIDATION_ERROR') {
+        super(message);
+        this.code = code;
+        this.name = 'PathValidationError';
+    }
+}
+/**
+ * Validate a file/document name for security issues
+ * @param name - The name to validate
+ * @param fieldName - Human-readable field name for error messages
+ * @throws PathValidationError if validation fails
+ */
+export function validateFileName(name, fieldName = 'name') {
+    if (!name || typeof name !== 'string') {
+        throw new PathValidationError(`Invalid ${fieldName}: must be a non-empty string`, 'INVALID_TYPE');
+    }
+    // Prevent null bytes
+    if (name.includes('\0') || name.includes('\x00')) {
+        throw new PathValidationError(`Invalid ${fieldName}: contains null bytes`, 'NULL_BYTES');
+    }
+    // Prevent path traversal sequences
+    if (name.includes('..') || name.includes('/') || name.includes('\\')) {
+        throw new PathValidationError(`Invalid ${fieldName}: contains path traversal sequences`, 'PATH_TRAVERSAL');
+    }
+    // Only allow safe characters
+    if (!/^[a-zA-Z0-9_-]+$/.test(name)) {
+        throw new PathValidationError(`Invalid ${fieldName}: contains invalid characters`, 'INVALID_CHARACTERS');
+    }
+}
+/**
+ * Construct and validate a file path within a base directory
+ * @param basePath - The base directory path
+ * @param fileName - The file name (without extension)
+ * @param options - Validation options
+ * @returns The validated, resolved file path
+ * @throws PathValidationError if validation fails
+ */
+export function constructValidatedPath(basePath, fileName, options = {}) {
+    const { allowedExtensions = ['.md'], normalizeToLowerCase = true } = options;
+    // Validate the file name first
+    validateFileName(fileName, 'file name');
+    // Normalize if requested
+    const normalizedName = normalizeToLowerCase ? fileName.toLowerCase() : fileName;
+    // Determine extension (use first allowed extension by default)
+    const extension = allowedExtensions[0] ?? '.md';
+    // Construct the path
+    const filePath = path.join(basePath, `${normalizedName}${extension}`);
+    const resolvedPath = path.resolve(filePath);
+    const resolvedBasePath = path.resolve(basePath);
+    // Ensure the path is within the base directory
+    if (!resolvedPath.startsWith(resolvedBasePath)) {
+        throw new PathValidationError('Invalid file name: path outside allowed directory', 'OUTSIDE_BASE_DIR');
+    }
+    // Ensure the file has the correct extension
+    const hasValidExtension = allowedExtensions.some(ext => resolvedPath.toLowerCase().endsWith(ext.toLowerCase()));
+    if (!hasValidExtension) {
+        throw new PathValidationError(`Invalid file name: must reference a ${allowedExtensions.join(' or ')} file`, 'INVALID_EXTENSION');
+    }
+    return resolvedPath;
+}
+/**
+ * Validate binary content
+ * @param content - The content to validate
+ * @param fieldName - Human-readable field name for error messages
+ * @throws PathValidationError if content appears to be binary
+ */
+export function validateTextContent(content, fieldName = 'content') {
+    if (!content.trim()) {
+        throw new PathValidationError(`Empty ${fieldName}`, 'EMPTY_CONTENT');
+    }
+    if (content.includes('\0')) {
+        throw new PathValidationError(`Invalid ${fieldName}: contains binary data`, 'BINARY_CONTENT');
+    }
+}
+//# sourceMappingURL=path-validation.js.map

package/dist/utils/path-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-validation.js","sourceRoot":"","sources":["../../src/utils/path-validation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAS7B,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACC;IAA7C,YAAY,OAAe,EAAkB,OAAe,uBAAuB;QACjF,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,SAAI,GAAJ,IAAI,CAAkC;QAEjF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,YAAoB,MAAM;IACvE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,mBAAmB,CAAC,WAAW,SAAS,8BAA8B,EAAE,cAAc,CAAC,CAAC;IACpG,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,mBAAmB,CAAC,WAAW,SAAS,uBAAuB,EAAE,YAAY,CAAC,CAAC;IAC3F,CAAC;IAED,mCAAmC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,mBAAmB,CAAC,WAAW,SAAS,qCAAqC,EAAE,gBAAgB,CAAC,CAAC;IAC7G,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,mBAAmB,CAAC,WAAW,SAAS,+BAA+B,EAAE,oBAAoB,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,QAAgB,EAChB,UAAiC,EAAE;IAEnC,MAAM,EAAE,iBAAiB,GAAG,CAAC,KAAK,CAAC,EAAE,oBAAoB,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAE7E,+BAA+B;IAC/B,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAExC,yBAAyB;IACzB,MAAM,cAAc,GAAG,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEhF,+DAA+D;IAC/D,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IAEhD,qBAAqB;IACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,cAAc,GAAG,SAAS,EAAE,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEhD,+CAA+C;IAC/C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAAC,mDAAmD,EAAE,kBAAkB,CAAC,CAAC;IACzG,CAAC;IAED,4CAA4C;IAC5C,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACrD,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CACvD,CAAC;IACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAC3B,uCAAuC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAC5E,mBAAmB,CACpB,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,YAAoB,SAAS;IAChF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,mBAAmB,CAAC,SAAS,SAAS,EAAE,EAAE,eAAe,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,mBAAmB,CAAC,WAAW,SAAS,wBAAwB,EAAE,gBAAgB,CAAC,CAAC;IAChG,CAAC;AACH,CAAC"}

package/docs/dw_net/HTTPClient.md

@@ -9,7 +9,7 @@
 
 ## Description
 
-The HTTPClient class supports the HTTP methods GET, POST, HEAD, PUT, PATCH, OPTIONS, and DELETE. If a secure connection via HTTPS is established the used server certificate or the signing CAs certificate needs to be imported into the customer key store via Business Manager. Note: when this class is used with sensitive data, be careful in persisting sensitive information. Key selection for mutual TLS: Check if there is an explicit identity requested setIdentity(KeyRef) Else, Check if there is a mapping for hostname in the keystore Deprecated: Select an arbitrary private key from the keystore var httpClient : HTTPClient = new HTTPClient(); var message : String; httpClient.open('GET', 'http://www.myinstance.com/feed.xml'); httpClient.setTimeout(3000); httpClient.send(); if (httpClient.statusCode == 200) { message = httpClient.text; } else { // error handling message="An error occurred with status code "+httpClient.statusCode; }
+The HTTPClient class supports the HTTP methods GET, POST, HEAD, PUT, PATCH, OPTIONS, and DELETE. If a secure connection via HTTPS is established the used server certificate or the signing CAs certificate needs to be imported into the customer key store via Business Manager. Note: when this class is used with sensitive data, be careful in persisting sensitive information. Key selection for mutual TLS: Check if there is an explicit identity requested setIdentity(KeyRef) Else, Check if there is a mapping for hostname in the keystore Deprecated: Select an arbitrary private key from the keystore var httpClient = new HTTPClient(); var message; httpClient.open('GET', 'http://www.myinstance.com/feed.xml'); httpClient.setTimeout(3000); httpClient.send(); if (httpClient.statusCode == 200) { message = httpClient.text; } else { // error handling message = "An error occurred with status code "+httpClient.statusCode; }
 
 ## Constants
 
@@ -77,6 +77,12 @@ Determines whether host name verification is enabled.
 
 Gets the identity used for mutual TLS (mTLS).
 
+### loggingConfig
+
+**Type:** HTTPClientLoggingConfig
+
+Gets the logging configuration for this HTTP client.
+
 ### responseHeaders
 
 **Type:** Map (Read Only)
@@ -110,7 +116,9 @@ The timeout for this client, in milliseconds.
 
 ## Constructor Summary
 
-HTTPClient()
+HTTPClient() Constructs the HTTPClient instance with the default configuration.
+
+HTTPClient(configMap : Object) Constructs the HTTPClient instance with the given configuration.
 
 ## Method Summary
 
@@ -162,6 +170,12 @@ Determines whether host name verification is enabled.
 
 Gets the identity used for mutual TLS (mTLS).
 
+### getLoggingConfig
+
+**Signature:** `getLoggingConfig() : HTTPClientLoggingConfig`
+
+Gets the logging configuration for this HTTP client.
+
 ### getResponseHeader
 
 **Signature:** `getResponseHeader(header : String) : String`
@@ -306,6 +320,12 @@ Sets whether certificate host name verification is enabled.
 
 Sets the identity (private key) to use when mutual TLS (mTLS) is configured.
 
+### setLoggingConfig
+
+**Signature:** `setLoggingConfig(config : HTTPClientLoggingConfig) : void`
+
+Sets the logging configuration for this HTTP client.
+
 ### setRequestHeader
 
 **Signature:** `setRequestHeader(key : String, value : String) : void`
@@ -424,6 +444,18 @@ Reference to the private key, or null if not configured
 
 ---
 
+### getLoggingConfig
+
+**Signature:** `getLoggingConfig() : HTTPClientLoggingConfig`
+
+**Description:** Gets the logging configuration for this HTTP client.
+
+**Returns:**
+
+the current logging configuration
+
+---
+
 ### getResponseHeader
 
 **Signature:** `getResponseHeader(header : String) : String`
@@ -761,6 +793,18 @@ true if the returned code was a positive status code.
 
 ---
 
+### setLoggingConfig
+
+**Signature:** `setLoggingConfig(config : HTTPClientLoggingConfig) : void`
+
+**Description:** Sets the logging configuration for this HTTP client.
+
+**Parameters:**
+
+- `config`: the logging configuration to use
+
+---
+
 ### setRequestHeader
 
 **Signature:** `setRequestHeader(key : String, value : String) : void`

package/docs/dw_net/HTTPClientLoggingConfig.md

@@ -0,0 +1,296 @@
+## Package: dw.net
+
+# Class HTTPClientLoggingConfig
+
+## Inheritance Hierarchy
+
+- Object
+  - dw.net.HTTPClientLoggingConfig
+
+## Description
+
+Script API for configuring HTTP client logging and sensitive data redaction. This class provides a customer-facing interface for configuring HTTP client logging behavior, including enabling/disabling logging, setting log levels, and defining sensitive fields that should be redacted from HTTP request and response bodies. Security Note: This class handles sensitive security-related data and logging configuration. Pay special attention to PCI DSS requirements when configuring sensitive field redaction to ensure proper data protection. Sensitive Fields of appropriate types MUST be set else logging will be skipped. Usage Example: var config = new dw.net.HTTPClientLoggingConfig(); // Enable logging and set level config.setEnabled(true); config.setLevel("INFO"); // Configure sensitive JSON fields config.setSensitiveJsonFields(["password", "creditCard", "ssn"]); // Configure sensitive XML fields config.setSensitiveXmlFields(["password", "creditCard", "ssn"]); // Configure sensitive headers config.setSensitiveHeaders(["authorization", "x-api-key", "cookie"]); // Configure sensitive body fields (for form data) config.setSensitiveBodyFields(["password", "creditCard", "ssn"]); // Configure text patterns for plain text/HTML content config.setSensitiveTextPatterns([["password\\s*=\\s*[^\\s&]+"]]); Content Type Support: JSON: Use setSensitiveJsonFields() to specify field names to redact XML: Use setSensitiveXmlFields() to specify element/attribute names to redact Form Data: Use setSensitiveBodyFields() to specify parameter names to redact Plain Text/HTML: Use setSensitiveTextPatterns() to specify regex patterns Binary/Multipart: Entire body is automatically treated as sensitive
+
+## Properties
+
+### enabled
+
+**Type:** boolean
+
+Gets whether HTTP client logging is enabled.
+
+### level
+
+**Type:** String
+
+Gets the current log level for HTTP client logging.
+
+### sensitiveBodyFields
+
+**Type:** String
+
+Gets the sensitive body fields configured for form data redaction.
+
+### sensitiveHeaders
+
+**Type:** String
+
+Gets the sensitive headers configured for redaction.
+
+### sensitiveJsonFields
+
+**Type:** String
+
+Gets the sensitive JSON fields configured for redaction.
+
+### sensitiveXmlFields
+
+**Type:** String
+
+Gets the sensitive XML fields configured for redaction.
+
+## Constructor Summary
+
+HTTPClientLoggingConfig() Creates a new HTTPClientLoggingConfig instance.
+
+## Method Summary
+
+### getLevel
+
+**Signature:** `getLevel() : String`
+
+Gets the current log level for HTTP client logging.
+
+### getSensitiveBodyFields
+
+**Signature:** `getSensitiveBodyFields() : String[]`
+
+Gets the sensitive body fields configured for form data redaction.
+
+### getSensitiveHeaders
+
+**Signature:** `getSensitiveHeaders() : String[]`
+
+Gets the sensitive headers configured for redaction.
+
+### getSensitiveJsonFields
+
+**Signature:** `getSensitiveJsonFields() : String[]`
+
+Gets the sensitive JSON fields configured for redaction.
+
+### getSensitiveXmlFields
+
+**Signature:** `getSensitiveXmlFields() : String[]`
+
+Gets the sensitive XML fields configured for redaction.
+
+### isEnabled
+
+**Signature:** `isEnabled() : boolean`
+
+Gets whether HTTP client logging is enabled.
+
+### setEnabled
+
+**Signature:** `setEnabled(enabled : boolean) : void`
+
+Sets whether HTTP client logging is enabled.
+
+### setLevel
+
+**Signature:** `setLevel(level : String) : void`
+
+Sets the log level for HTTP client logging.
+
+### setSensitiveBodyFields
+
+**Signature:** `setSensitiveBodyFields(fields : String...) : void`
+
+Sets the sensitive body fields that should be redacted from HTTP form data.
+
+### setSensitiveHeaders
+
+**Signature:** `setSensitiveHeaders(headers : String...) : void`
+
+Sets the sensitive headers that should be redacted from HTTP requests/responses.
+
+### setSensitiveJsonFields
+
+**Signature:** `setSensitiveJsonFields(fields : String...) : void`
+
+Sets the sensitive JSON fields that should be redacted from HTTP request/response bodies.
+
+### setSensitiveTextPatterns
+
+**Signature:** `setSensitiveTextPatterns(patterns : String...) : void`
+
+Sets the sensitive text patterns that should be redacted from HTTP request/response bodies.
+
+### setSensitiveXmlFields
+
+**Signature:** `setSensitiveXmlFields(fields : String...) : void`
+
+Sets the sensitive XML fields that should be redacted from HTTP request/response bodies.
+
+## Constructor Detail
+
+## Method Detail
+
+## Method Details
+
+### getLevel
+
+**Signature:** `getLevel() : String`
+
+**Description:** Gets the current log level for HTTP client logging.
+
+**Returns:**
+
+the log level as a string (DEBUG, INFO, WARN, ERROR)
+
+---
+
+### getSensitiveBodyFields
+
+**Signature:** `getSensitiveBodyFields() : String[]`
+
+**Description:** Gets the sensitive body fields configured for form data redaction.
+
+**Returns:**
+
+an array of field names that will be redacted from form data
+
+---
+
+### getSensitiveHeaders
+
+**Signature:** `getSensitiveHeaders() : String[]`
+
+**Description:** Gets the sensitive headers configured for redaction.
+
+**Returns:**
+
+an array of header names that will be redacted
+
+---
+
+### getSensitiveJsonFields
+
+**Signature:** `getSensitiveJsonFields() : String[]`
+
+**Description:** Gets the sensitive JSON fields configured for redaction.
+
+**Returns:**
+
+an array of field names that will be redacted from JSON content
+
+---
+
+### getSensitiveXmlFields
+
+**Signature:** `getSensitiveXmlFields() : String[]`
+
+**Description:** Gets the sensitive XML fields configured for redaction.
+
+**Returns:**
+
+an array of field names that will be redacted from XML content
+
+---
+
+### isEnabled
+
+**Signature:** `isEnabled() : boolean`
+
+**Description:** Gets whether HTTP client logging is enabled.
+
+**Returns:**
+
+true if logging is enabled, false otherwise
+
+---
+
+### setEnabled
+
+**Signature:** `setEnabled(enabled : boolean) : void`
+
+**Description:** Sets whether HTTP client logging is enabled. When enabled, HTTP requests and responses will be logged according to the configured log level and sensitive field redaction settings. When disabled, no HTTP logging will occur.
+
+**Parameters:**
+
+- `enabled`: true to enable logging, false to disable
+
+---
+
+### setLevel
+
+**Signature:** `setLevel(level : String) : void`
+
+**Description:** Sets the log level for HTTP client logging. The log level determines the verbosity of HTTP logging output. Available levels: DEBUG: Most verbose, includes detailed request/response information INFO: Standard level, includes basic request/response details WARN: Only logs warnings and errors ERROR: Only logs errors
+
+**Parameters:**
+
+- `level`: the log level (DEBUG, INFO, WARN, ERROR). Case-insensitive.
+
+---
+
+### setSensitiveBodyFields
+
+**Signature:** `setSensitiveBodyFields(fields : String...) : void`
+
+**Description:** Sets the sensitive body fields that should be redacted from HTTP form data. When HTTP requests or responses contain form data (application/x-www-form-urlencoded), any parameters matching the specified field names will be redacted with "****FILTERED****" in the logs. Sensitive Field MUST be set else logging will be skipped for form body type Setting with empty array will use default values ["name", "email", "email_address", "ssn", "first_name", "last_name"] Example: config.setSensitiveBodyFields(["fname", "creditCard", "ssn_last_4"]);
+
+**Parameters:**
+
+- `fields`: an array of field names to redact from form data
+
+---
+
+### setSensitiveHeaders
+
+**Signature:** `setSensitiveHeaders(headers : String...) : void`
+
+**Description:** Sets the sensitive headers that should be redacted from HTTP requests/responses. Any HTTP headers matching the specified names will be redacted with "****FILTERED****" in the logs. This is useful for protecting sensitive authentication tokens, API keys, and session information. Sensitive Headers MUST be set else logging will be skipped for headers Setting the sensitive headers with empty array will use default values ["authorization", "cookie"] Example: config.setSensitiveHeaders([ "x-api-key", "x-auth-token"]); config.setSensiviteHeaders([]);
+
+**Parameters:**
+
+- `headers`: an array of header names to redact
+
+---
+
+### setSensitiveJsonFields
+
+**Signature:** `setSensitiveJsonFields(fields : String...) : void`
+
+**Description:** Sets the sensitive JSON fields that should be redacted from HTTP request/response bodies. When HTTP requests or responses contain JSON content, any fields matching the specified names will be redacted with "****FILTERED****" in the logs. Sensitive Field MUST be set else logging will be skipped for JSON body type Setting with empty array will use default values ["name", "email", "email_address", "ssn", "first_name", "last_name", "password"] Example: config.setSensitiveJsonFields(["password", "creditCard", "ssn"]);
+
+**Parameters:**
+
+- `fields`: an array of field names to redact from JSON content
+
+---
+
+### setSensitiveTextPatterns
+
+**Signature:** `setSensitiveTextPatterns(patterns : String...) : void`
+
+**Description:** Sets the sensitive text patterns that should be redacted from HTTP request/response bodies. When HTTP requests or responses contain text content, any text matching the specified regex patterns will be redacted with "****FILTERED****" in the logs. Example: config.setSensitiveTextPatterns(["password", "credit.*card", "\\d{3}-\\d{2}-\\d{4}"]);
+
+**Parameters:**
+
+- `patterns`: an array of regex patterns to match and redact from text content
+
+---
+
+### setSensitiveXmlFields
+
+**Signature:** `setSensitiveXmlFields(fields : String...) : void`
+
+**Description:** Sets the sensitive XML fields that should be redacted from HTTP request/response bodies. When HTTP requests or responses contain XML content, any elements or attributes matching the specified names will be redacted with "****FILTERED****" in the logs. Sensitive Field MUST be set else logging will be skipped for XML body type Setting with empty array will use default values ["name", "email", "email_address", "ssn", "first_name", "last_name", "password"] Example: config.setSensitiveXmlFields(["password", "creditCard", "ssn"]);
+
+**Parameters:**
+
+- `fields`: an array of element/attribute names to redact from XML content
+
+---