zod-codegen 1.7.1 → 1.7.2

package/CHANGELOG.md

@@ -1,3 +1,9 @@
+## [1.7.2](https://github.com/julienandreu/zod-codegen/compare/v1.7.1...v1.7.2) (2026-03-10)
+
+### 🐛 Bug Fixes
+
+- redact credentials from source URL in generated file headers ([#88](https://github.com/julienandreu/zod-codegen/issues/88)) ([692901d](https://github.com/julienandreu/zod-codegen/commit/692901d0b3ea8a53cbb92102bc9c3f7f90aa44aa))
+
 ## [1.7.1](https://github.com/julienandreu/zod-codegen/compare/v1.7.0...v1.7.1) (2026-03-10)
 
 ### 🐛 Bug Fixes

package/dist/src/services/file-writer.service.d.ts

@@ -4,6 +4,7 @@ export declare class SyncFileWriterService implements FileWriter {
     private readonly version;
     private readonly inputPath;
     constructor(name: string, version: string, inputPath: string);
+    private redactUrl;
     writeFile(filePath: string, content: string): void;
     resolveOutputPath(outputDir: string, fileName?: string): string;
 }

package/dist/src/services/file-writer.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-writer.service.d.ts","sourceRoot":"","sources":["../../../src/services/file-writer.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAE/D,qBAAa,qBAAsB,YAAW,UAAU;IAEpD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAFT,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM;IAGpC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAqBlD,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,SAAW,GAAG,MAAM;CAGlE"}
+{"version":3,"file":"file-writer.service.d.ts","sourceRoot":"","sources":["../../../src/services/file-writer.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAE/D,qBAAa,qBAAsB,YAAW,UAAU;IAEpD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAFT,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM;IAGpC,OAAO,CAAC,SAAS;IAajB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAqBlD,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,SAAW,GAAG,MAAM;CAGlE"}

package/dist/src/services/file-writer.service.js

@@ -9,12 +9,25 @@ export class SyncFileWriterService {
         this.version = version;
         this.inputPath = inputPath;
     }
+    redactUrl(path) {
+        try {
+            const url = new URL(path);
+            if ((url.protocol === 'http:' || url.protocol === 'https:') && url.password) {
+                url.password = '***';
+                return url.toString();
+            }
+        }
+        catch {
+            // Not a URL, return as-is
+        }
+        return path;
+    }
     writeFile(filePath, content) {
         const generatedContent = [
             '// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.',
             `// Built with ${this.name}@${this.version}`,
             `// Latest edit: ${new Date().toUTCString()}`,
-            `// Source file: ${this.inputPath}`,
+            `// Source file: ${this.redactUrl(this.inputPath)}`,
             '/* eslint-disable */',
             '// @ts-nocheck',
             '',

package/dist/tests/unit/file-writer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=file-writer.test.d.ts.map

package/dist/tests/unit/file-writer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-writer.test.d.ts","sourceRoot":"","sources":["../../../tests/unit/file-writer.test.ts"],"names":[],"mappings":""}

package/dist/tests/unit/file-writer.test.js

@@ -0,0 +1,53 @@
+import { existsSync, mkdirSync, readFileSync, rmSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { SyncFileWriterService } from '../../src/services/file-writer.service';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const testOutputDir = join(__dirname, '../../test-output-writer');
+describe('SyncFileWriterService', () => {
+    beforeEach(() => {
+        if (existsSync(testOutputDir)) {
+            rmSync(testOutputDir, { recursive: true, force: true });
+        }
+        mkdirSync(testOutputDir, { recursive: true });
+    });
+    afterEach(() => {
+        if (existsSync(testOutputDir)) {
+            rmSync(testOutputDir, { recursive: true, force: true });
+        }
+    });
+    describe('credential redaction', () => {
+        it('should redact password from URL with embedded credentials', () => {
+            const writer = new SyncFileWriterService('zod-codegen', '1.0.0', 'https://user:secretpass@api.example.com/openapi.json');
+            const outPath = join(testOutputDir, 'api.ts');
+            writer.writeFile(outPath, 'const x = 1;');
+            const content = readFileSync(outPath, 'utf-8');
+            expect(content).toContain('// Source file: https://user:***@api.example.com/openapi.json');
+            expect(content).not.toContain('secretpass');
+        });
+        it('should redact password from URL with percent-encoded credentials', () => {
+            const writer = new SyncFileWriterService('zod-codegen', '1.0.0', 'https://api%2Bstaging%40saris.ai:hnt.xjx3rby8YKM8wnm@api.staging.saris.ai/api/openapi.json');
+            const outPath = join(testOutputDir, 'api.ts');
+            writer.writeFile(outPath, 'const x = 1;');
+            const content = readFileSync(outPath, 'utf-8');
+            expect(content).toContain('api%2Bstaging%40saris.ai');
+            expect(content).toContain(':***@');
+            expect(content).not.toContain('hnt.xjx3rby8YKM8wnm');
+        });
+        it('should leave URL without credentials unchanged', () => {
+            const writer = new SyncFileWriterService('zod-codegen', '1.0.0', 'https://api.example.com/openapi.json');
+            const outPath = join(testOutputDir, 'api.ts');
+            writer.writeFile(outPath, 'const x = 1;');
+            const content = readFileSync(outPath, 'utf-8');
+            expect(content).toContain('// Source file: https://api.example.com/openapi.json');
+        });
+        it('should leave local file paths unchanged', () => {
+            const writer = new SyncFileWriterService('zod-codegen', '1.0.0', './samples/openapi.json');
+            const outPath = join(testOutputDir, 'api.ts');
+            writer.writeFile(outPath, 'const x = 1;');
+            const content = readFileSync(outPath, 'utf-8');
+            expect(content).toContain('// Source file: ./samples/openapi.json');
+        });
+    });
+});

package/package.json

@@ -101,5 +101,5 @@
     "release": "semantic-release",
     "release:dry": "semantic-release --dry-run"
   },
-  "version": "1.7.1"
+  "version": "1.7.2"
 }

package/src/services/file-writer.service.ts

@@ -9,12 +9,25 @@ export class SyncFileWriterService implements FileWriter {
     private readonly inputPath: string
   ) {}
 
+  private redactUrl(path: string): string {
+    try {
+      const url = new URL(path);
+      if ((url.protocol === 'http:' || url.protocol === 'https:') && url.password) {
+        url.password = '***';
+        return url.toString();
+      }
+    } catch {
+      // Not a URL, return as-is
+    }
+    return path;
+  }
+
   writeFile(filePath: string, content: string): void {
     const generatedContent = [
       '// THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.',
       `// Built with ${this.name}@${this.version}`,
       `// Latest edit: ${new Date().toUTCString()}`,
-      `// Source file: ${this.inputPath}`,
+      `// Source file: ${this.redactUrl(this.inputPath)}`,
       '/* eslint-disable */',
       '// @ts-nocheck',
       '',

package/tests/unit/file-writer.test.ts

@@ -0,0 +1,69 @@
+import { existsSync, mkdirSync, readFileSync, rmSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { SyncFileWriterService } from '../../src/services/file-writer.service';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const testOutputDir = join(__dirname, '../../test-output-writer');
+
+describe('SyncFileWriterService', () => {
+  beforeEach(() => {
+    if (existsSync(testOutputDir)) {
+      rmSync(testOutputDir, { recursive: true, force: true });
+    }
+
+    mkdirSync(testOutputDir, { recursive: true });
+  });
+
+  afterEach(() => {
+    if (existsSync(testOutputDir)) {
+      rmSync(testOutputDir, { recursive: true, force: true });
+    }
+  });
+
+  describe('credential redaction', () => {
+    it('should redact password from URL with embedded credentials', () => {
+      const writer = new SyncFileWriterService('zod-codegen', '1.0.0', 'https://user:secretpass@api.example.com/openapi.json');
+
+      const outPath = join(testOutputDir, 'api.ts');
+      writer.writeFile(outPath, 'const x = 1;');
+
+      const content = readFileSync(outPath, 'utf-8');
+      expect(content).toContain('// Source file: https://user:***@api.example.com/openapi.json');
+      expect(content).not.toContain('secretpass');
+    });
+
+    it('should redact password from URL with percent-encoded credentials', () => {
+      const writer = new SyncFileWriterService('zod-codegen', '1.0.0', 'https://api%2Bstaging%40saris.ai:hnt.xjx3rby8YKM8wnm@api.staging.saris.ai/api/openapi.json');
+
+      const outPath = join(testOutputDir, 'api.ts');
+      writer.writeFile(outPath, 'const x = 1;');
+
+      const content = readFileSync(outPath, 'utf-8');
+      expect(content).toContain('api%2Bstaging%40saris.ai');
+      expect(content).toContain(':***@');
+      expect(content).not.toContain('hnt.xjx3rby8YKM8wnm');
+    });
+
+    it('should leave URL without credentials unchanged', () => {
+      const writer = new SyncFileWriterService('zod-codegen', '1.0.0', 'https://api.example.com/openapi.json');
+
+      const outPath = join(testOutputDir, 'api.ts');
+      writer.writeFile(outPath, 'const x = 1;');
+
+      const content = readFileSync(outPath, 'utf-8');
+      expect(content).toContain('// Source file: https://api.example.com/openapi.json');
+    });
+
+    it('should leave local file paths unchanged', () => {
+      const writer = new SyncFileWriterService('zod-codegen', '1.0.0', './samples/openapi.json');
+
+      const outPath = join(testOutputDir, 'api.ts');
+      writer.writeFile(outPath, 'const x = 1;');
+
+      const content = readFileSync(outPath, 'utf-8');
+      expect(content).toContain('// Source file: ./samples/openapi.json');
+    });
+  });
+});