ccflow-http 0.4.0__tar.gz → 0.4.1__tar.gz

{ccflow_http-0.4.0 → ccflow_http-0.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: ccflow-http
-Version: 0.4.0
+Version: 0.4.1
 Summary: ccflow models for HTTP
 Project-URL: Repository, https://github.com/1kbgz/ccflow-http
 Project-URL: Homepage, https://github.com/1kbgz/ccflow-http
@@ -28,7 +28,7 @@ Requires-Dist: check-dist; extra == 'develop'
 Requires-Dist: codespell; extra == 'develop'
 Requires-Dist: hatchling; extra == 'develop'
 Requires-Dist: mdformat; extra == 'develop'
-Requires-Dist: mdformat-frontmatter; extra == 'develop'
+Requires-Dist: mdformat-myst; extra == 'develop'
 Requires-Dist: mdformat-tables>=1; extra == 'develop'
 Requires-Dist: pytest; extra == 'develop'
 Requires-Dist: pytest-cov; extra == 'develop'
@@ -56,7 +56,7 @@ It should not contain provider-specific endpoint catalogs. Domain packages can c
 
 ## Current Status
 
-- Implemented: `HTTPConfig`, `HTTPAuth`, `HTTPContext`, `HTTPRequestContext`, `HTTPRequest`, `HTTPRetryPolicy`, `HTTPResponseResult`, compatibility `HTTPResult`, `HTTPModel`, templated path/query/header rendering, request explanation through `build_request`, no-auth/bearer/API-key/basic auth helpers, JSON/text/bytes/CSV/gzip response parsing, HTTP status retry classification over `ccflow` retry semantics, accepted error statuses returned as results instead of exceptions, retry event summaries on HTTP results, `ccflow-etl` `ExecutionPolicy` request spacing, `next_url`/cursor/page/offset pagination, rate-limit header capture, a configurable `RedactionPolicy` (`HTTPModel.redaction`: exact names, substrings, and patterns, with `auth` header and query names added automatically) that masks secret header and query values in `httpx2` request logs, request dumps, result URLs, retry events, and errors, `HTTPDownloadModel` for streaming a response to a local file with size and SHA-256, `HTTPArtifactCaptureModel` for storing a dated download plus a manifest through a `ccflow-etl` file writer, and mocked `httpx2` transport tests.
+- Implemented: `HTTPConfig`, `HTTPAuth`, `HTTPContext`, `HTTPRequestContext`, `HTTPRequest`, `HTTPRetryPolicy`, `HTTPResponseResult`, compatibility `HTTPResult`, `HTTPModel`, templated path/query/header rendering, request explanation through `build_request`, no-auth/bearer/API-key/basic auth helpers, JSON/text/bytes/CSV/gzip response parsing, HTTP status retry classification over `ccflow` retry semantics, accepted error statuses returned as results instead of exceptions, retry event summaries on HTTP results, `ccflow-etl` `ExecutionPolicy` request spacing, `next_url`/cursor/page/offset pagination, rate-limit header capture, a configurable `RedactionPolicy` (`HTTPModel.redaction`: exact names, substrings, and patterns, with `auth` header and query names added automatically) that masks secret header and query values in `httpx2` request logs, request dumps, result URLs and headers, retry events, and errors, `HTTPDownloadModel` for streaming a response to a local file with size and SHA-256, `HTTPArtifactCaptureModel` for storing a dated download plus a manifest through a `ccflow-etl` file writer, and mocked `httpx2` transport tests.
 - Partial: the shared execution policy is currently consumed inside `HTTPModel` for sequential request spacing; broader evaluator-level concurrency coordination still belongs in evaluator integrations.
 - Missing: broader integration examples and provider-specific subclasses/configs in downstream packages.
 

{ccflow_http-0.4.0 → ccflow_http-0.4.1}/README.md

@@ -15,7 +15,7 @@ It should not contain provider-specific endpoint catalogs. Domain packages can c
 
 ## Current Status
 
-- Implemented: `HTTPConfig`, `HTTPAuth`, `HTTPContext`, `HTTPRequestContext`, `HTTPRequest`, `HTTPRetryPolicy`, `HTTPResponseResult`, compatibility `HTTPResult`, `HTTPModel`, templated path/query/header rendering, request explanation through `build_request`, no-auth/bearer/API-key/basic auth helpers, JSON/text/bytes/CSV/gzip response parsing, HTTP status retry classification over `ccflow` retry semantics, accepted error statuses returned as results instead of exceptions, retry event summaries on HTTP results, `ccflow-etl` `ExecutionPolicy` request spacing, `next_url`/cursor/page/offset pagination, rate-limit header capture, a configurable `RedactionPolicy` (`HTTPModel.redaction`: exact names, substrings, and patterns, with `auth` header and query names added automatically) that masks secret header and query values in `httpx2` request logs, request dumps, result URLs, retry events, and errors, `HTTPDownloadModel` for streaming a response to a local file with size and SHA-256, `HTTPArtifactCaptureModel` for storing a dated download plus a manifest through a `ccflow-etl` file writer, and mocked `httpx2` transport tests.
+- Implemented: `HTTPConfig`, `HTTPAuth`, `HTTPContext`, `HTTPRequestContext`, `HTTPRequest`, `HTTPRetryPolicy`, `HTTPResponseResult`, compatibility `HTTPResult`, `HTTPModel`, templated path/query/header rendering, request explanation through `build_request`, no-auth/bearer/API-key/basic auth helpers, JSON/text/bytes/CSV/gzip response parsing, HTTP status retry classification over `ccflow` retry semantics, accepted error statuses returned as results instead of exceptions, retry event summaries on HTTP results, `ccflow-etl` `ExecutionPolicy` request spacing, `next_url`/cursor/page/offset pagination, rate-limit header capture, a configurable `RedactionPolicy` (`HTTPModel.redaction`: exact names, substrings, and patterns, with `auth` header and query names added automatically) that masks secret header and query values in `httpx2` request logs, request dumps, result URLs and headers, retry events, and errors, `HTTPDownloadModel` for streaming a response to a local file with size and SHA-256, `HTTPArtifactCaptureModel` for storing a dated download plus a manifest through a `ccflow-etl` file writer, and mocked `httpx2` transport tests.
 - Partial: the shared execution policy is currently consumed inside `HTTPModel` for sequential request spacing; broader evaluator-level concurrency coordination still belongs in evaluator integrations.
 - Missing: broader integration examples and provider-specific subclasses/configs in downstream packages.
 

{ccflow_http-0.4.0 → ccflow_http-0.4.1}/ccflow_http/__init__.py

@@ -1,4 +1,4 @@
 from .base import *
 from .download import *
 
-__version__ = "0.4.0"
+__version__ = "0.4.1"

{ccflow_http-0.4.0 → ccflow_http-0.4.1}/ccflow_http/base.py

@@ -52,11 +52,11 @@ class HTTPConfig(BaseModel):
 
 class HTTPAuth(BaseModel):
     strategy: HTTPAuthStrategy = "none"
-    token: str | None = None
+    token: str | None = Field(default=None, repr=False)
     name: str | None = None
-    value: str | None = None
+    value: str | None = Field(default=None, repr=False)
     username: str | None = None
-    password: str | None = None
+    password: str | None = Field(default=None, repr=False)
     scheme: str = "Bearer"
 
 
@@ -667,7 +667,7 @@ class HTTPModel(CallableModel):
         return HTTPResult(
             value=None if accepted_error else (self._merge_page_values(values) if self.paginate else values[-1]),
             status_code=response.status_code,
-            headers=dict(response.headers or {}),
+            headers=redaction.redact_mapping(dict(response.headers or {})),
             url=redaction.redact_url(str(response.url)),
             attempts=total_attempts,
             pages=pages,

{ccflow_http-0.4.0 → ccflow_http-0.4.1}/ccflow_http/tests/test_model.py

@@ -862,3 +862,38 @@ def test_http_model_applies_configured_and_auth_redaction_names_everywhere(caplo
     assert result.url == "https://api.example.test/v1/items?sig=***&date=2025-01-02"
     assert "query-secret" not in caplog.text
     assert "query-secret" not in result.retry_events[0]["message"]
+
+
+def test_http_model_redacts_sensitive_response_headers():
+    def handler(request: httpx2.Request) -> httpx2.Response:
+        return httpx2.Response(
+            200,
+            json={"ok": True},
+            headers={"Set-Cookie": "session=cookie-secret", "X-Auth-Token": "token-secret", "X-Request-ID": "req-1"},
+        )
+
+    model = HTTPModel(
+        config=HTTPConfig(base_url="https://api.example.test", transport=httpx2.MockTransport(handler)),
+        path="/v1/items",
+    )
+
+    result = model(HTTPRequestContext())
+
+    assert result.headers["set-cookie"] == "***"
+    assert result.headers["x-auth-token"] == "***"
+    assert result.headers["x-request-id"] == "req-1"
+    assert "secret" not in repr(result)
+
+
+def test_http_auth_repr_omits_secrets():
+    auths = [
+        HTTPAuth(strategy="bearer", token="bearer-secret"),
+        HTTPAuth(strategy="api_key_header", name="X-Api-Key", value="key-secret"),
+        HTTPAuth(strategy="basic", username="svc", password="basic-secret"),
+    ]
+
+    for auth in auths:
+        assert "secret" not in repr(auth)
+        assert "secret" not in str(auth)
+    assert "X-Api-Key" in repr(auths[1])
+    assert "svc" in repr(auths[2])

{ccflow_http-0.4.0 → ccflow_http-0.4.1}/pyproject.toml

@@ -12,7 +12,7 @@ authors = [
 description = "ccflow models for HTTP"
 readme = "README.md"
 license = { text = "Apache-2.0" }
-version = "0.4.0"
+version = "0.4.1"
 requires-python = ">=3.11"
 keywords = []
 
@@ -43,7 +43,7 @@ develop = [
     "codespell",
     "hatchling",
     "mdformat",
-    "mdformat-frontmatter",
+    "mdformat-myst",
     "mdformat-tables>=1",
     "pytest",
     "pytest-cov",
@@ -61,7 +61,7 @@ Repository = "https://github.com/1kbgz/ccflow-http"
 Homepage = "https://github.com/1kbgz/ccflow-http"
 
 [tool.bumpversion]
-current_version = "0.4.0"
+current_version = "0.4.1"
 commit = true
 tag = true
 commit_args = "-s"