fix(http): redact sensitive request config in error logs

src/http-helpers/index.ts

@@ -133,6 +133,18 @@ export const put = async (endpoint: string, options?: RequestOptions): Promise<a
     }
 };
 
+export const sanitizeAxiosResponseConfig = (config: unknown) => {
+    if (!config || typeof config !== "object") {
+        return undefined;
+    }
+    const maybe = config as Record<string, unknown>;
+    return {
+        method: maybe.method,
+        url: maybe.url,
+        timeout: maybe.timeout,
+    };
+};
+
 const errorHandling = (err: unknown) => {
     if (axios.isAxiosError(err)) {
         if (err.response) {
@@ -142,7 +154,7 @@ const errorHandling = (err: unknown) => {
                     status: err.response?.status,
                     statusText: err.response?.statusText,
                     data: err.response?.data,
-                    config: err.response?.config,
+                    config: sanitizeAxiosResponseConfig(err.response?.config),
                 }),
             );
             if (err.response?.data) {

tests/http-helpers/index.test.ts

@@ -1,6 +1,7 @@
 import {
     parseDropNotificationParams,
     parseOrdersScoringParams,
+    sanitizeAxiosResponseConfig,
 } from "../../src/http-helpers/index.ts";
 import type { DropNotificationParams, OrdersScoringParams } from "../../src/types.ts";
 
@@ -27,4 +28,21 @@ describe("utilities", () => {
             expect(params).deep.equal({ ids: "0,1,2" });
         });
     });
+
+    describe("sanitizeAxiosResponseConfig", () => {
+        it("removes sensitive headers and auth details", () => {
+            const sanitized = sanitizeAxiosResponseConfig({
+                method: "post",
+                url: "https://clob.polymarket.com/order",
+                timeout: 5000,
+                headers: { Authorization: "Bearer secret" },
+                auth: { username: "u", password: "p" },
+            });
+            expect(sanitized).deep.equal({
+                method: "post",
+                url: "https://clob.polymarket.com/order",
+                timeout: 5000,
+            });
+        });
+    });
 });