feat(client): impl Debug for Client

[zachschuermann]

Summary

Implement Debug for Client.

Since Client has both sensitive information and some non-debugable fields we manually impl Debug by:

1. #[derive(Debug)] on ProductInfo
2. removing http client and insert_metadata_cache
3. redacting authorization, headers values, and only printing url.origin to avoid leaking user/pass

Fixes #429

Checklist

• Unit and integration tests covering the common scenarios were added
• A human-readable description of the changes was provided so that we can include it in CHANGELOG later

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[Copilot]

Pull request overview

Implements a manual Debug for Client to unblock downstream #[derive(Debug)] use cases while avoiding leaking sensitive client configuration.

Changes:

• Added #[derive(Debug)] to ProductInfo to support debug output.
• Implemented a manual Debug for Client that omits non-debuggable/internal fields and redacts auth/header values.
• Added unit tests to validate debug formatting and redaction behavior.

Comments suppressed due to low confidence (1)

src/lib.rs:134

• When the test-util feature is enabled, Client has a mocked: bool field that affects behavior (see with_url handling of mocked URLs). The manual Debug impl currently hides it, which makes debugging tests harder. Consider including mocked behind the same cfg in the Debug output (it’s not sensitive and is trivially debuggable).

            .field("compression", &self.compression)
            .field("roles", &self.roles)
            .field("settings", &self.settings)
            .field("headers", &self.headers.keys())
            .field("products_info", &self.products_info)
            .field("validation", &self.validation)
            .finish_non_exhaustive()

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[zachschuermann]

hi @abonander friendly ping on this!

[abonander]

I think we'll end up improving this over time but since Debug doesn't need to be stable, having something is better than nothing.

[abonander]

@zachschuermann looks like you still need to sign the CLA (see above). And rebase as well, please.

[abonander]

This is ready to merge otherwise, but it still says you haven't signed the CLA. Did you do it and it just hasn't updated?