chore: redact api-key headers in debug logs

Author: stainless-app[bot]

stagehand-java-core/src/main/kotlin/com/browserbase/api/core/http/LoggingHttpClient.kt

@@ -31,7 +31,8 @@ private constructor(
     /**
      * Sensitive headers to redact from logs.
      *
-     * Defaults to `Set.of("x-bb-api-key", "x-bb-project-id", "x-model-api-key")`.
+     * Defaults to `Set.of("authorization", "api-key", "x-api-key", "cookie", "set-cookie",
+     * "x-bb-api-key", "x-bb-project-id", "x-model-api-key")`.
      */
     @get:JvmName("redactedHeaders") val redactedHeaders: SortedSet<String>,
     /**
@@ -193,7 +194,16 @@ private constructor(
 
         private var httpClient: HttpClient? = null
         private var redactedHeaders: Set<String> =
-            setOf("x-bb-api-key", "x-bb-project-id", "x-model-api-key")
+            setOf(
+                "authorization",
+                "api-key",
+                "x-api-key",
+                "cookie",
+                "set-cookie",
+                "x-bb-api-key",
+                "x-bb-project-id",
+                "x-model-api-key",
+            )
         private var clock: Clock = Clock.systemUTC()
         private var level: LogLevel? = null
 
@@ -211,7 +221,8 @@ private constructor(
         /**
          * Sensitive headers to redact from logs.
          *
-         * Defaults to `Set.of("x-bb-api-key", "x-bb-project-id", "x-model-api-key")`.
+         * Defaults to `Set.of("authorization", "api-key", "x-api-key", "cookie", "set-cookie",
+         * "x-bb-api-key", "x-bb-project-id", "x-model-api-key")`.
          */
         fun redactedHeaders(redactedHeaders: Set<String>) = apply {
             this.redactedHeaders = redactedHeaders

stagehand-java-core/src/test/kotlin/com/browserbase/api/core/http/LoggingHttpClientTest.kt

@@ -870,7 +870,17 @@ internal class LoggingHttpClientTest {
         httpClient: HttpClient,
         level: LogLevel,
         clock: Clock = clockFrom(Instant.parse("1998-04-21T00:00:00Z")),
-        redactedHeaders: Set<String> = setOf("x-bb-api-key", "x-bb-project-id", "x-model-api-key"),
+        redactedHeaders: Set<String> =
+            setOf(
+                "authorization",
+                "api-key",
+                "x-api-key",
+                "cookie",
+                "set-cookie",
+                "x-bb-api-key",
+                "x-bb-project-id",
+                "x-model-api-key",
+            ),
     ): LoggingHttpClient =
         LoggingHttpClient.builder()
             .httpClient(httpClient)