@agent-inspect/mcp-server 6.31.15 → 6.31.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/cli.cjs CHANGED
@@ -218,7 +218,7 @@ var Redactor = class {
218
218
  };
219
219
 
220
220
  // packages/core/src/safety/credential-value-patterns.ts
221
- var KEY_VALUE_SECRET_PATTERN = /\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED(?::[^\]]*)?|HASH:[0-9a-f]{8})\](?![^\s"'\\&#?]))([^\s"'\\]{8,})/i;
221
+ var KEY_VALUE_SECRET_PATTERN = /\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED|HASH:(?:[0-9a-f]{8}|unknown))\](?![^\s"'\\&#?]))([^\s"'\\]{8,})/i;
222
222
  var HIGH_CONFIDENCE_CREDENTIAL_PATTERNS = [
223
223
  /^(?:basic|bearer|digest|apikey)\s+[a-z0-9._~+/=-]+$/i,
224
224
  /\bbearer\s+[a-z0-9._~+/=-]{12,}\b/i,
@@ -3421,7 +3421,7 @@ var DEFAULT_SECRET_PATTERNS = [
3421
3421
  // Keep in sync with packages/redact/src/key-value-secret.ts (KEY_VALUE_SECRET_PATTERN_SOURCE).
3422
3422
  {
3423
3423
  id: "key-value-secret",
3424
- pattern: /\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED(?::[^\]]*)?|HASH:[0-9a-f]{8})\](?![^\s"'\\&#?]))([^\s"'\\]{8,})/i
3424
+ pattern: /\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED|HASH:(?:[0-9a-f]{8}|unknown))\](?![^\s"'\\&#?]))([^\s"'\\]{8,})/i
3425
3425
  }
3426
3426
  ];
3427
3427
  function compareStrings(a, b) {
@@ -3752,8 +3752,8 @@ function isFullyRedactedValue(value, markers = ["[REDACTED]", "[REDACTED:"]) {
3752
3752
  if (typeof value !== "string") return false;
3753
3753
  const trimmed = value.trim();
3754
3754
  if (trimmed.length === 0) return false;
3755
- if (/^\[HASH:[A-Za-z0-9_-]+\]$/.test(trimmed)) return true;
3756
- if (/^\[REDACTED:[^\]]*\]$/.test(trimmed)) return true;
3755
+ if (trimmed === "[HASH:unknown]") return true;
3756
+ if (/^\[HASH:[0-9a-f]{8}\]$/.test(trimmed)) return true;
3757
3757
  for (const marker of markers) {
3758
3758
  if (marker.endsWith(":")) continue;
3759
3759
  if (trimmed === marker) return true;
@@ -7816,7 +7816,7 @@ function isCredentialSensitiveKey2(key, sensitiveKeys) {
7816
7816
  }
7817
7817
 
7818
7818
  // packages/redact/src/key-value-secret.ts
7819
- var KEY_VALUE_SECRET_PATTERN_SOURCE = String.raw`\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED(?::[^\]]*)?|HASH:[0-9a-f]{8})\](?![^\s"'\\&#?]))([^\s"'\\]{8,})`;
7819
+ var KEY_VALUE_SECRET_PATTERN_SOURCE = String.raw`\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED|HASH:(?:[0-9a-f]{8}|unknown))\](?![^\s"'\\&#?]))([^\s"'\\]{8,})`;
7820
7820
  var KEY_VALUE_SECRET_PATTERN2 = new RegExp(
7821
7821
  KEY_VALUE_SECRET_PATTERN_SOURCE,
7822
7822
  "i"
@@ -8273,8 +8273,8 @@ function isCompleteRedactionMarker(value, replacement = "[REDACTED]") {
8273
8273
  const trimmed = value.trim();
8274
8274
  if (trimmed.length === 0) return false;
8275
8275
  if (trimmed === replacement) return true;
8276
- if (/^\[HASH:[A-Za-z0-9_-]+\]$/.test(trimmed)) return true;
8277
- if (/^\[REDACTED:[^\]]*\]$/.test(trimmed)) return true;
8276
+ if (trimmed === "[HASH:unknown]") return true;
8277
+ if (/^\[HASH:[0-9a-f]{8}\]$/.test(trimmed)) return true;
8278
8278
  return false;
8279
8279
  }
8280
8280
  function applyRule(rule, value, replacement) {