@ai-ecoverse/mcpcat 0.17.6 → 0.17.7

package/dist/host/mcpcat.mjs

@@ -9855,6 +9855,15 @@ function containsPlaceholders(value) {
 function expandPlaceholders(value, env) {
   return value.replace(PLACEHOLDER, (_, name) => env[name] ?? "");
 }
+var MIN_VAR_SECRET = 8;
+function placeholderValues(value, env) {
+  const values = [];
+  for (const m of value.matchAll(PLACEHOLDER)) {
+    const v = env[m[1]];
+    if (v !== void 0 && v.length >= MIN_VAR_SECRET) values.push(v);
+  }
+  return values;
+}
 function missingPlaceholders(value, env) {
   const missing = [];
   for (const m of value.matchAll(PLACEHOLDER)) {
@@ -11163,6 +11172,12 @@ function redactWrites(platform2, redact2) {
     write: (fd, data) => platform2.write(fd, typeof data === "string" ? redact2(data) : data)
   });
 }
+function redactSecrets(text, secrets) {
+  const ordered = [...secrets].filter((s) => s.length > 0).sort((a, b) => b.length - a.length);
+  let result = text;
+  for (const secret of ordered) result = result.replaceAll(secret, "[REDACTED]");
+  return result;
+}
 
 // src/render/result.ts
 function formatBytes(n) {
@@ -15362,15 +15377,7 @@ function isSensitiveHeader(name) {
   return SENSITIVE_HEADER_RE.test(name) || SENSITIVE_NAME_RE.test(name);
 }
 function redact(text, secrets) {
-  let result = text;
-  for (const secret of secrets) {
-    if (secret.length > 0) {
-      while (result.includes(secret)) {
-        result = result.replace(secret, "[REDACTED]");
-      }
-    }
-  }
-  return result;
+  return redactSecrets(text, secrets);
 }
 function createVerboseLogger(platform2, enabled) {
   const secrets = /* @__PURE__ */ new Set();
@@ -16448,7 +16455,7 @@ function expandAndCollect(headers, env) {
     }
     const e = expandPlaceholders(v, env);
     result[k] = e;
-    if (e !== v) secrets.push(e);
+    if (e !== v) secrets.push(e, ...placeholderValues(v, env));
     if (v.length > 0) secrets.push(v);
   }
   return { expanded: result, secrets, unset };
@@ -16661,13 +16668,7 @@ async function runClientVerb(platform2, version, parsed) {
   const configSecrets = collectConfigSecrets(resolved.headers, platform2.env);
   for (const s of configSecrets) verbose.secrets.add(s);
   const allSecrets = /* @__PURE__ */ new Set([...secrets, ...configSecrets]);
-  const redact2 = (text) => {
-    let result = text;
-    for (const secret of allSecrets) {
-      if (secret.length > 0) result = result.replaceAll(secret, "[REDACTED]");
-    }
-    return result;
-  };
+  const redact2 = (text) => redactSecrets(text, allSecrets);
   const mergedHeaders = { ...configHeaders, ...expanded };
   const hasAuthHeader = "Authorization" in mergedHeaders;
   const authResolved = await resolveAuthProvider(
@@ -16778,7 +16779,7 @@ function collectConfigSecrets(headers, env) {
   const secrets = [];
   for (const [, v] of Object.entries(headers)) {
     const expanded = expandPlaceholders(v, env);
-    if (expanded !== v && expanded.length > 0) secrets.push(expanded);
+    if (expanded !== v && expanded.length > 0) secrets.push(expanded, ...placeholderValues(v, env));
     if (v.length > 0 && v !== expanded) secrets.push(v);
   }
   return secrets;
@@ -17044,5 +17045,5 @@ try {
   });
 } catch {
 }
-var code = await run(platform, "0.17.6", args);
+var code = await run(platform, "0.17.7", args);
 process.exit(code);

package/dist/kernel/mcpcat.mjs

@@ -9476,6 +9476,15 @@ function containsPlaceholders(value) {
 function expandPlaceholders(value, env2) {
   return value.replace(PLACEHOLDER, (_, name) => env2[name] ?? "");
 }
+var MIN_VAR_SECRET = 8;
+function placeholderValues(value, env2) {
+  const values = [];
+  for (const m of value.matchAll(PLACEHOLDER)) {
+    const v = env2[m[1]];
+    if (v !== void 0 && v.length >= MIN_VAR_SECRET) values.push(v);
+  }
+  return values;
+}
 function missingPlaceholders(value, env2) {
   const missing = [];
   for (const m of value.matchAll(PLACEHOLDER)) {
@@ -10784,6 +10793,12 @@ function redactWrites(platform2, redact2) {
     write: (fd, data) => platform2.write(fd, typeof data === "string" ? redact2(data) : data)
   });
 }
+function redactSecrets(text, secrets) {
+  const ordered = [...secrets].filter((s) => s.length > 0).sort((a, b) => b.length - a.length);
+  let result = text;
+  for (const secret of ordered) result = result.replaceAll(secret, "[REDACTED]");
+  return result;
+}
 
 // src/render/result.ts
 function formatBytes(n) {
@@ -14983,15 +14998,7 @@ function isSensitiveHeader(name) {
   return SENSITIVE_HEADER_RE.test(name) || SENSITIVE_NAME_RE.test(name);
 }
 function redact(text, secrets) {
-  let result = text;
-  for (const secret of secrets) {
-    if (secret.length > 0) {
-      while (result.includes(secret)) {
-        result = result.replace(secret, "[REDACTED]");
-      }
-    }
-  }
-  return result;
+  return redactSecrets(text, secrets);
 }
 function createVerboseLogger(platform2, enabled) {
   const secrets = /* @__PURE__ */ new Set();
@@ -16069,7 +16076,7 @@ function expandAndCollect(headers, env2) {
     }
     const e = expandPlaceholders(v, env2);
     result[k] = e;
-    if (e !== v) secrets.push(e);
+    if (e !== v) secrets.push(e, ...placeholderValues(v, env2));
     if (v.length > 0) secrets.push(v);
   }
   return { expanded: result, secrets, unset };
@@ -16282,13 +16289,7 @@ async function runClientVerb(platform2, version, parsed) {
   const configSecrets = collectConfigSecrets(resolved.headers, platform2.env);
   for (const s of configSecrets) verbose.secrets.add(s);
   const allSecrets = /* @__PURE__ */ new Set([...secrets, ...configSecrets]);
-  const redact2 = (text) => {
-    let result = text;
-    for (const secret of allSecrets) {
-      if (secret.length > 0) result = result.replaceAll(secret, "[REDACTED]");
-    }
-    return result;
-  };
+  const redact2 = (text) => redactSecrets(text, allSecrets);
   const mergedHeaders = { ...configHeaders, ...expanded };
   const hasAuthHeader = "Authorization" in mergedHeaders;
   const authResolved = await resolveAuthProvider(
@@ -16399,7 +16400,7 @@ function collectConfigSecrets(headers, env2) {
   const secrets = [];
   for (const [, v] of Object.entries(headers)) {
     const expanded = expandPlaceholders(v, env2);
-    if (expanded !== v && expanded.length > 0) secrets.push(expanded);
+    if (expanded !== v && expanded.length > 0) secrets.push(expanded, ...placeholderValues(v, env2));
     if (v.length > 0 && v !== expanded) secrets.push(v);
   }
   return secrets;
@@ -16766,7 +16767,7 @@ async function main(ctx) {
     packageDir: "/node_modules/@ai-ecoverse/mcpcat"
   });
   const args = ctx.argv.slice(1);
-  return run(platform2, "0.17.6", args);
+  return run(platform2, "0.17.7", args);
 }
 export {
   main as default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/mcpcat",
-  "version": "0.17.6",
+  "version": "0.17.7",
   "description": "A curl for the Model Context Protocol",
   "type": "module",
   "license": "Apache-2.0",
@@ -62,14 +62,14 @@
   },
   "devDependencies": {
     "@ai-ecoverse/slicc-bios": "1.36.1",
-    "@ai-ecoverse/slicc-kernel": "1.141.2",
+    "@ai-ecoverse/slicc-kernel": "1.141.3",
     "@ai-ecoverse/slicc-shared-web": "1.29.8",
     "@biomejs/biome": "2.5.15",
     "@earendil-works/pi-codemode": "1.2.0",
     "@earendil-works/pi-mcp": "1.2.0",
     "@types/node": "26.6.5",
     "esbuild": "0.28.2",
-    "kernel-cert-new": "npm:@ai-ecoverse/slicc-kernel@1.141.2",
+    "kernel-cert-new": "npm:@ai-ecoverse/slicc-kernel@1.141.3",
     "lefthook": "2.2.2",
     "monocart-coverage-reports": "2.13.2",
     "proper-lockfile": "4.1.2",