@blogic-cz/agent-tools 1.5.10 → 1.5.11

package/dist/credential-guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/credential-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAmB,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAI5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,CAAC;AAQF,+CAA+C;AAC/C,MAAM,MAAM,eAAe,GAAG;IAC5B,uBAAuB,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IACxE,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACrD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjF,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACxD,CAAC;AA66DF,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAMD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,eAAe,CAiTrF;AAQD,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,UAxwED,SAAS,UAAU,UAAU,KAAK,IAwwEM,CAAC;AAE5E,oDAAoD;AACpD,eAAO,MAAM,aAAa,YA1wEC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IA0wEjB,CAAC;AAExD,yEAAyE;AACzE,eAAO,MAAM,aAAa,aA5wEE,MAAM,KAAK,OA4wEgB,CAAC;AAExD,yDAAyD;AACzD,eAAO,MAAM,aAAa,aA9wEE,MAAM,KAAK,OA8wEgB,CAAC;AAExD,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,YAhxEC,MAAM,KAAK,OAgxE0B,CAAC;AAE1E,iDAAiD;AACjD,eAAO,MAAM,iBAAiB,YAlxEC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAkxEf,CAAC;AAEhE,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,YApxEC,MAAM,KAAK,OAoxEsB,CAAC;AAElE,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,YAtxEC,MAAM,KAAK,MAAM,GAAG,IAsxEa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/credential-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAmB,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAI5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,CAAC;AAQF,+CAA+C;AAC/C,MAAM,MAAM,eAAe,GAAG;IAC5B,uBAAuB,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IACxE,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACrD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjF,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACxD,CAAC;AAg7DF,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEpE;AAMD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,eAAe,CAiTrF;AAQD,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,UA3wED,SAAS,UAAU,UAAU,KAAK,IA2wEM,CAAC;AAE5E,oDAAoD;AACpD,eAAO,MAAM,aAAa,YA7wEC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IA6wEjB,CAAC;AAExD,yEAAyE;AACzE,eAAO,MAAM,aAAa,aA/wEE,MAAM,KAAK,OA+wEgB,CAAC;AAExD,yDAAyD;AACzD,eAAO,MAAM,aAAa,aAjxEE,MAAM,KAAK,OAixEgB,CAAC;AAExD,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,YAnxEC,MAAM,KAAK,OAmxE0B,CAAC;AAE1E,iDAAiD;AACjD,eAAO,MAAM,iBAAiB,YArxEC,MAAM,KAAK;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAqxEf,CAAC;AAEhE,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,YAvxEC,MAAM,KAAK,OAuxEsB,CAAC;AAElE,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,YAzxEC,MAAM,KAAK,MAAM,GAAG,IAyxEa,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blogic-cz/agent-tools",
-  "version": "1.5.10",
+  "version": "1.5.11",
   "description": "CLI tools for AI coding agent workflows — GitHub, database, Kubernetes, Azure platform, Azure DevOps, logs, sessions, and audit",
   "keywords": [
     "agent",

package/src/credential-guard/index.ts

@@ -478,7 +478,7 @@ function unwrapProofCommand(words: string[], marker: string): string[] | undefin
 function isLiteralLoopCommand(words: string[], marker: string, value: string): boolean {
   const marked = unwrapProofCommand(words, marker);
   if (!marked) return false;
-  const argv = marked.map((word) => word.replaceAll(marker, value));
+  const argv = marked.map((word) => word.replaceAll(marker, () => value));
   const name = argv[0];
   const uses = marked.flatMap((word, index) => (word.includes(marker) ? [index] : []));
   if (name === "cat")
@@ -579,7 +579,7 @@ function materializeLiteralShell(command: string): LiteralShellProof | undefined
     );
     if (size > 65_536) return undefined;
     return {
-      command: values.map((value) => marked.text.replaceAll(marker, value)).join(";\n"),
+      command: values.map((value) => marked.text.replaceAll(marker, () => value)).join(";\n"),
       paths: [],
     };
   }
@@ -621,8 +621,11 @@ function materializeLiteralShell(command: string): LiteralShellProof | undefined
       (assignment[1]?.length ?? 0) +
       7;
     if (size > 65_536) return undefined;
-    const paths = argv.slice(3).map((word) => word.replaceAll(marker, value));
-    return { command: `cd ${assignment[1]} && ${use.replaceAll(marker, value)}${suffix}`, paths };
+    const paths = argv.slice(3).map((word) => word.replaceAll(marker, () => value));
+    return {
+      command: `cd ${assignment[1]} && ${use.replaceAll(marker, () => value)}${suffix}`,
+      paths,
+    };
   }
   // Only the observed rg -n PATTERN PATH form; marker position proves a real file operand.
   const brace =
@@ -662,7 +665,7 @@ function materializeLiteralShell(command: string): LiteralShellProof | undefined
     new TextEncoder().encode(command.slice(0, start)).byteLength +
     values.reduce((total, value) => total + path.length - members[0].length + value.length + 1, -1);
   if (size > 65_536) return undefined;
-  const paths = values.map((member) => path.replace(members[0], member));
+  const paths = values.map((member) => path.replace(members[0], () => member));
   return { command: command.slice(0, start) + paths.join(" "), paths };
 }
 
@@ -770,7 +773,7 @@ function normalizeProgramHeredocs(command: string): string {
   if (!/-\s*$/.test(heredoc.header)) return command;
   const quoted = "'" + heredoc.body.replaceAll("'", "'\"'\"'") + "'";
   return (
-    heredoc.header.replace(/-\s*$/, "-c " + quoted) +
+    heredoc.header.replace(/-\s*$/, () => "-c " + quoted) +
     "\n" +
     normalizeProgramHeredocs(heredoc.following)
   );
@@ -987,7 +990,7 @@ function inlinePackageCommands(command: string, allowInventory: boolean): string
             position === 2
               ? program.replace(
                   /\brequire\s*\(\s*(["'])\.\/\1\s*\+\s*[a-z]\s*\)/,
-                  `require(${JSON.stringify(path)})`,
+                  () => `require(${JSON.stringify(path)})`,
                 )
               : word;
           return "'" + materialized.replaceAll("'", "'\"'\"'") + "'";
@@ -1829,7 +1832,7 @@ function hasEnvironmentVariableExpansionRead(
   if (invalidExpansion) return true;
 
   const localMaterialized = [...localValues].reduce(
-    (text, [marker, value]) => text.replaceAll(marker, value),
+    (text, [marker, value]) => text.replaceAll(marker, () => value),
     normalized,
   );
   // Options must be checked after local literals become actual argv, never as placeholders.
@@ -1887,7 +1890,7 @@ function hasEnvironmentVariableExpansionRead(
     }
   }
   const materialized = [...localValues].reduce(
-    (text, [marker, value]) => text.replaceAll(marker, value),
+    (text, [marker, value]) => text.replaceAll(marker, () => value),
     normalized.replaceAll("ENVVALUE", "SAFEENVVALUE"),
   );
   return hasSensitiveFileRead(materialized, isPathBlocked);
@@ -2250,7 +2253,7 @@ export function createCredentialGuard(config?: CredentialGuardConfig): Credentia
       if (error instanceof Error) {
         if (sanitized !== message) {
           error.message = sanitized;
-          if (error.stack) error.stack = error.stack.replace(message, sanitized);
+          if (error.stack) error.stack = error.stack.replace(message, () => sanitized);
         }
         throw error;
       }

package/src/shared/bun.ts

@@ -6,7 +6,7 @@ export function expandPath(path: string): string {
     if (!home || home.trim() === "") {
       throw new Error("HOME environment variable not set");
     }
-    return path.replace("~", home);
+    return home + path.slice(1);
   }
   return path;
 }