@browserstack/mcp-server 1.2.32 → 1.2.33-beta.2

package/dist/tools/accessibility.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { AccessibilityScanner } from "./accessiblity-utils/scanner.js";
 import { AccessibilityReportFetcher } from "./accessiblity-utils/report-fetcher.js";
-import { AccessibilityAuthConfig } from "./accessiblity-utils/auth-config.js";
+import { AccessibilityAuthConfig, safeAuthConfigData, } from "./accessiblity-utils/auth-config.js";
 import { trackMCP } from "../lib/instrumentation.js";
 import { parseAccessibilityReportFromCSV } from "./accessiblity-utils/report-parser.js";
 import { queryAccessibilityRAG } from "./accessiblity-utils/accessibility-rag.js";
@@ -148,7 +148,7 @@ async function executeCreateAuthConfig(args, server, config) {
         const result = await createAuthConfig(args, config);
         return createSuccessResponse([
             `✅ Auth config "${args.name}" created successfully with ID: ${result.data?.id}`,
-            `Auth config details: ${JSON.stringify(result.data, null, 2)}`,
+            `Auth config details: ${JSON.stringify(safeAuthConfigData(result), null, 2)}`,
         ]);
     }
     catch (error) {
@@ -168,7 +168,7 @@ async function executeGetAuthConfig(args, server, config) {
         const result = await authConfig.getAuthConfig(args.configId);
         return createSuccessResponse([
             `✅ Auth config retrieved successfully`,
-            `Auth config details: ${JSON.stringify(result.data, null, 2)}`,
+            `Auth config details: ${JSON.stringify(safeAuthConfigData(result), null, 2)}`,
         ]);
     }
     catch (error) {

package/dist/tools/accessiblity-utils/auth-config.d.ts

@@ -13,6 +13,17 @@ export interface AuthConfigResponse {
     };
     errors?: string[];
 }
+/**
+ * Allowlist of non-sensitive fields safe to return to the LLM/tool caller.
+ * Everything else (site username/password, selectors, undeclared keys) is
+ * dropped rather than echoed — see rules/tool-design.md "never echo".
+ */
+export declare function safeAuthConfigData(response?: AuthConfigResponse): {
+    url?: string | undefined;
+    id: number;
+    name: string;
+    type: string;
+} | undefined;
 export interface FormAuthData {
     username: string;
     usernameSelector: string;

package/dist/tools/accessiblity-utils/auth-config.js

@@ -1,5 +1,22 @@
 import { apiClient } from "../../lib/apiClient.js";
 import logger from "../../logger.js";
+/**
+ * Allowlist of non-sensitive fields safe to return to the LLM/tool caller.
+ * Everything else (site username/password, selectors, undeclared keys) is
+ * dropped rather than echoed — see rules/tool-design.md "never echo".
+ */
+export function safeAuthConfigData(response) {
+    const data = response?.data;
+    if (!data) {
+        return undefined;
+    }
+    return {
+        id: data.id,
+        name: data.name,
+        type: data.type,
+        ...(data.url ? { url: data.url } : {}),
+    };
+}
 export class AccessibilityAuthConfig {
     auth;
     setAuth(auth) {
@@ -44,14 +61,14 @@ export class AccessibilityAuthConfig {
                 body: requestBody,
             });
             const data = response.data;
-            logger.info(`The data returned from the API is: ${JSON.stringify(data)}`);
+            logger.info(`Auth config API returned: ${JSON.stringify(safeAuthConfigData(data))}`);
             if (!data.success) {
                 throw new Error(`Unable to create auth config: ${data.errors?.join(", ")}`);
             }
             return data;
         }
         catch (err) {
-            logger.error(`Error creating form auth config: ${JSON.stringify(err?.response?.data)}`);
+            logger.error(`Error creating form auth config (status ${err?.response?.status ?? "unknown"})`);
             const msg = err?.response?.data?.error ||
                 err?.response?.data?.message ||
                 err?.message ||

package/dist/tools/appautomate-utils/appium-sdk/config-generator.d.ts

@@ -4,4 +4,4 @@ export declare function generateAppBrowserStackYMLInstructions(config: {
     platforms?: string[];
     testingFramework?: string;
     projectName?: string;
-}, username: string, accessKey: string, appPath?: string): string;
+}, appPath?: string): string;

package/dist/tools/appautomate-utils/appium-sdk/config-generator.js

@@ -1,5 +1,5 @@
-import { APP_DEVICE_CONFIGS, AppSDKSupportedTestingFrameworkEnum, DEFAULT_APP_PATH, createStep, } from "./index.js";
-export function generateAppBrowserStackYMLInstructions(config, username, accessKey, appPath = DEFAULT_APP_PATH) {
+import { APP_DEVICE_CONFIGS, AppSDKSupportedTestingFrameworkEnum, DEFAULT_APP_PATH, USERNAME_PLACEHOLDER, ACCESS_KEY_PLACEHOLDER, createStep, } from "./index.js";
+export function generateAppBrowserStackYMLInstructions(config, appPath = DEFAULT_APP_PATH) {
     if (config.testingFramework ===
         AppSDKSupportedTestingFrameworkEnum.nightwatch ||
         config.testingFramework ===
@@ -13,8 +13,8 @@ export function generateAppBrowserStackYMLInstructions(config, username, accessK
         ? `${config.projectName}-AppAutomate-Build`
         : "bstack-demo";
     const configContent = `\`\`\`yaml
-userName: ${username}
-accessKey: ${accessKey}
+userName: ${USERNAME_PLACEHOLDER}
+accessKey: ${ACCESS_KEY_PLACEHOLDER}
 app: ${appPath}
 platforms:
 ${platformConfigs}

package/dist/tools/appautomate-utils/appium-sdk/constants.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { AppSDKSupportedFrameworkEnum, AppSDKSupportedTestingFrameworkEnum, AppSDKSupportedLanguageEnum } from "./index.js";
+import { AppSDKSupportedFrameworkEnum, AppSDKSupportedTestingFrameworkEnum, AppSDKSupportedLanguageEnum } from "./types.js";
 export declare const APP_DEVICE_CONFIGS: {
     android: {
         deviceName: string;
@@ -11,6 +11,7 @@ export declare const APP_DEVICE_CONFIGS: {
     }[];
 };
 export declare const STEP_DELIMITER = "---STEP---";
+export { USERNAME_PLACEHOLDER, ACCESS_KEY_PLACEHOLDER, } from "../../sdk-utils/common/credentials.js";
 export declare const DEFAULT_APP_PATH = "bs://sample.app";
 export declare const MobileDeviceSchema: z.ZodObject<{
     platform: z.ZodEnum<{

package/dist/tools/appautomate-utils/appium-sdk/constants.js

@@ -1,5 +1,8 @@
 import { z } from "zod";
-import { AppSDKSupportedFrameworkEnum, AppSDKSupportedTestingFrameworkEnum, AppSDKSupportedLanguageEnum, } from "./index.js";
+// Import enums directly from types.js (not the index barrel) so this module has
+// no cycle back through index → instructions → languages/*, letting other
+// modules safely read the placeholder constants below at module scope.
+import { AppSDKSupportedFrameworkEnum, AppSDKSupportedTestingFrameworkEnum, AppSDKSupportedLanguageEnum, } from "./types.js";
 // App Automate specific device configurations
 export const APP_DEVICE_CONFIGS = {
     android: [
@@ -15,6 +18,7 @@ export const APP_DEVICE_CONFIGS = {
 };
 // Step delimiter for parsing instructions
 export const STEP_DELIMITER = "---STEP---";
+export { USERNAME_PLACEHOLDER, ACCESS_KEY_PLACEHOLDER, } from "../../sdk-utils/common/credentials.js";
 // Default app path for examples
 export const DEFAULT_APP_PATH = "bs://sample.app";
 export const MobileDeviceSchema = z.object({

package/dist/tools/appautomate-utils/appium-sdk/formatter.d.ts

@@ -2,7 +2,7 @@ import { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
 export declare function formatFinalAppInstructions(formattedInstructions: string): CallToolResult;
 export declare function createStep(title: string, content: string): string;
 export declare function combineInstructions(...instructionParts: string[]): string;
-export declare function formatEnvCommands(username: string, accessKey: string, isWindows: boolean): string;
-export declare function createEnvStep(username: string, accessKey: string, isWindows: boolean, platformLabel: string, title?: string): string;
+export declare function formatEnvCommands(isWindows: boolean): string;
+export declare function createEnvStep(isWindows: boolean, platformLabel: string, title?: string): string;
 export declare function formatMultiLineCommand(command: string, isWindows?: boolean): string;
 export declare function formatAppInstructionsWithNumbers(instructions: string): string;

package/dist/tools/appautomate-utils/appium-sdk/formatter.js

@@ -1,4 +1,4 @@
-import { STEP_DELIMITER } from "./constants.js";
+import { STEP_DELIMITER, USERNAME_PLACEHOLDER, ACCESS_KEY_PLACEHOLDER, } from "./constants.js";
 export function formatFinalAppInstructions(formattedInstructions) {
     const fullInstructions = `
 ⚠️ IMPORTANT: DO NOT SKIP ANY STEP
@@ -25,21 +25,21 @@ ${content}`;
 export function combineInstructions(...instructionParts) {
     return instructionParts.filter(Boolean).join("\n\n");
 }
-export function formatEnvCommands(username, accessKey, isWindows) {
+export function formatEnvCommands(isWindows) {
     if (isWindows) {
         return `\`\`\`cmd
-setx BROWSERSTACK_USERNAME "${username}"
-setx BROWSERSTACK_ACCESS_KEY "${accessKey}"
+setx BROWSERSTACK_USERNAME "${USERNAME_PLACEHOLDER}"
+setx BROWSERSTACK_ACCESS_KEY "${ACCESS_KEY_PLACEHOLDER}"
 \`\`\``;
     }
     return `\`\`\`bash
-export BROWSERSTACK_USERNAME=${username}
-export BROWSERSTACK_ACCESS_KEY=${accessKey}
+export BROWSERSTACK_USERNAME="${USERNAME_PLACEHOLDER}"
+export BROWSERSTACK_ACCESS_KEY="${ACCESS_KEY_PLACEHOLDER}"
 \`\`\``;
 }
-export function createEnvStep(username, accessKey, isWindows, platformLabel, title = "Set BrowserStack credentials as environment variables:") {
+export function createEnvStep(isWindows, platformLabel, title = "Set BrowserStack credentials as environment variables:") {
     return createStep(title, `**${platformLabel}:**
-${formatEnvCommands(username, accessKey, isWindows)}`);
+${formatEnvCommands(isWindows)}`);
 }
 export function formatMultiLineCommand(command, isWindows = process.platform === "win32") {
     if (isWindows) {

package/dist/tools/appautomate-utils/appium-sdk/handler.js

@@ -1,14 +1,20 @@
 import { z } from "zod";
 import { getBrowserStackAuth } from "../../../lib/get-auth.js";
 import { validateAppAutomateDevices } from "../../sdk-utils/common/device-validator.js";
+import { CREDENTIALS_SUBSTITUTION_NOTE } from "../../sdk-utils/common/credentials.js";
 import { getAppUploadInstruction, validateSupportforAppAutomate, } from "./utils.js";
 import { getAppSDKPrefixCommand, generateAppBrowserStackYMLInstructions, } from "./index.js";
-import { formatAppInstructionsWithNumbers, getAppInstructionsForProjectConfiguration, SETUP_APP_AUTOMATE_SCHEMA, } from "./index.js";
+import { createStep, formatAppInstructionsWithNumbers, getAppInstructionsForProjectConfiguration, SETUP_APP_AUTOMATE_SCHEMA, } from "./index.js";
 export async function setupAppAutomateHandler(rawInput, config) {
     const input = z.object(SETUP_APP_AUTOMATE_SCHEMA).parse(rawInput);
     const auth = getBrowserStackAuth(config);
     const [username, accessKey] = auth.split(":");
-    const instructions = [];
+    const instructions = [
+        {
+            content: createStep("BrowserStack credentials", CREDENTIALS_SUBSTITUTION_NOTE),
+            type: "setup",
+        },
+    ];
     // Use variables for all major input properties
     const testingFramework = input.detectedTestingFramework;
     const language = input.detectedLanguage;
@@ -30,7 +36,7 @@ export async function setupAppAutomateHandler(rawInput, config) {
     // Extract platforms for backward compatibility (if needed)
     const platforms = validatedEnvironments.map((env) => env.platform);
     // Step 1: Generate SDK setup command
-    const sdkCommand = getAppSDKPrefixCommand(language, testingFramework, username, accessKey, appPath);
+    const sdkCommand = getAppSDKPrefixCommand(language, testingFramework, appPath);
     if (sdkCommand) {
         instructions.push({ content: sdkCommand, type: "setup" });
     }
@@ -40,7 +46,7 @@ export async function setupAppAutomateHandler(rawInput, config) {
         platforms,
         testingFramework,
         projectName: input.project,
-    }, username, accessKey, appPath);
+    }, appPath);
     if (configInstructions) {
         instructions.push({ content: configInstructions, type: "config" });
     }

package/dist/tools/appautomate-utils/appium-sdk/instructions.d.ts

@@ -1,3 +1,3 @@
 import { AppSDKSupportedLanguage, AppSDKSupportedTestingFramework } from "./index.js";
 export declare function getAppInstructionsForProjectConfiguration(framework: string, testingFramework: AppSDKSupportedTestingFramework, language: AppSDKSupportedLanguage): string;
-export declare function getAppSDKPrefixCommand(language: AppSDKSupportedLanguage, testingFramework: string, username: string, accessKey: string, appPath?: string): string;
+export declare function getAppSDKPrefixCommand(language: AppSDKSupportedLanguage, testingFramework: string, appPath?: string): string;

package/dist/tools/appautomate-utils/appium-sdk/instructions.js

@@ -29,18 +29,18 @@ export function getAppInstructionsForProjectConfiguration(framework, testingFram
             return "";
     }
 }
-export function getAppSDKPrefixCommand(language, testingFramework, username, accessKey, appPath) {
+export function getAppSDKPrefixCommand(language, testingFramework, appPath) {
     switch (language) {
         case "csharp":
-            return getCSharpSDKCommand(username, accessKey);
+            return getCSharpSDKCommand();
         case "java":
-            return getJavaSDKCommand(testingFramework, username, accessKey, appPath);
+            return getJavaSDKCommand(testingFramework, appPath);
         case "nodejs":
-            return getNodejsSDKCommand(testingFramework, username, accessKey);
+            return getNodejsSDKCommand(testingFramework);
         case "python":
-            return getPythonSDKCommand(testingFramework, username, accessKey);
+            return getPythonSDKCommand(testingFramework);
         case "ruby":
-            return getRubySDKCommand(testingFramework, username, accessKey);
+            return getRubySDKCommand();
         default:
             return "";
     }

package/dist/tools/appautomate-utils/appium-sdk/languages/csharp.d.ts

@@ -1,2 +1,2 @@
 export declare function getCSharpAppInstructions(): string;
-export declare function getCSharpSDKCommand(username: string, accessKey: string): string;
+export declare function getCSharpSDKCommand(): string;

package/dist/tools/appautomate-utils/appium-sdk/languages/csharp.js

@@ -1,5 +1,5 @@
 // C# instructions and commands for App SDK utilities
-import { PLATFORM_UTILS, createStep, createEnvStep, combineInstructions, } from "../index.js";
+import { PLATFORM_UTILS, createStep, createEnvStep, combineInstructions, USERNAME_PLACEHOLDER, ACCESS_KEY_PLACEHOLDER, } from "../index.js";
 export function getCSharpAppInstructions() {
     const { isWindows, isAppleSilicon, getPlatformLabel } = PLATFORM_UTILS;
     let runCommand = "";
@@ -37,22 +37,22 @@ __Resolution:__
 - Remove or comment out any code or configuration in your test setup (e.g., step definitions, runners, or capabilities setup) that sets the app path directly.`);
     return runStep;
 }
-export function getCSharpSDKCommand(username, accessKey) {
+export function getCSharpSDKCommand() {
     const { isWindows = false, isAppleSilicon = false, getPlatformLabel = () => "Unknown", } = PLATFORM_UTILS || {};
     if (!PLATFORM_UTILS) {
         console.warn("PLATFORM_UTILS is undefined. Defaulting platform values.");
     }
-    const envStep = createEnvStep(username, accessKey, isWindows, getPlatformLabel());
+    const envStep = createEnvStep(isWindows, getPlatformLabel());
     const installCommands = isWindows
         ? `\`\`\`cmd
 dotnet add package BrowserStack.TestAdapter
 dotnet build
-dotnet browserstack-sdk setup --userName "${username}" --accessKey "${accessKey}"
+dotnet browserstack-sdk setup --userName "${USERNAME_PLACEHOLDER}" --accessKey "${ACCESS_KEY_PLACEHOLDER}"
 \`\`\``
         : `\`\`\`bash
 dotnet add package BrowserStack.TestAdapter
 dotnet build
-dotnet browserstack-sdk setup --userName "${username}" --accessKey "${accessKey}"
+dotnet browserstack-sdk setup --userName "${USERNAME_PLACEHOLDER}" --accessKey "${ACCESS_KEY_PLACEHOLDER}"
 \`\`\``;
     const installStep = createStep("Install BrowserStack SDK", `Run the following command to install the BrowserStack SDK and create a browserstack.yml file in the root directory of your project:
 

package/dist/tools/appautomate-utils/appium-sdk/languages/java.d.ts

@@ -7,4 +7,4 @@ export declare const GRADLE_APP_SETUP_INSTRUCTIONS = "\n**For Gradle setup:**\n1
 export declare function getJavaAppInstructions(): string;
 export declare function getJavaAppFrameworkForMaven(framework: string): string;
 export declare function getJavaAppFrameworkVersion(framework: string): string;
-export declare function getJavaSDKCommand(framework: string, username: string, accessKey: string, appPath?: string): string;
+export declare function getJavaSDKCommand(framework: string, appPath?: string): string;

package/dist/tools/appautomate-utils/appium-sdk/languages/java.js

@@ -1,5 +1,5 @@
 // Java instructions and commands for App SDK utilities
-import { createStep, combineInstructions, createEnvStep, PLATFORM_UTILS, } from "../index.js";
+import { createStep, combineInstructions, createEnvStep, PLATFORM_UTILS, USERNAME_PLACEHOLDER, ACCESS_KEY_PLACEHOLDER, } from "../index.js";
 // Java-specific constants and mappings
 export const MAVEN_ARCHETYPE_GROUP_ID = "com.browserstack";
 export const MAVEN_ARCHETYPE_ARTIFACT_ID = "junit-archetype-integrate";
@@ -54,7 +54,7 @@ export function getJavaAppFrameworkForMaven(framework) {
 export function getJavaAppFrameworkVersion(framework) {
     return JAVA_APP_FRAMEWORK_VERSION_MAP[framework] || MAVEN_ARCHETYPE_VERSION;
 }
-function getMavenCommandForWindows(framework, mavenFramework, version, username, accessKey, appPath) {
+function getMavenCommandForWindows(framework, mavenFramework, version, appPath) {
     let command = `mvn archetype:generate -B ` +
         `-DarchetypeGroupId="${MAVEN_ARCHETYPE_GROUP_ID}" ` +
         `-DarchetypeArtifactId="${mavenFramework}" ` +
@@ -62,8 +62,8 @@ function getMavenCommandForWindows(framework, mavenFramework, version, username,
         `-DgroupId="${MAVEN_ARCHETYPE_GROUP_ID}" ` +
         `-DartifactId="${mavenFramework}" ` +
         `-Dversion="${version}" ` +
-        `-DBROWSERSTACK_USERNAME="${username}" ` +
-        `-DBROWSERSTACK_ACCESS_KEY="${accessKey}"`;
+        `-DBROWSERSTACK_USERNAME="${USERNAME_PLACEHOLDER}" ` +
+        `-DBROWSERSTACK_ACCESS_KEY="${ACCESS_KEY_PLACEHOLDER}"`;
     // Add framework parameter for browserstack-sdk-archetype-integrate
     if (mavenFramework === "browserstack-sdk-archetype-integrate") {
         command += ` -DBROWSERSTACK_FRAMEWORK="${framework}"`;
@@ -74,7 +74,7 @@ function getMavenCommandForWindows(framework, mavenFramework, version, username,
     }
     return command;
 }
-function getMavenCommandForUnix(framework, mavenFramework, version, username, accessKey, appPath) {
+function getMavenCommandForUnix(framework, mavenFramework, version, appPath) {
     let command = `mvn archetype:generate -B ` +
         `-DarchetypeGroupId="${MAVEN_ARCHETYPE_GROUP_ID}" ` +
         `-DarchetypeArtifactId="${mavenFramework}" ` +
@@ -82,8 +82,8 @@ function getMavenCommandForUnix(framework, mavenFramework, version, username, ac
         `-DgroupId="${MAVEN_ARCHETYPE_GROUP_ID}" ` +
         `-DartifactId="${mavenFramework}" ` +
         `-Dversion="${version}" ` +
-        `-DBROWSERSTACK_USERNAME="${username}" ` +
-        `-DBROWSERSTACK_ACCESS_KEY="${accessKey}"`;
+        `-DBROWSERSTACK_USERNAME="${USERNAME_PLACEHOLDER}" ` +
+        `-DBROWSERSTACK_ACCESS_KEY="${ACCESS_KEY_PLACEHOLDER}"`;
     // Add framework parameter for browserstack-sdk-archetype-integrate
     if (mavenFramework === "browserstack-sdk-archetype-integrate") {
         command += ` -DBROWSERSTACK_FRAMEWORK="${framework}"`;
@@ -94,18 +94,18 @@ function getMavenCommandForUnix(framework, mavenFramework, version, username, ac
     }
     return command;
 }
-export function getJavaSDKCommand(framework, username, accessKey, appPath) {
+export function getJavaSDKCommand(framework, appPath) {
     const { isWindows = false, getPlatformLabel } = PLATFORM_UTILS || {};
     const mavenFramework = getJavaAppFrameworkForMaven(framework);
     const version = getJavaAppFrameworkVersion(framework);
     let mavenCommand;
     if (isWindows) {
-        mavenCommand = getMavenCommandForWindows(framework, mavenFramework, version, username, accessKey, appPath);
+        mavenCommand = getMavenCommandForWindows(framework, mavenFramework, version, appPath);
     }
     else {
-        mavenCommand = getMavenCommandForUnix(framework, mavenFramework, version, username, accessKey, appPath);
+        mavenCommand = getMavenCommandForUnix(framework, mavenFramework, version, appPath);
     }
-    const envStep = createEnvStep(username, accessKey, isWindows, getPlatformLabel());
+    const envStep = createEnvStep(isWindows, getPlatformLabel());
     const mavenStep = createStep("Install BrowserStack SDK using Maven Archetype for App Automate", `Maven command for ${framework} (${getPlatformLabel()}):
     \`\`\`bash
     ${mavenCommand}

package/dist/tools/appautomate-utils/appium-sdk/languages/nodejs.d.ts

@@ -1,3 +1,3 @@
 import { AppSDKSupportedTestingFramework } from "../index.js";
-export declare function getNodejsSDKCommand(testingFramework: string, username: string, accessKey: string): string;
+export declare function getNodejsSDKCommand(testingFramework: string): string;
 export declare function getNodejsAppInstructions(testingFramework: AppSDKSupportedTestingFramework): string;

package/dist/tools/appautomate-utils/appium-sdk/languages/nodejs.js

@@ -1,17 +1,17 @@
 // Node.js instructions and commands for App SDK utilities
 import { AppSDKSupportedTestingFrameworkEnum, createStep, combineInstructions, } from "../index.js";
-export function getNodejsSDKCommand(testingFramework, username, accessKey) {
+export function getNodejsSDKCommand(testingFramework) {
     switch (testingFramework) {
         case "webdriverio":
-            return getWebDriverIOCommand(username, accessKey);
+            return getWebDriverIOCommand();
         case "nightwatch":
-            return getNightwatchCommand(username, accessKey);
+            return getNightwatchCommand();
         case "jest":
-            return getJestCommand(username, accessKey);
+            return getJestCommand();
         case "mocha":
-            return getMochaCommand(username, accessKey);
+            return getMochaCommand();
         case "cucumberJs":
-            return getCucumberJSCommand(username, accessKey);
+            return getCucumberJSCommand();
         default:
             return "";
     }
@@ -39,22 +39,22 @@ export function getNodejsAppInstructions(testingFramework) {
             return "";
     }
 }
-function getWebDriverIOCommand(username, accessKey) {
+function getWebDriverIOCommand() {
     const prerequisiteStep = createStep("Prerequisite Setup:", `a. Ensure you do not modify or replace any existing local driver code, 
     as it will be automatically managed and overwritten by the BrowserStack SDK/Driver.
     b. Do not create any YML file in this integration as it is not required.
     c. Ensure you create the WDIO config file as per the instructions below.`);
     const envStep = createStep("Set your BrowserStack credentials as environment variables:", `\`\`\`bash
-export BROWSERSTACK_USERNAME=${username}
-export BROWSERSTACK_ACCESS_KEY=${accessKey}
+export BROWSERSTACK_USERNAME="<your_browserstack_username>"
+export BROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>"
 \`\`\``);
     const installStep = createStep("Install BrowserStack WDIO service:", `\`\`\`bash
 npm install @wdio/browserstack-service@^7 --save-dev
 \`\`\``);
     const configStep = createStep("Update your WebdriverIO config file (e.g., \\`wdio.conf.js\\`) to add the BrowserStack service and capabilities:", `\`\`\`js
 exports.config = {
-  user: process.env.BROWSERSTACK_USERNAME || '${username}',
-  key: process.env.BROWSERSTACK_ACCESS_KEY || '${accessKey}',
+  user: process.env.BROWSERSTACK_USERNAME || '<your_browserstack_username>',
+  key: process.env.BROWSERSTACK_ACCESS_KEY || '<your_browserstack_access_key>',
   hostname: 'hub.browserstack.com',
   services: [
     [
@@ -92,14 +92,14 @@ exports.config = {
 \`\`\``);
     return combineInstructions(prerequisiteStep, envStep, installStep, configStep);
 }
-function getNightwatchCommand(username, accessKey) {
+function getNightwatchCommand() {
     const prerequisiteStep = createStep("Prerequisite Setup:", ` a. Ensure you do not modify or replace any existing local driver code, 
       as it will be automatically managed and overwritten by the BrowserStack SDK/Driver.
       b. Do not create any YML file in this integration as it is not required.
       c. Ensure you create the WDIO config file as per the instructions below.`);
     const envStep = createStep("Set your BrowserStack credentials as environment variables:", `\`\`\`bash 
-export BROWSERSTACK_USERNAME=${username}
-export BROWSERSTACK_ACCESS_KEY=${accessKey}
+export BROWSERSTACK_USERNAME="<your_browserstack_username>"
+export BROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>"
 \`\`\``);
     const installStep = createStep("Install Nightwatch and BrowserStack integration:", `\`\`\`bash
 npm install --save-dev @nightwatch/browserstack
@@ -166,29 +166,29 @@ npm install --save-dev @nightwatch/browserstack
 \`\`\``);
     return combineInstructions(prerequisiteStep, envStep, installStep, configStep);
 }
-function getJestCommand(username, accessKey) {
+function getJestCommand() {
     const envStep = createStep("Set your BrowserStack credentials as environment variables:", `\`\`\`bash
-export BROWSERSTACK_USERNAME=${username}
-export BROWSERSTACK_ACCESS_KEY=${accessKey}
+export BROWSERSTACK_USERNAME="<your_browserstack_username>"
+export BROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>"
 \`\`\``);
     const installStep = createStep("Install Jest and BrowserStack SDK:", `\`\`\`bash
 npm install --save-dev browserstack-node-sdk
 \`\`\``);
     return combineInstructions(envStep, installStep);
 }
-function getMochaCommand(username, accessKey) {
+function getMochaCommand() {
     const envStep = createStep("Set your BrowserStack credentials as environment variables:", `\`\`\`bash
-export BROWSERSTACK_USERNAME=${username}
-export BROWSERSTACK_ACCESS_KEY=${accessKey}
+export BROWSERSTACK_USERNAME="<your_browserstack_username>"
+export BROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>"
 \`\`\``);
     const installStep = createStep("Install Mocha and BrowserStack SDK:", `\`\`\`bash
 npm install --save-dev browserstack-node-sdk
 \`\`\``);
     return combineInstructions(envStep, installStep);
 }
-function getCucumberJSCommand(username, accessKey) {
+function getCucumberJSCommand() {
     return createStep("Set your BrowserStack credentials as environment variables:", `\`\`\`bash
-export BROWSERSTACK_USERNAME=${username}
-export BROWSERSTACK_ACCESS_KEY=${accessKey}
+export BROWSERSTACK_USERNAME="<your_browserstack_username>"
+export BROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>"
 \`\`\``);
 }

package/dist/tools/appautomate-utils/appium-sdk/languages/python.d.ts

@@ -1,3 +1,3 @@
 import { AppSDKSupportedTestingFramework } from "../index.js";
 export declare function getPythonAppInstructions(testingFramework: AppSDKSupportedTestingFramework): string;
-export declare function getPythonSDKCommand(framework: string, username: string, accessKey: string): string;
+export declare function getPythonSDKCommand(framework: string): string;

package/dist/tools/appautomate-utils/appium-sdk/languages/python.js

@@ -1,5 +1,5 @@
 // Python instructions and commands for App SDK utilities
-import { AppSDKSupportedTestingFrameworkEnum, createStep, createEnvStep, combineInstructions, PLATFORM_UTILS, } from "../index.js";
+import { AppSDKSupportedTestingFrameworkEnum, createStep, createEnvStep, combineInstructions, PLATFORM_UTILS, USERNAME_PLACEHOLDER, ACCESS_KEY_PLACEHOLDER, } from "../index.js";
 export function getPythonAppInstructions(testingFramework) {
     switch (testingFramework) {
         case AppSDKSupportedTestingFrameworkEnum.robot:
@@ -23,37 +23,37 @@ paver run first_test
             return "";
     }
 }
-export function getPythonSDKCommand(framework, username, accessKey) {
+export function getPythonSDKCommand(framework) {
     const { isWindows, getPlatformLabel } = PLATFORM_UTILS;
     switch (framework) {
         case "robot":
         case "pytest":
         case "behave":
-            return getPythonCommonSDKCommand(username, accessKey, isWindows, getPlatformLabel());
+            return getPythonCommonSDKCommand(isWindows, getPlatformLabel());
         case "lettuce":
-            return getLettuceCommand(username, accessKey, isWindows, getPlatformLabel());
+            return getLettuceCommand(isWindows, getPlatformLabel());
         default:
             return "";
     }
 }
-function getPythonCommonSDKCommand(username, accessKey, isWindows, platformLabel) {
-    const envStep = createEnvStep(username, accessKey, isWindows, platformLabel, "Set your BrowserStack credentials as environment variables:");
+function getPythonCommonSDKCommand(isWindows, platformLabel) {
+    const envStep = createEnvStep(isWindows, platformLabel, "Set your BrowserStack credentials as environment variables:");
     const installStep = createStep("Install BrowserStack Python SDK:", `\`\`\`bash
 python3 -m pip install browserstack-sdk
 \`\`\``);
     const setupStep = createStep("Set up BrowserStack SDK:", `\`\`\`bash
-browserstack-sdk setup --username "${username}" --key "${accessKey}"
+browserstack-sdk setup --username "${USERNAME_PLACEHOLDER}" --key "${ACCESS_KEY_PLACEHOLDER}"
 \`\`\``);
     return combineInstructions(envStep, installStep, setupStep);
 }
-function getLettuceCommand(username, accessKey, isWindows, platformLabel) {
-    const envStep = createEnvStep(username, accessKey, isWindows, platformLabel, "Set your BrowserStack credentials as environment variables:");
+function getLettuceCommand(isWindows, platformLabel) {
+    const envStep = createEnvStep(isWindows, platformLabel, "Set your BrowserStack credentials as environment variables:");
     const configStep = createStep("Configure Appium's desired capabilities in config.json:", `**Android example:**
 \`\`\`json
 {
     "capabilities": {
-      "browserstack.user" : "${username}",
-      "browserstack.key" : "${accessKey}",
+      "browserstack.user" : "${USERNAME_PLACEHOLDER}",
+      "browserstack.key" : "${ACCESS_KEY_PLACEHOLDER}",
       "project": "First Lettuce Android Project",
       "build": "Lettuce Android",
       "name": "first_test",

package/dist/tools/appautomate-utils/appium-sdk/languages/ruby.d.ts

@@ -1,2 +1,2 @@
 export declare function getRubyAppInstructions(): string;
-export declare function getRubySDKCommand(framework: string, username: string, accessKey: string): string;
+export declare function getRubySDKCommand(): string;

package/dist/tools/appautomate-utils/appium-sdk/languages/ruby.js

@@ -1,7 +1,10 @@
 // Ruby instructions and commands for App SDK utilities
 import { createStep, combineInstructions, createEnvStep, PLATFORM_UTILS, } from "../index.js";
-const username = "${process.env.BROWSERSTACK_USERNAME}";
-const accessKey = "${process.env.BROWSERSTACK_ACCESS_KEY}";
+// Import placeholders straight from constants.js (not the index barrel) so these
+// module-scope constants have no circular dependency on the barrel.
+import { USERNAME_PLACEHOLDER, ACCESS_KEY_PLACEHOLDER } from "../constants.js";
+const username = USERNAME_PLACEHOLDER;
+const accessKey = ACCESS_KEY_PLACEHOLDER;
 export function getRubyAppInstructions() {
     const configStep = createStep("Create/Update the config file (config.yml) as follows:", `\`\`\`yaml
 server: "hub-cloud.browserstack.com"
@@ -56,9 +59,9 @@ bundle exec cucumber
 \`\`\``);
     return combineInstructions(configStep, envStep, runStep);
 }
-export function getRubySDKCommand(framework, username, accessKey) {
+export function getRubySDKCommand() {
     const { isWindows, getPlatformLabel } = PLATFORM_UTILS;
-    const envStep = createEnvStep(username, accessKey, isWindows, getPlatformLabel(), "Set your BrowserStack credentials as environment variables:");
+    const envStep = createEnvStep(isWindows, getPlatformLabel(), "Set your BrowserStack credentials as environment variables:");
     const installStep = createStep("Install required Ruby gems:", `\`\`\`bash
 # Install Bundler if not already installed
 gem install bundler

package/dist/tools/sdk-utils/bstack/commands.d.ts

@@ -1,3 +1,3 @@
 import { SDKSupportedLanguage } from "../common/types.js";
-export declare function getSDKPrefixCommand(language: SDKSupportedLanguage, framework: string, username: string, accessKey: string): string;
+export declare function getSDKPrefixCommand(language: SDKSupportedLanguage, framework: string): string;
 export declare function getJavaFrameworkForMaven(framework: string): string;

package/dist/tools/sdk-utils/bstack/commands.js

@@ -10,7 +10,7 @@ const JAVA_FRAMEWORK_MAP = {
     cucumber: "cucumber-testng",
 };
 // Template for Node.js SDK setup instructions
-const NODEJS_SDK_INSTRUCTIONS = (username, accessKey) => `---STEP---
+const NODEJS_SDK_INSTRUCTIONS = () => `---STEP---
 Install BrowserStack Node SDK using command:
 \`\`\`bash
 npm i -D browserstack-node-sdk@latest
@@ -18,7 +18,7 @@ npm i -D browserstack-node-sdk@latest
 ---STEP---
 Run the following command to setup browserstack sdk:
 \`\`\`bash
-npx browserstack-node-sdk setup --username ${username} --key ${accessKey}
+npx browserstack-node-sdk setup --username "<your_browserstack_username>" --key "<your_browserstack_access_key>"
 \`\`\``;
 // Template for Gradle setup instructions (platform-independent)
 const GRADLE_SETUP_INSTRUCTIONS = `
@@ -33,7 +33,7 @@ const GRADLE_SETUP_INSTRUCTIONS = `
    jvmArgs "-javaagent:\${browserstackSDKArtifact.file}"
 `;
 // Generates Maven archetype command for Windows platform
-function getMavenCommandForWindows(username, accessKey, mavenFramework) {
+function getMavenCommandForWindows(mavenFramework) {
     return (`mvn archetype:generate -B ` +
         `-DarchetypeGroupId="${MAVEN_ARCHETYPE_GROUP_ID}" ` +
         `-DarchetypeArtifactId="${MAVEN_ARCHETYPE_ARTIFACT_ID}" ` +
@@ -41,27 +41,27 @@ function getMavenCommandForWindows(username, accessKey, mavenFramework) {
         `-DgroupId="${MAVEN_ARCHETYPE_GROUP_ID}" ` +
         `-DartifactId="${MAVEN_ARCHETYPE_ARTIFACT_ID}" ` +
         `-Dversion="${MAVEN_ARCHETYPE_VERSION}" ` +
-        `-DBROWSERSTACK_USERNAME="${username}" ` +
-        `-DBROWSERSTACK_ACCESS_KEY="${accessKey}" ` +
+        `-DBROWSERSTACK_USERNAME="<your_browserstack_username>" ` +
+        `-DBROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>" ` +
         `-DBROWSERSTACK_FRAMEWORK="${mavenFramework}"`);
 }
 // Generates Maven archetype command for Unix-like platforms (macOS/Linux)
-function getMavenCommandForUnix(username, accessKey, mavenFramework) {
+function getMavenCommandForUnix(mavenFramework) {
     return `mvn archetype:generate -B -DarchetypeGroupId=${MAVEN_ARCHETYPE_GROUP_ID} \\
 -DarchetypeArtifactId=${MAVEN_ARCHETYPE_ARTIFACT_ID} -DarchetypeVersion=${MAVEN_ARCHETYPE_VERSION} \\
 -DgroupId=${MAVEN_ARCHETYPE_GROUP_ID} -DartifactId=${MAVEN_ARCHETYPE_ARTIFACT_ID} -Dversion=${MAVEN_ARCHETYPE_VERSION} \\
--DBROWSERSTACK_USERNAME="${username}" \\
--DBROWSERSTACK_ACCESS_KEY="${accessKey}" \\
+-DBROWSERSTACK_USERNAME="<your_browserstack_username>" \\
+-DBROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>" \\
 -DBROWSERSTACK_FRAMEWORK="${mavenFramework}"`;
 }
 // Generates Java SDK setup instructions with Maven/Gradle options
-function getJavaSDKInstructions(framework, username, accessKey) {
+function getJavaSDKInstructions(framework) {
     const mavenFramework = getJavaFrameworkForMaven(framework);
     const isWindows = process.platform === "win32";
     const platformLabel = isWindows ? "Windows" : "macOS/Linux";
     const mavenCommand = isWindows
-        ? getMavenCommandForWindows(username, accessKey, mavenFramework)
-        : getMavenCommandForUnix(username, accessKey, mavenFramework);
+        ? getMavenCommandForWindows(mavenFramework)
+        : getMavenCommandForUnix(mavenFramework);
     return `---STEP---
 Install BrowserStack Java SDK
 
@@ -73,12 +73,12 @@ Alternative setup for Gradle users:
 ${GRADLE_SETUP_INSTRUCTIONS}`;
 }
 // Main function to get SDK setup commands based on language and framework
-export function getSDKPrefixCommand(language, framework, username, accessKey) {
+export function getSDKPrefixCommand(language, framework) {
     switch (language) {
         case "nodejs":
-            return NODEJS_SDK_INSTRUCTIONS(username, accessKey);
+            return NODEJS_SDK_INSTRUCTIONS();
         case "java":
-            return getJavaSDKInstructions(framework, username, accessKey);
+            return getJavaSDKInstructions(framework);
         default:
             return "";
     }

package/dist/tools/sdk-utils/bstack/configUtils.d.ts

@@ -1,8 +1,7 @@
 import { ValidatedEnvironment } from "../common/device-validator.js";
-import { BrowserStackConfig } from "../../../lib/types.js";
 export declare function generateBrowserStackYMLInstructions(config: {
     validatedEnvironments?: ValidatedEnvironment[];
     platforms?: string[];
     enablePercy?: boolean;
     projectName: string;
-}, browserStackConfig: BrowserStackConfig): string;
+}): string;

package/dist/tools/sdk-utils/bstack/configUtils.js

@@ -1,10 +1,6 @@
-import { getBrowserStackAuth } from "../../../lib/get-auth.js";
-export function generateBrowserStackYMLInstructions(config, browserStackConfig) {
+export function generateBrowserStackYMLInstructions(config) {
     const enablePercy = config.enablePercy || false;
     const projectName = config.projectName || "BrowserStack Automate Build";
-    // Get credentials from config
-    const authString = getBrowserStackAuth(browserStackConfig);
-    const [username, accessKey] = authString.split(":");
     // Generate platform configurations using the utility function
     const platformConfigs = generatePlatformConfigs(config);
     const stepTitle = "Create a browserstack.yml file in the project root with your validated device configurations:If already exists, update it with the following content for devices and project details.";
@@ -14,8 +10,8 @@ export function generateBrowserStackYMLInstructions(config, browserStackConfig)
 # BrowserStack Reporting
 # ======================
 
-userName: ${username}
-accessKey: ${accessKey}
+userName: <your_browserstack_username>
+accessKey: <your_browserstack_access_key>
 
 # TODO: Replace these sample values with your actual project details
 projectName: ${projectName}

package/dist/tools/sdk-utils/bstack/constants.d.ts

@@ -6,52 +6,52 @@ export declare const pythonInstructions: () => {
     setup: string;
     run: string;
 };
-export declare const generatePythonFrameworkInstructions: (framework: string) => (username: string, accessKey: string) => {
+export declare const generatePythonFrameworkInstructions: (framework: string) => () => {
     setup: string;
     run: string;
 };
-export declare const robotInstructions: (username: string, accessKey: string) => {
+export declare const robotInstructions: () => {
     setup: string;
     run: string;
 };
-export declare const behaveInstructions: (username: string, accessKey: string) => {
+export declare const behaveInstructions: () => {
     setup: string;
     run: string;
 };
-export declare const pytestInstructions: (username: string, accessKey: string) => {
+export declare const pytestInstructions: () => {
     setup: string;
     run: string;
 };
-export declare const javaInstructions: (username: string, accessKey: string) => {
+export declare const javaInstructions: () => {
     setup: string;
     run: string;
 };
 /**
  * ---------- CSharp INSTRUCTIONS ----------
  */
-export declare const csharpCommonInstructions: (username: string, accessKey: string) => {
+export declare const csharpCommonInstructions: () => {
     setup: string;
     run: string;
 };
-export declare const csharpPlaywrightCommonInstructions: (username: string, accessKey: string) => {
+export declare const csharpPlaywrightCommonInstructions: () => {
     setup: string;
     run: string;
 };
 /**
  * ---------- NODEJS INSTRUCTIONS ----------
  */
-export declare const nodejsInstructions: (username: string, accessKey: string) => {
+export declare const nodejsInstructions: () => {
     setup: string;
     run: string;
 };
 /**
  * ---------- EXPORT CONFIG ----------
  */
-export declare const webdriverioInstructions: (username: string, accessKey: string) => {
+export declare const webdriverioInstructions: () => {
     setup: string;
     run: string;
 };
-export declare const cypressInstructions: (username: string, accessKey: string) => {
+export declare const cypressInstructions: () => {
     setup: string;
     run: string;
 };

package/dist/tools/sdk-utils/bstack/constants.js

@@ -25,7 +25,7 @@ browserstack-sdk pytest <path-to-test-directory>
 `;
     return { setup, run };
 };
-export const generatePythonFrameworkInstructions = (framework) => (username, accessKey) => {
+export const generatePythonFrameworkInstructions = (framework) => () => {
     const setup = `
 ---STEP---
 
@@ -39,7 +39,7 @@ python3 -m pip install browserstack-sdk
 
 Setup the BrowserStack SDK with framework-specific configuration:
 \`\`\`bash
-browserstack-sdk setup --framework "${framework}" --username "${username}" --key "${accessKey}"
+browserstack-sdk setup --framework "${framework}" --username "<your_browserstack_username>" --key "<your_browserstack_access_key>"
 \`\`\`
 `;
     const run = `
@@ -59,7 +59,7 @@ export const pytestInstructions = generatePythonFrameworkInstructions("pytest");
  * ---------- JAVA INSTRUCTIONS ----------
  */
 const argsInstruction = '<argLine>-javaagent:"${com.browserstack:browserstack-java-sdk:jar}"</argLine>';
-export const javaInstructions = (username, accessKey) => {
+export const javaInstructions = () => {
     const setup = `
 ---STEP---
 
@@ -86,8 +86,8 @@ dependencies {
 
 Export your BrowserStack credentials as environment variables:
 \`\`\`bash
-export BROWSERSTACK_USERNAME=${username}
-export BROWSERSTACK_ACCESS_KEY=${accessKey}
+export BROWSERSTACK_USERNAME="<your_browserstack_username>"
+export BROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>"
 \`\`\`
 `;
     const run = `
@@ -108,7 +108,7 @@ gradle clean test
 /**
  * ---------- CSharp INSTRUCTIONS ----------
  */
-export const csharpCommonInstructions = (username, accessKey) => {
+export const csharpCommonInstructions = () => {
     const setup = `
 ---STEP---
 
@@ -128,7 +128,7 @@ dotnet build
 
 Set up BrowserStack SDK with your credentials:
 \`\`\`bash
-dotnet browserstack-sdk setup --userName ${username} --accessKey ${accessKey}
+dotnet browserstack-sdk setup --userName "<your_browserstack_username>" --accessKey "<your_browserstack_access_key>"
 \`\`\`
 
 ---STEP---
@@ -174,7 +174,7 @@ Run the tests:
 `;
     return { setup, run };
 };
-export const csharpPlaywrightCommonInstructions = (username, accessKey) => {
+export const csharpPlaywrightCommonInstructions = () => {
     const setup = `
 ---STEP---
 
@@ -194,7 +194,7 @@ dotnet build
 
 Set up BrowserStack SDK with your credentials:
 \`\`\`bash
-dotnet browserstack-sdk setup --userName ${username} --accessKey ${accessKey}
+dotnet browserstack-sdk setup --userName "<your_browserstack_username>" --accessKey "<your_browserstack_access_key>"
 \`\`\`
 
 ---STEP---
@@ -256,7 +256,7 @@ Run the tests:
 /**
  * ---------- NODEJS INSTRUCTIONS ----------
  */
-export const nodejsInstructions = (username, accessKey) => {
+export const nodejsInstructions = () => {
     const setup = `
 ---STEP---
 
@@ -285,8 +285,8 @@ Example :
 Export BrowserStack credentials as environment variables:
 Set the following environment variables before running tests.
 \`\`\`bash
-export BROWSERSTACK_USERNAME=${username}
-export BROWSERSTACK_ACCESS_KEY=${accessKey}
+export BROWSERSTACK_USERNAME="<your_browserstack_username>"
+export BROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>"
 \`\`\`
 
 ---STEP---
@@ -306,7 +306,7 @@ npm run test:browserstack
 /**
  * ---------- EXPORT CONFIG ----------
  */
-export const webdriverioInstructions = (username, accessKey) => {
+export const webdriverioInstructions = () => {
     const setup = `
 ---STEP---
 
@@ -315,14 +315,14 @@ Export your BrowserStack username and access key as environment variables.
 
 For macOS/Linux:
 \`\`\`bash
-export BROWSERSTACK_USERNAME=${username}
-export BROWSERSTACK_ACCESS_KEY=${accessKey}
+export BROWSERSTACK_USERNAME="<your_browserstack_username>"
+export BROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>"
 \`\`\`
 
 For Windows PowerShell:
 \`\`\`powershell
-$env:BROWSERSTACK_USERNAME=${username}
-$env:BROWSERSTACK_ACCESS_KEY=${accessKey}
+$env:BROWSERSTACK_USERNAME="<your_browserstack_username>"
+$env:BROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>"
 \`\`\`
 
 ---STEP---
@@ -415,7 +415,7 @@ You can now run your tests on BrowserStack using your standard WebdriverIO comma
 `;
     return { setup, run };
 };
-export const cypressInstructions = (username, accessKey) => {
+export const cypressInstructions = () => {
     const setup = `
 ---STEP---
 
@@ -445,8 +445,8 @@ Open the generated \`browserstack.json\` file and update it with your BrowserSta
 \`\`\`json
 {
   "auth": {
-    "username": "${username}",
-    "access_key": "${accessKey}"
+    "username": "<your_browserstack_username>",
+    "access_key": "<your_browserstack_access_key>"
   },
   "browsers": [
     {
@@ -490,21 +490,21 @@ npx browserstack-cypress run --sync
 After the tests complete, you can view the results on your [BrowserStack Automate Dashboard](https://automate.browserstack.com/dashboard/).`;
     return { setup, run };
 };
-const serenityInstructions = (username, accessKey) => {
+const serenityInstructions = () => {
     const setup = `
 ---STEP---
 
 Set BrowserStack credentials as environment variables:
 For macOS/Linux:
 \`\`\`bash
-export BROWSERSTACK_USERNAME=${username}
-export BROWSERSTACK_ACCESS_KEY=${accessKey}
+export BROWSERSTACK_USERNAME="<your_browserstack_username>"
+export BROWSERSTACK_ACCESS_KEY="<your_browserstack_access_key>"
 \`\`\`
 
 For Windows Command Prompt:
 \`\`\`cmd
-set BROWSERSTACK_USERNAME=${username}
-set BROWSERSTACK_ACCESS_KEY=${accessKey}
+set "BROWSERSTACK_USERNAME=<your_browserstack_username>"
+set "BROWSERSTACK_ACCESS_KEY=<your_browserstack_access_key>"
 \`\`\`
 
 ---STEP---
@@ -528,8 +528,8 @@ webdriver {
   driver = remote
   remote.url = "https://hub.browserstack.com/wd/hub"
 }
-browserstack.user="${username}"
-browserstack.key="${accessKey}"
+browserstack.user="<your_browserstack_username>"
+browserstack.key="<your_browserstack_access_key>"
 \`\`\`
 `;
     const run = `

package/dist/tools/sdk-utils/bstack/sdkHandler.js

@@ -1,12 +1,20 @@
-import { getBrowserStackAuth } from "../../../lib/get-auth.js";
 import { getSDKPrefixCommand } from "./commands.js";
 import { generateBrowserStackYMLInstructions } from "./configUtils.js";
 import { getInstructionsForProjectConfiguration } from "../common/instructionUtils.js";
+import { CREDENTIALS_SUBSTITUTION_NOTE } from "../common/credentials.js";
 import { validateDevices } from "../common/device-validator.js";
-export async function runBstackSDKOnly(input, config, isPercyAutomate = false) {
-    const steps = [];
-    const authString = getBrowserStackAuth(config);
-    const [username, accessKey] = authString.split(":");
+export async function runBstackSDKOnly(input, 
+// Retained for tool-handler signature stability (callers pass the per-request
+// config); setup instructions no longer embed credentials, so it is unused here.
+config, isPercyAutomate = false) {
+    void config;
+    const steps = [
+        {
+            type: "instruction",
+            title: "Set your BrowserStack credentials",
+            content: CREDENTIALS_SUBSTITUTION_NOTE,
+        },
+    ];
     const tupleTargets = input.devices?.map((device) => {
         const platform = device.platform.toLowerCase();
         if (platform === "windows" || platform === "macos") {
@@ -32,7 +40,7 @@ export async function runBstackSDKOnly(input, config, isPercyAutomate = false) {
     // Handle frameworks with unique setup instructions that don't use browserstack.yml
     if (input.detectedBrowserAutomationFramework === "cypress" ||
         input.detectedBrowserAutomationFramework === "webdriverio") {
-        const frameworkInstructions = getInstructionsForProjectConfiguration(input.detectedBrowserAutomationFramework, input.detectedTestingFramework, input.detectedLanguage, username, accessKey);
+        const frameworkInstructions = getInstructionsForProjectConfiguration(input.detectedBrowserAutomationFramework, input.detectedTestingFramework, input.detectedLanguage);
         if (frameworkInstructions) {
             if (frameworkInstructions.setup) {
                 steps.push({
@@ -56,7 +64,7 @@ export async function runBstackSDKOnly(input, config, isPercyAutomate = false) {
         };
     }
     // Default flow using browserstack.yml
-    const sdkSetupCommand = getSDKPrefixCommand(input.detectedLanguage, input.detectedTestingFramework, username, accessKey);
+    const sdkSetupCommand = getSDKPrefixCommand(input.detectedLanguage, input.detectedTestingFramework);
     if (sdkSetupCommand) {
         steps.push({
             type: "instruction",
@@ -64,7 +72,7 @@ export async function runBstackSDKOnly(input, config, isPercyAutomate = false) {
             content: sdkSetupCommand,
         });
     }
-    const frameworkInstructions = getInstructionsForProjectConfiguration(input.detectedBrowserAutomationFramework, input.detectedTestingFramework, input.detectedLanguage, username, accessKey);
+    const frameworkInstructions = getInstructionsForProjectConfiguration(input.detectedBrowserAutomationFramework, input.detectedTestingFramework, input.detectedLanguage);
     if (frameworkInstructions) {
         if (frameworkInstructions.setup) {
             steps.push({
@@ -78,7 +86,7 @@ export async function runBstackSDKOnly(input, config, isPercyAutomate = false) {
         validatedEnvironments,
         enablePercy: false,
         projectName: input.projectName,
-    }, config);
+    });
     if (ymlInstructions) {
         steps.push({
             type: "instruction",

package/dist/tools/sdk-utils/common/credentials.d.ts

@@ -0,0 +1,3 @@
+export declare const USERNAME_PLACEHOLDER = "<your_browserstack_username>";
+export declare const ACCESS_KEY_PLACEHOLDER = "<your_browserstack_access_key>";
+export declare const CREDENTIALS_SUBSTITUTION_NOTE: string;

package/dist/tools/sdk-utils/common/credentials.js

@@ -0,0 +1,11 @@
+// Single source of truth for the credential placeholders emitted in generated
+// SDK setup instructions, so the web (sdk-utils) and App Automate (appium-sdk)
+// trees cannot drift apart. Real credentials are never embedded — see
+// rules/security.md.
+export const USERNAME_PLACEHOLDER = "<your_browserstack_username>";
+export const ACCESS_KEY_PLACEHOLDER = "<your_browserstack_access_key>";
+// Tells the reader (often a coding agent that runs steps verbatim) to swap the
+// placeholders for real values, so they are not baked into browserstack.yml.
+export const CREDENTIALS_SUBSTITUTION_NOTE = `Replace ${USERNAME_PLACEHOLDER} and ${ACCESS_KEY_PLACEHOLDER} in the steps below ` +
+    `with your BrowserStack credentials from https://www.browserstack.com/accounts/profile/details ` +
+    `(or export them as BROWSERSTACK_USERNAME / BROWSERSTACK_ACCESS_KEY). Do not commit real credentials.`;

package/dist/tools/sdk-utils/common/instructionUtils.d.ts

@@ -2,7 +2,7 @@
  * Core instruction configuration utilities for runTestsOnBrowserStack tool.
  */
 import { SDKSupportedLanguage, SDKSupportedBrowserAutomationFramework, SDKSupportedTestingFramework } from "./types.js";
-export declare const getInstructionsForProjectConfiguration: (detectedBrowserAutomationFramework: SDKSupportedBrowserAutomationFramework, detectedTestingFramework: SDKSupportedTestingFramework, detectedLanguage: SDKSupportedLanguage, username: string, accessKey: string) => {
+export declare const getInstructionsForProjectConfiguration: (detectedBrowserAutomationFramework: SDKSupportedBrowserAutomationFramework, detectedTestingFramework: SDKSupportedTestingFramework, detectedLanguage: SDKSupportedLanguage) => {
     setup: string;
     run: string;
 };

package/dist/tools/sdk-utils/common/instructionUtils.js

@@ -3,7 +3,7 @@
  */
 import { SUPPORTED_CONFIGURATIONS } from "../bstack/frameworks.js";
 const errorMessageSuffix = "Please open an issue at our Github repo: https://github.com/browserstack/browserstack-mcp-server/issues to request support for your project configuration";
-export const getInstructionsForProjectConfiguration = (detectedBrowserAutomationFramework, detectedTestingFramework, detectedLanguage, username, accessKey) => {
+export const getInstructionsForProjectConfiguration = (detectedBrowserAutomationFramework, detectedTestingFramework, detectedLanguage) => {
     const configuration = SUPPORTED_CONFIGURATIONS[detectedLanguage];
     if (!configuration) {
         throw new Error(`BrowserStack MCP Server currently does not support ${detectedLanguage}, ${errorMessageSuffix}`);
@@ -16,5 +16,5 @@ export const getInstructionsForProjectConfiguration = (detectedBrowserAutomation
     }
     const instructionFunction = configuration[detectedBrowserAutomationFramework][detectedTestingFramework]
         .instructions;
-    return instructionFunction(username, accessKey);
+    return instructionFunction();
 };

package/dist/tools/sdk-utils/common/types.d.ts

@@ -43,7 +43,7 @@ export declare const SDKSupportedLanguages: SDKSupportedLanguageEnum[];
 export type SDKSupportedTestingFramework = keyof typeof SDKSupportedTestingFrameworkEnum;
 export declare const SDKSupportedTestingFrameworks: SDKSupportedTestingFrameworkEnum[];
 export type ConfigMapping = Partial<Record<SDKSupportedLanguageEnum, Partial<Record<SDKSupportedBrowserAutomationFrameworkEnum, Partial<Record<SDKSupportedTestingFrameworkEnum, {
-    instructions: (username: string, accessKey: string) => {
+    instructions: () => {
         setup: string;
         run: string;
     };

package/dist/tools/sdk-utils/handler.js

@@ -55,7 +55,7 @@ export async function setUpPercyHandler(rawInput, config) {
             const percyWithBrowserstackSDKResult = runPercyWithBrowserstackSDK({
                 ...percyInput,
                 devices: [],
-            }, config);
+            });
             const hasPercySDKError = percyWithBrowserstackSDKResult.steps &&
                 percyWithBrowserstackSDKResult.steps.some((step) => step.isError);
             if (!hasPercySDKError) {

package/dist/tools/sdk-utils/percy-bstack/handler.d.ts

@@ -1,4 +1,3 @@
 import { RunTestsInstructionResult } from "../common/types.js";
 import { RunTestsOnBrowserStackInput } from "../common/schema.js";
-import { BrowserStackConfig } from "../../../lib/types.js";
-export declare function runPercyWithBrowserstackSDK(input: RunTestsOnBrowserStackInput, config: BrowserStackConfig): RunTestsInstructionResult;
+export declare function runPercyWithBrowserstackSDK(input: RunTestsOnBrowserStackInput): RunTestsInstructionResult;

package/dist/tools/sdk-utils/percy-bstack/handler.js

@@ -1,12 +1,16 @@
-import { getBrowserStackAuth } from "../../../lib/get-auth.js";
 import { getSDKPrefixCommand } from "../bstack/commands.js";
 import { generateBrowserStackYMLInstructions } from "../bstack/configUtils.js";
 import { getInstructionsForProjectConfiguration } from "../common/instructionUtils.js";
+import { CREDENTIALS_SUBSTITUTION_NOTE } from "../common/credentials.js";
 import { formatPercyInstructions, getPercyInstructions, } from "./instructions.js";
-export function runPercyWithBrowserstackSDK(input, config) {
-    const steps = [];
-    const authString = getBrowserStackAuth(config);
-    const [username, accessKey] = authString.split(":");
+export function runPercyWithBrowserstackSDK(input) {
+    const steps = [
+        {
+            type: "instruction",
+            title: "Set your BrowserStack credentials",
+            content: CREDENTIALS_SUBSTITUTION_NOTE,
+        },
+    ];
     // Check if Percy is supported for this configuration
     const percyResult = getPercyInstructions(input.detectedLanguage, input.detectedBrowserAutomationFramework, input.detectedTestingFramework);
     if (!percyResult) {
@@ -28,7 +32,7 @@ export function runPercyWithBrowserstackSDK(input, config) {
     // Handle frameworks with unique setup instructions that don't use browserstack.yml
     if (input.detectedBrowserAutomationFramework === "cypress" ||
         input.detectedBrowserAutomationFramework === "webdriverio") {
-        const frameworkInstructions = getInstructionsForProjectConfiguration(input.detectedBrowserAutomationFramework, input.detectedTestingFramework, input.detectedLanguage, username, accessKey);
+        const frameworkInstructions = getInstructionsForProjectConfiguration(input.detectedBrowserAutomationFramework, input.detectedTestingFramework, input.detectedLanguage);
         if (frameworkInstructions && frameworkInstructions.setup) {
             steps.push({
                 type: "instruction",
@@ -55,7 +59,7 @@ export function runPercyWithBrowserstackSDK(input, config) {
         };
     }
     // Default flow using browserstack.yml with Percy
-    const sdkSetupCommand = getSDKPrefixCommand(input.detectedLanguage, input.detectedTestingFramework, username, accessKey);
+    const sdkSetupCommand = getSDKPrefixCommand(input.detectedLanguage, input.detectedTestingFramework);
     if (sdkSetupCommand) {
         steps.push({
             type: "instruction",
@@ -67,7 +71,7 @@ export function runPercyWithBrowserstackSDK(input, config) {
         platforms: input.devices?.map((t) => t.join(" ")) || [],
         enablePercy: true,
         projectName: input.projectName,
-    }, config);
+    });
     if (ymlInstructions) {
         steps.push({
             type: "instruction",
@@ -75,7 +79,7 @@ export function runPercyWithBrowserstackSDK(input, config) {
             content: ymlInstructions,
         });
     }
-    const frameworkInstructions = getInstructionsForProjectConfiguration(input.detectedBrowserAutomationFramework, input.detectedTestingFramework, input.detectedLanguage, username, accessKey);
+    const frameworkInstructions = getInstructionsForProjectConfiguration(input.detectedBrowserAutomationFramework, input.detectedTestingFramework, input.detectedLanguage);
     if (frameworkInstructions && frameworkInstructions.setup) {
         steps.push({
             type: "instruction",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@browserstack/mcp-server",
-  "version": "1.2.32",
+  "version": "1.2.33-beta.2",
   "description": "BrowserStack's Official MCP Server",
   "mcpName": "io.github.browserstack/mcp-server",
   "main": "dist/index.js",