@com55/node-red-ai-access 0.2.0-beta.4 → 0.2.0-beta.5

package/dist/plugin.d.cts

@@ -268,6 +268,11 @@ interface Proposal {
      * Never blocks approve — AI may scaffold first; humans configure later.
      */
     warnings?: ProposalWarning[];
+    /** Fields whose `[REDACTED]` placeholder was restored to the live secret at submit. */
+    restoredSecrets?: {
+        nodeId: string;
+        property: string;
+    }[];
     /**
      * Short human title (≤80 chars). Set at submit (AI-supplied or auto-generated).
      * Optional on legacy proposals; API responses always resolve a title.
@@ -291,6 +296,10 @@ interface CreateProposalInput {
     title: string;
     /** Soft validation notes to persist with the proposal. */
     warnings?: ProposalWarning[];
+    restoredSecrets?: {
+        nodeId: string;
+        property: string;
+    }[];
 }
 declare class ProposalStore {
     private readonly paths;
@@ -355,6 +364,8 @@ interface PersistedAiAccessSettings {
     rateLimitWindowMs?: number;
     rateLimitMaxPerIp?: number;
     rateLimitMaxPerToken?: number;
+    /** Secret-like env / config names redacted from AI responses (case-insensitive words). */
+    secretNamePatterns?: string[];
     oauth?: {
         enabled?: boolean;
         accessTokenTtlSec?: number;
@@ -374,6 +385,7 @@ interface EffectiveAiAccessSettings {
     rateLimitWindowMs: number;
     rateLimitMaxPerIp: number;
     rateLimitMaxPerToken: number;
+    secretNamePatterns: string[];
     oauth: {
         enabled: boolean;
         accessTokenTtlSec: number;
@@ -401,8 +413,11 @@ declare class SettingsStore {
      * disk override and fall back to settings.js / default).
      */
     update(partial: PersistedAiAccessSettings): EffectiveAiAccessSettingsWithMeta;
-    /** Merge into existing disk overrides (only provided keys change). */
-    patch(partial: PersistedAiAccessSettings): EffectiveAiAccessSettingsWithMeta;
+    /**
+     * Merge into existing disk overrides (only provided keys change). Keys in
+     * `reset` are removed from disk so they fall back to settings.js / default.
+     */
+    patch(partial: PersistedAiAccessSettings, reset?: readonly (keyof PersistedAiAccessSettings)[]): EffectiveAiAccessSettingsWithMeta;
     private persist;
 }
 

package/docs/api/openapi.yaml

@@ -1505,6 +1505,7 @@ components:
         - `chunk_conflict` (409): Same draft seq re-sent with different data
         - `missing_chunks` (400): Draft submit with gaps in seq
         - `draft_hash_mismatch` (400): Draft sha256 does not match assembled bytes
+        - `redacted_placeholder_mismatch` (400): A `[REDACTED]` placeholder was added, duplicated, moved, or its env/header name changed
         - `upstream_error` (502): Node-RED runtime/flows error
         - `internal_error` (500): Unexpected server error
       enum:
@@ -1557,6 +1558,7 @@ components:
         - chunk_conflict
         - missing_chunks
         - draft_hash_mismatch
+        - redacted_placeholder_mismatch
         - upstream_error
         - internal_error
     # END GENERATED ERROR CODES

package/docs/errors.md

@@ -62,6 +62,7 @@ GET-link `401` responses include a `WWW-Authenticate: Bearer …` header.
 | `chunk_conflict` | 409 | Same draft seq re-sent with different data | Re-send identical data or start a new draft | GET |
 | `missing_chunks` | 400 | Draft submit with gaps in seq | Upload every seq from 0 through max | GET |
 | `draft_hash_mismatch` | 400 | Draft sha256 does not match assembled bytes | Send the hex sha256 of the assembled UTF-8 | GET |
+| `redacted_placeholder_mismatch` | 400 | A `[REDACTED]` placeholder was added, duplicated, moved, or its env/header name changed | Keep placeholders exactly where they were shown (same line, same name) or supply a real value | GET, REST, MCP |
 | `upstream_error` | 502 | Node-RED runtime/flows error | Retry; check Node-RED logs | GET, REST, MCP |
 | `internal_error` | 500 | Unexpected server error | Retry; check Node-RED logs | GET, REST, MCP |
 
@@ -74,6 +75,13 @@ Returned in `warnings[]` on a successful propose/submit; they never block.
 | `missing_config_node` | 201 | Warning: node has no (or an unresolved) config node yet | Configure before deploy if needed; see `candidates` | GET, REST, MCP |
 | `unwired_node` | 201 | Warning: node has outputs but no wires | Wire it, or ignore while scaffolding | GET, REST, MCP |
 | `incomplete_wires` | 201 | Warning: fewer wire ports than outputs | Add ports if outputs should connect | GET, REST, MCP |
+| `secret_destination_changed` | 201 | Warning: a node holding a restored secret changed where it sends data (url/host/method/headers/…) | Reviewer must verify the new destination before approving | GET, REST, MCP |
+| `secret_node_code_changed` | 201 | Warning: a node holding a restored secret had its code changed | Reviewer must check the code does not send the secret elsewhere | GET, REST, MCP |
+| `secret_wires_changed` | 201 | Warning: a node holding a restored secret had its output wires changed | Reviewer must check where its messages now go | GET, REST, MCP |
+| `secret_scope_changed` | 201 | Warning: tab/group env or a config node scoping a secret-holding node changed | Reviewer must check env-resolved hosts/URLs (e.g. `${API_HOST}`) | GET, REST, MCP |
+| `outbound_node_changed` | 201 | Warning: proposal adds/changes an outbound-capable node (http request/response, mqtt, tcp, udp, email, websocket, link out/call, function, exec, file, or any node with url/host fields) | Reviewer must check it cannot send secret data elsewhere | GET, REST, MCP |
+| `secret_tab_changed` | 201 | Warning: proposal with restored secrets also changes other nodes in the tab | Review every change before approving | GET, REST, MCP |
+| `secret_reference_added` | 201 | Warning: an added/changed node now reads a secret-named env/global/flow value (env.get, $env, ${…}, typed input) | Reviewer must check the value is not sent anywhere unexpected | GET, REST, MCP |
 
 ## Auto-closed proposal statuses
 

package/docs/mcp-tools.md

@@ -69,7 +69,7 @@ _No input parameters._
 
 ## `list_flows`
 
-List all flows as a flat Admin API v2 array plus the current rev string. Returns { rev, flows }. Call this (or get_flow) before submit_proposal so expectedRev matches.
+List all flows as a flat Admin API v2 array plus the current rev string. Likely secrets are shown as "[REDACTED]" (nodes list redacted paths in _aiRedactions). Returns { rev, flows }. Call this (or get_flow) before submit_proposal so expectedRev matches.
 
 _No input parameters._
 
@@ -126,7 +126,7 @@ Search the public Node-RED catalogue for modules to recommend. Returns module id
 
 ## `submit_proposal`
 
-Submit a replace_flow proposal for owner approval (does not deploy). Preferred for small string edits: payload: { flowId, nodes: [{ op:"replace_text", node, field, find, replace, occurrence? }] } — find must be unique unless occurrence (1-based) is set; multiple replace_text ops apply in order; yields a short readable diff. Or send a full tab: payload.flow from get_flow (id, type, label?, nodes[], configs?). Inputs (all top-level, next to each other): type="replace_flow", expectedRev (required string from list_flows/get_flow rev; expected_rev alias accepted), optional title (≤80 chars), and payload: { flowId, flow? } and/or payload.nodes / top-level nodes. Do not nest expectedRev inside payload. Payload size limit is 1500000 bytes (413 if exceeded). expectedRev is checked against the live rev at submit time (409 if stale). replace_text errors: 400 text_not_found; 409 ambiguous_match with matchCount. Unknown palette types return 400 unknown_node_type with nearest matches — call list_node_types / search_palette and ask the user to install via Manage palette (never auto-install). Returns a lean proposal (id, status, title, storedTitle, flowLabel, displayName, reviewUrl, changeSummary, …) by default; title may gain " in <flow>"; storedTitle is the title as saved (your title without that suffix, or the auto-generated title, which may already name the flow). Pass include_payload=true to include payload and baseFlow. When telling the user about the proposal, cite displayName and reviewUrl — not the raw id. Humans approve on the /ai-access dashboard (reviewUrl opens/scrolls to it).
+Submit a replace_flow proposal for owner approval (does not deploy). Preferred for small string edits: payload: { flowId, nodes: [{ op:"replace_text", node, field, find, replace, occurrence? }] } — find must be unique unless occurrence (1-based) is set; multiple replace_text ops apply in order; yields a short readable diff. Or send a full tab: payload.flow from get_flow (id, type, label?, nodes[], configs?). Inputs (all top-level, next to each other): type="replace_flow", expectedRev (required string from list_flows/get_flow rev; expected_rev alias accepted), optional title (≤80 chars), and payload: { flowId, flow? } and/or payload.nodes / top-level nodes. Do not nest expectedRev inside payload. Secret values appear as "[REDACTED]" in reads; leave the placeholder unchanged to keep the stored secret (it is restored on submit), or replace it with a new value to change it. Payload size limit is 1500000 bytes (413 if exceeded). expectedRev is checked against the live rev at submit time (409 if stale). replace_text errors: 400 text_not_found; 409 ambiguous_match with matchCount. Unknown palette types return 400 unknown_node_type with nearest matches — call list_node_types / search_palette and ask the user to install via Manage palette (never auto-install). Returns a lean proposal (id, status, title, storedTitle, flowLabel, displayName, reviewUrl, changeSummary, …) by default; title may gain " in <flow>"; storedTitle is the title as saved (your title without that suffix, or the auto-generated title, which may already name the flow). Pass include_payload=true to include payload and baseFlow. When telling the user about the proposal, cite displayName and reviewUrl — not the raw id. Humans approve on the /ai-access dashboard (reviewUrl opens/scrolls to it).
 
 | Parameter | Required | Type | Description |
 | --- | --- | --- | --- |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@com55/node-red-ai-access",
-  "version": "0.2.0-beta.4",
+  "version": "0.2.0-beta.5",
   "description": "Node-RED plugin that gives AI agents temporary, owner-approved access via REST and MCP",
   "main": "dist/plugin.cjs",
   "types": "dist/plugin.d.cts",