@debugg-ai/debugg-ai-mcp 6.0.0 → 6.0.2

package/dist/handlers/testPageChangesHandler.js

@@ -320,6 +320,10 @@ async function testPageChangesHandlerInner(input, context, rawProgressCallback)
             await progressCallback({ progress: 2, total: TOTAL_STEPS, message: 'Locating evaluation workflow template...' });
         }
         const repoName = input.repoName || detectRepoName();
+        // An environment belongs to one project, so naming one names the project:
+        // the backend files the run under it (platform-98fv.21). The working folder's
+        // repo name is only a guess, used when no environment is named.
+        const namedEnvironmentId = input.environmentId || input.auth?.environmentId;
         const [templateUuid, projectUuid] = await Promise.all([
             // Cache key = the dispatch slug so the cache key and the lookup can never
             // drift apart (bug clka: the key used to be a decoupled 'app evaluation'
@@ -327,7 +331,7 @@ async function testPageChangesHandlerInner(input, context, rawProgressCallback)
             getCachedTemplateUuid(getEvalTemplateSlug(), async () => {
                 return client.workflows.findEvaluationTemplate();
             }),
-            repoName
+            !namedEnvironmentId && repoName
                 ? getCachedProjectUuid(repoName, async (repo) => {
                     try {
                         return await client.findProjectByRepoName(repo);
@@ -346,7 +350,7 @@ async function testPageChangesHandlerInner(input, context, rawProgressCallback)
         // semantics: project_id is required). Surfacing "link this repo to a
         // project" now — before executeWorkflow — beats letting a backend workflow
         // node fail mid-run several minutes into the evaluation.
-        if (!projectUuid) {
+        if (!projectUuid && !namedEnvironmentId) {
             const payload = {
                 error: 'ProjectRequired',
                 message: repoName

package/dist/services/index.js

@@ -82,8 +82,9 @@ export class DebuggAIServerClient {
             || p.repo?.name?.endsWith(`/${short}`));
         if (repoMatch)
             return repoMatch;
-        // Fallback to first search result
-        return projects[0];
+        // No match is no project. The first search hit is a different project whose
+        // name merely contains this one (platform-98fv.21).
+        return null;
     }
     /**
      * Simplified project shape used by get/update tools — drops heavy internal

package/dist/services/workflows.js

@@ -3,6 +3,7 @@
  * 4-step integration: find template → execute → poll → result
  */
 import { Telemetry, TelemetryEvents } from '../utils/telemetry.js';
+import { redactRunSecrets } from '../utils/redactRunSecrets.js';
 const TERMINAL_STATUSES = new Set(['completed', 'failed', 'cancelled']);
 // Exponential backoff polling: short executions (10-15s crawls) detect terminal
 // status quickly via the early polls; long executions (60-150s browser runs)
@@ -75,7 +76,9 @@ export const createWorkflowsService = (tx) => {
             if (!response) {
                 throw new Error(`Execution not found: ${executionUuid}`);
             }
-            return response;
+            // platform-98fv.25: every caller (executions tool, check_app polling) reads
+            // the execution through here, so this is where the relay drops run secrets.
+            return redactRunSecrets(response);
         },
         async listExecutions(filters) {
             const { makePageInfo } = await import('../utils/pagination.js');

package/dist/utils/redactRunSecrets.js

@@ -0,0 +1,40 @@
+/**
+ * platform-98fv.25: the relay never passes a run secret on.
+ *
+ * The backend used to persist the password a check_app_in_browser run was given
+ * and serve it back in `contextData.env.password`, `state.env.password` and every
+ * node payload. The backend now seals it at rest and redacts it on read; this is
+ * the relay's own copy of that rule, so an older or misbehaving backend still
+ * cannot leak through the MCP.
+ *
+ * Deliberately narrow and exact (mirrors sentinal `run_secrets.redact_run_secrets`):
+ *   - any non-empty string under a key named exactly `password` / `passwd`;
+ *   - every string value of a `projectSecrets` / `project_secrets` mapping;
+ *   - any string carrying the backend's sealed-value prefix.
+ * Identifiers such as `browserSessionId` / `resolvedCredentialId` are untouched.
+ */
+export const REDACTED = '[REDACTED]';
+const SEALED_PREFIX = 'sealed:v1:';
+const SECRET_KEYS = new Set(['password', 'passwd']);
+const SECRET_MAPPING_KEYS = new Set(['projectSecrets', 'project_secrets']);
+function isSealed(v) {
+    return typeof v === 'string' && v.startsWith(SEALED_PREFIX);
+}
+export function redactRunSecrets(value, inMapping = false) {
+    if (Array.isArray(value)) {
+        return value.map((v) => (isSealed(v) ? REDACTED : redactRunSecrets(v)));
+    }
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            if (typeof v === 'string' && v && (inMapping || SECRET_KEYS.has(k) || isSealed(v))) {
+                out[k] = REDACTED;
+            }
+            else {
+                out[k] = redactRunSecrets(v, SECRET_MAPPING_KEYS.has(k));
+            }
+        }
+        return out;
+    }
+    return value;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@debugg-ai/debugg-ai-mcp",
-  "version": "6.0.0",
+  "version": "6.0.2",
   "description": "Zero-Config, Fully AI-Managed End-to-End Testing for all code gen platforms.",
   "type": "module",
   "caddy": "2.11.3",