@devvit/cli 0.12.9-next-2026-01-12-21-31-23-d0283fd9f.0 → 0.12.9-next-2026-01-13-18-29-17-b6cd561bc.0

package/bin/devvit.js

@@ -7,13 +7,16 @@ import { config as dotenvConfig } from 'dotenv';
 
 import { getCurrentCommandEventData } from '../dist/lib/hooks/init/fire-event.js';
 import { sendEvent } from '../dist/util/metrics.js';
+import { shouldRedact } from '../dist/util/redaction.js';
 
 dotenvConfig();
 
 run(undefined, import.meta.url)
   .then(() => flush())
   .catch(async (err) => {
-    const rawCommand = `devvit ${process.argv.slice(2).join(' ')}`;
+    const argv = process.argv.slice(2);
+    const shouldRedactRawCommandLine = shouldRedact(argv);
+    const rawCommand = shouldRedactRawCommandLine ? '<redacted>' : `devvit ${argv.join(' ')}`;
 
     const event = {
       source: 'devplatform_cli',
@@ -23,8 +26,12 @@ run(undefined, import.meta.url)
         ...(getCurrentCommandEventData() ?? {
           cli_raw_command_line: rawCommand,
         }),
-        cli_error_message: StringUtil.caughtToString(err, 'message'),
-        cli_error_stack: StringUtil.caughtToString(err, 'stack'),
+        cli_error_message: shouldRedactRawCommandLine
+          ? '<redacted>'
+          : StringUtil.caughtToString(err, 'message'),
+        cli_error_stack: shouldRedactRawCommandLine
+          ? '<redacted>'
+          : StringUtil.caughtToString(err, 'stack'),
       },
     };
     await sendEvent(event);

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAc1E,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAuBlE,MAAM,CAAC,OAAO,OAAO,IAAK,SAAQ,aAAa;;IAC7C,OAAgB,OAAO,EAAE,MAAM,EAAE,CAAW;IAC5C,OAAgB,WAAW,SAA0B;IAErD,OAAgB,QAAQ,WAA6C;IAErE,OAAgB,IAAI;;MAMT;IAEX,OAAgB,KAAK;;;MAWV;IA+BI,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA4OpC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,MAAM,EAAE;IAAE,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC5D,OAAO,CAAC,MAAM,CAAC,CAOjB;AAgGD,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAc1E;AAED,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASxE;AACD,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB3F;AAED,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;IAAE,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAClC,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAW/B"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAc1E,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAuBlE,MAAM,CAAC,OAAO,OAAO,IAAK,SAAQ,aAAa;;IAC7C,OAAgB,OAAO,EAAE,MAAM,EAAE,CAAW;IAC5C,OAAgB,WAAW,SAA0B;IAErD,OAAgB,QAAQ,WAA6C;IAErE,OAAgB,IAAI;;MAMT;IAEX,OAAgB,KAAK;;;MAWV;IA8BI,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA4OpC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,MAAM,EAAE;IAAE,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC5D,OAAO,CAAC,MAAM,CAAC,CAOjB;AAgGD,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAc1E;AAED,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASxE;AACD,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB3F;AAED,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;IAAE,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAClC,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAW/B"}

package/dist/commands/init.js

@@ -57,7 +57,7 @@ class Init extends DevvitCommand {
             source: 'devplatform_cli',
             noun: 'init',
             devplatform: {
-                cli_raw_command_line: 'devvit ' + process.argv[2] + ' ' + redactCode(process.argv.slice(3)).join(' '),
+                cli_raw_command_line: 'devvit ' + process.argv.slice(2).join(' '),
                 cli_is_valid_command: true,
                 cli_command: 'init',
             },
@@ -438,6 +438,3 @@ function syncDependenciesToCurrentCliVersion(deps) {
         }
     }
 }
-function redactCode(args) {
-    return args.map((arg) => (arg.toLowerCase().includes('--') ? arg : '<code redacted>'));
-}

package/dist/lib/hooks/init/fire-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fire-event.d.ts","sourceRoot":"","sources":["../../../../src/lib/hooks/init/fire-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAcxC,wBAAgB,0BAA0B;0BANd,MAAM;0BACN,OAAO;iBAChB,MAAM,GAAG,SAAS;cAMpC;AAED,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,MAAM,CAyBtB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"fire-event.d.ts","sourceRoot":"","sources":["../../../../src/lib/hooks/init/fire-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAexC,wBAAgB,0BAA0B;0BANd,MAAM;0BACN,OAAO;iBAChB,MAAM,GAAG,SAAS;cAMpC;AAED,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,MAAM,CA2BtB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/lib/hooks/init/fire-event.js

@@ -1,4 +1,5 @@
 import { sendEvent } from '../../../util/metrics.js';
+import { shouldRedact } from '../../../util/redaction.js';
 // Yes, this is a global variable. It's not ideal, but it's the only way to
 // preserve the data from the `init` hook into the error handler.
 let CURRENT_COMMAND_EVENT_DATA = undefined;
@@ -7,12 +8,14 @@ export function getCurrentCommandEventData() {
 }
 const hook = async function (options) {
     const isValidCommand = options.id && options.config.commandIDs.includes(options.id);
-    // argv[0] is the path to node
-    // argv[1] is the path to the JS script that was run
-    // we only need indices 2+
-    const rawCommand = `devvit ${process.argv.slice(2).join(' ')}`;
+    // Do not capture init's argv. The init "code" can be passed via argv and is a one-time-use token.
+    // Also do not capture argv for `settings` commands because users may include secrets and we don't want
+    // to accidentally ingest them (especially on failures).
+    const argv = process.argv.slice(2);
+    const shouldRedactRawCommandLine = shouldRedact(argv);
+    const cliRawCommandLine = shouldRedactRawCommandLine ? '<redacted>' : `devvit ${argv.join(' ')}`;
     CURRENT_COMMAND_EVENT_DATA = {
-        cli_raw_command_line: rawCommand,
+        cli_raw_command_line: cliRawCommandLine,
         cli_is_valid_command: Boolean(isValidCommand),
         cli_command: isValidCommand ? options.id : undefined,
     };

package/dist/util/redaction.d.ts

@@ -0,0 +1,2 @@
+export declare function shouldRedact(argv: string[]): boolean;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/util/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/util/redaction.ts"],"names":[],"mappings":"AAAA,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAGpD"}

package/dist/util/redaction.js

@@ -0,0 +1,4 @@
+export function shouldRedact(argv) {
+    // Users may include secrets when using this command incorrectly, so we redact it.
+    return argv[0] === 'settings' && argv[1] === 'set';
+}

package/dist/util/redaction.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=redaction.test.d.ts.map

package/dist/util/redaction.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.test.d.ts","sourceRoot":"","sources":["../../src/util/redaction.test.ts"],"names":[],"mappings":""}

package/dist/util/redaction.test.js

@@ -0,0 +1,20 @@
+import { describe, expect, test } from 'vitest';
+import { shouldRedact } from './redaction.js';
+describe('shouldRedact', () => {
+    test('redacts settings set', () => {
+        expect(shouldRedact(['settings', 'set'])).toBe(true);
+        expect(shouldRedact(['settings', 'set', 'foo', 'bar'])).toBe(true);
+    });
+    test('does not redact settings get', () => {
+        expect(shouldRedact(['settings', 'get'])).toBe(false);
+        expect(shouldRedact(['settings', 'get', 'foo'])).toBe(false);
+    });
+    test('does not redact other settings commands', () => {
+        expect(shouldRedact(['settings', 'list'])).toBe(false);
+        expect(shouldRedact(['settings'])).toBe(false);
+    });
+    test('does not redact other commands', () => {
+        expect(shouldRedact(['deploy'])).toBe(false);
+        expect(shouldRedact(['upload'])).toBe(false);
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devvit/cli",
-  "version": "0.12.9-next-2026-01-12-21-31-23-d0283fd9f.0",
+  "version": "0.12.9-next-2026-01-13-18-29-17-b6cd561bc.0",
   "description": "Reddit's Dev Platform CLI Tool",
   "license": "BSD-3-Clause",
   "author": "@reddit/dev-platform",
@@ -26,7 +26,6 @@
     "build": "rm -rf dist && tsc",
     "clean": "rm -rf .turbo coverage dist docs.json oclif.manifest.json",
     "clobber": "yarn clean && rm -rf node_modules",
-    "dev": "tsc --watch",
     "install:dev": "./scripts/install.sh",
     "lint": "redlint .",
     "lint:fix": "yarn lint --fix",
@@ -41,10 +40,10 @@
   },
   "types": "dist/index.d.ts",
   "dependencies": {
-    "@devvit/build-pack": "0.12.9-next-2026-01-12-21-31-23-d0283fd9f.0",
-    "@devvit/protos": "0.12.9-next-2026-01-12-21-31-23-d0283fd9f.0",
-    "@devvit/public-api": "0.12.9-next-2026-01-12-21-31-23-d0283fd9f.0",
-    "@devvit/shared-types": "0.12.9-next-2026-01-12-21-31-23-d0283fd9f.0",
+    "@devvit/build-pack": "0.12.9-next-2026-01-13-18-29-17-b6cd561bc.0",
+    "@devvit/protos": "0.12.9-next-2026-01-13-18-29-17-b6cd561bc.0",
+    "@devvit/public-api": "0.12.9-next-2026-01-13-18-29-17-b6cd561bc.0",
+    "@devvit/shared-types": "0.12.9-next-2026-01-13-18-29-17-b6cd561bc.0",
     "@improbable-eng/grpc-web": "0.15.0",
     "@improbable-eng/grpc-web-node-http-transport": "0.15.0",
     "@oclif/core": "2.9.4",
@@ -75,8 +74,8 @@
     "ws": "8.18.0"
   },
   "devDependencies": {
-    "@devvit/repo-tools": "0.12.9-next-2026-01-12-21-31-23-d0283fd9f.0",
-    "@devvit/tsconfig": "0.12.9-next-2026-01-12-21-31-23-d0283fd9f.0",
+    "@devvit/repo-tools": "0.12.9-next-2026-01-13-18-29-17-b6cd561bc.0",
+    "@devvit/tsconfig": "0.12.9-next-2026-01-13-18-29-17-b6cd561bc.0",
     "@types/file-type": "10.9.1",
     "@types/inquirer": "9.0.3",
     "@types/js-yaml": "4.0.5",
@@ -112,5 +111,5 @@
       ]
     }
   },
-  "gitHead": "b71906b170eed394c98a7ef6665c6d6deb90a6d2"
+  "gitHead": "82aa13486eb36fcac0d2820d6a42164840e1015a"
 }