@f-o-h/cli 0.1.27 → 0.1.28

package/README.md

@@ -4,7 +4,7 @@ AI-operator provisioning CLI for Front Of House.
 
 Public mirror: https://github.com/iiko38/front-of-house-cli
 
-Current published baseline: `@f-o-h/cli@0.1.27`
+Current published baseline: `@f-o-h/cli@0.1.28`
 
 This mirror is a generated release artifact. The private product monorepo is not
 published here, and no open-source license is granted unless stated separately.

package/dist/foh.js

@@ -32698,7 +32698,7 @@ var StdioServerTransport = class {
 };
 
 // src/lib/cli-version.ts
-var CLI_VERSION = "0.1.27";
+var CLI_VERSION = "0.1.28";
 
 // src/commands/mcp-serve.ts
 var DEFAULT_TIMEOUT_MS = 12e4;
@@ -38394,6 +38394,7 @@ function artifactFiles(runDir) {
   return (0, import_fs12.readdirSync)(runDir).map((name) => (0, import_path10.join)(runDir, name)).filter((path2) => {
     const stat = (0, import_fs12.statSync)(path2);
     const name = path2.split(/[\\/]/).pop() || "";
+    if (name.endsWith(".redacted")) return false;
     return stat.isFile() && (TEXT_ARTIFACT_NAMES.has(name) || name.startsWith("command-output-cmd_"));
   }).sort();
 }
@@ -38973,16 +38974,23 @@ function proofArtifactPasses(runDir) {
 function readIfExists(path2) {
   return (0, import_fs14.existsSync)(path2) ? (0, import_fs14.readFileSync)(path2, "utf8") : "";
 }
-function redactSecretLikeFile(path2) {
+function redactArtifactFile(path2, input = {}) {
   if (!(0, import_fs14.existsSync)(path2)) return;
   const original = (0, import_fs14.readFileSync)(path2, "utf8");
-  const redacted = redactExternalAgentSecretText(original);
+  const redacted = redactExternalAgentArtifactText(original, input);
   if (redacted !== original) (0, import_fs14.writeFileSync)(path2, redacted, "utf8");
 }
-function redactSecretLikeOutputArtifacts(run) {
-  redactSecretLikeFile(run.outputs.jsonl);
-  redactSecretLikeFile(run.outputs.last_message);
-  redactSecretLikeFile(run.outputs.stderr);
+function redactOutputArtifacts(run, input = {}) {
+  redactArtifactFile(run.outputs.jsonl, input);
+  redactArtifactFile(run.outputs.last_message, input);
+  redactArtifactFile(run.outputs.stderr, input);
+  redactArtifactFile((0, import_path12.join)(run.run_dir, "commands.ndjson"), input);
+  if (!(0, import_fs14.existsSync)(run.run_dir)) return;
+  for (const name of (0, import_fs14.readdirSync)(run.run_dir)) {
+    if (name.startsWith("command-output-cmd_") && !name.endsWith(".redacted")) {
+      redactArtifactFile((0, import_path12.join)(run.run_dir, name), input);
+    }
+  }
 }
 function copyCommandCaptureArtifacts(input) {
   const commandLog = (0, import_path12.join)(input.captureDir, "commands.ndjson");
@@ -39167,10 +39175,11 @@ async function executeExternalAgentExecutorPlan(plan, options = {}) {
       timeoutMs: plan.timeout_minutes * 60 * 1e3
     });
     copyCommandCaptureArtifacts({ captureDir: commandCaptureDir, runDir: run.run_dir });
-    redactSecretLikeOutputArtifacts(run);
+    const privateRepoRoot = options.privateRepoRoot || plan.private_repo_root;
+    redactOutputArtifacts(run, { privateRepoRoot });
     const artifactSafety = scanExternalAgentArtifacts({
       runDir: run.run_dir,
-      privateRepoRoot: options.privateRepoRoot || plan.private_repo_root,
+      privateRepoRoot,
       writeRedacted: true
     });
     (0, import_fs14.writeFileSync)(run.outputs.artifact_safety, `${JSON.stringify(artifactSafety, null, 2)}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@f-o-h/cli",
-  "version": "0.1.27",
+  "version": "0.1.28",
   "description": "FOH CLI - AI-operator provisioning tool for Front Of House",
   "license": "UNLICENSED",
   "bin": {