@hasna/configs 0.2.10 → 0.2.11

package/dist/mcp/index.js

@@ -395,6 +395,12 @@ var init_apply = __esm(() => {
 });
 
 // src/lib/redact.ts
+var exports_redact = {};
+__export(exports_redact, {
+  scanSecrets: () => scanSecrets,
+  redactContent: () => redactContent,
+  hasSecrets: () => hasSecrets
+});
 function redactShell(content) {
   const redacted = [];
   const lines = content.split(`
@@ -554,6 +560,13 @@ function redactContent(content, format) {
       return redactGeneric(content);
   }
 }
+function scanSecrets(content, format) {
+  const r = redactContent(content, format);
+  return r.redacted;
+}
+function hasSecrets(content, format) {
+  return scanSecrets(content, format).length > 0;
+}
 var SECRET_KEY_PATTERN, VALUE_PATTERNS, MIN_SECRET_VALUE_LEN = 8;
 var init_redact = __esm(() => {
   SECRET_KEY_PATTERN = /^(.*_?API_?KEY|.*_?TOKEN|.*_?SECRET|.*_?PASSWORD|.*_?PASSWD|.*_?CREDENTIAL|.*_?AUTH(?:_TOKEN|_KEY|ORIZATION)?|.*_?PRIVATE_?KEY|.*_?ACCESS_?KEY|.*_?CLIENT_?SECRET|.*_?SIGNING_?KEY|.*_?ENCRYPTION_?KEY|.*_AUTH_TOKEN)$/i;
@@ -1000,14 +1013,15 @@ var TOOL_DOCS = {
   list_profiles: "List all profiles. Returns array of profile objects.",
   apply_profile: "Apply all configs in a profile to disk. Params: id_or_slug, dry_run?. Returns array of apply results.",
   get_snapshot: "Get snapshot(s) for a config. Params: config_id_or_slug, version?. Returns latest snapshot or specific version.",
-  get_status: "Single-call orientation. Returns: total configs, counts by category, drifted count, unredacted secrets, templates, DB path.",
+  get_status: "Single-call orientation. Returns: total configs, counts by category, templates, DB path.",
+  scan_secrets: "Scan configs for unredacted secrets. Params: id_or_slug? (omit for all known), fix? (true to redact in-place). Returns findings.",
   sync_known: "Sync all known config files from disk into DB. Params: agent?, category?. Replaces sync_directory for standard use.",
   search_tools: "Search tool descriptions. Params: query. Returns matching tool names and descriptions.",
   describe_tools: "Get full descriptions for tools. Params: names? (array). Returns tool docs."
 };
 var PROFILES = {
   minimal: ["get_status", "get_config", "sync_known"],
-  standard: ["list_configs", "get_config", "create_config", "update_config", "apply_config", "sync_known", "get_status", "list_profiles", "apply_profile", "search_tools", "describe_tools"],
+  standard: ["list_configs", "get_config", "create_config", "update_config", "apply_config", "sync_known", "get_status", "scan_secrets", "list_profiles", "apply_profile", "search_tools", "describe_tools"],
   full: []
 };
 var activeProfile = process.env["CONFIGS_PROFILE"] || "full";
@@ -1024,6 +1038,7 @@ var ALL_LEAN_TOOLS = [
   { name: "get_snapshot", inputSchema: { type: "object", properties: { config_id_or_slug: { type: "string" }, version: { type: "number" } }, required: ["config_id_or_slug"] } },
   { name: "get_status", inputSchema: { type: "object", properties: {} } },
   { name: "sync_known", inputSchema: { type: "object", properties: { agent: { type: "string" }, category: { type: "string" } } } },
+  { name: "scan_secrets", inputSchema: { type: "object", properties: { id_or_slug: { type: "string" }, fix: { type: "boolean" } } } },
   { name: "search_tools", inputSchema: { type: "object", properties: { query: { type: "string" } }, required: ["query"] } },
   { name: "describe_tools", inputSchema: { type: "object", properties: { names: { type: "array", items: { type: "string" } } } } }
 ];
@@ -1131,6 +1146,23 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
         });
         return ok(result);
       }
+      case "scan_secrets": {
+        const { scanSecrets: scanSecrets2, redactContent: redactContent2 } = await Promise.resolve().then(() => (init_redact(), exports_redact));
+        const configs = args["id_or_slug"] ? [getConfig(args["id_or_slug"])] : listConfigs({ kind: "file" });
+        const findings = [];
+        for (const c of configs) {
+          const fmt = c.format;
+          const secrets = scanSecrets2(c.content, fmt);
+          if (secrets.length > 0) {
+            findings.push({ slug: c.slug, secrets: secrets.length, vars: secrets.map((s) => s.varName) });
+            if (args["fix"]) {
+              const { content, isTemplate } = redactContent2(c.content, fmt);
+              updateConfig(c.id, { content, is_template: isTemplate });
+            }
+          }
+        }
+        return ok({ clean: findings.length === 0, findings, fixed: !!args["fix"] });
+      }
       case "search_tools": {
         const query = (args["query"] || "").toLowerCase();
         const matches = Object.entries(TOOL_DOCS).filter(([k, v]) => k.includes(query) || v.toLowerCase().includes(query)).map(([name2, description]) => ({ name: name2, description }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/configs",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "description": "AI coding agent configuration manager — store, version, apply, and share all your AI coding configs. CLI + MCP + REST API + Dashboard.",
   "type": "module",
   "main": "dist/index.js",