@hasna/terminal 0.8.0 → 1.0.0

package/dist/cli.js

@@ -178,7 +178,9 @@ if (args[0] === "exec") {
         // Command failed — parse error output for structured diagnosis
         const stderr = e.stderr?.toString() ?? "";
         const stdout = e.stdout?.toString() ?? "";
-        const errorOutput = stripNoise(stripAnsi(stdout + stderr)).cleaned;
+        // Deduplicate: if stderr content appears in stdout, skip it
+        const combined = stderr && stdout.includes(stderr.trim()) ? stdout : stdout + stderr;
+        const errorOutput = stripNoise(stripAnsi(combined)).cleaned;
         // Try structured error parsing
         const { errorParser } = await import("./parsers/errors.js");
         if (errorOutput.length > 200 && errorParser.detect(actualCmd, errorOutput)) {

package/dist/noise-filter.js

@@ -33,6 +33,21 @@ const NOISE_PATTERNS = [
     // Generic download/upload progress
     /^\s*\d+(\.\d+)?\s*[KMG]?B\s*\/\s*\d+(\.\d+)?\s*[KMG]?B\b/,
 ];
+// Sensitive env var patterns — redact values, keep names only if needed
+const SENSITIVE_PATTERNS = [
+    /^(.*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|AUTH).*?)=(.+)$/i,
+    /^(.*(?:API_KEY|ACCESS_KEY|PRIVATE_KEY|CLIENT_SECRET).*?)=(.+)$/i,
+];
+/** Redact sensitive values in output (env vars, credentials) */
+function redactSensitive(line) {
+    for (const pattern of SENSITIVE_PATTERNS) {
+        const match = line.match(pattern);
+        if (match) {
+            return `${match[1]}=[REDACTED]`;
+        }
+    }
+    return line;
+}
 /** Strip noise lines from output. Returns cleaned output + count of lines removed. */
 export function stripNoise(output) {
     const lines = output.split("\n");
@@ -64,7 +79,8 @@ export function stripNoise(output) {
             kept.push(parts[parts.length - 1]);
             continue;
         }
-        kept.push(line);
+        // Redact sensitive values (env vars with KEY, TOKEN, SECRET, etc.)
+        kept.push(redactSensitive(line));
     }
     return { cleaned: kept.join("\n"), linesRemoved: removed };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/terminal",
-  "version": "0.8.0",
+  "version": "1.0.0",
   "description": "Smart terminal wrapper for AI agents and humans — structured output, token compression, MCP server, natural language",
   "type": "module",
   "bin": {

package/src/cli.tsx

@@ -181,7 +181,9 @@ if (args[0] === "exec") {
     // Command failed — parse error output for structured diagnosis
     const stderr = e.stderr?.toString() ?? "";
     const stdout = e.stdout?.toString() ?? "";
-    const errorOutput = stripNoise(stripAnsi(stdout + stderr)).cleaned;
+    // Deduplicate: if stderr content appears in stdout, skip it
+    const combined = stderr && stdout.includes(stderr.trim()) ? stdout : stdout + stderr;
+    const errorOutput = stripNoise(stripAnsi(combined)).cleaned;
 
     // Try structured error parsing
     const { errorParser } = await import("./parsers/errors.js");

package/src/noise-filter.ts

@@ -41,6 +41,23 @@ const NOISE_PATTERNS: RegExp[] = [
   /^\s*\d+(\.\d+)?\s*[KMG]?B\s*\/\s*\d+(\.\d+)?\s*[KMG]?B\b/,
 ];
 
+// Sensitive env var patterns — redact values, keep names only if needed
+const SENSITIVE_PATTERNS = [
+  /^(.*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|AUTH).*?)=(.+)$/i,
+  /^(.*(?:API_KEY|ACCESS_KEY|PRIVATE_KEY|CLIENT_SECRET).*?)=(.+)$/i,
+];
+
+/** Redact sensitive values in output (env vars, credentials) */
+function redactSensitive(line: string): string {
+  for (const pattern of SENSITIVE_PATTERNS) {
+    const match = line.match(pattern);
+    if (match) {
+      return `${match[1]}=[REDACTED]`;
+    }
+  }
+  return line;
+}
+
 /** Strip noise lines from output. Returns cleaned output + count of lines removed. */
 export function stripNoise(output: string): { cleaned: string; linesRemoved: number } {
   const lines = output.split("\n");
@@ -76,7 +93,8 @@ export function stripNoise(output: string): { cleaned: string; linesRemoved: num
       continue;
     }
 
-    kept.push(line);
+    // Redact sensitive values (env vars with KEY, TOKEN, SECRET, etc.)
+    kept.push(redactSensitive(line));
   }
 
   return { cleaned: kept.join("\n"), linesRemoved: removed };