@posthog/mcp 0.14.1 → 0.16.0

package/dist/extensions/mcp-payloads.js

@@ -38,6 +38,18 @@ const BASE64_DATA_URL_PAYLOAD_PATTERN = /^[A-Za-z0-9+/_-]+={0,2}$/;
 const SIZE_GATE = 10240;
 const POSTHOG_TOKEN_PATTERN = /\bph[a-z]_[A-Za-z0-9_-]{20,}\b/g;
 const SENSITIVE_KEY_PATTERN = /^(authorization|cookie|set-cookie|x-api-key|api[-_]?key|api[-_]?token|access[-_]?token|refresh[-_]?token|token|password|secret|client[-_]?secret|private[-_]?key)$/i;
+const URL_PATTERN = /[a-z][a-z0-9+.-]{0,63}:[^\s<>"]+/gi;
+const URL_PATTERN_ONCE = new RegExp(URL_PATTERN.source, 'i');
+const URL_AUTHORITY_SEARCH = /[a-z][a-z0-9+.-]{0,63}:\/\//i;
+const URL_AUTHORITY_PATTERN = new RegExp(`^${URL_AUTHORITY_SEARCH.source}`, 'i');
+const URL_AUTHORITY_SEARCH_ALL = new RegExp(URL_AUTHORITY_SEARCH.source, 'gi');
+const URL_FIELD_CHARACTERS = '=&';
+const LEGACY_FIELD_SEPARATOR = ';';
+const URL_TRAILING_PUNCTUATION = ".,;:!?)]}'";
+const MAX_URL_LENGTH = 8192;
+const MAX_URL_QUERY_FIELDS = 128;
+const SENSITIVE_QUERY_KEY_SEGMENT_PATTERN = /(^|[-_./;])(auth|token|secret|password|passwd|pwd|credential|signature|sig|key|hmac|sas|bearer|jwt|session|sessionid)([-_./;]|$)/i;
+const SENSITIVE_QUERY_KEY_EXACT_PATTERN = /^(code|AWSAccessKeyId|GoogleAccessId|Policy)$/i;
 const UNICODE_SPACE_PATTERN = /[\u00A0\u1680\u2000-\u200A\u202F\u205F\u3000]/g;
 const EMAIL_PATTERN = /[A-Za-z0-9._%+-]{1,64}@[A-Za-z0-9.-]{1,255}\.[A-Za-z]{2,24}/g;
 const IPV4_PATTERN = /\b(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\b/g;
@@ -53,6 +65,9 @@ function isRecord(value) {
 function shouldRedactKey(key) {
     return SENSITIVE_KEY_PATTERN.test(key);
 }
+function shouldRedactQueryKey(key) {
+    return shouldRedactKey(key) || SENSITIVE_QUERY_KEY_SEGMENT_PATTERN.test(key) || SENSITIVE_QUERY_KEY_EXACT_PATTERN.test(key);
+}
 function isBase64DataUrl(value) {
     const prefix = BASE64_DATA_URL_PREFIX_PATTERN.exec(value);
     if (!prefix) return false;
@@ -64,10 +79,193 @@ function isBase64DataUrl(value) {
     }
     return BASE64_DATA_URL_PAYLOAD_PATTERN.test(payload.replace(/[\r\n]/g, ''));
 }
-function sanitizeString(value) {
-    if (value.length >= SIZE_GATE && (BASE64_PATTERN.test(value) || isBase64DataUrl(value) || BASE64URL_SPECIFIC_CHAR_PATTERN.test(value) && BASE64URL_PATTERN.test(value))) return BINARY_REDACTED_VALUE;
+function exceedsUrlFieldLimit(fields) {
+    return fields.split('&', MAX_URL_QUERY_FIELDS + 1).length > MAX_URL_QUERY_FIELDS;
+}
+function hasLegacySensitiveField(value) {
+    return value.split(LEGACY_FIELD_SEPARATOR).some((piece)=>shouldRedactQueryKey(piece.split('=', 1)[0]));
+}
+function sanitizeUrlFieldValue(key, value, allowNestedUrls) {
+    if (shouldRedactQueryKey(key)) return REDACTED_VALUE;
+    if (value.includes(LEGACY_FIELD_SEPARATOR) && hasLegacySensitiveField(value)) return REDACTED_VALUE;
+    if (!URL_PATTERN_ONCE.test(value)) return value;
+    return allowNestedUrls ? sanitizeUrlsInString(value, {
+        allowNestedUrls: false,
+        stripPunctuation: true
+    }) : REDACTED_VALUE;
+}
+function sanitizeUrlFields(fields, allowNestedUrls) {
+    const sanitized = new URLSearchParams();
+    let changed = false;
+    let lastFieldSensitive = false;
+    for (const [key, value] of new URLSearchParams(fields)){
+        const sanitizedValue = sanitizeUrlFieldValue(key, value, allowNestedUrls);
+        changed ||= sanitizedValue !== value;
+        lastFieldSensitive = shouldRedactQueryKey(key) || sanitizedValue !== value;
+        sanitized.append(key, sanitizedValue);
+    }
+    return {
+        changed,
+        lastFieldSensitive,
+        serialized: sanitized.toString()
+    };
+}
+function splitTrailingPunctuation(value) {
+    let end = value.length;
+    while(end > 0 && URL_TRAILING_PUNCTUATION.includes(value[end - 1]))end--;
+    return {
+        address: value.slice(0, end),
+        suffix: value.slice(end)
+    };
+}
+function sanitizeFragmentTail(tail, headLastFieldSensitive, allowNestedUrls) {
+    if (!headLastFieldSensitive) return sanitizeFragmentPart(tail, allowNestedUrls);
+    return {
+        value: '' === tail ? '' : REDACTED_VALUE,
+        lastFieldSensitive: true
+    };
+}
+function splitFragmentParts(hash) {
+    const fragment = hash.slice(1);
+    const separator = fragment.indexOf('?');
+    if (separator < 0) return {
+        head: fragment,
+        tail: null
+    };
+    return {
+        head: fragment.slice(0, separator),
+        tail: fragment.slice(separator + 1)
+    };
+}
+function sanitizeFragmentPart(part, allowNestedUrls) {
+    if (!part.includes('=')) return {
+        value: sanitizeFragmentText(part, allowNestedUrls),
+        lastFieldSensitive: false
+    };
+    const fields = sanitizeUrlFields(part, allowNestedUrls);
+    return {
+        value: fields.changed ? fields.serialized : part,
+        lastFieldSensitive: fields.lastFieldSensitive
+    };
+}
+function sanitizeFragmentText(text, allowNestedUrls) {
+    if (!allowNestedUrls) return URL_PATTERN_ONCE.test(text) ? REDACTED_VALUE : text;
+    return sanitizeUrlsInString(text, {
+        allowNestedUrls: false,
+        stripPunctuation: true
+    });
+}
+function findEmbeddedAuthorityIndexes(value) {
+    const starts = [
+        ...value.matchAll(URL_AUTHORITY_SEARCH_ALL)
+    ].map((match)=>match.index);
+    const indexes = [];
+    const delimiters = {
+        query: false,
+        fragment: false,
+        fragmentQuery: false
+    };
+    let pending = 0;
+    let inFields = false;
+    let lastStructural = '';
+    for(let cursor = 0; cursor < value.length && pending < starts.length; cursor++){
+        if (starts[pending] === cursor) {
+            if (cursor > 0 && '=' !== lastStructural) indexes.push(cursor);
+            pending++;
+        }
+        const character = value[cursor];
+        if (isDelimiter(character, delimiters, lastStructural)) {
+            lastStructural = character;
+            inFields = true;
+        } else if (inFields && URL_FIELD_CHARACTERS.includes(character)) lastStructural = character;
+    }
+    return indexes;
+}
+function isDelimiter(character, seen, lastStructural) {
+    if ('#' === character) return seen.fragment ? false : seen.fragment = true;
+    if ('?' !== character) return false;
+    if (seen.fragment) {
+        if ('=' === lastStructural) return false;
+        return seen.fragmentQuery ? false : seen.fragmentQuery = true;
+    }
+    return seen.query ? false : seen.query = true;
+}
+function sanitizeUrl(value, mode) {
+    const embedded = findEmbeddedAuthorityIndexes(value);
+    if (0 === embedded.length) return sanitizeSingleUrl(value, mode);
+    let result = '';
+    let start = 0;
+    for (const index of embedded){
+        result += sanitizeSingleUrl(value.slice(start, index), {
+            ...mode,
+            stripPunctuation: false
+        });
+        start = index;
+    }
+    return result + sanitizeSingleUrl(value.slice(start), mode);
+}
+function sanitizeSingleUrl(value, mode) {
+    if (value.length > MAX_URL_LENGTH && URL_AUTHORITY_PATTERN.test(value)) return REDACTED_VALUE;
+    const { address, suffix } = mode.stripPunctuation ? splitTrailingPunctuation(value) : {
+        address: value,
+        suffix: ''
+    };
+    let url;
+    try {
+        url = new URL(address);
+    } catch  {
+        return REDACTED_VALUE + suffix;
+    }
+    const query = url.search.slice(1);
+    const hasFragment = '' !== url.hash;
+    const fragment = splitFragmentParts(url.hash);
+    if (exceedsUrlFieldLimit(query) || exceedsUrlFieldLimit(fragment.head) || exceedsUrlFieldLimit(fragment.tail ?? '')) return REDACTED_VALUE + suffix;
+    let changed = false;
+    if (url.username || url.password) {
+        url.username = REDACTED_VALUE;
+        url.password = '';
+        changed = true;
+    }
+    const sanitizedQuery = sanitizeUrlFields(query, mode.allowNestedUrls);
+    if (sanitizedQuery.changed) {
+        url.search = sanitizedQuery.serialized;
+        changed = true;
+    }
+    const sanitizedHead = sanitizeFragmentPart(fragment.head, mode.allowNestedUrls);
+    const sanitizedTail = null === fragment.tail ? null : sanitizeFragmentTail(fragment.tail, sanitizedHead.lastFieldSensitive, mode.allowNestedUrls);
+    const sanitizedHash = null === sanitizedTail ? sanitizedHead.value : `${sanitizedHead.value}?${sanitizedTail.value}`;
+    if (sanitizedHash !== url.hash.slice(1)) {
+        url.hash = sanitizedHash;
+        changed = true;
+    }
+    const trailingFields = hasFragment ? sanitizedTail ?? sanitizedHead : sanitizedQuery;
+    return (changed ? url.toString() : address) + (trailingFields.lastFieldSensitive ? '' : suffix);
+}
+function sanitizeUrlsInString(text, mode) {
+    return text.replace(URL_PATTERN, (match)=>sanitizeUrl(match, {
+            ...mode,
+            stripPunctuation: mode.stripPunctuation && match.length !== text.length
+        }));
+}
+function isBinaryBlob(value) {
+    return value.length >= SIZE_GATE && (BASE64_PATTERN.test(value) || isBase64DataUrl(value) || BASE64URL_SPECIFIC_CHAR_PATTERN.test(value) && BASE64URL_PATTERN.test(value));
+}
+function redactCredentials(value) {
     return value.replace(POSTHOG_TOKEN_PATTERN, REDACTED_VALUE);
 }
+function redactUrls(value) {
+    return sanitizeUrlsInString(value, {
+        allowNestedUrls: true,
+        stripPunctuation: true
+    });
+}
+function sanitizeString(value) {
+    return isBinaryBlob(value) ? BINARY_REDACTED_VALUE : redactUrls(redactCredentials(value));
+}
+function sanitizeFreeText(value) {
+    if (isBinaryBlob(value)) return BINARY_REDACTED_VALUE;
+    return redactUrls(redactPii(redactCredentials(value)));
+}
 function passesLuhn(digits) {
     let sum = 0;
     let double = false;
@@ -121,13 +319,19 @@ function redactPii(value) {
     return result;
 }
 function sanitizeCapturedValue(value) {
+    return sanitizeValueWith(value, sanitizeString);
+}
+function sanitizeFreeTextValue(value) {
+    return sanitizeValueWith(value, sanitizeFreeText);
+}
+function sanitizeValueWith(value, sanitizeStringFn) {
     if (null == value) return value;
-    if ('string' == typeof value) return sanitizeString(value);
-    if (Array.isArray(value)) return value.map(sanitizeCapturedValue);
+    if ('string' == typeof value) return sanitizeStringFn(value);
+    if (Array.isArray(value)) return value.map((item)=>sanitizeValueWith(item, sanitizeStringFn));
     if (value instanceof Date) return value;
     if ('object' != typeof value) return value;
     const result = {};
-    for (const [key, nestedValue] of Object.entries(value))result[key] = shouldRedactKey(key) ? REDACTED_VALUE : sanitizeCapturedValue(nestedValue);
+    for (const [key, nestedValue] of Object.entries(value))result[key] = shouldRedactKey(key) ? REDACTED_VALUE : sanitizeValueWith(nestedValue, sanitizeStringFn);
     return result;
 }
 function buildCapturedMcpArguments(argumentsValue) {
@@ -160,15 +364,21 @@ function buildCapturedMcpParameters(request) {
 __webpack_require__.d(__webpack_exports__, {
     buildCapturedMcpParameters: ()=>buildCapturedMcpParameters,
     redactPii: ()=>redactPii,
-    sanitizeCapturedValue: ()=>sanitizeCapturedValue
+    sanitizeCapturedValue: ()=>sanitizeCapturedValue,
+    sanitizeFreeText: ()=>sanitizeFreeText,
+    sanitizeFreeTextValue: ()=>sanitizeFreeTextValue
 });
 exports.buildCapturedMcpParameters = __webpack_exports__.buildCapturedMcpParameters;
 exports.redactPii = __webpack_exports__.redactPii;
 exports.sanitizeCapturedValue = __webpack_exports__.sanitizeCapturedValue;
+exports.sanitizeFreeText = __webpack_exports__.sanitizeFreeText;
+exports.sanitizeFreeTextValue = __webpack_exports__.sanitizeFreeTextValue;
 for(var __rspack_i in __webpack_exports__)if (-1 === [
     "buildCapturedMcpParameters",
     "redactPii",
-    "sanitizeCapturedValue"
+    "sanitizeCapturedValue",
+    "sanitizeFreeText",
+    "sanitizeFreeTextValue"
 ].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
 Object.defineProperty(exports, '__esModule', {
     value: true

package/dist/extensions/mcp-payloads.mjs

@@ -9,6 +9,18 @@ const BASE64_DATA_URL_PAYLOAD_PATTERN = /^[A-Za-z0-9+/_-]+={0,2}$/;
 const SIZE_GATE = 10240;
 const POSTHOG_TOKEN_PATTERN = /\bph[a-z]_[A-Za-z0-9_-]{20,}\b/g;
 const SENSITIVE_KEY_PATTERN = /^(authorization|cookie|set-cookie|x-api-key|api[-_]?key|api[-_]?token|access[-_]?token|refresh[-_]?token|token|password|secret|client[-_]?secret|private[-_]?key)$/i;
+const URL_PATTERN = /[a-z][a-z0-9+.-]{0,63}:[^\s<>"]+/gi;
+const URL_PATTERN_ONCE = new RegExp(URL_PATTERN.source, 'i');
+const URL_AUTHORITY_SEARCH = /[a-z][a-z0-9+.-]{0,63}:\/\//i;
+const URL_AUTHORITY_PATTERN = new RegExp(`^${URL_AUTHORITY_SEARCH.source}`, 'i');
+const URL_AUTHORITY_SEARCH_ALL = new RegExp(URL_AUTHORITY_SEARCH.source, 'gi');
+const URL_FIELD_CHARACTERS = '=&';
+const LEGACY_FIELD_SEPARATOR = ';';
+const URL_TRAILING_PUNCTUATION = ".,;:!?)]}'";
+const MAX_URL_LENGTH = 8192;
+const MAX_URL_QUERY_FIELDS = 128;
+const SENSITIVE_QUERY_KEY_SEGMENT_PATTERN = /(^|[-_./;])(auth|token|secret|password|passwd|pwd|credential|signature|sig|key|hmac|sas|bearer|jwt|session|sessionid)([-_./;]|$)/i;
+const SENSITIVE_QUERY_KEY_EXACT_PATTERN = /^(code|AWSAccessKeyId|GoogleAccessId|Policy)$/i;
 const UNICODE_SPACE_PATTERN = /[\u00A0\u1680\u2000-\u200A\u202F\u205F\u3000]/g;
 const EMAIL_PATTERN = /[A-Za-z0-9._%+-]{1,64}@[A-Za-z0-9.-]{1,255}\.[A-Za-z]{2,24}/g;
 const IPV4_PATTERN = /\b(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\b/g;
@@ -24,6 +36,9 @@ function isRecord(value) {
 function shouldRedactKey(key) {
     return SENSITIVE_KEY_PATTERN.test(key);
 }
+function shouldRedactQueryKey(key) {
+    return shouldRedactKey(key) || SENSITIVE_QUERY_KEY_SEGMENT_PATTERN.test(key) || SENSITIVE_QUERY_KEY_EXACT_PATTERN.test(key);
+}
 function isBase64DataUrl(value) {
     const prefix = BASE64_DATA_URL_PREFIX_PATTERN.exec(value);
     if (!prefix) return false;
@@ -35,10 +50,193 @@ function isBase64DataUrl(value) {
     }
     return BASE64_DATA_URL_PAYLOAD_PATTERN.test(payload.replace(/[\r\n]/g, ''));
 }
-function sanitizeString(value) {
-    if (value.length >= SIZE_GATE && (BASE64_PATTERN.test(value) || isBase64DataUrl(value) || BASE64URL_SPECIFIC_CHAR_PATTERN.test(value) && BASE64URL_PATTERN.test(value))) return BINARY_REDACTED_VALUE;
+function exceedsUrlFieldLimit(fields) {
+    return fields.split('&', MAX_URL_QUERY_FIELDS + 1).length > MAX_URL_QUERY_FIELDS;
+}
+function hasLegacySensitiveField(value) {
+    return value.split(LEGACY_FIELD_SEPARATOR).some((piece)=>shouldRedactQueryKey(piece.split('=', 1)[0]));
+}
+function sanitizeUrlFieldValue(key, value, allowNestedUrls) {
+    if (shouldRedactQueryKey(key)) return REDACTED_VALUE;
+    if (value.includes(LEGACY_FIELD_SEPARATOR) && hasLegacySensitiveField(value)) return REDACTED_VALUE;
+    if (!URL_PATTERN_ONCE.test(value)) return value;
+    return allowNestedUrls ? sanitizeUrlsInString(value, {
+        allowNestedUrls: false,
+        stripPunctuation: true
+    }) : REDACTED_VALUE;
+}
+function sanitizeUrlFields(fields, allowNestedUrls) {
+    const sanitized = new URLSearchParams();
+    let changed = false;
+    let lastFieldSensitive = false;
+    for (const [key, value] of new URLSearchParams(fields)){
+        const sanitizedValue = sanitizeUrlFieldValue(key, value, allowNestedUrls);
+        changed ||= sanitizedValue !== value;
+        lastFieldSensitive = shouldRedactQueryKey(key) || sanitizedValue !== value;
+        sanitized.append(key, sanitizedValue);
+    }
+    return {
+        changed,
+        lastFieldSensitive,
+        serialized: sanitized.toString()
+    };
+}
+function splitTrailingPunctuation(value) {
+    let end = value.length;
+    while(end > 0 && URL_TRAILING_PUNCTUATION.includes(value[end - 1]))end--;
+    return {
+        address: value.slice(0, end),
+        suffix: value.slice(end)
+    };
+}
+function sanitizeFragmentTail(tail, headLastFieldSensitive, allowNestedUrls) {
+    if (!headLastFieldSensitive) return sanitizeFragmentPart(tail, allowNestedUrls);
+    return {
+        value: '' === tail ? '' : REDACTED_VALUE,
+        lastFieldSensitive: true
+    };
+}
+function splitFragmentParts(hash) {
+    const fragment = hash.slice(1);
+    const separator = fragment.indexOf('?');
+    if (separator < 0) return {
+        head: fragment,
+        tail: null
+    };
+    return {
+        head: fragment.slice(0, separator),
+        tail: fragment.slice(separator + 1)
+    };
+}
+function sanitizeFragmentPart(part, allowNestedUrls) {
+    if (!part.includes('=')) return {
+        value: sanitizeFragmentText(part, allowNestedUrls),
+        lastFieldSensitive: false
+    };
+    const fields = sanitizeUrlFields(part, allowNestedUrls);
+    return {
+        value: fields.changed ? fields.serialized : part,
+        lastFieldSensitive: fields.lastFieldSensitive
+    };
+}
+function sanitizeFragmentText(text, allowNestedUrls) {
+    if (!allowNestedUrls) return URL_PATTERN_ONCE.test(text) ? REDACTED_VALUE : text;
+    return sanitizeUrlsInString(text, {
+        allowNestedUrls: false,
+        stripPunctuation: true
+    });
+}
+function findEmbeddedAuthorityIndexes(value) {
+    const starts = [
+        ...value.matchAll(URL_AUTHORITY_SEARCH_ALL)
+    ].map((match)=>match.index);
+    const indexes = [];
+    const delimiters = {
+        query: false,
+        fragment: false,
+        fragmentQuery: false
+    };
+    let pending = 0;
+    let inFields = false;
+    let lastStructural = '';
+    for(let cursor = 0; cursor < value.length && pending < starts.length; cursor++){
+        if (starts[pending] === cursor) {
+            if (cursor > 0 && '=' !== lastStructural) indexes.push(cursor);
+            pending++;
+        }
+        const character = value[cursor];
+        if (isDelimiter(character, delimiters, lastStructural)) {
+            lastStructural = character;
+            inFields = true;
+        } else if (inFields && URL_FIELD_CHARACTERS.includes(character)) lastStructural = character;
+    }
+    return indexes;
+}
+function isDelimiter(character, seen, lastStructural) {
+    if ('#' === character) return seen.fragment ? false : seen.fragment = true;
+    if ('?' !== character) return false;
+    if (seen.fragment) {
+        if ('=' === lastStructural) return false;
+        return seen.fragmentQuery ? false : seen.fragmentQuery = true;
+    }
+    return seen.query ? false : seen.query = true;
+}
+function sanitizeUrl(value, mode) {
+    const embedded = findEmbeddedAuthorityIndexes(value);
+    if (0 === embedded.length) return sanitizeSingleUrl(value, mode);
+    let result = '';
+    let start = 0;
+    for (const index of embedded){
+        result += sanitizeSingleUrl(value.slice(start, index), {
+            ...mode,
+            stripPunctuation: false
+        });
+        start = index;
+    }
+    return result + sanitizeSingleUrl(value.slice(start), mode);
+}
+function sanitizeSingleUrl(value, mode) {
+    if (value.length > MAX_URL_LENGTH && URL_AUTHORITY_PATTERN.test(value)) return REDACTED_VALUE;
+    const { address, suffix } = mode.stripPunctuation ? splitTrailingPunctuation(value) : {
+        address: value,
+        suffix: ''
+    };
+    let url;
+    try {
+        url = new URL(address);
+    } catch  {
+        return REDACTED_VALUE + suffix;
+    }
+    const query = url.search.slice(1);
+    const hasFragment = '' !== url.hash;
+    const fragment = splitFragmentParts(url.hash);
+    if (exceedsUrlFieldLimit(query) || exceedsUrlFieldLimit(fragment.head) || exceedsUrlFieldLimit(fragment.tail ?? '')) return REDACTED_VALUE + suffix;
+    let changed = false;
+    if (url.username || url.password) {
+        url.username = REDACTED_VALUE;
+        url.password = '';
+        changed = true;
+    }
+    const sanitizedQuery = sanitizeUrlFields(query, mode.allowNestedUrls);
+    if (sanitizedQuery.changed) {
+        url.search = sanitizedQuery.serialized;
+        changed = true;
+    }
+    const sanitizedHead = sanitizeFragmentPart(fragment.head, mode.allowNestedUrls);
+    const sanitizedTail = null === fragment.tail ? null : sanitizeFragmentTail(fragment.tail, sanitizedHead.lastFieldSensitive, mode.allowNestedUrls);
+    const sanitizedHash = null === sanitizedTail ? sanitizedHead.value : `${sanitizedHead.value}?${sanitizedTail.value}`;
+    if (sanitizedHash !== url.hash.slice(1)) {
+        url.hash = sanitizedHash;
+        changed = true;
+    }
+    const trailingFields = hasFragment ? sanitizedTail ?? sanitizedHead : sanitizedQuery;
+    return (changed ? url.toString() : address) + (trailingFields.lastFieldSensitive ? '' : suffix);
+}
+function sanitizeUrlsInString(text, mode) {
+    return text.replace(URL_PATTERN, (match)=>sanitizeUrl(match, {
+            ...mode,
+            stripPunctuation: mode.stripPunctuation && match.length !== text.length
+        }));
+}
+function isBinaryBlob(value) {
+    return value.length >= SIZE_GATE && (BASE64_PATTERN.test(value) || isBase64DataUrl(value) || BASE64URL_SPECIFIC_CHAR_PATTERN.test(value) && BASE64URL_PATTERN.test(value));
+}
+function redactCredentials(value) {
     return value.replace(POSTHOG_TOKEN_PATTERN, REDACTED_VALUE);
 }
+function redactUrls(value) {
+    return sanitizeUrlsInString(value, {
+        allowNestedUrls: true,
+        stripPunctuation: true
+    });
+}
+function sanitizeString(value) {
+    return isBinaryBlob(value) ? BINARY_REDACTED_VALUE : redactUrls(redactCredentials(value));
+}
+function sanitizeFreeText(value) {
+    if (isBinaryBlob(value)) return BINARY_REDACTED_VALUE;
+    return redactUrls(redactPii(redactCredentials(value)));
+}
 function passesLuhn(digits) {
     let sum = 0;
     let double = false;
@@ -92,13 +290,19 @@ function redactPii(value) {
     return result;
 }
 function sanitizeCapturedValue(value) {
+    return sanitizeValueWith(value, sanitizeString);
+}
+function sanitizeFreeTextValue(value) {
+    return sanitizeValueWith(value, sanitizeFreeText);
+}
+function sanitizeValueWith(value, sanitizeStringFn) {
     if (null == value) return value;
-    if ('string' == typeof value) return sanitizeString(value);
-    if (Array.isArray(value)) return value.map(sanitizeCapturedValue);
+    if ('string' == typeof value) return sanitizeStringFn(value);
+    if (Array.isArray(value)) return value.map((item)=>sanitizeValueWith(item, sanitizeStringFn));
     if (value instanceof Date) return value;
     if ('object' != typeof value) return value;
     const result = {};
-    for (const [key, nestedValue] of Object.entries(value))result[key] = shouldRedactKey(key) ? REDACTED_VALUE : sanitizeCapturedValue(nestedValue);
+    for (const [key, nestedValue] of Object.entries(value))result[key] = shouldRedactKey(key) ? REDACTED_VALUE : sanitizeValueWith(nestedValue, sanitizeStringFn);
     return result;
 }
 function buildCapturedMcpArguments(argumentsValue) {
@@ -128,4 +332,4 @@ function buildCapturedMcpParameters(request) {
         request: capturedRequest
     };
 }
-export { buildCapturedMcpParameters, redactPii, sanitizeCapturedValue };
+export { buildCapturedMcpParameters, redactPii, sanitizeCapturedValue, sanitizeFreeText, sanitizeFreeTextValue };

package/dist/extensions/posthog-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"posthog-events.d.ts","sourceRoot":"","sources":["../../src/extensions/posthog-events.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAyBrC,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,SAAS,CAAA;CAChB;AAED,MAAM,WAAW,gCAAgC;IAC/C,2FAA2F;IAC3F,0BAA0B,CAAC,EAAE,OAAO,CAAA;CACrC;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,KAAK,EACZ,OAAO,GAAE,gCAAqC,GAC7C,mBAAmB,EAAE,CAQvB"}
+{"version":3,"file":"posthog-events.d.ts","sourceRoot":"","sources":["../../src/extensions/posthog-events.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AA0BrC,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,SAAS,CAAA;CAChB;AAED,MAAM,WAAW,gCAAgC;IAC/C,2FAA2F;IAC3F,0BAA0B,CAAC,EAAE,OAAO,CAAA;CACrC;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,KAAK,EACZ,OAAO,GAAE,gCAAqC,GAC7C,mBAAmB,EAAE,CAQvB"}

package/dist/extensions/posthog-events.js

@@ -35,6 +35,7 @@ const external_event_types_js_namespaceObject = require("./event-types.js");
 const BUILT_IN_EVENT_NAME_BY_TYPE = {
     [external_event_types_js_namespaceObject.MCPAnalyticsEventType.custom]: external_constants_js_namespaceObject.PostHogMCPAnalyticsEvent.Custom,
     [external_event_types_js_namespaceObject.MCPAnalyticsEventType.identify]: external_constants_js_namespaceObject.PostHogMCPAnalyticsEvent.Identify,
+    [external_event_types_js_namespaceObject.MCPAnalyticsEventType.mcpFeedback]: external_constants_js_namespaceObject.PostHogMCPAnalyticsEvent.Feedback,
     [external_event_types_js_namespaceObject.MCPAnalyticsEventType.mcpMissingCapability]: external_constants_js_namespaceObject.PostHogMCPAnalyticsEvent.MissingCapability,
     [external_event_types_js_namespaceObject.MCPAnalyticsEventType.mcpInitialize]: external_constants_js_namespaceObject.PostHogMCPAnalyticsEvent.Initialize,
     [external_event_types_js_namespaceObject.MCPAnalyticsEventType.mcpPromptsGet]: external_constants_js_namespaceObject.PostHogMCPAnalyticsEvent.PromptGet,

package/dist/extensions/posthog-events.mjs

@@ -3,6 +3,7 @@ import { MCPAnalyticsEventType } from "./event-types.mjs";
 const BUILT_IN_EVENT_NAME_BY_TYPE = {
     [MCPAnalyticsEventType.custom]: PostHogMCPAnalyticsEvent.Custom,
     [MCPAnalyticsEventType.identify]: PostHogMCPAnalyticsEvent.Identify,
+    [MCPAnalyticsEventType.mcpFeedback]: PostHogMCPAnalyticsEvent.Feedback,
     [MCPAnalyticsEventType.mcpMissingCapability]: PostHogMCPAnalyticsEvent.MissingCapability,
     [MCPAnalyticsEventType.mcpInitialize]: PostHogMCPAnalyticsEvent.Initialize,
     [MCPAnalyticsEventType.mcpPromptsGet]: PostHogMCPAnalyticsEvent.PromptGet,

package/dist/extensions/posthog-mcp.d.ts

@@ -1,5 +1,5 @@
 import { PostHog, type PostHogOptions } from 'posthog-node';
-import type { InitializeCaptureData, MCPAnalyticsOptions, MissingCapabilityCaptureData, PreparedToolCall, PrepareToolCallOptions, PrepareToolListOptions, ToolCallCaptureData, ToolsListCaptureData } from '../types';
+import type { FeedbackCaptureData, CollectFeedbackConfig, InitializeCaptureData, MCPAnalyticsOptions, MissingCapabilityCaptureData, PreparedToolCall, PrepareToolCallOptions, PrepareToolListOptions, ToolCallCaptureData, ToolsListCaptureData } from '../types';
 import { type ContextInjectableTool } from './context-parameters';
 /**
  * Options for {@link PostHogMCP}. A superset of `posthog-node`'s options, plus
@@ -13,6 +13,17 @@ export interface PostHogMCPOptions extends PostHogOptions {
      * can't drift. Defaults to `get_more_tools`.
      */
     missingCapabilityToolName?: string;
+    /**
+     * Enable + configure the `send_feedback` virtual tool: injected by
+     * {@link PostHogMCP.prepareToolList} (when its `collectFeedback` toggle is on)
+     * and detected by {@link PostHogMCP.prepareToolCall}. Set once here so
+     * injection and detection can't drift — without this option, `prepareToolCall`
+     * never flags a call as feedback, so a real tool that uses the name is not
+     * shadowed. Pick a `toolName` no real tool uses. `onFeedback` is ignored on
+     * this path — the host dispatcher routes reports itself via
+     * {@link PreparedToolCall.feedbackReport}.
+     */
+    collectFeedback?: CollectFeedbackConfig;
     /**
      * Capture the calling model from recognized client metadata, with an injected
      * `llm_model` argument as fallback. Off by default.
@@ -73,8 +84,9 @@ export declare class PostHogMCP extends PostHog {
      * Decorate your `tools/list` response with PostHog's analytics affordances:
      * injects the `context` argument into every tool (so agents state their intent,
      * captured as `$mcp_intent`), injects `llm_model` when the constructor's
-     * `captureModel` option is enabled, and appends `get_more_tools` when
-     * `reportMissing` is on. Returns a new array; your tools are untouched.
+     * `captureModel` option is enabled, appends `get_more_tools` when
+     * `reportMissing` is on, and appends `send_feedback` when `collectFeedback` is
+     * on. Returns a new array; your tools are untouched.
      *
      * The appended `get_more_tools` descriptor carries only the base MCP tool fields
      * (name, description, input schema) — not any framework-specific fields your
@@ -128,5 +140,13 @@ export declare class PostHogMCP extends PostHog {
      * to the agent with `getMoreToolsResult()`.
      */
     captureMissingCapability(data: MissingCapabilityCaptureData): void;
+    /**
+     * Capture a `send_feedback` call as an agent-feedback report. Emits
+     * `$mcp_feedback` with the report's `$mcp_feedback_*` properties and its
+     * summary/details as `$mcp_intent`. Reply to the agent with
+     * `sendFeedbackResult()` (or a custom text) after routing the report to your
+     * own feedback backend.
+     */
+    captureFeedback(data: FeedbackCaptureData): void;
 }
 //# sourceMappingURL=posthog-mcp.d.ts.map

package/dist/extensions/posthog-mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"posthog-mcp.d.ts","sourceRoot":"","sources":["../../src/extensions/posthog-mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AAE3D,OAAO,KAAK,EACV,qBAAqB,EAErB,mBAAmB,EAGnB,4BAA4B,EAC5B,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,UAAU,CAAA;AAEjB,OAAO,EAIL,KAAK,qBAAqB,EAC3B,MAAM,sBAAsB,CAAA;AAgB7B;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;OAGG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC,cAAc,CAAC,CAAA;CACnD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,qBAAa,UAAW,SAAQ,OAAO;;gBASzB,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB;IAO3D,8FAA8F;IAC9F,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI;IAkBhD,iEAAiE;IACjE,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,IAAI;IAUpD;;;;;OAKG;IACH,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI;IAclD;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,eAAe,CAAC,KAAK,SAAS,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,GAAE,sBAA2B,GAAG,KAAK,EAAE;IAiCnH;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,eAAe,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,GAAE,sBAA2B,GACnC,gBAAgB;IA4BnB;;;;OAIG;IACH,wBAAwB,CAAC,IAAI,EAAE,4BAA4B,GAAG,IAAI;CAmBnE"}
+{"version":3,"file":"posthog-mcp.d.ts","sourceRoot":"","sources":["../../src/extensions/posthog-mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AAE3D,OAAO,KAAK,EACV,mBAAmB,EAEnB,qBAAqB,EACrB,qBAAqB,EAErB,mBAAmB,EAGnB,4BAA4B,EAC5B,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,UAAU,CAAA;AAUjB,OAAO,EAIL,KAAK,qBAAqB,EAC3B,MAAM,sBAAsB,CAAA;AAgB7B;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,qBAAqB,CAAA;IACvC;;;OAGG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC,cAAc,CAAC,CAAA;CACnD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,qBAAa,UAAW,SAAQ,OAAO;;gBAazB,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB;IAoB3D,8FAA8F;IAC9F,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI;IAkBhD,iEAAiE;IACjE,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,IAAI;IAUpD;;;;;OAKG;IACH,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI;IAclD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,eAAe,CAAC,KAAK,SAAS,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,GAAE,sBAA2B,GAAG,KAAK,EAAE;IAyCnH;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,eAAe,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,GAAE,sBAA2B,GACnC,gBAAgB;IA+BnB;;;;OAIG;IACH,wBAAwB,CAAC,IAAI,EAAE,4BAA4B,GAAG,IAAI;IASlE;;;;;;OAMG;IACH,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI;CAuBjD"}