@push.rocks/smartconfig 6.1.1 → 6.2.2

package/ts/classes.appdata.ts

@@ -17,45 +17,14 @@ function getQenv(): plugins.qenv.Qenv {
 }
 
 // ============================================================================
-// Security - Redaction for sensitive data
+// Value-independent diagnostics
 // ============================================================================
 /**
- * Redacts sensitive values in logs to prevent exposure of secrets
+ * Describe structure without inspecting or serializing configuration contents.
+ * Names cannot reliably identify secrets: every value stays out of diagnostics.
  */
-function redactSensitiveValue(key: string, value: unknown): string {
-  // List of patterns that indicate sensitive data
-  const sensitivePatterns = [
-    /secret/i, /token/i, /key/i, /password/i, /pass/i,
-    /api/i, /credential/i, /auth/i, /private/i, /jwt/i,
-    /cert/i, /signature/i, /bearer/i
-  ];
-
-  // Check if key contains sensitive pattern
-  const isSensitive = sensitivePatterns.some(pattern => pattern.test(key));
-
-  if (isSensitive) {
-    if (typeof value === 'string') {
-      // Show first 3 chars and length for debugging
-      return value.length > 3
-        ? `${value.substring(0, 3)}...[${value.length} chars]`
-        : '[redacted]';
-    }
-    return '[redacted]';
-  }
-
-  // Check if value looks like a JWT token or base64 secret
-  if (typeof value === 'string') {
-    // JWT tokens start with eyJ
-    if (value.startsWith('eyJ')) {
-      return `eyJ...[${value.length} chars]`;
-    }
-    // Very long strings might be encoded secrets
-    if (value.length > 100) {
-      return `${value.substring(0, 50)}...[${value.length} chars total]`;
-    }
-  }
-
-  return JSON.stringify(value);
+function describeValueType(value: unknown): string {
+  return value === null ? 'null' : Array.isArray(value) ? 'array' : typeof value;
 }
 
 // ============================================================================
@@ -64,13 +33,11 @@ function redactSensitiveValue(key: string, value: unknown): string {
 function toBoolean(value: unknown): boolean {
   // If already boolean, return as-is
   if (typeof value === 'boolean') {
-    console.log(`    🔹 toBoolean: value is already boolean: ${value}`);
     return value;
   }
 
   // Handle null/undefined
   if (value == null) {
-    console.log(`    🔹 toBoolean: value is null/undefined, returning false`);
     return false;
   }
 
@@ -79,19 +46,16 @@ function toBoolean(value: unknown): boolean {
 
   // True values: "true", "1", "yes", "y", "on"
   if (['true', '1', 'yes', 'y', 'on'].includes(s)) {
-    console.log(`    🔹 toBoolean: converting "${value}" to true`);
     return true;
   }
 
   // False values: "false", "0", "no", "n", "off"
   if (['false', '0', 'no', 'n', 'off'].includes(s)) {
-    console.log(`    🔹 toBoolean: converting "${value}" to false`);
     return false;
   }
 
   // Default: non-empty string = true, empty = false
   const result = s.length > 0;
-  console.log(`    🔹 toBoolean: defaulting "${value}" to ${result}`);
   return result;
 }
 
@@ -252,14 +216,11 @@ function applyTransforms(value: unknown, transforms: Transform[]): unknown {
  */
 async function processMappingValue(mappingString: string): Promise<unknown> {
   const spec = parseMappingSpec(mappingString);
-  const keyName = spec.source.type === 'env' ? spec.source.key : 'hardcoded';
-
-  console.log(`    🔍 Processing mapping: "${mappingString}"`);
-  console.log(`       Source: ${spec.source.type === 'env' ? `env:${spec.source.key}` : `hard:${spec.source.value}`}`);
+  console.log(`       Source: ${spec.source.type === 'env' ? `env:${spec.source.key}` : 'hardcoded'}`);
   console.log(`       Transforms: ${spec.transforms.length > 0 ? spec.transforms.join(', ') : 'none'}`);
 
   const rawValue = await resolveSource(spec.source);
-  console.log(`       Raw value: ${redactSensitiveValue(keyName, rawValue)} (type: ${typeof rawValue})`);
+  console.log(`       Source value type: ${describeValueType(rawValue)}`);
 
   if (rawValue === undefined || rawValue === null) {
     console.log(`       ⚠️ Raw value is undefined/null, returning undefined`);
@@ -267,7 +228,7 @@ async function processMappingValue(mappingString: string): Promise<unknown> {
   }
 
   const result = applyTransforms(rawValue, spec.transforms);
-  console.log(`       Final value: ${redactSensitiveValue(keyName, result)} (type: ${typeof result})`);
+  console.log(`       Result type: ${describeValueType(result)}`);
   return result;
 }
 
@@ -297,7 +258,7 @@ async function evaluateMappingValue(mappingValue: any): Promise<any> {
       // Only skip if explicitly undefined
       if (evaluated !== undefined) {
         result[key] = evaluated;
-        console.log(`      ✓ Nested key "${key}" = ${redactSensitiveValue(key, evaluated)} (type: ${typeof evaluated})`);
+        console.log(`      ✓ Nested key "${key}" processed (type: ${describeValueType(evaluated)})`);
       } else {
         console.log(`      ⚠️ Nested key "${key}" evaluated to undefined, skipping`);
       }
@@ -461,10 +422,7 @@ export class AppData<T = any> {
       for (const key in this.options.envMapping) {
         try {
           const mappingSpec = this.options.envMapping[key];
-          const specType = mappingSpec === null ? 'null' :
-                          typeof mappingSpec === 'string' ? mappingSpec :
-                          typeof mappingSpec === 'object' ? 'nested object' :
-                          typeof mappingSpec;
+          const specType = describeValueType(mappingSpec);
           console.log(`  → Processing key "${key}" with spec: ${specType}`);
 
           const evaluated = await evaluateMappingValue(mappingSpec);
@@ -473,19 +431,13 @@ export class AppData<T = any> {
           if (evaluated !== undefined) {
             await this.kvStore.writeKey(key as keyof T, evaluated);
             processedCount++;
-            const valueType = evaluated === null ? 'null' :
-                            Array.isArray(evaluated) ? 'array' :
-                            typeof evaluated;
-            const valuePreview = evaluated === null ? 'null' :
-                               typeof evaluated === 'object' ?
-                                 (Array.isArray(evaluated) ? `[${evaluated.length} items]` : `{${Object.keys(evaluated).length} keys}`) :
-                                 redactSensitiveValue(key, evaluated);
-            console.log(`  ✅ Successfully processed key "${key}" = ${valuePreview} (type: ${valueType})`);
+            console.log(`  ✅ Successfully processed key "${key}" (type: ${describeValueType(evaluated)})`);
           } else {
             console.log(`  ⚠️ Key "${key}" evaluated to undefined, skipping`);
           }
-        } catch (err) {
-          console.error(`  ❌ Failed to evaluate envMapping for key "${key}":`, err);
+        } catch {
+          // Parser, resolver and storage exceptions may embed configuration values.
+          console.error(`  ❌ Failed to evaluate envMapping for key "${key}"`);
         }
       }
 

package/ts/sshagent/index.ts

@@ -0,0 +1 @@
+export * from './smartconfig.sshagentsecret.js';