@rosthq/cli 0.7.151 → 0.7.152

package/dist/index.js

@@ -30133,6 +30133,8 @@ function hasSecretShapedString(value) {
 }
 var SECRET_KEY = /(api[_-]?key|secret|password|token|authorization|credential|private[_-]?key)/i;
 var MAX_ARRAY_ENTRIES = 50;
+var MAX_SECRET_SHAPED_VALUE_DEPTH = 8;
+var MAX_SECRET_SHAPED_VALUE_NODES = 1e6;
 function hasSecretShapedContent(value) {
   if (typeof value === "string") {
     return hasSecretShapedString(value);
@@ -30145,18 +30147,65 @@ function hasSecretShapedContent(value) {
   }
   return false;
 }
-function hasSecretShapedValue(value) {
-  if (typeof value === "string") {
-    return hasSecretShapedString(value);
-  }
-  if (Array.isArray(value)) {
-    return value.some(hasSecretShapedValue);
-  }
-  if (value && typeof value === "object") {
-    return Object.values(value).some(hasSecretShapedValue);
+function scanSecretShapedValue(value, budget) {
+  const stack = [{ value, depth: 0 }];
+  const seen = /* @__PURE__ */ new WeakSet();
+  while (stack.length > 0) {
+    const entry = stack.pop();
+    if (!entry) {
+      continue;
+    }
+    const { value: current, depth } = entry;
+    budget.visitedNodes += 1;
+    if (budget.visitedNodes > MAX_SECRET_SHAPED_VALUE_NODES) {
+      return true;
+    }
+    if (depth > MAX_SECRET_SHAPED_VALUE_DEPTH && current !== "[REDACTED]" && current !== "[MAX_DEPTH]") {
+      return true;
+    }
+    if (typeof current === "string") {
+      if (hasSecretShapedString(current)) {
+        return true;
+      }
+      continue;
+    }
+    if (!current || typeof current !== "object") {
+      continue;
+    }
+    if (seen.has(current)) {
+      continue;
+    }
+    seen.add(current);
+    try {
+      if (Array.isArray(current)) {
+        if (current.length > MAX_SECRET_SHAPED_VALUE_NODES) {
+          return true;
+        }
+        for (let index = current.length - 1; index >= 0; index -= 1) {
+          stack.push({ value: current[index], depth: depth + 1 });
+        }
+      } else {
+        const keys = Object.keys(current);
+        if (keys.length > MAX_SECRET_SHAPED_VALUE_NODES) {
+          return true;
+        }
+        for (let index = keys.length - 1; index >= 0; index -= 1) {
+          const key = keys[index];
+          if (key === void 0) {
+            return true;
+          }
+          stack.push({ value: current[key], depth: depth + 1 });
+        }
+      }
+    } catch {
+      return true;
+    }
   }
   return false;
 }
+function hasSecretShapedValue(value) {
+  return scanSecretShapedValue(value, { visitedNodes: 0 });
+}
 
 // ../../packages/protocol/src/agent-setup.ts
 var uuidSchema3 = external_exports.string().uuid();