@sandagent/runner-cli 0.9.19-beta.2 → 0.9.19-beta.4

package/dist/bundle.mjs

@@ -1301,13 +1301,14 @@ function redactSecrets(text, secrets) {
   if (Object.keys(secrets).length === 0)
     return text;
   let result = text;
-  for (const [k, v] of Object.entries(secrets)) {
-    result = result.split(k).join("");
-    if (v.length > 0)
-      result = result.split(v).join("");
+  const escapeRegex = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const values = Object.values(secrets).filter((v) => v.length >= 8).sort((a, b) => b.length - a.length);
+  for (const v of values) {
+    const ev = escapeRegex(v);
+    result = result.replace(new RegExp(`^\\S+=.*${ev}.*$\\n?`, "gm"), "");
+    result = result.replace(new RegExp(`\\s*["']?\\w+["']?\\s*:\\s*['"][^'"]*${ev}[^'"]*['"],?`, "g"), "");
+    result = result.split(v).join("***");
   }
-  result = result.replace(/^\s*=\s*\S*$/gm, "");
-  result = result.replace(/\s*:\s*['"]["'],?\s*/g, "");
   result = result.replace(/\n{3,}/g, "\n\n");
   return result.trim();
 }
@@ -1504,7 +1505,6 @@ function createPiRunner(options = {}) {
           await resourceLoader.reload();
         }
         const customTools = options.env && Object.keys(options.env).length > 0 ? [buildEnvInjectedBashTool(cwd, options.env)] : [];
-        const _secrets = options.env && Object.keys(options.env).length > 0 ? options.env : null;
         const { session } = await createAgentSession({
           cwd,
           model,
@@ -1643,8 +1643,11 @@ ${options.systemPrompt}` : options.systemPrompt);
                   yield* endTextStreamIfOpen();
                   yield* beginTextStream();
                 } else if (sub.type === "text_delta") {
-                  const delta = sub.delta;
+                  let delta = sub.delta;
                   if (delta) {
+                    if (options.env && Object.keys(options.env).length > 0) {
+                      delta = redactSecrets(delta, options.env);
+                    }
                     if (!textStreamOpen) {
                       yield* beginTextStream();
                     }
@@ -1668,7 +1671,10 @@ ${options.systemPrompt}` : options.systemPrompt);
 
 `;
               } else if (event.type === "tool_execution_end") {
-                const output = extractToolResultText(event.result);
+                let output = extractToolResultText(event.result);
+                if (options.env && Object.keys(options.env).length > 0) {
+                  output = redactSecrets(output, options.env);
+                }
                 yield `data: ${JSON.stringify({ type: "tool-output-available", toolCallId: event.toolCallId, output, isError: event.isError, dynamic: true, providerExecuted: true })}
 
 `;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sandagent/runner-cli",
-  "version": "0.9.19-beta.2",
+  "version": "0.9.19-beta.4",
   "description": "SandAgent Runner CLI - Like gemini-cli or claude-code, runs in your local terminal with AI SDK UI streaming",
   "type": "module",
   "bin": {
@@ -55,8 +55,8 @@
     "vitest": "^1.6.1",
     "@sandagent/runner-core": "0.1.1-beta.0",
     "@sandagent/runner-claude": "0.6.2",
-    "@sandagent/runner-gemini": "0.6.2",
     "@sandagent/runner-codex": "0.6.2",
+    "@sandagent/runner-gemini": "0.6.2",
     "@sandagent/runner-opencode": "0.6.2",
     "@sandagent/runner-pi": "0.6.4-beta.0"
   },