@sandagent/runner-cli 0.9.19-beta.3 → 0.9.19-beta.4

package/dist/bundle.mjs

@@ -1301,16 +1301,13 @@ function redactSecrets(text, secrets) {
   if (Object.keys(secrets).length === 0)
     return text;
   let result = text;
-  const esc = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  for (const k of Object.keys(secrets)) {
-    const ek = esc(k);
-    result = result.replace(new RegExp(`^${ek}\\s*=.*$\\n?`, "gm"), "");
-    result = result.replace(new RegExp(`\\s*["']?${ek}["']?\\s*:\\s*['"][^'"]*['"],?`, "g"), "");
-  }
-  for (const v of Object.values(secrets)) {
-    if (v.length >= 8) {
-      result = result.split(v).join("***");
-    }
+  const escapeRegex = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const values = Object.values(secrets).filter((v) => v.length >= 8).sort((a, b) => b.length - a.length);
+  for (const v of values) {
+    const ev = escapeRegex(v);
+    result = result.replace(new RegExp(`^\\S+=.*${ev}.*$\\n?`, "gm"), "");
+    result = result.replace(new RegExp(`\\s*["']?\\w+["']?\\s*:\\s*['"][^'"]*${ev}[^'"]*['"],?`, "g"), "");
+    result = result.split(v).join("***");
   }
   result = result.replace(/\n{3,}/g, "\n\n");
   return result.trim();
@@ -1646,8 +1643,11 @@ ${options.systemPrompt}` : options.systemPrompt);
                   yield* endTextStreamIfOpen();
                   yield* beginTextStream();
                 } else if (sub.type === "text_delta") {
-                  const delta = sub.delta;
+                  let delta = sub.delta;
                   if (delta) {
+                    if (options.env && Object.keys(options.env).length > 0) {
+                      delta = redactSecrets(delta, options.env);
+                    }
                     if (!textStreamOpen) {
                       yield* beginTextStream();
                     }
@@ -1671,7 +1671,10 @@ ${options.systemPrompt}` : options.systemPrompt);
 
 `;
               } else if (event.type === "tool_execution_end") {
-                const output = extractToolResultText(event.result);
+                let output = extractToolResultText(event.result);
+                if (options.env && Object.keys(options.env).length > 0) {
+                  output = redactSecrets(output, options.env);
+                }
                 yield `data: ${JSON.stringify({ type: "tool-output-available", toolCallId: event.toolCallId, output, isError: event.isError, dynamic: true, providerExecuted: true })}
 
 `;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sandagent/runner-cli",
-  "version": "0.9.19-beta.3",
+  "version": "0.9.19-beta.4",
   "description": "SandAgent Runner CLI - Like gemini-cli or claude-code, runs in your local terminal with AI SDK UI streaming",
   "type": "module",
   "bin": {
@@ -55,10 +55,10 @@
     "vitest": "^1.6.1",
     "@sandagent/runner-core": "0.1.1-beta.0",
     "@sandagent/runner-claude": "0.6.2",
-    "@sandagent/runner-opencode": "0.6.2",
+    "@sandagent/runner-codex": "0.6.2",
     "@sandagent/runner-gemini": "0.6.2",
-    "@sandagent/runner-pi": "0.6.4-beta.0",
-    "@sandagent/runner-codex": "0.6.2"
+    "@sandagent/runner-opencode": "0.6.2",
+    "@sandagent/runner-pi": "0.6.4-beta.0"
   },
   "scripts": {
     "build": "tsc && pnpm bundle",