@sjawhar/pi-legion 8.16.0 → 8.16.1

package/dist/legion.js

@@ -15307,25 +15307,21 @@ var checkWebSearch = async (host2, input, signal) => {
     return failed(`web_search failed: ${firstLine(text)}`);
   return ok(`web_search registered; provider ${String(provider)} answered in ${elapsed} ms`);
 };
-var URL_USERINFO = /([a-z][a-z0-9+.-]*:\/\/)[^/\s@]+@/gi;
 function mcpErrorFor(errors3, name) {
-  let quoted;
   for (const entry of errors3) {
     if (typeof entry !== "object" || entry === null) {
       if (!String(entry).includes(name))
         continue;
-      quoted = String(entry);
-      break;
+      return String(entry);
     }
     const record2 = entry;
     const names = [record2.server, record2.name, record2.path];
     if (!names.some((value) => value === name || value === `mcp:${name}`))
       continue;
     const message = record2.error ?? record2.message;
-    quoted = message === undefined ? String(entry) : String(message);
-    break;
+    return message === undefined ? String(entry) : String(message);
   }
-  return quoted?.replace(URL_USERINFO, "$1***@");
+  return;
 }
 var checkMCP = async (host2, input, signal) => {
   const { configs, sources } = await host2.loadMCPConfigs(input.cwd);
@@ -15465,6 +15461,54 @@ var CHECKS = {
   "dispatch-envoy-tools": checkDispatchEnvoyTools,
   github: checkGitHub
 };
+var MAX_DETAIL_BYTES = 1024;
+var HELD = "\uFFFF";
+function isSpace(code) {
+  return code >= 9 && code <= 13 || code === 32 || code === 133 || code === 160 || code === 5760 || code >= 8192 && code <= 8202 || code === 8232 || code === 8233 || code === 8239 || code === 8287 || code === 12288;
+}
+function truncateUtf8(text, max) {
+  let bytes = 0;
+  let end = 0;
+  for (const char of text) {
+    const code = char.codePointAt(0) ?? 0;
+    bytes += code < 128 ? 1 : code < 2048 ? 2 : code < 65536 ? 3 : 4;
+    if (bytes > max)
+      break;
+    end += char.length;
+  }
+  return text.slice(0, end);
+}
+var CREDENTIAL_RULES = [
+  [/(?<![a-z0-9+.-])([0-9+.-]*[a-z][a-z0-9+.-]*:\/\/)[^ /?#]+@/gi, "$1***@"],
+  [
+    /([?&](?:token|key|secret|password|access_token|refresh_token|id_token|api_key|apikey|client_secret|sig|x-amz-security-token|x-amz-signature)=)[^ &#"'<>]+/gi,
+    "$1***"
+  ],
+  [
+    /(authorization["']?[ \uffff]*[:=][ \uffff]*)(?:(["'])((?:bearer|basic|token|digest)[ \uffff]+)?[^"']+|(\[?)((?:bearer|basic|token|digest)[ \uffff]+)?[^)\]}>]+)/gi,
+    "$1$2$3$4$5***"
+  ],
+  [/(x-api-key["']?[ \uffff]*[:=][ \uffff]*["']?)[A-Za-z0-9._~+/=*\uffff-]+/gi, "$1***"],
+  [/\b(bearer[ \uffff]+)[A-Za-z0-9._~+/=*\uffff-]+/gi, "$1***"],
+  [/\b(gh[pousr]_|github_pat_)[A-Za-z0-9._\uffff-]{20,}/g, "$1***"],
+  [
+    /(?<![A-Za-z0-9_\uffff-])eyJ[A-Za-z0-9_\uffff-]{8,}\.[A-Za-z0-9_\uffff-]{8,}\.[A-Za-z0-9_\uffff-]*/g,
+    "***"
+  ],
+  [/\b(sk-|dsp_)[A-Za-z0-9_\uffff-]{20,}/g, "$1***"],
+  [/\b(AKIA|ASIA)[A-Z0-9]{16}\b/g, "$1***"]
+];
+function cleanDetail(text) {
+  let marked = "";
+  for (const char of text) {
+    const code = char.codePointAt(0) ?? 0;
+    const control = code < 32 || code >= 127 && code < 160;
+    marked += isSpace(code) ? " " : control ? HELD : char;
+  }
+  const redacted = CREDENTIAL_RULES.reduce((line2, [pattern, replacement]) => line2.replace(pattern, replacement), marked);
+  const line = redacted.replaceAll(HELD, " ").split(" ").filter((field) => field !== "").join(" ");
+  return truncateUtf8(line, MAX_DETAIL_BYTES);
+}
 function budgetLabel(ms) {
   return ms % 1000 === 0 ? `${ms / 1000} s` : `${ms} ms`;
 }
@@ -15498,10 +15542,10 @@ async function measureCapabilities(host2, input, budgets = DEFAULT_BUDGETS) {
   });
   for (const controller of controllers)
     controller.abort();
-  const rows = LIVE_CAPABILITIES.map((name) => ({
-    name,
-    ...outcomes.get(name) ?? failed(`did not finish within ${budgetLabel(budgets.reportMs)}`)
-  }));
+  const rows = LIVE_CAPABILITIES.map((name) => {
+    const { ok: ok2, detail } = outcomes.get(name) ?? failed(`did not finish within ${budgetLabel(budgets.reportMs)}`);
+    return { name, ok: ok2, detail: cleanDetail(detail) };
+  });
   return { measuredAt, elapsedMs: Date.now() - started, rows };
 }
 async function runCommand(command, args, options) {
@@ -15583,7 +15627,7 @@ function onEnvoyRoleRegained(listener) {
 // package.json
 var package_default = {
   name: "@sjawhar/pi-legion",
-  version: "8.16.0",
+  version: "8.16.1",
   license: "Apache-2.0",
   type: "module",
   omp: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/pi-legion",
-  "version": "8.16.0",
+  "version": "8.16.1",
   "license": "Apache-2.0",
   "type": "module",
   "omp": {