agent-inspect 6.31.4 → 6.31.5

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 6.31.5
+
+### Patch Changes
+
+- 909ea70: Strip userinfo credentials from common connection URIs (postgres, mysql, mongodb, redis, amqp, and TLS variants) under share/strict while keeping scheme, host, port, and database/queue path.
+
 ## 6.31.4
 
 ### Patch Changes

package/README.md

@@ -213,7 +213,7 @@ The root package is enough for custom capture, the CLI, checks, and Evidence wor
 
 ## Status and documentation
 
-**Current published baseline:** **6.31.4** · persisted schema `1.0` · Node.js `>=20` · MIT.
+**Current published baseline:** **6.31.5** · persisted schema `1.0` · Node.js `>=20` · MIT.
 
 Legacy v0.1 and v0.2 traces remain readable. Check the npm badge and [changelog](CHANGELOG.md) for the current published version.
 

package/docs/SAFE-TRACE-SHARING.md

@@ -43,7 +43,7 @@ For reviewer-reproducible trajectory checks (6.28+), prefer Evidence that includ
 - Inspect log-derived fields from `logs` / `tail` ingest configs, including custom `run-id`, `event`, `parent`, timestamp, and attribute mappings.
 - Avoid posting raw prompts, completions, tool inputs, or tool outputs in public threads unless the content is approved for public disclosure.
 - For cross-system correlation, retain a bounded identifier instead of copying the external record or payload. Follow [External reference metadata](./EXTERNAL-REFERENCES.md), and expect `share` / `strict` profiles to redact the named correlation fields.
-- `share` and `strict` rewrite http(s) URLs rather than dropping them: userinfo and credential-looking query or fragment params are replaced, identifier-like path segments become `[id]`, and scheme, host and path stay, so a retry on the same page is still recognizable. Only http and https URLs are rewritten: credentials in other schemes such as `postgres://user:pass@host/db` are left as they are, so check those by hand.
+- `share` and `strict` rewrite http(s) URLs rather than dropping them: userinfo and credential-looking query or fragment params are replaced, identifier-like path segments become `[id]`, and scheme, host and path stay, so a retry on the same page is still recognizable. The same profiles also strip userinfo from common connection URIs (`postgres` / `postgresql`, `mysql` / `mariadb`, `mongodb` / `mongodb+srv`, `redis` / `rediss`, `amqp` / `amqps`) while keeping scheme, host, port, and database/queue path: `postgres://user:secret@db.example.com:5432/app_db` becomes `postgres://db.example.com:5432/app_db`. Other schemes still need a manual check.
 - Prefer Markdown export for issue or PR sharing when a summarized tree is enough.
 
 ## Remove or replace sensitive values

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-inspect",
-  "version": "6.31.4",
+  "version": "6.31.5",
   "license": "MIT",
   "type": "module",
   "description": "Local evidence debugger and trajectory-test toolkit for TypeScript AI agents — execution trees, TraceContract checks, Evidence v2, and read-only MCP",

package/packages/cli/dist/index.cjs

@@ -16165,7 +16165,7 @@ var init_src = __esm({
 });
 
 // package.json
-var version = "6.31.4";
+var version = "6.31.5";
 
 // packages/cli/src/list.ts
 init_advanced();
@@ -17962,6 +17962,19 @@ init_credential_value_patterns();
 // packages/core/src/safety/url-redaction.ts
 init_sensitive_key();
 var HTTP_URL = /^https?:\/\/[^\s]+$/i;
+var CONNECTION_PROTOCOLS = /* @__PURE__ */ new Set([
+  "postgres:",
+  "postgresql:",
+  "mysql:",
+  "mariadb:",
+  "mongodb:",
+  "mongodb+srv:",
+  "redis:",
+  "rediss:",
+  "amqp:",
+  "amqps:"
+]);
+var CONNECTION_URI = /^(?:postgres|postgresql|mysql|mariadb|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^\s]+$/i;
 var UUID_SEGMENT = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var HEX_SEGMENT = /^[0-9a-f]{12,}$/i;
 var NUMERIC_SEGMENT = /^\d{5,}$/;
@@ -17969,14 +17982,25 @@ var OPAQUE_SEGMENT = /^[A-Za-z0-9_-]{20,}$/;
 function looksLikeHttpUrl(value) {
   return HTTP_URL.test(value.trim());
 }
-function parseHttpUrl(value) {
+function looksLikeConnectionUri(value) {
+  return CONNECTION_URI.test(value.trim());
+}
+function looksLikeUrlForRedaction(value) {
+  return looksLikeHttpUrl(value) || looksLikeConnectionUri(value);
+}
+function parseRedactableUrl(value) {
   try {
     const url = new URL(value.trim());
-    return url.protocol === "http:" || url.protocol === "https:" ? url : void 0;
+    if (url.protocol === "http:" || url.protocol === "https:") return url;
+    if (CONNECTION_PROTOCOLS.has(url.protocol)) return url;
+    return void 0;
   } catch {
     return void 0;
   }
 }
+function isHttpProtocol(protocol) {
+  return protocol === "http:" || protocol === "https:";
+}
 function isIdentifierSegment(segment) {
   if (UUID_SEGMENT.test(segment)) return true;
   if (HEX_SEGMENT.test(segment)) return true;
@@ -18014,15 +18038,16 @@ function redactUrlString(value, options) {
     credentialRedacted: false,
     identifiersMasked: false
   };
-  if (!looksLikeHttpUrl(value)) return unchanged;
-  const url = parseHttpUrl(value);
+  if (!looksLikeUrlForRedaction(value)) return unchanged;
+  const url = parseRedactableUrl(value);
   if (!url) return unchanged;
   const replacement = options.replacement ?? "[REDACTED]";
   const idPlaceholder = options.idPlaceholder ?? "[id]";
+  const http = isHttpProtocol(url.protocol);
   let credentialRedacted = url.username.length > 0 || url.password.length > 0;
   let identifiersMasked = false;
   let pathname = url.pathname;
-  if (options.maskPathIds === true) {
+  if (http && options.maskPathIds === true) {
     pathname = url.pathname.split("/").map((segment) => {
       if (segment.length === 0 || !isIdentifierSegment(decodeParam(segment))) {
         return segment;
@@ -20289,6 +20314,19 @@ function valueContainsKeyValueSecret(value) {
 
 // packages/redact/src/url-redaction.ts
 var HTTP_URL2 = /^https?:\/\/[^\s]+$/i;
+var CONNECTION_PROTOCOLS2 = /* @__PURE__ */ new Set([
+  "postgres:",
+  "postgresql:",
+  "mysql:",
+  "mariadb:",
+  "mongodb:",
+  "mongodb+srv:",
+  "redis:",
+  "rediss:",
+  "amqp:",
+  "amqps:"
+]);
+var CONNECTION_URI2 = /^(?:postgres|postgresql|mysql|mariadb|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^\s]+$/i;
 var UUID_SEGMENT2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var HEX_SEGMENT2 = /^[0-9a-f]{12,}$/i;
 var NUMERIC_SEGMENT2 = /^\d{5,}$/;
@@ -20296,14 +20334,25 @@ var OPAQUE_SEGMENT2 = /^[A-Za-z0-9_-]{20,}$/;
 function looksLikeHttpUrl2(value) {
   return HTTP_URL2.test(value.trim());
 }
-function parseHttpUrl2(value) {
+function looksLikeConnectionUri2(value) {
+  return CONNECTION_URI2.test(value.trim());
+}
+function looksLikeUrlForRedaction2(value) {
+  return looksLikeHttpUrl2(value) || looksLikeConnectionUri2(value);
+}
+function parseRedactableUrl2(value) {
   try {
     const url = new URL(value.trim());
-    return url.protocol === "http:" || url.protocol === "https:" ? url : void 0;
+    if (url.protocol === "http:" || url.protocol === "https:") return url;
+    if (CONNECTION_PROTOCOLS2.has(url.protocol)) return url;
+    return void 0;
   } catch {
     return void 0;
   }
 }
+function isHttpProtocol2(protocol) {
+  return protocol === "http:" || protocol === "https:";
+}
 function isIdentifierSegment2(segment) {
   if (UUID_SEGMENT2.test(segment)) return true;
   if (HEX_SEGMENT2.test(segment)) return true;
@@ -20341,15 +20390,16 @@ function redactUrlString2(value, options) {
     credentialRedacted: false,
     identifiersMasked: false
   };
-  if (!looksLikeHttpUrl2(value)) return unchanged;
-  const url = parseHttpUrl2(value);
+  if (!looksLikeUrlForRedaction2(value)) return unchanged;
+  const url = parseRedactableUrl2(value);
   if (!url) return unchanged;
   const replacement = options.replacement ?? "[REDACTED]";
   const idPlaceholder = options.idPlaceholder ?? "[id]";
+  const http = isHttpProtocol2(url.protocol);
   let credentialRedacted = url.username.length > 0 || url.password.length > 0;
   let identifiersMasked = false;
   let pathname = url.pathname;
-  if (options.maskPathIds === true) {
+  if (http && options.maskPathIds === true) {
     pathname = url.pathname.split("/").map((segment) => {
       if (segment.length === 0 || !isIdentifierSegment2(decodeParam2(segment))) {
         return segment;
@@ -20799,7 +20849,7 @@ var Redactor2 = class {
         return applyRule(rule, value, this.#replacement);
       }
     }
-    if (typeof value === "string" && looksLikeHttpUrl2(value)) {
+    if (typeof value === "string" && looksLikeUrlForRedaction2(value)) {
       const url = redactUrlString2(value, {
         sensitiveKeys: this.#sensitiveKeys,
         isSensitiveValue: (candidate) => this.#detect(candidate, key, path44) !== void 0,