agent-inspect 6.31.4 → 6.31.6

package/packages/core/dist/exporters.mjs

@@ -1,8 +1,8 @@
-import { buildRunWhatSummary, renderRunWhat, renderTimeline, buildRunTimeline } from './chunk-NY4ILMXK.mjs';
-import { summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml } from './chunk-INE5IWLN.mjs';
+import { buildRunWhatSummary, renderRunWhat, renderTimeline, buildRunTimeline } from './chunk-EXGQLMVB.mjs';
+import { summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml } from './chunk-N5PZAI6Q.mjs';
 import { escapeHtml, flattenTree, safeString, compactAttributes, stableJson, escapeMarkdown, zeroKinds } from './chunk-CAWPF22J.mjs';
 export { compactAttributes, escapeHtml, escapeMarkdown, flattenTree, safeString, stableJson, summarizeTree } from './chunk-CAWPF22J.mjs';
-import { resolveRedactionProfile, applyProfileMetadataCaps, truncateStringForProfile, stringContainsHighConfidenceCredential } from './chunk-2KJR6X4V.mjs';
+import { resolveRedactionProfile, applyProfileMetadataCaps, truncateStringForProfile, stringContainsHighConfidenceCredential } from './chunk-DK3OW6UI.mjs';
 import { Redactor, DEFAULT_REDACT_KEYS, isCredentialSensitiveKey } from './chunk-VLVCLAPB.mjs';
 import './chunk-7DHSWDKB.mjs';
 import './chunk-EE5Z2GQ3.mjs';
@@ -14,6 +14,21 @@ var EXPORT_PAYLOAD_VERSION = "0.1.2";
 
 // packages/core/src/safety/url-redaction.ts
 var HTTP_URL = /^https?:\/\/[^\s]+$/i;
+var CONNECTION_PROTOCOLS = /* @__PURE__ */ new Set([
+  "postgres:",
+  "postgresql:",
+  "mysql:",
+  "mariadb:",
+  "mongodb:",
+  "mongodb+srv:",
+  "redis:",
+  "rediss:",
+  "amqp:",
+  "amqps:"
+]);
+var CONNECTION_URI = /^(?:postgres|postgresql|mysql|mariadb|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^\s]+$/i;
+var CONNECTION_USERINFO = /^(postgres|postgresql|mysql|mariadb|mongodb(?:\+srv)?|rediss?|amqps?):\/\/([^@/?#]+)@(.+)$/i;
+var CONNECTION_HAS_USERINFO = /^(?:postgres|postgresql|mysql|mariadb|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^@/?#]+@/i;
 var UUID_SEGMENT = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var HEX_SEGMENT = /^[0-9a-f]{12,}$/i;
 var NUMERIC_SEGMENT = /^\d{5,}$/;
@@ -21,14 +36,47 @@ var OPAQUE_SEGMENT = /^[A-Za-z0-9_-]{20,}$/;
 function looksLikeHttpUrl(value) {
   return HTTP_URL.test(value.trim());
 }
-function parseHttpUrl(value) {
+function looksLikeConnectionUri(value) {
+  return CONNECTION_URI.test(value.trim());
+}
+function looksLikeUrlForRedaction(value) {
+  return looksLikeHttpUrl(value) || looksLikeConnectionUri(value);
+}
+function parseRedactableUrl(value) {
   try {
     const url = new URL(value.trim());
-    return url.protocol === "http:" || url.protocol === "https:" ? url : void 0;
+    if (url.protocol === "http:" || url.protocol === "https:") return url;
+    if (CONNECTION_PROTOCOLS.has(url.protocol)) return url;
+    return void 0;
   } catch {
     return void 0;
   }
 }
+function redactConnectionUserinfoFallback(value, replacement) {
+  const trimmed = value.trim();
+  const match = CONNECTION_USERINFO.exec(trimmed);
+  if (match) {
+    const [, scheme, , rest] = match;
+    if (scheme && rest && rest.length > 0) {
+      return {
+        value: `${scheme}://${rest}`,
+        credentialRedacted: true,
+        identifiersMasked: false
+      };
+    }
+  }
+  if (looksLikeConnectionUri(trimmed) && CONNECTION_HAS_USERINFO.test(trimmed)) {
+    return {
+      value: replacement,
+      credentialRedacted: true,
+      identifiersMasked: false
+    };
+  }
+  return void 0;
+}
+function isHttpProtocol(protocol) {
+  return protocol === "http:" || protocol === "https:";
+}
 function isIdentifierSegment(segment) {
   if (UUID_SEGMENT.test(segment)) return true;
   if (HEX_SEGMENT.test(segment)) return true;
@@ -66,15 +114,18 @@ function redactUrlString(value, options) {
     credentialRedacted: false,
     identifiersMasked: false
   };
-  if (!looksLikeHttpUrl(value)) return unchanged;
-  const url = parseHttpUrl(value);
-  if (!url) return unchanged;
+  if (!looksLikeUrlForRedaction(value)) return unchanged;
   const replacement = options.replacement ?? "[REDACTED]";
+  const url = parseRedactableUrl(value);
+  if (!url) {
+    return redactConnectionUserinfoFallback(value, replacement) ?? unchanged;
+  }
   const idPlaceholder = options.idPlaceholder ?? "[id]";
+  const http = isHttpProtocol(url.protocol);
   let credentialRedacted = url.username.length > 0 || url.password.length > 0;
   let identifiersMasked = false;
   let pathname = url.pathname;
-  if (options.maskPathIds === true) {
+  if (http && options.maskPathIds === true) {
     pathname = url.pathname.split("/").map((segment) => {
       if (segment.length === 0 || !isIdentifierSegment(decodeParam(segment))) {
         return segment;