mcp-creatio 0.6.3 → 0.6.5

package/dist/utils/redact.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Central secret-scrubber for anything that crosses an outward boundary — tool results relayed to
+ * the LLM client and log lines. Invariant #7 / §9 in AGENTS.md ("do not leak secrets or access
+ * tokens in tool responses; strip or mask token-like values") used to be a convention enforced by
+ * hand at each call site; this turns it into one guaranteed choke point.
+ *
+ * It is defense-in-depth, NOT the primary control: providers should still avoid putting credentials
+ * into messages/results in the first place. Because it errs toward over-redaction (a stray "Token
+ * abc" in prose is scrubbed), it is intentionally applied only at the two outward edges, never to
+ * data the server operates on internally.
+ *
+ * Complements {@link redactUrl} in the HTTP middleware (which scrubs single-use OAuth codes from
+ * request URLs) — that one is URL/query-specific; this one is a general value scrubber.
+ */
+/**
+ * Mask credential-looking substrings in arbitrary text. Idempotent (re-running yields the same
+ * output) and safe on non-secret text (returns it unchanged). Always returns a string.
+ */
+export declare function redactSecrets(input: unknown): string;
+/**
+ * Redact secrets from an Error's message while preserving the Error instance (type + stack), so the
+ * MCP layer can relay a clean message without losing diagnostics. Non-Error throwables are wrapped.
+ */
+export declare function redactError(err: unknown): Error;
+//# sourceMappingURL=redact.d.ts.map

package/dist/utils/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAqBH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQpD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAY/C"}

package/dist/utils/redact.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * Central secret-scrubber for anything that crosses an outward boundary — tool results relayed to
+ * the LLM client and log lines. Invariant #7 / §9 in AGENTS.md ("do not leak secrets or access
+ * tokens in tool responses; strip or mask token-like values") used to be a convention enforced by
+ * hand at each call site; this turns it into one guaranteed choke point.
+ *
+ * It is defense-in-depth, NOT the primary control: providers should still avoid putting credentials
+ * into messages/results in the first place. Because it errs toward over-redaction (a stray "Token
+ * abc" in prose is scrubbed), it is intentionally applied only at the two outward edges, never to
+ * data the server operates on internally.
+ *
+ * Complements {@link redactUrl} in the HTTP middleware (which scrubs single-use OAuth codes from
+ * request URLs) — that one is URL/query-specific; this one is a general value scrubber.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactSecrets = redactSecrets;
+exports.redactError = redactError;
+const REDACTED = '[REDACTED]';
+/**
+ * A value following an auth scheme keyword: `Bearer <jwt>`, `Basic <b64>`, `ApiKey <v>`, `Token <v>`.
+ * The scheme is preserved (it is not the secret); only the credential after it is masked.
+ */
+const AUTH_SCHEME_VALUE_RE = /\b(Bearer|Basic|ApiKey|Token)\s+[\w.\-+/=]+/gi;
+/** An `Authorization` header value in either `Authorization: <v>` or `Authorization=<v>` form. */
+const AUTHORIZATION_HEADER_RE = /\b(Authorization)(\s*[:=]\s*)[^\s,;"']+/gi;
+/**
+ * A secret-bearing parameter's VALUE in query-string (`client_secret=…`), form, or JSON
+ * (`"password":"…"`) shape. The key (and an optional opening quote) is preserved; the value up to
+ * the next delimiter/closing quote is masked. Stops before a closing `"` so JSON stays well-formed.
+ */
+const SECRET_PARAM_RE = /("?\b(?:client_secret|client_id_secret|api_key|apikey|password|passwd|pwd|access_token|refresh_token|id_token|session_token|secret|bpmcsrf)\b"?\s*[:=]\s*)("?)[^"\s,;&}]+/gi;
+/**
+ * Mask credential-looking substrings in arbitrary text. Idempotent (re-running yields the same
+ * output) and safe on non-secret text (returns it unchanged). Always returns a string.
+ */
+function redactSecrets(input) {
+    if (typeof input !== 'string' || input.length === 0) {
+        return typeof input === 'string' ? input : String(input ?? '');
+    }
+    return input
+        .replace(AUTH_SCHEME_VALUE_RE, (_m, scheme) => `${scheme} ${REDACTED}`)
+        .replace(AUTHORIZATION_HEADER_RE, (_m, key, sep) => `${key}${sep}${REDACTED}`)
+        .replace(SECRET_PARAM_RE, (_m, prefix, openQuote) => `${prefix}${openQuote}${REDACTED}`);
+}
+/**
+ * Redact secrets from an Error's message while preserving the Error instance (type + stack), so the
+ * MCP layer can relay a clean message without losing diagnostics. Non-Error throwables are wrapped.
+ */
+function redactError(err) {
+    if (err instanceof Error) {
+        try {
+            err.message = redactSecrets(err.message);
+        }
+        catch {
+            // Some exotic Error subclasses define a non-writable `message`; fall back to a wrapper
+            // that carries the redacted text while keeping the original as the cause for debugging.
+            return new Error(redactSecrets(err.message), { cause: err });
+        }
+        return err;
+    }
+    return new Error(redactSecrets(typeof err === 'string' ? err : String(err)));
+}
+//# sourceMappingURL=redact.js.map

package/dist/utils/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAyBH,sCAQC;AAMD,kCAYC;AAjDD,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B;;;GAGG;AACH,MAAM,oBAAoB,GAAG,+CAA+C,CAAC;AAE7E,kGAAkG;AAClG,MAAM,uBAAuB,GAAG,2CAA2C,CAAC;AAE5E;;;;GAIG;AACH,MAAM,eAAe,GACpB,6KAA6K,CAAC;AAE/K;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK;SACV,OAAO,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;SAC9E,OAAO,CAAC,uBAAuB,EAAE,CAAC,EAAE,EAAE,GAAW,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,QAAQ,EAAE,CAAC;SAC7F,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,MAAc,EAAE,SAAiB,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,EAAE,CAAC,CAAC;AAC3G,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,GAAY;IACvC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC;YACJ,GAAG,CAAC,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACR,uFAAuF;YACvF,wFAAwF;YACxF,OAAO,IAAI,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "mcp-creatio",
-	"version": "0.6.3",
+	"version": "0.6.5",
 	"main": "dist/index.js",
 	"bin": {
 		"mcp-creatio": "dist/cli.js"