paperclip-github-plugin 0.9.2 → 0.9.4

package/dist/manifest.js

@@ -642,7 +642,7 @@ var PULL_REQUEST_ASSET_API_ROUTE_URL_PATH = `/api/plugins/${GITHUB_SYNC_PLUGIN_I
 var require2 = createRequire(import.meta.url);
 var packageJson = require2("../package.json");
 var SCHEDULE_TICK_CRON = "* * * * *";
-var MANIFEST_VERSION = "0.9.2"?.trim() || typeof packageJson.version === "string" && packageJson.version.trim() || process.env.npm_package_version?.trim() || "0.0.0-dev";
+var MANIFEST_VERSION = "0.9.4"?.trim() || typeof packageJson.version === "string" && packageJson.version.trim() || process.env.npm_package_version?.trim() || "0.0.0-dev";
 var manifest = {
   id: GITHUB_SYNC_PLUGIN_ID,
   apiVersion: 1,

package/dist/ui/index.js

@@ -28400,13 +28400,39 @@ async function resolveOrCreateCompanySecret(companyId, name2, value) {
 function isPluginSecretReferencesDisabledError(error) {
   return getActionErrorMessage(error, "").toLowerCase().includes("plugin secret references are disabled");
 }
+var PLUGIN_CONFIG_SECRET_KEY_PATTERN = /secret|token/iu;
+function isPlainConfigRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function shouldStripPluginConfigValue(key, value) {
+  const normalizedKey = key.replace(/[^a-z0-9]/giu, "").toLowerCase();
+  if (PLUGIN_CONFIG_SECRET_KEY_PATTERN.test(normalizedKey)) {
+    return true;
+  }
+  if (!isPlainConfigRecord(value)) {
+    return false;
+  }
+  return value.type === "secret_ref" || typeof value.secretId === "string";
+}
+function stripPluginSecretRefValue(value) {
+  if (Array.isArray(value)) {
+    return value.map((entry) => stripPluginSecretRefValue(entry));
+  }
+  if (!isPlainConfigRecord(value)) {
+    return value;
+  }
+  const nextEntries = [];
+  for (const [key, entryValue] of Object.entries(value)) {
+    if (shouldStripPluginConfigValue(key, entryValue)) {
+      continue;
+    }
+    const nextValue = stripPluginSecretRefValue(entryValue);
+    nextEntries.push([key, nextValue]);
+  }
+  return Object.fromEntries(nextEntries);
+}
 function stripPluginSecretRefConfig(config) {
-  const {
-    githubTokenRefs: _githubTokenRefs,
-    paperclipBoardApiTokenRefs: _paperclipBoardApiTokenRefs,
-    ...safeConfig
-  } = config;
-  return safeConfig;
+  return stripPluginSecretRefValue(config);
 }
 async function writePluginConfig(pluginId, config) {
   await fetchJson(`/api/plugins/${pluginId}/config`, {