trakt-tools 1.11.0 → 1.11.1

package/dist/index.js

@@ -327,6 +327,12 @@ var index_default = definePluginEntry({
             }
             return toolResult(JSON.stringify(result, null, 2));
           } catch (error) {
+            if (tool.command === "auth") {
+              return toolResult(JSON.stringify({
+                success: false,
+                error: "Trakt authentication failed. Run trakt-cli auth separately and inspect its output locally."
+              }));
+            }
             const message = error instanceof Error ? error.message : String(error);
             const stderr = error && typeof error === "object" && "stderr" in error ? String(error.stderr).trim() : "";
             const errorOutput = stderr ? `${message}

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "trakt-tools",
   "name": "Trakt",
   "description": "Track movies and TV shows using trakt.tv",
-  "version": "1.11.0",
+  "version": "1.11.1",
   "configSchema": {
     "type": "object",
     "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trakt-tools",
-  "version": "1.11.0",
+  "version": "1.11.1",
   "description": "OpenClaw plugin for Trakt.tv - track movies and TV shows",
   "type": "module",
   "openclaw": {
@@ -71,7 +71,8 @@
     "plugin:check": "npx --yes @openclaw/plugin-inspector inspect --no-openclaw",
     "plugin:ci": "npx --yes @openclaw/plugin-inspector ci --no-openclaw --runtime --mock-sdk --allow-execute",
     "build": "tsup src/index.ts --format esm --out-dir dist --clean --target node20",
-    "prepack": "npm run build"
+    "prepack": "npm run build",
+    "test": "npm run build && node --experimental-test-module-mocks --test tests/*.test.mjs"
   },
   "main": "./dist/index.js"
 }

package/src/index.ts

@@ -393,6 +393,15 @@ export default definePluginEntry({
 
 						return toolResult(JSON.stringify(result, null, 2));
 					} catch (error: unknown) {
+						// execFile errors include the full command line, which can
+						// contain --client-secret. CLI stderr can echo credentials too.
+						// Never return raw authentication diagnostics to an agent.
+						if (tool.command === 'auth') {
+							return toolResult(JSON.stringify({
+								success: false,
+								error: 'Trakt authentication failed. Run trakt-cli auth separately and inspect its output locally.',
+							}));
+						}
 						const message = error instanceof Error ? error.message : String(error);
 						const stderr =
 							error && typeof error === 'object' && 'stderr' in error