vault-go 0.31.0 → 0.31.1

package/README.md

@@ -243,9 +243,10 @@ bun run typecheck
 bun test src
 bun run build
 npm run pack:check
+npm run pack:smoke
 ```
 
-Pushes to `main` run CI. Conventional commits publish to npm (`fix` → patch, `feat` → minor, `BREAKING CHANGE` → major). `NPM_TOKEN` lives only in GitHub Actions.
+CI and release currently run only when the **CI** workflow is started manually in GitHub Actions. The default run validates only. To publish after the checks pass, start it on `main` with the `publish` input enabled; pushes alone do not start it. The package smoke check installs the actual tarball in a temporary directory and checks the CLI and MCP handshake without account credentials. Conventional commits determine the version (`fix` → patch, `feat` → minor, `BREAKING CHANGE` → major). `NPM_TOKEN` lives only in GitHub Actions.
 
 ## Links
 

package/dist/capture-privacy.js

@@ -1,19 +1,64 @@
-export function redact(value) {
+const SENSITIVE_KEY = /api[_-]?key|secret|token|password|authorization|cookie|credential|private[_-]?key/i;
+/** Keep quoted values together: whitespace/escaped quotes must not leave a secret tail. */
+function redactText(value, depth = 0) {
+    // Nested stringified payloads are untrusted. Do not recurse indefinitely.
+    if (depth >= 12)
+        return '[redacted]';
+    if (/^\s*[\[{\"]/.test(value)) {
+        try {
+            // Parsing handles arrays/objects used as credentials, escaped key names,
+            // and JSON string literals wrapping another serialized payload.
+            // Keep the capture field a string; its caller need not know it contained JSON.
+            return JSON.stringify(redactValue(JSON.parse(value), depth + 1));
+        }
+        catch { /* Partial JSON and pasted logs still use the text filter below. */ }
+    }
+    return value
+        .replace(new RegExp(`<(private|vault-private|${["claude", "mem", "context"].join("-")}|system_instruction|system-instruction|persisted-output|system-reminder)\\b[^>]*>[\\s\\S]*?(?:<\\/\\1\\s*>|$)`, "gi"), "[redacted]")
+        // Raw HTTP headers can contain spaces, auth schemes and several cookies.
+        // Stop at a shell argument's quote or a new line, preserving adjacent diagnostics.
+        .replace(/(\b(?:authorization|proxy-authorization|cookie|set-cookie)[ \t]*:[ \t]*)[^\r\n'\"]+/gi, '$1[redacted]')
+        .replace(/((?:["']?\b[\w-]+["']?)[ \t]*[:=][ \t]*)("(?:\\[\s\S]|[^"\\])*(?:"|$)|'(?:\\[\s\S]|[^'\\])*(?:'|$)|\[redacted\]|[^\s,"'{}\]]+)/g, (match, prefix, credential) => {
+        const key = prefix.replace(/["'\s:=]/g, '');
+        const quote = credential[0] === '"' || credential[0] === "'" ? credential[0] : '';
+        // A public field can itself contain serialized JSON, shell output or a
+        // pasted header. Inspect its contents instead of skipping the whole value.
+        if (!SENSITIVE_KEY.test(key)) {
+            if (!quote)
+                return match;
+            const closed = credential.endsWith(quote) && credential.length > 1;
+            const inner = credential.slice(1, closed ? -1 : undefined);
+            // JSON unescaping makes escaped credential keys visible to the same filter.
+            if (quote === '"' && closed) {
+                try {
+                    return `${prefix}${JSON.stringify(redactText(JSON.parse(credential), depth + 1))}`;
+                }
+                catch { /* Shell strings are not necessarily valid JSON. */ }
+            }
+            return `${prefix}${quote}${redactText(inner, depth + 1)}${closed ? quote : ''}`;
+        }
+        return `${prefix}${quote}[redacted]${quote}`;
+    });
+}
+function redactValue(value, depth) {
+    if (depth >= 12)
+        return '[redacted]';
     if (typeof value === "string") {
-        return value
-            .replace(new RegExp(`<(private|vault-private|${["claude", "mem", "context"].join("-")}|system_instruction|system-instruction|persisted-output|system-reminder)\\b[^>]*>[\\s\\S]*?(?:<\\/\\1\\s*>|$)`, "gi"), "[redacted]")
-            .replace(/(api[_-]?key|secret|token|password)\s*[:=]\s*['"]?[^\s'"]+/gi, "$1=[redacted]");
+        return redactText(value, depth);
     }
     if (Array.isArray(value))
-        return value.map(redact);
+        return value.map(nested => redactValue(nested, depth + 1));
     if (value && typeof value === "object") {
         const output = {};
         for (const [key, nested] of Object.entries(value)) {
-            output[key] = /api[_-]?key|secret|token|password|authorization|cookie|credential|private[_-]?key/i.test(key)
+            output[key] = SENSITIVE_KEY.test(key)
                 ? "[redacted]"
-                : redact(nested);
+                : redactValue(nested, depth + 1);
         }
         return output;
     }
     return value;
 }
+export function redact(value) {
+    return redactValue(value, 0);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vault-go",
-  "version": "0.31.0",
+  "version": "0.31.1",
   "description": "MCP server and installer for Vault Memory: search, capture, and use account memory across AI clients.",
   "type": "module",
   "bin": {
@@ -160,7 +160,8 @@
     "test": "bun run build && bun test src",
     "pack:check": "npm pack --dry-run",
     "release": "semantic-release",
-    "prepublishOnly": "bun test src && npm run pack:check"
+    "prepublishOnly": "bun test src && npm run pack:check",
+    "pack:smoke": "node scripts/smoke-package.mjs"
   },
   "engines": {
     "bun": ">=1.3.0",
@@ -222,12 +223,12 @@
   },
   "devDependencies": {
     "@semantic-release/commit-analyzer": "13.0.1",
-    "@semantic-release/github": "12.0.9",
-    "@semantic-release/npm": "13.1.5",
+    "@semantic-release/github": "12.0.10",
+    "@semantic-release/npm": "13.2.0",
     "@semantic-release/release-notes-generator": "14.1.1",
     "@types/bun": "^1.3.0",
     "@types/node": "^22.15.0",
-    "semantic-release": "25.0.8",
+    "semantic-release": "25.0.9",
     "typescript": "^5.9.3"
   },
   "overrides": {