Function redactStringValue

lib/reactotron-mcp/src/redaction.ts:313–348

(value: string, ctx: RedactionContext)

}

function redactStringValue(value: string, ctx: RedactionContext): string {
  let result = value
  const { sensitiveKeysLower, combinedValueRegex } = ctx.parsed

  // Detect JSON strings and redact their contents by parsing → redacting → re-stringifying.
  // Guarded by depth limit (nested JSON.stringify layers) and size limit (avoid parsing huge strings).
  if (ctx.jsonStringDepth < MAX_JSON_STRING_DEPTH && result.length <= MAX_JSON_PARSE_LENGTH) {
    const trimmed = result.trim()
    if ((trimmed.startsWith("{") && trimmed.endsWith("}")) || (trimmed.startsWith("[") && trimmed.endsWith("]"))) {
      try {
        const parsed = JSON.parse(result)
        if (typeof parsed === "object" && parsed !== null) {
          const innerCtx = makeContext(ctx.parsed, ctx.jsonStringDepth + 1)
          return JSON.stringify(redactValue(parsed, innerCtx, ""))
        }
      } catch {
        // Not valid JSON — fall through to other redaction strategies
      }
    }
  }

  // Redact URL query parameters whose names match sensitiveKeys
  if (sensitiveKeysLower.size > 0) {
    if (result.includes("?")) {
      result = redactUrlQueryParams(result, sensitiveKeysLower)
    } else if (looksLikeFormEncoded(result)) {
      result = redactFormEncodedParams(result, sensitiveKeysLower)
    }
  }

  if (combinedValueRegex) {
    combinedValueRegex.lastIndex = 0
    result = result.replace(combinedValueRegex, REDACTED)
  }
  return result
}

/**
 * Detect a form-urlencoded body string (e.g. "user=alice&password=x"). The