Merge pull request #46 from TeaEntityLab/alert-autofix-30

Potential fix for code scanning alert no. 30: Clear-text logging of sensitive information

Author: johnteee

teaagent/cli/_handlers/_mcp_trust.py

@@ -56,9 +56,16 @@ def _is_sensitive_key(key: Any) -> bool:
 
 
 def _print_json(value: Any) -> None:
+    def _mask_leaf_values(obj: Any) -> Any:
+        if isinstance(obj, dict):
+            return {key: _mask_leaf_values(item) for key, item in obj.items()}
+        if isinstance(obj, list):
+            return [_mask_leaf_values(item) for item in obj]
+        return '[REDACTED]'
+
     print(
         json.dumps(
-            _redact_sensitive(_strip_sensitive_fields(value)),
+            _mask_leaf_values(_redact_sensitive(_strip_sensitive_fields(value))),
             ensure_ascii=False,
             indent=2,
             sort_keys=True,