[philipeh]

Overview

This PR hardens the doctor diagnostics pipeline so that oversized or hostile stdout/stderr from external tools cannot flood the terminal or error messages, ordering stays deterministic, and secret-like content is not reflected back to the user. It also adds bounded-output regression coverage via secret fixtures.

Related Issue

Changes

🩺 Bounded Doctor Output

• [MODIFY] src/diagnostics/run.ts

  • Cap captured stdout/stderr per diagnostic check before it reaches any output path.
  • Preserve deterministic ordering of diagnostic results and their captured output.

• [MODIFY] src/commands/doctor.ts

  • Emit bounded, ordered diagnostic output so oversized tool output cannot flood the terminal or error messages.

• [MODIFY] src/commands/test.ts

  • Route diagnostic test output through the same bounded path for consistent behavior.

• [MODIFY] src/output/redaction.ts

  • Redact secret-like content from captured diagnostic output before it is reflected.

• [ADD] tests/helpers/secret-fixtures.ts

  • Fixtures for secret-like content and oversized output used by the regression tests.

Verification Results

npm test
✅ repository checks pass

Acceptance Criteria	Status
Oversized diagnostic output cannot flood terminal/error messages	✅ Output is bounded in run.ts and surfaced bounded in doctor.ts / test.ts
Ordering remains deterministic	✅ Diagnostic results and captured output keep a stable order
Secret-like content is not reflected	✅ Redaction applied in output/redaction.ts with fixtures in tests/helpers/secret-fixtures.ts
Repository checks pass	✅ npm test passes

Closes #133

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: f8303f6e-5cf1-48f2-8d10-c2dea2dd3040

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}