feat(vfox): allow plugins to request env var redaction via MiseEnvResult

crates/vfox/src/hooks/mise_env.rs

@@ -24,6 +24,9 @@ pub struct MiseEnvResult {
     pub cacheable: bool,
     /// Files to watch for cache invalidation
     pub watch_files: Vec<PathBuf>,
+    /// Whether the plugin wants its env vars to be redacted
+    /// When true, mise will redact these values unless the user explicitly opts out
+    pub redact: bool,
 }
 
 impl Plugin {
@@ -56,12 +59,13 @@ impl FromLua for MiseEnvResult {
         match value {
             // Extended format: { cacheable = true, watch_files = {...}, env = {...} }
             Value::Table(table) => {
-                // Check if this is extended format by looking for 'env' or 'cacheable' key
+                // Check if this is extended format by looking for known keys
                 let has_env = table.contains_key("env")?;
                 let has_cacheable = table.contains_key("cacheable")?;
                 let has_watch_files = table.contains_key("watch_files")?;
+                let has_redact = table.contains_key("redact")?;
 
-                if has_env || has_cacheable || has_watch_files {
+                if has_env || has_cacheable || has_watch_files || has_redact {
                     // Extended format
                     let env: Vec<EnvKey> = table
                         .get::<Option<Vec<EnvKey>>>("env")
@@ -87,11 +91,20 @@ impl FromLua for MiseEnvResult {
                             ))
                         })?
                         .unwrap_or_default();
+                    let redact: bool = table
+                        .get::<Option<bool>>("redact")
+                        .map_err(|e| {
+                            LuaError::RuntimeError(format!(
+                                "Invalid 'redact' field in MiseEnv result: expected boolean. Error: {e}"
+                            ))
+                        })?
+                        .unwrap_or(false);
 
                     Ok(MiseEnvResult {
                         env,
                         cacheable,
                         watch_files: watch_files.into_iter().map(PathBuf::from).collect(),
+                        redact,
                     })
                 } else {
                     // Legacy format: table is actually an array of env keys
@@ -108,6 +121,7 @@ impl FromLua for MiseEnvResult {
                         env,
                         cacheable: false,
                         watch_files: vec![],
+                        redact: false,
                     })
                 }
             }

crates/vfox/types/mise-plugin.lua

@@ -94,6 +94,7 @@ ARCH_TYPE = ""
 ---@field env? EnvKey[] Environment variables to set
 ---@field cacheable? boolean Whether the result can be cached (default false)
 ---@field watch_files? string[] Files to watch for cache invalidation
+---@field redact? boolean Whether env vars should be redacted in output (default false)
 
 ---@class MisePathCtx
 ---@field options table Plugin options from mise.toml

src/config/env_directive/mod.rs

@@ -552,16 +552,7 @@ impl EnvResults {
                         }
                         env_map.insert(env::PATH_KEY.to_string(), path_env.to_string());
                     }
-                    Self::module(
-                        &mut r,
-                        config,
-                        source,
-                        name,
-                        &value,
-                        redact.unwrap_or(false),
-                        env_map,
-                    )
-                    .await?;
+                    Self::module(&mut r, config, source, name, &value, redact, env_map).await?;
                 }
             };
         }

src/config/env_directive/module.rs

@@ -18,7 +18,7 @@ impl EnvResults {
         source: PathBuf,
         name: String,
         value: &Value,
-        redact: bool,
+        redact: Option<bool>,
         env: IndexMap<String, String>,
     ) -> Result<()> {
         let path = dirs::PLUGINS.join(name.to_kebab_case());
@@ -49,8 +49,10 @@ impl EnvResults {
             }
 
             // Add env vars
+            // User's explicit redact setting takes priority, otherwise use plugin's preference
+            let should_redact = redact.unwrap_or(response.redact);
             for (k, v) in response.env {
-                if redact {
+                if should_redact {
                     r.redactions.push(k.clone());
                 }
                 r.env.insert(k, (v, source.clone()));

src/plugins/vfox_plugin.rs

@@ -27,6 +27,8 @@ pub struct MiseEnvResponse {
     pub cacheable: bool,
     /// Files to watch for cache invalidation
     pub watch_files: Vec<PathBuf>,
+    /// Whether the plugin wants its env vars to be redacted
+    pub redact: bool,
 }
 use xx::regex;
 
@@ -88,6 +90,7 @@ impl VfoxPlugin {
             env: result_env,
             cacheable: result.cacheable,
             watch_files: result.watch_files,
+            redact: result.redact,
         }))
     }