@love-moon/conductor-cli 0.7.6 → 0.7.7

package/src/handoff-log-mask.js

@@ -23,6 +23,49 @@ export function maskHandoffUrlForLogs(value) {
   });
 }
 
+// Secrets other than the handoff token can reach the same log/summary surface
+// once we start capturing a crashing child's output: the daemon puts
+// `CONDUCTOR_AGENT_TOKEN` into the fire's environment AND into tmux's argv
+// (`-e CONDUCTOR_AGENT_TOKEN=…`), and the fire inherits provider keys such as
+// ANTHROPIC_API_KEY / OPENAI_API_KEY. Backends routinely echo those back when
+// they fail ("invalid API key sk-ant-…", usage dumps, env dumps).
+//
+// A single-pattern denylist is the wrong shape for that, so this is a
+// redaction *pass*: exact known secret values first (the strongest signal —
+// the daemon holds its own token at runtime), then structural patterns.
+const SECRET_ASSIGNMENT_RE =
+  /\b([A-Z0-9_]*(?:TOKEN|SECRET|KEY|PASSWORD|PASSWD|CREDENTIAL)[A-Z0-9_]*)\s*[=:]\s*("[^"]*"|'[^']*'|\S+)/gi;
+const BEARER_RE = /\b(Bearer|Basic)\s+([A-Za-z0-9._~+/=-]{8,})/gi;
+// Provider key shapes (OpenAI/Anthropic `sk-…`, Google `AIza…`, GitHub `ghp_…`).
+const PROVIDER_KEY_RE = /\b(sk-[A-Za-z0-9_-]{12,}|AIza[A-Za-z0-9_-]{20,}|gh[pousr]_[A-Za-z0-9]{16,})\b/g;
+
+const escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+
+/**
+ * Redact secrets from text that is about to be logged or persisted into a task
+ * status summary.
+ *
+ * @param {string} value
+ * @param {string[]} [knownSecrets] exact literal values to strip (e.g. the
+ *   daemon's own AGENT_TOKEN). Short values are ignored so a 1-2 char token
+ *   cannot blank out the whole message.
+ */
+export function redactSecretsForLogs(value, knownSecrets = []) {
+  if (typeof value !== "string" || !value) {
+    return value;
+  }
+  let out = maskHandoffUrlForLogs(value);
+  for (const secret of knownSecrets) {
+    if (typeof secret === "string" && secret.length >= 8) {
+      out = out.replace(new RegExp(escapeRegExp(secret), "g"), "<redacted>");
+    }
+  }
+  out = out.replace(SECRET_ASSIGNMENT_RE, (_, key) => `${key}=<redacted>`);
+  out = out.replace(BEARER_RE, (_, scheme) => `${scheme} <redacted>`);
+  out = out.replace(PROVIDER_KEY_RE, "<redacted>");
+  return out;
+}
+
 // Scrub any handoff URL embedded in an error message before surfacing it via
 // logs or task status summaries. Belt-and-suspenders for the case where an
 // internal error stringifies the outbox payload.