@optimizely-opal/opal-tool-ocp-sdk 1.0.0-OCP-1449.1 → 1.0.0-beta.10

package/dist/logging/ToolLogger.js

@@ -2,6 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ToolLogger = void 0;
 const app_sdk_1 = require("@zaiusinc/app-sdk");
+const MAX_PARAM_LOG_LENGTH = 128;
+const MAX_BODY_LOG_LENGTH = 256;
+const MAX_ARRAY_ITEMS = 2;
 /**
  * Utility class for logging Opal tool requests and responses with security considerations
  */
@@ -45,12 +48,13 @@ class ToolLogger {
         'jwt',
         'bearer_token'
     ];
-    static MAX_PARAM_LENGTH = 100;
-    static MAX_ARRAY_ITEMS = 10;
     /**
      * Redacts sensitive data from an object
      */
-    static redactSensitiveData(data, maxDepth = 5) {
+    static redactSensitiveDataAndTruncate(data, maxDepth = 5, accumulatedLength = 0) {
+        if (accumulatedLength > MAX_BODY_LOG_LENGTH) {
+            return '';
+        }
         if (maxDepth <= 0) {
             return '[MAX_DEPTH_EXCEEDED]';
         }
@@ -58,31 +62,42 @@ class ToolLogger {
             return data;
         }
         if (typeof data === 'string') {
-            return data.length > this.MAX_PARAM_LENGTH
-                ? `${data.substring(0, this.MAX_PARAM_LENGTH)}... (truncated, ${data.length} chars total)`
-                : data;
+            if (data.length > MAX_PARAM_LOG_LENGTH) {
+                const lead = data.substring(0, MAX_PARAM_LOG_LENGTH - 10);
+                const tail = data.substring(data.length - 10);
+                return `${lead}...[${data.length - MAX_PARAM_LOG_LENGTH} truncated]...${tail}`;
+            }
+            else {
+                return data;
+            }
         }
         if (typeof data === 'number' || typeof data === 'boolean') {
             return data;
         }
         if (Array.isArray(data)) {
-            const truncated = data.slice(0, this.MAX_ARRAY_ITEMS);
-            const result = truncated.map((item) => this.redactSensitiveData(item, maxDepth));
-            if (data.length > this.MAX_ARRAY_ITEMS) {
-                result.push(`... (${data.length - this.MAX_ARRAY_ITEMS} more items truncated)`);
+            const truncated = data.slice(0, MAX_ARRAY_ITEMS);
+            const result = truncated.map((item) => this.redactSensitiveDataAndTruncate(item, maxDepth, accumulatedLength));
+            if (data.length > MAX_ARRAY_ITEMS) {
+                result.push(`... (${data.length - MAX_ARRAY_ITEMS} more items truncated)`);
             }
             return result;
         }
         if (typeof data === 'object') {
             const result = {};
             for (const [key, value] of Object.entries(data)) {
+                if (accumulatedLength > MAX_BODY_LOG_LENGTH) {
+                    break;
+                }
                 // Check if this field contains sensitive data
                 const isSensitive = this.isSensitiveField(key);
                 if (isSensitive) {
                     result[key] = '[REDACTED]';
                 }
                 else {
-                    result[key] = this.redactSensitiveData(value, maxDepth - 1);
+                    result[key] = this.redactSensitiveDataAndTruncate(value, maxDepth - 1, accumulatedLength);
+                }
+                if (result[key]) {
+                    accumulatedLength += JSON.stringify(result[key]).length;
                 }
             }
             return result;
@@ -103,7 +118,7 @@ class ToolLogger {
         if (!params) {
             return null;
         }
-        return this.redactSensitiveData(params);
+        return this.redactSensitiveDataAndTruncate(params);
     }
     /**
      * Calculates content length of response data
@@ -119,6 +134,87 @@ class ToolLogger {
             return 'unknown';
         }
     }
+    /**
+     * Extracts the response body as a string or parsed JSON object
+     */
+    static getResponseBody(response) {
+        if (!response) {
+            return null;
+        }
+        try {
+            const contentType = response.headers?.get('content-type') || '';
+            const isJson = contentType.includes('application/json') || contentType.includes('application/problem+json');
+            const isText = contentType.startsWith('text/');
+            if (!isJson && !isText) {
+                return null;
+            }
+            // Try to access bodyAsU8Array - this may throw
+            const bodyData = response.bodyAsU8Array;
+            if (!bodyData) {
+                return null;
+            }
+            // Convert Uint8Array to string
+            const bodyString = Buffer.from(bodyData).toString();
+            if (!bodyString) {
+                return null;
+            }
+            // Try to parse as JSON if content-type indicates JSON
+            if (isJson) {
+                try {
+                    return JSON.parse(bodyString);
+                }
+                catch {
+                    // If JSON parsing fails, return as string
+                    return bodyString;
+                }
+            }
+            // Return as plain text for non-JSON content types
+            return bodyString;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Creates a summary of response body with security redaction and truncation
+     * For failed responses (4xx, 5xx): returns full body with redacted sensitive data
+     * For successful responses (2xx): returns first 100 chars with redacted sensitive data
+     */
+    static createResponseBodySummary(response, success) {
+        const body = this.getResponseBody(response);
+        if (body === null || body === undefined) {
+            return null;
+        }
+        // For objects (parsed JSON), apply redaction
+        if (typeof body === 'object') {
+            // For failed responses, don't truncate strings within the object
+            const redactedBody = this.redactSensitiveDataAndTruncate(body, 5);
+            // For successful responses, truncate to first MAX_BODY_LOG_LENGTH chars
+            if (success) {
+                const bodyString = JSON.stringify(redactedBody);
+                if (bodyString.length > MAX_BODY_LOG_LENGTH) {
+                    const truncated = bodyString.substring(0, MAX_BODY_LOG_LENGTH);
+                    return `${truncated}... (truncated)`;
+                }
+                return redactedBody;
+            }
+            // For failed responses, return full redacted body
+            return redactedBody;
+        }
+        // For strings (plain text or unparseable JSON)
+        if (typeof body === 'string') {
+            // For successful responses, truncate to first 100 chars
+            if (success) {
+                if (body.length > MAX_BODY_LOG_LENGTH) {
+                    return `${body.substring(0, MAX_BODY_LOG_LENGTH)}... (truncated)`;
+                }
+                return body;
+            }
+            // For failed responses, return full body
+            return body;
+        }
+        return body;
+    }
     /**
      * Logs an incoming request
      */
@@ -137,6 +233,7 @@ class ToolLogger {
      * Logs a successful response
      */
     static logResponse(req, response, processingTimeMs) {
+        const success = response.status >= 200 && response.status < 300;
         const responseLog = {
             event: 'opal_tool_response',
             path: req.path,
@@ -144,8 +241,12 @@ class ToolLogger {
             status: response.status,
             contentType: response.headers?.get('content-type') || 'unknown',
             contentLength: this.calculateContentLength(response),
-            success: response.status >= 200 && response.status < 300
+            success
         };
+        const responseBodySummary = this.createResponseBodySummary(response, success);
+        if (responseBodySummary) {
+            responseLog.responseBody = responseBodySummary;
+        }
         // Log with Zaius audience so developers only see requests for accounts they have access to
         app_sdk_1.logger.info(app_sdk_1.LogVisibility.Zaius, JSON.stringify(responseLog));
     }

package/dist/logging/ToolLogger.js.map

@@ -1 +1 @@
-{"version":3,"file":"ToolLogger.js","sourceRoot":"","sources":["../../src/logging/ToolLogger.ts"],"names":[],"mappings":";;;AAAA,+CAA0D;AAG1D;;GAEG;AACH,MAAa,UAAU;IACb,MAAM,CAAU,gBAAgB,GAAG;QACzC,2BAA2B;QAC3B,UAAU;QACV,MAAM;QACN,QAAQ;QACR,KAAK;QACL,OAAO;QACP,MAAM;QACN,aAAa;QACb,cAAc;QACd,eAAe;QACf,SAAS;QACT,aAAa;QACb,eAAe;QACf,eAAe;QACf,eAAe;QAEf,kBAAkB;QAClB,aAAa;QACb,aAAa;QACb,KAAK;QACL,aAAa;QAEb,gBAAgB;QAChB,KAAK,EAAE,yBAAyB;QAChC,KAAK,EAAE,cAAc;QACrB,UAAU;QACV,KAAK,EAAE,gBAAgB;QACvB,OAAO;QACP,OAAO;QACP,SAAS;QAET,qBAAqB;QACrB,KAAK;QACL,KAAK;QACL,iBAAiB;QACjB,mBAAmB;QACnB,aAAa;QACb,gBAAgB;QAChB,KAAK;QACL,cAAc;KACf,CAAC;IAEM,MAAM,CAAU,gBAAgB,GAAG,GAAG,CAAC;IACvC,MAAM,CAAU,eAAe,GAAG,EAAE,CAAC;IAE7C;;OAEG;IACK,MAAM,CAAC,mBAAmB,CAAC,IAAS,EAAE,QAAQ,GAAG,CAAC;QACxD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,OAAO,sBAAsB,CAAC;QAChC,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,gBAAgB;gBACxC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,IAAI,CAAC,MAAM,eAAe;gBAC1F,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjF,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,wBAAwB,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAQ,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,8CAA8C;gBAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAE/C,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,gBAAgB,CAAC,SAAiB;QAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CACnD,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAClC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,sBAAsB,CAAC,MAAW;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,sBAAsB,CAAC,QAAuB;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,aAAa,EAAE,MAAM,IAAI,SAAS,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,UAAU,CACtB,GAAgB;QAEhB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChG,MAAM,UAAU,GAAG;YACjB,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;SAChD,CAAC;QAEF,2FAA2F;QAC3F,gBAAM,CAAC,IAAI,CAAC,uBAAa,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,WAAW,CACvB,GAAgB,EAChB,QAAsB,EACtB,gBAAyB;QAEzB,MAAM,WAAW,GAAG;YAClB,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,gBAAgB,IAAI,CAAC,CAAC,CAAC,SAAS;YAChE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS;YAC/D,aAAa,EAAE,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;YACpD,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;SACzD,CAAC;QAEF,2FAA2F;QAC3F,gBAAM,CAAC,IAAI,CAAC,uBAAa,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;IAChE,CAAC;;AA1KH,gCA2KC"}
+{"version":3,"file":"ToolLogger.js","sourceRoot":"","sources":["../../src/logging/ToolLogger.ts"],"names":[],"mappings":";;;AAAA,+CAA0D;AAG1D,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B;;GAEG;AACH,MAAa,UAAU;IACb,MAAM,CAAU,gBAAgB,GAAG;QACzC,2BAA2B;QAC3B,UAAU;QACV,MAAM;QACN,QAAQ;QACR,KAAK;QACL,OAAO;QACP,MAAM;QACN,aAAa;QACb,cAAc;QACd,eAAe;QACf,SAAS;QACT,aAAa;QACb,eAAe;QACf,eAAe;QACf,eAAe;QAEf,kBAAkB;QAClB,aAAa;QACb,aAAa;QACb,KAAK;QACL,aAAa;QAEb,gBAAgB;QAChB,KAAK,EAAE,yBAAyB;QAChC,KAAK,EAAE,cAAc;QACrB,UAAU;QACV,KAAK,EAAE,gBAAgB;QACvB,OAAO;QACP,OAAO;QACP,SAAS;QAET,qBAAqB;QACrB,KAAK;QACL,KAAK;QACL,iBAAiB;QACjB,mBAAmB;QACnB,aAAa;QACb,gBAAgB;QAChB,KAAK;QACL,cAAc;KACf,CAAC;IAEF;;OAEG;IACK,MAAM,CAAC,8BAA8B,CAAC,IAAS,EAAE,QAAQ,GAAG,CAAC,EAAE,iBAAiB,GAAG,CAAC;QAC1F,IAAI,iBAAiB,GAAG,mBAAmB,EAAE,CAAC;YAC5C,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,OAAO,sBAAsB,CAAC;QAChC,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,oBAAoB,GAAG,EAAE,CAAC,CAAC;gBAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;gBAC9C,OAAO,GAAG,IAAI,OAAO,IAAI,CAAC,MAAM,GAAG,oBAAoB,iBAAiB,IAAI,EAAE,CAAC;YACjF,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC/G,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,GAAG,eAAe,wBAAwB,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAQ,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,iBAAiB,GAAG,mBAAmB,EAAE,CAAC;oBAC5C,MAAM;gBACR,CAAC;gBACD,8CAA8C;gBAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAE/C,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,8BAA8B,CAAC,KAAK,EAAE,QAAQ,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBAC5F,CAAC;gBAED,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChB,iBAAiB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC1D,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,gBAAgB,CAAC,SAAiB;QAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CACnD,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAClC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,sBAAsB,CAAC,MAAW;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,sBAAsB,CAAC,QAAuB;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,aAAa,EAAE,MAAM,IAAI,SAAS,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,eAAe,CAAC,QAAuB;QACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAChE,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;YAC5G,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAE/C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC;YACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC;YACd,CAAC;YAED,+BAA+B;YAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACpD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,sDAAsD;YACtD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,0CAA0C;oBAC1C,OAAO,UAAU,CAAC;gBACpB,CAAC;YACH,CAAC;YAED,kDAAkD;YAClD,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,yBAAyB,CAAC,QAAuB,EAAE,OAAiB;QACjF,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6CAA6C;QAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,iEAAiE;YACjE,MAAM,YAAY,GAAG,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAElE,wEAAwE;YACxE,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAChD,IAAI,UAAU,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;oBAC5C,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;oBAC/D,OAAO,GAAG,SAAS,iBAAiB,CAAC;gBACvC,CAAC;gBACD,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,kDAAkD;YAClD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,+CAA+C;QAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,wDAAwD;YACxD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,IAAI,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;oBACtC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,mBAAmB,CAAC,iBAAiB,CAAC;gBACpE,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,yCAAyC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,UAAU,CACtB,GAAgB;QAEhB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChG,MAAM,UAAU,GAAG;YACjB,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;SAChD,CAAC;QAEF,2FAA2F;QAC3F,gBAAM,CAAC,IAAI,CAAC,uBAAa,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,WAAW,CACvB,GAAgB,EAChB,QAAsB,EACtB,gBAAyB;QAEzB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;QAChE,MAAM,WAAW,GAAQ;YACvB,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,gBAAgB,IAAI,CAAC,CAAC,CAAC,SAAS;YAChE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS;YAC/D,aAAa,EAAE,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;YACpD,OAAO;SACR,CAAC;QAEF,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9E,IAAI,mBAAmB,EAAE,CAAC;YACxB,WAAW,CAAC,YAAY,GAAG,mBAAmB,CAAC;QACjD,CAAC;QAED,2FAA2F;QAC3F,gBAAM,CAAC,IAAI,CAAC,uBAAa,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;IAChE,CAAC;;AAxRH,gCAyRC"}

package/dist/logging/ToolLogger.test.js

@@ -75,6 +75,22 @@ describe('ToolLogger', () => {
         });
         return response;
     };
+    const createMockResponseWithBody = (status, bodyData, contentType) => {
+        const mockHeaders = {
+            get: jest.fn().mockReturnValue(contentType)
+        };
+        const response = {
+            status,
+            headers: mockHeaders
+        };
+        Object.defineProperty(response, 'bodyAsU8Array', {
+            get() {
+                return bodyData;
+            },
+            enumerable: true
+        });
+        return response;
+    };
     describe('logRequest', () => {
         it('should log request with parameters', () => {
             const req = createMockRequest();
@@ -206,7 +222,7 @@ describe('ToolLogger', () => {
                 path: '/test-tool',
                 method: 'POST',
                 parameters: {
-                    description: `${'a'.repeat(100)}... (truncated, 150 chars total)`,
+                    description: `${'a'.repeat(118)}...[22 truncated]...${'a'.repeat(10)}`,
                     short_field: 'normal'
                 }
             });
@@ -228,8 +244,8 @@ describe('ToolLogger', () => {
                 method: 'POST',
                 parameters: {
                     items: [
-                        ...largeArray.slice(0, 10),
-                        '... (5 more items truncated)'
+                        ...largeArray.slice(0, 2),
+                        '... (13 more items truncated)'
                     ],
                     small_array: ['a', 'b']
                 }
@@ -367,6 +383,19 @@ describe('ToolLogger', () => {
             // Should not throw error or cause infinite recursion
             expect(() => ToolLogger_1.ToolLogger.logRequest(req)).not.toThrow();
             expect(mockLogger.info).toHaveBeenCalled();
+            // Verify that deeply nested parts are replaced with placeholder
+            const logCall = mockLogger.info.mock.calls[0];
+            const loggedData = JSON.parse(logCall[1]);
+            // Navigate to a deeply nested level that should be truncated
+            // At maxDepth=5, objects beyond depth 5 should be replaced
+            const nested1 = loggedData.parameters.deep.nested;
+            expect(nested1).toBeDefined(); // depth 2
+            const nested2 = nested1.nested;
+            expect(nested2).toBeDefined(); // depth 3
+            const nested3 = nested2.nested;
+            expect(nested3).toBeDefined(); // depth 4
+            const nested4 = nested3.nested;
+            expect(nested4).toBe('[MAX_DEPTH_EXCEEDED]'); // depth 5, should be truncated
         });
         it('should replace deeply nested objects with MAX_DEPTH_EXCEEDED placeholder', () => {
             // Create an object with exactly 6 levels (exceeds maxDepth of 5)
@@ -406,6 +435,7 @@ describe('ToolLogger', () => {
                 level1: {
                     items: [
                         {
+                            shallow: 'data',
                             level2: {
                                 level3: {
                                     level4: {
@@ -441,8 +471,11 @@ describe('ToolLogger', () => {
             const logCall = mockLogger.info.mock.calls[0];
             const loggedData = JSON.parse(logCall[1]);
             const items = loggedData.parameters.level1.items;
+            expect(items.length).toBe(3);
             // First item: deeply nested object with inner parts replaced by placeholder
+            // shallow object should be processed normally
             expect(items[0]).toEqual({
+                shallow: 'data',
                 level2: {
                     level3: {
                         level4: '[MAX_DEPTH_EXCEEDED]'
@@ -451,16 +484,6 @@ describe('ToolLogger', () => {
             });
             // Second item: simple string should remain unchanged
             expect(items[1]).toBe('simple-item');
-            // Third item: shallow object should be processed normally
-            expect(items[2]).toEqual({ shallow: 'data' });
-            // Fourth item: another deeply nested object with inner parts replaced by placeholder
-            expect(items[3]).toEqual({
-                level2: {
-                    level3: {
-                        level4: '[MAX_DEPTH_EXCEEDED]'
-                    }
-                }
-            });
         });
     });
     describe('logResponse', () => {
@@ -475,7 +498,8 @@ describe('ToolLogger', () => {
                 status: 200,
                 contentType: 'application/json',
                 contentLength: 34, // JSON.stringify({ result: 'success', data: 'test' }).length
-                success: true
+                success: true,
+                responseBody: { result: 'success', data: 'test' }
             };
             expect(mockLogger.info).toHaveBeenCalledWith(app_sdk_1.LogVisibility.Zaius, JSON.stringify(expectedLog));
         });
@@ -490,13 +514,13 @@ describe('ToolLogger', () => {
                 status: 400,
                 contentType: 'application/json',
                 contentLength: 23,
-                success: false
+                success: false,
+                responseBody: { error: 'Bad request' }
             });
         });
-        it('should handle response without bodyJSON', () => {
+        it('should handle response without body data', () => {
             const req = createMockRequest();
-            const response = createMockResponse(204);
-            response.bodyJSON = undefined;
+            const response = createMockResponseWithBody(204, undefined, 'application/json');
             ToolLogger_1.ToolLogger.logResponse(req, response);
             expectJsonLog({
                 event: 'opal_tool_response',
@@ -517,10 +541,11 @@ describe('ToolLogger', () => {
                 status: 200,
                 contentType: 'application/json',
                 contentLength: 15,
-                success: true
+                success: true,
+                responseBody: { data: 'test' }
             });
         });
-        it('should handle unknown content type', () => {
+        it('should handle unknown content type - response body not logged', () => {
             const req = createMockRequest();
             const response = createMockResponse(200, { data: 'test' });
             response.headers.get = jest.fn().mockReturnValue(null);
@@ -536,18 +561,29 @@ describe('ToolLogger', () => {
         });
         it('should handle content length calculation error', () => {
             const req = createMockRequest();
-            const circularObj = { name: 'test' };
-            circularObj.self = circularObj; // Create circular reference
-            const response = createMockResponse(200, circularObj);
-            ToolLogger_1.ToolLogger.logResponse(req, response);
-            expectJsonLog({
-                event: 'opal_tool_response',
-                path: '/test-tool',
+            // Simulate a response that will cause errors when trying to calculate content length
+            // by providing a Uint8Array but the underlying data causes issues
+            const mockHeaders = {
+                get: jest.fn().mockReturnValue('application/json')
+            };
+            const response = {
                 status: 200,
-                contentType: 'application/json',
-                contentLength: 'unknown',
-                success: true
+                headers: mockHeaders
+            };
+            // Create a getter that throws when accessed (simulating serialization error)
+            Object.defineProperty(response, 'bodyAsU8Array', {
+                get() {
+                    throw new Error('Circular structure');
+                },
+                enumerable: true
             });
+            ToolLogger_1.ToolLogger.logResponse(req, response);
+            // The error causes both contentLength and responseBody to fail gracefully
+            const logCall = mockLogger.info.mock.calls[0];
+            const loggedData = JSON.parse(logCall[1]);
+            expect(loggedData.event).toBe('opal_tool_response');
+            expect(loggedData.contentLength).toBe('unknown');
+            expect(loggedData.responseBody).toBeUndefined();
         });
         it('should correctly identify success status codes', () => {
             const req = createMockRequest();
@@ -565,38 +601,125 @@ describe('ToolLogger', () => {
                 mockLogger.info.mockClear();
                 const response = createMockResponse(status);
                 ToolLogger_1.ToolLogger.logResponse(req, response);
-                expectJsonLog({
-                    event: 'opal_tool_response',
-                    path: '/test-tool',
-                    status,
-                    contentType: 'application/json',
-                    contentLength: 2,
-                    success: expected
-                });
+                const logCall = mockLogger.info.mock.calls[0];
+                const loggedData = JSON.parse(logCall[1]);
+                expect(loggedData.event).toBe('opal_tool_response');
+                expect(loggedData.path).toBe('/test-tool');
+                expect(loggedData.status).toBe(status);
+                expect(loggedData.contentType).toBe('application/json');
+                expect(loggedData.contentLength).toBe(2);
+                expect(loggedData.success).toBe(expected);
+                expect(loggedData.responseBody).toEqual({});
             });
         });
         it('should handle different content types', () => {
             const req = createMockRequest();
             const testCases = [
-                'application/json',
-                'text/plain',
-                'application/xml',
-                'text/html'
+                { contentType: 'application/json', expectedBody: { data: 'test' } },
+                { contentType: 'text/plain', expectedBody: '{"data":"test"}' },
+                { contentType: 'text/html', expectedBody: '{"data":"test"}' }
             ];
-            testCases.forEach((contentType) => {
+            testCases.forEach(({ contentType, expectedBody }) => {
                 mockLogger.info.mockClear();
                 const response = createMockResponse(200, { data: 'test' });
                 response.headers.get = jest.fn().mockReturnValue(contentType);
                 ToolLogger_1.ToolLogger.logResponse(req, response);
-                expectJsonLog({
-                    event: 'opal_tool_response',
-                    path: '/test-tool',
-                    status: 200,
-                    contentType,
-                    contentLength: 15,
-                    success: true
-                });
+                const logCall = mockLogger.info.mock.calls[0];
+                const loggedData = JSON.parse(logCall[1]);
+                expect(loggedData.event).toBe('opal_tool_response');
+                expect(loggedData.path).toBe('/test-tool');
+                expect(loggedData.status).toBe(200);
+                expect(loggedData.contentType).toBe(contentType);
+                expect(loggedData.contentLength).toBe(15);
+                expect(loggedData.success).toBe(true);
+                expect(loggedData.responseBody).toEqual(expectedBody);
+            });
+        });
+        it('should log short successful response body', () => {
+            const req = createMockRequest();
+            const response = createMockResponse(200, { result: 'success', data: 'test' });
+            ToolLogger_1.ToolLogger.logResponse(req, response);
+            const logCall = mockLogger.info.mock.calls[0];
+            const loggedData = JSON.parse(logCall[1]);
+            expect(loggedData.responseBody).toEqual({ result: 'success', data: 'test' });
+            expect(loggedData.success).toBe(true);
+        });
+        it('should truncate long successful response body to 256 chars', () => {
+            const req = createMockRequest();
+            const longData = 'a'.repeat(300);
+            const response = createMockResponse(200, { message: longData });
+            ToolLogger_1.ToolLogger.logResponse(req, response);
+            const logCall = mockLogger.info.mock.calls[0];
+            const loggedData = JSON.parse(logCall[1]);
+            // The response body should be truncated when stringified
+            expect(loggedData.responseBody.message).toContain(' truncated]...');
+        });
+        it('truncates long properties of failed responses', () => {
+            const req = createMockRequest();
+            const longData = 'a'.repeat(150);
+            const response = createMockResponse(400, { error: 'Bad request', details: longData });
+            ToolLogger_1.ToolLogger.logResponse(req, response);
+            const logCall = mockLogger.info.mock.calls[0];
+            const loggedData = JSON.parse(logCall[1]);
+            // Failed responses should include full body, not truncated
+            expect(loggedData.responseBody.error).toEqual('Bad request');
+            expect(loggedData.responseBody.details).toContain(' truncated]...');
+            expect(loggedData.success).toBe(false);
+        });
+        it('should redact sensitive data in response body', () => {
+            const req = createMockRequest();
+            const response = createMockResponse(200, {
+                user: 'john',
+                password: 'secret123',
+                api_key: 'key456',
+                data: 'public'
             });
+            ToolLogger_1.ToolLogger.logResponse(req, response);
+            const logCall = mockLogger.info.mock.calls[0];
+            const loggedData = JSON.parse(logCall[1]);
+            expect(loggedData.responseBody).toEqual({
+                user: 'john',
+                password: '[REDACTED]',
+                api_key: '[REDACTED]',
+                data: 'public'
+            });
+        });
+        it('should handle response with no body', () => {
+            const req = createMockRequest();
+            const response = createMockResponseWithBody(204, undefined, 'application/json');
+            ToolLogger_1.ToolLogger.logResponse(req, response);
+            const logCall = mockLogger.info.mock.calls[0];
+            const loggedData = JSON.parse(logCall[1]);
+            expect(loggedData.responseBody).toBeUndefined();
+            expect(loggedData.success).toBe(true);
+        });
+        it('should handle plain text response body', () => {
+            const req = createMockRequest();
+            const plainText = 'This is a plain text response';
+            const response = createMockResponseWithBody(200, new Uint8Array(Buffer.from(plainText)), 'text/plain');
+            ToolLogger_1.ToolLogger.logResponse(req, response);
+            const logCall = mockLogger.info.mock.calls[0];
+            const loggedData = JSON.parse(logCall[1]);
+            expect(loggedData.responseBody).toBe(plainText);
+        });
+        it('should truncate long plain text successful responses', () => {
+            const req = createMockRequest();
+            const longText = 'a'.repeat(300);
+            const response = createMockResponseWithBody(200, new Uint8Array(Buffer.from(longText)), 'text/plain');
+            ToolLogger_1.ToolLogger.logResponse(req, response);
+            const logCall = mockLogger.info.mock.calls[0];
+            const loggedData = JSON.parse(logCall[1]);
+            expect(loggedData.responseBody).toBe(`${'a'.repeat(256)}... (truncated)`);
+        });
+        it('should not truncate long plain text failed responses', () => {
+            const req = createMockRequest();
+            const longText = 'a'.repeat(150);
+            const response = createMockResponseWithBody(500, new Uint8Array(Buffer.from(longText)), 'text/plain');
+            ToolLogger_1.ToolLogger.logResponse(req, response);
+            const logCall = mockLogger.info.mock.calls[0];
+            const loggedData = JSON.parse(logCall[1]);
+            expect(loggedData.responseBody).toBe(longText);
+            expect(loggedData.success).toBe(false);
         });
     });
     describe('edge cases', () => {
@@ -637,7 +760,7 @@ describe('ToolLogger', () => {
                         string: 'text',
                         number: 42,
                         boolean: true,
-                        array: [1, 2, 3],
+                        array: [1, 2],
                         object: { nested: 'value' },
                         nullValue: null,
                         password: 'secret'
@@ -653,7 +776,7 @@ describe('ToolLogger', () => {
                     string: 'text',
                     number: 42,
                     boolean: true,
-                    array: [1, 2, 3],
+                    array: [1, 2],
                     object: { nested: 'value' },
                     nullValue: null,
                     password: '[REDACTED]'
@@ -729,24 +852,7 @@ describe('ToolLogger', () => {
                                     description: 'OVERRIDDEN: Enhanced minimum detectable effect calculation',
                                     required: true
                                 },
-                                {
-                                    name: 'sigLevel',
-                                    type: 'number',
-                                    description: 'OVERRIDDEN: Enhanced statistical significance level',
-                                    required: true
-                                },
-                                {
-                                    name: 'numVariations',
-                                    type: 'number',
-                                    description: 'OVERRIDDEN: Enhanced number of variations handling',
-                                    required: true
-                                },
-                                {
-                                    name: 'dailyVisitors',
-                                    type: 'number',
-                                    description: 'OVERRIDDEN: Enhanced daily visitor count with forecasting',
-                                    required: true
-                                }
+                                '... (3 more items truncated)'
                             ]
                         }
                     ]