@prestyj/ai 5.26.0 → 5.27.0

package/dist/index.js

@@ -2678,7 +2678,7 @@ async function* runStream3(options, retriedWithoutReasoning = false) {
     if (response.status === 400 && message === `The '${options.model}' model is not supported when using Codex with a ChatGPT account.`) {
       hint = "This model is not available through your ChatGPT account. Switch to a model listed for OpenAI via the model selector, or check your ChatGPT usage limits.";
     } else if (response.status === 404 && text.includes("does not exist")) {
-      hint = "This model is not in OpenAI's current catalog for your ChatGPT account. Switch to GPT-6 Astra, GPT-5.6 Sol, GPT-5.6 Terra, or GPT-5.6 Luna via the model selector.";
+      hint = "This model is not in OpenAI's current catalog for your ChatGPT account. Switch to GPT-6 Astra, GPT-6 Sol, or GPT-6 Luna via the model selector.";
     }
     throw new ProviderError("openai", message, {
       statusCode: response.status,
@@ -4068,7 +4068,8 @@ var REDACTED = "[REDACTED]";
 var TRUNCATED = "[TRUNCATED]";
 var CIRCULAR = "[CIRCULAR]";
 var SENSITIVE_NAME = /(?:^|[_-])(?:api[_-]?key|access[_-]?token|refresh[_-]?token|token|key|auth(?:orization)?|bearer|cookie|credential|private[_-]?key|password|passwd|secret)(?:$|[_-])/i;
-var SENSITIVE_ASSIGNMENT = /\b((?:api[_-]?key|access[_-]?token|refresh[_-]?token|token|key|auth(?:orization)?|bearer|cookie|credential|private[_-]?key|password|passwd|secret))\b(\s*[=:]\s*)(["']?)([^\s,"';}]+)\3/gi;
+var ENV_SECRET_ASSIGNMENT = /\b((?:[A-Z0-9]+_)*(?:API_?KEY|ACCESS_TOKEN|REFRESH_TOKEN|TOKEN|KEY|AUTH|AUTHORIZATION|BEARER|CREDENTIALS?|PASSWORD|PASSWD|SECRET))\b(\s*[=:]\s*)(["']?)(?!\$|process\.env|os\.environ|import\.meta|env\.)(?=[^\s,"';}]*\d)([^\s,"';}=$][^\s,"';}]{7,})\3/g;
+var COMPACT_SECRET_ASSIGNMENT = /\b((?:[a-z0-9]+[_-])*(?:api[_-]?key|access[_-]?token|refresh[_-]?token|token|auth|authorization|credentials?|password|passwd|secret)|(?:[a-z0-9]+[_-])+key)=(["']?)(?!\$)([^\s,"'&;}=][^\s,"'&;}]{7,})\2/gi;
 function escaped(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -4097,8 +4098,11 @@ function redactText(text, options = {}) {
     /\b(authorization\s*[:=]\s*)(?:bearer|basic)\s+[^\s,;]+/gi,
     `$1${REDACTED}`
   );
-  result = result.replace(/\b(bearer|basic)\s+[A-Za-z0-9+/_.=-]{8,}/gi, `$1 ${REDACTED}`);
-  result = result.replace(/\b(cookie|set-cookie)(\s*[:=]\s*)[^\r\n]+/gi, `$1$2${REDACTED}`);
+  result = result.replace(
+    /\b(bearer|basic)\s+(?![A-Za-z][a-z]{0,14}\b)[A-Za-z0-9+/_.=-]{8,}/gi,
+    `$1 ${REDACTED}`
+  );
+  result = result.replace(/\b(cookie|set-cookie)(\s*:\s*)[^\s=;:]+=[^\r\n]*/gi, `$1$2${REDACTED}`);
   result = result.replace(
     /\beyJ[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\b/g,
     REDACTED
@@ -4108,8 +4112,12 @@ function redactText(text, options = {}) {
     REDACTED
   );
   result = result.replace(
-    SENSITIVE_ASSIGNMENT,
-    (_match, name, separator) => `${name}${separator}${REDACTED}`
+    ENV_SECRET_ASSIGNMENT,
+    (_match, name, separator, quote) => `${name}${separator}${quote}${REDACTED}${quote}`
+  );
+  result = result.replace(
+    COMPACT_SECRET_ASSIGNMENT,
+    (_match, name, quote) => `${name}=${quote}${REDACTED}${quote}`
   );
   for (const secret of normalizedSecrets(options.secrets)) {
     result = result.replace(new RegExp(escaped(secret), "g"), REDACTED);