@rudderhq/server 0.7.2-canary.0 → 0.7.3

package/dist/middleware/logger.test.js

@@ -1,4 +1,5 @@
 import express from "express";
+import { once } from "node:events";
 import request from "supertest";
 import { describe, expect, it } from "vitest";
 import { markBrowserHttpRequestBodySensitive, markHttpRequestBodySensitive, requestBodyForLogs, requestHeadersForLogs, requestQueryForLogs, requestUrlForLogs, serializeHttpRequestForLogs, serializeHttpResponseForLogs, } from "./logger.js";
@@ -98,16 +99,25 @@ describe("HTTP request-body logging", () => {
             loggedBody = requestBodyForLogs(req, req.body);
             res.status(req.originalUrl.includes("clipboard") ? 401 : 403).json({ error: "rejected before route" });
         });
-        const unauthorized = await request(app)
-            .post("/api/browser/clipboard")
-            .send({ items: [{ entries: [{ text: "clipboard-secret" }] }] });
-        expect(unauthorized.status).toBe(401);
-        expect(loggedBody).toBe("[REDACTED]");
-        const mismatched = await request(app)
-            .post("/api/browser/evaluate")
-            .send({ function: "() => 'private-value'" });
-        expect(mismatched.status).toBe(403);
-        expect(loggedBody).toBe("[REDACTED]");
+        const server = app.listen(0, "127.0.0.1");
+        await once(server, "listening");
+        try {
+            const unauthorized = await request(server)
+                .post("/api/browser/clipboard")
+                .send({ items: [{ entries: [{ text: "clipboard-secret" }] }] });
+            expect(unauthorized.status).toBe(401);
+            expect(loggedBody).toBe("[REDACTED]");
+            const mismatched = await request(server)
+                .post("/api/browser/evaluate")
+                .send({ function: "() => 'private-value'" });
+            expect(mismatched.status).toBe(403);
+            expect(loggedBody).toBe("[REDACTED]");
+        }
+        finally {
+            await new Promise((resolve, reject) => {
+                server.close((error) => error ? reject(error) : resolve());
+            });
+        }
     });
     it("redacts OAuth callback URL and query before auth or route middleware runs", () => {
         const req = {
@@ -156,6 +166,9 @@ describe("HTTP request-body logging", () => {
         const requestHeaders = requestHeadersForLogs({ originalUrl: "/api/auth/local-claim" }, {
             cookie: "better-auth.session_token=secret",
             authorization: "Bearer secret",
+            "proxy-authorization": "Basic proxy-secret",
+            "x-api-key": "api-secret",
+            "x-rudder-api-key": "rudder-secret",
             origin: "http://127.0.0.1:3100",
         });
         const response = serializeHttpResponseForLogs({
@@ -168,6 +181,9 @@ describe("HTTP request-body logging", () => {
         expect(requestHeaders).toEqual({
             cookie: "[REDACTED]",
             authorization: "[REDACTED]",
+            "proxy-authorization": "[REDACTED]",
+            "x-api-key": "[REDACTED]",
+            "x-rudder-api-key": "[REDACTED]",
             origin: "http://127.0.0.1:3100",
         });
         expect(response).toEqual({

package/dist/middleware/logger.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.test.js","sourceRoot":"","sources":["../../src/middleware/logger.test.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AAErB,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,uBAAuB;YAC9B,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,CAAC,qBAAqB,CAAC;SAC/B,CAAC;QAEF,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAEhC,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAEtE,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/F,MAAM,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,sCAAsC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrG,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtG,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChG,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,QAAQ,GAAG,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,sBAAsB;YAC7B,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE;SACrC,CAAC;QAEF,MAAM,CAAC,kBAAkB,CACvB,EAAE,WAAW,EAAE,0BAA0B,EAAE,EAC3C,QAAQ,CACT,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,MAAM,CAAC,kBAAkB,CACvB,EAAE,GAAG,EAAE,kCAAkC,EAAE,EAC3C,OAAO,CACR,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACpB,kBAAkB,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,EAAE,QAAQ,CAAC;YACzE,kBAAkB,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAAE,OAAO,CAAC;SACxE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,EAAE;YACR,iBAAiB,EAAE,CAAC;oBAClB,YAAY,EAAE,uBAAuB;oBACrC,OAAO,EAAE,0BAA0B;iBACpC,CAAC;SACH,CAAC;QACF,MAAM,MAAM,GAAG;YACb,OAAO,EAAE;gBACP,IAAI,EAAE,EAAE;gBACR,iBAAiB,EAAE,CAAC;wBAClB,YAAY,EAAE,uBAAuB;wBACrC,OAAO,EAAE,IAAI;qBACd,CAAC;aACH;SACF,CAAC;QAEF,MAAM,CAAC,kBAAkB,CACvB,EAAE,WAAW,EAAE,4BAA4B,EAAE,EAC7C,MAAM,CACP,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,MAAM,CAAC,kBAAkB,CACvB,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAC1C,MAAM,CACP,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CACtC,EAAE,WAAW,EAAE,4BAA4B,EAAE,EAC7C,MAAM,CACP,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CACtC,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAC1C,MAAM,CACP,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,IAAI,EAAE,EAAE;YACR,iBAAiB,EAAE,CAAC;oBAClB,YAAY,EAAE,iCAAiC;oBAC/C,OAAO,EAAE,oCAAoC;iBAC9C,CAAC;SACH,CAAC,CAAC;QACH,MAAM,eAAe,GAAG;YACtB,OAAO;YACP,gBAAgB,EAAE,YAAY;SAC/B,CAAC;QACF,MAAM,eAAe,GAAG;YACtB,OAAO;YACP,eAAe,EAAE,GAAG;SACrB,CAAC;QAEF,MAAM,CAAC,kBAAkB,CACvB,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAC1C,eAAe,CAChB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,MAAM,CAAC,kBAAkB,CACvB,EAAE,WAAW,EAAE,kCAAkC,EAAE,EACnD,eAAe,CAChB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,kBAAkB,CAAC,EAAE,EAAE,eAAe,CAAC;YACvC,kBAAkB,CAAC,EAAE,EAAE,eAAe,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAEnE,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE;YAC5B,OAAO,EAAE,uEAAuE;SACjF,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,UAAmB,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAC7C,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACnB,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACzG,CAAC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;aACpC,IAAI,CAAC,wBAAwB,CAAC;aAC9B,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;aAClC,IAAI,CAAC,uBAAuB,CAAC;aAC7B,IAAI,CAAC,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,GAAG,GAAG;YACV,WAAW,EAAE,iFAAiF;YAC9F,GAAG,EAAE,iFAAiF;YACtF,KAAK,EAAE;gBACL,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAE,UAAU;gBAChB,iBAAiB,EAAE,SAAS;gBAC5B,GAAG,EAAE,4BAA4B;aAClC;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,qFAAqF;gBAC9F,MAAM,EAAE,6BAA6B;gBACrC,aAAa,EAAE,wBAAwB;gBACvC,YAAY,EAAE,MAAM;aACrB;SACF,CAAC;QAEF,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC1E,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/D,MAAM,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YACtD,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,MAAM;SACrB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC;YAC/B,GAAG,EAAE,oCAAoC;YACzC,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE;gBACP,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,YAAY;gBACpB,aAAa,EAAE,YAAY;gBAC3B,YAAY,EAAE,MAAM;aACrB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACpB,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC;YAC3B,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC;YAC1C,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC;YAChD,UAAU;SACX,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,oGAAoG,CAAC,CAAC;IACxH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,cAAc,GAAG,qBAAqB,CAC1C,EAAE,WAAW,EAAE,uBAAuB,EAAE,EACxC;YACE,MAAM,EAAE,kCAAkC;YAC1C,aAAa,EAAE,eAAe;YAC9B,MAAM,EAAE,uBAAuB;SAChC,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,4BAA4B,CAAC;YAC5C,UAAU,EAAE,GAAG;YACf,OAAO,EAAE;gBACP,YAAY,EAAE,4CAA4C;gBAC1D,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,YAAY;YAC3B,MAAM,EAAE,uBAAuB;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE;gBACP,YAAY,EAAE,YAAY;gBAC1B,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"logger.test.js","sourceRoot":"","sources":["../../src/middleware/logger.test.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AAErB,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,uBAAuB;YAC9B,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,CAAC,qBAAqB,CAAC;SAC/B,CAAC;QAEF,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAEhC,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAEtE,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/F,MAAM,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,sCAAsC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrG,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtG,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChG,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,QAAQ,GAAG,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,sBAAsB;YAC7B,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE;SACrC,CAAC;QAEF,MAAM,CAAC,kBAAkB,CACvB,EAAE,WAAW,EAAE,0BAA0B,EAAE,EAC3C,QAAQ,CACT,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,MAAM,CAAC,kBAAkB,CACvB,EAAE,GAAG,EAAE,kCAAkC,EAAE,EAC3C,OAAO,CACR,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACpB,kBAAkB,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,EAAE,QAAQ,CAAC;YACzE,kBAAkB,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAAE,OAAO,CAAC;SACxE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,EAAE;YACR,iBAAiB,EAAE,CAAC;oBAClB,YAAY,EAAE,uBAAuB;oBACrC,OAAO,EAAE,0BAA0B;iBACpC,CAAC;SACH,CAAC;QACF,MAAM,MAAM,GAAG;YACb,OAAO,EAAE;gBACP,IAAI,EAAE,EAAE;gBACR,iBAAiB,EAAE,CAAC;wBAClB,YAAY,EAAE,uBAAuB;wBACrC,OAAO,EAAE,IAAI;qBACd,CAAC;aACH;SACF,CAAC;QAEF,MAAM,CAAC,kBAAkB,CACvB,EAAE,WAAW,EAAE,4BAA4B,EAAE,EAC7C,MAAM,CACP,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,MAAM,CAAC,kBAAkB,CACvB,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAC1C,MAAM,CACP,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CACtC,EAAE,WAAW,EAAE,4BAA4B,EAAE,EAC7C,MAAM,CACP,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CACtC,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAC1C,MAAM,CACP,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,IAAI,EAAE,EAAE;YACR,iBAAiB,EAAE,CAAC;oBAClB,YAAY,EAAE,iCAAiC;oBAC/C,OAAO,EAAE,oCAAoC;iBAC9C,CAAC;SACH,CAAC,CAAC;QACH,MAAM,eAAe,GAAG;YACtB,OAAO;YACP,gBAAgB,EAAE,YAAY;SAC/B,CAAC;QACF,MAAM,eAAe,GAAG;YACtB,OAAO;YACP,eAAe,EAAE,GAAG;SACrB,CAAC;QAEF,MAAM,CAAC,kBAAkB,CACvB,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAC1C,eAAe,CAChB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,MAAM,CAAC,kBAAkB,CACvB,EAAE,WAAW,EAAE,kCAAkC,EAAE,EACnD,eAAe,CAChB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,kBAAkB,CAAC,EAAE,EAAE,eAAe,CAAC;YACvC,kBAAkB,CAAC,EAAE,EAAE,eAAe,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAEnE,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE;YAC5B,OAAO,EAAE,uEAAuE;SACjF,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,UAAmB,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAC7C,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACnB,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACzG,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;iBACvC,IAAI,CAAC,wBAAwB,CAAC;iBAC9B,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAEtC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;iBACrC,IAAI,CAAC,uBAAuB,CAAC;iBAC7B,IAAI,CAAC,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC/C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,GAAG,GAAG;YACV,WAAW,EAAE,iFAAiF;YAC9F,GAAG,EAAE,iFAAiF;YACtF,KAAK,EAAE;gBACL,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAE,UAAU;gBAChB,iBAAiB,EAAE,SAAS;gBAC5B,GAAG,EAAE,4BAA4B;aAClC;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,qFAAqF;gBAC9F,MAAM,EAAE,6BAA6B;gBACrC,aAAa,EAAE,wBAAwB;gBACvC,YAAY,EAAE,MAAM;aACrB;SACF,CAAC;QAEF,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC1E,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/D,MAAM,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YACtD,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,MAAM;SACrB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC;YAC/B,GAAG,EAAE,oCAAoC;YACzC,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE;gBACP,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,YAAY;gBACpB,aAAa,EAAE,YAAY;gBAC3B,YAAY,EAAE,MAAM;aACrB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACpB,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC;YAC3B,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC;YAC1C,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC;YAChD,UAAU;SACX,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,oGAAoG,CAAC,CAAC;IACxH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,cAAc,GAAG,qBAAqB,CAC1C,EAAE,WAAW,EAAE,uBAAuB,EAAE,EACxC;YACE,MAAM,EAAE,kCAAkC;YAC1C,aAAa,EAAE,eAAe;YAC9B,qBAAqB,EAAE,oBAAoB;YAC3C,WAAW,EAAE,YAAY;YACzB,kBAAkB,EAAE,eAAe;YACnC,MAAM,EAAE,uBAAuB;SAChC,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,4BAA4B,CAAC;YAC5C,UAAU,EAAE,GAAG;YACf,OAAO,EAAE;gBACP,YAAY,EAAE,4CAA4C;gBAC1D,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,YAAY;YAC3B,qBAAqB,EAAE,YAAY;YACnC,WAAW,EAAE,YAAY;YACzB,kBAAkB,EAAE,YAAY;YAChC,MAAM,EAAE,uBAAuB;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE;gBACP,YAAY,EAAE,YAAY;gBAC1B,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/redaction.d.ts

@@ -1,4 +1,5 @@
 export declare const REDACTED_EVENT_VALUE = "***REDACTED***";
+export declare function omitSecretPayloadFields(value: unknown): unknown;
 export declare function sanitizeRecord(record: Record<string, unknown>): Record<string, unknown>;
 export declare function redactEventPayload(payload: Record<string, unknown> | null): Record<string, unknown> | null;
 //# sourceMappingURL=redaction.d.ts.map

package/dist/redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AA2BrD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBvF;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAI1G"}
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AA2BrD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAU/D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBvF;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAI1G"}

package/dist/redaction.js

@@ -30,6 +30,19 @@ function isPlainBinding(value) {
         return false;
     return value.type === "plain" && "value" in value;
 }
+export function omitSecretPayloadFields(value) {
+    if (Array.isArray(value))
+        return value.map(omitSecretPayloadFields);
+    if (!value || typeof value !== "object")
+        return value;
+    if (isSecretRefBinding(value))
+        return value;
+    if (!isPlainObject(value))
+        return value;
+    return Object.fromEntries(Object.entries(value)
+        .filter(([key, entry]) => !SECRET_PAYLOAD_KEY_RE.test(key) || isSecretRefBinding(entry))
+        .map(([key, entry]) => [key, omitSecretPayloadFields(entry)]));
+}
 export function sanitizeRecord(record) {
     const redacted = {};
     for (const [key, value] of Object.entries(record)) {

package/dist/redaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,MAAM,qBAAqB,GACzB,qJAAqJ,CAAC;AACxJ,MAAM,YAAY,GAAG,uEAAuE,CAAC;AAC7F,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAErD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACvF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,IAAI,KAAK,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA+B;IAC5D,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,QAAQ,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC;YACrC,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAuC;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5C,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,MAAM,qBAAqB,GACzB,qJAAqJ,CAAC;AACxJ,MAAM,YAAY,GAAG,uEAAuE,CAAC;AAC7F,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAErD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACvF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,IAAI,KAAK,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;SACvF,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA+B;IAC5D,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,QAAQ,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC;YACrC,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAuC;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5C,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/routes/access.helpers.d.ts

@@ -37,6 +37,7 @@ export declare function toJoinRequestResponse(row: typeof joinRequests.$inferSel
     requestType: string;
     agentName: string | null;
     agentDefaultsPayload: Record<string, unknown> | null;
+    rejectedAt: Date | null;
     approvedByUserId: string | null;
     approvedAt: Date | null;
     inviteId: string;
@@ -47,7 +48,6 @@ export declare function toJoinRequestResponse(row: typeof joinRequests.$inferSel
     claimSecretConsumedAt: Date | null;
     createdAgentId: string | null;
     rejectedByUserId: string | null;
-    rejectedAt: Date | null;
 };
 export type JoinDiagnostic = {
     code: string;

package/dist/routes/agent-issue-creation.d.ts

@@ -0,0 +1,25 @@
+import type { Db } from "@rudderhq/db";
+import { Router, type Request } from "express";
+import type { LogActivityInput } from "../services/activity-log.js";
+import type { agentIssueCreationService } from "../services/agent-issue-creation.js";
+import type { WakeupOptions } from "../services/runtime-kernel/heartbeat.core.js";
+type AgentIssueCreationService = ReturnType<typeof agentIssueCreationService>;
+type AgentIssueCreationHeartbeat = {
+    wakeup: (agentId: string, options: WakeupOptions) => Promise<{
+        id: string;
+        status: string;
+        wakeupRequestId: string | null;
+    } | null>;
+    startNextQueuedRunForAgent: (agentId: string) => Promise<unknown>;
+};
+type AgentIssueCreationRouteContext = {
+    router: Router;
+    service: AgentIssueCreationService;
+    heartbeat: AgentIssueCreationHeartbeat;
+    assertCanAssignTasks: (req: Request, orgId: string) => Promise<void>;
+    logActivity: (db: Db, input: LogActivityInput) => Promise<unknown>;
+    db: Db;
+};
+export declare function registerAgentIssueCreationRoutes(ctx: AgentIssueCreationRouteContext): void;
+export {};
+//# sourceMappingURL=agent-issue-creation.d.ts.map

package/dist/routes/agent-issue-creation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-issue-creation.d.ts","sourceRoot":"","sources":["../../src/routes/agent-issue-creation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,EAAE,MAAM,SAAS,CAAC;AAI/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAGlF,KAAK,yBAAyB,GAAG,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE9E,KAAK,2BAA2B,GAAG;IACjC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC;QAC3D,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,GAAG,IAAI,CAAC,CAAC;IACV,0BAA0B,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE,CAAC;AAEF,KAAK,8BAA8B,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,yBAAyB,CAAC;IACnC,SAAS,EAAE,2BAA2B,CAAC;IACvC,oBAAoB,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnE,EAAE,EAAE,EAAE,CAAC;CACR,CAAC;AAgBF,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,8BAA8B,QA+MnF"}

package/dist/routes/agent-issue-creation.js

@@ -0,0 +1,201 @@
+import { createAgentIssueCreationRequestSchema } from "@rudderhq/shared";
+import { forbidden, unprocessable } from "../errors.js";
+import { logger } from "../middleware/logger.js";
+import { validate } from "../middleware/validate.js";
+import { assertCompanyAccess, getActorInfo } from "./authz.js";
+const REQUEST_WAKEUP_REASON = "agent_issue_creation_requested";
+function requestWakeupIdempotencyKey(requestId, wakeupAttemptId) {
+    return `agent-issue-creation:${requestId}:${wakeupAttemptId}`;
+}
+function isDeferredWakeup(status) {
+    return typeof status === "string" && status.startsWith("deferred_");
+}
+function isRecoverableWakeup(status) {
+    return status === "queued" || status === "running" || isDeferredWakeup(status);
+}
+export function registerAgentIssueCreationRoutes(ctx) {
+    const { router, service, heartbeat, assertCanAssignTasks, logActivity, db } = ctx;
+    async function admitRequest(req, orgId, request, activityAction) {
+        const actor = getActorInfo(req);
+        const wakeupKey = requestWakeupIdempotencyKey(request.id, request.wakeupAttemptId);
+        let wakeupCompleted = false;
+        let linkedRun = null;
+        let linkedWakeup = null;
+        try {
+            await logActivity(db, {
+                orgId,
+                actorType: actor.actorType,
+                actorId: actor.actorId,
+                agentId: null,
+                runId: null,
+                action: activityAction,
+                entityType: "agent_issue_creation_request",
+                entityId: request.id,
+                details: {
+                    requestId: request.id,
+                    requestedByUserId: request.requestedByUserId,
+                    agentId: request.agentId,
+                    projectId: request.projectId,
+                    goalId: request.goalId,
+                    parentId: request.parentId,
+                    idempotencyKey: request.idempotencyKey,
+                },
+                idempotencyKey: `${activityAction}:${request.id}:${request.idempotencyKey}`,
+            });
+            const run = await heartbeat.wakeup(request.agentId, {
+                source: "on_demand",
+                triggerDetail: "system",
+                reason: REQUEST_WAKEUP_REASON,
+                idempotencyKey: wakeupKey,
+                // Link the durable request before a fast runtime can reach terminal state.
+                // The start below preserves normal immediate execution after linkage.
+                startImmediately: false,
+                requestedByActorType: "user",
+                requestedByActorId: req.actor.userId,
+                payload: {
+                    agentIssueCreationRequestId: request.id,
+                    instruction: request.instruction,
+                },
+                contextSnapshot: {
+                    ...(request.contextSnapshot ?? {}),
+                    agentIssueCreationRequest: {
+                        id: request.id,
+                        requestedByUserId: request.requestedByUserId,
+                        agentId: request.agentId,
+                        instruction: request.instruction,
+                        projectId: request.projectId,
+                        goalId: request.goalId,
+                        parentId: request.parentId,
+                    },
+                    targetType: "agent_issue_creation",
+                    targetId: request.id,
+                    taskKey: `agent-issue-creation:${request.id}`,
+                    agentIssueCreationRequestId: request.id,
+                    instruction: request.instruction,
+                    projectId: request.projectId,
+                    goalId: request.goalId,
+                    parentId: request.parentId,
+                },
+            });
+            wakeupCompleted = true;
+            linkedRun = run;
+            const wakeup = await service.getWakeupByIdempotencyKey(orgId, request.agentId, wakeupKey);
+            linkedWakeup = wakeup;
+            const nextStatus = run
+                ? run.status === "running" ? "running" : "queued"
+                : isDeferredWakeup(wakeup?.status)
+                    ? "deferred"
+                    : "failed";
+            const error = nextStatus === "failed"
+                ? wakeup?.error ?? "Agent wakeup was not accepted"
+                : null;
+            const updated = await service.update(orgId, request.id, {
+                status: nextStatus,
+                wakeupRequestId: wakeup?.id ?? run?.wakeupRequestId ?? null,
+                runId: run?.id ?? wakeup?.runId ?? null,
+                ...(run?.status === "running" ? { startedAt: new Date() } : {}),
+                ...(nextStatus === "failed" ? { finishedAt: new Date(), error } : { error: null }),
+            }, { expectedStatuses: ["queued"] });
+            const admitted = updated ?? await service.getById(orgId, request.id);
+            if (!admitted)
+                throw new Error("Agent Issue request disappeared after wakeup admission");
+            if (nextStatus === "failed") {
+                throw unprocessable(error ?? "Agent wakeup was not accepted");
+            }
+            if (admitted.status === "queued") {
+                try {
+                    await heartbeat.startNextQueuedRunForAgent(request.agentId);
+                }
+                catch (startError) {
+                    logger.warn({ err: startError, orgId, requestId: request.id, agentId: request.agentId }, "failed to start admitted Agent Issue creation run; leaving it queued for recovery");
+                }
+            }
+            return admitted;
+        }
+        catch (error) {
+            try {
+                const recoverable = wakeupCompleted && ((linkedRun?.status === "queued" || linkedRun?.status === "running")
+                    || isRecoverableWakeup(linkedWakeup?.status));
+                if (recoverable) {
+                    await service.update(orgId, request.id, {
+                        status: linkedRun?.status === "running"
+                            ? "running"
+                            : isDeferredWakeup(linkedWakeup?.status)
+                                ? "deferred"
+                                : "queued",
+                        wakeupRequestId: linkedWakeup?.id ?? linkedRun?.wakeupRequestId ?? null,
+                        runId: linkedRun?.id ?? linkedWakeup?.runId ?? null,
+                        error: null,
+                        finishedAt: null,
+                        ...(linkedRun?.status === "running" ? { startedAt: new Date() } : {}),
+                    }, { expectedStatuses: ["queued", "deferred", "running"] });
+                }
+                else {
+                    await service.update(orgId, request.id, {
+                        status: "failed",
+                        error: error instanceof Error ? error.message : String(error),
+                        finishedAt: new Date(),
+                    }, { expectedStatuses: ["queued", "deferred"] });
+                }
+            }
+            catch (settlementError) {
+                // Preserve the original admission error while retaining a signal for
+                // an operator if the failure status itself cannot be persisted.
+                logger.warn({ err: settlementError, orgId, requestId: request.id }, "failed to settle Agent Issue creation request admission error");
+            }
+            throw error;
+        }
+    }
+    router.post("/orgs/:orgId/agent-issue-creation-requests", validate(createAgentIssueCreationRequestSchema), async (req, res) => {
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        if (req.actor.type !== "board" || !req.actor.userId) {
+            throw forbidden("User authentication required");
+        }
+        await assertCanAssignTasks(req, orgId);
+        const result = await service.create({
+            ...req.body,
+            orgId,
+            requestedByUserId: req.actor.userId,
+        });
+        if (!result.created && !result.needsAdmission) {
+            res.status(result.request.status === "succeeded" ? 200 : 202).json(result.request);
+            return;
+        }
+        const request = await admitRequest(req, orgId, result.request, "agent.issue_creation_requested");
+        res.status(202).json(request);
+    });
+    router.get("/orgs/:orgId/agent-issue-creation-requests", async (req, res) => {
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        if (req.actor.type !== "board" || !req.actor.userId) {
+            throw forbidden("User authentication required");
+        }
+        res.json(await service.listForRequester(orgId, req.actor.userId));
+    });
+    router.post("/orgs/:orgId/agent-issue-creation-requests/:id/retry", async (req, res) => {
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        if (req.actor.type !== "board" || !req.actor.userId) {
+            throw forbidden("User authentication required");
+        }
+        await assertCanAssignTasks(req, orgId);
+        const request = await service.retry(orgId, req.params.id, req.actor.userId);
+        const admitted = await admitRequest(req, orgId, request, "agent.issue_creation_retry_requested");
+        res.status(202).json(admitted);
+    });
+    router.get("/orgs/:orgId/agent-issue-creation-requests/:id", async (req, res) => {
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        if (req.actor.type !== "board" || !req.actor.userId) {
+            throw forbidden("User authentication required");
+        }
+        const request = await service.getById(orgId, req.params.id);
+        if (!request || request.requestedByUserId !== req.actor.userId) {
+            res.status(404).json({ error: "Agent Issue request not found" });
+            return;
+        }
+        res.json(request);
+    });
+}
+//# sourceMappingURL=agent-issue-creation.js.map

package/dist/routes/agent-issue-creation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-issue-creation.js","sourceRoot":"","sources":["../../src/routes/agent-issue-creation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qCAAqC,EAAE,MAAM,kBAAkB,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAIrD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAsB/D,MAAM,qBAAqB,GAAG,gCAAgC,CAAC;AAE/D,SAAS,2BAA2B,CAAC,SAAiB,EAAE,eAAuB;IAC7E,OAAO,wBAAwB,SAAS,IAAI,eAAe,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAiC;IACzD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAiC;IAC5D,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,GAAmC;IAClF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IAIlF,KAAK,UAAU,YAAY,CACzB,GAAY,EACZ,KAAa,EACb,OAAqC,EACrC,cAAyF;QAEzF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QACnF,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,SAAS,GAA+D,IAAI,CAAC;QACjF,IAAI,YAAY,GAAuF,IAAI,CAAC;QAC5G,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,EAAE,EAAE;gBACpB,KAAK;gBACL,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,cAAc;gBACtB,UAAU,EAAE,8BAA8B;gBAC1C,QAAQ,EAAE,OAAO,CAAC,EAAE;gBACpB,OAAO,EAAE;oBACP,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;oBAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC;gBACD,cAAc,EAAE,GAAG,cAAc,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE;aAC5E,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;gBAClD,MAAM,EAAE,WAAW;gBACnB,aAAa,EAAE,QAAQ;gBACvB,MAAM,EAAE,qBAAqB;gBAC7B,cAAc,EAAE,SAAS;gBACzB,2EAA2E;gBAC3E,sEAAsE;gBACtE,gBAAgB,EAAE,KAAK;gBACvB,oBAAoB,EAAE,MAAM;gBAC5B,kBAAkB,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;gBACpC,OAAO,EAAE;oBACP,2BAA2B,EAAE,OAAO,CAAC,EAAE;oBACvC,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC;gBACD,eAAe,EAAE;oBACf,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;oBAClC,yBAAyB,EAAE;wBACzB,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;wBAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;qBAC3B;oBACD,UAAU,EAAE,sBAAsB;oBAClC,QAAQ,EAAE,OAAO,CAAC,EAAE;oBACpB,OAAO,EAAE,wBAAwB,OAAO,CAAC,EAAE,EAAE;oBAC7C,2BAA2B,EAAE,OAAO,CAAC,EAAE;oBACvC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B;aACF,CAAC,CAAC;YACH,eAAe,GAAG,IAAI,CAAC;YACvB,SAAS,GAAG,GAAG,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC1F,YAAY,GAAG,MAAM,CAAC;YACtB,MAAM,UAAU,GAAG,GAAG;gBACpB,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBACjD,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC;oBAChC,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,QAAQ,CAAC;YACf,MAAM,KAAK,GAAG,UAAU,KAAK,QAAQ;gBACnC,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,+BAA+B;gBAClD,CAAC,CAAC,IAAI,CAAC;YACT,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE;gBACtD,MAAM,EAAE,UAAU;gBAClB,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,GAAG,EAAE,eAAe,IAAI,IAAI;gBAC3D,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,MAAM,EAAE,KAAK,IAAI,IAAI;gBACvC,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aACnF,EAAE,EAAE,gBAAgB,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,OAAO,IAAI,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YACzF,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,aAAa,CAAC,KAAK,IAAI,+BAA+B,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,0BAA0B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9D,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAC3E,mFAAmF,CACpF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,eAAe,IAAI,CACrC,CAAC,SAAS,EAAE,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,MAAM,KAAK,SAAS,CAAC;uBAChE,mBAAmB,CAAC,YAAY,EAAE,MAAM,CAAC,CAC7C,CAAC;gBACF,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE;wBACtC,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,SAAS;4BACrC,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC;gCACtC,CAAC,CAAC,UAAU;gCACZ,CAAC,CAAC,QAAQ;wBACd,eAAe,EAAE,YAAY,EAAE,EAAE,IAAI,SAAS,EAAE,eAAe,IAAI,IAAI;wBACvE,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,YAAY,EAAE,KAAK,IAAI,IAAI;wBACnD,KAAK,EAAE,IAAI;wBACX,UAAU,EAAE,IAAI;wBAChB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACtE,EAAE,EAAE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC9D,CAAC;qBAAM,CAAC;oBACN,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE;wBACtC,MAAM,EAAE,QAAQ;wBAChB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wBAC7D,UAAU,EAAE,IAAI,IAAI,EAAE;qBACvB,EAAE,EAAE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,OAAO,eAAe,EAAE,CAAC;gBACzB,qEAAqE;gBACrE,gEAAgE;gBAChE,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,EACtD,+DAA+D,CAChE,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CACT,4CAA4C,EAC5C,QAAQ,CAAC,qCAAqC,CAAC,EAC/C,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;YAClC,GAAG,GAAG,CAAC,IAAI;YACX,KAAK;YACL,iBAAiB,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;QACjG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,4CAA4C,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1E,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrF,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,sCAAsC,CAAC,CAAC;QACjG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,gDAAgD,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9E,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,iBAAiB,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/routes/agents.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AA4EvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA8J1D,wBAAgB,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,cAAc,8CAivD3D"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/routes/agents.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AA4EvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA8J1D,wBAAgB,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,cAAc,8CAgwD3D"}

package/dist/routes/agents.js

@@ -25,7 +25,7 @@ import { MAX_ATTACHMENT_BYTES } from "../attachment-types.js";
 import { conflict, forbidden, notFound, unprocessable } from "../errors.js";
 import { logger } from "../middleware/logger.js";
 import { validate } from "../middleware/validate.js";
-import { redactEventPayload } from "../redaction.js";
+import { omitSecretPayloadFields, redactEventPayload } from "../redaction.js";
 import { listAgentRuntimeAvailability } from "../services/agent-runtime-availability.js";
 import { assetService } from "../services/assets.js";
 import { resolveBrowserCapability, resolveBrowserCapabilityDeployment, } from "../services/browser-capability.js";
@@ -459,7 +459,7 @@ export function agentRoutes(db, storage) {
             }).runEligible
             : false;
         return {
-            ...(options?.restricted ? redactForRestrictedAgentView(agent) : publicAgent),
+            ...(options?.restricted ? redactForRestrictedAgentView(agent) : redactAgentForResponse(publicAgent)),
             access: accessState,
             instructionsLibraryPath,
             ...(options?.restricted ? {} : {
@@ -855,6 +855,19 @@ export function agentRoutes(db, storage) {
             runtimeConfig: {},
         };
     }
+    function redactRuntimeConfigForResponse(value) {
+        const redacted = redactEventPayload(value ?? {}) ?? {};
+        return omitSecretPayloadFields(redacted);
+    }
+    function redactAgentForResponse(agent) {
+        if (!agent)
+            return null;
+        return {
+            ...agent,
+            agentRuntimeConfig: redactRuntimeConfigForResponse(agent.agentRuntimeConfig),
+            runtimeConfig: redactRuntimeConfigForResponse(agent.runtimeConfig),
+        };
+    }
     function redactAgentConfiguration(agent) {
         if (!agent)
             return null;
@@ -866,8 +879,8 @@ export function agentRoutes(db, storage) {
             title: agent.title,
             status: agent.status,
             agentRuntimeType: agent.agentRuntimeType,
-            agentRuntimeConfig: redactEventPayload(agent.agentRuntimeConfig),
-            runtimeConfig: redactEventPayload(agent.runtimeConfig),
+            agentRuntimeConfig: redactRuntimeConfigForResponse(agent.agentRuntimeConfig),
+            runtimeConfig: redactRuntimeConfigForResponse(agent.runtimeConfig),
             permissions: agent.permissions,
             updatedAt: agent.updatedAt,
         };
@@ -1110,7 +1123,7 @@ export function agentRoutes(db, storage) {
         const result = await svc.list(orgId);
         const canReadConfigs = await actorCanReadConfigurationsForCompany(req, orgId);
         if (canReadConfigs || req.actor.type === "board") {
-            res.json(result);
+            res.json(result.map((agent) => redactAgentForResponse(agent)));
             return;
         }
         res.json(result.map((agent) => redactForRestrictedAgentView(agent)));
@@ -1539,7 +1552,7 @@ export function agentRoutes(db, storage) {
             entityId: updated.id,
             details: { revisionId },
         });
-        res.json(updated);
+        res.json(redactAgentForResponse(updated));
     });
     router.get("/agents/:id/runtime-state", async (req, res) => {
         assertBoard(req);
@@ -1637,6 +1650,7 @@ export function agentRoutes(db, storage) {
         preserveInstructionsBundleConfig,
         summarizeAgentUpdateDetails,
         redactAgentConfiguration,
+        redactAgentForResponse,
         stripPersistedSkillSyncConfig,
         withRuntimeSkillEntries,
         DEFAULT_INSTRUCTIONS_PATH_KEYS,