@salesforce/graphiti 11.35.1 → 11.35.3

package/src/schemas/input-schemas.ts

@@ -132,8 +132,17 @@ export const DETAIL_INPUT = z
 // to safe API-name charsets so downstream layers can trust them.
 const DISCOVER_ORG_ALIAS_RE = /^[A-Za-z0-9_-]{1,80}$/;
 const DISCOVER_SOBJECT_NAME_RE = /^[A-Za-z][A-Za-z0-9_]{0,79}$/;
-// eslint-disable-next-line no-control-regex -- intentionally rejects control chars
-const DISCOVER_SEARCH_RE = /^[^\x00-\x1f\x7f]*$/;
+// Mirrors CONTROL_CHAR_RE's Cc/Cf class (lib/control-chars.ts): a search
+// string carrying bidi overrides / zero-width / tag chars (all Cf) is the same
+// host-reflection threat as the C0/DEL (Cc) chars the earlier range caught —
+// `search` is reflected verbatim through the SUCCESS envelope
+// (tool-adapter.ts runTool), which neutralizes neither Cc nor Cf (W-23336442).
+// The Unicode property escape tracks future Cc/Cf additions so this guard
+// cannot drift from the canonical class. Unlike the enum-rejection stripper,
+// this REJECTS rather than strips: `search` is a free-text substring filter,
+// not an enum, so there is no allowed-value round-trip to preserve. The `u`
+// flag is REQUIRED for the \p escapes.
+const DISCOVER_SEARCH_RE = /^[^\p{Cc}\p{Cf}]*$/u;
 
 export const DISCOVER_INPUT = z.object({
 	org: z

package/src/schemas/tool-adapter.ts

@@ -128,9 +128,12 @@ export function neutralizeControlChars(s: string): string {
 /**
  * Redact local filesystem layout from error text so the MCP host never sees the
  * developer's home dir, OS username, repo checkout location, or schema-cache
- * path (W-22697673 info-disclosure). Applied to every category's message.
+ * path (W-22697673 info-disclosure). Applied to every category's message. Also
+ * neutralizes Cc/Cf control chars (via `neutralizeControlChars`, LAST) so it is
+ * the single primitive the CLI mirror's error path reuses to sanitize a raw
+ * `err.message`/stack before emitting it (W-23336442, N2).
  */
-function sanitizePaths(s: string): string {
+export function sanitizePaths(s: string): string {
 	let out = stripLineSeparators(s).replace(/file:\/\//g, "");
 	// 1) Repo-internal: drop any absolute prefix before packages/ or node_modules/
 	//    so a frame relativizes to `packages/graphiti/...` regardless of checkout.