@sema-agent/core 1.446.0 → 1.447.0

package/dist/core/arg-summary.js

@@ -1,19 +1,23 @@
 const ACTIVITY_ARG_MAX = 80;
 const SENSITIVE_KEY = /token|secret|key|password|passwd|credential|auth/i;
 const SECRET_PATTERNS = [
-    /(?<![A-Za-z0-9])(?:sk|pk|rk|gh[opsur])[-_][A-Za-z0-9_-]{8,}/g,
-    /(?<![A-Za-z0-9])AIza[A-Za-z0-9_-]{20,}/g,
-    /(?<![A-Za-z0-9])xox[baprs]-[A-Za-z0-9-]{10,}/g,
-    /(?<![A-Za-z0-9])AKIA[0-9A-Z]{12,}/g,
-    /(?<![A-Za-z0-9])eyJ[A-Za-z0-9._-]{20,}/g,
-    /-----BEGIN[ A-Z]*PRIVATE KEY-----/g,
-    /(?<![A-Za-z0-9])Bearer\s+[A-Za-z0-9._~+/-]{8,}=*/gi,
-    /(?<![A-Za-z0-9])(?:token|secret|key|password|passwd|credential|authorization)["']?\s*[=:]\s*["']?[^\s"';|&]{4,}/gi,
+    { re: /(?<![A-Za-z0-9])(?:sk|pk|rk|gh[opsur])[-_][A-Za-z0-9_-]{8,}/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])AIza[A-Za-z0-9_-]{20,}/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])xox[baprs]-[A-Za-z0-9-]{10,}/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])AKIA[0-9A-Z]{12,}/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{20,}/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])eyJ[A-Za-z0-9._-]{20,}/g, replace: "[redacted]" },
+    { re: /-----BEGIN[ A-Z]*PRIVATE KEY-----[\s\S]*?(?:-----END[ A-Z]*PRIVATE KEY-----|$)/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])Bearer\s+[A-Za-z0-9._~+/-]{8,}=*/gi, replace: "[redacted]" },
+    {
+        re: /(?<![A-Za-z0-9])((?:token|secret|key|password|passwd|credential|authorization)["']?\s*[=:]\s*["']?)[^\s"';|&]{4,}/gi,
+        replace: "$1[redacted]",
+    },
 ];
 export function scrubSecrets(s) {
     let out = s;
-    for (const p of SECRET_PATTERNS)
-        out = out.replace(p, "[redacted]");
+    for (const { re, replace } of SECRET_PATTERNS)
+        out = out.replace(re, replace);
     return out;
 }
 function truncCodePoints(s) {

package/dist/core/secret-env.js

@@ -1,6 +1,7 @@
-const SECRET_ENV_RE = /(^|_)(KEY|TOKEN|SECRET|SECRETS|PASSWORD|PASSWD|CREDENTIAL|CREDENTIALS|PRIVATEKEY|APIKEY|ACCESS_KEY|SESSION_TOKEN)$/i;
+const SECRET_ENV_RE = /(^|_)(KEY|TOKEN|SECRET|SECRETS|PASSWORD|PASSWD|CREDENTIAL|CREDENTIALS|PRIVATEKEY|APIKEY|ACCESS_KEY|SESSION_TOKEN)(?:_(?:\d+|ID))?$/i;
+const SECRET_ENV_EXACT_NAMES = new Set(["DATABASE_URL", "CONNECTION_STRING", "DSN", "NPM_AUTH"]);
 export function isSecretEnvKey(key) {
-    return SECRET_ENV_RE.test(key);
+    return SECRET_ENV_RE.test(key) || SECRET_ENV_EXACT_NAMES.has(key.toUpperCase());
 }
 export function scrubSecretEnv(env) {
     const out = {};

package/dist/core/untrusted-egress.js

@@ -1,11 +1,22 @@
 import { delimitUntrusted } from "./untrusted-text.js";
 import { scrubSecrets } from "./arg-summary.js";
 const URI_SCHEME = String.raw `[A-Za-z][A-Za-z0-9+.\-_]{0,63}`;
-const CREDENTIALS_IN_AUTHORITY = new RegExp(String.raw `(${URI_SCHEME}:\/\/)(?:[^/\s"'@]*@)+`, "gi");
+const CREDENTIALS_IN_AUTHORITY = new RegExp(String.raw `(${URI_SCHEME}:\/\/)((?:[^/\s"'@]*@)+)`, "gi");
 const URL_OF_ANY_PROTOCOL = new RegExp(String.raw `${URI_SCHEME}:\/\/[^\s"'\`]+`, "gi");
+const BARE_USERNAME_MAX_LEN = 20;
+function redactUserinfo(scheme, userinfoWithAt) {
+    const userinfo = userinfoWithAt.slice(0, -1);
+    if (userinfo.includes("@"))
+        return `${scheme}[redacted-credentials]@`;
+    const colonIdx = userinfo.indexOf(":");
+    if (colonIdx === -1) {
+        return userinfo.length >= BARE_USERNAME_MAX_LEN ? `${scheme}[redacted-credentials]@` : `${scheme}${userinfo}@`;
+    }
+    return `${scheme}${userinfo.slice(0, colonIdx)}:[redacted-credentials]@`;
+}
 export function redactSecrets(s) {
     return scrubSecrets(s)
-        .replace(CREDENTIALS_IN_AUTHORITY, "$1[redacted-credentials]@")
+        .replace(CREDENTIALS_IN_AUTHORITY, (_m, scheme, userinfo) => redactUserinfo(scheme, userinfo))
         .replace(/([?&#](?:sig|signature|sas|code)=)[^&\s"'#]+/gi, "$1[redacted]");
 }
 export function redactHostLeaks(s) {
@@ -13,6 +24,22 @@ export function redactHostLeaks(s) {
         .replace(URL_OF_ANY_PROTOCOL, "[redacted-url]")
         .replace(/(?:\/[A-Za-z0-9_.-]+){2,}/g, "[redacted-path]");
 }
+const REDACTION_MARKER_RE = /\[redacted(?:-[a-z]+)?\]/g;
+function countRedactionMarkers(s) {
+    return (s.match(REDACTION_MARKER_RE) ?? []).length;
+}
+function safeEllipsisTruncate(s, max) {
+    if (max < 1)
+        return "";
+    const budget = max - 1;
+    let out = "";
+    for (const codePoint of s) {
+        if (out.length + codePoint.length > budget)
+            break;
+        out += codePoint;
+    }
+    return out + "…";
+}
 function boundedString(value, max, redact) {
     let s;
     try {
@@ -24,18 +51,32 @@ function boundedString(value, max, redact) {
     s = redact(s);
     if (s.length <= max)
         return s;
-    let keep = max;
-    let out = "";
-    for (let i = 0; i < 4; i++) {
-        out = `${s.slice(0, keep)}…[+${s.length - keep} chars]`;
-        if (out.length <= max)
-            break;
-        if (keep === 0) {
-            return max >= 1 ? `${s.slice(0, max - 1)}…` : "";
+    const totalMarkers = countRedactionMarkers(s);
+    const plainSuffix = (keepN) => `…[+${s.length - keepN} chars]`;
+    const enrichedSuffix = (keepN) => {
+        const lost = totalMarkers - countRedactionMarkers(s.slice(0, keepN));
+        return lost > 0 ? `…[+${s.length - keepN} chars, ${lost} redaction marker(s) among them]` : plainSuffix(keepN);
+    };
+    const converge = (suffixFor) => {
+        let keep = max;
+        let out = "";
+        for (let i = 0; i < 4; i++) {
+            out = `${s.slice(0, keep)}${suffixFor(keep)}`;
+            if (out.length <= max)
+                return out;
+            if (keep === 0)
+                return undefined;
+            keep = Math.max(0, keep - (out.length - max));
         }
-        keep = Math.max(0, keep - (out.length - max));
+        return out.length <= max ? out : undefined;
+    };
+    const out = (totalMarkers > 0 ? converge(enrichedSuffix) : undefined) ?? converge(plainSuffix);
+    if (out === undefined) {
+        return safeEllipsisTruncate(s, max);
     }
-    return out.length < s.length ? out : s;
+    if (out.length >= s.length)
+        return s;
+    return out;
 }
 export function boundedRedactedSummary(value, max) {
     return boundedString(value, max, redactSecrets);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "1.446.0",
+  "version": "1.447.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",