@vellumai/assistant 0.12.2-dev.202609162314.7778bc8 → 0.12.2-dev.202609170127.2eef54c

package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/__tests__/secret-detection.test.ts

@@ -63,6 +63,7 @@ const FIXTURES: Record<string, string> = {
   "Perplexity API Key": `pplx-${filler(40)}`,
   "Tavily API Key": `tvly-${filler(20)}`,
   "Firecrawl API Key": `fc-${filler(20)}`,
+  "Resend API Key": `re_${filler(8)}_${filler(24)}`,
 };
 
 describe("subpath export", () => {

package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/secret-detection.ts

@@ -230,6 +230,9 @@ export const PREFIX_PATTERNS: SecretPrefixPattern[] = [
 
   // -- Firecrawl --
   { label: "Firecrawl API Key", regex: /fc-[A-Za-z0-9]{20,}/ },
+  // Resend documents only the `re_` prefix; the segment shape is the observed
+  // key format. Strict on purpose: bare `re_` prefixes ordinary identifiers.
+  { label: "Resend API Key", regex: /re_[A-Za-z0-9]{8}_[A-Za-z0-9]{24,}/ },
 ];
 
 /**
@@ -362,7 +365,7 @@ export function isPlaceholderValue(value: string): boolean {
   // Strip known prefixes to isolate the variable part
   const variablePart = value
     .replace(
-      /^(?:AKIA|gh[pousr]_|github_pat_|glpat-|sk_live_|rk_live_|xoxb-|xoxp-|xapp-|sk-ant-|sk-proj-|sk-or-v1-|AIza|GOCSPX-|SK|SG\.|npm_|pypi-|key-|lin_api_|ntn_|fw_|pplx-|-----BEGIN [A-Z ]*PRIVATE KEY-----)/,
+      /^(?:AKIA|gh[pousr]_|github_pat_|glpat-|sk_live_|rk_live_|xoxb-|xoxp-|xapp-|sk-ant-|sk-proj-|sk-or-v1-|AIza|GOCSPX-|SK|SG\.|npm_|pypi-|key-|lin_api_|ntn_|fw_|pplx-|re_|-----BEGIN [A-Z ]*PRIVATE KEY-----)/,
       "",
     )
     .replace(/[^A-Za-z0-9]/g, "");

package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/__tests__/secret-detection.test.ts

@@ -63,6 +63,7 @@ const FIXTURES: Record<string, string> = {
   "Perplexity API Key": `pplx-${filler(40)}`,
   "Tavily API Key": `tvly-${filler(20)}`,
   "Firecrawl API Key": `fc-${filler(20)}`,
+  "Resend API Key": `re_${filler(8)}_${filler(24)}`,
 };
 
 describe("subpath export", () => {

package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/secret-detection.ts

@@ -230,6 +230,9 @@ export const PREFIX_PATTERNS: SecretPrefixPattern[] = [
 
   // -- Firecrawl --
   { label: "Firecrawl API Key", regex: /fc-[A-Za-z0-9]{20,}/ },
+  // Resend documents only the `re_` prefix; the segment shape is the observed
+  // key format. Strict on purpose: bare `re_` prefixes ordinary identifiers.
+  { label: "Resend API Key", regex: /re_[A-Za-z0-9]{8}_[A-Za-z0-9]{24,}/ },
 ];
 
 /**
@@ -362,7 +365,7 @@ export function isPlaceholderValue(value: string): boolean {
   // Strip known prefixes to isolate the variable part
   const variablePart = value
     .replace(
-      /^(?:AKIA|gh[pousr]_|github_pat_|glpat-|sk_live_|rk_live_|xoxb-|xoxp-|xapp-|sk-ant-|sk-proj-|sk-or-v1-|AIza|GOCSPX-|SK|SG\.|npm_|pypi-|key-|lin_api_|ntn_|fw_|pplx-|-----BEGIN [A-Z ]*PRIVATE KEY-----)/,
+      /^(?:AKIA|gh[pousr]_|github_pat_|glpat-|sk_live_|rk_live_|xoxb-|xoxp-|xapp-|sk-ant-|sk-proj-|sk-or-v1-|AIza|GOCSPX-|SK|SG\.|npm_|pypi-|key-|lin_api_|ntn_|fw_|pplx-|re_|-----BEGIN [A-Z ]*PRIVATE KEY-----)/,
       "",
     )
     .replace(/[^A-Za-z0-9]/g, "");

package/node_modules/@vellumai/service-contracts/src/__tests__/secret-detection.test.ts

@@ -63,6 +63,7 @@ const FIXTURES: Record<string, string> = {
   "Perplexity API Key": `pplx-${filler(40)}`,
   "Tavily API Key": `tvly-${filler(20)}`,
   "Firecrawl API Key": `fc-${filler(20)}`,
+  "Resend API Key": `re_${filler(8)}_${filler(24)}`,
 };
 
 describe("subpath export", () => {

package/node_modules/@vellumai/service-contracts/src/secret-detection.ts

@@ -230,6 +230,9 @@ export const PREFIX_PATTERNS: SecretPrefixPattern[] = [
 
   // -- Firecrawl --
   { label: "Firecrawl API Key", regex: /fc-[A-Za-z0-9]{20,}/ },
+  // Resend documents only the `re_` prefix; the segment shape is the observed
+  // key format. Strict on purpose: bare `re_` prefixes ordinary identifiers.
+  { label: "Resend API Key", regex: /re_[A-Za-z0-9]{8}_[A-Za-z0-9]{24,}/ },
 ];
 
 /**
@@ -362,7 +365,7 @@ export function isPlaceholderValue(value: string): boolean {
   // Strip known prefixes to isolate the variable part
   const variablePart = value
     .replace(
-      /^(?:AKIA|gh[pousr]_|github_pat_|glpat-|sk_live_|rk_live_|xoxb-|xoxp-|xapp-|sk-ant-|sk-proj-|sk-or-v1-|AIza|GOCSPX-|SK|SG\.|npm_|pypi-|key-|lin_api_|ntn_|fw_|pplx-|-----BEGIN [A-Z ]*PRIVATE KEY-----)/,
+      /^(?:AKIA|gh[pousr]_|github_pat_|glpat-|sk_live_|rk_live_|xoxb-|xoxp-|xapp-|sk-ant-|sk-proj-|sk-or-v1-|AIza|GOCSPX-|SK|SG\.|npm_|pypi-|key-|lin_api_|ntn_|fw_|pplx-|re_|-----BEGIN [A-Z ]*PRIVATE KEY-----)/,
       "",
     )
     .replace(/[^A-Za-z0-9]/g, "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.12.2-dev.202609162314.7778bc8",
+  "version": "0.12.2-dev.202609170127.2eef54c",
   "license": "MIT",
   "type": "module",
   "exports": {

package/src/__tests__/chat-credential-redaction.test.ts

@@ -204,6 +204,22 @@ describe("collectRevealRefsFromCommand", () => {
     );
   });
 
+  test("parses a legacy service/field path", () => {
+    expect(
+      collectRevealRefsFromCommand(
+        "assistant credentials reveal resend/api_key",
+      ),
+    ).toEqual([{ service: "resend", field: "api_key" }]);
+  });
+
+  test("legacy path survives malformed extra arguments", () => {
+    expect(
+      collectRevealRefsFromCommand(
+        "assistant credentials reveal resend/api_key --json extra",
+      ),
+    ).toEqual([{ service: "resend", field: "api_key" }]);
+  });
+
   test("unparseable invocation yields no ref (fails safe)", () => {
     expect(
       collectRevealRefsFromCommand("assistant credentials reveal --service x"),
@@ -437,6 +453,13 @@ describe("redactSecretsForChat", () => {
     expect(out).not.toContain(SYNTHETIC_OPENAI_PROJECT_KEY);
   });
 
+  test("Resend key in persisted assistant text is redacted without a candidate", () => {
+    const key = `re_${"a".repeat(8)}_${"b".repeat(24)}`;
+    const out = redactSecretsForChat(`the key is ${key} and it failed`, []);
+    expect(out).not.toContain(key);
+    expect(out).toContain("\u3014redacted:Resend API Key\u3015");
+  });
+
   test("no candidate match produces the plain sentinel — never a guess", () => {
     const out = redactSecretsForChat(`key: ${SYNTHETIC_OPENAI_PROJECT_KEY}`, [
       { service: "openai", field: "api_key", value: "different-value" },

package/src/__tests__/secret-scanner.test.ts

@@ -187,6 +187,26 @@ describe("Anthropic keys", () => {
   });
 });
 
+// ---------------------------------------------------------------------------
+// Resend
+// ---------------------------------------------------------------------------
+describe("Resend keys", () => {
+  const key = `re_${"a".repeat(8)}_${"b".repeat(24)}`;
+
+  test("detects re_ key", () => {
+    expectMatch(key, "Resend API Key");
+  });
+
+  test("redacts a key echoed from shell output", () => {
+    const out = redactSecrets(`$ cat .env\nRESEND=${key}\n`);
+    expect(out).not.toContain(key);
+  });
+
+  test("ignores re_ identifiers that are not key-shaped", () => {
+    expectNoMatch("re_0_of_1_is_deprecated_6387");
+  });
+});
+
 // ---------------------------------------------------------------------------
 // OpenAI
 // ---------------------------------------------------------------------------

package/src/daemon/chat-credential-redaction.ts

@@ -10,7 +10,8 @@
  *
  *   1. While a turn runs, every shell-style tool command is scanned for
  *      `credentials reveal` invocations and the referenced credentials
- *      (`--service`/`--field` flags or a positional UUID) are recorded as
+ *      (`--service`/`--field` flags, a positional UUID, or a legacy
+ *      `service/field` path) are recorded as
  *      *candidates* ({@link collectRevealRefsFromCommand}).
  *   2. At persist time, only those candidates' plaintexts are fetched from
  *      the credential store — a scoped read of secrets that were already in
@@ -55,6 +56,7 @@ import {
 } from "../security/secret-scanner.js";
 import { getSecureKeyAsync } from "../security/secure-keys.js";
 import { getCredentialMetadataById } from "../tools/credentials/metadata-store.js";
+import { parseServiceFieldRef } from "../tools/credentials/ref-parse.js";
 import { getLogger } from "../util/logger.js";
 
 const log = getLogger("chat-credential-redaction");
@@ -106,6 +108,12 @@ const SERVICE_FLAG_RE = new RegExp(String.raw`--service(?:=|\s+)${FLAG_VALUE}`);
 const FIELD_FLAG_RE = new RegExp(String.raw`--field(?:=|\s+)${FLAG_VALUE}`);
 const UUID_RE =
   /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/i;
+// The CLI's single positional argument, directly after `reveal`. A UUID is
+// handled above; anything else is tried as a legacy `service/field` path via
+// the shared grammar in `parseServiceFieldRef`. The route rejects that form
+// as an id today, so no plaintext prints; staging the ref is defense in depth
+// so a future lookup that does succeed is already proof-gated.
+const POSITIONAL_RE = /\breveal\s+([^\s"'\\()<>`-][^\s"'\\()<>`]*)/;
 
 /**
  * Extract a flag's value from a segment, undoing the shell quoting the
@@ -265,6 +273,13 @@ export function collectRevealRefsFromCommand(
       const id = UUID_RE.exec(invocation)?.[0];
       if (id) {
         refs.push({ id });
+        continue;
+      }
+      const positional = POSITIONAL_RE.exec(invocation)?.[1];
+      const pathRef =
+        positional === undefined ? undefined : parseServiceFieldRef(positional);
+      if (pathRef) {
+        refs.push(pathRef);
       }
       // No parseable identity → no ref. The span still gets redacted at
       // persist; it just won't be revealable.

package/src/desktop/desktop-wallpaper.test.ts

@@ -1,7 +1,13 @@
 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { afterEach, beforeEach, expect, test } from "bun:test";
+import {
+  afterEach,
+  beforeEach,
+  expect,
+  setDefaultTimeout,
+  test,
+} from "bun:test";
 
 import sharp from "sharp";
 
@@ -14,6 +20,11 @@ import {
   renderDesktopWallpaper,
 } from "./desktop-wallpaper.js";
 
+// Native resvg renders scan the system font database per instance, and on a
+// loaded CI runner the file's first render runs past bun's 5s default. Each
+// test file runs in its own process, so this doesn't leak.
+setDefaultTimeout(15_000);
+
 let workspace: string;
 let previousWorkspace: string | undefined;
 beforeEach(() => {