agent-inspect 6.31.2 → 6.31.4

package/packages/core/dist/readers.mjs

@@ -1,9 +1,9 @@
-export { BUILTIN_MAPPING_LEDGERS, DEFAULT_TRACE_READERS, OPENINFERENCE_MAPPING_LEDGER, OTLP_JSON_MAPPING_LEDGER, TraceReadError, agentInspectJsonlReader, assertTraceInput, detectTraceFormat, getMappingLedger, openInferenceJsonReader, openTrace, openTraceDirectory, openTraceFile, openTraceText, otlpJsonReader, readTrace } from './chunk-WN5PT4GV.mjs';
+export { BUILTIN_MAPPING_LEDGERS, DEFAULT_TRACE_READERS, OPENINFERENCE_MAPPING_LEDGER, OTLP_JSON_MAPPING_LEDGER, TraceReadError, agentInspectJsonlReader, assertTraceInput, detectTraceFormat, getMappingLedger, openInferenceJsonReader, openTrace, openTraceDirectory, openTraceFile, openTraceText, otlpJsonReader, readTrace } from './chunk-OSGNGRHF.mjs';
 export { PROGRAMMATIC_DIAGNOSTIC_SPECS, formatProgrammaticDiagnostic } from './chunk-FWK3Q3OJ.mjs';
 import './chunk-Q5SLKV2Y.mjs';
 import './chunk-S4YWKV4G.mjs';
 import './chunk-AK5EN4U2.mjs';
-import './chunk-26YJSETN.mjs';
+import './chunk-7DHSWDKB.mjs';
 import './chunk-EE5Z2GQ3.mjs';
 import './chunk-7TGZLWEE.mjs';
 //# sourceMappingURL=readers.mjs.map

package/packages/core/dist/writers.cjs

@@ -1,8 +1,8 @@
 'use strict';
 
-var promises = require('fs/promises');
 var path = require('path');
 var crypto = require('crypto');
+var promises = require('fs/promises');
 var os = require('os');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
@@ -12,6 +12,80 @@ var crypto__default = /*#__PURE__*/_interopDefault(crypto);
 var os__default = /*#__PURE__*/_interopDefault(os);
 
 // packages/core/src/writers/index.ts
+
+// packages/core/src/safety/sensitive-key.ts
+function keyHasExplicitSeparator(value) {
+  return /[_\-.]/.test(value);
+}
+function normalizeSensitiveKey(value) {
+  return value.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+}
+var NON_CREDENTIAL_TOKEN_CONFIG_KEYS = new Set(
+  [
+    "tokens",
+    "max_tokens",
+    "min_tokens",
+    "ls_max_tokens",
+    "token_count",
+    "token_limit",
+    "token_budget",
+    "input_tokens",
+    "output_tokens",
+    "total_tokens",
+    "cached_tokens",
+    "prompt_tokens",
+    "completion_tokens"
+  ].map(normalizeSensitiveKey)
+);
+var DEFAULT_CREDENTIAL_SENSITIVE_KEYS = [
+  "authorization",
+  "cookie",
+  "token",
+  "access_token",
+  "accesstoken",
+  "auth_token",
+  "authtoken",
+  "refresh_token",
+  "refreshtoken",
+  "id_token",
+  "idtoken",
+  "bearer_token",
+  "bearertoken",
+  "api_token",
+  "apitoken",
+  "apikey",
+  "api_key",
+  "password",
+  "secret",
+  "email"
+];
+function isTokenCredentialKey(normalized) {
+  if (NON_CREDENTIAL_TOKEN_CONFIG_KEYS.has(normalized)) return false;
+  if (normalized === "token") return true;
+  if (normalized.endsWith("tokens")) return false;
+  return normalized.endsWith("token");
+}
+function isCredentialSensitiveKey(key, sensitiveKeys = DEFAULT_CREDENTIAL_SENSITIVE_KEYS) {
+  if (!key) return false;
+  const normalized = normalizeSensitiveKey(key);
+  if (!normalized) return false;
+  if (NON_CREDENTIAL_TOKEN_CONFIG_KEYS.has(normalized)) return false;
+  const allowPrefixCompound = keyHasExplicitSeparator(key);
+  for (const sensitive of sensitiveKeys) {
+    const s = normalizeSensitiveKey(sensitive);
+    if (!s) continue;
+    if (s === "token") {
+      if (isTokenCredentialKey(normalized)) return true;
+      continue;
+    }
+    if (normalized === s) return true;
+    if (normalized.endsWith(`_${s}`)) return true;
+    if (allowPrefixCompound && normalized.startsWith(`${s}_`)) return true;
+  }
+  return false;
+}
+
+// packages/core/src/logs/redactor.ts
 var DEFAULT_REDACT_KEYS = [
   "authorization",
   "cookie",
@@ -35,7 +109,7 @@ function compileRules(rules, extraKeys) {
   const out = /* @__PURE__ */ new Map();
   const set = (r) => {
     const k = toKey(r.key);
-    out.set(k, { ...r, key: k });
+    out.set(k, { ...r, key: k, raw: r.raw ?? r.key });
   };
   for (const k of DEFAULT_REDACT_KEYS) {
     set({ key: k, strategy: "full" });
@@ -64,9 +138,13 @@ var Redactor = class {
   constructor(options) {
     this.#rules = compileRules(options?.rules, options?.extraKeys);
   }
+  /** Field names this redactor treats as sensitive, for value-level helpers. */
+  get sensitiveKeys() {
+    return this.#rules.map((rule) => rule.raw ?? rule.key);
+  }
   redactValue(key, value) {
     const k = toKey(key);
-    const rule = this.#rules.find((r) => r.key === k);
+    const rule = this.#rules.find((r) => r.key === k) ?? this.#rules.find((r) => isCredentialSensitiveKey(key, [r.raw ?? r.key]));
     if (!rule) {
       return this.#redactNested(value);
     }
@@ -106,7 +184,7 @@ var Redactor = class {
 };
 
 // packages/core/src/safety/credential-value-patterns.ts
-var KEY_VALUE_SECRET_PATTERN = /\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=([^\s"'\\]{8,})/i;
+var KEY_VALUE_SECRET_PATTERN = /\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED(?::[^\]]*)?|HASH:[0-9a-f]{8})\](?![^\s"'\\&#?;/]))([^\s"'\\]{8,})/i;
 var HIGH_CONFIDENCE_CREDENTIAL_PATTERNS = [
   /^(?:basic|bearer|digest|apikey)\s+[a-z0-9._~+/=-]+$/i,
   /\bbearer\s+[a-z0-9._~+/=-]{12,}\b/i,
@@ -332,6 +410,16 @@ function isPersistedInspectEvent(value) {
   }
   return true;
 }
+var TRACE_DIR_MODE = 448;
+var TRACE_FILE_MODE = 384;
+async function mkdirTraceDir(dirPath) {
+  await promises.mkdir(dirPath, { recursive: true, mode: TRACE_DIR_MODE });
+}
+async function appendTraceFile(filePath, data) {
+  await promises.appendFile(filePath, data, { encoding: "utf-8", mode: TRACE_FILE_MODE });
+}
+
+// packages/core/src/utils.ts
 var DEFAULT_TRACE_DIR_NAME = ".agent-inspect";
 var RUNS_DIR_NAME = "runs";
 var FALLBACK_TRACE_DIR = path__default.default.join(
@@ -786,8 +874,8 @@ function serializeEvent2(event) {
 }
 async function appendEventLine(event, options) {
   const filePath = resolveFilePath(event, options);
-  await promises.mkdir(path__default.default.dirname(filePath), { recursive: true });
-  await promises.appendFile(filePath, serializeEvent2(event), "utf-8");
+  await mkdirTraceDir(path__default.default.dirname(filePath));
+  await appendTraceFile(filePath, serializeEvent2(event));
 }
 async function appendEventBatch(events, options) {
   const byPath = /* @__PURE__ */ new Map();
@@ -811,8 +899,8 @@ async function appendEventBatch(events, options) {
   let written = 0;
   for (const [filePath, lines] of byPath) {
     try {
-      await promises.mkdir(path__default.default.dirname(filePath), { recursive: true });
-      await promises.appendFile(filePath, lines.join(""), "utf-8");
+      await mkdirTraceDir(path__default.default.dirname(filePath));
+      await appendTraceFile(filePath, lines.join(""));
       written += lines.length;
     } catch (error) {
       dropped += lines.length;