agent-tower 0.5.3-beta.6 → 0.5.3-beta.8

package/dist/utils/error-log.js

@@ -0,0 +1,176 @@
+import { appendFileSync, mkdirSync } from 'node:fs';
+import path from 'node:path';
+import { resolveDataDir } from './data-dir.js';
+const DEFAULT_LOG_FILE = 'server.log';
+const MAX_STRING_LENGTH = 4000;
+const MAX_DEPTH = 4;
+const SENSITIVE_KEY_PATTERN = /(api[_-]?key|token|secret|password|cookie|authorization|auth)/i;
+const QUOTED_AUTHORIZATION_PATTERN = /(["'])authorization\1(\s*:\s*)(["'])(?:\\.|(?!\3)[^\\\r\n])*\3/gi;
+const ESCAPED_QUOTED_AUTHORIZATION_PATTERN = /(\\["'])authorization\1(\s*:\s*)(\\["'])(?:\\.|(?!\3)[^\\\r\n])*\3/gi;
+const SENSITIVE_HEADER_PATTERN = /(^|[^\w-])([A-Za-z0-9_-]*(?:authorization|cookie)[A-Za-z0-9_-]*)(\s*[:=]\s*)/gi;
+const SENSITIVE_ASSIGNMENT_PATTERN = /(^|[^\w-])([A-Za-z0-9_-]*(?:api[_-]?key|auth[_-]?token|access[_-]?token|token|secret|password|cookie|authorization)[A-Za-z0-9_-]*)(\s*[:=]\s*)(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\s,;'"})\]]+)/gi;
+const FIELD_BOUNDARY_PATTERN = /(^|[\s,])([A-Za-z][A-Za-z0-9_-]*)(\s*[:=]\s*)(?=[^\s=])/g;
+let processHandlersInstalled = false;
+const loggedUnhandledRejections = new WeakSet();
+export function getLogsDir(dataDir = resolveDataDir()) {
+    return path.join(dataDir, 'logs');
+}
+export function getErrorLogFilePath(dataDir = resolveDataDir(), fileName = DEFAULT_LOG_FILE) {
+    return path.join(getLogsDir(dataDir), fileName);
+}
+export function writeErrorLog(entry, options = {}) {
+    try {
+        const logFile = getErrorLogFilePath(options.dataDir, options.fileName ?? DEFAULT_LOG_FILE);
+        mkdirSync(path.dirname(logFile), { recursive: true });
+        appendFileSync(logFile, `${formatErrorLogEntry(entry, options.now)}\n`, 'utf-8');
+        return logFile;
+    }
+    catch {
+        return null;
+    }
+}
+export function installProcessErrorLogging(dataDir) {
+    if (processHandlersInstalled)
+        return;
+    processHandlersInstalled = true;
+    process.on('uncaughtExceptionMonitor', (error) => {
+        if (loggedUnhandledRejections.has(error))
+            return;
+        writeErrorLog({
+            level: 'error',
+            source: 'process.uncaughtException',
+            message: error instanceof Error ? error.message : String(error),
+            error,
+        }, { dataDir });
+    });
+    process.on('unhandledRejection', (reason) => {
+        const error = reason instanceof Error ? reason : new Error(`Unhandled rejection: ${String(reason)}`);
+        writeErrorLog({
+            level: 'error',
+            source: 'process.unhandledRejection',
+            message: error.message,
+            error,
+        }, { dataDir });
+        loggedUnhandledRejections.add(error);
+        setImmediate(() => {
+            throw error;
+        });
+    });
+}
+export function formatErrorLogEntry(entry, now = new Date()) {
+    const error = normalizeError(entry.error);
+    return JSON.stringify({
+        time: now.toISOString(),
+        level: entry.level,
+        source: entry.source,
+        message: redactSensitiveText(entry.message),
+        ...(error ? { error } : {}),
+        ...(entry.metadata ? { metadata: sanitizeValue(entry.metadata) } : {}),
+    });
+}
+function normalizeError(error) {
+    if (error == null)
+        return null;
+    if (error instanceof Error) {
+        return sanitizeValue({
+            name: error.name,
+            message: error.message,
+            stack: error.stack,
+            code: error.code,
+        });
+    }
+    return sanitizeValue({ message: String(error) });
+}
+function sanitizeValue(value, key = '', depth = 0) {
+    if (key && SENSITIVE_KEY_PATTERN.test(key)) {
+        return '[REDACTED]';
+    }
+    if (value == null || typeof value === 'number' || typeof value === 'boolean') {
+        return value;
+    }
+    if (typeof value === 'string') {
+        return redactSensitiveText(value);
+    }
+    if (value instanceof Error) {
+        return normalizeError(value);
+    }
+    if (depth >= MAX_DEPTH) {
+        return '[MaxDepth]';
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => sanitizeValue(item, key, depth + 1));
+    }
+    if (typeof value === 'object') {
+        const result = {};
+        for (const [childKey, childValue] of Object.entries(value)) {
+            result[childKey] = sanitizeValue(childValue, childKey, depth + 1);
+        }
+        return result;
+    }
+    return String(value);
+}
+function redactSensitiveText(value) {
+    const redactedQuotedAuthorization = redactQuotedAuthorizationHeaders(value);
+    const truncated = redactedQuotedAuthorization.length > MAX_STRING_LENGTH
+        ? `${redactedQuotedAuthorization.slice(0, MAX_STRING_LENGTH)}...[truncated]`
+        : redactedQuotedAuthorization;
+    return redactSensitiveHeaders(truncated
+        .replace(/\bBearer\s+[A-Za-z0-9._~+/=-]+/gi, 'Bearer [REDACTED]')
+        .replace(SENSITIVE_ASSIGNMENT_PATTERN, '$1$2$3[REDACTED]')
+        .replace(/\bsk-[A-Za-z0-9_-]{12,}/g, 'sk-[REDACTED]'));
+}
+function redactQuotedAuthorizationHeaders(value) {
+    return value
+        .replace(ESCAPED_QUOTED_AUTHORIZATION_PATTERN, '$1authorization$1$2$3[REDACTED]$3')
+        .replace(QUOTED_AUTHORIZATION_PATTERN, '$1authorization$1$2$3[REDACTED]$3');
+}
+function redactSensitiveHeaders(value) {
+    const pattern = new RegExp(SENSITIVE_HEADER_PATTERN);
+    let result = '';
+    let cursor = 0;
+    let match;
+    while ((match = pattern.exec(value)) !== null) {
+        const valueStart = match.index + match[0].length;
+        if (valueStart <= cursor)
+            continue;
+        result += `${value.slice(cursor, valueStart)}[REDACTED]`;
+        cursor = findSensitiveHeaderEnd(value, valueStart, match[2]);
+        pattern.lastIndex = cursor;
+    }
+    return `${result}${value.slice(cursor)}`;
+}
+function findSensitiveHeaderEnd(value, valueStart, headerKey) {
+    const newlineOffset = value.slice(valueStart).search(/[\r\n]/);
+    const lineEnd = newlineOffset === -1 ? value.length : valueStart + newlineOffset;
+    const isAuthorizationHeader = headerKey.toLowerCase().includes('authorization');
+    const isCookieHeader = headerKey.toLowerCase().includes('cookie');
+    const pattern = new RegExp(SENSITIVE_HEADER_PATTERN);
+    pattern.lastIndex = valueStart;
+    let match;
+    while ((match = pattern.exec(value)) !== null) {
+        if (match.index >= lineEnd)
+            break;
+        return match.index;
+    }
+    if (isAuthorizationHeader) {
+        return lineEnd;
+    }
+    const fieldPattern = new RegExp(FIELD_BOUNDARY_PATTERN);
+    fieldPattern.lastIndex = valueStart;
+    while ((match = fieldPattern.exec(value)) !== null) {
+        if (match.index >= lineEnd)
+            break;
+        if (isCookieHeader && isCookiePairBoundary(value, match.index))
+            continue;
+        return match.index;
+    }
+    return lineEnd;
+}
+function isCookiePairBoundary(value, boundaryIndex) {
+    let index = boundaryIndex - 1;
+    while (index >= 0 && /\s/.test(value[index])) {
+        index -= 1;
+    }
+    return value[index] === ';';
+}
+//# sourceMappingURL=error-log.js.map

package/dist/utils/error-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-log.js","sourceRoot":"","sources":["../../src/utils/error-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAkB/C,MAAM,gBAAgB,GAAG,YAAY,CAAC;AACtC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,qBAAqB,GAAG,gEAAgE,CAAC;AAC/F,MAAM,4BAA4B,GAAG,kEAAkE,CAAC;AACxG,MAAM,oCAAoC,GAAG,sEAAsE,CAAC;AACpH,MAAM,wBAAwB,GAAG,gFAAgF,CAAC;AAClH,MAAM,4BAA4B,GAAG,4LAA4L,CAAC;AAClO,MAAM,sBAAsB,GAAG,0DAA0D,CAAC;AAE1F,IAAI,wBAAwB,GAAG,KAAK,CAAC;AACrC,MAAM,yBAAyB,GAAG,IAAI,OAAO,EAAU,CAAC;AAExD,MAAM,UAAU,UAAU,CAAC,OAAO,GAAG,cAAc,EAAE;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAO,GAAG,cAAc,EAAE,EAAE,QAAQ,GAAG,gBAAgB;IACzF,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAoB,EAAE,UAA2B,EAAE;IAC/E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC,CAAC;QAC3F,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,cAAc,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjF,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,IAAI,wBAAwB;QAAE,OAAO;IACrC,wBAAwB,GAAG,IAAI,CAAC;IAEhC,OAAO,CAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,KAAK,EAAE,EAAE;QAC/C,IAAI,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QACjD,aAAa,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,2BAA2B;YACnC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/D,KAAK;SACN,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrG,aAAa,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,4BAA4B;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK;SACN,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAChB,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,YAAY,CAAC,GAAG,EAAE;YAChB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAoB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACxE,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE;QACvB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,aAAa,CAAC;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAG,KAA4B,CAAC,IAAI;SACzC,CAA4B,CAAC;IAChC,CAAC;IACD,OAAO,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAA4B,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,GAAG,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC;IACxD,IAAI,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;QACvB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtF,MAAM,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,2BAA2B,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,GAAG,iBAAiB;QACtE,CAAC,CAAC,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,gBAAgB;QAC5E,CAAC,CAAC,2BAA2B,CAAC;IAEhC,OAAO,sBAAsB,CAAC,SAAS;SACpC,OAAO,CAAC,kCAAkC,EAAE,mBAAmB,CAAC;SAChE,OAAO,CAAC,4BAA4B,EAAE,kBAAkB,CAAC;SACzD,OAAO,CAAC,0BAA0B,EAAE,eAAe,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAa;IACrD,OAAO,KAAK;SACT,OAAO,CAAC,oCAAoC,EAAE,mCAAmC,CAAC;SAClF,OAAO,CAAC,4BAA4B,EAAE,mCAAmC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACrD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAA6B,CAAC;IAElC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,IAAI,UAAU,IAAI,MAAM;YAAE,SAAS;QAEnC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC;QACzD,MAAM,GAAG,sBAAsB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC;IAC7B,CAAC;IAED,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa,EAAE,UAAkB,EAAE,SAAiB;IAClF,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,GAAG,aAAa,CAAC;IACjF,MAAM,qBAAqB,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACrD,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC;IAE/B,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO;YAAE,MAAM;QAClC,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACxD,YAAY,CAAC,SAAS,GAAG,UAAU,CAAC;IACpC,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO;YAAE,MAAM;QAClC,IAAI,cAAc,IAAI,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;YAAE,SAAS;QACzE,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,aAAqB;IAChE,IAAI,KAAK,GAAG,aAAa,GAAG,CAAC,CAAC;IAC9B,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7C,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;AAC9B,CAAC"}

package/dist/utils/error-log.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=error-log.test.d.ts.map

package/dist/utils/error-log.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-log.test.d.ts","sourceRoot":"","sources":["../../src/utils/error-log.test.ts"],"names":[],"mappings":""}

package/dist/utils/error-log.test.js

@@ -0,0 +1,233 @@
+import { existsSync, readFileSync, rmSync } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { afterEach, describe, expect, it } from 'vitest';
+import { formatErrorLogEntry, getErrorLogFilePath, getLogsDir, writeErrorLog } from './error-log.js';
+const tempRoots = [];
+const longAuthorizationPadding = 'x'.repeat(4200);
+function makeTempRoot() {
+    const root = path.join(os.tmpdir(), `agent-tower-error-log-${Date.now()}-${Math.random().toString(16).slice(2)}`);
+    tempRoots.push(root);
+    return root;
+}
+afterEach(() => {
+    for (const root of tempRoots.splice(0)) {
+        rmSync(root, { recursive: true, force: true });
+    }
+});
+describe('error-log', () => {
+    it('creates the logs directory and appends JSON log lines', () => {
+        const dataDir = makeTempRoot();
+        const logFile = writeErrorLog({
+            level: 'error',
+            source: 'test.source',
+            message: 'Something failed',
+            error: new Error('boom'),
+            metadata: { sessionId: 'session-1' },
+        }, {
+            dataDir,
+            now: new Date('2026-06-25T10:00:00.000Z'),
+        });
+        expect(logFile).toBe(getErrorLogFilePath(dataDir));
+        expect(existsSync(getLogsDir(dataDir))).toBe(true);
+        const parsed = JSON.parse(readFileSync(logFile, 'utf-8').trim());
+        expect(parsed).toMatchObject({
+            time: '2026-06-25T10:00:00.000Z',
+            level: 'error',
+            source: 'test.source',
+            message: 'Something failed',
+            error: {
+                name: 'Error',
+                message: 'boom',
+            },
+            metadata: {
+                sessionId: 'session-1',
+            },
+        });
+    });
+    it('redacts sensitive metadata keys and common token strings', () => {
+        const line = formatErrorLogEntry({
+            level: 'error',
+            source: 'test.redaction',
+            message: [
+                'request failed authorization=Bearer fake-bearer-token',
+                'OPENAI_API_KEY=fake-openai-key',
+                'ANTHROPIC_AUTH_TOKEN=fake-anthropic-token',
+                'access_token=fake-access-token',
+                'provider-api-key=fake-provider-key',
+                'CUSTOM_SECRET=fake-custom-secret',
+            ].join('\n'),
+            metadata: {
+                apiKey: 'sk-1234567890abcdef',
+                nested: {
+                    authToken: 'secret-token',
+                    safe: 'value',
+                },
+                output: 'stderr OPENAI_API_KEY=fake-output-key ANTHROPIC_AUTH_TOKEN=fake-output-token',
+            },
+        }, new Date('2026-06-25T10:00:00.000Z'));
+        expect(line).not.toContain('sk-1234567890abcdef');
+        expect(line).not.toContain('secret-token');
+        expect(line).not.toContain('fake-bearer-token');
+        expect(line).not.toContain('fake-openai-key');
+        expect(line).not.toContain('fake-anthropic-token');
+        expect(line).not.toContain('fake-access-token');
+        expect(line).not.toContain('fake-provider-key');
+        expect(line).not.toContain('fake-custom-secret');
+        expect(line).not.toContain('fake-output-key');
+        expect(line).not.toContain('fake-output-token');
+        expect(line).toContain('[REDACTED]');
+        const parsed = JSON.parse(line);
+        expect(parsed.message).toContain('OPENAI_API_KEY=[REDACTED]');
+        expect(parsed.message).toContain('ANTHROPIC_AUTH_TOKEN=[REDACTED]');
+        expect(parsed.message).toContain('access_token=[REDACTED]');
+        expect(parsed.message).toContain('provider-api-key=[REDACTED]');
+        expect(parsed.message).toContain('CUSTOM_SECRET=[REDACTED]');
+        expect(parsed.metadata.output).toContain('OPENAI_API_KEY=[REDACTED]');
+        expect(parsed.metadata.output).toContain('ANTHROPIC_AUTH_TOKEN=[REDACTED]');
+        expect(parsed.metadata.nested.safe).toBe('value');
+    });
+    it('redacts full authorization and cookie header values in free text', () => {
+        const line = formatErrorLogEntry({
+            level: 'error',
+            source: 'test.header-redaction',
+            message: [
+                'request authorization: Bearer fake-auth-token fake-auth-extra',
+                'cookie: session=fake-session; refresh=fake-refresh; theme=fake-theme',
+            ].join('\n'),
+            metadata: {
+                output: [
+                    'stderr authorization=Basic fake-basic-token fake-basic-extra',
+                    'cookie=session=fake-output-session; refresh=fake-output-refresh',
+                ].join('\n'),
+            },
+        }, new Date('2026-06-25T10:00:00.000Z'));
+        expect(line).not.toContain('fake-auth-token');
+        expect(line).not.toContain('fake-auth-extra');
+        expect(line).not.toContain('fake-session');
+        expect(line).not.toContain('fake-refresh');
+        expect(line).not.toContain('fake-theme');
+        expect(line).not.toContain('fake-basic-token');
+        expect(line).not.toContain('fake-basic-extra');
+        expect(line).not.toContain('fake-output-session');
+        expect(line).not.toContain('fake-output-refresh');
+        const parsed = JSON.parse(line);
+        expect(parsed.message).toContain('authorization: [REDACTED]');
+        expect(parsed.message).toContain('cookie: [REDACTED]');
+        expect(parsed.metadata.output).toContain('authorization=[REDACTED]');
+        expect(parsed.metadata.output).toContain('cookie=[REDACTED]');
+    });
+    it('redacts parameterized authorization headers through the full header value', () => {
+        const line = formatErrorLogEntry({
+            level: 'error',
+            source: 'test.parameterized-authorization',
+            message: [
+                'authorization: Digest username=fake-digest-user, realm=fake-digest-realm, nonce=fake-digest-nonce, response=fake-digest-response',
+                'authorization: AWS4-HMAC-SHA256 Credential=fake-aws-credential, SignedHeaders=host;x-date, Signature=fake-aws-signature',
+            ].join('\n'),
+            metadata: {
+                output: [
+                    'authorization=Digest username=fake-output-user, response=fake-output-response',
+                    'authorization=AWS4-HMAC-SHA256 Credential=fake-output-credential, Signature=fake-output-signature',
+                ].join('\n'),
+            },
+        }, new Date('2026-06-25T10:00:00.000Z'));
+        expect(line).not.toContain('fake-digest-user');
+        expect(line).not.toContain('fake-digest-realm');
+        expect(line).not.toContain('fake-digest-nonce');
+        expect(line).not.toContain('fake-digest-response');
+        expect(line).not.toContain('fake-aws-credential');
+        expect(line).not.toContain('fake-aws-signature');
+        expect(line).not.toContain('fake-output-user');
+        expect(line).not.toContain('fake-output-response');
+        expect(line).not.toContain('fake-output-credential');
+        expect(line).not.toContain('fake-output-signature');
+        const parsed = JSON.parse(line);
+        expect(parsed.message).toContain('authorization: [REDACTED]');
+        expect(parsed.metadata.output).toContain('authorization=[REDACTED]');
+    });
+    it('redacts quoted authorization keys in JSON-like text', () => {
+        const line = formatErrorLogEntry({
+            level: 'error',
+            source: 'test.quoted-authorization',
+            message: [
+                '{"authorization":"Digest username=fake-json-user, realm=fake-json-realm, nonce=fake-json-nonce, response=fake-json-response"}',
+                '{"authorization":"AWS4-HMAC-SHA256 Credential=fake-json-credential, SignedHeaders=host;x-date, Signature=fake-json-signature"}',
+            ].join('\n'),
+            metadata: {
+                output: [
+                    "'authorization':'Digest username=fake-output-user, response=fake-output-response'",
+                    "'authorization':'AWS4-HMAC-SHA256 Credential=fake-output-credential, Signature=fake-output-signature'",
+                ].join('\n'),
+            },
+        }, new Date('2026-06-25T10:00:00.000Z'));
+        expect(line).not.toContain('fake-json-user');
+        expect(line).not.toContain('fake-json-realm');
+        expect(line).not.toContain('fake-json-nonce');
+        expect(line).not.toContain('fake-json-response');
+        expect(line).not.toContain('fake-json-credential');
+        expect(line).not.toContain('fake-json-signature');
+        expect(line).not.toContain('fake-output-user');
+        expect(line).not.toContain('fake-output-response');
+        expect(line).not.toContain('fake-output-credential');
+        expect(line).not.toContain('fake-output-signature');
+        const parsed = JSON.parse(line);
+        expect(parsed.message).toContain('"authorization":"[REDACTED]"');
+        expect(parsed.metadata.output).toContain("'authorization':'[REDACTED]'");
+    });
+    it('redacts long quoted authorization values before truncating strings', () => {
+        const line = formatErrorLogEntry({
+            level: 'error',
+            source: 'test.long-quoted-authorization',
+            message: [
+                `{"authorization":"Digest username=fake-long-json-user, response=fake-long-json-response, padding=${longAuthorizationPadding}"}`,
+                `{"authorization":"AWS4-HMAC-SHA256 Credential=fake-long-json-credential, Signature=fake-long-json-signature, padding=${longAuthorizationPadding}"}`,
+            ].join('\n'),
+            metadata: {
+                output: [
+                    `'authorization':'Digest username=fake-long-output-user, response=fake-long-output-response, padding=${longAuthorizationPadding}'`,
+                    `'authorization':'AWS4-HMAC-SHA256 Credential=fake-long-output-credential, Signature=fake-long-output-signature, padding=${longAuthorizationPadding}'`,
+                ].join('\n'),
+            },
+        }, new Date('2026-06-25T10:00:00.000Z'));
+        expect(line).not.toContain('fake-long-json-user');
+        expect(line).not.toContain('fake-long-json-response');
+        expect(line).not.toContain('fake-long-json-credential');
+        expect(line).not.toContain('fake-long-json-signature');
+        expect(line).not.toContain('fake-long-output-user');
+        expect(line).not.toContain('fake-long-output-response');
+        expect(line).not.toContain('fake-long-output-credential');
+        expect(line).not.toContain('fake-long-output-signature');
+        const parsed = JSON.parse(line);
+        expect(parsed.message).toContain('"authorization":"[REDACTED]"');
+        expect(parsed.metadata.output).toContain("'authorization':'[REDACTED]'");
+    });
+    it('redacts long escaped quoted authorization values before truncating strings', () => {
+        const line = formatErrorLogEntry({
+            level: 'error',
+            source: 'test.long-escaped-quoted-authorization',
+            message: [
+                `{\\\"authorization\\\":\\\"Digest username=fake-escaped-json-user, response=fake-escaped-json-response, padding=${longAuthorizationPadding}\\\"}`,
+                `{\\\"authorization\\\":\\\"AWS4-HMAC-SHA256 Credential=fake-escaped-json-credential, Signature=fake-escaped-json-signature, padding=${longAuthorizationPadding}\\\"}`,
+            ].join('\n'),
+            metadata: {
+                output: [
+                    `\\'authorization\\':\\'Digest username=fake-escaped-output-user, response=fake-escaped-output-response, padding=${longAuthorizationPadding}\\'`,
+                    `\\'authorization\\':\\'AWS4-HMAC-SHA256 Credential=fake-escaped-output-credential, Signature=fake-escaped-output-signature, padding=${longAuthorizationPadding}\\'`,
+                ].join('\n'),
+            },
+        }, new Date('2026-06-25T10:00:00.000Z'));
+        expect(line).not.toContain('fake-escaped-json-user');
+        expect(line).not.toContain('fake-escaped-json-response');
+        expect(line).not.toContain('fake-escaped-json-credential');
+        expect(line).not.toContain('fake-escaped-json-signature');
+        expect(line).not.toContain('fake-escaped-output-user');
+        expect(line).not.toContain('fake-escaped-output-response');
+        expect(line).not.toContain('fake-escaped-output-credential');
+        expect(line).not.toContain('fake-escaped-output-signature');
+        const parsed = JSON.parse(line);
+        expect(parsed.message).toContain('\\\"authorization\\\":\\\"[REDACTED]\\\"');
+        expect(parsed.metadata.output).toContain("\\'authorization\\':\\'[REDACTED]\\'");
+    });
+});
+//# sourceMappingURL=error-log.test.js.map

package/dist/utils/error-log.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-log.test.js","sourceRoot":"","sources":["../../src/utils/error-log.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAErG,MAAM,SAAS,GAAa,EAAE,CAAC;AAC/B,MAAM,wBAAwB,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAElD,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,kBAAkB;YAC3B,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE;SACrC,EAAE;YACD,OAAO;YACP,GAAG,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;SAC1C,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,kBAAkB;YAC3B,KAAK,EAAE;gBACL,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,MAAM;aAChB;YACD,QAAQ,EAAE;gBACR,SAAS,EAAE,WAAW;aACvB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG,mBAAmB,CAAC;YAC/B,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,gBAAgB;YACxB,OAAO,EAAE;gBACP,uDAAuD;gBACvD,gCAAgC;gBAChC,2CAA2C;gBAC3C,gCAAgC;gBAChC,oCAAoC;gBACpC,kCAAkC;aACnC,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE;gBACR,MAAM,EAAE,qBAAqB;gBAC7B,MAAM,EAAE;oBACN,SAAS,EAAE,cAAc;oBACzB,IAAI,EAAE,OAAO;iBACd;gBACD,MAAM,EAAE,8EAA8E;aACvF;SACF,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAEzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,IAAI,GAAG,mBAAmB,CAAC;YAC/B,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,uBAAuB;YAC/B,OAAO,EAAE;gBACP,+DAA+D;gBAC/D,sEAAsE;aACvE,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE;gBACR,MAAM,EAAE;oBACN,8DAA8D;oBAC9D,iEAAiE;iBAClE,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAEzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,IAAI,GAAG,mBAAmB,CAAC;YAC/B,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,kCAAkC;YAC1C,OAAO,EAAE;gBACP,kIAAkI;gBAClI,yHAAyH;aAC1H,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE;gBACR,MAAM,EAAE;oBACN,+EAA+E;oBAC/E,mGAAmG;iBACpG,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAEzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAG,mBAAmB,CAAC;YAC/B,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,2BAA2B;YACnC,OAAO,EAAE;gBACP,+HAA+H;gBAC/H,gIAAgI;aACjI,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE;gBACR,MAAM,EAAE;oBACN,mFAAmF;oBACnF,uGAAuG;iBACxG,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAEzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,IAAI,GAAG,mBAAmB,CAAC;YAC/B,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,gCAAgC;YACxC,OAAO,EAAE;gBACP,oGAAoG,wBAAwB,IAAI;gBAChI,wHAAwH,wBAAwB,IAAI;aACrJ,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE;gBACR,MAAM,EAAE;oBACN,uGAAuG,wBAAwB,GAAG;oBAClI,2HAA2H,wBAAwB,GAAG;iBACvJ,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAEzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,IAAI,GAAG,mBAAmB,CAAC;YAC/B,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,wCAAwC;YAChD,OAAO,EAAE;gBACP,mHAAmH,wBAAwB,OAAO;gBAClJ,uIAAuI,wBAAwB,OAAO;aACvK,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE;gBACR,MAAM,EAAE;oBACN,mHAAmH,wBAAwB,KAAK;oBAChJ,uIAAuI,wBAAwB,KAAK;iBACrK,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAEzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/prisma-cli-env.d.ts

@@ -0,0 +1,3 @@
+export declare function getPrismaCacheBaseDir(dataDir: string): string;
+export declare function preparePrismaCliEnv(dataDir: string, dbPath: string, env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+//# sourceMappingURL=prisma-cli-env.d.ts.map

package/dist/utils/prisma-cli-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-cli-env.d.ts","sourceRoot":"","sources":["../../src/utils/prisma-cli-env.ts"],"names":[],"mappings":"AAGA,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAAC,UAAU,CASnB"}

package/dist/utils/prisma-cli-env.js

@@ -0,0 +1,15 @@
+import { mkdirSync } from 'node:fs';
+import path from 'node:path';
+export function getPrismaCacheBaseDir(dataDir) {
+    return path.join(dataDir, 'cache');
+}
+export function preparePrismaCliEnv(dataDir, dbPath, env = process.env) {
+    const cacheDir = getPrismaCacheBaseDir(dataDir);
+    mkdirSync(cacheDir, { recursive: true });
+    return {
+        ...env,
+        AGENT_TOWER_DATABASE_URL: `file:${dbPath}`,
+        CACHE_DIR: cacheDir,
+    };
+}
+//# sourceMappingURL=prisma-cli-env.js.map

package/dist/utils/prisma-cli-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-cli-env.js","sourceRoot":"","sources":["../../src/utils/prisma-cli-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,MAAc,EACd,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,OAAO;QACL,GAAG,GAAG;QACN,wBAAwB,EAAE,QAAQ,MAAM,EAAE;QAC1C,SAAS,EAAE,QAAQ;KACpB,CAAC;AACJ,CAAC"}

package/dist/utils/prisma-cli-env.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=prisma-cli-env.test.d.ts.map

package/dist/utils/prisma-cli-env.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-cli-env.test.d.ts","sourceRoot":"","sources":["../../src/utils/prisma-cli-env.test.ts"],"names":[],"mappings":""}

package/dist/utils/prisma-cli-env.test.js

@@ -0,0 +1,34 @@
+import { existsSync, rmSync } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { afterEach, describe, expect, it } from 'vitest';
+import { getPrismaCacheBaseDir, preparePrismaCliEnv } from './prisma-cli-env.js';
+const tempRoots = [];
+function makeTempRoot() {
+    const root = path.join(os.tmpdir(), `agent-tower-prisma-env-${Date.now()}-${Math.random().toString(16).slice(2)}`);
+    tempRoots.push(root);
+    return root;
+}
+afterEach(() => {
+    for (const root of tempRoots.splice(0)) {
+        rmSync(root, { recursive: true, force: true });
+    }
+});
+describe('prisma-cli-env', () => {
+    it('redirects Prisma CLI cache into the Agent Tower data directory', () => {
+        const dataDir = makeTempRoot();
+        const dbPath = path.join(dataDir, 'data.db');
+        const originalCacheDir = process.env.CACHE_DIR;
+        const env = preparePrismaCliEnv(dataDir, dbPath, {
+            PATH: '/usr/bin',
+            CACHE_DIR: '/readonly/cache',
+        });
+        expect(env.PATH).toBe('/usr/bin');
+        expect(env.AGENT_TOWER_DATABASE_URL).toBe(`file:${dbPath}`);
+        expect(env.CACHE_DIR).toBe(path.join(dataDir, 'cache'));
+        expect(getPrismaCacheBaseDir(dataDir)).toBe(path.join(dataDir, 'cache'));
+        expect(existsSync(path.join(dataDir, 'cache'))).toBe(true);
+        expect(process.env.CACHE_DIR).toBe(originalCacheDir);
+    });
+});
+//# sourceMappingURL=prisma-cli-env.test.js.map

package/dist/utils/prisma-cli-env.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-cli-env.test.js","sourceRoot":"","sources":["../../src/utils/prisma-cli-env.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEjF,MAAM,SAAS,GAAa,EAAE,CAAC;AAE/B,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,0BAA0B,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAE/C,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE;YAC/C,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/process-launch.d.ts

@@ -3,9 +3,13 @@ export interface CommandInvocation {
     args: string[];
 }
 export declare function getNodeRuntimeCommand(): string;
+export declare const PTY_WRAPPER_ENV_KEYS: readonly ["AGENT_TOWER_NODE_RUNTIME", "ELECTRON_RUN_AS_NODE"];
+export declare function buildPtyWrapperEnv(agentEnv: Record<string, string>, parentEnv?: NodeJS.ProcessEnv): Record<string, string>;
 export declare function getBundledPrismaCommand(moduleDir: string): CommandInvocation;
 export declare function buildPtyCommand(programPath: string, args: string[]): CommandInvocation;
 export declare function buildPtyCommandWithStdin(programPath: string, args: string[], stdinFile: string): CommandInvocation;
+export declare function escapeArgForWindowsCmd(arg: string): string;
+export declare function buildWindowsCmdShimCommandLine(programPath: string, args: string[]): string;
 export declare function getDefaultTerminalShell(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): CommandInvocation;
 export declare function getPtyLogFilePath(tmpDir?: string): string;
 export declare function normalizeCommandLookupOutput(stdout: string): string | null;

package/dist/utils/process-launch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-launch.d.ts","sourceRoot":"","sources":["../../src/utils/process-launch.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAkJD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,CAK5E;AAED,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAKtF;AAED,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EAAE,EACd,SAAS,EAAE,MAAM,GAChB,iBAAiB,CAKnB;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,iBAAiB,CAYnB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,MAAoB,GAAG,MAAM,CAEtE;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAkB1E"}
+{"version":3,"file":"process-launch.d.ts","sourceRoot":"","sources":["../../src/utils/process-launch.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,eAAO,MAAM,oBAAoB,+DAGvB,CAAC;AAEX,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,SAAS,GAAE,MAAM,CAAC,UAAwB,GACzC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxB;AAqND,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,CAK5E;AAED,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAKtF;AAED,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EAAE,EACd,SAAS,EAAE,MAAM,GAChB,iBAAiB,CAKnB;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAK1D;AAED,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAE1F;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,iBAAiB,CAYnB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,MAAoB,GAAG,MAAM,CAEtE;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAkB1E"}