takt 0.41.0 → 0.43.0

package/dist/shared/utils/sensitiveText.js

@@ -0,0 +1,40 @@
+const SENSITIVE_KEY_PATTERN = String.raw `[A-Za-z0-9_.-]*(?:api[_-]?key|token|password|secret|access[_-]?key|access[_-]?token|refresh[_-]?token|private[_-]?key)[A-Za-z0-9_.-]*`;
+const SENSITIVE_QUOTED_VALUE_PATTERN = String.raw `"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'`;
+const SENSITIVE_ASSIGNMENT_QUOTED_VALUE_REGEX = new RegExp(String.raw `(["']?(?:${SENSITIVE_KEY_PATTERN})["']?\s*[:=]\s*)(${SENSITIVE_QUOTED_VALUE_PATTERN})`, 'gi');
+const SENSITIVE_ASSIGNMENT_BARE_VALUE_REGEX = new RegExp(String.raw `(["']?(?:${SENSITIVE_KEY_PATTERN})["']?\s*[:=]\s*["']?)([^"'[,\s}\]]+)(["']?)`, 'gi');
+const SENSITIVE_OPTION_VALUE_REGEX = new RegExp(String.raw `(--(?:${SENSITIVE_KEY_PATTERN})(?:=|\s+))(${SENSITIVE_QUOTED_VALUE_PATTERN}|[^\s]+)`, 'gi');
+const HTTP_AUTHORIZATION_HEADER_REGEX = /\b(Authorization\s*:\s*)([^"'\r\n]+)/gi;
+const HTTP_COOKIE_HEADER_REGEX = /\b((?:Set-)?Cookie\s*:\s*)([^"'\r\n]+)/gi;
+const URL_USERINFO_CREDENTIALS_REGEX = /(\b[A-Za-z][A-Za-z0-9+.-]*:\/\/)([^/?#\s@]+:[^/?#\s@]+)@/g;
+const CURL_USER_EQUALS_REGEX = /(\B--(?:proxy-)?user=)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s]+)/gi;
+const CURL_USER_SPACE_REGEX = /(\B(?:-u|--(?:proxy-)?user)\s+)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s]+)/gi;
+const CURL_SHORT_USER_COMPACT_REGEX = /(^|\s)(-u)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s]+)/gi;
+export function sanitizeSensitiveText(text) {
+    if (!text)
+        return text;
+    return text
+        .replace(SENSITIVE_ASSIGNMENT_QUOTED_VALUE_REGEX, (_match, prefix, quotedValue) => {
+        const quote = quotedValue[0];
+        return `${prefix}${quote}[REDACTED]${quote}`;
+    })
+        .replace(URL_USERINFO_CREDENTIALS_REGEX, '$1[REDACTED]@')
+        .replace(HTTP_AUTHORIZATION_HEADER_REGEX, (_match, prefix, value) => {
+        const leadingWhitespaceLength = value.length - value.trimStart().length;
+        const leadingWhitespace = value.slice(0, leadingWhitespaceLength);
+        const trimmed = value.slice(leadingWhitespaceLength);
+        const authScheme = /^([A-Za-z]+)\s+/.exec(trimmed);
+        if (authScheme) {
+            return `${prefix}${leadingWhitespace}${authScheme[1]} [REDACTED]`;
+        }
+        return `${prefix}${leadingWhitespace}[REDACTED]`;
+    })
+        .replace(HTTP_COOKIE_HEADER_REGEX, '$1[REDACTED]')
+        .replace(CURL_USER_EQUALS_REGEX, '$1[REDACTED]')
+        .replace(CURL_USER_SPACE_REGEX, '$1[REDACTED]')
+        .replace(CURL_SHORT_USER_COMPACT_REGEX, '$1$2[REDACTED]')
+        .replace(SENSITIVE_ASSIGNMENT_BARE_VALUE_REGEX, '$1[REDACTED]$3')
+        .replace(SENSITIVE_OPTION_VALUE_REGEX, '$1[REDACTED]')
+        .replace(/([?&](?:api[_-]?key|token|password|secret)=)([^&\s]+)/gi, '$1[REDACTED]')
+        .replace(/\b(?:sk-[A-Za-z0-9_-]{8,}|ghp_[A-Za-z0-9_]{8,}|xox[baprs]-[A-Za-z0-9-]{8,})\b/g, '[REDACTED]');
+}
+//# sourceMappingURL=sensitiveText.js.map

package/dist/shared/utils/sensitiveText.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitiveText.js","sourceRoot":"","sources":["../../../src/shared/utils/sensitiveText.ts"],"names":[],"mappings":"AAAA,MAAM,qBAAqB,GAAG,MAAM,CAAC,GAAG,CAAA,uIAAuI,CAAC;AAChL,MAAM,8BAA8B,GAAG,MAAM,CAAC,GAAG,CAAA,qCAAqC,CAAC;AACvF,MAAM,uCAAuC,GAAG,IAAI,MAAM,CACxD,MAAM,CAAC,GAAG,CAAA,YAAY,qBAAqB,qBAAqB,8BAA8B,GAAG,EACjG,IAAI,CACL,CAAC;AACF,MAAM,qCAAqC,GAAG,IAAI,MAAM,CACtD,MAAM,CAAC,GAAG,CAAA,YAAY,qBAAqB,8CAA8C,EACzF,IAAI,CACL,CAAC;AACF,MAAM,4BAA4B,GAAG,IAAI,MAAM,CAC7C,MAAM,CAAC,GAAG,CAAA,SAAS,qBAAqB,eAAe,8BAA8B,UAAU,EAC/F,IAAI,CACL,CAAC;AACF,MAAM,+BAA+B,GAAG,wCAAwC,CAAC;AACjF,MAAM,wBAAwB,GAAG,0CAA0C,CAAC;AAC5E,MAAM,8BAA8B,GAAG,2DAA2D,CAAC;AACnG,MAAM,sBAAsB,GAAG,wEAAwE,CAAC;AACxG,MAAM,qBAAqB,GAAG,iFAAiF,CAAC;AAChH,MAAM,6BAA6B,GAAG,4DAA4D,CAAC;AAEnG,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,IAAI;SACR,OAAO,CAAC,uCAAuC,EAAE,CAAC,MAAM,EAAE,MAAc,EAAE,WAAmB,EAAE,EAAE;QAChG,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,GAAG,MAAM,GAAG,KAAK,aAAa,KAAK,EAAE,CAAC;IAC/C,CAAC,CAAC;SACD,OAAO,CAAC,8BAA8B,EAAE,eAAe,CAAC;SACxD,OAAO,CAAC,+BAA+B,EAAE,CAAC,MAAM,EAAE,MAAc,EAAE,KAAa,EAAE,EAAE;QAClF,MAAM,uBAAuB,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;QACxE,MAAM,iBAAiB,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,GAAG,MAAM,GAAG,iBAAiB,GAAG,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;QACpE,CAAC;QACD,OAAO,GAAG,MAAM,GAAG,iBAAiB,YAAY,CAAC;IACnD,CAAC,CAAC;SACD,OAAO,CAAC,wBAAwB,EAAE,cAAc,CAAC;SACjD,OAAO,CAAC,sBAAsB,EAAE,cAAc,CAAC;SAC/C,OAAO,CAAC,qBAAqB,EAAE,cAAc,CAAC;SAC9C,OAAO,CAAC,6BAA6B,EAAE,gBAAgB,CAAC;SACxD,OAAO,CAAC,qCAAqC,EAAE,gBAAgB,CAAC;SAChE,OAAO,CAAC,4BAA4B,EAAE,cAAc,CAAC;SACrD,OAAO,CAAC,yDAAyD,EAAE,cAAc,CAAC;SAClF,OAAO,CAAC,gFAAgF,EAAE,YAAY,CAAC,CAAC;AAC7G,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "takt",
-  "version": "0.41.0",
+  "version": "0.43.0",
   "description": "TAKT: TAKT Agent Koordination Topology - AI Agent Workflow Orchestration",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -55,7 +55,7 @@
   "homepage": "https://github.com/nrslib/takt#readme",
   "type": "module",
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=18.19.0"
   },
   "files": [
     "dist/",
@@ -66,6 +66,8 @@
     "@anthropic-ai/claude-agent-sdk": "^0.2.119",
     "@openai/codex-sdk": "^0.125.0",
     "@opencode-ai/sdk": "^1.14.24",
+    "@opentelemetry/api": "^1.9.1",
+    "@opentelemetry/sdk-node": "^0.217.0",
     "ajv": "^6.12.6",
     "chalk": "^5.3.0",
     "commander": "^12.1.0",