veryfront 0.1.635 → 0.1.637

package/esm/src/utils/logger/redact.js

@@ -0,0 +1,235 @@
+/**
+ * Secret / credential redaction for structured log context.
+ *
+ * Defense-in-depth (#1989): the logger, the error-logging path, and the
+ * observability log buffer all accept arbitrary `context`/`data` objects from
+ * callers and serialize them to log sinks. There is no guarantee a caller
+ * never hands us a tokens object, an `Authorization` header bag, or a request
+ * body with a password field. This pass masks values whose *key* looks like a
+ * credential before serialization, so an accidental
+ * `logger.info("...", { authorization: token })` cannot leak the secret.
+ *
+ * Scope is intentionally key-based: we do not attempt to find secrets embedded
+ * in free-form message strings (too lossy). The deny-list errs toward
+ * over-redaction — masking a benign `tokenCount` is acceptable; leaking a real
+ * token is not. The traversal fails *closed*: on a cycle, depth overflow, or a
+ * throwing getter it returns {@link REDACTED} rather than risk emitting an
+ * unredacted object.
+ */
+import { isRecord } from "./core.js";
+/** Replacement value substituted for any sensitive field. */
+export const REDACTED = "[REDACTED]";
+/**
+ * Normalized substrings that mark a key as sensitive. Matching is done against
+ * a lowercased, non-alphanumeric-stripped form of the key, so `API-Key`,
+ * `api_key`, and `apiKey` all collapse to `apikey` and match.
+ *
+ * Deliberately omitted to avoid false positives that swamp real logs:
+ * - bare `"auth"` (would mask `author`); `authorization`/`authToken` are still
+ *   covered via `authorization`/`token`.
+ * - short tokens like `"dsn"`/`"sas"` (would mask `feedsNamespace`, etc.).
+ */
+const SENSITIVE_KEY_PATTERNS = [
+    "password",
+    "passwd",
+    "pwd",
+    "passphrase",
+    "secret",
+    "clientsecret",
+    "token",
+    "apikey",
+    "accesskey",
+    "privatekey",
+    "credential",
+    "authorization",
+    "cookie",
+    "bearer",
+    "jwt",
+    "connectionstring",
+    "signature",
+    "sessionid",
+    "sid",
+    "otp",
+    "mfa",
+    "pin",
+    "salt",
+    "xsrf",
+    "csrf",
+];
+/** Stop traversing past this depth to keep the pass cheap and stack-safe. */
+const MAX_DEPTH = 16;
+/**
+ * Whether a context key names a credential and should have its value masked.
+ *
+ * Uses substring matching on a normalized key, so `clientSecret`,
+ * `x-api-key`, and `refresh_token` all match while benign words that merely
+ * *contain* a pattern as a separate token (e.g. `author`) do not — `author`
+ * normalizes to `author`, which contains none of the patterns.
+ */
+export function isSensitiveKey(key) {
+    const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
+    return SENSITIVE_KEY_PATTERNS.some((pattern) => normalized.includes(pattern));
+}
+/**
+ * A non-null, non-array object. {@link isRecord} covers class instances too,
+ * whose enumerable fields `JSON.stringify` *would* serialize, so we must
+ * traverse them to catch secrets.
+ */
+function isTraversableRecord(value) {
+    return isRecord(value);
+}
+function hasToJson(value) {
+    return typeof value.toJSON === "function";
+}
+function redactValue(value, depth, seen) {
+    if (Array.isArray(value)) {
+        if (depth >= MAX_DEPTH || seen.has(value))
+            return REDACTED;
+        seen.add(value);
+        try {
+            return value.map((item) => redactValue(item, depth + 1, seen));
+        }
+        finally {
+            seen.delete(value);
+        }
+    }
+    // Objects defining `toJSON` (Date, URL, custom serializers) are serialized
+    // by `JSON.stringify` via the *return value* of `toJSON`, not their own
+    // enumerable keys. A key-based pass over the object's own properties would
+    // therefore miss credentials smuggled through `toJSON`, e.g.
+    // `{ toJSON: () => ({ apiKey: "sk-..." }) }` (CODEX P2). When `toJSON`
+    // returns a non-scalar (an object/array that could carry credential keys),
+    // redact *that* — the thing actually emitted. When it returns a scalar
+    // (Date/URL → ISO string), the original object is left intact, preserving
+    // prior behavior and identity.
+    if (isRecord(value) && hasToJson(value)) {
+        if (depth >= MAX_DEPTH || seen.has(value))
+            return REDACTED;
+        seen.add(value);
+        try {
+            const serialized = value.toJSON();
+            if (isRecord(serialized) || Array.isArray(serialized)) {
+                return redactValue(serialized, depth + 1, seen);
+            }
+            // Scalar result (string/number/…): the object serializes safely as-is.
+            return value;
+        }
+        catch {
+            // A throwing toJSON must never let the raw object (whose own keys we
+            // skipped) through: fail closed.
+            return REDACTED;
+        }
+        finally {
+            seen.delete(value);
+        }
+    }
+    if (isTraversableRecord(value)) {
+        if (depth >= MAX_DEPTH || seen.has(value))
+            return REDACTED;
+        seen.add(value);
+        try {
+            const out = {};
+            for (const [key, child] of Object.entries(value)) {
+                out[key] = isSensitiveKey(key) ? REDACTED : redactValue(child, depth + 1, seen);
+            }
+            return out;
+        }
+        catch {
+            // A throwing getter (or other access error) must never let an
+            // unredacted object through: fail closed.
+            return REDACTED;
+        }
+        finally {
+            seen.delete(value);
+        }
+    }
+    // Primitives and scalar-serializing objects (Date, URL, …) are returned
+    // untouched: they are not key/value bags we can safely rewrite.
+    return value;
+}
+/**
+ * Returns a redacted deep copy of `context`. Any property whose key is
+ * {@link isSensitiveKey} has its value replaced with {@link REDACTED}; nested
+ * plain objects, class instances, and arrays are traversed. The input is never
+ * mutated, and the pass fails closed (returns {@link REDACTED}) on cycles,
+ * depth overflow, or a throwing getter.
+ */
+export function redactSensitive(context) {
+    return redactValue(context, 0, new Set());
+}
+/**
+ * Query-string parameter names that commonly carry credentials in URLs.
+ * Matched case-insensitively against the parameter name.
+ */
+const SENSITIVE_URL_PARAMS = [
+    "access_token",
+    "accesstoken",
+    "refresh_token",
+    "api_key",
+    "apikey",
+    "code",
+    "token",
+    "secret",
+    "client_secret",
+    "password",
+    "passwd",
+    "pwd",
+    "state",
+    "sig",
+    "signature",
+    "auth",
+];
+const URL_USERINFO_RE = /(\b[a-z][a-z0-9+.-]*:\/\/)([^/?#@\s]+)@/gi;
+/**
+ * Strip credentials from URL-shaped strings so they can be safely emitted in
+ * free-form text (error messages, stacks, lifted `request_url` fields). Unlike
+ * {@link redactSensitive}, which is key-based, this scrubs secrets embedded in
+ * the *value* itself:
+ *
+ * - URL userinfo: `http://user:pass@host` → `http://user:[REDACTED]@host`
+ * - sensitive query params: `?access_token=abc` → `?access_token=[REDACTED]`
+ *
+ * It is intentionally tolerant: it operates on any string (a DSN, a Mongo URI,
+ * an axios error message containing a URL) via regex rather than requiring a
+ * parseable URL, so malformed or partial URLs in error text are still scrubbed.
+ * Non-URL strings pass through unchanged.
+ */
+export function sanitizeUrlCredentials(input) {
+    if (typeof input !== "string" || input.length === 0)
+        return input;
+    // 1) userinfo: scheme://user:pass@  → mask the password (and any bare creds).
+    let out = input.replace(URL_USERINFO_RE, (_match, scheme, userinfo) => {
+        const colon = userinfo.indexOf(":");
+        if (colon === -1) {
+            // `scheme://token@host` — the whole userinfo is credential-like.
+            return `${scheme}${REDACTED}@`;
+        }
+        const user = userinfo.slice(0, colon);
+        return `${scheme}${user}:${REDACTED}@`;
+    });
+    // 2) sensitive query/fragment params: `key=value` → `key=[REDACTED]`.
+    // Match `?key=`, `&key=`, `;key=` separators and stop at the next delimiter.
+    out = out.replace(/([?&;])([a-z0-9_.\-]+)=([^&#;\s]*)/gi, (match, sep, key, _val) => {
+        const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
+        const sensitive = SENSITIVE_URL_PARAMS.some((p) => normalized === p.replace(/[^a-z0-9]/g, ""));
+        return sensitive ? `${sep}${key}=${REDACTED}` : match;
+    });
+    return out;
+}
+/**
+ * Apply {@link sanitizeUrlCredentials} to the `message` and `stack` of a
+ * serialized-error-shaped object, returning a new object. Used by the logger's
+ * JSON and text paths so errors carrying DSNs, Mongo URIs, or
+ * `?access_token=`-bearing URLs do not leak credentials (the serialized error
+ * bypasses the key-based redactor). Returns the input unchanged when falsy.
+ */
+export function sanitizeSerializedError(error) {
+    if (!error)
+        return error;
+    const out = { ...error };
+    if (typeof out.message === "string")
+        out.message = sanitizeUrlCredentials(out.message);
+    if (typeof out.stack === "string")
+        out.stack = sanitizeUrlCredentials(out.stack);
+    return out;
+}

package/esm/src/utils/redis-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redis-client.d.ts","sourceRoot":"","sources":["../../../src/src/utils/redis-client.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,WAAW;IAC1B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CACF,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACjE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAUD,wBAAsB,cAAc,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC,CA4B3F;AAgED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C"}
+{"version":3,"file":"redis-client.d.ts","sourceRoot":"","sources":["../../../src/src/utils/redis-client.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,WAAW;IAC1B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CACF,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACjE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAsBD,wBAAsB,cAAc,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC,CA4B3F;AA6DD,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C"}

package/esm/src/utils/redis-client.js

@@ -38,12 +38,10 @@ export async function getRedisClient(options = {}) {
     }
 }
 async function createClient(options) {
-    // deno-lint-ignore no-explicit-any
     let createClientFn;
     try {
         const redisClientModule = "npm:@redis/client@1.5.8";
         const mod = await import(redisClientModule);
-        // deno-lint-ignore no-explicit-any
         createClientFn = mod.createClient;
     }
     catch (error) {
@@ -57,7 +55,6 @@ async function createClient(options) {
     if (!useTls && getEnv("NODE_ENV") === "production") {
         logger.warn("Redis connection without TLS in production. Set REDIS_URL to rediss:// or pass tls: true.");
     }
-    // deno-lint-ignore no-explicit-any
     const clientOpts = { url };
     if (useTls) {
         clientOpts.socket = { tls: true };

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.635";
+export declare const VERSION = "0.1.637";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.635";
+export const VERSION = "0.1.637";

package/esm/src/workflow/schemas/workflow.schema.d.ts

@@ -82,7 +82,7 @@ export declare const getCheckpointSchema: () => import("../../internal-agents/sc
 /**
  * Approval status schema
  */
-export declare const getApprovalStatusSchema: () => import("../../internal-agents/schema.js").Schema<"expired" | "rejected" | "pending" | "approved">;
+export declare const getApprovalStatusSchema: () => import("../../internal-agents/schema.js").Schema<"rejected" | "expired" | "pending" | "approved">;
 /**
  * Pending approval schema
  */
@@ -94,7 +94,7 @@ export declare const getPendingApprovalSchema: () => import("../../internal-agen
     approvers: import("../../internal-agents/schema.js").Schema<string[] | undefined>;
     requestedAt: import("../../internal-agents/schema.js").Schema<Date>;
     expiresAt: import("../../internal-agents/schema.js").Schema<Date | undefined>;
-    status: import("../../internal-agents/schema.js").Schema<"expired" | "rejected" | "pending" | "approved">;
+    status: import("../../internal-agents/schema.js").Schema<"rejected" | "expired" | "pending" | "approved">;
     decidedBy: import("../../internal-agents/schema.js").Schema<string | undefined>;
     decidedAt: import("../../internal-agents/schema.js").Schema<Date | undefined>;
     comment: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -192,7 +192,7 @@ export declare const CheckpointSchema: import("../../internal-agents/schema.js")
         completedAt: import("../../internal-agents/schema.js").Schema<Date | undefined>;
     }>>>;
 }>>;
-export declare const ApprovalStatusSchema: import("../../internal-agents/schema.js").Schema<"expired" | "rejected" | "pending" | "approved">;
+export declare const ApprovalStatusSchema: import("../../internal-agents/schema.js").Schema<"rejected" | "expired" | "pending" | "approved">;
 export declare const PendingApprovalSchema: import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
     id: import("../../internal-agents/schema.js").Schema<string>;
     nodeId: import("../../internal-agents/schema.js").Schema<string>;
@@ -201,7 +201,7 @@ export declare const PendingApprovalSchema: import("../../internal-agents/schema
     approvers: import("../../internal-agents/schema.js").Schema<string[] | undefined>;
     requestedAt: import("../../internal-agents/schema.js").Schema<Date>;
     expiresAt: import("../../internal-agents/schema.js").Schema<Date | undefined>;
-    status: import("../../internal-agents/schema.js").Schema<"expired" | "rejected" | "pending" | "approved">;
+    status: import("../../internal-agents/schema.js").Schema<"rejected" | "expired" | "pending" | "approved">;
     decidedBy: import("../../internal-agents/schema.js").Schema<string | undefined>;
     decidedAt: import("../../internal-agents/schema.js").Schema<Date | undefined>;
     comment: import("../../internal-agents/schema.js").Schema<string | undefined>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.635",
+  "version": "0.1.637",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -358,6 +358,7 @@
     "mdast-util-to-string": "4.0.0",
     "react": "19.2.4",
     "react-dom": "19.2.4",
+    "redis": "5.11.0",
     "rehype-highlight": "7.0.2",
     "rehype-raw": "7.0.0",
     "rehype-sanitize": "6.0.0",