vigthoria-cli 1.8.8 → 1.8.10

package/dist/commands/chat.js

@@ -1773,13 +1773,16 @@ class ChatCommand {
                     spinner.stop();
                 }
                 this.logger.warn('Falling back to legacy CLI agent loop');
-                this.logger.debug(`V3 agent workflow unavailable: ${error.message}`);
+                this.logger.debug(`V3 agent workflow unavailable: ${(0, api_js_1.sanitizeUserFacingErrorText)(error.message || '')}`);
                 return false;
             }
             if (spinner) {
                 spinner.stop();
             }
-            const errorMessage = `Agent mode requires the V3 workflow and will not fall back to the legacy CLI loop. ${error.message}`;
+            const safeDetail = (0, api_js_1.sanitizeUserFacingErrorText)(error.message || '');
+            const errorMessage = safeDetail
+                ? `Agent mode is unavailable right now. ${safeDetail}`
+                : 'Agent mode is unavailable right now. Please retry shortly or run vigthoria login if the issue persists.';
             this.logger.error(errorMessage);
             this.messages.push({ role: 'assistant', content: errorMessage });
             if (this.jsonOutput) {

package/dist/utils/api.d.ts

@@ -186,6 +186,8 @@ export interface VigthoriUser {
         adminAccess: boolean;
     };
 }
+export declare function sanitizeUserFacingErrorText(input: string): string;
+export declare function describeUpstreamStatus(status: number): string;
 export declare class APIClient {
     private client;
     private modelRouterClient;

package/dist/utils/api.js

@@ -10,6 +10,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.APIClient = exports.CLIError = void 0;
 exports.classifyError = classifyError;
 exports.formatCLIError = formatCLIError;
+exports.sanitizeUserFacingErrorText = sanitizeUserFacingErrorText;
+exports.describeUpstreamStatus = describeUpstreamStatus;
 const axios_1 = __importDefault(require("axios"));
 const crypto_1 = require("crypto");
 const fs_1 = __importDefault(require("fs"));
@@ -116,6 +118,43 @@ const DEFAULT_OPERATOR_TIMEOUT_MS = (() => {
     const parsed = Number.parseInt(rawValue, 10);
     return Number.isFinite(parsed) && parsed >= 0 ? parsed : 0;
 })();
+// Sanitize an upstream error string before exposing it to the end user.
+// Strips URLs, IPs:ports, absolute server paths, and bare hostnames so the
+// CLI never reveals internal infrastructure to remote users.
+function sanitizeUserFacingErrorText(input) {
+    if (!input)
+        return '';
+    let out = String(input);
+    out = out.replace(/https?:\/\/[^\s'"<>)]+/gi, '[redacted-url]');
+    out = out.replace(/\b\d{1,3}(?:\.\d{1,3}){3}(?::\d+)?\b/g, '[redacted-host]');
+    out = out.replace(/\b(?:localhost|127\.0\.0\.1)(?::\d+)?\b/gi, '[redacted-host]');
+    out = out.replace(/\b[a-z0-9.-]+\.vigthoria\.io\b/gi, '[redacted-host]');
+    out = out.replace(/(?:[A-Za-z]:)?[\\/](?:var|opt|tmp|home|root|etc|usr)[\\/][^\s'"<>)]*/gi, '[redacted-path]');
+    // Windows drive-letter paths (e.g. C:\Users\Name\AppData\...).
+    out = out.replace(/[A-Za-z]:\\[^\s'"<>)]+/g, '[redacted-path]');
+    // UNC paths (\\server\share\...).
+    out = out.replace(/\\\\[^\s'"<>)]+/g, '[redacted-path]');
+    out = out.replace(/\{\s*"detail"\s*:\s*"[^"]*"\s*\}/g, '');
+    out = out.replace(/\s+/g, ' ').trim();
+    if (out.length > 160)
+        out = out.slice(0, 160) + '...';
+    return out;
+}
+function describeUpstreamStatus(status) {
+    if (status === 401 || status === 403)
+        return 'Authentication failed. Please run vigthoria login.';
+    if (status === 404)
+        return 'Requested service endpoint was not found.';
+    if (status === 408 || status === 504)
+        return 'Upstream service timed out.';
+    if (status === 429)
+        return 'Rate limit reached. Please retry shortly.';
+    if (status >= 500)
+        return 'Upstream service is temporarily unavailable.';
+    if (status >= 400)
+        return 'Request was rejected by the service.';
+    return 'Unexpected response from service.';
+}
 class APIClient {
     client;
     modelRouterClient;
@@ -805,7 +844,7 @@ class APIClient {
                 });
                 if (!response.ok) {
                     const errorText = await response.text().catch(() => '');
-                    throw new Error(`Template preview proof ${response.status}: ${errorText.slice(0, 200)}`);
+                    throw new Error(`Template preview proof ${response.status}: ${describeUpstreamStatus(response.status)}`);
                 }
                 const payload = await response.json();
                 const modes = payload?.modes || {};
@@ -1746,7 +1785,7 @@ menu {
             });
             if (!response.ok) {
                 const errorText = await response.text().catch(() => '');
-                throw new Error(`MCP context update ${response.status}: ${errorText.slice(0, 200)}`);
+                throw new Error(`MCP context update ${response.status}: ${describeUpstreamStatus(response.status)}`);
             }
             return {
                 ...executionContext,
@@ -1777,7 +1816,7 @@ menu {
                 });
                 if (!createResponse.ok) {
                     const errorText = await createResponse.text().catch(() => '');
-                    throw new Error(`MCP context create ${createResponse.status}: ${errorText.slice(0, 200)}`);
+                    throw new Error(`MCP context create ${createResponse.status}: ${describeUpstreamStatus(createResponse.status)}`);
                 }
                 const payload = await createResponse.json();
                 const mcpContextId = String(payload.contextId || '').trim();
@@ -2723,7 +2762,7 @@ document.addEventListener('DOMContentLoaded', () => {
                             partial: true,
                         };
                     }
-                    throw new Error(event.message || 'V3 agent returned an error');
+                    throw new Error(`V3 agent: ${sanitizeUserFacingErrorText(event.message || '') || 'returned an error'}`);
                 }
                 if (event.type === 'complete' || event.type === 'message') {
                     final = event;
@@ -2786,7 +2825,7 @@ document.addEventListener('DOMContentLoaded', () => {
                     const response = await this.executeV3AgentRunRequest(baseUrl, requestBody, requestExecutionContext, controller.signal);
                     if (!response.ok) {
                         const errorText = await response.text().catch(() => '');
-                        throw new Error(`V3 agent ${response.status}: ${errorText.slice(0, 200)}`);
+                        throw new Error(`V3 agent ${response.status}: ${describeUpstreamStatus(response.status)}`);
                     }
                     const data = await this.collectV3AgentStream(response, requestExecutionContext);
                     // Auto-continuation: if the agent checkpointed (budget exceeded), continue automatically
@@ -3013,7 +3052,7 @@ document.addEventListener('DOMContentLoaded', () => {
                 });
                 if (!response.ok) {
                     const errorText = await response.text().catch(() => '');
-                    throw new Error(`Operator stream ${response.status}: ${errorText.slice(0, 200)}`);
+                    throw new Error(`Operator stream ${response.status}: ${describeUpstreamStatus(response.status)}`);
                 }
                 if (!response.body || typeof response.body.getReader !== 'function') {
                     const fallbackData = await response.json();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigthoria-cli",
-  "version": "1.8.8",
+  "version": "1.8.10",
   "description": "Vigthoria Coder CLI - AI-powered terminal coding assistant",
   "main": "dist/index.js",
   "files": [