admin-valentin/agent-ecosystem
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(runtime): sanitize provider error output

Browse source
This commit is contained in:
777genius 2026-05-22 21:01:36 +03:00
parent 0e8ccf2905
commit eb99baee23
2 changed files with 11 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/features/runtime-provider-management/main/adapters/input/registerRuntimeProviderManagementIpc.ts
View file

@ -57,11 +57,11 @@ function sanitizeRuntimeProviderIpcErrorMessage(message: string): string {
.replace(/\b(or-[A-Za-z0-9_-]{12,})\b/g, 'or-...redacted') .replace(/\b(or-[A-Za-z0-9_-]{12,})\b/g, 'or-...redacted')
.replace(/\b(AIza[A-Za-z0-9_-]{20,})\b/g, 'AIza...redacted') .replace(/\b(AIza[A-Za-z0-9_-]{20,})\b/g, 'AIza...redacted')
.replace( .replace(
/\b([A-Za-z0-9_.-]*(?:api[_-]?key|access[_-]?token|auth[_-]?token|token|secret|password|[_-]key)["'\s:=]+)([A-Za-z0-9._~+/=_-]{12,})/gi, /\b([a-z0-9_.-]*(?:api[-_]?key|(?:access|auth)[-_]?token|token|secret|password|[-_]key)["'\s:=]+)([a-z0-9._~+/=-]{12,})/gi,
'$1...redacted' '$1...redacted'
) )
.replace(/\b(key["'\s:=]+)([A-Za-z0-9._~+/=_-]{12,})/gi, '$1...redacted') .replace(/\b(key["'\s:=]+)([a-z0-9._~+/=-]{12,})/gi, '$1...redacted')
.replace(/\b(bearer\s+)([A-Za-z0-9._~+/=_-]{12,})/gi, '$1...redacted') .replace(/\b(bearer\s+)([a-z0-9._~+/=-]{12,})/gi, '$1...redacted')
.trim(); .trim();
return truncateRuntimeProviderIpcErrorDetail(sanitized); return truncateRuntimeProviderIpcErrorDetail(sanitized);
} }

15
src/features/runtime-provider-management/main/infrastructure/AgentTeamsRuntimeProviderManagementCliClient.ts
View file

@ -118,18 +118,19 @@ function sanitizeRuntimeProviderResponse<T extends RuntimeProviderManagementErro
response: T response: T
): T { ): T {
const sanitizedResponse = sanitizeRuntimeProviderOutputValue(response) as T; const sanitizedResponse = sanitizeRuntimeProviderOutputValue(response) as T;
if (sanitizedResponse.error === null) { const sanitizedError = (sanitizedResponse as { error?: unknown }).error;
if (sanitizedError === null) {
const responseWithoutNullError = { ...sanitizedResponse }; const responseWithoutNullError = { ...sanitizedResponse };
delete (responseWithoutNullError as { error?: unknown }).error; delete (responseWithoutNullError as { error?: unknown }).error;
return responseWithoutNullError as T; return responseWithoutNullError;
} }
if (!sanitizedResponse.error) { if (!sanitizedError) {
return sanitizedResponse; return sanitizedResponse;
} }
return { return {
...sanitizedResponse, ...sanitizedResponse,
error: sanitizeRuntimeProviderError(sanitizedResponse.error), error: sanitizeRuntimeProviderError(sanitizedError),
}; };
} }
@ -409,11 +410,11 @@ function redactSensitiveText(value: string): string {
.replace(/\b(or-[A-Za-z0-9_-]{12,})\b/g, 'or-...redacted') .replace(/\b(or-[A-Za-z0-9_-]{12,})\b/g, 'or-...redacted')
.replace(/\b(AIza[A-Za-z0-9_-]{20,})\b/g, 'AIza...redacted') .replace(/\b(AIza[A-Za-z0-9_-]{20,})\b/g, 'AIza...redacted')
.replace( .replace(
/\b([A-Za-z0-9_.-]*(?:api[_-]?key|access[_-]?token|auth[_-]?token|token|secret|password|[_-]key)["'\s:=]+)([A-Za-z0-9._~+/=_-]{12,})/gi, /\b([a-z0-9_.-]*(?:api[-_]?key|(?:access|auth)[-_]?token|token|secret|password|[-_]key)["'\s:=]+)([a-z0-9._~+/=-]{12,})/gi,
'$1...redacted' '$1...redacted'
) )
.replace(/\b(key["'\s:=]+)([A-Za-z0-9._~+/=_-]{12,})/gi, '$1...redacted') .replace(/\b(key["'\s:=]+)([a-z0-9._~+/=-]{12,})/gi, '$1...redacted')
.replace(/\b(bearer\s+)([A-Za-z0-9._~+/=_-]{12,})/gi, '$1...redacted'); .replace(/\b(bearer\s+)([a-z0-9._~+/=-]{12,})/gi, '$1...redacted');
} }
function formatCommandForDisplay(context: RuntimeProviderCommandContext): string { function formatCommandForDisplay(context: RuntimeProviderCommandContext): string {