Skip to content

fix: align Node evt_/emk_ redaction with the Go CLI - #9

Open
AshSgDe29071999 wants to merge 1 commit into
EverMind-AI:mainfrom
AshSgDe29071999:fix/agent-sdk-redact-token-shape
Open

fix: align Node evt_/emk_ redaction with the Go CLI#9
AshSgDe29071999 wants to merge 1 commit into
EverMind-AI:mainfrom
AshSgDe29071999:fix/agent-sdk-redact-token-shape

Conversation

@AshSgDe29071999

Copy link
Copy Markdown

Problem

@everme/agent-sdk only masked evt_/emk_ tokens of exactly 32 alphanumeric characters. The Go CLI masks {20,} and allows _/-. Shorter, longer, or hyphenated tokens leaked into plugin logs and host LLM context.

Fixes #7.

Change

Use the same pattern as cli/internal/output/redact.go.

Test

node --test tests/client.test.js
# 7 pass

The SDK only masked exactly 32 alphanumeric chars, so shorter, longer,
or hyphenated tokens leaked into plugin logs and host LLM context.

Closes EverMind-AI#7
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix: Node agent-sdk redaction regex drift — non-32-char / non-alphanumeric evt_/emk_ tokens are not masked (potential credential leak)

1 participant