ZacharyZhang-NY
e94939a562
Replaces legacy adapter ids (codex_local / claude_local / gemini_local / claude_compatible) across ~42 test files with pi-mono equivalents: - codex_local → openai-codex - claude_local → claude-pro - gemini_local → gemini-cli - claude_compatible → anthropic Hand-rewrites where fixture semantics changed: - connector-matching: TASK_TYPE_PREFERENCE ordering rebased (claude-pro first for code/content/management; google first for research) - connector-model-policy: getModels(provider) from pi-ai instead of the deleted adapter.module.models array - session-management + edge-case-session: adapter exemption removed; rotation now uniform under pi-mono - ipc-core-admin-handlers: CSV compat model replaced with pi-ai anthropic - connectors.spec: lookup by openai-codex id (catalog now starts with claude-pro) - onboarding-model-pool: listProviderModels(provider) helper; label text changed to "ChatGPT Plus/Pro (Codex)" - database integration: added vault insecure-fallback env + electron mock - command-paths: uses new @main/connector-helpers normalizeCommandValue - pi-mono-migrations: added `as string` casts for 3 negative-existence assertions verifying legacy ids were removed Drops: - pnpm-workspace.yaml packages: [] (was "packages/*"; directory empty) - obsolete CONNECTOR_STRENGTHS import; .module.models probing Verification: - pnpm typecheck → 0 errors - pnpm lint → 0 errors / 0 warnings - pnpm build:verify → 0 errors / 0 warnings - pnpm test:unit → 508/508 pass - pnpm test:integration → 96/96 pass - All 6 adapter hard gates pass (NOT FOUND / 0 matches / empty) - pi-ai / pi-agent-core / pi-coding-agent all resolved @0.67.6
62 lines
2.5 KiB
TypeScript
62 lines
2.5 KiB
TypeScript
import { describe, expect, it } from "vitest";
|
|
import { redactTokens } from "../../src/main/worker/log-redactor";
|
|
|
|
/** Verifies the worker process token redactor strips known
|
|
* credential-shaped substrings from log strings before they leave the
|
|
* worker process. */
|
|
describe("worker log redactor", () => {
|
|
it("redacts Bearer tokens", () => {
|
|
const input = "Authorization: Bearer abc.def.ghi-jkl_mnop";
|
|
expect(redactTokens(input)).toBe("Authorization: Bearer [REDACTED]");
|
|
});
|
|
|
|
it("redacts authorization header values regardless of case", () => {
|
|
expect(redactTokens("authorization=secret-value-1234567890")).toContain("[REDACTED]");
|
|
expect(redactTokens("Authorization: secret-value-1234567890")).toContain("[REDACTED]");
|
|
});
|
|
|
|
it("redacts access_token query strings", () => {
|
|
expect(redactTokens("https://api.example.com/?access_token=abc123xyz&foo=1")).toBe(
|
|
"https://api.example.com/?access_token=[REDACTED]&foo=1",
|
|
);
|
|
});
|
|
|
|
it("redacts refresh_token values", () => {
|
|
expect(redactTokens("refresh_token=long.refresh.tok&grant_type=refresh_token")).toContain(
|
|
"refresh_token=[REDACTED]",
|
|
);
|
|
});
|
|
|
|
it("redacts api_key key/value pairs", () => {
|
|
const input = "config { api_key: \"sk-test-1234567890abcdef\", model: \"gpt-4o\" }";
|
|
const result = redactTokens(input);
|
|
expect(result).not.toContain("sk-test-1234567890abcdef");
|
|
expect(result).toContain("[REDACTED]");
|
|
});
|
|
|
|
it("redacts sk- and sk-ant- prefixed keys anywhere in a string", () => {
|
|
expect(redactTokens("error using sk-ant-api03_abcdefghijklmnop, retrying")).toContain("sk-[REDACTED]");
|
|
expect(redactTokens("token=sk-test1234567890_abcd")).toContain("sk-[REDACTED]");
|
|
});
|
|
|
|
it("redacts GitHub personal access token shapes", () => {
|
|
expect(redactTokens("git push https://x:ghp_aaaaaaaaaaaaaaaaaa@github.com/foo")).toContain("ghp_[REDACTED]");
|
|
});
|
|
|
|
it("redacts AWS access key id prefixes", () => {
|
|
expect(redactTokens("aws cred AKIAIOSFODNN7EXAMPLE in trace")).toContain("AKIA[REDACTED]");
|
|
});
|
|
|
|
it("leaves credential-free strings unchanged", () => {
|
|
const safe = "Just a regular log line about model claude-opus-4-5 with usage 123 tokens.";
|
|
expect(redactTokens(safe)).toBe(safe);
|
|
});
|
|
|
|
it("redacts multiple matches in one string", () => {
|
|
const input = "Bearer abc.def.ghi.jkl Authorization=secretsecretsecret";
|
|
const result = redactTokens(input);
|
|
expect(result).not.toContain("abc.def.ghi.jkl");
|
|
expect(result).not.toContain("secretsecretsecret");
|
|
});
|
|
});
|