a00485cf13
Server-side (primary): Apply redact.Text/InputMap on task message content, output, and input fields before DB persistence and WebSocket broadcast. Extended redact package with GitLab tokens, JWTs, connection strings, and PASSWORD/SECRET/TOKEN env var patterns. Frontend (fallback): redactSecrets utility mirrors server patterns, applied in buildTimeline and ToolCallRow render as a safety net. |
||
|---|---|---|
| .. | ||
| auth | ||
| cli | ||
| daemon | ||
| events | ||
| handler | ||
| logger | ||
| middleware | ||
| realtime | ||
| service | ||
| util | ||