server/dist/lib/error-redaction.js

const MAX_PROVIDER_ERROR_LENGTH = 240;
const REDACTIONS = [
    [/\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi, 'Bearer [redacted]'],
    [/\b(api[_-]?key|access[_-]?token|token|secret|authorization)(\s*[:=]\s*)(["']?)[^"',\s}\]]+/gi, '$1$2$3[redacted]'],
    [/\bsk-[A-Za-z0-9_-]{8,}\b/g, '[redacted-key]'],
    [/\bgsk_[A-Za-z0-9_-]{8,}\b/g, '[redacted-key]'],
    [/\bfreellmapi-[A-Za-z0-9_-]{8,}\b/g, '[redacted-key]'],
    [/\bAIza[0-9A-Za-z_-]{20,}\b/g, '[redacted-key]'],
    [/\b[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}\b/g, '[redacted-token]'],
    [/\bhttps?:\/\/[^\s"'<>)]*/gi, '[redacted-url]'],
];
export function sanitizeProviderErrorMessage(message) {
    let sanitized = typeof message === 'string' ? message : String(message ?? '');
    sanitized = sanitized.trim();
    if (!sanitized)
        return 'Provider error';
    for (const [pattern, replacement] of REDACTIONS) {
        sanitized = sanitized.replace(pattern, replacement);
    }
    sanitized = sanitized.replace(/\s+/g, ' ').trim();
    if (sanitized.length > MAX_PROVIDER_ERROR_LENGTH) {
        sanitized = `${sanitized.slice(0, MAX_PROVIDER_ERROR_LENGTH - 3).trimEnd()}...`;
    }
    return sanitized;
}
//# sourceMappingURL=error-redaction.js.map