openclaw/dist/exec-approval-command-display-BYD_3EWn.js

Multi-channel AI gateway with extensible messaging integrations

import { c as redactSensitiveText, f as resolveRedactOptions, t as computeSensitiveRedactionBitmap } from "./redact-DduLliKq.js";
//#region src/infra/exec-approval-command-display.ts
const EXEC_APPROVAL_INVISIBLE_CHAR_REGEX = /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}\u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\u115F\u1160\u3164\uFFA0]/gu;
const EXEC_APPROVAL_INVISIBLE_CHAR_SINGLE = /^[\p{Cc}\p{Cf}\p{Zl}\p{Zp}\u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\u115F\u1160\u3164\uFFA0]$/u;
const EXEC_APPROVAL_MAX_INPUT = 256 * 1024;
const EXEC_APPROVAL_MAX_OUTPUT = 16 * 1024;
const EXEC_APPROVAL_TRUNCATION_MARKER = "…[truncated]";
const EXEC_APPROVAL_OVERSIZED_MARKER = "[exec approval command exceeds display size limit; full text suppressed]";
const EXEC_APPROVAL_WARNING_OVERSIZED_MARKER = "[exec approval warning exceeds display size limit; full text suppressed]";
const BYPASS_MASK = "***";
function formatCodePointEscape(char) {
	return `\\u{${char.codePointAt(0)?.toString(16).toUpperCase() ?? "FFFD"}}`;
}
function normalizeDisplayLineBreaks(text) {
	return text.replace(/\r\n?/g, "\n").replace(/[\u2028\u2029]/g, "\n");
}
function escapeInvisibles(text, options) {
	return text.replace(EXEC_APPROVAL_INVISIBLE_CHAR_REGEX, (char) => options?.preserveLineBreaks && char === "\n" ? "\n" : formatCodePointEscape(char));
}
function truncateForDisplay(text) {
	if (text.length <= EXEC_APPROVAL_MAX_OUTPUT) return {
		text,
		truncated: false,
		oversized: false
	};
	return {
		text: text.slice(0, EXEC_APPROVAL_MAX_OUTPUT) + EXEC_APPROVAL_TRUNCATION_MARKER,
		truncated: true,
		oversized: false
	};
}
function buildStrippedView(original) {
	const strippedChars = [];
	const strippedToOrig = [];
	let offset = 0;
	for (const cp of original) {
		if (!EXEC_APPROVAL_INVISIBLE_CHAR_SINGLE.test(cp)) {
			strippedChars.push(cp);
			for (let k = 0; k < cp.length; k++) strippedToOrig.push(offset + k);
		}
		offset += cp.length;
	}
	return {
		stripped: strippedChars.join(""),
		strippedToOrig
	};
}
function sanitizeExecApprovalDisplayTextInternal(commandText, options) {
	if (commandText.length > EXEC_APPROVAL_MAX_INPUT) return {
		text: options?.oversizedMarker ?? EXEC_APPROVAL_OVERSIZED_MARKER,
		truncated: false,
		oversized: true
	};
	const rawRedacted = redactSensitiveText(commandText, { mode: "tools" });
	const { stripped, strippedToOrig } = buildStrippedView(commandText);
	if (redactSensitiveText(stripped, { mode: "tools" }) === stripped) return truncateForDisplay(escapeInvisibles(rawRedacted, options));
	const redaction = resolveRedactOptions({ mode: "tools" });
	const rawMask = computeSensitiveRedactionBitmap(commandText, redaction);
	const strippedMask = computeSensitiveRedactionBitmap(stripped, redaction);
	let bypassDetected = false;
	for (let i = 0; i < strippedMask.length; i++) if (strippedMask[i] && !rawMask[strippedToOrig[i]]) {
		bypassDetected = true;
		break;
	}
	if (!bypassDetected) return truncateForDisplay(escapeInvisibles(rawRedacted, options));
	const unionMask = rawMask.slice();
	for (let i = 0; i < strippedMask.length; i++) if (strippedMask[i]) unionMask[strippedToOrig[i]] = true;
	let out = "";
	let i = 0;
	while (i < commandText.length) {
		if (unionMask[i]) {
			let j = i;
			while (j < commandText.length && unionMask[j]) j++;
			out += BYPASS_MASK;
			i = j;
			continue;
		}
		const codePoint = commandText.codePointAt(i) ?? 65533;
		const cp = String.fromCodePoint(codePoint);
		out += options?.preserveLineBreaks && cp === "\n" ? cp : EXEC_APPROVAL_INVISIBLE_CHAR_SINGLE.test(cp) ? formatCodePointEscape(cp) : cp;
		i += cp.length;
	}
	return truncateForDisplay(out);
}
/** Sanitizes exec command text for approval UI without exposing status metadata. */
function sanitizeExecApprovalDisplayText(commandText) {
	return sanitizeExecApprovalDisplayTextInternal(commandText).text;
}
/**
* Sanitizes exec command text for approval UI and reports whether size caps changed it.
*/
function sanitizeExecApprovalDisplayTextWithStatus(commandText) {
	return sanitizeExecApprovalDisplayTextInternal(commandText);
}
/**
* Sanitizes warning prose for approval UI while preserving real line boundaries.
*/
function sanitizeExecApprovalWarningText(warningText) {
	return sanitizeExecApprovalDisplayTextInternal(normalizeDisplayLineBreaks(warningText), {
		preserveLineBreaks: true,
		oversizedMarker: EXEC_APPROVAL_WARNING_OVERSIZED_MARKER
	}).text;
}
function normalizePreview(commandText, commandPreview) {
	const previewRaw = commandPreview?.trim() ?? "";
	if (!previewRaw) return null;
	const preview = sanitizeExecApprovalDisplayText(previewRaw);
	if (preview === commandText) return null;
	return preview;
}
/** Resolves sanitized command and preview text for exec approval prompts. */
function resolveExecApprovalCommandDisplay(request) {
	const commandText = sanitizeExecApprovalDisplayText(request.command || (request.host === "node" && request.systemRunPlan ? request.systemRunPlan.commandText : ""));
	return {
		commandText,
		commandPreview: normalizePreview(commandText, request.commandPreview ?? (request.host === "node" ? request.systemRunPlan?.commandPreview ?? null : null))
	};
}
//#endregion
export { sanitizeExecApprovalWarningText as i, sanitizeExecApprovalDisplayText as n, sanitizeExecApprovalDisplayTextWithStatus as r, resolveExecApprovalCommandDisplay as t };