| const MAX_PROVIDER_ERROR_LENGTH = 240; |
| const REDACTIONS = [ |
| [/\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi, 'Bearer [redacted]'], |
| [/\b(api[_-]?key|access[_-]?token|token|secret|authorization)(\s*[:=]\s*)(["']?)[^"',\s}\]]+/gi, '$1$2$3[redacted]'], |
| [/\bsk-[A-Za-z0-9_-]{8,}\b/g, '[redacted-key]'], |
| [/\bgsk_[A-Za-z0-9_-]{8,}\b/g, '[redacted-key]'], |
| [/\bfreellmapi-[A-Za-z0-9_-]{8,}\b/g, '[redacted-key]'], |
| [/\bAIza[0-9A-Za-z_-]{20,}\b/g, '[redacted-key]'], |
| [/\b[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}\b/g, '[redacted-token]'], |
| [/\bhttps?:\/\/[^\s"'<>)]*/gi, '[redacted-url]'], |
| ]; |
| export function sanitizeProviderErrorMessage(message) { |
| let sanitized = typeof message === 'string' ? message : String(message ?? ''); |
| sanitized = sanitized.trim(); |
| if (!sanitized) |
| return 'Provider error'; |
| for (const [pattern, replacement] of REDACTIONS) { |
| sanitized = sanitized.replace(pattern, replacement); |
| } |
| sanitized = sanitized.replace(/\s+/g, ' ').trim(); |
| if (sanitized.length > MAX_PROVIDER_ERROR_LENGTH) { |
| sanitized = `${sanitized.slice(0, MAX_PROVIDER_ERROR_LENGTH - 3).trimEnd()}...`; |
| } |
| return sanitized; |
| } |
| |
