fix: security audit — plugin RCE, CORS, token leak, shell exec, login rate limit - #1106

#!/bin/bash
set -euo pipefail

echo "== file outline =="
ast-grep outline server/modules/projects/services/project-clone.service.ts --match CreateStreamingRedactor --view expanded || true

echo
echo "== relevant source lines =="
sed -n '50,150p' server/modules/projects/services/project-clone.service.ts

echo
echo "== tests around redactor =="
sed -n '1,260p' server/modules/projects/tests/project-clone.service.test.ts

echo
echo "== focused search for createStreamingRedactor and sanitizeGitError =="
rg -n "createStreamingRedactor|sanitizeGitError|maxPrefix|token" server/modules/projects/services/project-clone.service.ts server/modules/projects/tests/project-clone.service.test.ts

#!/bin/bash
set -euo pipefail

python3 - <<'PY'
def createStreamingRedactor(token: str):
    if not token:
        def feed(chunk: str) -> str:
            return chunk
        def flush() -> str:
            return ''
        return feed, flush

    max_prefix = len(token) - 1
    buffer = ''

    def feed(chunk: str) -> str:
        nonlocal buffer
        if not chunk:
            return ''
        buffer += chunk
        if len(buffer) <= max_prefix:
            return ''
        safe_end = len(buffer) - max_prefix
        safe_slice = buffer[:safe_end]
        buffer = buffer[safe_end:]
        return sanitizeGitError(safe_slice, token)

    def flush() -> str:
        nonlocal buffer
        if not buffer:
            return ''
        remainder = buffer
        buffer = ''
        return sanitizeGitError(remainder, token)

    return feed, flush

def sanitizeGitError(message: str, token: str | None) -> str:
    if not message or not token:
        return message
    import re
    escaped_token = re.sub(r'[.*+?^${}()|[\]\\]', lambda m: '\\' + m.group(0), token)
    return re.sub(escaped_token, '***', message)

token = 'ghp_abcdefghijklmnopqrstuvwxyz0123456789'  # length 40
feed, flush = createStreamingRedactor(token)

# Exact reproduction of the comment's boundary shape:
# a complete token ends such that token[1:] remains in buffer after feeding the prefix.
# buffer will be "token[0] token" after adding one char, emit token[0]
# suffix buffer becomes the complete token, then flushed.
events = ["Cloning into 'repo'...\n", "https://github.com/example/repo.git/token=", token[:-1], token[-1], "\n"]
output = []
for event in events:
    out = feed(event)
    if out:
        output.append(out)
flush += flush()
if flush:
    output.append(flush)
progress = ''.join(output)

print("token_length", len(token))
print("maxPrefix", len(token)-1)
print("events", events)
print("all_output_repr", repr(progress))
print("contains_full_token", token in progress)
print("contains_token_prefix", token[:5] in progress)
print("contains_token_suffix", token[-5:] in progress)

# Alternative edge case mentioned: complete token fully inside retained suffix; whole token never passes through feed sanitization.
feed, flush = createStreamingRedactor(token)
events = ["Cloning into 'repo'...\n", "remote: ", token, "\n"]
output = []
for event in events:
    out = feed(event)
    if out:
        output.append(out)
flush += flush()
if flush:
    output.append(flush)
progress = ''.join(output)
print()
print("edge_events", events)
print("edge_all_output_repr", repr(progress))
print("edge_contains_full_token", token in progress)
print("edge_contains_token_prefix", token[:5] in progress)
print("edge_contains_token_suffix", token[-5:] in progress)
PY

#!/bin/bash
set -euo pipefail

python3 <<'PY'
def sanitizeGitError(message, token):
    if not message or not token:
        return message
    import re
    escaped_token = re.sub(r'[.*+?^${}()|[\]\\]', lambda m: '\\' + m.group(0), token)
    return re.sub(escaped_token, '***', message)

def createStreamingRedactor(token):
    if not token:
        def feed(chunk):
            return chunk
        def flush():
            return ''
        return feed, flush

    max_prefix = len(token) - 1
    buffer = ''

    def feed(chunk):
        nonlocal buffer
        if not chunk:
            return ''
        buffer += chunk
        if len(buffer) <= max_prefix:
            return ''
        safe_end = len(buffer) - max_prefix
        safe_slice = buffer[:safe_end]
        buffer = buffer[safe_end:]
        return sanitizeGitError(safe_slice, token)

    def flush():
        nonlocal buffer
        if not buffer:
            return ''
        remainder = buffer
        buffer = ''
        return sanitizeGitError(remainder, token)

    return feed, flush

token = 'ghp_abcdefghijklmnopqrstuvwxyz0123456789'
feed, flush = createStreamingRedactor(token)

events = ["Cloning into 'repo'...\n", "https://github.com/example/repo.git/token=", token[:-1], token[-1], "\n"]
output = []
for event in events:
    out = feed(event)
    if out:
        output.append(out)
flush += flush()
if flush:
    output.append(flush)
progress = ''.join(output)

print("token_length", len(token))
print("maxPrefix", len(token)-1)
print("first_case_all_output_repr", repr(progress))
print("first_case_contains_full_token", token in progress)
print("first_case_contains_token_prefix", token[:5] in progress)
print("first_case_contains_token_suffix", token[-5:] in progress)

feed, flush = createStreamingRedactor(token)
events = ["Cloning into 'repo'...\n", "remote: ", token, "\n"]
output = []
for event in events:
    out = feed(event)
    if out:
        output.append(out)
flush += flush()
if flush:
    output.append(flush)
progress = ''.join(output)
print()
print("edge_events", events)
print("edge_all_output_repr", repr(progress))
print("edge_contains_full_token", token in progress)
print("edge_contains_token_prefix", token[:5] in progress)
print("edge_contains_token_suffix", token[-5:] in progress)
PY

#!/bin/bash
set -euo pipefail

python3 <<'PY'
def sanitizeGitError(message, token):
    if not message or not token:
        return message
    import re
    escaped_token = re.sub(r'[.*+?^${}()|[\]\\]', lambda m: '\\' + m.group(0), token)
    return re.sub(escaped_token, '***', message)

def createStreamingRedactor(token):
    if not token:
        def feed(chunk):
            return chunk
        def flush():
            return ''
        return feed, flush

    max_prefix = len(token) - 1
    buffer = ''

    def feed(chunk):
        nonlocal buffer
        if not chunk:
            return ''
        buffer += chunk
        if len(buffer) <= max_prefix:
            return ''
        safe_end = len(buffer) - max_prefix
        safe_slice = buffer[:safe_end]
        buffer = buffer[safe_end:]
        return sanitizeGitError(safe_slice, token)

    def flush():
        nonlocal buffer
        if not buffer:
            return ''
        remainder = buffer
        buffer = ''
        return sanitizeGitError(remainder, token)

    return feed, flush

token = 'ghp_abcdefghijklmnopqrstuvwxyz0123456789'
feed, flush = createStreamingRedactor(token)

events = ["Cloning into 'repo'...\n", "https://github.com/example/repo.git/token=", token[:-1], token[-1], "\n"]
output = []
for event in events:
    out = feed(event)
    if out:
        output.append(out)
flush += flush()
if flush:
    output.append(flush)
progress = ''.join(output)

print("token_length", len(token))
print("maxPrefix", len(token)-1)
print("first_case_all_output_repr", repr(progress))
print("first_case_contains_full_token", token in progress)
print("first_case_contains_token_prefix", token[:5] in progress)
print("first_case_contains_token_suffix", token[-5:] in progress)

feed, flush = createStreamingRedactor(token)
events = ["Cloning into 'repo'...\n", "remote: ", token, "\n"]
output = []
for event in events:
    out = feed(event)
    if out:
        output.append(out)
flush += flush()
if flush:
    output.append(flush)
progress = ''.join(output)
print()
print("edge_events", events)
print("edge_all_output_repr", repr(progress))
print("edge_contains_full_token", token in progress)
print("edge_contains_token_prefix", token[:5] in progress)
print("edge_contains_token_suffix", token[-5:] in progress)
PY

#!/bin/bash
set -euo pipefail

python3 <<'PY'
__import__('warning').filterwarnings("ignore", category=SyntaxWarning)

def sanitizeGitError(message, token):
    if not message or not token:
        return message
    import re
    escaped_token = re.sub(r'[.*+?^${}()|[\]\\]', lambda m: '\\' + m.group(0), token)
    return re.sub(escaped_token, '***', message)

def createStreamingRedactor(token):
    if not token:
        def feed(chunk):
            return chunk
        def flush():
            return ''
        return feed, flush

    max_prefix = len(token) - 1
    buffer = ''

    def feed(chunk):
        nonlocal buffer
        if not chunk:
            return ''
        buffer += chunk
        if len(buffer) <= max_prefix:
            return ''
        safe_end = len(buffer) - max_prefix
        safe_slice = buffer[:safe_end]
        buffer = buffer[safe_end:]
        return sanitizeGitError(safe_slice, token)

    def flush():
        nonlocal buffer
        if not buffer:
            return ''
        remainder = buffer
        buffer = ''
        return sanitizeGitError(remainder, token)

    return feed, flush

token = 'ghp_abcdefghijklmnopqrstuvwxyz0123456789'
feed_func, flush_func = createStreamingRedactor(token)

events = ["Cloning into 'repo'...\n", "https://github.com/example/repo.git/token=", token[:-1], token[-1], "\n"]
output = []
for event in events:
    out = feed_func(event)
    if out:
        output.append(out)
flush_out = flush_func()
if flush_out:
    output.append(flush_out)
progress = ''.join(output)

print("token_length", len(token))
print("maxPrefix", len(token)-1)
print("first_case_all_output_repr", repr(progress))
print("first_case_contains_full_token", token in progress)
print("first_case_contains_token_prefix", token[:5] in progress)
print("first_case_contains_token_suffix", token[-5:] in progress)

feed_func, flush_func = createStreamingRedactor(token)
events = ["Cloning into 'repo'...\n", "remote: ", token, "\n"]
output = []
for event in events:
    out = feed_func(event)
    if out:
        output.append(out)
flush_out = flush_func()
if flush_out:
    output.append(flush_out)
progress = ''.join(output)
print()
print("edge_events", events)
print("edge_all_output_repr", repr(progress))
print("edge_contains_full_token", token in progress)
print("edge_contains_token_prefix", token[:5] in progress)
print("edge_contains_token_suffix", token[-5:] in progress)
PY

#!/bin/bash
set -euo pipefail

python3 <<'PY'
import warnings
warnings.filterwarnings("ignore", category=SyntaxWarning)

def sanitizeGitError(message, token):
    if not message or not token:
        return message
    import re
    escaped_token = re.sub(r'[.*+?^${}()|[\]\\]', lambda m: '\\' + m.group(0), token)
    return re.sub(escaped_token, '***', message)

def createStreamingRedactor(token):
    if not token:
        def feed(chunk):
            return chunk
        def flush():
            return ''
        return feed, flush

    max_prefix = len(token) - 1
    buffer = ''

    def feed(chunk):
        nonlocal buffer
        if not chunk:
            return ''
        buffer += chunk
        if len(buffer) <= max_prefix:
            return ''
        safe_end = len(buffer) - max_prefix
        safe_slice = buffer[:safe_end]
        buffer = buffer[safe_end:]
        return sanitizeGitError(safe_slice, token)

    def flush():
        nonlocal buffer
        if not buffer:
            return ''
        remainder = buffer
        buffer = ''
        return sanitizeGitError(remainder, token)

    return feed, flush

token = 'ghp_abcdefghijklmnopqrstuvwxyz0123456789'
feed_func, flush_func = createStreamingRedactor(token)

events = ["Cloning into 'repo'...\n", "https://github.com/example/repo.git/token=", token[:-1], token[-1], "\n"]
output = []
for event in events:
    out = feed_func(event)
    if out:
        output.append(out)
flush_out = flush_func()
if flush_out:
    output.append(flush_out)
progress = ''.join(output)

print("token_length", len(token))
print("maxPrefix", len(token)-1)
print("first_case_all_output_repr", repr(progress))
print("first_case_contains_full_token", token in progress)
print("first_case_contains_token_prefix", token[:5] in progress)
print("first_case_contains_token_suffix", token[-5:] in progress)

feed_func, flush_func = createStreamingRedactor(token)
events = ["Cloning into 'repo'...\n", "remote: ", token, "\n"]
output = []
for event in events:
    out = feed_func(event)
    if out:
        output.append(out)
flush_out = flush_func()
if flush_out:
    output.append(flush_out)
progress = ''.join(output)
print()
print("edge_events", events)
print("edge_all_output_repr", repr(progress))
print("edge_contains_full_token", token in progress)
print("edge_contains_token_prefix", token[:5] in progress)
print("edge_contains_token_suffix", token[-5:] in progress)
PY

#!/bin/bash
set -euo pipefail

echo "== module guidelines =="
if [ -f .agents/skills/backend-module-standards/SKILL.md ]; then
  wc -l .agents/skills/backend-module-standards/SKILL.md
  sed -n '1,220p' .agents/skills/backend-module-standards/SKILL.md
else
  echo "missing"
fi

echo "== relevant service sections =="
wc -l server/modules/projects/services/project-clone.service.ts
sed -n '260,380p' server/modules/projects/services/project-clone.service.ts
sed -n '130,170p' server/modules/projects/services/project-clone.service.ts

echo "== tests around clone failure/redactor tokens =="
wc -l server/modules/projects/tests/project-clone.service.test.ts
rg -n "stderr|lastError|sanitizeGitError|resolveCloneFailureMessage|clone.*fail|token|redact|streaming" server/modules/projects/tests/project-clone.service.test.ts server/modules/projects/services/project-clone.service.ts
sed -n '1,260p' server/modules/projects/tests/project-clone.service.test.ts