fix(security): redact command artifact arguments

Author: CompleteDotTech

src/adapter.ts

@@ -4520,12 +4520,14 @@ function codexTokenCandidates(config: AdapterConfig): string[] {
   return candidates;
 }
 
-function redactedCommandResult(result: CommandResult): JsonObject {
+export function redactedCommandResult(result: CommandResult): JsonObject {
   const diagnostic = runtimeDiagnostic(result);
   return {
     ...result,
+    args: result.args.map((arg) => redactTokenish(arg)),
     stdout: redactTokenish(result.stdout),
     stderr: redactTokenish(result.stderr),
+    spawn_error: redactTokenish(result.spawn_error),
     ...(diagnostic ? {runtime_diagnostic: diagnostic} : {}),
   };
 }
@@ -4582,14 +4584,14 @@ export function redactTokenish(text: string): string {
   }
   return text
     .replace(/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g, "[redacted private key]")
+    .replace(/(https?:\/\/)[^/\s:@]+:[^@\s/]+@/gi, "$1[redacted]@")
+    .replace(/x-access-token:[^@\s'\"]+/gi, "x-access-token:[redacted]")
     .replace(/\b(?:gh[pousr]_|github_pat_)[A-Za-z0-9_-]{6,}/g, "[redacted github token]")
     .replace(/\bsk-(?:proj-)?[A-Za-z0-9_-]{8,}/g, "[redacted OpenAI token]")
     .replace(/\bBearer\s+[^\s'\"]+/gi, "Bearer [redacted]")
     .replace(/\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi, "[redacted email]")
     .replace(/\bon account\s+`?[^`\n.]+`?/gi, "on the configured account")
-    .replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g, "[redacted JWT]")
-    .replace(/x-access-token:[^@\s'\"]+/gi, "x-access-token:[redacted]")
-    .replace(/(https?:\/\/)[^/\s:@]+:[^@\s/]+@/gi, "$1[redacted]@");
+    .replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g, "[redacted JWT]");
 }
 
 function failTask(path: string, task: JsonObject, reason: string, detail: string): JsonObject {

tests/webhook-adapter.test.ts

@@ -27,6 +27,7 @@ import {
   publishResultIfConfigured,
   readBoundedRuntimeResult,
   recoverPendingPublications,
+  redactedCommandResult,
   redactTokenish,
   reviewContextInstallationTokenRequest,
   resumeTaskPublication,
@@ -3261,6 +3262,21 @@ test("redacts credentials and passes only allowlisted ambient environment keys",
   ].join("\n");
   const redacted = redactTokenish(secretText);
   assert.doesNotMatch(redacted, /1234567890|topsecret|password|private-data|eyJabc|reviewer@example\.com|reviewer \(/);
+  const artifact = redactedCommandResult({
+    args: ["git", "-c", "user.email=reviewer@example.com", "https://x-access-token:ghs_1234567890@github.com/OpenCoven/example.git"],
+    returncode: 1,
+    stdout: "Bearer topsecret",
+    stderr: "reviewer@example.com",
+    signal: null,
+    timed_out: false,
+    duration_ms: 1,
+    stdout_truncated: false,
+    stderr_truncated: false,
+    output_limit_bytes: 1024,
+    spawn_error: "failed for reviewer@example.com",
+  });
+  assert.doesNotMatch(JSON.stringify(artifact), /1234567890|topsecret|reviewer@example\.com/);
+  assert.deepEqual(artifact.args, ["git", "-c", "user.email=[redacted email]", "https://[redacted]@github.com/OpenCoven/example.git"]);
   const env = sanitizedRuntimeEnvironment({
     PATH: "/bin", LANG: "C.UTF-8", SSH_AUTH_SOCK: "/tmp/agent.sock",
     DATABASE_URL: "postgres://user:pass@db", AWS_ACCESS_KEY_ID: "AKIASECRET",