fix(evaluation): 阻止扩展配置泄露凭据

Author: guocfu

examples/optimization/eval_optimize_loop/artifact_writer.py

@@ -35,7 +35,25 @@
 ]
 
 _INPUT_COPY_DISABLED = "artifacts.copy_input_files=false"
-_SENSITIVE_CONFIG_KEYS = {"apikey", "authorization", "baseurl"}
+_SENSITIVE_CONFIG_KEYS = {
+    "accesstoken",
+    "apikey",
+    "auth",
+    "authorization",
+    "authtoken",
+    "baseurl",
+    "bearertoken",
+    "clientsecret",
+    "credential",
+    "credentials",
+    "password",
+    "passwd",
+    "privatekey",
+    "secret",
+    "secretkey",
+    "token",
+    "xapikey",
+}
 _APPROVED_SENSITIVE_VALUES = {
     "",
     "${TRPC_AGENT_API_KEY}",

tests/evaluation/test_eval_optimize_loop_stage5_artifacts.py

@@ -161,15 +161,21 @@ async def test_publish_rejects_input_hash_drift(tmp_path):
     assert list(run_dir.glob(".report.tmp-*")) == []
 
 
+@pytest.mark.parametrize(
+    "sensitive_key",
+    ["api_key", "access_token", "client_secret", "password", "x-api-key"],
+)
 @pytest.mark.asyncio
 async def test_publish_rejects_plaintext_secret_in_optimizer_config_without_leaking_it(
-    tmp_path,
+    tmp_path, sensitive_key
 ):
     root = _copy_example(tmp_path)
     optimizer_path = root / "optimizer.json"
     payload = json.loads(optimizer_path.read_text(encoding="utf-8"))
     secret = "sk-real-sentinel-secret-must-not-be-copied"
-    payload["optimize"]["algorithm"]["reflection_lm"]["api_key"] = secret
+    payload["optimize"]["algorithm"]["reflection_lm"]["extra_fields"] = {
+        sensitive_key: secret
+    }
     optimizer_path.write_text(
         json.dumps(payload, ensure_ascii=False, indent=2) + "\n",
         encoding="utf-8",