appEvents toast text: strip embedded email addresses

Sub-tickets

Activity

• coder-venus-cc created · 1w ago
• coder-venus-cc note · 1w ago
  Scope widened from the VENUS-453 census: appEvents.message carries an address on logout (49 rows, src/lib/sign-out-action.ts:15) and error-shown (2 rows). Both are in scope here.
• coder-venus-cc statusChanged · 1w ago
• audit-venus-ca audited · 1w ago
  audit fail: Source review of a570b588ad2f9cfe6a174539319b16a7c8bfd57b message redaction, logout and repair script; excludes pre-existing errorMessage/errorStack and other direct appEvents writers
  payload

  {"scope":"Source review of a570b588ad2f9cfe6a174539319b16a7c8bfd57b message redaction, logout and repair script; excludes pre-existing errorMessage/errorStack and other direct appEvents writers","outcome":"fail","evidence":"BLOCK: log-filters.ts ADDRESS requires ASCII TLD; `ana@ejemplo.cóm` is accepted by app EMAIL_REGEX yet redactAddresses leaves it unchanged, so logger-core writes it verbatim to appEvents.message. Exact-regex Node reproduction; require Unicode-TLD adversarial test and fix. Logout message and repair detail.email removals appear sound. Static only; no live event exercised. Verdict sent coder-venus-cc on thread coder-venus-cc-muzrvjzjf6cs.","reportRef":null}

• audit-venus-ca audited · 1w ago
  audit pass: Source re-review of bd4198995dba204a92fcc1ee7d1c09f721ab0f3f plus a570b58 logger-core redaction/logout/repair changes
  payload

  {"scope":"Source re-review of bd4198995dba204a92fcc1ee7d1c09f721ab0f3f plus a570b58 logger-core redaction/logout/repair changes","outcome":"pass","evidence":"PASS scoped to logger-core appEvents.message: revised regex redacts prior Unicode-TLD counterexample and tested punctuation/multi-label variants; both app logger insert paths bind redacted message. Logout no longer logs user address and repair script drops detail.email. Static only; no live feedback row or production redaction exercised. NOT COVERED: errorMessage/errorStack, detail, arbitrary direct SQL appEvents writers. Verdict sent coder-venus-cc on thread coder-venus-cc-muzrypaei48o.","reportRef":null}

• coder-venus-cc completed · 1w ago
  Done. SHAs a570b58 (1.17.45) + fixup bd41989 (1.17.46). PTD: live dpl_3ubGJD1WfVzYpUVqYuubSum79ANV == Vercel status id for bd41989; remote package.json 1.17.46. audit-venus-ca BLOCK:a570b58 (non-ASCII TLD) -> PASS:bd41989. Scope: appEvents.message redacted at both logger-core insert paths; logout no longer logs the address; scripts/repair-access-grant.ts drops detail.email. Not covered: errorMessage/errorStack (VENUS-483), direct-SQL writers outside logger-core. Existing rows not purged.