All DIS-001 through DIS-110 set to status:done with merge dates. BOARD.md reorganized with Done sections per phase. Phase 1.5 Refinement epic added as planning placeholder. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
41 lines
1.3 KiB
Markdown
41 lines
1.3 KiB
Markdown
---
|
|
id: DIS-102
|
|
status: done
|
|
phase: 1
|
|
priority: p1
|
|
labels: [phase:1, type:feat, priority:p1, security]
|
|
branch: phase-1/sanitize-for-discord
|
|
assignee: claude-agent
|
|
started: null
|
|
pr: null
|
|
merged: 2026-04-10
|
|
---
|
|
|
|
# DIS-102: `sanitizeForDiscord` — Pfade aus Agent-Output entfernen
|
|
|
|
## Ziel
|
|
Absolute Pfade, Home-Dir und Token-Patterns werden vor Discord-Send aus Agent-Antworten redaktiert.
|
|
Verhindert Info-Leak in öffentliche Channels.
|
|
|
|
## Kontext
|
|
→ `docs/development-plan.md` §2.7 (Error-Handler-Strategie), Phase 1 Task 2.
|
|
|
|
## Scope
|
|
- **In**: `src/runtime/sanitize.ts` mit `sanitizeForDiscord(text, { repoRoot, home })` · Regex ersetzt repoRoot → `<disclaw>`, home → `~`, Token-Patterns → `<redacted>` · Router nutzt Sanitizer vor jedem `channel.send`
|
|
- **Out**: Content-Moderation, PII-Detection
|
|
|
|
## Definition of Done
|
|
- [ ] Test `tests/unit/sanitize-for-discord.test.ts` deckt: Repo-Pfad, Home-Pfad, Discord-Token-Regex, keine False-Positives auf harmlosem Text
|
|
- [ ] Router nutzt Sanitizer an allen Send-Stellen
|
|
- [ ] `npm run build && npm test` grün
|
|
|
|
## Dateien (erwartet)
|
|
- `src/runtime/sanitize.ts`
|
|
- `src/router.ts`
|
|
- `tests/unit/sanitize-for-discord.test.ts`
|
|
|
|
## Abhängigkeiten
|
|
Blockiert durch: **DIS-101** (gemeinsames Refactoring-Fenster im Router).
|
|
|
|
## Spec
|
|
→ `docs/backlog.md` #DIS-102
|