Eve e4ee615f88 fix(daemon): redact nested tool input before it leaves the daemon ...

Addresses review on #6158.

Recursive redaction ran only in the server's ingest handler. The daemon built
the new nested edit payload and sent msg.Input verbatim, so a daemon that
self-updated ahead of the server — or one talking to a server mid-rollout —
would ship whole-file edit contents to a peer that does not scrub nested
values yet. The legacy protocol reports a deletion as the whole outgoing file,
so that window covered a deleted .env in cleartext.

Ordering three commits inside one PR is not a deployment barrier, and daemon
and server upgrade independently. Deployment order is not a control we have,
so the sending side is now safe on its own; the server keeps redacting on
ingest as the second line of defence.

Scoped to Input, which is the field this PR newly fills with file contents.
Content and Output are plain strings already redacted server-side, and
changing their daemon-side handling would be unrelated to this fix.

Verified: the new daemon test asserts the nested token is masked in the
reported batch while the change metadata survives. It fails without this
change, reporting the full GITHUB_TOKEN= line on the wire, and passes with
it; ./internal/daemon green.

Co-authored-by: multica-agent <github@multica.ai>

2026-07-30 13:30:46 +08:00

..

execenv

…

repocache

…

agent_command_names_test.go

…

agent_path_selfheal_test.go

…

agents_probe.go

…

agents_refresh_test.go

…

agents_refresh.go

…

artifact_matcher.go

…

auto_update_test.go

…

auto_update.go

…

claude_plugins.go

…

client_batch_claim_test.go

…

client_test.go

…

client.go

…

coauthor_enabled_test.go

…

config_test.go

…

config.go

…

daemon_legacy_fallback_test.go

…

daemon_test.go

fix(daemon): redact nested tool input before it leaves the daemon

2026-07-30 13:30:46 +08:00

daemon.go

fix(daemon): redact nested tool input before it leaves the daemon

2026-07-30 13:30:46 +08:00

diskusage_test.go

…

diskusage.go

…

gc_test.go

…

gc.go

…

handoff_prompt_test.go

…

health_test.go

…

health.go

…

helpers_test.go

…

helpers.go

…

identity_test.go

…

identity.go

…

leader_workdir_reuse_test.go

…

local_directory_test.go

…

local_directory.go

…

local_skill_report_test.go

…

local_skills_test.go

…

local_skills.go

…

model_list_report_test.go

…

openclaw_runtime_config_test.go

…

openclaw_runtime_config.go

…

pending_work_hint_test.go

…

poisoned_test.go

…

poisoned.go

…

prompt_test.go

…

prompt.go

…

reconcile_test.go

…

reconcile.go

…

runtime_gone_test.go

…

runtime_isolation_test.go

…

runtime_mcp_test.go

…

runtime_mcp.go

…

runtime_probe_batch_test.go

…

runtime_probe_concurrency_test.go

…

runtime_profile_drift_test.go

…

runtime_profile_test.go

…

server_update_test.go

…

skill_bundle_resolve_test.go

…

skill_cache_test.go

…

skill_cache.go

…

slash_skill_test.go

…

slash_skill.go

…

thread_name_test.go

…

thread_name.go

…

token_renewal_test.go

…

types.go

…

update_report_test.go

…

wakeup_test.go

…

wakeup.go

…

workdir_race_test.go

…

wsrpc_test.go

…

wsrpc.go

…