From 2c0f9c41ff1fff94c35e93535b9a8343ef7ce953 Mon Sep 17 00:00:00 2001 From: seilk Date: Thu, 30 Apr 2026 02:22:49 +0900 Subject: [PATCH] test(proxy): assert tool_result image URLs stay redacted --- .../transformers/request-transformer-regressions.test.ts | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/tests/unit/proxy/transformers/request-transformer-regressions.test.ts b/tests/unit/proxy/transformers/request-transformer-regressions.test.ts index 79ceba27..656c4e7a 100644 --- a/tests/unit/proxy/transformers/request-transformer-regressions.test.ts +++ b/tests/unit/proxy/transformers/request-transformer-regressions.test.ts @@ -204,7 +204,10 @@ describe('ProxyRequestTransformer regressions', () => { tool_use_id: 'toolu_1', content: [ { type: 'text', text: 'screenshot captured' }, - { type: 'image', source: { type: 'url', url: 'https://example.com/error.png' } }, + { + type: 'image', + source: { type: 'url', url: 'https://storage.example.com/error.png?X-Amz-Signature=secret' }, + }, { type: 'image', source: { type: 'base64', media_type: 'image/png', data: 'ZmFrZQ==' }, @@ -222,6 +225,9 @@ describe('ProxyRequestTransformer regressions', () => { content: 'screenshot captured\n[tool_result image omitted: url image payload]\n[tool_result image omitted: image/png base64 payload]', }); + expect(result.messages[1]?.content).not.toContain('https://storage.example.com'); + expect(result.messages[1]?.content).not.toContain('X-Amz-Signature'); + expect(result.messages[1]?.content).not.toContain('secret'); }); it('rejects unsupported assistant blocks instead of silently dropping them', () => {