GeezerVison

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		May 4, 2026 7:52pm

PR Summary

Medium Risk
Medium risk because it changes chat persistence/streaming message shaping (block merging + tool-result rewriting) and client-side restoration logic, which could affect transcript rendering or tool call payloads. Changes are security-sensitive but localized and covered by new unit tests.

Overview
Prevents sim_key values from being stored or re-shown from persisted Mothership chat history by redacting <credential type="sim_key"> tags in assistant content and stripping secrets from generate_api_key tool results before persistence.

Adds a client-side, in-memory cache to capture keys during live streaming and re-inject them after the post-stream refetch, so users can still copy a newly-generated key while older messages remain masked; this also handles credential tags split across streamed text chunks by coalescing assistant text blocks before redaction.

Introduces reusable UI/utilities: a new SecretReveal component for masked-or-copyable secret display, and a shared useCopyToClipboard hook (adopted by CopyCodeButton and key-creation modals).

^{Reviewed by Cursor Bugbot for commit f54ee3a. Bugbot is set up for automated code reviews on this repo. Configure here.}

Greptile Summary

This PR prevents raw sim_key API keys from being stored in Postgres by redacting <credential type="sim_key"> tags and generate_api_key tool-result key fields before persisting assistant messages. A client-side page-session cache captures revealed values during the live SSE stream so keys remain copyable in the current session even after the post-stream DB refetch returns the redacted row.

• P1 — cursor reset across content blocks: restoreRevealedSimKeysForMessage calls restoreInString once per content block, and each call resets cursor = 0. When two API keys span separate (non-consecutive) blocks — e.g., each preceded by its own generate_api_key tool-call block — both blocks are filled with revealed[0]. The user copies the wrong value from the second credential display. message.content (the flat string) is restored correctly; only the per-block path is affected. No existing test covers this case.

Confidence Score: 3/5

Safe to merge for single-key flows; the per-block cursor reset will serve the wrong key value when multiple API keys are generated in one turn and span separate content blocks.

One P1 defect on the changed path: the multi-block restoration cursor resets per block, producing wrong displayed key values for the second+ API key in a multi-key turn. DB redaction (the primary security goal) is unaffected, but the UX correctness of the key-restore feature is broken for the multi-key case. Score is 3/5 (below the P1 ceiling of 4) because the broken path is the core feature this PR introduces.

apps/sim/lib/copilot/chat/sim-key-redaction.ts — restoreRevealedSimKeysForMessage block-mapping loop (lines 244–250); also apps/sim/lib/copilot/chat/sim-key-redaction.test.ts needs a test covering two redacted tags in separate contentBlocks entries.

Important Files Changed

Sequence Diagram

sequenceDiagram
    participant SSE as SSE Stream
    participant UC as useChat (flush)
    participant BPA as buildPersistedAssistantMessage
    participant DB as Postgres
    participant SEL as message selector (useMemo)
    participant UI as CredentialDisplay

    SSE->>UC: streaming text chunks (runningText accumulates)
    UC->>UC: captureRevealedSimKeys(revealedSimKeysRef, [assistantId, requestId], runningText)
    Note over UC: in-memory cache: {assistantId → ['sk-sim-...']}

    SSE->>BPA: OrchestratorResult (full content + contentBlocks)
    BPA->>BPA: redactSensitiveContent(content)
    BPA->>BPA: mergeAndRedactPersistedBlocks(contentBlocks)
    BPA->>BPA: redactToolCallResult('generate_api_key', result)
    BPA->>DB: INSERT persisted message (no raw key)

    DB-->>UC: chatHistory refetch (redacted message)
    UC->>SEL: chatHistory.messages.map(toDisplayMessage)
    SEL->>SEL: restoreRevealedSimKeysForMessage(msg, revealedSimKeysRef)
    Note over SEL: looks up cache by msg.id or msg.requestId
    SEL->>UI: ChatMessage with value restored (in-memory only)
    UI->>UI: ApiKeyReveal renders copyable key

_{Reviews (1): Last reviewed commit: "fix(copilot): redact sim_key API keys fr..." | Re-trigger Greptile}