Improve logger data sanitization to support recursive handling and circular references

- Please refactor the `sanitize_data` function in `packages/shared/src/utils/logger.ts` to fix multiple API key leak vulnerabilities.   Currently, it only checks top-level Axios errors, misses the raw `request._header` string, fails on nested errors (like `{ data: error }`), and doesn't redact Anthropic's `x-api-key`.  Implement a robust recursive sanitization function with the following requirements: 1. **Recursive Deep Clone:** Traverse objects recursively so nested errors (e.g., `{ parse_error: error }`) are caught. 2. **Circular Reference Protection:** Use a `WeakSet` to prevent `Maximum call stack size exceeded` errors, as Axios error objects contain highly nested circular references (e.g., `request.res.req`). 3. **Key-based Redaction:** If an object key is `authorization` or `x-api-key` (case-insensitive), replace its value with `'[REDACTED]'`. 4. **String Regex Redaction:** If a value is a string (specifically to catch the raw HTTP string in `request._header`), run a regex replace...

├── apps
│   └── editor
│       └── src
│           ├── services
│           │   ├── model-fetcher.ts
│           │   └── prompt-view-api-calls-manager.ts
│           └── utils
│               ├── build-request-headers.ts
│               └── send-llm-message.ts
└── packages
    └── shared
        ├── package.json
        └── src
            └── utils
                └── logger.ts

Author: robertpiosik

packages/shared/src/utils/logger.ts

@@ -1,48 +1,42 @@
 export namespace Logger {
   const LOG_PREFIX = '[CWC]'
 
-  const sanitize_data = (data: any) => {
-    if (!data || typeof data !== 'object') return data
+  const sanitize_data = (data: any, seen = new WeakSet()): any => {
+    if (data === null || data === undefined) return data
 
-    if (data.isAxiosError) {
-      const sanitized = {
-        name: data.name,
-        message: data.message,
-        stack: data.stack,
-        ...data
-      }
+    if (typeof data === 'string') {
+      return data
+        .replace(/(Authorization:\s*Bearer\s+)[^\r\n]+/gi, '$1[REDACTED]')
+        .replace(/(x-api-key:\s*)[^\r\n]+/gi, '$1[REDACTED]')
+    }
 
-      if (sanitized.config?.headers) {
-        sanitized.config = {
-          ...sanitized.config,
-          headers: { ...sanitized.config.headers }
-        }
-        for (const key in sanitized.config.headers) {
-          if (key.toLowerCase() === 'authorization') {
-            sanitized.config.headers[key] = '[REDACTED]'
-          }
-        }
-      }
+    if (typeof data !== 'object') return data
 
-      if (sanitized.response?.config?.headers) {
-        sanitized.response = {
-          ...sanitized.response,
-          config: {
-            ...sanitized.response.config,
-            headers: { ...sanitized.response.config.headers }
-          }
-        }
-        for (const key in sanitized.response.config.headers) {
-          if (key.toLowerCase() === 'authorization') {
-            sanitized.response.config.headers[key] = '[REDACTED]'
-          }
-        }
-      }
+    if (seen.has(data)) return '[Circular]'
+    seen.add(data)
+
+    if (Array.isArray(data)) {
+      return data.map((item) => sanitize_data(item, seen))
+    }
+
+    const sanitized: any = {}
 
-      return sanitized
+    if (data instanceof Error) {
+      sanitized.name = data.name
+      sanitized.message = data.message
+      sanitized.stack = data.stack
+    }
+
+    for (const key of Object.keys(data)) {
+      const lower_key = key.toLowerCase()
+      if (lower_key === 'authorization' || lower_key === 'x-api-key') {
+        sanitized[key] = '[REDACTED]'
+      } else {
+        sanitized[key] = sanitize_data(data[key], seen)
+      }
     }
 
-    return data
+    return sanitized
   }
 
   export function info(params: {