LaLeV/wacrm
1
0
Fork 0
mirror of https://github.com/Luchexx/wacrm.git synced 2026-11-02 17:29:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #123 from ArnasDon/feat/flows-redact-reply-text

Browse Source 
fix(flows): redact customer text from reply_received event payload
This commit is contained in:
Arnas Donauskas 2026-05-22 15:38:02 +03:00 committed by GitHub
commit 551a857a32
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/lib/flows/engine.ts
View File

@ -822,11 +822,18 @@ async function handleReplyForActiveRun(
run: FlowRunRow, run: FlowRunRow,
message: ParsedInbound, message: ParsedInbound,
): Promise<DispatchInboundResult> { ): Promise<DispatchInboundResult> {
// Note: we intentionally do NOT persist the raw customer text. A
// `collect_input` prompt that asks "what's your card number?" would
// otherwise leave the PAN sitting in flow_run_events.payload forever,
// visible to anyone with access to the runs viewer or the events
// table. Length is enough for "did they actually reply?" debugging;
// for the captured value itself, the `node_entered` event already
// records `captured_key` + `captured_length` after the var is stored.
await logEvent(db, run.id, "reply_received", run.current_node_key, { await logEvent(db, run.id, "reply_received", run.current_node_key, {
meta_message_id: message.meta_message_id, meta_message_id: message.meta_message_id,
reply_kind: message.kind, reply_kind: message.kind,
reply_id: message.kind === "interactive_reply" ? message.reply_id : null, reply_id: message.kind === "interactive_reply" ? message.reply_id : null,
text: message.kind === "text" ? message.text : null, text_length: message.kind === "text" ? message.text.length : null,
}); });
if (!run.current_node_key) { if (!run.current_node_key) {