Function sanitizeInput

server/src/addie/security.ts:62–99

(text: string)

 * Sanitize user input before passing to Claude
 */
export function sanitizeInput(text: string): SanitizationResult {
  let sanitized = text;
  let flagged = false;
  let reason: string | undefined;

  // Check for suspicious patterns
  for (const pattern of SUSPICIOUS_PATTERNS) {
    if (pattern.test(text)) {
      flagged = true;
      reason = `Suspicious pattern detected`;
      logger.warn({ pattern: pattern.source.substring(0, 50) }, 'Addie: Suspicious input pattern');
      break;
    }
  }

  // Remove potential delimiter injection
  sanitized = sanitized
    .replace(/\[system\]/gi, '[sys tem]')
    .replace(/\[user\]/gi, '[us er]')
    .replace(/\[assistant\]/gi, '[assis tant]');

  // Limit message length to prevent context stuffing
  const MAX_LENGTH = 4000;
  if (sanitized.length > MAX_LENGTH) {
    sanitized = sanitized.substring(0, MAX_LENGTH) + '... [truncated]';
    if (!flagged) {
      flagged = true;
      reason = 'Message truncated due to excessive length';
    }
  }

  return {
    valid: true,
    sanitized,
    flagged,
    reason,
  };
}

/**
 * Convert markdown links to Slack mrkdwn format.