From 2615cf113d29629e299b438a48b509417978e6ef Mon Sep 17 00:00:00 2001 From: FrameBridge Date: Wed, 28 Oct 2026 14:03:18 -0400 Subject: [PATCH] Record sanitized Git diagnostics for publication recovery --- tools/publish_gitea.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/tools/publish_gitea.py b/tools/publish_gitea.py index 62d2628..d8b18af 100755 --- a/tools/publish_gitea.py +++ b/tools/publish_gitea.py @@ -191,6 +191,12 @@ def publish(args): # Commands never contain the credential; do not print captured HTTP/Git output. failure = f"{type(error).__name__}: {error}" state["failure"] = failure + if isinstance(error, subprocess.CalledProcessError) and error.stderr: + detail = error.stderr.decode("utf-8", "replace") + if token: + detail = detail.replace(token, "[REDACTED]") + detail = detail.replace(base64.b64encode(("gerardo:" + token).encode()).decode(), "[REDACTED]") + state["safe_command_stderr"] = detail[-4000:] finally: if stop is not None: stop.set()