fix(tool-policy-audit): use truncateUtf16Safe for audit field truncation

lsr911 · claude · lsr911 · commit 7b33e2e0a685 · 2026-07-09T14:30:24.000+08:00
Replace naive .slice(0, MAX) with truncateUtf16Safe() to prevent
surrogate pair splitting in tool policy audit log output.

Co-Authored-By: Claude &lt;noreply@anthropic.com&gt;
diff --git a/src/agents/tool-policy-audit.ts b/src/agents/tool-policy-audit.ts
@@ -4,6 +4,7 @@
  * block sandbox tool execution.
  */
 import { createSubsystemLogger } from "../logging/subsystem.js";
+import { truncateUtf16Safe } from "../utils.js";
 import type { SandboxConfig } from "./sandbox/types.js";
 import { isToolAllowedByPolicyName } from "./tool-policy-match.js";
 import { normalizeToolList, normalizeToolName, type ToolPolicyLike } from "./tool-policy.js";
@@ -145,7 +146,7 @@ function sanitizeAuditField(value: string): string {
   if (sanitized.length <= MAX_AUDIT_FIELD_LENGTH) {
     return sanitized;
   }
-  return `${sanitized.slice(0, MAX_AUDIT_FIELD_LENGTH)}...`;
+  return `${truncateUtf16Safe(sanitized, MAX_AUDIT_FIELD_LENGTH)}...`;
 }
 
 function matchedPolicyRules(params: {
