fix(audit): keep emoji / surrogate pairs intact during audit text truncation

maweibin · claude · maweibin · commit 97cdf88e8297 · 2026-07-07T19:49:04.000+08:00
Use truncateUtf16Safe() instead of .slice() to count full code points,
preventing lone surrogates in audit CLI output.

Co-Authored-By: Claude Opus 4.8 &lt;noreply@anthropic.com&gt;
diff --git a/src/commands/audit.test.ts b/src/commands/audit.test.ts
@@ -41,3 +41,16 @@ describe("audit command parsing", () => {
     expect(row).toContain("run\\tcolumn");
   });
 });
+
+describe("audit text truncation", () => {
+  it("does not split surrogate pairs", async () => {
+    const { truncateUtf16Safe } = await import("@openclaw/normalization-core/utf16-slice");
+    const content = "x".repeat(78) + "🚀tail";
+    // .slice(0, 79) would cut in the middle of the surrogate pair
+    const bad = content.slice(0, 79);
+    expect(bad.endsWith("\uD83D")).toBe(true);
+    // truncateUtf16Safe drops the broken surrogate, keeping only 78 x's
+    const good = truncateUtf16Safe(content, 79);
+    expect(good).toBe("x".repeat(78));
+  });
+});
diff --git a/src/commands/audit.ts b/src/commands/audit.ts
@@ -1,5 +1,6 @@
 /** Operator CLI for bounded metadata-only run/tool audit pages. */
 import { timestampMsToIsoString } from "@openclaw/normalization-core/number-coercion";
+import { truncateUtf16Safe } from "@openclaw/normalization-core/utf16-slice";
 import type {
   AuditEvent,
   AuditListParams,
@@ -63,7 +64,9 @@ function short(value: string | undefined, maxChars: number): string {
   if (!sanitized) {
     return "-";
   }
-  return sanitized.length <= maxChars ? sanitized : `${sanitized.slice(0, maxChars - 1)}…`;
+  return sanitized.length <= maxChars
+    ? sanitized
+    : `${truncateUtf16Safe(sanitized, maxChars - 1)}…`;
 }
 
 function formatAuditRows(events: AuditEvent[]): string[] {
