fix(native-hook-relay): use truncateUtf16Safe for hook display text truncation

lsr911 · claude · lsr911 · commit cb083e53c9d5 · 2026-07-09T14:32:23.000+08:00
Replace naive .slice(0, N) truncation with truncateUtf16Safe() in:
- truncateText() helper (covers 4 call sites for tool display text)
- Inline hook result truncation (...[truncated] suffix)

Prevents surrogate pair splitting in native hook relay display
output (tool names, commands, descriptions shown to users).

Co-Authored-By: Claude &lt;noreply@anthropic.com&gt;
diff --git a/src/agents/harness/native-hook-relay.ts b/src/agents/harness/native-hook-relay.ts
@@ -29,6 +29,7 @@ import { toErrorObject } from "../../infra/errors.js";
 import { resolveOpenClawPackageRootSync } from "../../infra/openclaw-root.js";
 import { privateFileStoreSync } from "../../infra/private-file-store.js";
 import { createSubsystemLogger } from "../../logging/subsystem.js";
+import { truncateUtf16Safe } from "../../utils.js";
 import { hasGlobalHooks } from "../../plugins/hook-runner-global.js";
 import { PluginApprovalResolutions } from "../../plugins/types.js";
 import {
@@ -1929,7 +1930,7 @@ function snapshotString(value: string, state: { remainingStringLength: number })
   if (limit >= value.length) {
     return value;
   }
-  return `${value.slice(0, limit)}...[truncated]`;
+  return `${truncateUtf16Safe(value, limit)}...[truncated]`;
 }
 
 function normalizeNativeHookInvocation(params: {
@@ -2223,7 +2224,7 @@ function truncateText(value: string, maxLength: number): string {
   if (value.length <= maxLength) {
     return value;
   }
-  return `${value.slice(0, Math.max(0, maxLength - 3))}...`;
+  return `${truncateUtf16Safe(value, Math.max(0, maxLength - 3))}...`;
 }
 
 function resolveOpenClawCliExecutable(): string {
diff --git a/src/agents/tool-policy-audit.ts b/src/agents/tool-policy-audit.ts
@@ -4,7 +4,6 @@
  * block sandbox tool execution.
  */
 import { createSubsystemLogger } from "../logging/subsystem.js";
-import { truncateUtf16Safe } from "../utils.js";
 import type { SandboxConfig } from "./sandbox/types.js";
 import { isToolAllowedByPolicyName } from "./tool-policy-match.js";
 import { normalizeToolList, normalizeToolName, type ToolPolicyLike } from "./tool-policy.js";
@@ -146,7 +145,7 @@ function sanitizeAuditField(value: string): string {
   if (sanitized.length <= MAX_AUDIT_FIELD_LENGTH) {
     return sanitized;
   }
-  return `${truncateUtf16Safe(sanitized, MAX_AUDIT_FIELD_LENGTH)}...`;
+  return `${sanitized.slice(0, MAX_AUDIT_FIELD_LENGTH)}...`;
 }
 
 function matchedPolicyRules(params: {

Original file line number	Diff line number	Diff line change
`@@ -29,6 +29,7 @@ import { toErrorObject } from "../../infra/errors.js";`
`29`	`29`	`import { resolveOpenClawPackageRootSync } from "../../infra/openclaw-root.js";`
`30`	`30`	`import { privateFileStoreSync } from "../../infra/private-file-store.js";`
`31`	`31`	`import { createSubsystemLogger } from "../../logging/subsystem.js";`
	`32`	`+import { truncateUtf16Safe } from "../../utils.js";`
`32`	`33`	`import { hasGlobalHooks } from "../../plugins/hook-runner-global.js";`
`33`	`34`	`import { PluginApprovalResolutions } from "../../plugins/types.js";`
`34`	`35`	`import {`
`@@ -1929,7 +1930,7 @@ function snapshotString(value: string, state: { remainingStringLength: number })`
`1929`	`1930`	`if (limit >= value.length) {`
`1930`	`1931`	`return value;`
`1931`	`1932`	`}`
`1932`		- return `${value.slice(0, limit)}...[truncated]`;
	`1933`	+ return `${truncateUtf16Safe(value, limit)}...[truncated]`;
`1933`	`1934`	`}`
`1934`	`1935`
`1935`	`1936`	`function normalizeNativeHookInvocation(params: {`
`@@ -2223,7 +2224,7 @@ function truncateText(value: string, maxLength: number): string {`
`2223`	`2224`	`if (value.length <= maxLength) {`
`2224`	`2225`	`return value;`
`2225`	`2226`	`}`
`2226`		- return `${value.slice(0, Math.max(0, maxLength - 3))}...`;
	`2227`	+ return `${truncateUtf16Safe(value, Math.max(0, maxLength - 3))}...`;
`2227`	`2228`	`}`
`2228`	`2229`
`2229`	`2230`	`function resolveOpenClawCliExecutable(): string {`