7d:I[154500,[["$2",["$3","$4"],[14451,1389]],["$5",["$6","$7","$8","$9","$a","$b"],[40076,28925,10525,30632,7744,72054]]],"IconMark"] 78:Tcc4, https://entire.com/gh/phaseoteam/-/trails/154/changes/Phaseo/154 Data contributions (opt-in redacted request/response samples kept for 30 days) could still store user images. This PR makes them keep no image, audio or file bytes at all. It's the code side of phase 0 of the CSAM screening plan: before we screen anything, stop holding media we don't need. ## What changed - **Every `data:` URL is redacted, whatever its length.** Before, only data URLs over 256 characters were removed, and only when they made up the whole string. - **Data URLs embedded in text are redacted too**, e.g. a markdown image inside a message. - **Bare base64 is redacted.** Any string of 256 or more base64 characters with no spaces becomes `[REDACTED_BASE64]`. This covers Anthropic `source.data`, Gemini `inline_data.data`, generated images (`b64_json`, `image_generation_call.result`) and any other format. - **Known media fields are redacted at any size:** `b64_json`, `partial_image_b64`, and `data` next to `type: "base64"`, `mime_type`, `mimeType`, `media_type` or `format`. - `DATA_CONTRIBUTION_REDACTION_VERSION` goes to `2026-10-29-v2`, so new rows can be told apart from older ones. ## Why The 10-16 CSAM review found three places where Phaseo stores image bytes: I/O logs, data contributions, and public avatars and logos. Contributions are the easiest to fix, because nothing reads the media back. Before this PR, raw base64 and short data URLs got past the redactor. ## How - `redactString` now runs the data-URL and bare-base64 checks before the existing secret and PII rules. - `sanitize` checks each object key with its parent: `isMediaBytesField` catches short provider media fields that the length check would miss. - Image **URLs** are unchanged: they still have their query string, fragment and credentials stripped, but are kept. They point at third-party content rather than being stored bytes, and the existing test pins this. ## Before and after | Input in a contribution | Before | After | |---|---|---| | `data:image/png;base64,…` (≤256 chars) | stored | `[REDACTED_DATA_URL]` | | Data URL inside message text | stored | `[REDACTED_DATA_URL]` | | Anthropic / Gemini / audio `data` field | stored | `[REDACTED_BASE64]` | | `b64_json`, `image_generation_call.result` | stored | `[REDACTED_BASE64]` | | `https://…/image.png?sig=…` | `https://…/image.png` | unchanged | ## Verification - `vitest run src/pipeline/classification`: 37 passed. That includes two new tests: one covering each provider's media format, and one showing that short ordinary strings such as `data: "hello"` and IDs are kept. - `tsc --noEmit` and `eslint` are clean on the gateway. - Existing contribution rows are not changed. ## Not in this PR - **I/O logs still store image bytes.** "Open in Chat" (`apps/web/src/lib/chat/logReplay.ts`) rebuilds image parts from them, so stripping them is a product decision that's still open. - The rest of phase 0 isn't code: a terms clause, NCMEC registration, and enabling the Cloudflare CSAM tool for the avatar bucket. Model: Claude Opus 5.5 (effort unknown) · Harness: Claude Code in T3 Code 🤖 Generated with [Claude Code](https://claude.com/claude-code) 79:T111e,The latest updates on your projects. Learn more about [Vercel for GitHub](https://vercel.link/github-learn-more). | Project | Deployment | Actions | Updated | |:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |:------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |:------------------------------------------------------------------------------------ |:------------------------------------------------------------------------------------------ | | [phaseo](https://vercel.com/phaseo/phaseo) | ![Ready](https://cdn.trylle.com/media/images/c6f97f6a2d9a50bb079b9c2120bcabc5?key=Aag9OPWPryCkgfLUMIUiriowtODh4hqHlmlzdftFmfU8NF62NmcRWEZYaAzSgjXFV7CRHFmtwIUXQzGW%2FMiYFGynEBRM2ZcoaM4U6O0OS8PmNZa7IXMfoNTDcz9NEzKc17c%2BcAPOWyxWJVBjzZRRTanNPzdCPpYzbuN8NGKPs87X) [Ready](https://vercel.com/phaseo/phaseo/FXc69MBrWd71i1zacEpynMf8Vpsy) | [Preview](https://phaseo-git-fix-csam-phase0-image-bytes-20261029-phaseo.vercel.app) | Oct 29, 2026 3:17pm UTC |

7a:T190b, > [!WARNING] > ## Review limit reached > > You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. > > **Next included review available in 2 minutes.** > > [Check out review usage here](https://app.coderabbit.ai/dashboard/review-capacity?orgId=ee02593a-5703-46d6-8f7b-6a6c34993c67). > >

View limit details

> > **Limit details:** You’ve used the included review currently available. > > [Learn how review limits work](https://docs.coderabbit.ai/management/rate-limits). > > **Review configuration:** > >

Run configuration

> > - **Source mode**: Auto > - **Repository**: Unavailable > - **Branch**: Unavailable > - **File**: No configuration file from this repository applied > - **Commit**: Unavailable > - **Layers**: defaults > - **Review profile**: CHILL > - **Plan**: Advanced > - **Run ID**: `31594ce2-788a-426f-aa55-deecc12ac693` > >

> >

Commits

> > Reviewing files that changed from the base of the PR and between 401dbdf6b9b4cacad6be56f9adcb305a9f45081d and d90f5f2f398ff1c4a8be6bbc1202200b16b5df07. > >

> >

Files selected for processing: 3

> > * `.changeset/data-contribution-media-bytes.md` > * `apps/api/src/pipeline/classification/data-contribution.test.ts` > * `apps/api/src/pipeline/classification/data-contribution.ts` > >

> >

- [ ] Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts Thanks for using [CodeRabbit](https://coderabbit.ai?utm_source=oss&utm_medium=github&utm_campaign=phaseoteam/Phaseo&utm_content=3376)! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout\-out.

❤️ Share

- [x] () - [Mastodon](https://mastodon.social/share?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A%20https%3A%2F%2Fcoderabbit.ai) - [Reddit](https://www.reddit.com/submit?title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&text=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code.%20Check%20it%20out%3A%20https%3A//coderabbit.ai) - [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fcoderabbit.ai&mini=true&title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&summary=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code)

_{Comment `@coderabbitai help` to get the list of available commands.} 7b:T488, ## Codex Review Summary This comment shows the latest Codex review activity on this pull request. | Review | Status | Commit | Review trigger | | --- | --- | --- | --- | | 📝 **Code Review** | ✅ **Completed** 2026-10-29T15:10:36.485148Z | `d90f5f2` | PR opened |

ℹ️ About Codex in GitHub

[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you - Open a pull request for review - Mark a draft as ready - Comment "@codex review" or "@codex security review". Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

62:["$","$L75",null,{"entries":[{"key":["platform",{"userId":"anon"},"pulls","page",{"owner":"phaseo","repo":"Phaseo","pullNumber":2922}],"data":{"repositoryId":"2957","detail":{"author":{"avatarUrl":"https://cdn.trylle.com/media/images/1d2c64395adad5855568f8208e56cb88?key=ASxtuE7amJWLg2qW2Qa%2BQZnxJqY%2BdrX9XPtHO8YJoucYq8h14p6tKQjvctVGo55L4fjFJ7zeJoTQUD2galNUXY3kRHPjA2njISE3x17UeFkHAKGsyz62txOgwWMprJb%2Bzc605zAPJYkj6vjgBoS91rmqdEmiBVJoMdPEwgRMlu3Hi48THWC8xgDNUw%3D%3D","externalProvider":"github","login":"DanielButler1","type":"User","url":"https://github.com/DanielButler1"},"authorId":"72151886","baseRefName":"main","closedAt":null,"comments":4,"createdAt":"2026-10-29T15:09:06Z","headRefName":"fix/csam-phase0-image-bytes-20261029","id":"4957771","isDraft":false,"labels":[],"number":2922,"repository":{"name":"Phaseo","owner":"phaseo","provider":"forgejo"},"state":"open","title":"fix(gateway): data contributions stop storing image and audio bytes","updatedAt":"2026-10-29T15:10:02Z","url":"https://trylle.com/phaseo/Phaseo/pulls/2922","body":"$78","additions":77,"deletions":4,"changedFiles":3,"commits":1,"reviewComments":0,"headSha":"d90f5f2f398ff1c4a8be6bbc1202200b16b5df07","baseSha":"f6fe72f6c80574a4736b6f2130bc98de55784840","headRepoOwner":"phaseo","headRepoName":"Phaseo","isMerged":false,"mergeCommitSha":null,"mergedBy":null,"mergeable":true,"mergeableState":"clean","conflictingFiles":null,"requestedTeams":[],"requestedReviewers":[],"graphqlId":"issue:2922"},"comments":[{"id":27023735,"graphqlId":"27023735","body":"$79","createdAt":"2026-10-29T15:09:09Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/bd21565b4b886e5cef0db32c7f0344af?key=Ac2%2Bksi1LIlNHkTtZAwXv6tt09t6J3yi307LJjxqX4WJV7V2s6%2BI0Envy0ptnh0BgWnFPJBIWHoaJP7O2PIdz4%2FDyORhprU5SMAs88biowmDdp5P5wEqJwK9hocc32DyIwf1dkRFfPk7p4jIYoYYJT1K1dXJsF971VaTxvZB7cj8CL47nQE27ziOhg%3D%3D","externalProvider":"github","login":"vercel[bot]","type":"Bot","url":"https://github.com/apps/vercel"}},{"id":27023736,"graphqlId":"27023736","body":"$7a","createdAt":"2026-10-29T15:09:16Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/d39e0f17743c08d7bf625ba6f80c545a?key=Ac3dCIMfeEeTRToXUBeRdRfe7IGnH7FaknGcutnXETLNIDauVDMEeYfL%2BNJ1UW6PltLPYQ8AAbXVYTqKXZ2sbxmdR%2FJeAINpLPz%2Fgbhi3if42haJXKHU1rlVIjj4bCQzj6%2FWYhkNT360oU7wzsBjYZsV7FyaaYuuIlrb3O4TqxAm%2FsfmH46nFvfFacg%3D","externalProvider":"github","login":"coderabbitai[bot]","type":"Bot","url":"https://github.com/apps/coderabbitai"}},{"id":27023737,"graphqlId":"27023737","body":"$7b","createdAt":"2026-10-29T15:09:20Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/fdedb714e9add836fd78428365411061?key=AbTl84PUpcB4AQFwbMXuaKdUswwUmlivTOVSlxm3nEp0jqDQNNmsjqx0pi8Gv5DD6U88zm8KvjR%2B2dq3EuWbeQbbulrG%2BlcEiJ5GsJS7eQphSJmBFHIx4QT60r62zC1isNJWQJxzZY0LYUmSwyBvW%2BiCNKisU%2BSqP%2Bj2mf0aULYPwb3WpCDJRPYTyYg%3D","externalProvider":"github","login":"chatgpt-codex-connector[bot]","type":"Bot","url":"https://github.com/apps/chatgpt-codex-connector"}},{"id":27023738,"graphqlId":"27023738","body":"

Dependency Review

\n✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

\nNone\n\n","createdAt":"2026-10-29T15:09:27Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/618d0dadf2cc03e4da918f9fce155434?key=AZR2NWibZ4GI6G7n0snc5O%2FCy3ukthRybL%2FnPkuHfb%2BSDl5jyY%2BICnK7fBwKjvxrsVV6C0JPZxZTQgFdB8jeaILFLR9JfexsaUup8AkkgNnbAGbZgojNsOfLPmKPf7SYvH%2FYQb5ondr7R93kUYfqwz0RJC2nyFR5R%2Brm41rXkHLcotJyErDIvfgcMw%3D%3D","externalProvider":"github","login":"github-actions[bot]","type":"Bot","url":"https://github.com/apps/github-actions"}}],"commits":[{"sha":"d90f5f2f398ff1c4a8be6bbc1202200b16b5df07","message":"fix(gateway): keep no media bytes in data contributions\n\nEvery data URL (any length, also inside text), bare base64 of 256+\ncharacters, and known provider media fields are redacted before a\ncontribution is stored. Image URLs keep the existing query stripping.\n\nCo-Authored-By: Claude Opus 5.5 \n","createdAt":"2026-10-29T15:08:48Z","author":{"avatarUrl":"","login":"","name":"Daniel Butler","type":"User","url":""},"verification":{"verified":false,"reason":"gpg.error.not_signed_commit"}}],"events":[{"id":27023734,"event":"pull_push","createdAt":"2026-10-29T15:09:06Z","actor":{"id":792,"avatarUrl":"https://cdn.trylle.com/media/images/99989e2a6207ed4e2b97bbd983c1d988?key=AQvUSeXAxq0Vy171SA2j4tYMvk%2FwbDXAfjl7lHYRXSLPpNRYTOha3mQmi4Zq7%2FwxCuwMMHPrXxFpmiWY1uI0RLKPAGlpPgLdGvd%2FKZjOLA%2B1RH%2FWUYSdVmIbX6FOEFlUbwHnkHcIhRcku0RyBOOvU6WvqKwufh1ydBPaLebBUoWvMwQT%2FZ1M9zV%2B%2FmHbaTB723OVDwBhZjM6l4dBiv69mfbc%2BuWsDsJreZ%2BsxmPnLSmueJ%2FGmp0v%2FUc%3D","login":"danielbutler1","name":"Daniel","type":"User","url":"https://trylle.com/danielbutler1","authorAssociation":"MEMBER"},"body":"{\"is_force_push\":false,\"commit_ids\":[\"d90f5f2f398ff1c4a8be6bbc1202200b16b5df07\"]}","commitIds":["d90f5f2f398ff1c4a8be6bbc1202200b16b5df07"]}],"reviews":[],"stackEvents":[],"commentPagination":{"totalCount":4,"perPage":30,"loadedPages":[1]},"eventPagination":{"loadedPages":[1],"hasMore":false},"headRefDeleted":false},"fetchedAt":1793412584679}],"children":"$L7c"}] 64:null 6b:[["$","title","0",{"children":"Commits · fix(gateway): data contributions stop storing image and audio bytes · phaseo/Phaseo | Trylle"}],["$","meta","1",{"name":"description","content":"Commits on fix(gateway): data contributions stop storing image and audio bytes (#2922) in phaseo/Phaseo."}],["$","meta","2",{"name":"application-name","content":"Trylle"}],["$","link","3",{"rel":"manifest","href":"/manifest.json","crossOrigin":"$undefined"}],["$","meta","4",{"name":"keywords","content":"Commits · fix(gateway): data contributions stop storing image and audio bytes · phaseo/Phaseo, phaseo/Phaseo, phaseo/Phaseo repository, Phaseo, TypeScript repository, source code, trylle, agent-native git platform, git platform for agents and humans, git platform for ai agents, coding agent pull requests, ai code review, repository automation, stacked pull requests, two-way github sync, github-compatible actions, try cli"}],["$","meta","5",{"name":"robots","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","6",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","7",{"name":"googlebot","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","8",{"name":"twitter:domain","content":"trylle.com"}],["$","meta","9",{"name":"twitter:url","content":"https://trylle.com/phaseo/Phaseo/pulls/2922/commits"}],["$","link","10",{"rel":"canonical","href":"https://trylle.com/phaseo/Phaseo/pulls/2922/commits"}],["$","meta","11",{"name":"format-detection","content":"telephone=no"}],["$","meta","12",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","13",{"name":"apple-mobile-web-app-title","content":"Trylle"}],["$","meta","14",{"name":"apple-mobile-web-app-status-bar-style","content":"black-translucent"}],["$","meta","15",{"property":"og:title","content":"Commits · fix(gateway): data contributions stop storing image and audio bytes · phaseo/Phaseo | Trylle"}],["$","meta","16",{"property":"og:description","content":"Commits on fix(gateway): data contributions stop storing image and audio bytes (#2922) in phaseo/Phaseo."}],["$","meta","17",{"property":"og:url","content":"https://trylle.com/phaseo/Phaseo/pulls/2922/commits"}],["$","meta","18",{"property":"og:site_name","content":"Trylle"}],["$","meta","19",{"property":"og:locale","content":"en_US"}],["$","meta","20",{"property":"og:image","content":"https://trylle.com/api/og.png?kind=repo&owner=phaseo&repo=Phaseo"}],["$","meta","21",{"property":"og:image:secure_url","content":"https://trylle.com/api/og.png?kind=repo&owner=phaseo&repo=Phaseo"}],["$","meta","22",{"property":"og:image:type","content":"image/png"}],["$","meta","23",{"property":"og:image:width","content":"1200"}],["$","meta","24",{"property":"og:image:height","content":"630"}],["$","meta","25",{"property":"og:image:alt","content":"phaseo/Phaseo repository preview on Trylle"}],["$","meta","26",{"property":"og:type","content":"website"}],["$","meta","27",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","28",{"name":"twitter:site","content":"@trylle"}],["$","meta","29",{"name":"twitter:title","content":"Commits · fix(gateway): data contributions stop storing image and audio bytes · phaseo/Phaseo | Trylle"}],["$","meta","30",{"name":"twitter:description","content":"Commits on fix(gateway): data contributions stop storing image and audio bytes (#2922) in phaseo/Phaseo."}],["$","meta","31",{"name":"twitter:image","content":"https://trylle.com/api/og.png?kind=repo&owner=phaseo&repo=Phaseo"}],["$","meta","32",{"name":"twitter:image:alt","content":"phaseo/Phaseo repository preview on Trylle"}],["$","link","33",{"rel":"icon","href":"/favicon.png","type":"image/png"}],["$","link","34",{"rel":"icon","href":"/favicon-white.png","type":"image/png","media":"(prefers-color-scheme: dark)"}],["$","link","35",{"rel":"apple-touch-icon","href":"/logo192.png"}],["$","$L7d","36",{}]]

Commits on Thu, Oct 29, 2026