From 10304e1fa34594fe24932e27aa86bb92e7071ea6 Mon Sep 17 00:00:00 2001
From: spacedandy-agents-simplex
 <342056592+spacedandy-agents-simplex@users.noreply.github.com>
Date: Thu, 15 Oct 2026 14:36:51 +0000
Subject: [PATCH] ci: search a session's files for the token before printing
 any of them

The step printed report.md and the guard log before the token search, so a leaked token would have reached the log first (GitHub masks the exact value there, but nothing from the session should be printed before the check). A dry run with a stub claude that writes the token into its report now prints nothing from it and deletes the files.
---
 scripts/ci/ios-sim/claude-test.sh | 21 +++++++++++----------
 1 file changed, 11 insertions(+), 10 deletions(-)

diff --git a/scripts/ci/ios-sim/claude-test.sh b/scripts/ci/ios-sim/claude-test.sh
index 04f7614e3e..3dce9b986e 100755
--- a/scripts/ci/ios-sim/claude-test.sh
+++ b/scripts/ci/ios-sim/claude-test.sh
@@ -105,21 +105,22 @@ for layout in $layouts; do
       < prompt.md > transcript.jsonl 2> stderr.log
   ) || session_status=$?
   echo "claude exited with $session_status"
-  tail -n 20 "$session/stderr.log"
-  if [ -f "$session/report.md" ]; then
-    cat "$session/report.md"
-  else
-    echo "no report.md"
-  fi
-  echo "guard hook: $(grep -c '^allow' "$CLAUDE_GUARD_LOG" || true) allowed, $(grep -c '^refuse' "$CLAUDE_GUARD_LOG" || true) refused"
-  grep '^refuse' "$CLAUDE_GUARD_LOG" || true
-  echo "::endgroup::"
-  # the token must never be uploaded, whatever the session did; grep reads it from a pipe, not from its arguments
+  # the token must never be printed or uploaded, whatever the session did; grep reads it from a pipe, not from its arguments
   if grep -rqF -f <(printf '%s\n' "$token") "$session" "$CLAUDE_GUARD_LOG"; then
     rm -rf "$session" "$CLAUDE_GUARD_LOG"
     echo "::error::the $layout session's files contained the token, so they were deleted before the upload"
     session_status=1
+  else
+    tail -n 20 "$session/stderr.log"
+    if [ -f "$session/report.md" ]; then
+      cat "$session/report.md"
+    else
+      echo "no report.md"
+    fi
+    echo "guard hook: $(grep -c '^allow' "$CLAUDE_GUARD_LOG" || true) allowed, $(grep -c '^refuse' "$CLAUDE_GUARD_LOG" || true) refused"
+    grep '^refuse' "$CLAUDE_GUARD_LOG" || true
   fi
+  echo "::endgroup::"
   if [ "$session_status" -ne 0 ]; then
     status=$session_status
   fi