From 1927f35ed565ca0da7f5af6a42d3067885f765dd Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Sun, 28 Jun 2026 21:14:28 +0000
Subject: [PATCH] =?UTF-8?q?=F0=9F=9B=A1=EF=B8=8F=20Sentinel:=20[CRITICAL]?=
 =?UTF-8?q?=20Fix=20Timing=20Attack=20in=20Bearer=20Token=20Validation?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .jules/sentinel.md                         | 4 ++++
 src/cli/commands/serve.ts                  | 9 +++------
 tests/integration/prompt_templates.test.ts | 4 +++-
 3 files changed, 10 insertions(+), 7 deletions(-)
 create mode 100644 .jules/sentinel.md

diff --git a/.jules/sentinel.md b/.jules/sentinel.md
new file mode 100644
index 00000000..51ebe15b
--- /dev/null
+++ b/.jules/sentinel.md
@@ -0,0 +1,4 @@
+## 2025-02-12 - Fix Timing Attack Vulnerability in Bearer Token Validation
+**Vulnerability:** A timing attack vulnerability existed where short-circuiting on buffer length differences in `crypto.timingSafeEqual` leaked the length of the secret.
+**Learning:** Developers might check buffer lengths before `timingSafeEqual` because `timingSafeEqual` throws an error on unequal lengths. However, this re-introduces a timing leak (length).
+**Prevention:** Always hash both inputs to a fixed-length digest (e.g. SHA-256) before using `crypto.timingSafeEqual`.
diff --git a/src/cli/commands/serve.ts b/src/cli/commands/serve.ts
index 2c37293e..e20ec168 100644
--- a/src/cli/commands/serve.ts
+++ b/src/cli/commands/serve.ts
@@ -346,13 +346,10 @@ export async function handleServeCommand(_options: unknown, command: Command) {
 
           let isAuthenticated = false;
           if (scheme?.toLowerCase() === 'bearer' && token) {
-            const tokenBuffer = Buffer.from(token);
+            const tokenHash = crypto.createHash('sha256').update(token).digest();
             for (const authToken of authTokens) {
-              const authTokenBuffer = Buffer.from(authToken);
-              if (
-                tokenBuffer.length === authTokenBuffer.length &&
-                crypto.timingSafeEqual(tokenBuffer, authTokenBuffer)
-              ) {
+              const authTokenHash = crypto.createHash('sha256').update(authToken).digest();
+              if (crypto.timingSafeEqual(tokenHash, authTokenHash)) {
                 isAuthenticated = true;
                 break;
               }
diff --git a/tests/integration/prompt_templates.test.ts b/tests/integration/prompt_templates.test.ts
index 21905259..f1360d78 100644
--- a/tests/integration/prompt_templates.test.ts
+++ b/tests/integration/prompt_templates.test.ts
@@ -36,7 +36,9 @@ describe('Prompt templates', () => {
 
     expect(planSystem).toContain('You are SalmonLoop.');
     expect(patchSystem).toContain('You are PATCH, a phase-native diff compiler.');
-    expect(autopilotSystem).toContain('You are a senior software engineer running in "autopilot" mode.');
+    expect(autopilotSystem).toContain(
+      'You are a senior software engineer running in "autopilot" mode.',
+    );
     expect(answerSystem).toContain('You are a coding assistant in "answer" mode.');
     expect(researchSystem).toContain('You are a research assistant.');
   });