From b1e2b34111648ead36ec6de6b815408ce7d5758d Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Fri, 3 Oct 2025 11:13:28 +0000
Subject: [PATCH] fix(contract_manager): mask private keys in deployment script
 logs

Co-Authored-By: aditya@dourolabs.xyz <aditya@dourolabs.xyz>
---
 contract_manager/scripts/deploy_evm_entropy_contracts.ts   | 6 +++++-
 contract_manager/scripts/deploy_evm_pricefeed_contracts.ts | 6 +++++-
 contract_manager/scripts/deploy_evm_pulse_contracts.ts     | 6 +++++-
 3 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/contract_manager/scripts/deploy_evm_entropy_contracts.ts b/contract_manager/scripts/deploy_evm_entropy_contracts.ts
index fca6a50175..3d30eaf26a 100644
--- a/contract_manager/scripts/deploy_evm_entropy_contracts.ts
+++ b/contract_manager/scripts/deploy_evm_entropy_contracts.ts
@@ -122,8 +122,12 @@ async function main() {
 
   await topupEntropyAccountsIfNecessary(chain, deploymentConfig);
 
+  const maskedDeploymentConfig = {
+    ...deploymentConfig,
+    privateKey: deploymentConfig.privateKey ? `<REDACTED>` : undefined,
+  };
   console.log(
-    `Deployment config: ${JSON.stringify(deploymentConfig, null, 2)}\n`,
+    `Deployment config: ${JSON.stringify(maskedDeploymentConfig, null, 2)}\n`,
   );
 
   console.log(`Deploying entropy contracts on ${chain.getId()}...`);
diff --git a/contract_manager/scripts/deploy_evm_pricefeed_contracts.ts b/contract_manager/scripts/deploy_evm_pricefeed_contracts.ts
index 1e7e0d9b02..4aadf81c7d 100644
--- a/contract_manager/scripts/deploy_evm_pricefeed_contracts.ts
+++ b/contract_manager/scripts/deploy_evm_pricefeed_contracts.ts
@@ -155,8 +155,12 @@ async function main() {
     saveContract: argv.saveContract,
   };
 
+  const maskedDeploymentConfig = {
+    ...deploymentConfig,
+    privateKey: deploymentConfig.privateKey ? `<REDACTED>` : undefined,
+  };
   console.log(
-    `Deployment config: ${JSON.stringify(deploymentConfig, null, 2)}\n`,
+    `Deployment config: ${JSON.stringify(maskedDeploymentConfig, null, 2)}\n`,
   );
 
   const chainNames = argv.chain;
diff --git a/contract_manager/scripts/deploy_evm_pulse_contracts.ts b/contract_manager/scripts/deploy_evm_pulse_contracts.ts
index d3868a6432..392790c168 100644
--- a/contract_manager/scripts/deploy_evm_pulse_contracts.ts
+++ b/contract_manager/scripts/deploy_evm_pulse_contracts.ts
@@ -148,8 +148,12 @@ async function main() {
 
   await topupPulseAccountsIfNecessary(chain, deploymentConfig);
 
+  const maskedDeploymentConfig = {
+    ...deploymentConfig,
+    privateKey: deploymentConfig.privateKey ? `<REDACTED>` : undefined,
+  };
   console.log(
-    `Deployment config: ${JSON.stringify(deploymentConfig, null, 2)}\n`,
+    `Deployment config: ${JSON.stringify(maskedDeploymentConfig, null, 2)}\n`,
   );
 
   console.log(`Deploying pulse contracts on ${chain.getId()}...`);