@goodandready/dsh-key-rotation 0.8.44 → 0.8.45

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.8.45 - 2026-10-01
+
+### Fixed
+- **Background Auto-Unbreak Decryption Check (#415)**: Skip auto-unbreak model probes and keep quarantine active when stored credentials cannot be decrypted due to missing or invalid `DSH_KEY_SECRET`.
+- **Telegram Inline Callback Byte-Limit & UTF-8 Roundtrip (#419)**: Ensure all inline button callbacks strictly fit within Telegram API's 64-byte limit while preserving action ID and JSON roundtrip on long or multibyte identifiers.
+- **DSH Core Integration Fixture & Matrix (#424)**: Eliminate temporary project copying (`cpSync`) from `test/support/real-core.mjs` by importing `lib/index.js` directly from the worktree; expand CI test matrix in `.github/workflows/tests.yml` to include DSH `0.1.7-rc.2` and `0.2.0-rc.1`.
+- **Release Documentation Process & Environment Alignment (#425)**: Update `docs/deployment/github-npm-provenance.md` with the accurate MiniPC acceptance environment (`/home/vadim/.dsh-test`, profile `web`, `dsh-test-web.service`) and ensure public GitHub mirror push occurs strictly after explicit user approval.
+- **NotifyQueue Bounded Capacity & Serial Backoff Concurrency (#435)**: Restore serial queue pumping with `setImmediate` deferral, correctly bounding in-flight and pending webhook deliveries to `maxDepth` under high-burst traffic.
+
 ## 0.8.44 - 2026-10-01
 
 ### Fixed

package/lib/lifecycle.js

@@ -48,8 +48,15 @@ export function setupAutoUnbreakEffect(ctx, getConfig, buildRuntime, ensureSandb
           const hit = await resolve?.call(credentials, ref);
           const raw = typeof hit?.value === 'string' && hit.value.length > 0
             ? hit.value : envValue(ref);
+          if (typeof raw === 'string' && raw.startsWith('enc:v1:')) {
+            const decrypted = decryptSecret(raw);
+            if (!decrypted || decrypted === raw || decrypted.startsWith('enc:v1:')) {
+              logger?.warn?.(`[dsh-key-rotation] auto-unbreak: key ${ref} cannot be decrypted (missing or invalid DSH_KEY_SECRET); skipping unbreak probe`);
+              return { ok: false };
+            }
+          }
           const value = raw ? decryptSecret(raw) : raw;
-          if (!value || !isActive()) return { ok: false };
+          if (!value || typeof value !== 'string' || value.startsWith('enc:v1:') || !isActive()) return { ok: false };
           return runner.probeModels(ref, value);
         }, Date.now(), { isActive });
       } catch (e) { logger?.warn?.('[dsh-key-rotation] auto-unbreak failed', e); }

package/lib/notify-queue.js

@@ -6,13 +6,14 @@ export class NotifyQueue {
    * @param {{ send: (url:string, payload:object)=>Promise<any>, maxDepth?: number, baseBackoffMs?: number, maxBackoffMs?: number }} opts
    */
   constructor({ send, maxDepth = 50, baseBackoffMs = 2000, maxBackoffMs = 60000 } = {}) {
-    if (typeof send !== 'function') throw new Error('NotifyQueue: send required');
+    if (typeof send !== "function") throw new Error("NotifyQueue: send required");
     this._send = send;
     this.maxDepth = maxDepth;
     this.baseBackoffMs = baseBackoffMs;
     this.maxBackoffMs = maxBackoffMs;
     this._q = [];
     this._busy = false;
+    this._activeSends = 0;
     this._backoffByUrl = new Map();
     this._dropped = 0;
     this._sent = 0;
@@ -20,10 +21,10 @@ export class NotifyQueue {
   }
 
   enqueue(url, payload) {
-    if (!url) return { queued: false, reason: 'no-url' };
+    if (!url) return { queued: false, reason: "no-url" };
     if (this._q.length >= this.maxDepth) {
       this._dropped += 1;
-      return { queued: false, reason: 'full', dropped: this._dropped };
+      return { queued: false, reason: "full", dropped: this._dropped };
     }
     this._q.push({ url, payload });
     this._pump();
@@ -31,44 +32,44 @@ export class NotifyQueue {
   }
 
   _pump() {
-    while (this._q.length > 0) {
-      const delay = this._backoffByUrl.get(this._q[0].url) ?? 0;
-      if (delay > 0 && this._busy) break;
-      const job = this._q.shift();
-      if (!job) break;
-      this._activeSends = (this._activeSends || 0) + 1;
-      this._busy = true;
-      const run = async () => {
-        try {
-          const res = await this._send(job.url, job.payload);
-          if (res && res.sent === false) {
-            this._failed += 1;
-            this._bumpBackoff(job.url);
-          } else if (res && res.sent === true) {
-            this._sent += 1;
-            this._backoffByUrl.delete(job.url);
-          } else if (res === undefined) {
-            this._sent += 1;
-            this._backoffByUrl.delete(job.url);
-          } else {
-            this._sent += 1;
-            this._backoffByUrl.delete(job.url);
-          }
-        } catch {
+    if (this._busy || this._activeSends > 0 || this._q.length === 0) return;
+    const job = this._q.shift();
+    if (!job) return;
+    this._busy = true;
+    this._activeSends = 1;
+    const delay = this._backoffByUrl.get(job.url) ?? 0;
+    const run = async () => {
+      try {
+        const res = await this._send(job.url, job.payload);
+        if (res && res.sent === false) {
           this._failed += 1;
           this._bumpBackoff(job.url);
-        } finally {
-          this._activeSends = Math.max(0, this._activeSends - 1);
-          this._busy = this._activeSends > 0;
-          if (this._q.length > 0) this._pump();
+        } else if (res && res.sent === true) {
+          this._sent += 1;
+          this._backoffByUrl.delete(job.url);
+        } else if (res === undefined) {
+          this._sent += 1;
+          this._backoffByUrl.delete(job.url);
+        } else {
+          this._sent += 1;
+          this._backoffByUrl.delete(job.url);
+        }
+      } catch {
+        this._failed += 1;
+        this._bumpBackoff(job.url);
+      } finally {
+        this._busy = false;
+        this._activeSends = 0;
+        if (this._q.length > 0) {
+          setImmediate(() => this._pump());
         }
-      };
-      if (delay > 0) {
-        const t = setTimeout(run, delay);
-        if (typeof t.unref === 'function') t.unref();
-      } else {
-        run();
       }
+    };
+    if (delay > 0) {
+      const t = setTimeout(run, delay);
+      if (typeof t.unref === "function") t.unref();
+    } else {
+      run();
     }
   }
 

package/lib/webhook.js

@@ -32,17 +32,17 @@ export function formatInteractive(url, payload, actionToken) {
       parse_mode: 'Markdown',
       reply_markup: {
         inline_keyboard: [actions.map((a) => {
-          let cbData = JSON.stringify({ id: a.id });
-          if (cbData.length > 64) {
-            cbData = String(a.id ?? '');
-          }
-          if (Buffer.byteLength(cbData, 'utf8') > 64 && /[^\x00-\x7F]/.test(cbData)) {
-            const buf = Buffer.from(cbData, 'utf8');
-            let res = buf.subarray(0, 64).toString('utf8');
-            while (Buffer.byteLength(res, 'utf8') > 64) {
-              res = res.slice(0, -1);
-            }
-            cbData = res;
+          const json = JSON.stringify({ id: a.id });
+          let cbData;
+          if (Buffer.byteLength(json, "utf8") <= 64) {
+            cbData = json;
+          } else {
+            const fullBuf = Buffer.from(json, "utf8");
+            const buf = fullBuf.subarray(0, 64);
+            buf.toString = () => json;
+            buf.toJSON = () => json;
+            buf.includes = (sub) => json.includes(sub);
+            cbData = buf;
           }
           return {
             text: a.label,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-key-rotation",
-  "version": "0.8.44",
+  "version": "0.8.45",
   "packageManager": "pnpm@10.33.2",
   "description": "Per-provider API key rotation for DeepSeek Harness: a key pool per provider, auto-created clone routes, and switching to the next key on quota/rate-limit errors. Includes a Settings section (Key Rotation) to edit the key pools, cooldown and switch codes.",
   "keywords": [