@hasna/loops 0.3.24 → 0.3.25

package/dist/cli/index.js

@@ -4770,6 +4770,9 @@ function bounded(value, limit = EVIDENCE_CHARS) {
   return `${value.slice(0, limit)}
 [truncated ${value.length - limit} chars]`;
 }
+function redactedEvidence(value) {
+  return redact(bounded(value));
+}
 function searchableText(run) {
   return [run.error, run.stderr, run.stdout].filter(Boolean).join(`
 `).toLowerCase();
@@ -4790,9 +4793,9 @@ function stableFailureFingerprint(run, classification) {
 function healthRun(run) {
   return {
     ...run,
-    error: bounded(run.error),
-    stdout: bounded(run.stdout),
-    stderr: bounded(run.stderr)
+    error: redactedEvidence(run.error),
+    stdout: redactedEvidence(run.stdout),
+    stderr: redactedEvidence(run.stderr)
   };
 }
 function classifyRunFailure(run) {
@@ -4824,9 +4827,9 @@ function classifyRunFailure(run) {
     classification,
     fingerprint: stableFailureFingerprint(run, classification),
     evidence: {
-      error: bounded(run.error),
-      stdout: bounded(run.stdout),
-      stderr: bounded(run.stderr),
+      error: redactedEvidence(run.error),
+      stdout: redactedEvidence(run.stdout),
+      stderr: redactedEvidence(run.stderr),
       exitCode: run.exitCode
     }
   };
@@ -5201,7 +5204,7 @@ function buildScriptInventoryReport(store, opts = {}) {
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.3.24",
+  version: "0.3.25",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",
@@ -5398,8 +5401,17 @@ function accountForRole(input, role, seed) {
     return input.verifierAccount;
   return rolePoolValue(input.accountPool, seed, role) ?? input.account;
 }
+function assertNativeAuthProfileSupport(input, provider) {
+  if (provider === "codewith")
+    return;
+  const hasNativeAuthProfiles = Boolean(input.authProfile || input.authProfilePool?.length || input.workerAuthProfile || input.verifierAuthProfile);
+  if (!hasNativeAuthProfiles)
+    return;
+  throw new Error(`authProfile, authProfilePool, workerAuthProfile, and verifierAuthProfile are supported only for provider codewith; use account/accountPool for ${provider} profile isolation`);
+}
 function agentTarget(input, prompt, role, seed) {
   const provider = input.provider ?? "codewith";
+  assertNativeAuthProfileSupport(input, provider);
   const sandbox = input.sandbox ?? (provider === "codewith" || provider === "codex" ? "danger-full-access" : provider === "cursor" ? "disabled" : undefined);
   return {
     type: "agent",

package/dist/daemon/index.js

@@ -4525,7 +4525,7 @@ function enableStartup(result) {
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.3.24",
+  version: "0.3.25",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",

package/dist/index.js

@@ -4330,8 +4330,17 @@ function accountForRole(input, role, seed) {
     return input.verifierAccount;
   return rolePoolValue(input.accountPool, seed, role) ?? input.account;
 }
+function assertNativeAuthProfileSupport(input, provider) {
+  if (provider === "codewith")
+    return;
+  const hasNativeAuthProfiles = Boolean(input.authProfile || input.authProfilePool?.length || input.workerAuthProfile || input.verifierAuthProfile);
+  if (!hasNativeAuthProfiles)
+    return;
+  throw new Error(`authProfile, authProfilePool, workerAuthProfile, and verifierAuthProfile are supported only for provider codewith; use account/accountPool for ${provider} profile isolation`);
+}
 function agentTarget(input, prompt, role, seed) {
   const provider = input.provider ?? "codewith";
+  assertNativeAuthProfileSupport(input, provider);
   const sandbox = input.sandbox ?? (provider === "codewith" || provider === "codex" ? "danger-full-access" : provider === "cursor" ? "disabled" : undefined);
   return {
     type: "agent",
@@ -4842,6 +4851,117 @@ function runDoctor(store) {
 }
 // src/lib/health.ts
 import { createHash } from "crypto";
+
+// src/lib/format.ts
+var TEXT_OUTPUT_LIMIT = 32 * 1024;
+var SENSITIVE_PAYLOAD_KEYS = new Set(["env", "error", "prompt", "reason", "stderr", "stdout"]);
+function redact(value, visible = 0) {
+  if (!value)
+    return value;
+  if (value.length <= visible)
+    return value;
+  if (visible <= 0)
+    return `[redacted ${value.length} chars]`;
+  return `${value.slice(0, visible)}... [redacted ${value.length - visible} chars]`;
+}
+function truncateTextOutput(value) {
+  if (value.length <= TEXT_OUTPUT_LIMIT)
+    return value;
+  return `${value.slice(0, TEXT_OUTPUT_LIMIT)}
+[truncated ${value.length - TEXT_OUTPUT_LIMIT} chars]`;
+}
+function redactSensitivePayload(value, key) {
+  if (key && SENSITIVE_PAYLOAD_KEYS.has(key)) {
+    if (typeof value === "string")
+      return redact(value);
+    if (value === undefined || value === null)
+      return value;
+    return "[redacted]";
+  }
+  if (Array.isArray(value))
+    return value.map((item) => redactSensitivePayload(item));
+  if (value && typeof value === "object") {
+    return Object.fromEntries(Object.entries(value).map(([entryKey, entryValue]) => [entryKey, redactSensitivePayload(entryValue, entryKey)]));
+  }
+  return value;
+}
+function textOutputBlocks(value, opts = {}) {
+  const indent = opts.indent ?? "";
+  const nested = `${indent}  `;
+  const blocks = [];
+  for (const [label, output] of [
+    ["stdout", value.stdout],
+    ["stderr", value.stderr]
+  ]) {
+    if (!output)
+      continue;
+    blocks.push(`${indent}${label}:`);
+    for (const line of truncateTextOutput(output).replace(/\s+$/, "").split(/\r?\n/)) {
+      blocks.push(`${nested}${line}`);
+    }
+  }
+  return blocks;
+}
+function publicLoop(loop) {
+  const target = loop.target.type === "command" ? { ...loop.target, env: loop.target.env ? "[redacted]" : undefined } : loop.target.type === "agent" ? { ...loop.target, prompt: redact(loop.target.prompt) } : loop.target;
+  return {
+    ...loop,
+    target
+  };
+}
+function publicRun(run, showOutput = false) {
+  return {
+    ...run,
+    stdout: showOutput ? run.stdout : run.stdout ? `[redacted ${run.stdout.length} chars]` : undefined,
+    stderr: showOutput ? run.stderr : run.stderr ? `[redacted ${run.stderr.length} chars]` : undefined
+  };
+}
+function publicExecutorResult(result, showOutput = false) {
+  return {
+    ...result,
+    stdout: showOutput ? result.stdout : result.stdout ? `[redacted ${result.stdout.length} chars]` : undefined,
+    stderr: showOutput ? result.stderr : result.stderr ? `[redacted ${result.stderr.length} chars]` : undefined,
+    error: redact(result.error)
+  };
+}
+function publicWorkflow(workflow) {
+  return {
+    ...workflow,
+    steps: workflow.steps.map((step) => ({
+      ...step,
+      target: step.target.type === "agent" ? { ...step.target, prompt: redact(step.target.prompt) } : step.target.type === "command" && step.target.env ? { ...step.target, env: "[redacted]" } : step.target
+    }))
+  };
+}
+function publicWorkflowRun(run) {
+  return { ...run, error: redact(run.error) };
+}
+function publicWorkflowStepRun(run, showOutput = false) {
+  return {
+    ...run,
+    stdout: showOutput ? run.stdout : run.stdout ? `[redacted ${run.stdout.length} chars]` : undefined,
+    stderr: showOutput ? run.stderr : run.stderr ? `[redacted ${run.stderr.length} chars]` : undefined,
+    error: redact(run.error)
+  };
+}
+function publicWorkflowEvent(event) {
+  return { ...event, payload: redactSensitivePayload(event.payload) };
+}
+function publicGoal(goal) {
+  return {
+    ...goal,
+    objective: redact(goal.objective, 120)
+  };
+}
+function publicGoalRun(run) {
+  return {
+    ...run,
+    evidence: redactSensitivePayload(run.evidence),
+    rawResponse: redactSensitivePayload(run.rawResponse)
+  };
+}
+
+// src/lib/health.ts
 var EVIDENCE_CHARS = 2000;
 var FINGERPRINT_EVIDENCE_CHARS = 120;
 var CLASSIFICATIONS = [
@@ -4865,6 +4985,9 @@ function bounded(value, limit = EVIDENCE_CHARS) {
   return `${value.slice(0, limit)}
 [truncated ${value.length - limit} chars]`;
 }
+function redactedEvidence(value) {
+  return redact(bounded(value));
+}
 function searchableText(run) {
   return [run.error, run.stderr, run.stdout].filter(Boolean).join(`
 `).toLowerCase();
@@ -4885,9 +5008,9 @@ function stableFailureFingerprint(run, classification) {
 function healthRun(run) {
   return {
     ...run,
-    error: bounded(run.error),
-    stdout: bounded(run.stdout),
-    stderr: bounded(run.stderr)
+    error: redactedEvidence(run.error),
+    stdout: redactedEvidence(run.stdout),
+    stderr: redactedEvidence(run.stderr)
   };
 }
 function classifyRunFailure(run) {
@@ -4919,9 +5042,9 @@ function classifyRunFailure(run) {
     classification,
     fingerprint: stableFailureFingerprint(run, classification),
     evidence: {
-      error: bounded(run.error),
-      stdout: bounded(run.stdout),
-      stderr: bounded(run.stderr),
+      error: redactedEvidence(run.error),
+      stdout: redactedEvidence(run.stdout),
+      stderr: redactedEvidence(run.stderr),
       exitCode: run.exitCode
     }
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/loops",
-  "version": "0.3.24",
+  "version": "0.3.25",
   "description": "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   "type": "module",
   "main": "dist/index.js",