@hoilab/ada-cli 0.84.14 → 0.84.17

package/dist/core/agent-session.js

@@ -38,6 +38,7 @@ import { buildSystemPrompt } from "./system-prompt.js";
 import { createLocalBashOperations } from "./tools/bash.js";
 import { createAllToolDefinitions } from "./tools/index.js";
 import { createMemoryEngineTools } from "./memory-engine/tools.js";
+import { redactSensitive } from "./memory-engine/security.js";
 import { createToolDefinitionFromAgentTool } from "./tools/tool-definition-wrapper.js";
 import { addUsageToTotals, createUsageTotals } from "./usage-totals.js";
 /**
@@ -180,6 +181,22 @@ export class AgentSession {
             memoryEngine.setNotify((message, level) => {
                 this._emit({ type: "notification", message, level });
             });
+            memoryEngine.setSensitiveDetected((reason) => {
+                // Persistent, highlighted message inside the conversation (CLI +
+                // desktop) — never a transient banner.
+                void this.sendCustomMessage({
+                    customType: "sensitive-notice",
+                    content: [
+                        {
+                            type: "text",
+                            text: "Has introducido un dato sensible que no se almacenará en memoria. " +
+                                reason,
+                        },
+                    ],
+                    display: true,
+                    details: { engine: "ada-memory", kind: "sensitive" },
+                });
+            });
             void memoryEngine.initialize().catch(() => {
                 // Memory must never break the session.
             });
@@ -981,6 +998,18 @@ Task: given the CURRENT MEMORY and the LATEST CONVERSATION TURN, produce the COM
                 expandedText = this._expandSkillCommand(expandedText);
                 expandedText = expandPromptTemplate(expandedText, [...this.promptTemplates]);
             }
+            // Enterprise security: detect sensitive data in the raw text (warning
+            // + audit) and redact it BEFORE it reaches the LLM, the session file
+            // or the chat transcript. The user sees censored content; the raw
+            // secret is never persisted anywhere.
+            // The engine exists whenever the SDK is built with the memory module;
+            // detection + redaction only need config (not the initialized stores),
+            // so they are ALWAYS applied — a failed init must never disable them.
+            const memoryEngine = this._resourceLoader.getMemoryEngine();
+            if (memoryEngine) {
+                memoryEngine.checkUserTextForSensitive(expandedText);
+                expandedText = redactSensitive(expandedText, memoryEngine.privacyLevel);
+            }
             // If streaming, queue via steer() or followUp() based on option
             if (this.isStreaming) {
                 if (!options?.streamingBehavior) {