@ictechgy/context-guard 0.4.16 → 0.6.0

package/plugins/context-guard/lib/context_guard_commands.py

@@ -10,6 +10,7 @@ IMPLEMENTATION_PAIRS = (('context_guard_cli.py', 'context-guard'),
  ('cache_score.py', 'context-guard-cache-score'),
  ('benchmark_runner.py', 'context-guard-bench'),
  ('context_escrow.py', 'context-guard-artifact'),
+ ('task_memory.py', 'context-guard-task-memory'),
  ('context_compress.py', 'context-guard-compress'),
  ('context_guard_mcp.py', 'context-guard-mcp'),
  ('context_pack.py', 'context-guard-pack'),
@@ -29,17 +30,25 @@ IMPLEMENTATION_PAIRS = (('context_guard_cli.py', 'context-guard'),
  ('trim_command_output.py', 'context-guard-trim-output'))
 
 HELPER_PAIRS = (('hook_secret_patterns.py', 'lib/hook_secret_patterns.py'),
+ ('bash_reference_policy.py', 'bin/bash_reference_policy.py'),
  ('credential_policy.py', 'lib/credential_policy.py'),
  ('context_guard_commands.py', 'lib/context_guard_commands.py'),
  ('context_guard_command_manifest_loader.py',
   'lib/context_guard_command_manifest_loader.py'),
- ('transcript_usage_reducer.py', 'lib/transcript_usage_reducer.py'))
+ ('transcript_usage_reducer.py', 'lib/transcript_usage_reducer.py'),
+ ('context_pack_identity.py', 'lib/context_pack_identity.py'),
+ ('context_pack_scanning.py', 'lib/context_pack_scanning.py'),
+ ('context_pack_selection.py', 'lib/context_pack_selection.py'),
+ ('context_pack_rendering.py', 'lib/context_pack_rendering.py'),
+ ('context_pack_git_boundary.py', 'lib/context_pack_git_boundary.py'),
+ ('context_pack_receipts.py', 'lib/context_pack_receipts.py'))
 
 NPM_BINS = ('context-guard',
  'context-guard-cost',
  'context-guard-cache-score',
  'context-guard-bench',
  'context-guard-artifact',
+ 'context-guard-task-memory',
  'context-guard-compress',
  'context-guard-mcp',
  'context-guard-pack',
@@ -63,6 +72,7 @@ NPM_BIN_PATHS = {'context-guard': 'plugins/context-guard/bin/context-guard',
  'context-guard-cache-score': 'plugins/context-guard/bin/context-guard-cache-score',
  'context-guard-bench': 'plugins/context-guard/bin/context-guard-bench',
  'context-guard-artifact': 'plugins/context-guard/bin/context-guard-artifact',
+ 'context-guard-task-memory': 'plugins/context-guard/bin/context-guard-task-memory',
  'context-guard-compress': 'plugins/context-guard/bin/context-guard-compress',
  'context-guard-mcp': 'plugins/context-guard/bin/context-guard-mcp',
  'context-guard-pack': 'plugins/context-guard/bin/context-guard-pack',
@@ -89,10 +99,12 @@ DISPATCHER_SUBCOMMANDS = {'setup': ('context-guard-setup',),
  'scan': ('context-guard-diet', 'scan'),
  'trim-output': ('context-guard-trim-output',),
  'trim': ('context-guard-trim-output',),
+ 'reference': ('context-guard-trim-output', '--expand-bash-reference'),
  'sanitize-output': ('context-guard-sanitize-output',),
  'sanitize': ('context-guard-sanitize-output',),
  'filter': ('context-guard-filter',),
  'artifact': ('context-guard-artifact',),
+ 'task-memory': ('context-guard-task-memory',),
  'pack': ('context-guard-pack',),
  'tool-prune': ('context-guard-tool-prune',),
  'compress': ('context-guard-compress',),
@@ -127,6 +139,7 @@ ENTRYPOINT_SMOKE_CASES = {'context-guard': {'args': ['--version'], 'mode': 'text
  'context-guard-read-symbol': {'args': ['--help'], 'mode': 'text'},
  'context-guard-sanitize-output': {'args': ['--help'], 'mode': 'text'},
  'context-guard-artifact': {'args': ['--help'], 'mode': 'text'},
+ 'context-guard-task-memory': {'args': ['--help'], 'mode': 'text'},
  'context-guard-audit': {'args': ['--help'], 'mode': 'text'},
  'context-guard-bench': {'args': ['--help'], 'mode': 'text'},
  'context-guard-compress': {'args': ['--help'], 'mode': 'text'},
@@ -174,6 +187,7 @@ PLUGIN_ENTRYPOINTS = ('claude-read-symbol',
  'claude-trim-output',
  'context-guard',
  'context-guard-artifact',
+ 'context-guard-task-memory',
  'context-guard-audit',
  'context-guard-bench',
  'context-guard-compress',
@@ -196,10 +210,12 @@ PLUGIN_ENTRYPOINTS = ('claude-read-symbol',
  'context-guard-trim-output')
 
 DISPATCHER_SMOKE_CASES = ({'entrypoint': 'context-guard', 'args': ['experiments', 'list', '--json'], 'mode': 'json'},
+ {'entrypoint': 'context-guard', 'args': ['reference', '--help'], 'mode': 'text'},
  {'entrypoint': 'context-guard', 'args': ['cost', '--help'], 'mode': 'text'},
  {'entrypoint': 'context-guard', 'args': ['route-advisor', '--help'], 'mode': 'text'},
  {'entrypoint': 'context-guard', 'args': ['cache-score', '--help'], 'mode': 'text'},
  {'entrypoint': 'context-guard', 'args': ['mcp', '--help'], 'mode': 'text'},
+ {'entrypoint': 'context-guard', 'args': ['task-memory', '--help'], 'mode': 'text'},
  {'entrypoint': 'context-guard-pack', 'args': ['suggest', '--help'], 'mode': 'text'},
  {'entrypoint': 'context-guard-pack', 'args': ['auto', '--help'], 'mode': 'text'})
 
@@ -216,8 +232,10 @@ EXPECTED_COMMAND_PACK_FILES = ('plugins/context-guard/bin/claude-read-symbol',
  'plugins/context-guard/bin/claude-token-statusline',
  'plugins/context-guard/bin/claude-token-statusline-merged',
  'plugins/context-guard/bin/claude-trim-output',
+ 'plugins/context-guard/bin/bash_reference_policy.py',
  'plugins/context-guard/bin/context-guard',
  'plugins/context-guard/bin/context-guard-artifact',
+ 'plugins/context-guard/bin/context-guard-task-memory',
  'plugins/context-guard/bin/context-guard-audit',
  'plugins/context-guard/bin/context-guard-bench',
  'plugins/context-guard/bin/context-guard-cache-score',
@@ -241,5 +259,11 @@ EXPECTED_COMMAND_PACK_FILES = ('plugins/context-guard/bin/claude-read-symbol',
  'plugins/context-guard/lib/credential_policy.py',
  'plugins/context-guard/lib/context_guard_command_manifest_loader.py',
  'plugins/context-guard/lib/context_guard_commands.py',
+ 'plugins/context-guard/lib/context_pack_git_boundary.py',
+ 'plugins/context-guard/lib/context_pack_identity.py',
+ 'plugins/context-guard/lib/context_pack_receipts.py',
+ 'plugins/context-guard/lib/context_pack_rendering.py',
+ 'plugins/context-guard/lib/context_pack_scanning.py',
+ 'plugins/context-guard/lib/context_pack_selection.py',
  'plugins/context-guard/lib/hook_secret_patterns.py',
  'plugins/context-guard/lib/transcript_usage_reducer.py')

package/plugins/context-guard/lib/context_pack_git_boundary.py

@@ -0,0 +1,19 @@
+"""Narrow fail-closed Git environment boundary for context selection."""
+from __future__ import annotations
+
+import os
+
+
+def sanitized_environment(_source: dict[str, str]) -> dict[str, str]:
+    return {
+        "GIT_ASKPASS": "/usr/bin/false",
+        "GIT_CONFIG_GLOBAL": "/dev/null",
+        "GIT_CONFIG_NOSYSTEM": "1",
+        "GIT_NO_LAZY_FETCH": "1",
+        "GIT_NO_REPLACE_OBJECTS": "1",
+        "GIT_TERMINAL_PROMPT": "0",
+        "LANG": "C",
+        "LC_ALL": "C",
+        "PATH": "/usr/bin:/bin",
+        "SSH_ASKPASS": "/usr/bin/false",
+    }

package/plugins/context-guard/lib/context_pack_identity.py

@@ -0,0 +1,115 @@
+"""Captured-byte and semantic identities for context-pack artifacts."""
+from __future__ import annotations
+
+from dataclasses import dataclass
+import hashlib
+import json
+from pathlib import Path, PurePosixPath
+import re
+import stat
+from typing import Any
+
+
+SHA256_RE = re.compile(r"[0-9a-f]{64}")
+SEMANTIC_NAME_RE = re.compile(r"[a-z0-9][a-z0-9-]{0,63}")
+
+
+@dataclass(frozen=True)
+class ArtifactIdentity:
+    captured_sha256: str
+    semantic_sha256: str
+
+
+def _digest(domain: bytes, value: object) -> str:
+    encoded = json.dumps(value, ensure_ascii=True, sort_keys=True, separators=(",", ":")).encode("ascii")
+    return hashlib.sha256(domain + encoded).hexdigest()
+
+
+def artifact_identity(*, path: str, mode: str, size: int, sha256: str, semantic_output_sha256: str) -> ArtifactIdentity:
+    parsed = PurePosixPath(path)
+    if not path or parsed.is_absolute() or parsed.as_posix() != path or ".." in parsed.parts or "\\" in path or "\x00" in path:
+        raise ValueError("artifact path must be safe and repository-relative")
+    if mode not in {"0644", "0755"} or isinstance(size, bool) or size < 0:
+        raise ValueError("artifact mode/size is invalid")
+    if SHA256_RE.fullmatch(sha256) is None or SHA256_RE.fullmatch(semantic_output_sha256) is None:
+        raise ValueError("artifact digest/semantic output is invalid")
+    return ArtifactIdentity(
+        captured_sha256=_digest(
+            b"contextguard.context-pack-captured/v1\0",
+            {"mode": mode, "path": path, "sha256": sha256, "size": size},
+        ),
+        semantic_sha256=_digest(
+            b"contextguard.context-pack-semantic/v1\0",
+            {"semantic_output_sha256": semantic_output_sha256},
+        ),
+    )
+
+
+def _captured_file(root: Path, relative: str, semantic_output_sha256: str) -> dict[str, Any]:
+    path = root / relative
+    current = root
+    for part in PurePosixPath(relative).parts:
+        current = current / part
+        if stat.S_ISLNK(current.lstat().st_mode):
+            raise ValueError(f"identity artifact contains a symlink: {relative}")
+    metadata = path.lstat()
+    if not stat.S_ISREG(metadata.st_mode) or metadata.st_nlink != 1:
+        raise ValueError(f"identity artifact is not a regular file: {relative}")
+    mode = f"{stat.S_IMODE(metadata.st_mode):04o}"
+    if mode not in {"0644", "0755"} or metadata.st_size > 4 * 1024 * 1024:
+        raise ValueError(f"identity artifact mode or size is unsafe: {relative}")
+    raw = path.read_bytes()
+    after = path.lstat()
+    if (metadata.st_dev, metadata.st_ino, metadata.st_size, metadata.st_mtime_ns) != (after.st_dev, after.st_ino, after.st_size, after.st_mtime_ns):
+        raise ValueError(f"identity artifact changed while reading: {relative}")
+    digest = hashlib.sha256(raw).hexdigest()
+    identity = artifact_identity(
+        path=relative, mode=mode, size=len(raw), sha256=digest,
+        semantic_output_sha256=semantic_output_sha256,
+    )
+    return {
+        "captured_sha256": identity.captured_sha256,
+        "mode": mode,
+        "path": relative,
+        "semantic_sha256": identity.semantic_sha256,
+        "sha256": digest,
+        "size": len(raw),
+    }
+
+
+def derive_manifest_identities(root: Path, manifest: dict[str, Any]) -> list[dict[str, Any]]:
+    if set(manifest) != {"modules", "schema_version", "semantic_oracle_sha256"} or manifest.get("schema_version") != "contextguard.context-pack-modules/v1":
+        raise ValueError("invalid context-pack module manifest")
+    modules = manifest.get("modules")
+    oracle = manifest.get("semantic_oracle_sha256")
+    if not isinstance(oracle, str) or SHA256_RE.fullmatch(oracle) is None:
+        raise ValueError("invalid context-pack semantic oracle")
+    if not isinstance(modules, list) or not modules:
+        raise ValueError("context-pack module manifest is empty")
+    derived = []
+    for entry in modules:
+        if not isinstance(entry, dict) or set(entry) != {"canonical_path", "plugin_path", "role", "semantic_output"}:
+            raise ValueError("invalid context-pack module entry")
+        role = entry["role"]
+        semantic = entry["semantic_output"]
+        if (
+            not isinstance(role, str)
+            or SEMANTIC_NAME_RE.fullmatch(role) is None
+            or not isinstance(semantic, str)
+            or SEMANTIC_NAME_RE.fullmatch(semantic) is None
+        ):
+            raise ValueError("invalid context-pack semantic declaration")
+        module_oracle = _digest(
+            b"contextguard.context-pack-module-semantic/v1\0",
+            {
+                "oracle_sha256": oracle,
+                "role": role,
+                "semantic_output": semantic,
+            },
+        )
+        derived.append({
+            "role": role,
+            "canonical": _captured_file(root, entry["canonical_path"], module_oracle),
+            "plugin": _captured_file(root, entry["plugin_path"], module_oracle),
+        })
+    return derived

package/plugins/context-guard/lib/context_pack_receipts.py

@@ -0,0 +1,9 @@
+"""Narrow canonical receipt serialization primitives used by the context packer."""
+from __future__ import annotations
+
+import json
+from typing import Any
+
+
+def canonical_json_bytes(value: Any) -> bytes:
+    return json.dumps(value, ensure_ascii=True, sort_keys=True, separators=(",", ":")).encode("ascii")

package/plugins/context-guard/lib/context_pack_rendering.py

@@ -0,0 +1,12 @@
+"""Narrow byte-identity rendering primitives used by the context packer."""
+from __future__ import annotations
+
+import hashlib
+
+
+def byte_len(text: str) -> int:
+    return len(text.encode("utf-8", errors="replace"))
+
+
+def sha256_text(text: str) -> str:
+    return hashlib.sha256(text.encode("utf-8", errors="replace")).hexdigest()

package/plugins/context-guard/lib/context_pack_scanning.py

@@ -0,0 +1,10 @@
+"""Narrow source-scanning primitives used by the context packer."""
+from __future__ import annotations
+
+
+def input_limit_exceeded(*, bytes_read: int, lines_read: int, max_bytes: int, max_lines: int) -> str | None:
+    if bytes_read > max_bytes:
+        return "source_input_bytes_exceeded"
+    if lines_read > max_lines:
+        return "source_input_lines_exceeded"
+    return None

package/plugins/context-guard/lib/context_pack_selection.py

@@ -0,0 +1,6 @@
+"""Narrow deterministic selection primitives used by the context packer."""
+from __future__ import annotations
+
+
+def priority_key(priority: int, input_index: int, path: str) -> tuple[int, int, str]:
+    return (-priority, input_index, path)

package/plugins/context-guard/lib/credential_policy.py

@@ -7,7 +7,9 @@ import re
 SECRET_KEY = (
     r"[A-Za-z0-9_.-]*(?:api[_-]?key|apikey|token|secret|password|passwd|pwd|"
     r"private[_-]?key|access[_-]?key|client[_-]?secret|credential|signature|sig|"
-    r"ssh[_-]?key|pgp[_-]?private[_-]?key)[A-Za-z0-9_.-]*"
+    r"ssh[_-]?key|ssh[_-]?command|pgp[_-]?private[_-]?key)[A-Za-z0-9_.-]*"
+    r"|(?:pass|[A-Za-z0-9_.-]+[._-]pass)"
+    r"(?:[._-](?:v\d+|prod|production|dev|test|backup))?|smtp[_-]?pass"
     r"|(?:session(?:[_-]?(?:id|token))?|sessionid|sid|jsessionid|"
     r"csrf(?:[_-]?token)?|xsrf(?:[_-]?token)?)"
     r"|AWS_ACCESS_KEY_ID|AWS_SECRET_ACCESS_KEY|AWS_SESSION_TOKEN|"
@@ -34,6 +36,7 @@ EXACT_SENSITIVE_KEYS = frozenset(
         "client_secret",
         "cookie",
         "credential",
+        "credential_helper",
         "credentials",
         "csrf",
         "csrf_token",
@@ -41,6 +44,7 @@ EXACT_SENSITIVE_KEYS = frozenset(
         "id_token",
         "jsessionid",
         "jwt",
+        "pass",
         "password",
         "passwd",
         "private_key",
@@ -57,6 +61,9 @@ EXACT_SENSITIVE_KEYS = frozenset(
         "sid",
         "sig",
         "signature",
+        "smtp_pass",
+        "smtppass",
+        "ssh_command",
         "ssh_key",
         "sshkey",
         "token",
@@ -80,10 +87,11 @@ SENSITIVE_KEY_SUFFIXES = (
     "_secret",
     "_secret_key",
     "_session_token",
+    "_ssh_command",
     "_token",
 )
 SENSITIVE_KEY_QUALIFIER_RE = re.compile(
-    r"(?:^|_)(?:api_?key|apikey|token|secret|password|passwd|pwd|"
+    r"(?:^|_)(?:api_?key|apikey|token|secret|password|passwd|pass|pwd|"
     r"private_key|access_key|client_secret|credential|signature|sig|"
     r"session_id|session_token)(?:_(?:v\d+|prod|production|dev|test|backup))?$"
 )