@lmzhen/dsh-evolution-review 0.2.0 → 0.3.0

package/lib/index.js

@@ -1,37 +1,8 @@
 import { createHash, randomUUID } from "node:crypto";
 import z from "@deepseek-ai/schemastery";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
-import { COMPLETION_SKILL_REVIEW_PROMPT, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_USER_CHAR_LIMIT, PROMPT_BUNDLE, SkillLibrary, advanceReview, evolutionIoAdapter, foldTurn, resolveOrigins, reviewPrompt, verifyPromptBundle } from "@lmzhen/dsh-evolution-core";
+import { COMPLETION_SKILL_REVIEW_PROMPT, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_USER_CHAR_LIMIT, PROMPT_BUNDLE, SkillLibrary, advanceReview, evolutionIoAdapter, foldTurn, redactSecrets, resolveOrigins, reviewPrompt, verifyPromptBundle } from "@lmzhen/dsh-evolution-core";
 import { validateEvolutionPlan } from "@lmzhen/dsh-evolution-plan-validator";
-//#region lib/types/redact.js
-/**
-* Review-input redaction. Review/curator subagents are the one place where a
-* cross-session conversation snapshot leaves the owning session's context, so
-* credential-shaped text is masked before it is sent. Redaction is best-effort
-* and conservative: it targets well-known secret shapes and inline
-* assignment patterns, never wholesale content.
-*/
-const SECRET_PATTERNS = [
-	["openai-style key", /sk-[A-Za-z0-9_-]{16,}/g],
-	["aws access key", /AKIA[0-9A-Z]{16}/g],
-	["github token", /gh[pousr]_[A-Za-z0-9]{20,}/g],
-	["gitlab token", /glpat-[A-Za-z0-9_-]{16,}/g],
-	["slack token", /xox[baprs]-[A-Za-z0-9-]{10,}/g],
-	["jwt", /eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g],
-	["bearer credential", /Bearer [A-Za-z0-9._~+/=\-]{16,}/g],
-	["inline assignment", /(\b(?:token|api[_-]?key|secret|password|passwd)\b[\s]*[:=][\s]*[\"\x27]?)([A-Z0-9._~+/=\-]{12,})/gi]
-];
-/**
-* Mask credential-shaped text in a review request.
-* @param text - the assembled review request text.
-* @returns the text with matched secrets replaced by `<redacted>`.
-*/
-function redactReviewSecrets(text) {
-	let out = text;
-	for (const [, pattern] of SECRET_PATTERNS) out = out.replace(pattern, (_match, p1) => p1 === void 0 ? "<redacted>" : `${p1}<redacted>`);
-	return out;
-}
-//#endregion
 //#region lib/types/index.js
 /**
 * Background review orchestration: signal gate → one-shot subagent → trusted plan execution.
@@ -150,7 +121,7 @@ function apply(ctx, rawConfig) {
 		try {
 			const routingPolicy = ctx.get("evolutionPolicy");
 			const model = kind === "memory" ? routingPolicy?.get().memoryReviewModel ?? "deepseek-v4-flash" : routingPolicy?.get().skillReviewModel ?? "deepseek-v4-pro";
-			const reviewText = redactReviewSecrets(buildReviewRequest(session, kind, signal, config.reviewContextMessages, config.reviewMessageChars));
+			const reviewText = redactSecrets(buildReviewRequest(session, kind, signal, config.reviewContextMessages, config.reviewMessageChars));
 			const agentOptions = { model };
 			if (config.reviewProvider) agentOptions.provider = config.reviewProvider;
 			const run = await subagents.start("spawn", {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-review",
   "description": "Background review orchestration (community build)",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "publishConfig": {
     "access": "public"
   },
@@ -33,8 +33,8 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-core": "^0.2.0",
-    "@lmzhen/dsh-evolution-plan-validator": "^0.2.0"
+    "@lmzhen/dsh-evolution-core": "^0.3.0",
+    "@lmzhen/dsh-evolution-plan-validator": "^0.3.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
@@ -43,7 +43,7 @@
     "@deepseek-ai/dsh-llm": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-session": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-tools": "^0.1.1-rc.2",
-    "@lmzhen/dsh-evolution-state": "^0.2.0"
+    "@lmzhen/dsh-evolution-state": "^0.3.0"
   },
   "devDependencies": {
     "@deepseek-ai/dsh-agent": "^0.1.1-rc.2",
@@ -54,8 +54,8 @@
     "@deepseek-ai/dsh-session-persistence": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-tools": "^0.1.1-rc.2",
-    "@lmzhen/dsh-evolution-core": "^0.2.0",
-    "@lmzhen/dsh-evolution-plan-validator": "^0.2.0",
-    "@lmzhen/dsh-evolution-state": "^0.2.0"
+    "@lmzhen/dsh-evolution-core": "^0.3.0",
+    "@lmzhen/dsh-evolution-plan-validator": "^0.3.0",
+    "@lmzhen/dsh-evolution-state": "^0.3.0"
   }
 }

package/lib/types/redact.d.ts

@@ -1,14 +0,0 @@
-/**
- * Review-input redaction. Review/curator subagents are the one place where a
- * cross-session conversation snapshot leaves the owning session's context, so
- * credential-shaped text is masked before it is sent. Redaction is best-effort
- * and conservative: it targets well-known secret shapes and inline
- * assignment patterns, never wholesale content.
- */
-/**
- * Mask credential-shaped text in a review request.
- * @param text - the assembled review request text.
- * @returns the text with matched secrets replaced by `<redacted>`.
- */
-export declare function redactReviewSecrets(text: string): string;
-//# sourceMappingURL=redact.d.ts.map