@mrciphersmith/keryx 0.3.20 → 0.3.22

package/dist/cli.js

@@ -9080,6 +9080,24 @@ var init_config = __esm(() => {
 });
 
 // src/security/detect/entropy.ts
+function isAdjacentLabel(content, start) {
+  const before = lastLineOf(content.slice(Math.max(0, start - LABEL_WINDOW), start));
+  if (ADJACENT_LABEL.test(before)) {
+    return true;
+  }
+  if (before.trim().length > 0) {
+    return false;
+  }
+  const lineStart = content.lastIndexOf(`
+`, start - 1);
+  if (lineStart < 0) {
+    return false;
+  }
+  const prevLineStart = content.lastIndexOf(`
+`, lineStart - 1) + 1;
+  const prevLine = content.slice(prevLineStart, lineStart);
+  return CONTINUATION_LABEL_LINE_RE.test(prevLine);
+}
 function isHexBlob(value) {
   return HEX_BLOB.test(value) && /[a-f]/i.test(value);
 }
@@ -9279,12 +9297,19 @@ function looksSecretShapedIn(text) {
   return secretShapedCandidatesIn(text).length > 0;
 }
 function labelledPieceQualifies(piece) {
-  const base = bareShapeQualifies(piece);
-  if (base.qualifies) {
-    return { entropy: base.entropy };
-  }
   if (isAllowShapedValue(piece)) {
-    return { entropy: base.entropy };
+    return { entropy: shannonEntropy(piece) };
+  }
+  if (isHexBlob(piece)) {
+    return { entropy: shannonEntropy(piece) };
+  }
+  if (!/[0-9]/.test(piece) && !/[+=]/.test(piece)) {
+    return null;
+  }
+  const withoutSeparators = piece.replace(/[-_.+]/g, "");
+  const entropy = shannonEntropy(withoutSeparators.length > 0 ? withoutSeparators : piece);
+  if (entropy >= 3.6) {
+    return { entropy };
   }
   return null;
 }
@@ -9323,9 +9348,9 @@ function detectEntropy(content) {
     if (urlSpans.some((u) => start < u.end && end > u.start)) {
       continue;
     }
-    const { qualifies, entropy } = bareShapeQualifies(value);
-    if (qualifies) {
-      matches.push(buildMatch(start, end, value, entropy));
+    const found = labelledPieceQualifies(value);
+    if (found !== null) {
+      matches.push(buildMatch(start, end, value, found.entropy));
     }
   }
   TOKEN.lastIndex = 0;
@@ -9340,8 +9365,7 @@ function detectEntropy(content) {
     if (matches.some((existing) => start < existing.end && end > existing.start)) {
       continue;
     }
-    const before = lastLineOf(content.slice(Math.max(0, start - LABEL_WINDOW), start));
-    if (!ADJACENT_LABEL.test(before)) {
+    if (!isAdjacentLabel(content, start)) {
       continue;
     }
     const head = TOKEN_HEAD.exec(value)?.[0] ?? value;
@@ -9363,9 +9387,10 @@ function detectEntropy(content) {
   }
   return matches.sort((a, b) => a.start - b.start);
 }
-var SENSITIVE_LABEL_WORDS = "key|secret|token|password|passwd|api|credential|auth|bearer", caseless = (words) => words.replace(/[a-z]/g, (ch) => `[${ch}${ch.toUpperCase()}]`), ADJACENT_LABEL, LABEL_ASSIGNMENT_RE, TOKEN, TOKEN_HEAD, LABEL_WINDOW = 40, HEX_BLOB, FULL_GIT_SHA_RE, UUID_RE, INTEGRITY_RE, TAG_MAX_LETTER_RUN = 8, SLUG_HEX_TAIL_RE, URL_SPAN_RE, URL_TRAILING_PUNCTUATION_RE, URL_COMPONENT_MIN_LENGTH = 20;
+var SENSITIVE_LABEL_WORDS = "key|secret|token|password|passwd|api|credential|auth|bearer", caseless = (words) => words.replace(/[a-z]/g, (ch) => `[${ch}${ch.toUpperCase()}]`), FILLER_WORDS = "is|was|set|to|the|value|now", ADJACENT_LABEL, CONTINUATION_LABEL_LINE_RE, LABEL_ASSIGNMENT_RE, TOKEN, TOKEN_HEAD, LABEL_WINDOW = 40, HEX_BLOB, FULL_GIT_SHA_RE, UUID_RE, INTEGRITY_RE, TAG_MAX_LETTER_RUN = 8, SLUG_HEX_TAIL_RE, URL_SPAN_RE, URL_TRAILING_PUNCTUATION_RE, URL_COMPONENT_MIN_LENGTH = 20;
 var init_entropy = __esm(() => {
-  ADJACENT_LABEL = new RegExp(`(?:^|[^A-Za-z0-9])(?:${caseless(SENSITIVE_LABEL_WORDS)})[A-Za-z0-9_-]*["']?\\s*[:=]?\\s*["']?$`);
+  ADJACENT_LABEL = new RegExp(`(?:^|[^A-Za-z0-9])(?:${caseless(SENSITIVE_LABEL_WORDS)})[A-Za-z0-9_-]*` + `(?:\\s+(?:${caseless(FILLER_WORDS)})){0,2}` + `["']?\\s*[:=]?\\s*["']?$`);
+  CONTINUATION_LABEL_LINE_RE = new RegExp(`(?:^|[^A-Za-z0-9])(?:${caseless(SENSITIVE_LABEL_WORDS)})[A-Za-z0-9_-]*["']?\\s*[:=]?\\s*\\\\\\s*$`);
   LABEL_ASSIGNMENT_RE = new RegExp(`(?:^|[^A-Za-z0-9])(?:${SENSITIVE_LABEL_WORDS})[A-Za-z0-9_-]*"?\\s*=\\s*"?([A-Za-z0-9+/_=-]{6,})`, "gi");
   TOKEN = /[A-Za-z0-9+/=_-]{20,}(?:\.[A-Za-z0-9+/=_-]{6,})*/g;
   TOKEN_HEAD = /^[A-Za-z0-9+/=_-]+/;
@@ -18093,7 +18118,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@mrciphersmith/keryx",
-    version: "0.3.20",
+    version: "0.3.22",
     description: "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
     private: false,
     publishConfig: {
@@ -129152,6 +129177,37 @@ function createSystemWebWorkerRunner() {
 
 // src/harness/web/outbound-secret.ts
 init_service4();
+var HEX32_FRAGMENT = "[0-9a-f]{32}";
+var SHA40_FRAGMENT = "[0-9a-f]{40}";
+var GIST_HEX32_PATH_RE = new RegExp(`^/(?:[^/]+/)?(${HEX32_FRAGMENT})/?$`, "i");
+var GITHUB_COMMIT_OR_BLOB_PATH_RE = new RegExp(`/(?:commit|blob)/(${SHA40_FRAGMENT})(?:/|$)`, "i");
+var GITLAB_COMMIT_PATH_RE = new RegExp(`/-/commit/(${SHA40_FRAGMENT})(?:/|$)`, "i");
+function knownPublicIdentifierIn(url) {
+  const host = url.hostname.toLowerCase();
+  if (host === "gist.github.com") {
+    return GIST_HEX32_PATH_RE.exec(url.pathname)?.[1] ?? null;
+  }
+  if (host === "github.com") {
+    return GITHUB_COMMIT_OR_BLOB_PATH_RE.exec(url.pathname)?.[1] ?? null;
+  }
+  if (host === "gitlab.com") {
+    return GITLAB_COMMIT_PATH_RE.exec(url.pathname)?.[1] ?? null;
+  }
+  return null;
+}
+function stripKnownPublicIdentifier(text) {
+  let url;
+  try {
+    url = new URL(text);
+  } catch {
+    return text;
+  }
+  const identifier = knownPublicIdentifierIn(url);
+  if (identifier === null) {
+    return text;
+  }
+  return text.replace(identifier, "0".repeat(identifier.length));
+}
 function safeDecodeComponent(value) {
   try {
     return decodeURIComponent(value);
@@ -129195,13 +129251,14 @@ function anyComponentLooksSecret(text) {
   return false;
 }
 function containsOutboundSecret(text) {
-  if (detectSecrets(text).length > 0) {
+  const scanText = stripKnownPublicIdentifier(text);
+  if (detectSecrets(scanText).length > 0) {
     return true;
   }
-  if (isEntropyBackendEnabled() && detectEntropy(text).length > 0) {
+  if (isEntropyBackendEnabled() && detectEntropy(scanText).length > 0) {
     return true;
   }
-  return anyComponentLooksSecret(text);
+  return anyComponentLooksSecret(scanText);
 }
 async function recordOutboundSecretFinding(cwd, tool, subject) {
   try {
@@ -151074,6 +151131,15 @@ function reinsertMainQueueItem(items, at, item) {
   next.splice(insertAt, 0, item);
   return next;
 }
+function drainIdleMainQueue(items, options) {
+  if (!options.isIdle())
+    return false;
+  const next = options.takeForced() ?? items.shift();
+  if (next === undefined)
+    return false;
+  options.dispatch(next);
+  return true;
+}
 
 // src/tui/queue-nav.ts
 var QUEUE_NAV_ACTIONS = ["force", "edit", "delete"];
@@ -159970,6 +160036,14 @@ Staying in the current session.
             const id = `mq${mainQueueSeq++}`;
             mainQueue.push({ id, question: line, displayQuestion: displayLine });
             paintMainQueue();
+            drainIdleMainQueue(mainQueue, {
+              isIdle: () => !destroyed && !chrome.isBusy() && !foregroundOperation.isActive && !forceHandoff.isAwaitingSettlement && leaseView()?.held() !== true,
+              takeForced: () => forceHandoff.takeNext(),
+              dispatch: (next) => {
+                paintMainQueue();
+                runLine(next.question);
+              }
+            });
           } else {
             appendUserEcho(otui, r, transcript, {
               id: `side-q${uid++}`,

package/dist/core.js

@@ -4029,6 +4029,24 @@ var init_config2 = __esm(() => {
 });
 
 // src/security/detect/entropy.ts
+function isAdjacentLabel(content, start) {
+  const before = lastLineOf(content.slice(Math.max(0, start - LABEL_WINDOW), start));
+  if (ADJACENT_LABEL.test(before)) {
+    return true;
+  }
+  if (before.trim().length > 0) {
+    return false;
+  }
+  const lineStart = content.lastIndexOf(`
+`, start - 1);
+  if (lineStart < 0) {
+    return false;
+  }
+  const prevLineStart = content.lastIndexOf(`
+`, lineStart - 1) + 1;
+  const prevLine = content.slice(prevLineStart, lineStart);
+  return CONTINUATION_LABEL_LINE_RE.test(prevLine);
+}
 function isHexBlob(value) {
   return HEX_BLOB.test(value) && /[a-f]/i.test(value);
 }
@@ -4228,12 +4246,19 @@ function looksSecretShapedIn(text) {
   return secretShapedCandidatesIn(text).length > 0;
 }
 function labelledPieceQualifies(piece) {
-  const base = bareShapeQualifies(piece);
-  if (base.qualifies) {
-    return { entropy: base.entropy };
-  }
   if (isAllowShapedValue(piece)) {
-    return { entropy: base.entropy };
+    return { entropy: shannonEntropy(piece) };
+  }
+  if (isHexBlob(piece)) {
+    return { entropy: shannonEntropy(piece) };
+  }
+  if (!/[0-9]/.test(piece) && !/[+=]/.test(piece)) {
+    return null;
+  }
+  const withoutSeparators = piece.replace(/[-_.+]/g, "");
+  const entropy = shannonEntropy(withoutSeparators.length > 0 ? withoutSeparators : piece);
+  if (entropy >= 3.6) {
+    return { entropy };
   }
   return null;
 }
@@ -4272,9 +4297,9 @@ function detectEntropy(content) {
     if (urlSpans.some((u) => start < u.end && end > u.start)) {
       continue;
     }
-    const { qualifies, entropy } = bareShapeQualifies(value);
-    if (qualifies) {
-      matches.push(buildMatch(start, end, value, entropy));
+    const found = labelledPieceQualifies(value);
+    if (found !== null) {
+      matches.push(buildMatch(start, end, value, found.entropy));
     }
   }
   TOKEN.lastIndex = 0;
@@ -4289,8 +4314,7 @@ function detectEntropy(content) {
     if (matches.some((existing) => start < existing.end && end > existing.start)) {
       continue;
     }
-    const before = lastLineOf(content.slice(Math.max(0, start - LABEL_WINDOW), start));
-    if (!ADJACENT_LABEL.test(before)) {
+    if (!isAdjacentLabel(content, start)) {
       continue;
     }
     const head = TOKEN_HEAD.exec(value)?.[0] ?? value;
@@ -4312,9 +4336,10 @@ function detectEntropy(content) {
   }
   return matches.sort((a, b) => a.start - b.start);
 }
-var SENSITIVE_LABEL_WORDS = "key|secret|token|password|passwd|api|credential|auth|bearer", caseless = (words) => words.replace(/[a-z]/g, (ch) => `[${ch}${ch.toUpperCase()}]`), ADJACENT_LABEL, LABEL_ASSIGNMENT_RE, TOKEN, TOKEN_HEAD, LABEL_WINDOW = 40, HEX_BLOB, FULL_GIT_SHA_RE, UUID_RE, INTEGRITY_RE, TAG_MAX_LETTER_RUN = 8, SLUG_HEX_TAIL_RE, URL_SPAN_RE, URL_TRAILING_PUNCTUATION_RE, URL_COMPONENT_MIN_LENGTH = 20;
+var SENSITIVE_LABEL_WORDS = "key|secret|token|password|passwd|api|credential|auth|bearer", caseless = (words) => words.replace(/[a-z]/g, (ch) => `[${ch}${ch.toUpperCase()}]`), FILLER_WORDS = "is|was|set|to|the|value|now", ADJACENT_LABEL, CONTINUATION_LABEL_LINE_RE, LABEL_ASSIGNMENT_RE, TOKEN, TOKEN_HEAD, LABEL_WINDOW = 40, HEX_BLOB, FULL_GIT_SHA_RE, UUID_RE, INTEGRITY_RE, TAG_MAX_LETTER_RUN = 8, SLUG_HEX_TAIL_RE, URL_SPAN_RE, URL_TRAILING_PUNCTUATION_RE, URL_COMPONENT_MIN_LENGTH = 20;
 var init_entropy = __esm(() => {
-  ADJACENT_LABEL = new RegExp(`(?:^|[^A-Za-z0-9])(?:${caseless(SENSITIVE_LABEL_WORDS)})[A-Za-z0-9_-]*["']?\\s*[:=]?\\s*["']?$`);
+  ADJACENT_LABEL = new RegExp(`(?:^|[^A-Za-z0-9])(?:${caseless(SENSITIVE_LABEL_WORDS)})[A-Za-z0-9_-]*` + `(?:\\s+(?:${caseless(FILLER_WORDS)})){0,2}` + `["']?\\s*[:=]?\\s*["']?$`);
+  CONTINUATION_LABEL_LINE_RE = new RegExp(`(?:^|[^A-Za-z0-9])(?:${caseless(SENSITIVE_LABEL_WORDS)})[A-Za-z0-9_-]*["']?\\s*[:=]?\\s*\\\\\\s*$`);
   LABEL_ASSIGNMENT_RE = new RegExp(`(?:^|[^A-Za-z0-9])(?:${SENSITIVE_LABEL_WORDS})[A-Za-z0-9_-]*"?\\s*=\\s*"?([A-Za-z0-9+/_=-]{6,})`, "gi");
   TOKEN = /[A-Za-z0-9+/=_-]{20,}(?:\.[A-Za-z0-9+/=_-]{6,})*/g;
   TOKEN_HEAD = /^[A-Za-z0-9+/=_-]+/;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrciphersmith/keryx",
-  "version": "0.3.20",
+  "version": "0.3.22",
   "description": "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   "private": false,
   "publishConfig": {

package/src/gdskills/bundled/skills/review/review-orchestrator/SKILL.md

@@ -1587,10 +1587,12 @@ Fix: <concrete>
 - <what was checked> — <how>
 
 ### How this review was run
-- **Run by:** @<gh-login> with `review-orchestrator`
+- **Workflow:** `review-orchestrator`
 - **Scope:** `<base>..<head>`, round N, PR #N
-- **Orchestrator:** `review-orchestrator`
-- **<actual model name>:** <reviewers on that model>
+- **Models:** <actual models and reviewers, or not recorded>
+- **Tools:** <tools actually invoked, or not recorded>
+- **Skills:** <skills actually used, or not recorded>
+- **Subagents:** <dispatched reviewers and models, or none when confirmed; otherwise not recorded>
 - **Not run:** <reviewer — reason>
 - **Verification:** <mode>; confirmed N, refuted N, unverifiable N, unverified N
 ```
@@ -1663,17 +1665,15 @@ Automation values, names unchanged:
 
 Default is do not publish. No resolvable PR number means skip and say so.
 
-The comment is the report rendered from `templates/review-report.md`, English, with the domain file chosen above (`templates/pr-comment-frontend.md` / `templates/pr-comment-backend.md`) — never a summary written freehand. It does not use a tool heading, a finding table, or a meta table. It does not carry a co-author line, a `Generated with` trailer, or any sentence that names a vendor or a product as the author. Say who ran the orchestrator and which reviewers ran; do not sign the comment as them.
+The comment is the report rendered from `templates/review-report.md`, English, with the domain file chosen above (`templates/pr-comment-frontend.md` / `templates/pr-comment-backend.md`) — never a summary written freehand. It does not use a tool heading, a finding table, or a meta table. It does not carry a co-author line, a `Generated with` trailer, or any sentence that names a vendor or a product as the author. Name the workflow and reviewers that actually ran, with models, tools, skills and subagents. Never identify the operator from `gh auth status`, git config or a credential; do not sign the comment as a person, reviewer or model.
 
 The follow-up file path and the metadata rules (real model names, Run vs Not run, no `adaptive` in the model slot) live in that same template. Write the body to a temp file and post with `gh pr comment <n> --body-file <file>`.
 
 **No GitHub write without an approved draft.** Before ANY write — the comment, a thread reply, `keryx review comments reply`, a review — show the user the rendered body and wait for explicit approval of that body.
 Picking A or B above chooses *whether* to publish, not *what*; a comment is public and cannot be unsent. With no user to answer (a dispatched run), do not write: hand the rendered body back to the caller.
 
-Re-read head and the thread immediately before posting. If head moved, re-check
-the findings against the new head and name the commits that were not reviewed.
-Do not post a finding another reviewer already filed on this head; if yours
-extends theirs, cite theirs.
+Re-read head and thread before posting. If head moved, re-check findings
+and name unchecked commits. Do not duplicate findings; cite extended ones.
 
 ## Job Context Awareness
 

package/src/gdskills/bundled/skills/review/review-orchestrator/templates/review-report.md

@@ -95,14 +95,19 @@ Do not list a checklist item that was not checked. Do not praise.
 
 ## How this review was run
 
-A list, not a meta table. Keep every fact the old Meta table carried.
+A factual run inventory, not an author or account signature. List only steps
+confirmed by the run record; never infer an operator identity from `gh auth`,
+git config, a credential or a PR author. Use `not recorded` when evidence for
+a tool, skill or model is unavailable; use `none` only when the run proves none.
 
 ```markdown
 ### How this review was run
-- **Run by:** @<gh-login> with `review-orchestrator`. Severity and lanes per the repository review rules, else the canonical rubric in this skill.
+- **Workflow:** `review-orchestrator`; severity and lanes per the repository review rules, else the canonical rubric in this skill.
 - **Scope:** `<base>..<head>`, round N, PR #N. Unchecked commits: <list or none>.
-- **Orchestrator:** `review-orchestrator`
-- **<actual model name>:** <reviewers dispatched on it, comma-separated>
+- **Models:** <actual model names and the reviewers that ran on each; or not recorded>.
+- **Tools:** <tools actually invoked for this review and their roles; or not recorded>.
+- **Skills:** <skills actually loaded or executed and their roles; or not recorded>.
+- **Subagents:** <dispatched subagents, their reviewer roles and actual models; or none when confirmed, otherwise not recorded>.
 - **Fallback:** <reviewer> via `general-purpose` because <native agent type unavailable | no bundled agent>. Or `none`.
 - **Not run:** <reviewer> — <short reason>. Or `none`.
 - **Selection:** <auto-detected scope | explicit flags | optional groups the user picked>
@@ -118,8 +123,8 @@ Model rules, unchanged from the old metadata table:
 - Name the model that actually ran. Never write `adaptive`, `inherit`,
   `unsupported`, or `current-session` in the model slot.
 - Group reviewers under the model they ran on. One bullet per model.
-- `Model strategy` (`ask` or `adaptive`) goes on the Run by line or under
-  Selection, not in place of a model name.
+- `Model strategy` (`ask` or `adaptive`) goes under Selection, never in
+  place of an actual model name.
 - Keep **Run** complete. If Not run is long, group it with counts and notable
   names; the full list belongs in the follow-up file.