@poolzin/pool-bot 2026.3.4 → 2026.3.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (81) hide show
  1. package/CHANGELOG.md +10 -0
  2. package/assets/pool-bot-icon-dark.png +0 -0
  3. package/assets/pool-bot-logo-1.png +0 -0
  4. package/assets/pool-bot-mascot.png +0 -0
  5. package/dist/agents/pi-embedded-runner/tool-result-truncation.js +62 -7
  6. package/dist/agents/pi-tools.js +32 -2
  7. package/dist/agents/poolbot-tools.js +12 -0
  8. package/dist/agents/session-write-lock.js +93 -8
  9. package/dist/agents/tools/pdf-native-providers.js +102 -0
  10. package/dist/agents/tools/pdf-tool.helpers.js +86 -0
  11. package/dist/agents/tools/pdf-tool.js +508 -0
  12. package/dist/auto-reply/reply/get-reply.js +6 -0
  13. package/dist/auto-reply/reply/message-preprocess-hooks.js +17 -0
  14. package/dist/build-info.json +3 -3
  15. package/dist/cli/banner.js +20 -1
  16. package/dist/cli/security-cli.js +211 -2
  17. package/dist/cli/tagline.js +7 -0
  18. package/dist/config/types.cli.js +1 -0
  19. package/dist/config/types.security.js +33 -0
  20. package/dist/config/zod-schema.js +15 -0
  21. package/dist/config/zod-schema.providers-core.js +1 -0
  22. package/dist/config/zod-schema.security.js +113 -0
  23. package/dist/cron/normalize.js +3 -0
  24. package/dist/cron/service/jobs.js +48 -0
  25. package/dist/discord/monitor/message-handler.preflight.js +11 -2
  26. package/dist/gateway/http-common.js +6 -1
  27. package/dist/gateway/protocol/schema/cron.js +3 -0
  28. package/dist/gateway/server-channels.js +99 -14
  29. package/dist/gateway/server-cron.js +89 -0
  30. package/dist/gateway/server-health-probes.js +55 -0
  31. package/dist/gateway/server-http.js +5 -0
  32. package/dist/hooks/bundled/session-memory/handler.js +8 -2
  33. package/dist/hooks/fire-and-forget.js +6 -0
  34. package/dist/hooks/internal-hooks.js +64 -19
  35. package/dist/hooks/message-hook-mappers.js +179 -0
  36. package/dist/infra/abort-signal.js +12 -0
  37. package/dist/infra/boundary-file-read.js +118 -0
  38. package/dist/infra/boundary-path.js +594 -0
  39. package/dist/infra/file-identity.js +12 -0
  40. package/dist/infra/fs-safe.js +377 -12
  41. package/dist/infra/hardlink-guards.js +30 -0
  42. package/dist/infra/json-utf8-bytes.js +8 -0
  43. package/dist/infra/net/fetch-guard.js +63 -13
  44. package/dist/infra/net/proxy-env.js +17 -0
  45. package/dist/infra/net/ssrf.js +74 -272
  46. package/dist/infra/path-alias-guards.js +21 -0
  47. package/dist/infra/path-guards.js +13 -1
  48. package/dist/infra/ports-probe.js +19 -0
  49. package/dist/infra/prototype-keys.js +4 -0
  50. package/dist/infra/restart-stale-pids.js +254 -0
  51. package/dist/infra/safe-open-sync.js +71 -0
  52. package/dist/infra/secure-random.js +7 -0
  53. package/dist/media/ffmpeg-limits.js +4 -0
  54. package/dist/media/input-files.js +6 -2
  55. package/dist/media/temp-files.js +12 -0
  56. package/dist/memory/embedding-chunk-limits.js +5 -2
  57. package/dist/memory/embeddings-ollama.js +91 -138
  58. package/dist/memory/embeddings-remote-fetch.js +11 -10
  59. package/dist/memory/embeddings.js +25 -9
  60. package/dist/memory/manager-embedding-ops.js +1 -1
  61. package/dist/memory/post-json.js +23 -0
  62. package/dist/memory/qmd-manager.js +272 -77
  63. package/dist/memory/remote-http.js +33 -0
  64. package/dist/plugin-sdk/windows-spawn.js +214 -0
  65. package/dist/security/capability-guards.js +89 -0
  66. package/dist/security/capability-manager.js +76 -0
  67. package/dist/security/capability.js +147 -0
  68. package/dist/security/index.js +7 -0
  69. package/dist/security/middleware.js +105 -0
  70. package/dist/shared/net/ip-test-fixtures.js +1 -0
  71. package/dist/shared/net/ip.js +303 -0
  72. package/dist/shared/net/ipv4.js +8 -11
  73. package/dist/shared/pid-alive.js +59 -2
  74. package/dist/slack/monitor/context.js +1 -0
  75. package/dist/slack/monitor/message-handler/dispatch.js +14 -1
  76. package/dist/slack/monitor/provider.js +2 -0
  77. package/dist/test-helpers/ssrf.js +13 -0
  78. package/dist/tui/tui.js +9 -4
  79. package/dist/utils/fetch-timeout.js +12 -1
  80. package/docs/adr/003-feature-gap-analysis.md +112 -0
  81. package/package.json +10 -4
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@poolzin/pool-bot",
3
- "version": "2026.3.4",
3
+ "version": "2026.3.7",
4
4
  "description": "🎱 Pool Bot - AI assistant with PLCODE integrations",
5
5
  "keywords": [],
6
6
  "license": "MIT",
@@ -130,6 +130,7 @@
130
130
  "express": "^5.2.1",
131
131
  "file-type": "^21.3.0",
132
132
  "grammy": "^1.40.0",
133
+ "ipaddr.js": "^2.3.0",
133
134
  "jiti": "^2.6.1",
134
135
  "json5": "^2.2.3",
135
136
  "jszip": "^3.10.1",
@@ -186,11 +187,16 @@
186
187
  "pnpm": {
187
188
  "minimumReleaseAge": 2880,
188
189
  "overrides": {
189
- "fast-xml-parser": "5.3.4",
190
+ "hono": "4.11.10",
191
+ "fast-xml-parser": "5.3.8",
192
+ "request": "npm:@cypress/request@3.0.10",
193
+ "request-promise": "npm:@cypress/request-promise@5.0.0",
190
194
  "form-data": "2.5.4",
191
- "qs": "6.14.1",
195
+ "minimatch": "10.2.4",
196
+ "qs": "6.14.2",
197
+ "node-domexception": "npm:@nolyfill/domexception@^1.0.28",
192
198
  "@sinclair/typebox": "0.34.48",
193
- "tar": "7.5.7",
199
+ "tar": "7.5.9",
194
200
  "tough-cookie": "4.1.3"
195
201
  },
196
202
  "onlyBuiltDependencies": [