@taewooopark/agent-blackbox 0.46.3 → 0.47.0

package/dist/agent-blackbox.plugin.mjs

@@ -12,6 +12,7 @@ var traceHosts = [
   "hermes",
   "custom"
 ];
+var agentRoles = ["primary", "subagent", "system", "unknown"];
 var traceEventKinds = [
   "session_created",
   "session_updated",
@@ -84,6 +85,7 @@ function createTraceEvent(seq, input) {
     ...input.cwd ? { cwd: input.cwd } : {},
     ...input.agentId ? { agentId: input.agentId } : {},
     ...input.agentRole ? { agentRole: input.agentRole } : {},
+    ...input.agentLabel ? { agentLabel: input.agentLabel } : {},
     ...input.turnId ? { turnId: input.turnId } : {},
     kind: input.kind,
     ...input.summary ? { summary: input.summary } : {},
@@ -115,6 +117,12 @@ function validateTraceEvent(event) {
   if (event.cwd !== void 0 && typeof event.cwd !== "string") {
     errors.push("cwd must be a string when present");
   }
+  optionalEnum(event, "agentRole", agentRoles, errors);
+  optionalString(event, "agentId", errors);
+  optionalString(event, "agentLabel", errors);
+  optionalString(event, "parentSessionId", errors);
+  optionalString(event, "turnId", errors);
+  optionalString(event, "summary", errors);
   requireEnum(event, "kind", traceEventKinds, errors);
   requireEnum(event, "sensitivity", dataSensitivities, errors);
   if (!isRecord(event.payload)) {
@@ -164,6 +172,16 @@ function requireEnum(value, key, allowed, errors) {
     errors.push(`${key} must be one of ${allowed.join(", ")}`);
   }
 }
+function optionalString(value, key, errors) {
+  if (value[key] !== void 0 && typeof value[key] !== "string") {
+    errors.push(`${key} must be a string when present`);
+  }
+}
+function optionalEnum(value, key, allowed, errors) {
+  if (value[key] !== void 0 && (typeof value[key] !== "string" || !allowed.includes(value[key]))) {
+    errors.push(`${key} must be one of ${allowed.join(", ")} when present`);
+  }
+}
 
 // packages/core/src/redaction.ts
 var defaultRedactionRules = [
@@ -184,7 +202,10 @@ var defaultRedactionRules = [
   },
   {
     name: "private-key",
-    pattern: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+    // Tempered quantifier: the body cannot cross another BEGIN marker. Without it, a
+    // lone BEGIN with no END forces a scan to end-of-string from every BEGIN — O(n²)
+    // backtracking on untrusted tool output peppered with BEGIN markers (slow-path DoS).
+    pattern: /-----BEGIN [A-Z ]*PRIVATE KEY-----(?:(?!-----BEGIN )[\s\S])*?-----END [A-Z ]*PRIVATE KEY-----/g,
     replacement: "[REDACTED_PRIVATE_KEY]"
   }
 ];