@tekmidian/pai 1.0.5 → 1.0.7

package/dist/{fallback-Bj2cyVk_.mjs → fallback-CQ8_CuVu.mjs}

@@ -1,234 +1,12 @@
-import { l as claudeHomeDir, t as aibrokerHomeDir } from "./runtime-paths-WsO9sJFc.mjs";
-import { F as resolveProviderKey, L as writeWorkersSection, M as readWorkersSection, P as resolveModelCapability, c as WorkersConfigError } from "./config-CST2uq1v.mjs";
-import { O as readJsonStrict, k as writeJsonAtomic } from "./config-DYbyEe4-.mjs";
-import { u as workersLogDir } from "./paths-DS5VQKoR.mjs";
-import { _ as resolveTarget } from "./routing-BlD_tKjW.mjs";
-import { yt as psTable } from "./controls-OiVVbe-f.mjs";
+import { l as claudeHomeDir, t as aibrokerHomeDir } from "./runtime-paths-twfV23YL.mjs";
+import { F as resolveProviderKey, L as writeWorkersSection, M as readWorkersSection, P as resolveModelCapability, c as WorkersConfigError } from "./config-DGV64YJa.mjs";
+import { O as readJsonStrict, k as writeJsonAtomic } from "./config-SlZ-Z52i.mjs";
+import { u as workersLogDir } from "./paths-BwfwHOvN.mjs";
+import { _ as resolveTarget } from "./routing-CF0wlR-_.mjs";
 import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
-import { isAbsolute, join, relative } from "node:path";
-import { execFileSync, spawn } from "node:child_process";
-import { fileURLToPath } from "node:url";
+import { join } from "node:path";
+import { execFileSync } from "node:child_process";
 
-//#region src/workers/hang-probe.ts
-/**
-* hang-probe.ts — `pai worker test-run -- <command>`: runs a test command and, when it goes silent,
-* tells the model WHERE it is stuck.
-*
-* A synchronous infinite loop blocks Node's event loop, so the test runner cannot even report its own
-* timeout and the model sees nothing. Node's `--report-on-signal` does not help: it is serviced by the
-* event loop (measured: a `while(true){}` process never writes the report). The child therefore runs with a
-* preloaded watchdog (NODE_OPTIONS --require): a worker thread per process that, when a trigger file appears,
-* attaches the inspector to the main thread, pauses it (V8 interrupts a running loop) and writes the call
-* frames. After the command was silent for the idle threshold the wrapper triggers every node process under
-* it and maps the frames to the worktree's files. The worker guard rewrites test commands into this wrapper
-* (see wrapTestCommand).
-*/
-/** Marker line every diagnosis carries; the loop guard keys on it. */
-const HANG_MARKER = "[pai hang probe]";
-const DEFAULT_IDLE_SECS = 60;
-/** Seconds of the first `timeout N` in the command, else null. */
-function timeoutSecs(command) {
-	const m = /\b(?:g?timeout)\s+(?:-[ks]\s+\S+\s+|-\S+\s+)*(\d+(?:\.\d+)?)([smhd]?)\b/.exec(command);
-	if (!m) return null;
-	return Number(m[1]) * {
-		"": 1,
-		s: 1,
-		m: 60,
-		h: 3600,
-		d: 86400
-	}[m[2]];
-}
-function killQuiet(pid, sig) {
-	try {
-		process.kill(pid, sig);
-	} catch {}
-}
-function rmQuiet(f) {
-	try {
-		unlinkSync(f);
-	} catch {}
-}
-const shq = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
-/** The command line test-run executes: the decoded --cmd-b64 payload, else the words after `--`, each shell-quoted. */
-function commandToRun(cmdB64, words) {
-	if (cmdB64) return Buffer.from(cmdB64, "base64").toString("utf8");
-	return words.map(shq).join(" ");
-}
-/** Call frames of one probed process, user code only, files relative to cwd. */
-function userFrames(frames, cwd) {
-	const out = [];
-	for (const f of frames) {
-		let file = f.url;
-		if (file.startsWith("file://")) try {
-			file = fileURLToPath(file);
-		} catch {
-			continue;
-		}
-		if (!file || file.startsWith("node:") || file.includes("node_modules") || !isAbsolute(file)) continue;
-		const rel = relative(cwd, file);
-		if (rel.startsWith("..")) continue;
-		out.push({
-			fn: f.functionName || "(anonymous)",
-			file: rel,
-			line: f.lineNumber + 1
-		});
-	}
-	return out;
-}
-/** The model-facing diagnosis for the reports taken after `idleSecs` of silence. */
-function diagnose(probed, cwd, idleSecs) {
-	const stuck = probed.map((r) => userFrames(r, cwd)).find((f) => f.length > 0);
-	if (stuck) {
-		const [top, ...rest] = stuck;
-		const via = rest[0] ? ` (called from ${rest[0].file}:${rest[0].line} ${rest[0].fn}())` : "";
-		return `${HANG_MARKER} test run hung with no output for ${idleSecs} s; the main thread is stuck in ${top.file}:${top.line} ${top.fn}()${via}. A synchronous loop that never ends blocks the runner's own timeout. Fix that loop; rerunning unchanged will hang again.\n` + stuck.slice(0, 6).map((f) => `  at ${f.fn} (${f.file}:${f.line})`).join("\n");
-	}
-	return `${HANG_MARKER} test run printed nothing for ${idleSecs} s and the main thread is idle in the event loop: it is waiting (async), not spinning. A test awaits a promise, timer, process or socket that never completes (vitest's own per-test timeout ends it unless the test raised it). Find the await and give it an end; rerunning unchanged will wait again.`;
-}
-function listProcs() {
-	try {
-		return psTable("pid=,ppid=,command=").split("\n").flatMap((l) => {
-			const m = /^\s*(\d+)\s+(\d+)\s+(.*)$/.exec(l);
-			return m ? [{
-				pid: Number(m[1]),
-				ppid: Number(m[2]),
-				cmd: m[3]
-			}] : [];
-		});
-	} catch {
-		return [];
-	}
-}
-/** Pids of node processes below `root`. */
-function nodeDescendants(root, procs = listProcs()) {
-	const seen = new Set([root]);
-	for (let grew = true; grew;) {
-		grew = false;
-		for (const p of procs) if (!seen.has(p.pid) && seen.has(p.ppid)) seen.add(p.pid), grew = true;
-	}
-	return procs.filter((p) => p.pid !== root && seen.has(p.pid) && /(?:^|\/)node(?:\s|$)/.test(p.cmd)).map((p) => p.pid);
-}
-/** Runs the command, passes its output through, probes once when it goes silent. Resolves to the exit code. */
-async function runProbed(o) {
-	const out = o.out ?? ((s) => process.stdout.write(s));
-	const err = o.err ?? ((s) => process.stderr.write(s));
-	mkdirSync(o.reportDir, { recursive: true });
-	const t = timeoutSecs(o.command);
-	const idle = Math.max(2, Math.min(o.idleSecs ?? DEFAULT_IDLE_SECS, t !== null ? t - 8 : Infinity));
-	const preload = join(o.reportDir, "preload.cjs");
-	writeFileSync(preload, PRELOAD_SOURCE);
-	const env = {
-		...process.env,
-		PAI_HANG_PROBE_DIR: o.reportDir,
-		NODE_OPTIONS: `${process.env.NODE_OPTIONS ?? ""} --require=${preload}`.trim()
-	};
-	const child = spawn("bash", ["-c", o.command], {
-		cwd: o.cwd,
-		env,
-		stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		]
-	});
-	let last = Date.now();
-	let probing = false;
-	let announcedIdle = false;
-	let spun = false;
-	let pending = Promise.resolve();
-	child.stdout.on("data", (d) => (last = Date.now(), out(d.toString())));
-	child.stderr.on("data", (d) => (last = Date.now(), err(d.toString())));
-	const timer = setInterval(() => {
-		if (probing || spun || Date.now() - last < idle * 1e3 || !child.pid) return;
-		probing = true;
-		const pids = nodeDescendants(child.pid);
-		for (const p of pids) writeFileSync(join(o.reportDir, `probe-${p}`), "");
-		pending = collectFrames(o.reportDir, pids, 3e3).then((frames) => {
-			for (const p of pids) rmQuiet(join(o.reportDir, `probe-${p}`));
-			const stuck = frames.some((f) => userFrames(f, o.cwd).length > 0);
-			if (stuck || !announcedIdle) err(`\n${diagnose(frames, o.cwd, idle)}\n`);
-			announcedIdle = true;
-			probing = false;
-			if (stuck) {
-				spun = true;
-				for (const p of [...pids, child.pid]) killQuiet(p, "SIGTERM");
-				setTimeout(() => pids.forEach((p) => killQuiet(p, "SIGKILL")), 2e3).unref();
-			}
-		});
-	}, 1e3);
-	return await new Promise((resolve) => {
-		child.on("close", (code, sig) => {
-			clearInterval(timer);
-			pending.then(() => resolve(spun ? 124 : code ?? (sig ? 128 + (sig === "SIGKILL" ? 9 : 15) : 1)));
-		});
-	});
-}
-/** Frames each probed pid reported (empty list: its main thread was idle); pids that never answered are left out. */
-async function collectFrames(dir, pids, waitMs) {
-	const got = /* @__PURE__ */ new Map();
-	for (const end = Date.now() + waitMs; Date.now() < end && got.size < pids.length;) {
-		for (const p of pids) {
-			const f = join(dir, `frames-${p}.json`);
-			if (got.has(p) || !existsSync(f)) continue;
-			try {
-				got.set(p, JSON.parse(readFileSync(f, "utf8")).frames);
-				unlinkSync(f);
-			} catch {}
-		}
-		await new Promise((r) => setTimeout(r, 100));
-	}
-	return [...got.values()];
-}
-/** Preloaded into every node process of the test run (CommonJS, so it also loads under --require). */
-const PRELOAD_SOURCE = `"use strict";
-const { Worker, isMainThread } = require("node:worker_threads");
-if (isMainThread) {
-  const code = \`
-    const { existsSync, unlinkSync, writeFileSync, renameSync } = require("node:fs");
-    const { Session } = require("node:inspector");
-    const { workerData } = require("node:worker_threads");
-    const trigger = workerData.dir + "/probe-" + workerData.pid;
-    const done = (frames) => {
-      const tmp = workerData.dir + "/tmp-" + workerData.pid;
-      writeFileSync(tmp, JSON.stringify({ frames }));
-      renameSync(tmp, workerData.dir + "/frames-" + workerData.pid + ".json");
-    };
-    setInterval(() => {
-      if (!existsSync(trigger)) return;
-      try { unlinkSync(trigger); } catch {}
-      const s = new Session();
-      s.connectToMainThread();
-      let answered = false;
-      const urls = {}, maps = {};
-      s.on("Debugger.scriptParsed", (m) => { urls[m.params.scriptId] = m.params.url; maps[m.params.scriptId] = m.params.sourceMapURL; });
-      // transformed code (vite-node, tsx) has shifted lines: map back through its inline source map
-      const where = (f) => {
-        const id = f.location.scriptId;
-        let url = urls[id] || f.url, line = f.location.lineNumber;
-        const m = /^data:[^,]*;base64,(.*)$/.exec(maps[id] || "");
-        if (m) try {
-          const e = new (require("node:module").SourceMap)(JSON.parse(Buffer.from(m[1], "base64").toString())).findEntry(line, f.location.columnNumber || 0);
-          if (e && e.originalSource) { url = new URL(e.originalSource, url).href; line = e.originalLine; }
-        } catch {}
-        return { functionName: f.functionName, url, lineNumber: line };
-      };
-      s.on("Debugger.paused", (m) => {
-        answered = true;
-        done(m.params.callFrames.map(where));
-        s.post("Debugger.resume", () => s.post("Debugger.disable", () => s.disconnect()));
-      });
-      s.post("Debugger.enable", () => s.post("Debugger.pause"));
-      // an idle event loop runs no JS to pause in
-      setTimeout(() => { if (!answered) { done([]); s.post("Debugger.disable", () => s.disconnect()); } }, 800);
-    }, 200);
-  \`;
-  try {
-    new Worker(code, { eval: true, workerData: { dir: process.env.PAI_HANG_PROBE_DIR, pid: process.pid } }).unref();
-  } catch {}
-}
-`;
-
-//#endregion
 //#region src/workers/fallback.ts
 /**
 * fallback.ts — machine-wide Claude Code fallback to a worker provider.
@@ -493,5 +271,5 @@ function fallbackStatusText(s) {
 }
 
 //#endregion
-export { DEFAULT_IDLE_SECS as a, fallbackStatusText as i, fallbackOn as n, commandToRun as o, fallbackStatus as r, runProbed as s, fallbackOff as t };
-//# sourceMappingURL=fallback-Bj2cyVk_.mjs.map
+export { fallbackStatusText as i, fallbackOn as n, fallbackStatus as r, fallbackOff as t };
+//# sourceMappingURL=fallback-CQ8_CuVu.mjs.map

package/dist/{health-kufVIf6i.mjs → health-Bb2U4PNK.mjs}

@@ -1,7 +1,7 @@
-import { g as paiHomePath } from "./runtime-paths-WsO9sJFc.mjs";
-import { t as ANTHROPIC_NATIVE } from "./config-CST2uq1v.mjs";
-import { A as budgetSkipReason, D as budgetExceeded, E as budgetCache, M as budgetWall } from "./routing-BlD_tKjW.mjs";
-import { n as tierProviderNames, t as isLocalCandidate } from "./local-candidate-Cp_bw4kK.mjs";
+import { _ as paiHomePath } from "./runtime-paths-twfV23YL.mjs";
+import { t as ANTHROPIC_NATIVE } from "./config-DGV64YJa.mjs";
+import { A as budgetSkipReason, D as budgetExceeded, E as budgetCache, M as budgetWall } from "./routing-CF0wlR-_.mjs";
+import { n as tierProviderNames, t as isLocalCandidate } from "./local-candidate-C2FGhf54.mjs";
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { Chalk } from "chalk";
 
@@ -311,4 +311,4 @@ function saveBudgetSnapshot(map, now = Date.now()) {
 
 //#endregion
 export { colorEnabled as a, renderCommandHelp as c, renderOverview as d, renderTable as f, saveBudgetSnapshot as i, renderMarkdown as l, usageLine as m, readBudget as n, makeStyle as o, suggest as p, readBudgetSnapshot as r, mdCommand as s, providerHealth as t, renderMore as u };
-//# sourceMappingURL=health-kufVIf6i.mjs.map
+//# sourceMappingURL=health-Bb2U4PNK.mjs.map

package/dist/{helpers-CvbYEKoD.mjs → helpers-Dj2nY56t.mjs}

@@ -1,4 +1,4 @@
-import { i as getRegistryBackend } from "./factory-BV0MQA3T.mjs";
+import { i as getRegistryBackend } from "./factory-CYwa0jYj.mjs";
 
 //#region src/cli/impl/project/helpers.ts
 /**
@@ -66,4 +66,4 @@ async function upsertTag(tagName) {
 
 //#endregion
 export { getSessionCount as a, upsertTag as c, getProjectTags as i, getProject as n, requireProject as o, getProjectAliases as r, resolveIdentifier as s, getLastSessionDate as t };
-//# sourceMappingURL=helpers-CvbYEKoD.mjs.map
+//# sourceMappingURL=helpers-Dj2nY56t.mjs.map

package/dist/{helpers-WV8tdQHM.mjs → helpers-DyHKAwrW.mjs}

@@ -1,10 +1,10 @@
-import "./config-DYbyEe4-.mjs";
+import "./config-SlZ-Z52i.mjs";
 import "./helpers-CRuBUas3.mjs";
-import "./factory-BV0MQA3T.mjs";
-import "./postgres-C-T5OWer.mjs";
-import "./embedding-gate-CTAk8STe.mjs";
+import "./factory-CYwa0jYj.mjs";
+import "./postgres-BL5oBBgY.mjs";
+import "./embedding-gate-iq0oQEkF.mjs";
 import "./embeddings-BVq3esBF.mjs";
-import "./router-CQSc3lk3.mjs";
-import { a as getSessionCount, c as upsertTag, i as getProjectTags, n as getProject, o as requireProject, r as getProjectAliases, s as resolveIdentifier, t as getLastSessionDate } from "./helpers-CvbYEKoD.mjs";
+import "./router-D2476pOp.mjs";
+import { a as getSessionCount, c as upsertTag, i as getProjectTags, n as getProject, o as requireProject, r as getProjectAliases, s as resolveIdentifier, t as getLastSessionDate } from "./helpers-Dj2nY56t.mjs";
 
 export { getProject };

package/dist/hooks/block-sleep-poll.mjs

@@ -8174,6 +8174,7 @@ function defaultWorkersConfig() {
     cacheKeepaliveSecs: num(w.cacheKeepaliveSecs, 0),
     defaultMaxMinutes: num(w.defaultMaxMinutes, 60),
     waitAlarmMinutes: num(w.waitAlarmMinutes, 120),
+    scanBudgetMs: num(w.scanBudgetMs, 5e3),
     stagger: {
       enabled: bool(stagger.enabled, true),
       localDefaultSec: num(stagger.localDefaultSec, 20),
@@ -8768,6 +8769,13 @@ function parseWorkersConfig(raw, yamlProviders = {}) {
     }
     waitAlarmMinutes = w.waitAlarmMinutes;
   }
+  let scanBudgetMs = d.scanBudgetMs ?? 5e3;
+  if (w.scanBudgetMs !== void 0) {
+    if (typeof w.scanBudgetMs !== "number" || !Number.isInteger(w.scanBudgetMs) || w.scanBudgetMs < 1) {
+      bad(".scanBudgetMs", "must be a positive integer (milliseconds)");
+    }
+    scanBudgetMs = w.scanBudgetMs;
+  }
   const stagger = { ...d.stagger };
   if (w.stagger !== void 0) {
     if (typeof w.stagger !== "object" || w.stagger === null || Array.isArray(w.stagger)) {
@@ -8904,6 +8912,7 @@ function parseWorkersConfig(raw, yamlProviders = {}) {
     cacheKeepaliveSecs,
     defaultMaxMinutes,
     waitAlarmMinutes,
+    scanBudgetMs,
     stagger,
     capacity,
     localIdle,

package/dist/hooks/capture-all-events.mjs

@@ -7724,6 +7724,104 @@ import { appendFileSync, chmodSync as chmodSync2, existsSync as existsSync4, mkd
 // src/workers/ps-table.ts
 var PS_MAX_BUFFER = 64 * 1024 * 1024;
 
+// src/utils/redact.ts
+var REDACTED = "[REDACTED]";
+var REDACTED_RE = String.raw`\[REDACTED\]`;
+var KEY_WORDS = "password|passwd|secret|token|api[_-]?key|credential|auth(?:orization)?|bearer";
+var PROSE = "is|are|was|were|be|to|of|in|on|for|and|or|the|a|an|that|this|it|not|out|here|there|so|as|at|by|with|if|when|which";
+var VAL = String.raw`(?:"[^"]*"|'[^']*'|[^\s'"]+)`;
+var REDACT_RULES = [
+  {
+    // `Authorization: Bearer xxx` / `Authorization: Basic xxx` — keep the scheme
+    id: "authorization",
+    re: /(Authorization\s*:\s*)(Bearer|Basic)\s+([^\s'"]+)/gi,
+    replace: (_m, head, scheme) => `${head}${scheme} ${REDACTED}`
+  },
+  {
+    // `Cookie: a=b; c=d` — keep the cookie names, redact every value
+    id: "cookie",
+    re: /((?:Set-)?Cookie\s*:\s*)([^\n]+)/gi,
+    replace: (_m, head, rest) => `${head}${rest.replace(/([^=;\s'"]+=)[^;'"]*/g, `$1${REDACTED}`)}`
+  },
+  {
+    // `key=value`, `key: value`, `"key": "value"` — key carries a secret-ish word;
+    // the word must be a whole key segment, so `monkeys=` stays untouched.
+    // The separator may start with the key's closing quote (JSON); it is kept.
+    id: "key-value",
+    re: new RegExp(String.raw`(?<![A-Za-z0-9])((?:[A-Za-z0-9]+[_-])?(?:${KEY_WORDS})(?![A-Za-z0-9])[A-Za-z0-9_-]*)(["']?\s*[:=]\s*)(?!(?:Bearer|Basic) ${REDACTED_RE})(?!(?:${PROSE})\b)(${VAL})`, "gi"),
+    replace: (m, key, sep2, val) => {
+      if (/[_-](?:count|length|len|size|limit|max|min|budget)$/i.test(key) && /^\d+$/.test(val)) return m;
+      const q = sep2[0] === '"' || sep2[0] === "'" ? val[0] : "";
+      return q && (q === '"' || q === "'") ? `${key}${sep2}${q}${REDACTED}${q}` : `${key}${sep2}${REDACTED}`;
+    }
+  },
+  {
+    // npmrc `//registry/:_authToken=xxx`
+    id: "npm-auth-token",
+    re: new RegExp(String.raw`(_authToken\s*=\s*)(${VAL})`, "g"),
+    replace: (_m, head) => `${head}${REDACTED}`
+  },
+  {
+    // `curl -u user:pass` / `--user user:pass` — keep the user
+    id: "curl-user",
+    re: /(\bcurl\b[^\n]{0,500}?\s(?:-u|--user)[\s=]+['"]?[^\s:'"]+:)([^\s'"]+)/g,
+    replace: (_m, head) => `${head}${REDACTED}`
+  },
+  {
+    // `mysql -phunter2` / `mysqldump -p'hunter2'` — attached password only
+    id: "mysql-p",
+    re: /(\bmysql(?:dump)?\b[^\n]{0,300}?\s-p)('[^']*'|"[^"]*"|[^\s'"-][^\s'"]*)/g,
+    replace: (_m, head) => `${head}${REDACTED}`
+  },
+  {
+    // `export FOO_TOKEN=...` / `FOO_KEY=...` — SCREAMING_SNAKE env style
+    id: "env-style",
+    re: new RegExp(String.raw`(?<![A-Za-z0-9])((?:export\s+)?[A-Z][A-Z0-9]*_(?:KEY|SECRET|TOKEN|PASS\w*|CRED\w*|AUTH\w*)\s*=\s*)(${VAL})`, "g"),
+    replace: (_m, head) => `${head}${REDACTED}`
+  },
+  {
+    // long CLI flags only: `--password X`, `--token X`, `--api-key X`, `--secret X`, `--passwd X`
+    id: "cli-flag",
+    re: new RegExp(String.raw`(--(?:password|token|api-key|secret|passwd)(?:\s*=\s*|\s+))(${VAL})`, "gi"),
+    replace: (_m, head) => `${head}${REDACTED}`
+  },
+  {
+    // `scheme://user:pass@host` — redact the password, keep user and host
+    id: "url-credentials",
+    re: /((?<![a-z0-9+.-])[a-z][a-z0-9+.-]*:\/\/[^\s/@:]+:)([^\s/@]+)(@)/gi,
+    replace: (_m, head, _pass, at) => `${head}${REDACTED}${at}`
+  },
+  {
+    // provider token prefixes: sk-ant-, sk-, ghp_/gho_/ghu_/ghs_/ghr_, github_pat_,
+    // glpat-, xoxb-/xoxp-/xoxa-, AKIA/ASIA + 16 chars, AIza + 35 chars, JWT (eyJ… three segments)
+    id: "token-prefix",
+    re: /\b(?:sk-ant-[A-Za-z0-9_-]{20,}|sk-[A-Za-z0-9_-]{20,}|gh[pousr]_[A-Za-z0-9]{30,}|github_pat_[A-Za-z0-9_]{22,}|glpat-[A-Za-z0-9_-]{20,}|xox[bap]-[A-Za-z0-9-]{10,}|(?:AKIA|ASIA|AGPA|AIDA|AROA)[A-Z0-9]{16}|[sr]k_(?:live|test)_[A-Za-z0-9]{20,}|npm_[A-Za-z0-9]{36}|hf_[A-Za-z0-9]{30,}|AIza[A-Za-z0-9_-]{35}(?![A-Za-z0-9_-])|eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)(?![A-Za-z0-9_-])/g,
+    replace: REDACTED
+  },
+  {
+    // 40+ char opaque base64/hex run, only on a line that also has a secret-ish key word
+    id: "long-run",
+    re: /(?<![A-Za-z0-9+/])[A-Za-z0-9+/]{40,4096}={0,2}(?![\w/])/g,
+    // a bare 40-hex git SHA stays; it is only redacted as the value of a secret key
+    replace: (m) => /^[0-9a-f]{40}$/i.test(m) ? m : REDACTED
+  }
+];
+var PEM_BLOCK = /-----BEGIN[^-\n]*PRIVATE KEY-----[\s\S]*?(?:-----END[^-\n]*PRIVATE KEY-----|$)/g;
+var LINE_RULES = REDACT_RULES.filter((r) => r.id !== "long-run");
+var LONG_RUN = REDACT_RULES.find((r) => r.id === "long-run");
+var LONG_RUN_MAX_LINE = 64 * 1024;
+var KEY_LINE = new RegExp(`(?:${KEY_WORDS})`, "i");
+function redactLine(line) {
+  let out = line;
+  for (const r of LINE_RULES) out = out.replace(r.re, r.replace);
+  if (out.length <= LONG_RUN_MAX_LINE && KEY_LINE.test(out)) out = out.replace(LONG_RUN.re, LONG_RUN.replace);
+  return out;
+}
+function redactSecrets(text) {
+  const withPem = text.replace(PEM_BLOCK, `-----BEGIN PRIVATE KEY----- ${REDACTED}`);
+  return withPem.split("\n").map(redactLine).join("\n");
+}
+
 // src/hooks/ts/lib/loop-guard.ts
 var LOOP_MAX_REPEATS = 4;
 var LOOP_READ_STREAK = Number(process.env.PAI_LOOP_READ_STREAK) > 0 ? Number(process.env.PAI_LOOP_READ_STREAK) : 15;
@@ -7732,10 +7830,8 @@ var LOOP_DENY_REASON = `loop guard: you ran this command ${LOOP_MAX_REPEATS} tim
 var WAIT_CAP_MS = 45 * 6e4;
 var FP_FULL_READ_BYTES = 256 * 1024;
 var FP_TOTAL_BYTES = 4 * 1024 * 1024;
-var SECRET_LINE = /pass(?:word|wd)|secret|token|api[_-]?key|credential|authorization|bearer|private key|^\s*(?:export\s+)?[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASS\w*|CRED\w*|AUTH\w*)\s*=|\b(?:sk|ghp|gho|xox[bap])[-_][A-Za-z0-9_-]{16,}|\b[A-Za-z0-9+]{40,}={0,2}(?![\w/])|\b[a-z][a-z0-9+.-]*:\/\/[^\s\/:@]+:[^\s\/@]+@|\b(?:AKIA|ASIA|AGPA|AIDA|AROA)[A-Z0-9]{16}\b|\bgh[pousr]_[A-Za-z0-9]{20,}/i;
-var MASKED_LINE = "[line masked: looks like a secret]";
 function maskSecrets(text) {
-  return text.split("\n").map((l) => SECRET_LINE.test(l) ? MASKED_LINE : l).join("\n");
+  return redactSecrets(text);
 }
 
 // src/utils/hash.ts

package/dist/hooks/capture-tool-output.mjs

@@ -141,6 +141,104 @@ import { appendFileSync, chmodSync, existsSync as existsSync3, mkdirSync as mkdi
 // src/workers/ps-table.ts
 var PS_MAX_BUFFER = 64 * 1024 * 1024;
 
+// src/utils/redact.ts
+var REDACTED = "[REDACTED]";
+var REDACTED_RE = String.raw`\[REDACTED\]`;
+var KEY_WORDS = "password|passwd|secret|token|api[_-]?key|credential|auth(?:orization)?|bearer";
+var PROSE = "is|are|was|were|be|to|of|in|on|for|and|or|the|a|an|that|this|it|not|out|here|there|so|as|at|by|with|if|when|which";
+var VAL = String.raw`(?:"[^"]*"|'[^']*'|[^\s'"]+)`;
+var REDACT_RULES = [
+  {
+    // `Authorization: Bearer xxx` / `Authorization: Basic xxx` — keep the scheme
+    id: "authorization",
+    re: /(Authorization\s*:\s*)(Bearer|Basic)\s+([^\s'"]+)/gi,
+    replace: (_m, head, scheme) => `${head}${scheme} ${REDACTED}`
+  },
+  {
+    // `Cookie: a=b; c=d` — keep the cookie names, redact every value
+    id: "cookie",
+    re: /((?:Set-)?Cookie\s*:\s*)([^\n]+)/gi,
+    replace: (_m, head, rest) => `${head}${rest.replace(/([^=;\s'"]+=)[^;'"]*/g, `$1${REDACTED}`)}`
+  },
+  {
+    // `key=value`, `key: value`, `"key": "value"` — key carries a secret-ish word;
+    // the word must be a whole key segment, so `monkeys=` stays untouched.
+    // The separator may start with the key's closing quote (JSON); it is kept.
+    id: "key-value",
+    re: new RegExp(String.raw`(?<![A-Za-z0-9])((?:[A-Za-z0-9]+[_-])?(?:${KEY_WORDS})(?![A-Za-z0-9])[A-Za-z0-9_-]*)(["']?\s*[:=]\s*)(?!(?:Bearer|Basic) ${REDACTED_RE})(?!(?:${PROSE})\b)(${VAL})`, "gi"),
+    replace: (m, key, sep, val) => {
+      if (/[_-](?:count|length|len|size|limit|max|min|budget)$/i.test(key) && /^\d+$/.test(val)) return m;
+      const q = sep[0] === '"' || sep[0] === "'" ? val[0] : "";
+      return q && (q === '"' || q === "'") ? `${key}${sep}${q}${REDACTED}${q}` : `${key}${sep}${REDACTED}`;
+    }
+  },
+  {
+    // npmrc `//registry/:_authToken=xxx`
+    id: "npm-auth-token",
+    re: new RegExp(String.raw`(_authToken\s*=\s*)(${VAL})`, "g"),
+    replace: (_m, head) => `${head}${REDACTED}`
+  },
+  {
+    // `curl -u user:pass` / `--user user:pass` — keep the user
+    id: "curl-user",
+    re: /(\bcurl\b[^\n]{0,500}?\s(?:-u|--user)[\s=]+['"]?[^\s:'"]+:)([^\s'"]+)/g,
+    replace: (_m, head) => `${head}${REDACTED}`
+  },
+  {
+    // `mysql -phunter2` / `mysqldump -p'hunter2'` — attached password only
+    id: "mysql-p",
+    re: /(\bmysql(?:dump)?\b[^\n]{0,300}?\s-p)('[^']*'|"[^"]*"|[^\s'"-][^\s'"]*)/g,
+    replace: (_m, head) => `${head}${REDACTED}`
+  },
+  {
+    // `export FOO_TOKEN=...` / `FOO_KEY=...` — SCREAMING_SNAKE env style
+    id: "env-style",
+    re: new RegExp(String.raw`(?<![A-Za-z0-9])((?:export\s+)?[A-Z][A-Z0-9]*_(?:KEY|SECRET|TOKEN|PASS\w*|CRED\w*|AUTH\w*)\s*=\s*)(${VAL})`, "g"),
+    replace: (_m, head) => `${head}${REDACTED}`
+  },
+  {
+    // long CLI flags only: `--password X`, `--token X`, `--api-key X`, `--secret X`, `--passwd X`
+    id: "cli-flag",
+    re: new RegExp(String.raw`(--(?:password|token|api-key|secret|passwd)(?:\s*=\s*|\s+))(${VAL})`, "gi"),
+    replace: (_m, head) => `${head}${REDACTED}`
+  },
+  {
+    // `scheme://user:pass@host` — redact the password, keep user and host
+    id: "url-credentials",
+    re: /((?<![a-z0-9+.-])[a-z][a-z0-9+.-]*:\/\/[^\s/@:]+:)([^\s/@]+)(@)/gi,
+    replace: (_m, head, _pass, at) => `${head}${REDACTED}${at}`
+  },
+  {
+    // provider token prefixes: sk-ant-, sk-, ghp_/gho_/ghu_/ghs_/ghr_, github_pat_,
+    // glpat-, xoxb-/xoxp-/xoxa-, AKIA/ASIA + 16 chars, AIza + 35 chars, JWT (eyJ… three segments)
+    id: "token-prefix",
+    re: /\b(?:sk-ant-[A-Za-z0-9_-]{20,}|sk-[A-Za-z0-9_-]{20,}|gh[pousr]_[A-Za-z0-9]{30,}|github_pat_[A-Za-z0-9_]{22,}|glpat-[A-Za-z0-9_-]{20,}|xox[bap]-[A-Za-z0-9-]{10,}|(?:AKIA|ASIA|AGPA|AIDA|AROA)[A-Z0-9]{16}|[sr]k_(?:live|test)_[A-Za-z0-9]{20,}|npm_[A-Za-z0-9]{36}|hf_[A-Za-z0-9]{30,}|AIza[A-Za-z0-9_-]{35}(?![A-Za-z0-9_-])|eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)(?![A-Za-z0-9_-])/g,
+    replace: REDACTED
+  },
+  {
+    // 40+ char opaque base64/hex run, only on a line that also has a secret-ish key word
+    id: "long-run",
+    re: /(?<![A-Za-z0-9+/])[A-Za-z0-9+/]{40,4096}={0,2}(?![\w/])/g,
+    // a bare 40-hex git SHA stays; it is only redacted as the value of a secret key
+    replace: (m) => /^[0-9a-f]{40}$/i.test(m) ? m : REDACTED
+  }
+];
+var PEM_BLOCK = /-----BEGIN[^-\n]*PRIVATE KEY-----[\s\S]*?(?:-----END[^-\n]*PRIVATE KEY-----|$)/g;
+var LINE_RULES = REDACT_RULES.filter((r) => r.id !== "long-run");
+var LONG_RUN = REDACT_RULES.find((r) => r.id === "long-run");
+var LONG_RUN_MAX_LINE = 64 * 1024;
+var KEY_LINE = new RegExp(`(?:${KEY_WORDS})`, "i");
+function redactLine(line) {
+  let out = line;
+  for (const r of LINE_RULES) out = out.replace(r.re, r.replace);
+  if (out.length <= LONG_RUN_MAX_LINE && KEY_LINE.test(out)) out = out.replace(LONG_RUN.re, LONG_RUN.replace);
+  return out;
+}
+function redactSecrets(text) {
+  const withPem = text.replace(PEM_BLOCK, `-----BEGIN PRIVATE KEY----- ${REDACTED}`);
+  return withPem.split("\n").map(redactLine).join("\n");
+}
+
 // src/hooks/ts/lib/loop-guard.ts
 var LOOP_MAX_REPEATS = 4;
 var LOOP_READ_STREAK = Number(process.env.PAI_LOOP_READ_STREAK) > 0 ? Number(process.env.PAI_LOOP_READ_STREAK) : 15;
@@ -149,10 +247,8 @@ var LOOP_DENY_REASON = `loop guard: you ran this command ${LOOP_MAX_REPEATS} tim
 var WAIT_CAP_MS = 45 * 6e4;
 var FP_FULL_READ_BYTES = 256 * 1024;
 var FP_TOTAL_BYTES = 4 * 1024 * 1024;
-var SECRET_LINE = /pass(?:word|wd)|secret|token|api[_-]?key|credential|authorization|bearer|private key|^\s*(?:export\s+)?[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASS\w*|CRED\w*|AUTH\w*)\s*=|\b(?:sk|ghp|gho|xox[bap])[-_][A-Za-z0-9_-]{16,}|\b[A-Za-z0-9+]{40,}={0,2}(?![\w/])|\b[a-z][a-z0-9+.-]*:\/\/[^\s\/:@]+:[^\s\/@]+@|\b(?:AKIA|ASIA|AGPA|AIDA|AROA)[A-Z0-9]{16}\b|\bgh[pousr]_[A-Za-z0-9]{20,}/i;
-var MASKED_LINE = "[line masked: looks like a secret]";
 function maskSecrets(text) {
-  return text.split("\n").map((l) => SECRET_LINE.test(l) ? MASKED_LINE : l).join("\n");
+  return redactSecrets(text);
 }
 
 // src/utils/hash.ts