@useshifu/coding-harness 0.3.35 → 0.3.37

package/bin/run-deadline.js

@@ -0,0 +1,11 @@
+function deadlineError() {
+  return Object.assign(new Error("The sync run deadline was reached; unfinished work remains pending."), { code: "SHIFU_RUN_DEADLINE" });
+}
+
+function requestTimeout(deadlineAt = Infinity, maximumMs = 30_000) {
+  const remaining = deadlineAt - Date.now();
+  if (!(remaining > 0)) throw deadlineError();
+  return Math.min(maximumMs, Math.ceil(remaining));
+}
+
+module.exports = { deadlineError, requestTimeout };

package/bin/secret-check.js

@@ -0,0 +1,32 @@
+const TOKEN_PATTERNS = [
+  /\bcs_sk_[a-f0-9]{16}_[a-f0-9]{64}\b/,
+  /-----BEGIN (?:RSA |EC |DSA |OPENSSH |ENCRYPTED )?PRIVATE KEY-----/,
+  /\bgh[pousr]_[A-Za-z0-9_]{36,255}\b/,
+  /\bgithub_pat_[A-Za-z0-9_]{40,255}\b/,
+  /\bghs_[0-9]+_[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/,
+  /\bsk-(?:(?:proj|svcacct)-)?[A-Za-z0-9_-]{40,}\b/,
+  /\bxox[bp]-(?:[0-9]{8,}-){2,3}[A-Za-z0-9]{20,}\b/,
+];
+const AWS_KEY = /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g;
+const BEARER = /\bauthorization(?:\\*["'])?\s*[:=]\s*(?:\\*["'])?\s*bearer[ \t]+([A-Za-z0-9._~+/-]{32,}={0,2})/gi;
+const CONNECTION = /\b(?:postgres(?:ql)?|mysql|mariadb|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^\s:/@"']*:([^\s/@"']+)@[^\s"'<>]+/gi;
+const PLACEHOLDERS = new Set(["password", "your_password", "your-password", "your_token", "your-token", "replace_me", "replace-me", "changeme", "change_me", "example", "example_password", "redacted", "private_secret"]);
+
+function placeholder(value) {
+  try { value = decodeURIComponent(value); } catch {}
+  return PLACEHOLDERS.has(value.toLowerCase()) || /^(?:[*xX]+|<[^>]+>|\$\{[^}]+\}|\$[A-Z_][A-Z0-9_]*|\{\{[^}]+\}\})$/.test(value);
+}
+
+// This detects recognizable credential formats, not every confidential detail.
+function assertNoCredentials(value) {
+  let text;
+  try { text = typeof value === "string" ? value : Buffer.isBuffer(value) ? value.toString("utf8") : JSON.stringify(value) || ""; }
+  catch { throw Object.assign(new Error("Credential inspection could not complete."), { code: "SHIFU_CREDENTIAL_CHECK_FAILED" }); }
+  if (TOKEN_PATTERNS.some((pattern) => pattern.test(text)) ||
+      [...text.matchAll(AWS_KEY)].some(([key]) => key !== "AKIAIOSFODNN7EXAMPLE") ||
+      [...text.matchAll(BEARER), ...text.matchAll(CONNECTION)].some((match) => !placeholder(match[1]))) {
+    throw Object.assign(new Error("Credential-like content was detected. Remove credentials before processing."), { code: "SHIFU_CREDENTIAL_DETECTED" });
+  }
+}
+
+module.exports = { assertNoCredentials };

package/bin/setup-options.js

@@ -7,16 +7,16 @@ function toggle(value, name) {
   return value === "on";
 }
 
-async function chooseSetupOptions(config, { option = () => undefined, ask } = {}) {
+async function chooseSetupOptions(config, { option = () => undefined, ask, includeHistory = true } = {}) {
   const preferences = normalizeContextPreferences(config?.contextPreferences);
   const growth = toggle(option("--growth-feedback"), "growth feedback");
   const alignment = toggle(option("--decision-alignment"), "decision alignment");
   const days = option("--backfill-days");
-  let initialBackfill = days === undefined ? config?.initialBackfill : createInitialBackfill(days);
+  let initialBackfill = !includeHistory || days === undefined ? config?.initialBackfill : createInitialBackfill(days);
   if (growth !== undefined) preferences.growthFeedback = growth;
   if (alignment !== undefined) preferences.decisionAlignment = alignment;
   if (ask) {
-    if (initialBackfill === undefined) {
+    if (includeHistory && initialBackfill === undefined) {
       const answer = (await ask("Initial history: [1] Last 15 days (recommended), [2] Last 30 days, [3] Custom days, [4] Start from now. Choose [1]: ")).trim();
       if (!["", "1", "2", "3", "4"].includes(answer)) throw new Error("Choose history option 1, 2, 3 or 4. Nothing was changed.");
       const selectedDays = answer === "3" ? (await ask("How many days? ")).trim() : answer === "2" ? 30 : answer === "4" ? 0 : 15;
@@ -32,7 +32,6 @@ async function chooseSetupOptions(config, { option = () => undefined, ask } = {}
       preferences[key] = !["off", "no", "n"].includes(answer);
     }
   }
-  if (!config && initialBackfill === undefined) initialBackfill = createInitialBackfill(15);
   return { contextPreferences: preferences, ...(initialBackfill === undefined ? {} : { initialBackfill }) };
 }