@withtruing/companion 0.14.2 → 0.14.4

package/dist/whole-read/pages.js

@@ -1,6 +1,6 @@
 import { createHash } from 'node:crypto';
 import { canonicalJson } from './identity.js';
-import { sanitizeBuildMetadata } from './sanitize.js';
+import { inspectFragmentSlice, sanitizeBuildMetadata } from './sanitize.js';
 import { WHOLE_READ_PAGE_PROTOCOL, } from './types.js';
 export const MAX_METADATA_PAGE_BYTES = 512 * 1024;
 export const MAX_TRANSPORT_RECORD_BYTES = 16 * 1024;
@@ -267,7 +267,7 @@ function assertTransportRecord(record) {
         catch {
             return fail('collection_invalid');
         }
-        if (!sanitizeBuildMetadata(decoded).ok)
+        if (inspectFragmentSlice(decoded) !== null)
             fail('unsafe_metadata');
     }
     else

package/dist/whole-read/sanitize.js

@@ -116,6 +116,73 @@ function inspectString(value) {
         return 'secret_value_detected';
     return containsCodeQuote(value) ? 'code_quote_detected' : null;
 }
+const SIMPLE_ESCAPES = {
+    '"': '"', '\\': '\\', '/': '/', n: '\n', t: '\t', r: '\r', b: '\b', f: '\f',
+};
+function unescapeJsonText(raw) {
+    let result = '';
+    for (let index = 0; index < raw.length; index += 1) {
+        const character = raw[index];
+        if (character !== '\\') {
+            result += character;
+            continue;
+        }
+        const next = raw[index + 1];
+        if (next === undefined)
+            break; // escape cut at the edge: drop it
+        if (next === 'u') {
+            const hex = raw.slice(index + 2, index + 6);
+            if (!/^[0-9a-fA-F]{4}$/.test(hex))
+                break; // incomplete \uXXXX at the edge: drop it
+            result += String.fromCharCode(Number.parseInt(hex, 16));
+            index += 5;
+        }
+        else {
+            result += SIMPLE_ESCAPES[next] ?? next;
+            index += 1;
+        }
+    }
+    return result;
+}
+/**
+ * Splits a slice of serialized JSON on its unescaped double quotes and returns the unescaped text of
+ * every segment: complete strings, a partial string at the start (the slice began inside a string)
+ * and a partial string at the end (the slice ended inside one). Segments between strings are JSON
+ * structure; they are short and are returned too, which is harmless for the code-quote heuristic.
+ */
+export function extractSliceStrings(text) {
+    const segments = [];
+    let current = '';
+    for (let index = 0; index < text.length; index += 1) {
+        const character = text[index];
+        if (character === '\\') {
+            current += character + (text[index + 1] ?? '');
+            index += 1;
+        }
+        else if (character === '"') {
+            segments.push(current);
+            current = '';
+        }
+        else {
+            current += character;
+        }
+    }
+    segments.push(current);
+    return segments.map(unescapeJsonText);
+}
+/**
+ * Checks one raw slice of a record's serialized JSON (a transport fragment). Secrets and absolute
+ * host paths are checked on the whole slice. The code-quote heuristic runs on the string values in
+ * the slice, never on the JSON structure (raw JSON always looks like code). A fragment edge can only
+ * shorten a string, so the full check on the reassembled record remains the backstop.
+ */
+export function inspectFragmentSlice(text) {
+    if (containsHostPath(text))
+        return 'cleanup_path_forbidden';
+    if (validateNoSecretValues(text).ok === false)
+        return 'secret_value_detected';
+    return extractSliceStrings(text).some(containsCodeQuote) ? 'code_quote_detected' : null;
+}
 function cloneMetadata(value, allowCleanupPath, field, ancestors = new Set(), depth = 0) {
     if (depth > 64)
         return { ok: false, code: 'metadata_schema_invalid' };

package/dist/whole-read-temp.js

@@ -174,7 +174,10 @@ export function createCompanionAttemptSourceManager(dependencies = {}) {
     const reportCleanup = dependencies.reportCleanup ?? (async () => false);
     const scheduleInterval = dependencies.setInterval ?? setInterval;
     const cancelInterval = dependencies.clearInterval ?? clearInterval;
-    const buildsEnabled = dependencies.buildsEnabled ?? (() => process.env.WHOLE_READ_BUILDS === '1');
+    // On by default: Truing's server decides whether build 3 runs (its own WHOLE_READ_BUILDS switch), and a
+    // released connector must carry it without the user setting anything (TRUING.md §9). WHOLE_READ_BUILDS=0
+    // on the user's computer is an emergency off switch.
+    const buildsEnabled = dependencies.buildsEnabled ?? (() => process.env.WHOLE_READ_BUILDS !== '0');
     const readers = new Map();
     const activeLocations = new Set();
     const cleanupJobs = new Map();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withtruing/companion",
-  "version": "0.14.2",
+  "version": "0.14.4",
   "description": "The Truing companion: reads your code and runs AI on your own computer, for Truing.",
   "type": "module",
   "license": "MIT",