@wrongstack/core 0.297.0 → 0.298.1

package/dist/hq/index.js

@@ -1,10 +1,83 @@
-// src/hq/protocol/tool.ts
-var DEFAULT_HQ_REDACTION_POLICY = {
-  rawContent: true,
-  toolArgs: "full",
-  paths: "full"
-};
-var HQ_TRANSCRIPT_TEXT_CAP = 16e3;
+// src/hq/protocol/governance.ts
+var SIGNAL_LEVELS = /* @__PURE__ */ new Set([
+  "healthy",
+  "notice",
+  "warning",
+  "unavailable"
+]);
+var SIGNAL_CODES = /* @__PURE__ */ new Set([
+  "attachment_broker_healthy",
+  "attachment_broker_initializing",
+  "attachment_broker_status_unavailable",
+  "attachment_broker_degraded",
+  "attachment_broker_audit_unhealthy",
+  "attachment_broker_revocation_pending",
+  "attachment_broker_stopped",
+  "broker_missing",
+  "broker_invalid",
+  "connection_failed",
+  "request_rejected",
+  "unexpected_response"
+]);
+var OPERATOR_ACTIONS = /* @__PURE__ */ new Set(["none", "observe", "investigate"]);
+var BROKER_STATES = /* @__PURE__ */ new Set(["idle", "active", "retry_wait", "stopped"]);
+var BROKER_HEALTH = /* @__PURE__ */ new Set(["initializing", "healthy", "degraded", "stopped"]);
+function isNonNegativeInteger(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function hasOnlyKeys(value, allowed) {
+  const allowedKeys = new Set(allowed);
+  return Object.keys(value).every((key) => allowedKeys.has(key));
+}
+function isHqGovernanceSnapshotPayload(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const payload = value;
+  if (!hasOnlyKeys(payload, [
+    "schemaVersion",
+    "projectId",
+    "observedAt",
+    "available",
+    "signal",
+    "daemon",
+    "attachmentBroker"
+  ]) || payload.schemaVersion !== 1 || typeof payload.projectId !== "string" || payload.projectId.length === 0 || typeof payload.observedAt !== "string" || typeof payload.available !== "boolean" || typeof payload.signal !== "object" || payload.signal === null || Array.isArray(payload.signal)) {
+    return false;
+  }
+  const signal = payload.signal;
+  if (!hasOnlyKeys(signal, ["level", "code", "operatorAction", "executionDisposition"]) || !SIGNAL_LEVELS.has(signal.level) || !SIGNAL_CODES.has(signal.code) || !OPERATOR_ACTIONS.has(signal.operatorAction) || signal.executionDisposition !== "continue") {
+    return false;
+  }
+  if (payload.available === false && (signal.level !== "unavailable" || payload.daemon !== void 0 || payload.attachmentBroker !== void 0) || payload.available === true && signal.level === "unavailable") {
+    return false;
+  }
+  if (payload.daemon !== void 0) {
+    if (typeof payload.daemon !== "object" || payload.daemon === null || Array.isArray(payload.daemon)) {
+      return false;
+    }
+    const daemon = payload.daemon;
+    if (!hasOnlyKeys(daemon, ["pid", "startedAt"]) || !isNonNegativeInteger(daemon.pid) || typeof daemon.startedAt !== "string") {
+      return false;
+    }
+  }
+  if (payload.attachmentBroker !== void 0 && payload.attachmentBroker !== null) {
+    if (typeof payload.attachmentBroker !== "object" || Array.isArray(payload.attachmentBroker)) {
+      return false;
+    }
+    const broker = payload.attachmentBroker;
+    if (!hasOnlyKeys(broker, [
+      "state",
+      "health",
+      "consecutiveFailures",
+      "pendingRevocations",
+      "auditHealthy",
+      "expiresAt",
+      "nextActionAt"
+    ]) || !BROKER_STATES.has(broker.state) || !BROKER_HEALTH.has(broker.health) || !isNonNegativeInteger(broker.consecutiveFailures) || !isNonNegativeInteger(broker.pendingRevocations) || typeof broker.auditHealthy !== "boolean" || broker.expiresAt !== void 0 && typeof broker.expiresAt !== "string" || broker.nextActionAt !== void 0 && typeof broker.nextActionAt !== "string") {
+      return false;
+    }
+  }
+  return true;
+}
 
 // src/hq/protocol/kanban.ts
 var HQ_KANBAN_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
@@ -85,33 +158,10 @@ function isHqPeerLostPayload(x) {
   return true;
 }
 
-// src/hq/protocol/resume.ts
-var HQ_RESUME_GAP_MAX_ENVELOPES = 1e3;
-var HQ_RESUME_GAP_MAX_BYTES = 1048576;
-var HQ_RESUME_GAP_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
-function isHqResumeGapMessage(x) {
-  if (typeof x !== "object" || x === null || Array.isArray(x)) return false;
-  const v = x;
-  if (v.type !== "hq.resume_gap") return false;
-  if (!Number.isSafeInteger(v.lastSeqSeen) || v.lastSeqSeen < 0) return false;
-  if (!Array.isArray(v.envelopes)) return false;
-  if (v.envelopes.length > HQ_RESUME_GAP_MAX_ENVELOPES) return false;
-  if (typeof v.truncated !== "boolean") return false;
-  return true;
-}
-function isHqResumeRejectMessage(x) {
-  if (typeof x !== "object" || x === null || Array.isArray(x)) return false;
-  const v = x;
-  if (v.type !== "hq.resume_reject") return false;
-  if (v.reason !== "gap_too_large" && v.reason !== "last_seen_too_old" && v.reason !== "log_unavailable") {
-    return false;
-  }
-  if (typeof v.detectedAt !== "string" || !Number.isFinite(Date.parse(v.detectedAt))) return false;
-  return true;
-}
+// src/hq/protocol/envelope.ts
+var HQ_PROTOCOL_VERSION = 1;
 
 // src/hq/protocol/core.ts
-var HQ_PROTOCOL_VERSION = 1;
 var KNOWN_HQ_CLIENT_FRAME_TYPES = /* @__PURE__ */ new Set([
   "client.hello",
   "client.event",
@@ -277,6 +327,7 @@ var KNOWN_HQ_EVENT_PAYLOAD_TYPES = /* @__PURE__ */ new Set([
   "client.heartbeat",
   "mcp.health.snapshot",
   "mcp.operation",
+  "governance.snapshot",
   "peer.rehydrate",
   "peer.lost"
 ]);
@@ -542,6 +593,8 @@ function parseHqEventPayload(eventType, payload) {
       return isHqMcpHealthSnapshotPayload(payload) ? { ok: true, payload } : { ok: false, reason: "malformed-payload" };
     case "mcp.operation":
       return isHqMcpOperationPayload(payload) ? { ok: true, payload } : { ok: false, reason: "malformed-payload" };
+    case "governance.snapshot":
+      return isHqGovernanceSnapshotPayload(payload) ? { ok: true, payload } : { ok: false, reason: "malformed-payload" };
     case "peer.rehydrate":
       return isHqPeerRehydratePayload(payload) ? { ok: true, payload } : { ok: false, reason: "malformed-payload" };
     case "peer.lost":
@@ -567,6 +620,39 @@ function createHqEventEnvelope(input) {
   };
 }
 
+// src/hq/protocol/resume.ts
+var HQ_RESUME_GAP_MAX_ENVELOPES = 1e3;
+var HQ_RESUME_GAP_MAX_BYTES = 1048576;
+var HQ_RESUME_GAP_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
+function isHqResumeGapMessage(x) {
+  if (typeof x !== "object" || x === null || Array.isArray(x)) return false;
+  const v = x;
+  if (v.type !== "hq.resume_gap") return false;
+  if (!Number.isSafeInteger(v.lastSeqSeen) || v.lastSeqSeen < 0) return false;
+  if (!Array.isArray(v.envelopes)) return false;
+  if (v.envelopes.length > HQ_RESUME_GAP_MAX_ENVELOPES) return false;
+  if (typeof v.truncated !== "boolean") return false;
+  return true;
+}
+function isHqResumeRejectMessage(x) {
+  if (typeof x !== "object" || x === null || Array.isArray(x)) return false;
+  const v = x;
+  if (v.type !== "hq.resume_reject") return false;
+  if (v.reason !== "gap_too_large" && v.reason !== "last_seen_too_old" && v.reason !== "log_unavailable") {
+    return false;
+  }
+  if (typeof v.detectedAt !== "string" || !Number.isFinite(Date.parse(v.detectedAt))) return false;
+  return true;
+}
+
+// src/hq/protocol/tool.ts
+var DEFAULT_HQ_REDACTION_POLICY = {
+  rawContent: true,
+  toolArgs: "full",
+  paths: "full"
+};
+var HQ_TRANSCRIPT_TEXT_CAP = 16e3;
+
 // src/hq/publisher.ts
 import { randomUUID } from "node:crypto";
 import * as v8 from "node:v8";
@@ -580,61 +666,71 @@ var PATTERNS = [
   // strings don't trigger false positives.
   {
     type: "anthropic_key",
-    regex: /(?<![A-Za-z0-9])sk-ant-api\d+-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])sk-ant-api\d+-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g,
+    anchor: "sk-ant-"
   },
-  { type: "openai_key", regex: /(?<![A-Za-z0-9])sk-(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g },
-  { type: "github_pat", regex: /(?<![A-Za-z0-9])ghp_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g },
-  { type: "github_pat_v2", regex: /(?<![A-Za-z0-9])github_pat_[A-Za-z0-9_]{50,}(?![A-Za-z0-9])/g },
-  { type: "aws_access_key", regex: /(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])/g },
-  { type: "gcp_key", regex: /(?<![A-Za-z0-9])AIza[0-9A-Za-z_-]{35}(?![A-Za-z0-9])/g },
-  { type: "slack_token", regex: /(?<![A-Za-z0-9-])xox[abpos]-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g },
+  { type: "openai_key", regex: /(?<![A-Za-z0-9])sk-(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g, anchor: "sk-" },
+  { type: "github_pat", regex: /(?<![A-Za-z0-9])ghp_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g, anchor: "ghp_" },
+  { type: "github_pat_v2", regex: /(?<![A-Za-z0-9])github_pat_[A-Za-z0-9_]{50,}(?![A-Za-z0-9])/g, anchor: "github_pat_" },
+  { type: "aws_access_key", regex: /(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])/g, anchor: "AKIA" },
+  { type: "gcp_key", regex: /(?<![A-Za-z0-9])AIza[0-9A-Za-z_-]{35}(?![A-Za-z0-9])/g, anchor: "AIza" },
+  { type: "slack_token", regex: /(?<![A-Za-z0-9-])xox[abpos]-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g, anchor: "xox" },
   {
     type: "stripe_key",
-    regex: /(?<![A-Za-z0-9])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9])/g,
+    anchor: "sk_"
   },
   {
     type: "twilio_sid",
-    regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g,
+    anchor: "AC"
   },
   {
     type: "telegram_bot_token",
     // Telegram tokens are of the form  bot<digits>:<alphanum>  in URL paths
-    regex: /\/bot\d+:[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+    regex: /\/bot\d+:[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "/bot"
   },
   {
     type: "jwt",
     // Anchored: look for literal "eyJ" which is unambiguous for JWT header
-    regex: /(?<![A-Za-z0-9/+=])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9/+=])/g
+    regex: /(?<![A-Za-z0-9/+=])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9/+=])/g,
+    anchor: "eyJ"
   },
   {
     type: "private_key",
     // Anchored: start must be BEGIN, end must be END with no extra dashes after END
-    regex: /(?:^|\n)-----BEGIN (?:RSA|EC|OPENSSH|DSA|PGP)? ?PRIVATE KEY-----[\s\S]*?-----END[^-]*-----(?:\n|$)/g
+    regex: /(?:^|\n)-----BEGIN (?:RSA|EC|OPENSSH|DSA|PGP)? ?PRIVATE KEY-----[\s\S]*?-----END[^-]*-----(?:\n|$)/g,
+    anchor: "-----BEGIN"
   },
-  { type: "mongodb_uri", regex: /mongodb(?:\+srv)?:\/\/[^\s"'`]+/g },
-  { type: "postgres_uri", regex: /postgres(?:ql)?:\/\/[^\s"'`]+/g },
-  { type: "mysql_uri", regex: /mysql:\/\/[^\s"'`]+/g },
-  { type: "redis_uri", regex: /redis:\/\/[^\s"'`]+/g },
+  { type: "mongodb_uri", regex: /mongodb(?:\+srv)?:\/\/[^\s"'`]+/g, anchor: "mongodb" },
+  { type: "postgres_uri", regex: /postgres(?:ql)?:\/\/[^\s"'`]+/g, anchor: "postgres" },
+  { type: "mysql_uri", regex: /mysql:\/\/[^\s"'`]+/g, anchor: "mysql://" },
+  { type: "redis_uri", regex: /redis:\/\/[^\s"'`]+/g, anchor: "redis://" },
   // AI/ML provider keys — modern LLM services with well-known prefixes
   {
     type: "huggingface_token",
     // HuggingFace tokens: hf_ followed by 34 alphanumeric chars
-    regex: /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{34}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{34}(?![A-Za-z0-9])/g,
+    anchor: "hf_"
   },
   {
     type: "replicate_token",
     // Replicate tokens: r8_ followed by 40+ alphanumeric chars
-    regex: /(?<![A-Za-z0-9])r8_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])r8_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g,
+    anchor: "r8_"
   },
   {
     type: "perplexity_key",
     // Perplexity API keys: pplx- followed by 40+ alphanumeric chars
-    regex: /(?<![A-Za-z0-9])pplx-[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])pplx-[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g,
+    anchor: "pplx-"
   },
   {
     type: "groq_key",
     // Groq API keys: gsk_ followed by 40+ alphanumeric chars
-    regex: /(?<![A-Za-z0-9])gsk_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])gsk_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g,
+    anchor: "gsk_"
   },
   {
     type: "bearer_token",
@@ -647,7 +743,8 @@ var PATTERNS = [
     // tokens sharing a single delimiter (`Bearer a… Bearer b…`) must both be
     // redacted. A consuming trailing delimiter would eat the separator the
     // next match needs for its leading anchor, leaking the second token.
-    regex: /(?:^|[^A-Za-z0-9_.~+/-])Bearer\s+[A-Za-z0-9._~+/-]{12,512}=*(?=$|[^A-Za-z0-9_.~+/-])/g
+    regex: /(?:^|[^A-Za-z0-9_.~+/-])Bearer\s+[A-Za-z0-9._~+/-]{12,512}=*(?=$|[^A-Za-z0-9_.~+/-])/g,
+    anchor: "Bearer"
   },
   {
     type: "high_entropy_env",
@@ -663,7 +760,89 @@ var PATTERNS = [
     // replacement so the separator between adjacent secrets is preserved
     // rather than collapsed. Capture groups are therefore: 1=leading
     // delimiter, 2=key name, 3=value.
-    regex: /(^|\s)([A-Z_]{4,}(?:KEY|TOKEN|SECRET|PASSWORD|PWD))\s*[:=]\s*['"]?([A-Za-z0-9_/+=-]{20,512})['"]?(?=\s|$)/g
+    regex: /(^|\s)([A-Z_]{4,}(?:KEY|TOKEN|SECRET|PASSWORD|PWD))\s*[:=]\s*['"]?([A-Za-z0-9_/+=-]{20,512})['"]?(?=\s|$)/g,
+    anchor: ["KEY", "TOKEN", "SECRET", "PASSWORD", "PWD"]
+  },
+  // ── Ported from packages/plugins credential-patterns.ts (WS-034) ─────────
+  // The plugin runtime carried 37 patterns while this scrubber — the one that
+  // guards session JSONL, chronicle, HQ broadcast, WebUI events and the auth
+  // audit — carried 22. The plugin side already had a parity test; it just did
+  // not cover core. Most consequential: WrongStack mints `gho_` tokens itself
+  // in the Copilot OAuth flow, and `gh[ousr]_` was absent here.
+  {
+    type: "github_oauth_token",
+    regex: /(?<![A-Za-z0-9])gh[ousr]_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g,
+    anchor: ["gho_", "ghu_", "ghs_", "ghr_"]
+  },
+  {
+    type: "gitlab_pat",
+    regex: /(?<![A-Za-z0-9])glpat-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "glpat-"
+  },
+  {
+    type: "gitlab_runner_token",
+    regex: /(?<![A-Za-z0-9])glrt-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "glrt-"
+  },
+  {
+    type: "npm_token",
+    regex: /(?<![A-Za-z0-9])npm_[A-Za-z0-9]{36}(?![A-Za-z0-9])/g,
+    anchor: "npm_"
+  },
+  {
+    type: "slack_app_token",
+    regex: /(?<![A-Za-z0-9-])xapp-\d-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g,
+    anchor: "xapp-"
+  },
+  {
+    type: "slack_webhook",
+    regex: /https:\/\/hooks\.slack\.com\/services\/T[A-Za-z0-9_-]+\/B[A-Za-z0-9_-]+\/[A-Za-z0-9]{16,}/g,
+    anchor: "hooks.slack.com"
+  },
+  {
+    type: "sendgrid_key",
+    regex: /(?<![A-Za-z0-9])SG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "SG."
+  },
+  {
+    type: "digitalocean_token",
+    regex: /(?<![A-Za-z0-9])dop_v1_[a-f0-9]{64}(?![A-Za-z0-9])/g,
+    anchor: "dop_v1_"
+  },
+  {
+    type: "doppler_token",
+    regex: /(?<![A-Za-z0-9])dp\.(?:pt|st|sa|scim|audit)\.[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g,
+    anchor: "dp."
+  },
+  {
+    type: "shopify_token",
+    regex: /(?<![A-Za-z0-9])shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}(?![A-Za-z0-9])/g,
+    anchor: "shp"
+  },
+  {
+    type: "docker_pat",
+    regex: /(?<![A-Za-z0-9])dckr_pat_[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "dckr_pat_"
+  },
+  {
+    type: "linear_key",
+    regex: /(?<![A-Za-z0-9])lin_api_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g,
+    anchor: "lin_api_"
+  },
+  {
+    type: "atlassian_token",
+    regex: /(?<![A-Za-z0-9])ATATT3[A-Za-z0-9_\-=]{40,}(?![A-Za-z0-9_\-=])/g,
+    anchor: "ATATT3"
+  },
+  {
+    type: "square_token",
+    regex: /(?<![A-Za-z0-9])(?:sq0(?:atp|csp)-|EAAA)[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: ["sq0atp-", "sq0csp-", "EAAA"]
+  },
+  {
+    type: "google_oauth_client_secret",
+    regex: /(?<![A-Za-z0-9_-])GOCSPX-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "GOCSPX-"
   }
 ];
 var SIMPLE_PATTERNS = PATTERNS.filter((p) => p.type !== "high_entropy_env");
@@ -672,32 +851,32 @@ var HIGH_ENTROPY_REGEX = PATTERNS.find((p) => p.type === "high_entropy_env").reg
 var COMBINED_REPLACEMENTS = SIMPLE_PATTERNS.map((p) => `[REDACTED:${p.type}]`);
 var SCRUB_CHUNK_BYTES = 64 * 1024;
 var SCRUB_OVERLAP_BYTES = 1024;
+var PATTERN_ANCHORS = [
+  ...new Set(
+    PATTERNS.flatMap(
+      (pattern) => typeof pattern.anchor === "string" ? [pattern.anchor] : [...pattern.anchor]
+    )
+  )
+];
+var JSON_KEY_ANCHORS = [
+  '"apiKey"',
+  '"api_key"',
+  '"token"',
+  '"secret"',
+  '"password"',
+  '"authorization"',
+  '"bearer"',
+  '"private_key"',
+  '"access_token"',
+  '"refresh_token"',
+  '"client_secret"'
+];
+var ALL_ANCHORS = [...PATTERN_ANCHORS, ...JSON_KEY_ANCHORS];
 function hasCredentialAnchors(text) {
-  return text.includes("-----BEGIN") || // Private keys (most unique → cheap reject)
-  text.includes("sk-") || // Anthropic + OpenAI keys
-  text.includes("sk_") || // Stripe live/test keys
-  text.includes("ghp_") || // GitHub PAT v1
-  text.includes("github_pat_") || // GitHub PAT v2
-  text.includes("eyJ") || // JWT
-  text.includes("AKIA") || // AWS access key
-  text.includes("AIza") || // GCP service key
-  text.includes("xox") || // Slack token (xoxa/xoxb/xoxp/xoxo/xoxs)
-  text.includes("Bearer ") || // Bearer token (space suffix reduces false positives)
-  text.includes("/bot") || // Telegram bot token (URL path pattern)
-  text.includes("hf_") || // HuggingFace token
-  text.includes("r8_") || // Replicate token
-  text.includes("pplx-") || // Perplexity API key
-  text.includes("gsk_") || // Groq API key
-  text.includes("_KEY=") || // High-entropy env vars: API_KEY=, SECRET_KEY=, ...
-  text.includes("_TOKEN=") || // ACCESS_TOKEN=, AUTH_TOKEN=, ...
-  text.includes("_SECRET=") || // API_SECRET=, CLIENT_SECRET=, ...
-  text.includes("_PASSWORD=") || // DB_PASSWORD=, ROOT_PASSWORD=, ...
-  text.includes("mongodb://") || text.includes("mongodb+srv://") || text.includes("postgres://") || text.includes("postgresql://") || text.includes("mysql://") || text.includes("redis://") || // JSON-style credential keys: tool outputs often serialise objects as
-  // raw JSON strings rather than parsed objects. The value may not start
-  // with a recognisable prefix (sk-, ghp_, etc.), so we anchor on common
-  // key names. The `"` prefix avoids matching prose that happens to mention
-  // these words — JSON serialisation always quotes string keys.
-  text.includes('"apiKey"') || text.includes('"api_key"') || text.includes('"token"') || text.includes('"secret"') || text.includes('"password"') || text.includes('"authorization"') || text.includes('"bearer"') || text.includes('"private_key"') || text.includes('"access_token"') || text.includes('"refresh_token"') || text.includes('"client_secret"');
+  for (const anchor of ALL_ANCHORS) {
+    if (text.includes(anchor)) return true;
+  }
+  return false;
 }
 var DefaultSecretScrubber = class {
   scrub(text) {
@@ -901,7 +1080,7 @@ function scrubAndTruncateHqPreview(value, maxLength = 280) {
   return summarizeString(value, maxLength, true);
 }
 function visitValue(value, options, key) {
-  if (!options.policy.rawContent && key !== void 0 && isSensitiveKey(key)) {
+  if (key !== void 0 && isSensitiveKey(key)) {
     return { value: SENSITIVE_FIELD_REPLACEMENT, redacted: true };
   }
   if (typeof value === "string") {
@@ -912,7 +1091,7 @@ function visitValue(value, options, key) {
     if (!options.preserveRawContentKeys && !options.policy.rawContent && key !== void 0 && isRawContentKey(key)) {
       return { value: RAW_CONTENT_REPLACEMENT, redacted: true };
     }
-    const scrubbed = summarizeString(value, options.maxSummaryLength, !options.policy.rawContent);
+    const scrubbed = summarizeString(value, options.maxSummaryLength, true);
     return { value: scrubbed, redacted: scrubbed !== value };
   }
   if (value === null || typeof value !== "object") return { value, redacted: false };
@@ -964,7 +1143,7 @@ function redactHqEvent(event, options = {}) {
 }
 function summarizeHqToolArgs(value, options = {}) {
   const policy = resolveHqRedactionPolicy(options.policy);
-  if (policy.toolArgs === "full") return value;
+  if (policy.toolArgs === "full") return redactHqValue(value, options).value;
   if (policy.toolArgs === "none") return "[REDACTED:hq_tool_args]";
   if (policy.toolArgs === "redacted") return redactHqValue(value, options).value;
   if (value === null || typeof value !== "object") return redactHqValue(value, options).value;
@@ -1836,10 +2015,51 @@ function isMissingFileError(error) {
 
 // src/hq/auth-store.ts
 import { createHash as createHash2, randomBytes, randomUUID as randomUUID2, scrypt, timingSafeEqual } from "node:crypto";
-import * as fs3 from "node:fs/promises";
 import * as syncFs from "node:fs";
+import * as fs3 from "node:fs/promises";
 import * as path4 from "node:path";
 
+// src/security/file-permissions.ts
+import { chmod } from "node:fs/promises";
+var SECRET_FILE_MODE = 384;
+async function restrictFilePermissions(filePath, opts) {
+  const label = opts?.label ?? "file-permissions";
+  const warn = opts?.warn ?? ((msg) => console.warn(msg));
+  if (process.platform === "win32") {
+    try {
+      const { execFile } = await import("node:child_process");
+      const { promisify } = await import("node:util");
+      const execFileAsync = promisify(execFile);
+      const user = windowsAccountName();
+      if (!user) {
+        warn(
+          `[${label}] Could not determine the current Windows user for ${filePath}; skipping icacls hardening.`
+        );
+        return;
+      }
+      await execFileAsync("icacls", [filePath, "/inheritance:r", "/grant:r", `${user}:(F)`], {
+        windowsHide: true
+      });
+    } catch {
+      warn(
+        `[${label}] Could not restrict permissions on ${filePath} \u2014 it may be readable by other users on this system.`
+      );
+    }
+  } else {
+    try {
+      await chmod(filePath, SECRET_FILE_MODE);
+    } catch {
+    }
+  }
+}
+function windowsAccountName() {
+  const username = process.env.USERNAME || process.env.USER;
+  if (!username || username.includes("\0")) return void 0;
+  const domain = process.env.USERDOMAIN;
+  if (domain && !domain.includes("\0")) return `${domain}\\${username}`;
+  return username;
+}
+
 // src/utils/wstack-paths.ts
 import { createHash } from "node:crypto";
 import * as fs2 from "node:fs";
@@ -1969,11 +2189,31 @@ function resolveWstackPaths(opts) {
 }
 
 // src/hq/auth-audit.ts
-import { appendFileSync, mkdirSync } from "node:fs";
+import { appendFileSync, readFileSync as readFileSync3, mkdirSync } from "node:fs";
 import * as path3 from "node:path";
 function hqAuthAuditPath(dataDir) {
   return path3.join(dataDir, "auth-audit.jsonl");
 }
+function readHqAuthAuditTail(dataDir, maxEntries = 50) {
+  const filePath = hqAuthAuditPath(dataDir);
+  let content;
+  try {
+    content = readFileSync3(filePath, "utf8");
+  } catch {
+    return [];
+  }
+  const lines = content.trimEnd().split("\n");
+  const tail = lines.slice(-maxEntries);
+  const entries = [];
+  for (const line of tail) {
+    if (!line) continue;
+    try {
+      entries.push(JSON.parse(line));
+    } catch {
+    }
+  }
+  return entries.reverse();
+}
 function appendHqAuthAudit(dataDir, entry, options) {
   try {
     mkdirSync(dataDir, { recursive: true });
@@ -2001,6 +2241,20 @@ function resolveHqDataDir(override, env = process.env) {
   if (!raw) return defaultHqDataDir();
   return path4.isAbsolute(raw) ? path4.resolve(raw) : path4.resolve(process.cwd(), raw);
 }
+function hqTokenVerifier(secret) {
+  return createHash2("sha256").update(secret, "utf8").digest("hex");
+}
+function hqTokenKey(token) {
+  if (token.verifier !== void 0 && token.verifier.length > 0) return token.verifier;
+  return token.token ? hqTokenVerifier(token.token) : "";
+}
+function hashBrowserToken(token) {
+  if (token.verifier !== void 0 && token.verifier.length > 0) {
+    return token.token ? { ...token, token: "" } : token;
+  }
+  if (!token.token) return token;
+  return { ...token, verifier: hqTokenVerifier(token.token), token: "" };
+}
 function isTokenExpired(token, at = Date.now(), clockSkewMs = 0) {
   if (token === void 0) return false;
   const expiresAt = token.expiresAt;
@@ -2034,6 +2288,9 @@ function hqAuthContentHash(file) {
       ...file.clientTokens !== void 0 ? { clientTokens: file.clientTokens.map(redactToken) } : {},
       ...file.passwordHash !== void 0 ? { passwordHash: REDACTED } : {},
       ...file.cookieSecret !== void 0 ? { cookieSecret: REDACTED } : {},
+      ...file.totpSecret !== void 0 ? { totpSecret: REDACTED } : {},
+      ...file.totpPendingSecret !== void 0 ? { totpPendingSecret: REDACTED } : {},
+      ...file.totpRecoveryCodes !== void 0 ? { totpRecoveryCodes: file.totpRecoveryCodes.map(() => REDACTED) } : {},
       ...file.alertRules !== void 0 ? { alertRules: file.alertRules } : {}
     };
     const payload = JSON.stringify(projection);
@@ -2053,8 +2310,10 @@ async function writeHqRuntimeFile(dataDir, file) {
     ...file,
     updatedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  await atomicWrite(hqRuntimeFilePath(dataDir), `${JSON.stringify(payload, null, 2)}
-`, { mode: 384 });
+  const target = hqRuntimeFilePath(dataDir);
+  await atomicWrite(target, `${JSON.stringify(payload, null, 2)}
+`, { mode: SECRET_FILE_MODE });
+  await restrictFilePermissions(target, { label: "hq-runtime" });
 }
 function isProcessAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
@@ -2067,7 +2326,9 @@ function isProcessAlive(pid) {
 }
 function readHqRuntimeFileSync(dataDir) {
   try {
-    const parsed = JSON.parse(syncFs.readFileSync(hqRuntimeFilePath(dataDir), "utf8"));
+    const parsed = JSON.parse(
+      syncFs.readFileSync(hqRuntimeFilePath(dataDir), "utf8")
+    );
     if (typeof parsed.url !== "string" || parsed.url.trim().length === 0) return void 0;
     if (typeof parsed.pid === "number" && !isProcessAlive(parsed.pid)) return void 0;
     return {
@@ -2110,10 +2371,17 @@ async function writeHqAuthFile(dataDir, file) {
   const payload = {
     ...file,
     version: HQ_AUTH_FILE_VERSION,
-    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    // WS-044: browser secrets never touch the disk. Any legacy cleartext in
+    // the incoming file is converted here, so the first write after an
+    // upgrade migrates the whole list — no separate migration step to forget
+    // to run, and no window where an old file stays cleartext because nothing
+    // happened to rewrite it.
+    ...file.browserTokens !== void 0 ? { browserTokens: file.browserTokens.map(hashBrowserToken) } : {}
   };
   await atomicWrite(target, `${JSON.stringify(payload, null, 2)}
-`, { mode: 384 });
+`, { mode: SECRET_FILE_MODE });
+  await restrictFilePermissions(target, { label: "hq-auth" });
 }
 async function ensureHqFirstRunAuthFile(dataDir, opts = {}) {
   const file = hqAuthFilePath(dataDir);
@@ -2319,6 +2587,7 @@ function discoverLocalHqEndpoint(options = {}) {
   const dataDir = resolveHqDataDir(options.dataDir, options.env ?? process.env);
   const runtime = readHqRuntimeFileSync(dataDir);
   if (runtime === void 0) return void 0;
+  if (!isLoopbackHqUrl(runtime.url)) return void 0;
   const token = readFirstClientTokenFromAuthFile(dataDir);
   return { url: runtime.url, ...token ? { token } : {} };
 }
@@ -3312,11 +3581,8 @@ function startToolTelemetryBridge(opts) {
 }
 function truncateForSummary(output, policy, max = 280) {
   const resolved = resolveHqRedactionPolicy(policy);
-  if (resolved.rawContent) {
-    if (output.length <= max) return output;
-    return `${output.slice(0, max)}\u2026[truncated:${output.length - max}]`;
-  }
-  return scrubAndTruncateHqPreview(output, max) ?? "";
+  const limit = resolved.rawContent ? Math.max(max, HQ_TRANSCRIPT_TEXT_CAP) : max;
+  return scrubAndTruncateHqPreview(output, limit) ?? "";
 }
 
 // src/hq/cost-bridge.ts
@@ -3438,6 +3704,7 @@ var BestEffortLatestQueue = class {
 };
 
 // src/hq/kanban-store.ts
+var MAX_HQ_KANBAN_CACHE_PROJECTS = 32;
 var HqKanbanStore = class {
   dirPath;
   cache = /* @__PURE__ */ new Map();
@@ -3448,14 +3715,18 @@ var HqKanbanStore = class {
   }
   async load(projectId) {
     const cached = this.cache.get(projectId);
-    if (cached !== void 0) return structuredClone(cached);
+    if (cached !== void 0) {
+      this.cache.delete(projectId);
+      this.cache.set(projectId, cached);
+      return structuredClone(cached);
+    }
     try {
       const content = await fs6.readFile(this.filePath(projectId), "utf8");
       const snapshot = JSON.parse(content);
       if (!isHqKanbanSnapshotPayload(snapshot) || snapshot.projectId !== projectId) {
         return emptyKanbanSnapshot(projectId);
       }
-      this.cache.set(projectId, snapshot);
+      this.setCached(projectId, snapshot);
       return structuredClone(snapshot);
     } catch {
       return emptyKanbanSnapshot(projectId);
@@ -3470,11 +3741,13 @@ var HqKanbanStore = class {
       () => {
         if (this.mergeChains.get(incoming.projectId) === next) {
           this.mergeChains.delete(incoming.projectId);
+          this.trimCache();
         }
       },
       () => {
         if (this.mergeChains.get(incoming.projectId) === next) {
           this.mergeChains.delete(incoming.projectId);
+          this.trimCache();
         }
       }
     );
@@ -3483,7 +3756,8 @@ var HqKanbanStore = class {
   async mergeNow(incoming) {
     const current = await this.load(incoming.projectId);
     const records = /* @__PURE__ */ new Map();
-    for (const record of [...current.boards, ...current.tombstones]) records.set(record.boardId, record);
+    for (const record of [...current.boards, ...current.tombstones])
+      records.set(record.boardId, record);
     for (const record of [...incoming.boards, ...incoming.tombstones]) {
       const existing = records.get(record.boardId);
       if (existing === void 0 || compareKanbanRecord(record, existing) > 0) {
@@ -3502,8 +3776,15 @@ var HqKanbanStore = class {
     }
     merged.boards.sort((a, b) => a.boardId.localeCompare(b.boardId));
     merged.tombstones.sort((a, b) => a.boardId.localeCompare(b.boardId));
-    this.cache.set(incoming.projectId, merged);
-    this.writer(incoming.projectId).enqueue(merged);
+    this.setCached(incoming.projectId, merged);
+    const writer = this.writer(incoming.projectId);
+    writer.enqueue(merged);
+    void writer.drain().then(() => {
+      if (this.writers.get(incoming.projectId) === writer) {
+        this.writers.delete(incoming.projectId);
+        this.trimCache();
+      }
+    });
     return structuredClone(merged);
   }
   async drain() {
@@ -3521,6 +3802,21 @@ var HqKanbanStore = class {
     }
     return writer;
   }
+  setCached(projectId, snapshot) {
+    this.cache.delete(projectId);
+    this.cache.set(projectId, snapshot);
+    this.trimCache(projectId);
+  }
+  trimCache(protectedProjectId) {
+    if (this.cache.size <= MAX_HQ_KANBAN_CACHE_PROJECTS) return;
+    for (const projectId of this.cache.keys()) {
+      if (this.cache.size <= MAX_HQ_KANBAN_CACHE_PROJECTS) break;
+      if (projectId === protectedProjectId || this.writers.has(projectId) || this.mergeChains.has(projectId)) {
+        continue;
+      }
+      this.cache.delete(projectId);
+    }
+  }
   filePath(projectId) {
     const safe = createHash4("sha256").update(projectId).digest("hex");
     return path6.join(this.dirPath, `${safe}.json`);
@@ -3780,7 +4076,7 @@ var HqEventLog = class {
   async appendInternal(events) {
     await this.ensureLineCount();
     const lines = events.map((event) => JSON.stringify(event)).join("\n") + "\n";
-    await fs8.appendFile(this.filePath, lines, { encoding: "utf8" });
+    await fs8.appendFile(this.filePath, lines, { encoding: "utf8", mode: SECRET_FILE_MODE });
     this.lineCount += events.length;
     this.byteCount += Buffer.byteLength(lines, "utf8");
     if (this.lineCount >= this.maxLines || this.byteCount >= this.maxBytes) {
@@ -4199,7 +4495,7 @@ var HqTimeseriesStore = class {
     const lines = snapshot.samples.map((bucket) => JSON.stringify(bucket)).join("\n") + "\n";
     await withFileLock(this.filePath, async () => {
       this.diskLineCount ??= await countNonEmptyLines(this.filePath);
-      await fs11.appendFile(this.filePath, lines, { encoding: "utf8" });
+      await fs11.appendFile(this.filePath, lines, { encoding: "utf8", mode: SECRET_FILE_MODE });
       this.diskLineCount += snapshot.samples.length;
       const compactAt = Math.max(this.maxBuckets + 1, this.maxBuckets * 4);
       if (this.diskLineCount >= compactAt) {
@@ -4762,6 +5058,9 @@ export {
   hqAuthFilePath,
   hqEventLogPresetFields,
   hqRuntimeFilePath,
+  hqTokenKey,
+  hqTokenVerifier,
+  isHqGovernanceSnapshotPayload,
   isHqKanbanSnapshotPayload,
   isHqPeerLostPayload,
   isHqPeerRehydratePayload,
@@ -4781,6 +5080,7 @@ export {
   mutateHqAuthFile,
   parseHqEventPayload,
   parseHqFrame,
+  readHqAuthAuditTail,
   readHqAuthFile,
   readHqRuntimeFileSync,
   redactHqEvent,