autodev-cli 1.4.86 → 1.4.93

package/out/core/projectSkills.js

@@ -0,0 +1,266 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.providerConsumesSkills = providerConsumesSkills;
+exports.sanitizeRemoteSkills = sanitizeRemoteSkills;
+exports.saveProjectSkills = saveProjectSkills;
+exports.foldSkillsIntoProfile = foldSkillsIntoProfile;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const pathSafe_1 = require("./pathSafe");
+// A skill slug is a plain directory name: lowercase alnum + hyphen only. No
+// separators, no dots — this alone rejects "../evil", "a/b", ".hidden", etc.
+const SKILL_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
+// Caps — the whole point of the sanitizer. Keep them strict.
+const MAX_SKILLS = 100; // total number of skills per sync
+const MAX_NAME_LEN = 64; // slug length
+const MAX_DESC_BYTES = 4 * 1024; // 4 KB per description
+const MAX_BODY_BYTES = 64 * 1024; // 64 KB per body
+const MAX_TOTAL_BYTES = 4 * 1024 * 1024; // 4 MB across all skills
+const SKILLS_REL_DIR = path.posix.join('.claude', 'skills');
+const MANIFEST_REL = path.join('.autodev', 'synced-skills.json');
+/** True for providers that natively load `.claude/skills/<slug>/SKILL.md` (Claude only). */
+function providerConsumesSkills(provider) {
+    return provider === 'claude-cli' || provider === 'claude-tui';
+}
+/**
+ * Validate an untrusted `skills` array (from a `skill_update` frame) down to the
+ * subset that is safe to write. Enforces slug shape, string types, per-file and
+ * aggregate size caps, a total count cap, and workspace path containment.
+ * Returns the accepted list (in order) plus the rejected entries with reasons.
+ * Callers must still gate the whole path behind an opt-in (skillUpdateEnabled).
+ */
+function sanitizeRemoteSkills(root, skills) {
+    const safe = [];
+    const rejected = [];
+    if (!Array.isArray(skills)) {
+        return { safe, rejected };
+    }
+    const seen = new Set();
+    let totalBytes = 0;
+    for (const raw of skills) {
+        const entry = raw;
+        const rawName = typeof entry?.name === 'string' ? entry.name.trim() : '';
+        const label = rawName || '(unnamed)';
+        if (!entry || typeof entry !== 'object') {
+            rejected.push({ name: label, reason: 'not an object' });
+            continue;
+        }
+        if (!SKILL_NAME_RE.test(rawName)) {
+            rejected.push({ name: label, reason: 'invalid slug (must match ^[a-z0-9][a-z0-9-]*$)' });
+            continue;
+        }
+        if (rawName.length > MAX_NAME_LEN) {
+            rejected.push({ name: label, reason: 'slug too long' });
+            continue;
+        }
+        if (seen.has(rawName)) {
+            rejected.push({ name: rawName, reason: 'duplicate slug' });
+            continue;
+        }
+        if (typeof entry.description !== 'string') {
+            rejected.push({ name: rawName, reason: 'description not a string' });
+            continue;
+        }
+        if (typeof entry.body !== 'string') {
+            rejected.push({ name: rawName, reason: 'body not a string' });
+            continue;
+        }
+        const descBytes = Buffer.byteLength(entry.description, 'utf8');
+        const bodyBytes = Buffer.byteLength(entry.body, 'utf8');
+        if (descBytes > MAX_DESC_BYTES) {
+            rejected.push({ name: rawName, reason: `description too large (${descBytes} > ${MAX_DESC_BYTES})` });
+            continue;
+        }
+        if (bodyBytes > MAX_BODY_BYTES) {
+            rejected.push({ name: rawName, reason: `body too large (${bodyBytes} > ${MAX_BODY_BYTES})` });
+            continue;
+        }
+        // Path-safety: the composed target must resolve INSIDE the workspace, even
+        // after symlink resolution. (The slug regex already blocks ../ and /, this
+        // is belt-and-suspenders + symlink defence.)
+        const target = (0, pathSafe_1.resolveWithinRoot)(root, path.posix.join(SKILLS_REL_DIR, rawName, 'SKILL.md'), false);
+        if (!target) {
+            rejected.push({ name: rawName, reason: 'path escapes workspace' });
+            continue;
+        }
+        if (safe.length >= MAX_SKILLS) {
+            rejected.push({ name: rawName, reason: `over skill count cap (${MAX_SKILLS})` });
+            continue;
+        }
+        if (totalBytes + descBytes + bodyBytes > MAX_TOTAL_BYTES) {
+            rejected.push({ name: rawName, reason: `over total bytes cap (${MAX_TOTAL_BYTES})` });
+            continue;
+        }
+        totalBytes += descBytes + bodyBytes;
+        seen.add(rawName);
+        safe.push({ name: rawName, description: entry.description, body: entry.body });
+    }
+    return { safe, rejected };
+}
+/** Compose the on-disk SKILL.md (frontmatter + body). Description newlines are
+ *  collapsed to keep the YAML frontmatter valid. */
+function _composeSkillFile(s) {
+    const desc = s.description.replace(/[\r\n]+/g, ' ').trim();
+    const body = s.body.replace(/\s+$/, '');
+    return `---\nname: ${s.name}\ndescription: ${desc}\n---\n\n${body}\n`;
+}
+function _readManifest(root) {
+    try {
+        const f = path.join(root, MANIFEST_REL);
+        if (!fs.existsSync(f)) {
+            return [];
+        }
+        const arr = JSON.parse(fs.readFileSync(f, 'utf8'));
+        return Array.isArray(arr) ? arr.filter((x) => typeof x === 'string') : [];
+    }
+    catch {
+        return [];
+    }
+}
+function _writeManifest(root, slugs) {
+    const f = path.join(root, MANIFEST_REL);
+    const dir = path.dirname(f);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    fs.writeFileSync(f, JSON.stringify(slugs, null, 2) + '\n', 'utf8');
+}
+/**
+ * Write the supplied (already-sanitized) skills to `<root>/.claude/skills/<slug>/SKILL.md`
+ * as a FULL REPLACE: every previously-synced skill (tracked in the manifest) that
+ * is NOT in the new set is removed, and its now-empty dir pruned. Skills we did
+ * not write (CLI-bundled via applyAllSkills, or user hand-made) are never touched.
+ * Returns the slugs written and removed.
+ */
+function saveProjectSkills(root, safeSkills) {
+    const prev = _readManifest(root);
+    const nextSet = new Set(safeSkills.map(s => s.name));
+    const written = [];
+    const removed = [];
+    // Write / overwrite each safe skill.
+    for (const s of safeSkills) {
+        const target = (0, pathSafe_1.resolveWithinRoot)(root, path.posix.join(SKILLS_REL_DIR, s.name, 'SKILL.md'), false);
+        if (!target) {
+            continue;
+        } // defensive — sanitizer already validated
+        try {
+            const dir = path.dirname(target);
+            if (!fs.existsSync(dir)) {
+                fs.mkdirSync(dir, { recursive: true });
+            }
+            fs.writeFileSync(target, _composeSkillFile(s), 'utf8');
+            written.push(s.name);
+        }
+        catch { /* ignore individual write errors */ }
+    }
+    // Remove previously-synced skills that are gone from the new set — but ONLY
+    // ones we own (in the manifest), never bundled or hand-made skills.
+    for (const slug of prev) {
+        if (nextSet.has(slug)) {
+            continue;
+        }
+        if (!SKILL_NAME_RE.test(slug)) {
+            continue;
+        } // defensive
+        const target = (0, pathSafe_1.resolveWithinRoot)(root, path.posix.join(SKILLS_REL_DIR, slug, 'SKILL.md'), false);
+        if (!target) {
+            continue;
+        }
+        try {
+            if (fs.existsSync(target)) {
+                fs.unlinkSync(target);
+            }
+            const dir = path.dirname(target);
+            if (fs.existsSync(dir) && fs.readdirSync(dir).length === 0) {
+                fs.rmdirSync(dir);
+            }
+            removed.push(slug);
+        }
+        catch { /* ignore */ }
+    }
+    _writeManifest(root, written);
+    return { written, removed };
+}
+// ---------------------------------------------------------------------------
+// Prose fold — for non-Claude providers (opencode/grok/copilot) that cannot
+// load SKILL.md, fold a short managed "## Skills" section into AGENTS.md so
+// those agents still benefit. Idempotent: replaces a marker block, never
+// appends forever. Passing an empty list removes the block.
+// ---------------------------------------------------------------------------
+const SKILLS_FOLD_BEGIN = '<!-- autodev:skills:begin -->';
+const SKILLS_FOLD_END = '<!-- autodev:skills:end -->';
+const SKILLS_FOLD_RE = /\n*<!-- autodev:skills:begin -->[\s\S]*?<!-- autodev:skills:end -->\n*/;
+/**
+ * Fold the given skills into a managed "## Skills" block in `<root>/AGENTS.md`
+ * (best-effort, idempotent). Non-Claude agents read AGENTS.md but cannot load
+ * `.claude/skills`, so this is how they gain the skill instructions. An empty
+ * list strips the block.
+ */
+function foldSkillsIntoProfile(root, safeSkills) {
+    if (!root) {
+        return;
+    }
+    const target = path.join(root, 'AGENTS.md');
+    let block = '';
+    if (safeSkills.length > 0) {
+        const parts = safeSkills.map(s => {
+            const desc = s.description.replace(/[\r\n]+/g, ' ').trim();
+            return `### ${s.name}\n\n${desc}\n\n${s.body.trim()}`;
+        });
+        block = `${SKILLS_FOLD_BEGIN}\n\n## Skills\n\n${parts.join('\n\n')}\n\n${SKILLS_FOLD_END}`;
+    }
+    let content = '';
+    try {
+        if (fs.existsSync(target)) {
+            content = fs.readFileSync(target, 'utf8');
+        }
+    }
+    catch { /* treat as empty */ }
+    if (SKILLS_FOLD_RE.test(content)) {
+        content = content.replace(SKILLS_FOLD_RE, block ? `\n\n${block}\n` : '\n');
+    }
+    else if (block) {
+        content = content ? `${content.replace(/\s+$/, '')}\n\n${block}\n` : `${block}\n`;
+    }
+    else {
+        return; // nothing to add, nothing to strip
+    }
+    try {
+        fs.writeFileSync(target, content, 'utf8');
+    }
+    catch { /* best-effort */ }
+}
+//# sourceMappingURL=projectSkills.js.map

package/out/core/projectSkills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectSkills.js","sourceRoot":"","sources":["../../src/core/projectSkills.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwDA,wDAEC;AASD,oDA2CC;AAiCD,8CAsCC;AAmBD,sDAyBC;AAjOD,uCAAyB;AACzB,2CAA6B;AAC7B,yCAA+C;AAuC/C,4EAA4E;AAC5E,6EAA6E;AAC7E,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAE7C,6DAA6D;AAC7D,MAAM,UAAU,GAAS,GAAG,CAAC,CAAc,kCAAkC;AAC7E,MAAM,YAAY,GAAO,EAAE,CAAC,CAAe,cAAc;AACzD,MAAM,cAAc,GAAK,CAAC,GAAG,IAAI,CAAC,CAAS,uBAAuB;AAClE,MAAM,cAAc,GAAK,EAAE,GAAG,IAAI,CAAC,CAAQ,iBAAiB;AAC5D,MAAM,eAAe,GAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAE,yBAAyB;AAEpE,MAAM,cAAc,GAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC9D,MAAM,YAAY,GAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;AAErE,4FAA4F;AAC5F,SAAgB,sBAAsB,CAAC,QAA4B;IACjE,OAAO,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,YAAY,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAClC,IAAY,EACZ,MAAe;IAEf,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAAC,CAAC;IAE1D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAuC,CAAC;QACtD,MAAM,OAAO,GAAG,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,OAAO,IAAI,WAAW,CAAC;QAErC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/G,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACzI,IAAI,OAAO,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACzG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAChG,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9H,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAEhH,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,0BAA0B,SAAS,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACnJ,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,SAAS,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAE5I,2EAA2E;QAC3E,2EAA2E;QAC3E,6CAA6C;QAC7C,MAAM,MAAM,GAAG,IAAA,4BAAiB,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAE9F,IAAI,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,yBAAyB,UAAU,GAAG,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9H,IAAI,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,yBAAyB,eAAe,GAAG,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAE9J,UAAU,IAAI,SAAS,GAAG,SAAS,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED;oDACoD;AACpD,SAAS,iBAAiB,CAAC,CAAY;IACrC,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,cAAc,CAAC,CAAC,IAAI,kBAAkB,IAAI,YAAY,IAAI,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAe;IACnD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IACpE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAC/B,IAAY,EACZ,UAAuB;IAEvB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,qCAAqC;IACrC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAA,4BAAiB,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC,CAAC,0CAA0C;QACrE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YACpE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;IAClD,CAAC;IAED,4EAA4E;IAC5E,oEAAoE;IACpE,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC,CAAC,YAAY;QACzD,MAAM,MAAM,GAAG,IAAA,4BAAiB,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1B,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAClF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;IAED,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,4DAA4D;AAC5D,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AAC1D,MAAM,eAAe,GAAK,6BAA6B,CAAC;AACxD,MAAM,cAAc,GAAM,wEAAwE,CAAC;AAEnG;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,IAAY,EAAE,UAAuB;IACzE,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAE5C,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,OAAO,OAAO,CAAC,CAAC,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,KAAK,GAAG,GAAG,iBAAiB,oBAAoB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,eAAe,EAAE,CAAC;IAC7F,CAAC;IAED,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAEhH,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC;SAAM,IAAI,KAAK,EAAE,CAAC;QACjB,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,mCAAmC;IAC7C,CAAC;IAED,IAAI,CAAC;QAAC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAChF,CAAC"}

package/out/core/redactSecrets.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Redact known secret shapes from a single string. Applies every pattern in
+ * order (specific before generic). Returns the string unchanged when it holds
+ * no secrets. Safe on empty / non-secret prose.
+ */
+export declare function redactSecrets(text: string): string;
+/**
+ * Deep-redact every STRING value inside an object/array, leaving structure and
+ * KEYS intact. Hook events forwarded to the office are objects (not flat
+ * strings) — their tool_input.command, tool_response, message text, etc. can
+ * each carry a secret — so we walk the whole value and run `redactSecrets` on
+ * every string leaf. Non-string leaves (numbers, booleans, null) pass through
+ * untouched. Returns a NEW value; the input is not mutated.
+ */
+export declare function redactDeep<T>(value: T): T;

package/out/core/redactSecrets.js

@@ -0,0 +1,110 @@
+"use strict";
+// Secrets anonymizer for OUTBOUND agent content.
+//
+// Agent-originated content (tool calls/output, bash output, file reads,
+// assistant prose) is forwarded from the CLI to the pixel-office, where it is
+// STORED and DISPLAYED in the office feed/chat. Secrets (API keys, tokens) can
+// leak into that stream. We redact them HERE, before the content leaves the
+// machine — mirroring how the tutor project redacts its trace files.
+//
+// Scope: this is applied ONLY to outbound content going to the office (hook
+// events, assistant narration, autonomy task results / A2A replies). It is NOT
+// applied to the model's actual input, local files on disk, or the api_key used
+// for auth (that travels as an HTTP header, not as content).
+//
+// Performance: the pattern list is compiled ONCE at module load (the const
+// array below) and reused for every call. `redactSecrets` runs on every
+// forwarded event, so we never rebuild RegExp objects per-call.
+//
+// Ordering: patterns run in array order — SPECIFIC shapes before GENERIC ones
+// (e.g. `sk-ant-` before the generic `sk-` key, so an Anthropic key is labelled
+// as such and its remainder can't be re-matched by a broader rule).
+//
+// The min-length bounds in each pattern are deliberate: they stop the generic
+// rules from mangling ordinary prose. Do NOT loosen them.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactSecrets = redactSecrets;
+exports.redactDeep = redactDeep;
+// NOTE on emails: the reference trace-redactor also maps plain email addresses
+// (PII). We DELIBERATELY do NOT redact emails here — user emails legitimately
+// appear in the office UI (character owners, teammates), and redacting them
+// would mangle normal content. So no email pattern is included.
+const PATTERNS = [
+    // Anthropic API keys — must run BEFORE the generic `sk-` rule.
+    { name: 'anthropic_key', re: /sk-ant-[A-Za-z0-9_-]{15,}/g, replacement: 'sk-ant-REDACTED' },
+    // Generic OpenAI-style `sk-…` keys.
+    { name: 'openai_style_key', re: /sk-[A-Za-z0-9]{20,}/g, replacement: 'sk-REDACTED' },
+    // GitHub tokens: gho_/ghp_/ghr_/ghs_/ghu_.
+    { name: 'gh_token', re: /gh[oprsu]_[A-Za-z0-9]{20,}/g, replacement: 'gh_REDACTED' },
+    // GitHub fine-grained PATs.
+    { name: 'gh_pat', re: /github_pat_[A-Za-z0-9_]{20,}/g, replacement: 'github_pat_REDACTED' },
+    // Google API keys.
+    { name: 'google_api_key', re: /AIza[0-9A-Za-z_-]{25,}/g, replacement: 'AIza_REDACTED' },
+    // Slack tokens: xoxb/xoxa/xoxp/xoxr/xoxs.
+    { name: 'slack_token', re: /xox[baprs]-[0-9A-Za-z-]{20,}/g, replacement: 'xoxX-REDACTED' },
+    // AWS access key IDs.
+    { name: 'aws_access_key', re: /AKIA[0-9A-Z]{16}/g, replacement: 'AKIA_REDACTED' },
+    // Stripe secret/publishable/restricted live+test keys.
+    { name: 'stripe_key', re: /(?:sk|pk|rk)_(?:live|test)_[0-9A-Za-z]{20,}/g, replacement: 'stripe_REDACTED' },
+    // JWTs (three base64url segments).
+    { name: 'jwt_token', re: /eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g, replacement: 'eyJ.REDACTED.JWT' },
+    // `Bearer <token>` — keep the "Bearer " prefix, redact the credential.
+    { name: 'bearer_token', re: /([Bb]earer\s+)[A-Za-z0-9._~+/=-]{20,}/g, replacement: '$1REDACTED_BEARER' },
+    // PEM private-key blocks (RSA / EC / OPENSSH / generic).
+    { name: 'private_key', re: /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]*PRIVATE KEY-----/g, replacement: '-----REDACTED_PRIVATE_KEY-----' },
+    // JSON `"password": "…"` values.
+    { name: 'password_json', re: /("[Pp]ass(?:word|wd)"\s*:\s*")[^"\\]+(")/g, replacement: '$1REDACTED$2' },
+    // JSON `"token"/"auth_token"/"api_token"` values.
+    { name: 'token_json', re: /("(?:[Aa]uth|[Aa]pi)?_?[Tt]oken"\s*:\s*")[^"\\]{15,}(")/g, replacement: '$1REDACTED$2' },
+    // Shell/env `FOO_TOKEN=…`, `API_KEY: …`, `*_SECRET=…`, `*_PASSWORD=…`.
+    { name: 'env_var_secret', re: /([A-Z][A-Z0-9_]*(?:TOKEN|SECRET|API[_-]?KEY|PASSWORD|PASSWD)[A-Z0-9_]*\s*[:=]\s*["']?)[A-Za-z0-9/_+.=-]{15,}/g, replacement: '$1REDACTED' },
+    // ── Our own pixel-office agent credential shapes ────────────────────────────
+    // These are the office agent api_keys (`agt_…`) and personal access tokens
+    // (`pat_…`). They authenticate a character to the office and must NEVER show
+    // up in the office feed itself.
+    { name: 'agt_key', re: /agt_[A-Za-z0-9]{16,}/g, replacement: 'agt_REDACTED' },
+    { name: 'pat_key', re: /pat_[A-Za-z0-9]{16,}/g, replacement: 'pat_REDACTED' },
+];
+/**
+ * Redact known secret shapes from a single string. Applies every pattern in
+ * order (specific before generic). Returns the string unchanged when it holds
+ * no secrets. Safe on empty / non-secret prose.
+ */
+function redactSecrets(text) {
+    if (!text) {
+        return text;
+    }
+    let out = text;
+    for (const p of PATTERNS) {
+        // `re` is a shared module-level RegExp with the global flag. String.replace
+        // does not rely on / advance its lastIndex, so reuse is safe and allocation-
+        // free (unlike RegExp.exec, which would need a lastIndex reset).
+        out = out.replace(p.re, p.replacement);
+    }
+    return out;
+}
+/**
+ * Deep-redact every STRING value inside an object/array, leaving structure and
+ * KEYS intact. Hook events forwarded to the office are objects (not flat
+ * strings) — their tool_input.command, tool_response, message text, etc. can
+ * each carry a secret — so we walk the whole value and run `redactSecrets` on
+ * every string leaf. Non-string leaves (numbers, booleans, null) pass through
+ * untouched. Returns a NEW value; the input is not mutated.
+ */
+function redactDeep(value) {
+    if (typeof value === 'string') {
+        return redactSecrets(value);
+    }
+    if (Array.isArray(value)) {
+        return value.map((v) => redactDeep(v));
+    }
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            out[k] = redactDeep(v);
+        }
+        return out;
+    }
+    return value;
+}
+//# sourceMappingURL=redactSecrets.js.map

package/out/core/redactSecrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactSecrets.js","sourceRoot":"","sources":["../../src/core/redactSecrets.ts"],"names":[],"mappings":";AAAA,iDAAiD;AACjD,EAAE;AACF,wEAAwE;AACxE,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,gFAAgF;AAChF,6DAA6D;AAC7D,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,gEAAgE;AAChE,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,oEAAoE;AACpE,EAAE;AACF,8EAA8E;AAC9E,0DAA0D;;AAuD1D,sCAUC;AAUD,gCAeC;AAlFD,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,gEAAgE;AAEhE,MAAM,QAAQ,GAA6B;IACzC,+DAA+D;IAC/D,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,4BAA4B,EAAE,WAAW,EAAE,iBAAiB,EAAE;IAC3F,oCAAoC;IACpC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,sBAAsB,EAAE,WAAW,EAAE,aAAa,EAAE;IACpF,2CAA2C;IAC3C,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,6BAA6B,EAAE,WAAW,EAAE,aAAa,EAAE;IACnF,4BAA4B;IAC5B,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,+BAA+B,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAC3F,mBAAmB;IACnB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,yBAAyB,EAAE,WAAW,EAAE,eAAe,EAAE;IACvF,0CAA0C;IAC1C,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,+BAA+B,EAAE,WAAW,EAAE,eAAe,EAAE;IAC1F,sBAAsB;IACtB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,mBAAmB,EAAE,WAAW,EAAE,eAAe,EAAE;IACjF,uDAAuD;IACvD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,8CAA8C,EAAE,WAAW,EAAE,iBAAiB,EAAE;IAC1G,mCAAmC;IACnC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,mEAAmE,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC/H,uEAAuE;IACvE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,wCAAwC,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACxG,yDAAyD;IACzD,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,mFAAmF,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC/J,iCAAiC;IACjC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,2CAA2C,EAAE,WAAW,EAAE,cAAc,EAAE;IACvG,kDAAkD;IAClD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,0DAA0D,EAAE,WAAW,EAAE,cAAc,EAAE;IACnH,uEAAuE;IACvE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,+GAA+G,EAAE,WAAW,EAAE,YAAY,EAAE;IAC1K,+EAA+E;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,gCAAgC;IAChC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,uBAAuB,EAAE,WAAW,EAAE,cAAc,EAAE;IAC7E,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,uBAAuB,EAAE,WAAW,EAAE,cAAc,EAAE;CAC9E,CAAC;AAEF;;;;GAIG;AACH,SAAgB,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC3B,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,4EAA4E;QAC5E,6EAA6E;QAC7E,iEAAiE;QACjE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,UAAU,CAAI,KAAQ;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,KAAK,CAAiB,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAiB,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,GAAmB,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/out/core/settingsLoader.d.ts

@@ -40,6 +40,15 @@ export interface AutodevSettings {
      * enableFileBrowser / gitEnabled). Even when enabled, entries are validated.
      */
     mcpUpdateEnabled: boolean;
+    /**
+     * Opt-in: honor `skill_update` frames pushed over the WS channel. When false
+     * (default), inbound skill_update frames are ignored. Writing remote-supplied
+     * skills drops instruction files into `.claude/skills/` that a running Claude
+     * agent live-reads, so it is an instruction-injection surface and must be
+     * explicitly enabled (mirrors mcpUpdateEnabled). Even when enabled, each skill
+     * is validated (slug shape, size caps, workspace path containment).
+     */
+    skillUpdateEnabled: boolean;
     hooksEnabled: boolean;
     hooksScope: 'project' | 'global';
     openCodeHooksEnabled: boolean;

package/out/core/settingsLoader.js

@@ -71,6 +71,7 @@ exports.SETTINGS_DEFAULTS = {
     enableFileBrowser: false,
     gitEnabled: false,
     mcpUpdateEnabled: false,
+    skillUpdateEnabled: false,
     hooksEnabled: false,
     hooksScope: 'project',
     openCodeHooksEnabled: false,

package/out/core/settingsLoader.js.map

@@ -1 +1 @@
-{"version":3,"file":"settingsLoader.js","sourceRoot":"","sources":["../../src/core/settingsLoader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8SA,gCAWC;AAiBD,8CAEC;AAGD,4CAMC;AA0BD,kDA0BC;AAzYD,uCAAyB;AACzB,2CAA6B;AAsOhB,QAAA,iBAAiB,GAAoB;IAChD,QAAQ,EAAE,YAA0B;IACpC,KAAK,EAAE,EAAE;IACT,aAAa,EAAE,EAAE;IACjB,YAAY,EAAE,EAAE;IAChB,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,EAAE;IAChB,gBAAgB,EAAE,EAAE;IACpB,aAAa,EAAE,EAAE;IACjB,YAAY,EAAE,EAAE;IAChB,kBAAkB,EAAE,EAAE;IACtB,kBAAkB,EAAE,EAAE;IACtB,cAAc,EAAE,KAAK;IACrB,qBAAqB,EAAE,IAAI;IAC3B,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,KAAK;IACpB,UAAU,EAAE,KAAK;IACjB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,EAAE;IACf,UAAU,EAAE,KAAK;IACjB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;IACf,SAAS,EAAE,EAAE;IACb,YAAY,EAAE,EAAE;IAChB,iBAAiB,EAAE,KAAK;IACxB,UAAU,EAAE,KAAK;IACjB,gBAAgB,EAAE,KAAK;IACvB,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,SAAS;IACrB,oBAAoB,EAAE,KAAK;IAC3B,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,EAAE;IAChB,WAAW,EAAE,EAAE;IACf,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,EAAE;IACf,SAAS,EAAE,EAAE;IACb,oBAAoB,EAAE,KAAK;IAC3B,UAAU,EAAE,EAAE;IACd,kBAAkB,EAAE,EAAE;IACtB,OAAO,EAAE,KAAK;IACd,gBAAgB,EAAE,cAA4B;IAC9C,uBAAuB,EAAE,KAAK;IAC9B,sBAAsB,EAAE,EAAE;IAC1B,iBAAiB,EAAE,EAAE;IACrB,WAAW,EAAE,KAAK;IAClB,mBAAmB,EAAE,CAAC;IACtB,eAAe,EAAE,CAAC;IAClB,oBAAoB,EAAE,CAAC;IACvB,uBAAuB,EAAE,CAAC;IAC1B,eAAe,EAAE,CAAC;IAClB,oBAAoB,EAAE,CAAC;IACvB,uBAAuB,EAAE,CAAC;IAC1B,kBAAkB,EAAE,CAAC;IACrB,kBAAkB,EAAE,CAAC;IACrB,gBAAgB,EAAE,CAAC;IACnB,iBAAiB,EAAE,CAAC;IACpB,kBAAkB,EAAE,CAAC;IACrB,kBAAkB,EAAE,EAAE;IACtB,aAAa,EAAE,KAAK;IACpB,iBAAiB,EAAE,KAAK;IACxB,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF;;;GAGG;AACH,SAAgB,UAAU,CAAC,KAAa;IACtC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC3F,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,KAAK,GAAM,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAO,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACtD,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,EAAE;AACF,4CAA4C;AAC5C,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAEjE,QAAA,qBAAqB,GAAG,wBAAwB,CAAC;AACjD,QAAA,wBAAwB,GAAG,sBAAsB,CAAC;AAE/D,+EAA+E;AAC/E,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,OAAO,MAAM,CAAC;IAAC,CAAC;IAC7C,OAAO,SAAS,CAAC,CAAC,6CAA6C;AACjE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,gBAAgB,GAA0C;IAC9D,WAAW,EAAE,OAAO;IACpB,MAAM,EAAE,cAAc;IACtB,IAAI,EAAE,aAAa;CACpB,CAAC;AAEF,gHAAgH;AAChH,SAAgB,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,OAAO,EAAE,GAAG,yBAAiB,EAAE,CAAC;QAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA6B,CAAC;QAClF,MAAM,MAAM,GAAG,EAAE,GAAG,yBAAiB,EAAE,GAAG,GAAG,EAAE,CAAC;QAEhD,6EAA6E;QAC7E,MAAM,MAAM,GAAG,GAA8B,CAAC;QAC9C,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3D,MAAkC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,kFAAkF;QAClF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;YAC5C,MAAM,CAAC,YAAY,GAAI,MAAM,CAAC,YAAY,CAAC;YAC3C,MAAM,CAAC,WAAW,GAAK,MAAM,CAAC,WAAW,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,yBAAiB,EAAE,CAAC;IAClC,CAAC;AACH,CAAC"}
+{"version":3,"file":"settingsLoader.js","sourceRoot":"","sources":["../../src/core/settingsLoader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwTA,gCAWC;AAiBD,8CAEC;AAGD,4CAMC;AA0BD,kDA0BC;AAnZD,uCAAyB;AACzB,2CAA6B;AA+OhB,QAAA,iBAAiB,GAAoB;IAChD,QAAQ,EAAE,YAA0B;IACpC,KAAK,EAAE,EAAE;IACT,aAAa,EAAE,EAAE;IACjB,YAAY,EAAE,EAAE;IAChB,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,EAAE;IAChB,gBAAgB,EAAE,EAAE;IACpB,aAAa,EAAE,EAAE;IACjB,YAAY,EAAE,EAAE;IAChB,kBAAkB,EAAE,EAAE;IACtB,kBAAkB,EAAE,EAAE;IACtB,cAAc,EAAE,KAAK;IACrB,qBAAqB,EAAE,IAAI;IAC3B,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,KAAK;IACpB,UAAU,EAAE,KAAK;IACjB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,EAAE;IACf,UAAU,EAAE,KAAK;IACjB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;IACf,SAAS,EAAE,EAAE;IACb,YAAY,EAAE,EAAE;IAChB,iBAAiB,EAAE,KAAK;IACxB,UAAU,EAAE,KAAK;IACjB,gBAAgB,EAAE,KAAK;IACvB,kBAAkB,EAAE,KAAK;IACzB,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,SAAS;IACrB,oBAAoB,EAAE,KAAK;IAC3B,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,EAAE;IAChB,WAAW,EAAE,EAAE;IACf,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,EAAE;IACf,SAAS,EAAE,EAAE;IACb,oBAAoB,EAAE,KAAK;IAC3B,UAAU,EAAE,EAAE;IACd,kBAAkB,EAAE,EAAE;IACtB,OAAO,EAAE,KAAK;IACd,gBAAgB,EAAE,cAA4B;IAC9C,uBAAuB,EAAE,KAAK;IAC9B,sBAAsB,EAAE,EAAE;IAC1B,iBAAiB,EAAE,EAAE;IACrB,WAAW,EAAE,KAAK;IAClB,mBAAmB,EAAE,CAAC;IACtB,eAAe,EAAE,CAAC;IAClB,oBAAoB,EAAE,CAAC;IACvB,uBAAuB,EAAE,CAAC;IAC1B,eAAe,EAAE,CAAC;IAClB,oBAAoB,EAAE,CAAC;IACvB,uBAAuB,EAAE,CAAC;IAC1B,kBAAkB,EAAE,CAAC;IACrB,kBAAkB,EAAE,CAAC;IACrB,gBAAgB,EAAE,CAAC;IACnB,iBAAiB,EAAE,CAAC;IACpB,kBAAkB,EAAE,CAAC;IACrB,kBAAkB,EAAE,EAAE;IACtB,aAAa,EAAE,KAAK;IACpB,iBAAiB,EAAE,KAAK;IACxB,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF;;;GAGG;AACH,SAAgB,UAAU,CAAC,KAAa;IACtC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC3F,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,KAAK,GAAM,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAO,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACtD,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,EAAE;AACF,4CAA4C;AAC5C,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAEjE,QAAA,qBAAqB,GAAG,wBAAwB,CAAC;AACjD,QAAA,wBAAwB,GAAG,sBAAsB,CAAC;AAE/D,+EAA+E;AAC/E,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,OAAO,MAAM,CAAC;IAAC,CAAC;IAC7C,OAAO,SAAS,CAAC,CAAC,6CAA6C;AACjE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,gBAAgB,GAA0C;IAC9D,WAAW,EAAE,OAAO;IACpB,MAAM,EAAE,cAAc;IACtB,IAAI,EAAE,aAAa;CACpB,CAAC;AAEF,gHAAgH;AAChH,SAAgB,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,OAAO,EAAE,GAAG,yBAAiB,EAAE,CAAC;QAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA6B,CAAC;QAClF,MAAM,MAAM,GAAG,EAAE,GAAG,yBAAiB,EAAE,GAAG,GAAG,EAAE,CAAC;QAEhD,6EAA6E;QAC7E,MAAM,MAAM,GAAG,GAA8B,CAAC;QAC9C,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3D,MAAkC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,kFAAkF;QAClF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;YAC5C,MAAM,CAAC,YAAY,GAAI,MAAM,CAAC,YAAY,CAAC;YAC3C,MAAM,CAAC,WAAW,GAAK,MAAM,CAAC,WAAW,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,yBAAiB,EAAE,CAAC;IAClC,CAAC;AACH,CAAC"}

package/out/taskLoop.d.ts

@@ -108,6 +108,14 @@ export declare class TaskLoopRunner {
     restart(): Promise<void>;
     /** Handle mcp_update pushed from pixel-office: write .mcp.json, sync all providers, restart loop. */
     private _handleMcpUpdate;
+    /**
+     * Handle skill_update pushed from pixel-office: validate + write the agent's
+     * FULL effective skill set to `.claude/skills/<slug>/SKILL.md`. Skills
+     * live-reload (Claude re-reads them each run), so this does NOT restart the
+     * loop — it just sanitizes, full-replaces on disk, folds a prose block into
+     * AGENTS.md for non-Claude providers, and reports the applied names.
+     */
+    private _handleSkillUpdate;
     /** Handle export_request from pixel-office: create backup zip and upload. */
     private _handleExportRequest;
     /** Handle restore_request from pixel-office: download zip and restore workspace. */

package/out/taskLoop.js

@@ -61,7 +61,9 @@ const periodicActions_1 = require("./periodicActions");
 const discordGateway_1 = require("./discordGateway");
 const webhookPoller_1 = require("./webhookPoller");
 const emailPoller_1 = require("./emailPoller");
+const modelInfo_1 = require("./core/modelInfo");
 const projectMcp_1 = require("./core/projectMcp");
+const projectSkills_1 = require("./core/projectSkills");
 const configManager_1 = require("./configManager");
 const agentBackup_1 = require("./agentBackup");
 const version_1 = require("./version");
@@ -71,6 +73,7 @@ const version_1 = require("./version");
 const rateLimit_1 = require("./rateLimit");
 const cliExit_1 = require("./cliExit");
 const liveNarration_1 = require("./core/liveNarration");
+const redactSecrets_1 = require("./core/redactSecrets");
 class ContextLengthError extends Error {
     rawMessage;
     constructor(rawMessage) {
@@ -393,7 +396,13 @@ class TaskLoopRunner {
         // `cliVersion` rides in the meta merged into every webhook frame — notably
         // the agent_online (hello) frame — so pixel-office can record which CLI
         // version each agent runs (surfacing stale, steer-incapable agents).
-        this._webhook?.setMeta({ provider: settings.provider, cliVersion: version_1.CLI_VERSION, workDir: root, hostname: this._hostname, gitRepo: this._gitRepo, gitBranch: this._gitBranch });
+        // `model` — the effective friendly model name (Opus 4.8 / kimi-k2.7-code /
+        // grok-code). Resolved from the provider's configured override; undefined
+        // when the provider runs its account default (office gates the field). Rides
+        // in setMeta so it merges into every frame, notably agent_online, where the
+        // office records it against the agent for the per-agent model badge.
+        const effectiveModel = (0, modelInfo_1.resolveConfiguredModel)(settings);
+        this._webhook?.setMeta({ provider: settings.provider, cliVersion: version_1.CLI_VERSION, model: effectiveModel, workDir: root, hostname: this._hostname, gitRepo: this._gitRepo, gitBranch: this._gitBranch });
         this._discordPoller = (settings.discordToken && settings.discordChannelId && settings.discordOwners)
             ? new discordPoller_1.DiscordPoller(settings.discordToken, settings.discordChannelId, settings.discordOwners)
             : null;
@@ -440,6 +449,7 @@ class TaskLoopRunner {
                     // mis-detected as 'claude' by the office's hook-based fallback.
                     provider: this._settings?.provider,
                     cliVersion: version_1.CLI_VERSION,
+                    model: this._settings ? (0, modelInfo_1.resolveConfiguredModel)(this._settings) : undefined,
                     hostname: this._hostname,
                     workDir: this._workspaceRoot ?? '',
                     gitRepo: this._gitRepo,
@@ -491,6 +501,7 @@ class TaskLoopRunner {
             this._webhookPoller.setOnSteer((text, onDelivered) => void this._handleSteer(text, onDelivered));
             this._webhookPoller.setOnCommand((cmd) => this._handleCommand(cmd));
             this._webhookPoller.setOnMcpUpdate((entries) => this._handleMcpUpdate(entries));
+            this._webhookPoller.setOnSkillUpdate((skills) => this._handleSkillUpdate(skills));
             this._webhookPoller.setOnExportRequest((agentId) => void this._handleExportRequest(agentId));
             this._webhookPoller.setOnRestoreRequest((agentId, downloadUrl) => void this._handleRestoreRequest(agentId, downloadUrl));
             this._webhookPoller.setOnExportConfig((exportEnabled, exportDailyBackup, agentId) => this._handleExportConfig(exportEnabled, exportDailyBackup, agentId));
@@ -562,6 +573,7 @@ class TaskLoopRunner {
         this._notifyWebhook('agent_online', {
             provider: settings.provider,
             cliVersion: version_1.CLI_VERSION,
+            model: effectiveModel,
             hostname: this._hostname,
             workDir: root,
             gitRepo: this._gitRepo,
@@ -710,6 +722,44 @@ class TaskLoopRunner {
         }
         void this.restart();
     }
+    /**
+     * Handle skill_update pushed from pixel-office: validate + write the agent's
+     * FULL effective skill set to `.claude/skills/<slug>/SKILL.md`. Skills
+     * live-reload (Claude re-reads them each run), so this does NOT restart the
+     * loop — it just sanitizes, full-replaces on disk, folds a prose block into
+     * AGENTS.md for non-Claude providers, and reports the applied names.
+     */
+    _handleSkillUpdate(skills) {
+        const root = this._workspaceRoot;
+        if (!root)
+            return;
+        // Opt-in gate: remote-supplied skills become instruction files a running
+        // Claude agent live-reads. Ignore unless explicitly enabled, mirroring
+        // mcpUpdateEnabled / enableFileBrowser / gitEnabled.
+        if (!this._settings?.skillUpdateEnabled) {
+            this._cb?.log('🔒 skill_update ignored — skillUpdateEnabled is off (set it in .autodev/settings.json to allow)');
+            return;
+        }
+        this._cb?.log('🧩 skill_update received — validating and writing .claude/skills…');
+        const { safe, rejected } = (0, projectSkills_1.sanitizeRemoteSkills)(root, skills);
+        if (rejected.length) {
+            this._cb?.log(`⚠️ skill_update dropped ${rejected.length} entr${rejected.length === 1 ? 'y' : 'ies'}: ${rejected.map(r => `${r.name} (${r.reason})`).join(', ')}`);
+        }
+        try {
+            // Full-replace: writes the safe set and prunes previously-synced skills
+            // that are gone (even when `safe` is empty — that clears them all).
+            const { written, removed } = (0, projectSkills_1.saveProjectSkills)(root, safe);
+            // Non-Claude providers can't load SKILL.md — fold a prose block into AGENTS.md.
+            if (!(0, projectSkills_1.providerConsumesSkills)(this._settings?.provider)) {
+                (0, projectSkills_1.foldSkillsIntoProfile)(root, safe);
+            }
+            void configManager_1.ConfigManager.reportProjectSkills(root, written, (m) => this._cb?.log(m));
+            this._cb?.log(`✅ skills synced — wrote ${written.length}, removed ${removed.length} (.claude/skills). Live-reloads on the next run — no restart.`);
+        }
+        catch (err) {
+            this._cb?.log(`⚠️ skill update failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
     /** Handle export_request from pixel-office: create backup zip and upload. */
     async _handleExportRequest(agentId) {
         const root = this._workspaceRoot;
@@ -1168,7 +1218,10 @@ class TaskLoopRunner {
                             if (sessionName) {
                                 ev._session_name = sessionName;
                             }
-                            this._webhookPoller.sendFrame({ type: 'hook_event', data: ev });
+                            // Redact secrets from the whole hook object (tool_input/tool_response/
+                            // assistant narration/file contents) before it leaves the machine —
+                            // this stream is stored + rendered in the office feed/chat.
+                            this._webhookPoller.sendFrame({ type: 'hook_event', data: (0, redactSecrets_1.redactDeep)(ev) });
                         }
                         catch { /* skip malformed lines */ }
                     }