blun-king-cli 9.1.571 → 9.1.572

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 9.1.572
+
+- Research evidence rejects source URLs containing recognized credential parameter
+  names in queries or parameter-shaped fragments, including nested names and
+  fragment routes. Rejection applies to failed sources as well as usable sources.
+- Previously saved reports with these URLs are withheld during recall with the
+  existing `partial` / `report-invalid` result. Original snapshots are not modified
+  or deleted, and source addresses are never silently stripped or rewritten.
+- Ordinary documentation queries and anchors retain their exact bytes. This is
+  a credential-name boundary, not general secret detection or a history cleanup.
+
+
 ## 9.1.571
 
 - Bind Telegram queue ranges to their owning session. A new session no longer automatically consumes work left pending by an older session; resuming a known session restores only its own pending ranges.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.571",
+  "version": "9.1.572",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {

package/standard-skills/research-evidence/references/evidence-format.md

@@ -80,3 +80,25 @@ unread global corpus. `limited:true` also flags result-count or output truncatio
 continuation is for the read budget, not pagination of every lexical hit. Narrow
 the query when necessary. Unavailable or partial results must remain visible as
 limitations; they do not prevent ordinary authorized research.
+
+## Source URL Credential Boundary
+
+All source statuses reject URL userinfo and recognized credential parameter names
+in queries and parameter-shaped fragments, including fragment routes. Names are
+decoded with URLSearchParams, compared case-insensitively, and checked within
+bracket/dot nesting. Examples include access_token, refresh_token, api_key,
+client_secret, authorization, session_id and signed-URL credential/signature fields.
+
+The source address is never silently stripped or rewritten. Normal queries such
+as `q=access_token`, bare `key` / `code` parameters, and ordinary documentation
+anchors are not classified as credentials. This is not a general secret detector:
+custom keys, opaque path values, nested encoded URLs and report text still require
+the explicit review described above. Passing validation does not prove public
+reachability, permission to share, or absence of secrets.
+
+New invalid reports return `saved:false` / `report-invalid` before collection
+creation. Reading an older invalid report withholds that snapshot and reports
+`partial` / `report-invalid`, while leaving its original bytes on disk. Other valid
+snapshots may still be returned. This is not automatic cleanup or credential
+revocation. Do not remove history or rewrite URLs to make validation pass.
+

package/standard-skills/research-evidence/scripts/score-report.cjs

@@ -5,6 +5,25 @@ const ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,99}$/;
 const HASH = /^[a-f0-9]{64}$/;
 const STATES = new Set(['usable', 'failed', 'challenge', 'irrelevant', 'stale']);
 const VERDICTS = new Set(['supported', 'unsupported', 'uncertain']);
+const CREDENTIAL_PARAMETER = /^(?:(?:access|refresh|id|oauth)[_-]?token|token|api[_-]?key|client[_-]?secret|password|passwd|authorization|bearer|jwt|session[_-]?(?:id|token)|secret|signature|sig|x-(?:amz|goog)-(?:signature|credential|security-token))$/i;
+function validateSourceUrl(value) {
+  let url;
+  try { url = new URL(value); } catch { assert.fail('source URL'); }
+  assert(['http:', 'https:'].includes(url.protocol) && !url.username && !url.password, 'source URL');
+  const parameters = [url.searchParams];
+  // OAuth-style fragments can hold credentials; ordinary documentation anchors stay intact.
+  const fragment = url.hash.slice(1);
+  if (fragment.includes('=')) {
+    parameters.push(new URLSearchParams(fragment));
+    const queryStart = fragment.indexOf('?');
+    if (queryStart !== -1) parameters.push(new URLSearchParams(fragment.slice(queryStart + 1)));
+  }
+  for (const params of parameters) {
+    for (const key of params.keys()) {
+      assert(!key.split(/[\[\].]+/).some(part => CREDENTIAL_PARAMETER.test(part)), 'source URL');
+    }
+  }
+}
 function boundedArray(value, maximum, label) {
   assert(Array.isArray(value) && value.length <= maximum, label);
   return value;
@@ -38,8 +57,7 @@ function score(report) {
   const sourceMap = new Map();
   const sourceCounts = Object.fromEntries([...STATES].map(status => [status, 0]));
   for (const source of sources) {
-    const url = new URL(source.url);
-    assert(['http:', 'https:'].includes(url.protocol) && !url.username && !url.password, 'source URL');
+    validateSourceUrl(source.url);
     assert(STATES.has(source.status), 'source status');
     assert(source.retrievedAt === null || timestamp(source.retrievedAt), 'source time');
     assert(source.contentSha256 === null || HASH.test(source.contentSha256), 'source hash');