brainclaw 1.14.0 → 1.16.0

package/docs/product/entity-model-audit.md

@@ -84,8 +84,9 @@ load-bearing; simplifications cannot break them.
     "never init --force"). Strongest concept; drives hook injection
     to remind agents of the process.
   - **Trap**: environmental or process pitfall to avoid (e.g., "git
-    merge wipes node_modules", "sandbox X blocks MCP writes"). May
-    trigger a corrective plan when resolvable.
+    merge wipes node_modules", "a sandboxed worker's `.git` is read-only
+    → it cannot `git commit`"). May trigger a corrective plan when
+    resolvable.
   All three drive different agent behaviours (decisions = retrieve for
   context, constraints = enforce, traps = warn + resolve).
 

package/docs/security.md

@@ -45,7 +45,28 @@ matches block the write.
 
 When `security.block_sensitive_paths: true` (default), content that
 references paths like `.env`, `secrets/`, `.git/`, or `node_modules/`
-emits a warning.
+is flagged. `block_sensitive_paths` is the **enable-gate** for this layer;
+the flagged level follows the same rule as every other signal — a `warn`
+normally, escalating to `block` under `strict_redaction: true` (mode:
+strict). It is not a standalone block toggle: in warn mode a sensitive-path
+mention warns; in strict mode it blocks, uniformly with redaction, structural,
+and entropy matches.
+
+### Signal layers and levels
+
+`scanText` runs four independent layers, each with its own enable-gate, and
+they all share one level rule:
+
+| Layer | Enable-gate | Level (warn mode / strict) |
+|-------|-------------|----------------------------|
+| Redaction patterns | `redaction.enabled` | warn / block |
+| Structural detectors | `security.token_detection.enabled` | warn / block |
+| Entropy detector | `security.token_detection.entropy.enabled` | warn / block |
+| Sensitive paths | `security.block_sensitive_paths` | warn / block |
+
+`strict_redaction: true` escalates **every** matched signal to `block`
+uniformly; there is no per-layer level override. Excerpts in messages are
+always irreversibly masked.
 
 ### Configuration
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brainclaw",
-  "version": "1.14.0",
+  "version": "1.16.0",
   "description": "Shared project memory for humans and coding agents.",
   "type": "module",
   "repository": {
@@ -62,6 +62,8 @@
     "test:coverage:check": "npm run build:test && c8 --all --check-coverage --lines 55 --functions 60 --branches 65 --statements 55 --src dist-test/src --reporter=text-summary --exclude=dist-test/tests/** --exclude=dist-test/scripts/** node scripts/run-tests.mjs default",
     "bench": "npm run build:test && node scripts/bench.mjs",
     "bench:check": "node scripts/bench-check.mjs",
+    "bench:cold-start": "node scripts/bench-cold-start.mjs",
+    "bench:cold-start:check": "node scripts/bench-cold-start.mjs --check",
     "prepublishOnly": "npm run build:release && npm run pack:check"
   },
   "keywords": [