cli-jaw 2.17.43 → 2.17.44

package/dist/src/slack/tool-context.js

@@ -0,0 +1,91 @@
+import { createHash, randomBytes } from 'node:crypto';
+export const SLACK_TOOL_GRANT_ENV = 'JAW_SLACK_TURN_GRANT';
+const GRANT_TTL_MS = 15 * 60_000;
+const GRANT_CAP = 128;
+const requests = new Map();
+const secrets = new Map();
+export function slackCredentialKey(token) { return createHash('sha256').update(token).digest('hex'); }
+/** Only authenticated ingress supplies source; the HTTP API cannot mint grants. */
+export function reserveSlackToolGrant(source, binding) {
+    if (!/^[UW][A-Z0-9]{1,63}$/.test(source.actorId) || !/^T[A-Z0-9]{1,63}$/.test(source.teamId)
+        || !/^[CGD][A-Z0-9]{1,63}$/.test(source.destination.targetId) || (source.actionToken !== undefined && source.actionToken.length > 8192)
+        || source.destination.channel !== 'slack' || !binding.requestId
+        || requests.has(binding.requestId) || requests.size >= GRANT_CAP)
+        return false;
+    const controller = new AbortController();
+    const secret = `jaw-slack-grant-${randomBytes(32).toString('hex')}`;
+    const grant = Object.freeze({ ...source, destination: Object.freeze({ ...source.destination }), ...binding,
+        expiresAt: Date.now() + GRANT_TTL_MS, signal: controller.signal });
+    const timer = setTimeout(() => revokeSlackToolGrant(binding.requestId), GRANT_TTL_MS);
+    timer.unref?.();
+    const entry = { grant, secret, active: false, controller, timer };
+    requests.set(binding.requestId, entry);
+    secrets.set(secret, entry);
+    return true;
+}
+/** Called only at a fresh main print process launch, never a pooled native lease. */
+export function activateSlackToolGrant(requestId, scope, chatSessionId) {
+    const entry = requestId ? requests.get(requestId) : undefined;
+    if (!entry || entry.active || entry.grant.scope !== scope || entry.grant.chatSessionId !== chatSessionId
+        || entry.grant.expiresAt <= Date.now() || entry.controller.signal.aborted)
+        return undefined;
+    entry.active = true;
+    return entry.secret;
+}
+export function resolveSlackToolGrant(secret) {
+    const entry = secrets.get(secret);
+    if (!entry || !entry.active || entry.controller.signal.aborted)
+        return null;
+    if (entry.grant.expiresAt <= Date.now()) {
+        revokeSlackToolGrant(entry.grant.requestId);
+        return null;
+    }
+    return entry.grant;
+}
+export function revokeSlackToolGrant(requestId) {
+    const entry = requestId ? requests.get(requestId) : undefined;
+    if (!entry)
+        return;
+    requests.delete(entry.grant.requestId);
+    secrets.delete(entry.secret);
+    clearTimeout(entry.timer);
+    entry.controller.abort();
+}
+export function revokeSlackToolScope(scope) {
+    for (const [id, entry] of requests)
+        if (scope === undefined || entry.grant.scope === scope)
+            revokeSlackToolGrant(id);
+}
+export function redactSlackToolSecrets(text) {
+    return text.replace(/jaw-slack-(?:grant|operator)-[a-f0-9]{64}/g, '[REDACTED_SLACK_TOOL_CREDENTIAL]');
+}
+/** Complete-line buffering prevents chunk boundaries from splitting credential masking. */
+export function createSlackToolSecretStream() {
+    let pending = '';
+    let dropping = false;
+    return (chunk, flush = false) => {
+        const lines = (pending + chunk).split('\n');
+        pending = lines.pop() ?? '';
+        const output = [];
+        for (const line of lines) {
+            if (dropping) {
+                dropping = false;
+                continue;
+            }
+            output.push(line.length > 8192 ? '[stderr truncated]' : redactSlackToolSecrets(line));
+        }
+        if (pending.length > 8192) {
+            pending = '';
+            dropping = true;
+            output.push('[stderr truncated]');
+        }
+        if (flush) {
+            if (pending && !dropping)
+                output.push(redactSlackToolSecrets(pending));
+            pending = '';
+            dropping = false;
+        }
+        return output.length ? output.join('\n') + '\n' : '';
+    };
+}
+//# sourceMappingURL=tool-context.js.map

package/dist/src/slack/tool-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-context.js","sourceRoot":"","sources":["../../../src/slack/tool-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAGtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,CAAC;AACjC,MAAM,SAAS,GAAG,GAAG,CAAC;AAItB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;AAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;AAEzC,MAAM,UAAU,kBAAkB,CAAC,KAAa,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtH,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,MAAuB,EAAE,OAAoE;IAC/H,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;WACrF,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC;WACpI,MAAM,CAAC,WAAW,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS;WAC5D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IACnF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,mBAAmB,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACpE,MAAM,KAAK,GAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,OAAO;QACtH,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC;IACtF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,MAAM,KAAK,GAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACzE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CAAC,SAA6B,EAAE,KAAa,EAAE,aAAqB;IACtG,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,aAAa;WACjG,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAChG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,KAAK,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACtG,OAAO,KAAK,CAAC,KAAK,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAoC;IACrE,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAC/C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,QAAQ;QAAE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC;AACzH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,4CAA4C,EAAE,kCAAkC,CAAC,CAAC;AAC1G,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,2BAA2B;IACvC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,QAAQ,EAAE,CAAC;gBAAC,QAAQ,GAAG,KAAK,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAAC,CAAC;QAChG,IAAI,KAAK,EAAE,CAAC;YACR,IAAI,OAAO,IAAI,CAAC,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;YACvE,OAAO,GAAG,EAAE,CAAC;YAAC,QAAQ,GAAG,KAAK,CAAC;QACnC,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC,CAAC;AACN,CAAC"}

package/dist/src/slack/verified-workspace.js

@@ -31,15 +31,26 @@ export async function verifiedSlackWorkspace(token, opts = {}) {
     const trimmed = token.trim();
     if (!trimmed)
         return null;
-    if (cached && cached.token === trimmed) {
+    if (cached && cached.token === trimmed && !opts.refresh) {
         return { teamId: cached.teamId, userId: cached.userId };
     }
-    const auth = await slackApi(trimmed, 'auth.test', {}, opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {});
-    const teamId = String(auth.data?.team_id ?? '').trim();
-    if (!auth.ok || !teamId)
+    const auth = await slackApi(trimmed, 'auth.test', {}, { ...(opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}), ...(opts.sensitiveResponse ? { sensitiveResponse: true } : {}), ...(opts.signal ? { signal: opts.signal } : {}) });
+    const teamId = typeof auth.data?.team_id === 'string' ? auth.data.team_id.trim() : '';
+    if (!auth.ok || !/^T[A-Za-z0-9_]{0,63}$/.test(teamId))
         return null;
-    const userId = String(auth.data?.user_id ?? '').trim() || null;
-    cached = { token: trimmed, teamId, userId };
+    const rawUser = typeof auth.data?.user_id === 'string' ? auth.data.user_id.trim() : '';
+    const userId = /^[UW][A-Za-z0-9_]{0,63}$/.test(rawUser) ? rawUser : null;
+    const rawScopes = auth.grantedScopes;
+    const split = rawScopes === undefined ? null : rawScopes.split(',').map(value => value.trim()).filter(Boolean);
+    const scopes = split && split.length <= 256 && split.every(value => /^[a-z][a-z0-9_.]*(?::[a-z0-9_.]+)*$/.test(value) && value.length <= 80) ? [...new Set(split)] : null;
+    cached = { token: trimmed, teamId, userId, scopes, observedAt: Date.now() };
     return { teamId, userId };
 }
+export async function readSlackAuthSnapshot(token, opts = {}) {
+    const refresh = !cached || cached.token !== token.trim() || Date.now() - cached.observedAt > 30000;
+    const identity = await verifiedSlackWorkspace(token, { ...opts, sensitiveResponse: true, refresh });
+    if (!identity || !cached || cached.token !== token.trim())
+        return null;
+    return { ...identity, scopes: cached.scopes ? [...cached.scopes] : null, observedAt: cached.observedAt };
+}
 //# sourceMappingURL=verified-workspace.js.map

package/dist/src/slack/verified-workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"verified-workspace.js","sourceRoot":"","sources":["../../../src/slack/verified-workspace.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,kFAAkF;AAClF,kFAAkF;AAClF,wBAAwB;AACxB,EAAE;AACF,gFAAgF;AAChF,mFAAmF;AACnF,kDAAkD;AAClD,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,uEAAuE;AACvE,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAEhF,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAKpC,IAAI,MAAM,GAAoB,IAAI,CAAC;AAEnC,mDAAmD;AACnD,MAAM,UAAU,2BAA2B;IACvC,MAAM,GAAG,IAAI,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,KAAa,EACb,OAA+C,EAAE;IAEjD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CACvB,OAAO,EACP,WAAW,EACX,EAAE,EACF,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CACtD,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/D,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"verified-workspace.js","sourceRoot":"","sources":["../../../src/slack/verified-workspace.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,kFAAkF;AAClF,kFAAkF;AAClF,wBAAwB;AACxB,EAAE;AACF,gFAAgF;AAChF,mFAAmF;AACnF,kDAAkD;AAClD,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,uEAAuE;AACvE,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAEhF,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAKpC,IAAI,MAAM,GAAoB,IAAI,CAAC;AAEnC,mDAAmD;AACnD,MAAM,UAAU,2BAA2B;IACvC,MAAM,GAAG,IAAI,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,KAAa,EACb,OAAqH,EAAE;IAEvH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACtD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CACvB,OAAO,EACP,WAAW,EACX,EAAE,EACF,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAChL,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC;IACrC,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1K,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa,EAAE,OAAyD,EAAE;IAClH,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC;IACnG,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACpG,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7G,CAAC"}

package/dist/src/trace/redact.js

@@ -1,3 +1,4 @@
+import { redactSlackToolSecrets } from '../slack/tool-context.js';
 const SECRET_KEY_RE = /(authorization|bearer|cookie|password|passwd|token|api[_-]?key|secret|credential|session[_-]?id|aws[_-]?access|jwt)/i;
 const TOKEN_PATTERNS = [
     [/(Bearer\s+)[A-Za-z0-9._~+/-]+=*/gi, '$1[REDACTED]'],
@@ -11,7 +12,7 @@ const TOKEN_PATTERNS = [
     [/((?:API_KEY|TOKEN|SECRET|PASSWORD|AUTHORIZATION)=)[^\s"']+/gi, '$1[REDACTED]'],
 ];
 function redactString(value) {
-    let next = value;
+    let next = redactSlackToolSecrets(value);
     for (const [pattern, replacement] of TOKEN_PATTERNS)
         next = next.replace(pattern, replacement);
     return next;

package/dist/src/trace/redact.js.map

@@ -1 +1 @@
-{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../../src/trace/redact.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,sHAAsH,CAAC;AAC7I,MAAM,cAAc,GAA4B;IAC5C,CAAC,mCAAmC,EAAE,cAAc,CAAC;IACrD,CAAC,kCAAkC,EAAE,0BAA0B,CAAC;IAChE,CAAC,8BAA8B,EAAE,uBAAuB,CAAC;IACzD,CAAC,oCAAoC,EAAE,yBAAyB,CAAC;IACjE,CAAC,qCAAqC,EAAE,wBAAwB,CAAC;IACjE,CAAC,+BAA+B,EAAE,uBAAuB,CAAC;IAC1D,CAAC,yBAAyB,EAAE,oBAAoB,CAAC;IACjD,CAAC,sEAAsE,EAAE,gBAAgB,CAAC;IAC1F,CAAC,8DAA8D,EAAE,cAAc,CAAC;CACnF,CAAC;AAEF,SAAS,YAAY,CAAC,KAAa;IAC/B,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,cAAc;QAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/F,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACtD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACpC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAC9C,IAAI,CAAC;QACD,OAAO,OAAO,KAAK,KAAK,QAAQ;YAC5B,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;YACrB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,QAAQ,GAAG,aAAa,EAAE,GAAG,GAAG,GAAG;IAC5E,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC;IAC/E,OAAO,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAChE,CAAC"}
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../../src/trace/redact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,MAAM,aAAa,GAAG,sHAAsH,CAAC;AAC7I,MAAM,cAAc,GAA4B;IAC5C,CAAC,mCAAmC,EAAE,cAAc,CAAC;IACrD,CAAC,kCAAkC,EAAE,0BAA0B,CAAC;IAChE,CAAC,8BAA8B,EAAE,uBAAuB,CAAC;IACzD,CAAC,oCAAoC,EAAE,yBAAyB,CAAC;IACjE,CAAC,qCAAqC,EAAE,wBAAwB,CAAC;IACjE,CAAC,+BAA+B,EAAE,uBAAuB,CAAC;IAC1D,CAAC,yBAAyB,EAAE,oBAAoB,CAAC;IACjD,CAAC,sEAAsE,EAAE,gBAAgB,CAAC;IAC1F,CAAC,8DAA8D,EAAE,cAAc,CAAC;CACnF,CAAC;AAEF,SAAS,YAAY,CAAC,KAAa;IAC/B,IAAI,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,cAAc;QAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/F,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACtD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACpC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAC9C,IAAI,CAAC;QACD,OAAO,OAAO,KAAK,KAAK,QAAQ;YAC5B,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;YACrB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,QAAQ,GAAG,aAAa,EAAE,GAAG,GAAG,GAAG;IAC5E,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC;IAC/E,OAAO,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAChE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cli-jaw",
-  "version": "2.17.43",
+  "version": "2.17.44",
   "description": "Personal AI assistant powered by Pi, Antigravity, AI-E, Claude, Claude E, Codex, Codex App, Cursor, Grok, Kiro, OpenCode, and Copilot — Web, Terminal, Slack, Telegram, and Discord interfaces with 33 skills active by default from a 230-skill reference library",
   "type": "module",
   "keywords": [