jeopi-cli 16.4.4 → 16.5.0

package/dist/types/config/settings-schema.d.ts

@@ -73,33 +73,44 @@ interface UiString extends UiBase {
 export type AnyUiMetadata = UiBase & {
     options?: ReadonlyArray<SubmenuOption> | "runtime";
 };
-interface BooleanDef {
+/**
+ * Marks a setting whose value is a credential.
+ *
+ * Lives at the top level rather than inside `ui` so it can also describe a
+ * setting the settings panel never shows and therefore cannot carry
+ * `ui.secret`. Read it through `isCredential`, which is the single accessor
+ * both the CLI and the settings panel consult.
+ */
+interface CredentialMarker {
+    credential?: true;
+}
+interface BooleanDef extends CredentialMarker {
     type: "boolean";
     default: boolean | undefined;
     ui?: UiBoolean;
 }
-interface StringDef {
+interface StringDef extends CredentialMarker {
     type: "string";
     default: string | undefined;
     ui?: UiString;
 }
-interface NumberDef {
+interface NumberDef extends CredentialMarker {
     type: "number";
     default: number | undefined;
     ui?: UiNumber;
 }
-interface EnumDef<T extends readonly string[]> {
+interface EnumDef<T extends readonly string[]> extends CredentialMarker {
     type: "enum";
     values: T;
     default: T[number];
     ui?: UiEnum<T>;
 }
-interface ArrayDef<T> {
+interface ArrayDef<T> extends CredentialMarker {
     type: "array";
     default: T[];
     ui?: UiBase;
 }
-interface RecordDef<T> {
+interface RecordDef<T> extends CredentialMarker {
     type: "record";
     default: Record<string, T>;
     ui?: UiBase;
@@ -127,6 +138,7 @@ export declare const SETTINGS_SCHEMA: {
     readonly "auth.broker.token": {
         readonly type: "string";
         readonly default: undefined;
+        readonly credential: true;
     };
     readonly autoResume: {
         readonly type: "boolean";
@@ -5336,6 +5348,7 @@ export declare const SETTINGS_SCHEMA: {
     readonly "searxng.token": {
         readonly type: "string";
         readonly default: undefined;
+        readonly credential: true;
     };
     readonly "searxng.basicUsername": {
         readonly type: "string";
@@ -5344,6 +5357,7 @@ export declare const SETTINGS_SCHEMA: {
     readonly "searxng.basicPassword": {
         readonly type: "string";
         readonly default: undefined;
+        readonly credential: true;
     };
     readonly "searxng.categories": {
         readonly type: "string";
@@ -5400,6 +5414,7 @@ export declare const SETTINGS_SCHEMA: {
     readonly "dev.autoqaPush.token": {
         readonly type: "string";
         readonly default: undefined;
+        readonly credential: true;
     };
     /**
      * User decision on sharing automatic `report_tool_issue` grievances.
@@ -5494,6 +5509,12 @@ export declare function getDefault<P extends SettingPath>(path: P): SettingValue
 export declare function hasUi(path: SettingPath): boolean;
 /** Get UI metadata for a path (undefined if no UI) */
 export declare function getUi(path: SettingPath): AnyUiMetadata | undefined;
+/**
+ * True when a setting holds a credential and must never be printed in a bulk
+ * dump. The single accessor every surface consults, so the CLI and the settings
+ * panel cannot diverge on what counts as a secret.
+ */
+export declare function isCredential(path: SettingPath): boolean;
 /** Get all paths for a specific tab */
 export declare function getPathsForTab(tab: SettingTab): SettingPath[];
 /** Get the type of a setting */

package/dist/types/session/blob-store.d.ts

@@ -34,7 +34,16 @@ export declare class BlobStore {
 }
 /** Check if a data string is a blob reference. */
 export declare function isBlobRef(data: string): boolean;
-/** Extract the SHA-256 hash from a blob reference string. */
+/**
+ * Extract the SHA-256 hash from a blob reference string.
+ *
+ * Returns null when the string is not a blob ref, or when the suffix is not a
+ * canonical 64-char lowercase hex hash. Rejecting non-hash suffixes here is the
+ * single choke point that keeps every resolution path confined to the blob dir:
+ * `get`/`getSync`/`has` feed this value into `path.join(this.dir, hash)`, so an
+ * unvalidated `../` suffix in a crafted session file would otherwise escape the
+ * store and read arbitrary files.
+ */
 export declare function parseBlobRef(data: string): string | null;
 /** Identify provider transport image data URLs so persistence can externalize and restore them losslessly. */
 export declare function isImageDataUrl(data: string): boolean;

package/dist/types/session/exit-diagnostics.d.ts

@@ -1,3 +1,4 @@
+import type { AssistantMessage } from "jeopi-ai";
 import type { SessionEntry } from "./session-entries";
 export declare const TOOL_EXECUTION_START_CUSTOM_TYPE = "tool_execution_start";
 export declare const SESSION_EXIT_CUSTOM_TYPE = "session_exit";
@@ -35,6 +36,16 @@ export interface SessionExitData {
     recordedAt: string;
     pendingToolCalls?: PendingToolCallDiagnostic[];
 }
+export interface AssistantModelMetadata {
+    api: AssistantMessage["api"];
+    provider: string;
+    model: string;
+}
+/**
+ * createInterruptedTurnAbortMessage returns a terminal assistant record when
+ * the latest persisted process exit follows a non-terminal conversation tail.
+ */
+export declare function createInterruptedTurnAbortMessage(entries: readonly SessionEntry[], fallbackModel?: AssistantModelMetadata): AssistantMessage | undefined;
 /**
  * Project full tool-call arguments down to the fields the pending-tool-call
  * resume warning actually renders (`command`/`path`), truncated. Returns

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "jeopi-cli",
-	"version": "16.4.4",
+	"version": "16.5.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/akillness/jeopi",
 	"author": "Can Boluk",
@@ -57,17 +57,17 @@
 		"@agentclientprotocol/sdk": "0.25.0",
 		"@babel/parser": "^7.29.7",
 		"@mozilla/readability": "^0.6.0",
-		"jeopi-hashline": "16.4.4",
-		"jeopi-stats": "16.4.4",
-		"jeopi-agent-core": "16.4.4",
-		"jeopi-ai": "16.4.4",
-		"jeopi-catalog": "16.4.4",
-		"jeopi-mnemopi": "16.4.4",
-		"jeopi-natives": "16.4.4",
-		"jeopi-tui": "16.4.4",
-		"jeopi-utils": "16.4.4",
-		"jeopi-wire": "16.4.4",
-		"jeopi-snapcompact": "16.4.4",
+		"jeopi-hashline": "16.5.0",
+		"jeopi-stats": "16.5.0",
+		"jeopi-agent-core": "16.5.0",
+		"jeopi-ai": "16.5.0",
+		"jeopi-catalog": "16.5.0",
+		"jeopi-mnemopi": "16.5.0",
+		"jeopi-natives": "16.5.0",
+		"jeopi-tui": "16.5.0",
+		"jeopi-utils": "16.5.0",
+		"jeopi-wire": "16.5.0",
+		"jeopi-snapcompact": "16.5.0",
 		"@opentelemetry/api": "^1.9.1",
 		"@opentelemetry/context-async-hooks": "^2.7.1",
 		"@opentelemetry/exporter-trace-otlp-proto": "^0.218.0",
@@ -77,7 +77,7 @@
 		"@puppeteer/browsers": "^3.0.4",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",
-		"arktype": "^2.2.0",
+		"arktype": "2.2.3",
 		"chalk": "^5.6.2",
 		"diff": "^9.0.0",
 		"fast-xml-parser": "^5.9.0",
@@ -86,7 +86,7 @@
 		"lru-cache": "11.5.1",
 		"mammoth": "^1.12.0",
 		"mupdf": "^1.27.0",
-		"puppeteer-core": "^25.1.0",
+		"puppeteer-core": "25.4.0",
 		"turndown": "7.2.4",
 		"turndown-plugin-gfm": "1.0.2",
 		"zod": "^4"

package/src/cli/config-cli.ts

@@ -12,6 +12,7 @@ import {
 	getEnumValues,
 	getType,
 	getUi,
+	isCredential,
 	type SettingPath,
 	Settings,
 	type SettingValue,
@@ -50,6 +51,9 @@ type CliSettingDef = {
 
 const ALL_SETTING_PATHS = Object.keys(SETTINGS_SCHEMA) as SettingPath[];
 
+/** Printed instead of a credential value in human output only. */
+const REDACTED = "********";
+
 /** Find setting definition by path */
 function findSettingDef(path: string): CliSettingDef | undefined {
 	if (!(path in SETTINGS_SCHEMA)) return undefined;
@@ -278,13 +282,20 @@ function handleList(flags: { json?: boolean }): void {
 	const defs = ALL_SETTING_PATHS.map(path => findSettingDef(path)).filter((def): def is CliSettingDef => !!def);
 
 	if (flags.json) {
-		const result: Record<string, { value: unknown; type: string; description: string }> = {};
+		// A redacted entry omits `value` and says so, rather than substituting a
+		// placeholder string: a consumer cannot tell a stand-in from a real value
+		// and could write it back as the credential.
+		//
+		// Redaction is driven by the value, not by classification alone. Marking an
+		// unset credential as redacted would report every fresh install as having
+		// one configured, which leaks the opposite of what redaction is for.
+		const result: Record<string, { value?: unknown; redacted?: true; type: string; description: string }> = {};
 		for (const def of defs) {
-			result[def.path] = {
-				value: settings.get(def.path),
-				type: def.type,
-				description: def.description,
-			};
+			const value = settings.get(def.path);
+			result[def.path] =
+				isCredential(def.path) && value
+					? { redacted: true, type: def.type, description: def.description }
+					: { value, type: def.type, description: def.description };
 		}
 		console.log(JSON.stringify(result, null, 2));
 		return;
@@ -309,8 +320,13 @@ function handleList(flags: { json?: boolean }): void {
 	for (const group of sortedGroups) {
 		console.log(chalk.bold.blue(`[${group}]`));
 		for (const def of groups[group]) {
+			// `list` dumps every value without anyone asking for a specific
+			// credential, so redact here. `get <path>` stays an explicit
+			// single-value request and is left alone. An unset or cleared ("")
+			// credential keeps its ordinary rendering: masking it would imply one
+			// is configured.
 			const value = settings.get(def.path);
-			const valueStr = formatValue(value);
+			const valueStr = isCredential(def.path) && value ? REDACTED : formatValue(value);
 			const typeStr = getTypeDisplay(def);
 			console.log(`  ${chalk.white(def.path)} = ${valueStr} ${chalk.dim(typeStr)}`);
 		}

package/src/config/settings-schema.ts

@@ -219,38 +219,50 @@ export type AnyUiMetadata = UiBase & {
 	options?: ReadonlyArray<SubmenuOption> | "runtime";
 };
 
-interface BooleanDef {
+/**
+ * Marks a setting whose value is a credential.
+ *
+ * Lives at the top level rather than inside `ui` so it can also describe a
+ * setting the settings panel never shows and therefore cannot carry
+ * `ui.secret`. Read it through `isCredential`, which is the single accessor
+ * both the CLI and the settings panel consult.
+ */
+interface CredentialMarker {
+	credential?: true;
+}
+
+interface BooleanDef extends CredentialMarker {
 	type: "boolean";
 	default: boolean | undefined;
 	ui?: UiBoolean;
 }
 
-interface StringDef {
+interface StringDef extends CredentialMarker {
 	type: "string";
 	default: string | undefined;
 	ui?: UiString;
 }
 
-interface NumberDef {
+interface NumberDef extends CredentialMarker {
 	type: "number";
 	default: number | undefined;
 	ui?: UiNumber;
 }
 
-interface EnumDef<T extends readonly string[]> {
+interface EnumDef<T extends readonly string[]> extends CredentialMarker {
 	type: "enum";
 	values: T;
 	default: T[number];
 	ui?: UiEnum<T>;
 }
 
-interface ArrayDef<T> {
+interface ArrayDef<T> extends CredentialMarker {
 	type: "array";
 	default: T[];
 	ui?: UiBase;
 }
 
-interface RecordDef<T> {
+interface RecordDef<T> extends CredentialMarker {
 	type: "record";
 	default: Record<string, T>;
 	ui?: UiBase;
@@ -344,7 +356,7 @@ export const SETTINGS_SCHEMA = {
 	// Env (`JEOPI_AUTH_BROKER_URL` / `JEOPI_AUTH_BROKER_TOKEN`) takes precedence so
 	// per-machine overrides remain trivial.
 	"auth.broker.url": { type: "string", default: undefined },
-	"auth.broker.token": { type: "string", default: undefined },
+	"auth.broker.token": { type: "string", default: undefined, credential: true },
 
 	autoResume: {
 		type: "boolean",
@@ -4889,6 +4901,7 @@ export const SETTINGS_SCHEMA = {
 	"searxng.token": {
 		type: "string",
 		default: undefined,
+		credential: true,
 	},
 
 	"searxng.basicUsername": {
@@ -4899,6 +4912,7 @@ export const SETTINGS_SCHEMA = {
 	"searxng.basicPassword": {
 		type: "string",
 		default: undefined,
+		credential: true,
 	},
 
 	"searxng.categories": {
@@ -4948,6 +4962,7 @@ export const SETTINGS_SCHEMA = {
 	"dev.autoqaPush.token": {
 		type: "string",
 		default: undefined,
+		credential: true,
 	},
 
 	/**
@@ -5036,6 +5051,16 @@ export function getUi(path: SettingPath): AnyUiMetadata | undefined {
 	return "ui" in def ? (def.ui as AnyUiMetadata) : undefined;
 }
 
+/**
+ * True when a setting holds a credential and must never be printed in a bulk
+ * dump. The single accessor every surface consults, so the CLI and the settings
+ * panel cannot diverge on what counts as a secret.
+ */
+export function isCredential(path: SettingPath): boolean {
+	const def = SETTINGS_SCHEMA[path];
+	return "credential" in def && def.credential === true;
+}
+
 /** Get all paths for a specific tab */
 export function getPathsForTab(tab: SettingTab): SettingPath[] {
 	return (Object.keys(SETTINGS_SCHEMA) as SettingPath[]).filter(path => {

package/src/config/settings.ts

@@ -701,6 +701,46 @@ export class Settings {
 		}
 	}
 
+	/**
+	 * Read the config file for the read-modify-write save path.
+	 *
+	 * Unlike {@link Settings.#loadYaml}, a present-but-unusable file is NEVER
+	 * reported as empty settings. `#saveNow` merges the modified keys into
+	 * whatever this returns and writes the result back, so returning `{}` for a
+	 * malformed or temporarily unreadable file would replace the user's entire
+	 * configuration — broker tokens, model roles, provider entries — with the one
+	 * key that happened to change. A missing file is the only safe empty base.
+	 *
+	 * An invalid file is moved aside first so the next save starts from a clean
+	 * slate instead of failing forever, and the original bytes survive for
+	 * recovery. Both failure modes throw; the caller re-queues the write.
+	 */
+	async #loadYamlForWrite(filePath: string): Promise<RawSettings> {
+		let content: string;
+		try {
+			content = await Bun.file(filePath).text();
+		} catch (error) {
+			if (isEnoent(error)) return {};
+			throw new Error(`Failed to read settings config ${filePath}: ${String(error)}`);
+		}
+		try {
+			const parsed = YAML.parse(content);
+			if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
+			return this.#migrateRawSettings(parsed as RawSettings);
+		} catch (error) {
+			const backupPath = `${filePath}.broken-${Date.now()}-${process.pid}`;
+			try {
+				await fs.promises.rename(filePath, backupPath);
+			} catch (renameError) {
+				throw new Error(
+					`Settings config is invalid and could not be moved aside: ${filePath}; refusing to overwrite it: ${String(renameError)}`,
+				);
+			}
+			logger.warn("Settings: moved invalid config aside", { path: filePath, backupPath, error: String(error) });
+			throw new Error(`Settings config is invalid: ${filePath} (moved to ${backupPath}): ${String(error)}`);
+		}
+	}
+
 	async #loadProjectSettings(): Promise<RawSettings> {
 		try {
 			const result = await loadCapability(settingsCapability.id, { cwd: this.#cwd });
@@ -1282,8 +1322,9 @@ export class Settings {
 
 		try {
 			await withFileLock(configPath, async () => {
-				// Re-read to preserve external changes
-				const current = await this.#loadYaml(configPath);
+				// Re-read to preserve external changes. Never treat an unreadable or
+				// malformed file as empty here — that would overwrite it wholesale.
+				const current = await this.#loadYamlForWrite(configPath);
 
 				// Apply only our modified paths
 				for (const modPath of modifiedPaths) {

package/src/extensibility/plugins/legacy-pi-bundled-keys.ts

@@ -111,6 +111,7 @@ export const BUNDLED_PI_REGISTRY_KEYS: ReadonlySet<string> = new Set([
 	"@oh-my-pi/pi-ai/utils/deterministic-id",
 	"@oh-my-pi/pi-ai/utils/empty-completion-retry",
 	"@oh-my-pi/pi-ai/utils/event-stream",
+	"@oh-my-pi/pi-ai/utils/fences",
 	"@oh-my-pi/pi-ai/utils/foundry",
 	"@oh-my-pi/pi-ai/utils/google-validation",
 	"@oh-my-pi/pi-ai/utils/http-inspector",

package/src/extensibility/plugins/legacy-pi-bundled-registry.ts

@@ -135,6 +135,7 @@ import * as bundledPiAiUtilsBlockSymbols from "jeopi-ai/utils/block-symbols";
 import * as bundledPiAiUtilsDeterministicId from "jeopi-ai/utils/deterministic-id";
 import * as bundledPiAiUtilsEmptyCompletionRetry from "jeopi-ai/utils/empty-completion-retry";
 import * as bundledPiAiUtilsEventStream from "jeopi-ai/utils/event-stream";
+import * as bundledPiAiUtilsFences from "jeopi-ai/utils/fences";
 import * as bundledPiAiUtilsFoundry from "jeopi-ai/utils/foundry";
 import * as bundledPiAiUtilsGoogleValidation from "jeopi-ai/utils/google-validation";
 import * as bundledPiAiUtilsHarmonyLeak from "jeopi-ai/utils/harmony-leak";
@@ -1265,6 +1266,7 @@ export const BUNDLED_PI_REGISTRY: Readonly<Record<string, Readonly<Record<string
 		Record<string, unknown>
 	>,
 	"@oh-my-pi/pi-ai/utils/event-stream": bundledPiAiUtilsEventStream as unknown as Readonly<Record<string, unknown>>,
+	"@oh-my-pi/pi-ai/utils/fences": bundledPiAiUtilsFences as unknown as Readonly<Record<string, unknown>>,
 	"@oh-my-pi/pi-ai/utils/foundry": bundledPiAiUtilsFoundry as unknown as Readonly<Record<string, unknown>>,
 	"@oh-my-pi/pi-ai/utils/google-validation": bundledPiAiUtilsGoogleValidation as unknown as Readonly<
 		Record<string, unknown>