klyro 0.1.7 → 0.1.8

package/dist/agent/runtime.js

@@ -427,8 +427,15 @@ export async function run(opts, deps) {
 function redactOutput(v) {
     if (typeof v === 'string')
         return redact(v);
-    if (v && typeof v === 'object')
-        return v; // structured outputs are not redacted wholesale
+    if (Array.isArray(v))
+        return v.map((e) => redactOutput(e));
+    if (v && typeof v === 'object') {
+        const out = {};
+        for (const [k, val] of Object.entries(v)) {
+            out[k] = redactOutput(val);
+        }
+        return out;
+    }
     return v;
 }
 /**

package/dist/context/tokenizer.js

@@ -57,7 +57,11 @@ export function withinBudget(system, messages, budget) {
  * Returns the new transcript plus a count of dropped observations.
  */
 export function compressTranscript(system, messages, budget) {
-    const result = messages.slice();
+    // Deep copy to avoid mutating original messages (which are also stored in transcript/persistence)
+    const result = messages.map((m) => ({
+        role: m.role,
+        content: m.content.map((b) => ({ ...b, output: b.output })),
+    }));
     let dropped = 0;
     // Phase 1: find tool_call_ids referenced in any later assistant message.
     const consumed = new Set();
@@ -77,13 +81,14 @@ export function compressTranscript(system, messages, budget) {
         for (const b of m.content) {
             if (b.kind !== 'tool_result')
                 continue;
-            if (!consumed.has(b.toolCallId)) {
+            const block = b;
+            if (!consumed.has(block.toolCallId)) {
                 // Drop the observation entirely.
                 b.output = '[earlier observation removed to fit context]';
                 dropped++;
             }
-            else if (typeof b.output === 'string' && b.output.length > 400) {
-                b.output = b.output.slice(0, 400) + '... [truncated]';
+            else if (typeof block.output === 'string' && block.output.length > 400) {
+                b.output = block.output.slice(0, 400) + '... [truncated]';
             }
         }
     }

package/dist/persistence/store.js

@@ -32,7 +32,25 @@ export class SessionStore {
         }
     }
     async writeIndex(idx) {
-        await fs.writeFile(this.indexPath, JSON.stringify(idx, null, 2));
+        const tmp = `${this.indexPath}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
+        await fs.writeFile(tmp, JSON.stringify(idx, null, 2), 'utf-8');
+        try {
+            const fh = await fs.open(tmp, 'r+');
+            try {
+                await fh.sync();
+            }
+            finally {
+                await fh.close();
+            }
+        }
+        catch { /* ignore on Windows */ }
+        try {
+            await fs.rename(tmp, this.indexPath);
+        }
+        catch {
+            await fs.unlink(tmp).catch(() => undefined);
+            throw new Error('Failed to write sessions index');
+        }
     }
     async create(opts) {
         await this.ensureDir();
@@ -59,10 +77,40 @@ export class SessionStore {
     }
     async writeSession(id, data) {
         data.record.updatedAt = Date.now();
-        await fs.writeFile(path.join(this.dir, `${id}.json`), JSON.stringify(data, null, 2));
-        const idx = await this.readIndex();
-        idx[id] = data.record;
-        await this.writeIndex(idx);
+        const target = path.join(this.dir, `${id}.json`);
+        const tmp = `${target}.tmp-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
+        await fs.writeFile(tmp, JSON.stringify(data, null, 2), 'utf-8');
+        try {
+            const fh = await fs.open(tmp, 'r+');
+            try {
+                await fh.sync();
+            }
+            finally {
+                await fh.close();
+            }
+        }
+        catch { /* ignore */ }
+        try {
+            await fs.rename(tmp, target);
+        }
+        catch {
+            await fs.unlink(tmp).catch(() => undefined);
+            throw new Error(`Failed to write session ${id}`);
+        }
+        // Update index with simple retry for concurrent writers (optimistic)
+        for (let attempt = 0; attempt < 3; attempt++) {
+            try {
+                const idx = await this.readIndex();
+                idx[id] = data.record;
+                await this.writeIndex(idx);
+                return;
+            }
+            catch (err) {
+                if (attempt === 2)
+                    throw err;
+                await new Promise((r) => setTimeout(r, 10 * (attempt + 1)));
+            }
+        }
     }
     async appendMessage(id, message) {
         const data = await this.readSession(id);

package/dist/policy/secret-redactor.js

@@ -11,7 +11,10 @@
 import { Transform } from 'node:stream';
 const PATTERNS = [
     { name: 'aws-key', re: /AKIA[0-9A-Z]{16}/g },
-    { name: 'aws-secret', re: /(?<![A-Za-z0-9])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9])/g },
+    // Specific: require secret context to avoid package-lock hash false positives
+    { name: 'aws-secret', re: /(?:aws_secret_access_key|secret)\s*[:=]\s*[A-Za-z0-9/+=]{40}/gi },
+    // High-entropy base64: require at least one +/= and not just hex (e.g. sha512 hex should not match)
+    { name: 'aws-secret-b64', re: /(?<![A-Za-z0-9/+=])(?=[A-Za-z0-9/+=]*[+/=])[A-Za-z0-9/+=]{40,}={0,2}(?![A-Za-z0-9/+=])/g, },
     { name: 'pem-block', re: /-----BEGIN [A-Z ]+PRIVATE KEY-----[\s\S]*?-----END [A-Z ]+PRIVATE KEY-----/g },
     { name: 'github-token', re: /gh[pousr]_[A-Za-z0-9]{36,255}/g },
     { name: 'slack-token', re: /xox[abprs]-[A-Za-z0-9-]{10,}/g },

package/dist/tools/fs/edit-file.js

@@ -106,9 +106,13 @@ export const editFileTool = defineTool({
                 throw Object.assign(new Error(`find substring occurs ${count} times in ${input.path}. Supply more context or pass replaceAll=true.`), { code: 'MATCH_AMBIGUOUS' });
             }
             let next = replaceAll ? original.split(findStr).join(input.replace) : original.replace(findStr, input.replace);
-            // Preserve EOL
-            if (eol === '\r\n')
-                next = next.replace(/\n/g, '\r\n');
+            // Preserve EOL: normalize then convert
+            if (eol === '\r\n') {
+                next = next.replace(/\r\n/g, '\n').replace(/\n/g, '\r\n');
+            }
+            else {
+                next = next.replace(/\r\n/g, '\n');
+            }
             // Preserve trailing newline
             if (hasTrailingNewline && !next.endsWith('\n'))
                 next += eol;

package/dist/tools/shell/shell-exec.js

@@ -64,6 +64,9 @@ const DANGEROUS_PATTERNS = [
     { pattern: /rm\s+-rf?\s+\.\s*($|[;&|])/, reason: 'recursive delete current directory' },
     { pattern: /rm\s+-rf?\s+\*\s*($|[;&|])/, reason: 'recursive delete all files via *' },
     { pattern: /rm\s+-rf?\s+\.\/\*\s*($|[;&|])/, reason: 'recursive delete all files' },
+    { pattern: /rm\s+-rf?\s+~(\/|$)/, reason: 'recursive delete home directory via ~' },
+    { pattern: /rm\s+-rf?\s+\$HOME\b/, reason: 'recursive delete home via $HOME' },
+    { pattern: /rm\s+-rf?\s+\$PWD\b/, reason: 'recursive delete via $PWD' },
     { pattern: /del\s+\/s\s+\/q\s+[a-z]:\\/i, reason: 'recursive delete on Windows drive root' },
     { pattern: /:\(\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;\s*:/, reason: 'fork bomb' },
     { pattern: /bomb\(\)\s*\{\s*bomb\|bomb/, reason: 'fork bomb variant' },
@@ -71,7 +74,8 @@ const DANGEROUS_PATTERNS = [
     { pattern: /mkfs(\.|\s)/, reason: 'format filesystem' },
     { pattern: /dd\s+.*of=\/dev\//, reason: 'dd write to device' },
     { pattern: /chmod\s+-R\s+777\s+\//, reason: 'chmod 777 on root' },
-    { pattern: /curl.*\|\s*(sh|bash|python|perl|ruby)/i, reason: 'curl|sh to unknown host' },
+    { pattern: /curl.*\|\s*(sh|bash|zsh|python|python3|perl|ruby|php)/i, reason: 'curl|sh to unknown host' },
+    { pattern: /wget.*\|\s*(sh|bash|python|perl|ruby)/i, reason: 'wget|sh pipe' },
     { pattern: /rm\s+-rf\s+--no-preserve-root\s+\//, reason: 'recursive delete --no-preserve-root' },
 ];
 export const shellExecTool = defineTool({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "klyro",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Klyro — autonomous coding harness CLI that streams from any OpenAI-compatible or Anthropic LLM endpoint.",
   "type": "module",
   "main": "dist/index.js",