levix-bot 3.3.0-rc.2 → 4.0.0-beta

package/src/config/baileys.config.js

@@ -1,6 +1,7 @@
 import { Browsers } from "@whiskeysockets/baileys";
-import pino from "pino";
 import NodeCache from "node-cache";
+import pino from "pino";
+
 // rc10 supports several pluggable caches; we keep them in-process so message
 // retries / device discovery don't keep slamming the network.
 const msgRetryCounterCache = new NodeCache({

package/src/config/brand.esm.js

@@ -5,13 +5,4 @@ const require = createRequire(import.meta.url);
 const brand = require("./brand.cjs");
 
 export default brand;
-export const {
-  name,
-  nameAr,
-  tagline,
-  taglineAr,
-  developer,
-  developerAr,
-  studio,
-  repo,
-} = brand;
+export const { name, nameAr, tagline, taglineAr, developer, developerAr, studio, repo } = brand;

package/src/config/constants.js

@@ -15,7 +15,7 @@
 export const RETRY_DELAY_MS = 5000;
 export const MAX_RETRIES = 5;
 export const RETRY_SCHEDULE_MS = Object.freeze(
-  Array.from({ length: MAX_RETRIES }, (_, index) => RETRY_DELAY_MS * (index + 1))
+  Array.from({ length: MAX_RETRIES }, (_, index) => RETRY_DELAY_MS * (index + 1)),
 );
 
 // Group metadata cache

package/src/config/defaults.cjs

@@ -18,72 +18,72 @@
 
 const PREFIX = "!";
 
-const COMMAND_PERMISSIONS = Object.freeze(
-  {
-    "ping": "MEMBERS",
-    "gemini": "MEMBERS",
-    "qr": "MEMBERS",
-    "shortlink": "MEMBERS",
-    "schedule": "ADMINS_OWNER",
-    "weather": "MEMBERS",
-    "prayer": "MEMBERS",
-    "tagadmins": "MEMBERS",
-    "help": "MEMBERS",
-    "score": "MEMBERS",
-    "stt": "MEMBERS",
-    "tts": "MEMBERS",
-    "todo": "MEMBERS",
-    "notes": "MEMBERS",
-    "debt": "MEMBERS",
-    "calc": "MEMBERS",
-    "loop": "MEMBERS",
-    "rand": "MEMBERS",
-    "poll": "MEMBERS",
-    "memory": "MEMBERS",
-    "mod": "ADMINS_OWNER",
-    "blacklist": "ADMINS_OWNER",
-    "listschedules": "ADMINS_OWNER",
-    "deleteschedule": "ADMINS_OWNER",
-    "autoschedule": "OWNER_ONLY",
-    "perm": "OWNER_ONLY",
-    "setprefix": "OWNER_ONLY",
-    "restart": "OWNER_ONLY",
-    "shutdown": "OWNER_ONLY",
-    "status": "OWNER_ONLY",
-    "block": "OWNER_ONLY",
-    "unblock": "OWNER_ONLY",
-    "group": {
-      "default_permission": "ADMINS_OWNER",
-      "sub_commands": {
-        "approveall": "ADMINS_OWNER",
-        "setname": "ADMINS_OWNER",
-        "setpp": "ADMINS_OWNER",
-        "kick": "ADMINS_OWNER",
-        "add": "ADMINS_OWNER",
-        "promote": "ADMINS_OWNER",
-        "demote": "ADMINS_OWNER",
-        "removeall": "OWNER_ONLY",
-        "setrules": "ADMINS_ONLY",
-        "antilink": "ADMINS_ONLY",
-        "media": "ADMINS_ONLY",
-        "setwarn": "ADMINS_ONLY",
-        "warn": "ADMINS_ONLY",
-        "warns": "ADMINS_OWNER",
-        "clearwarns": "ADMINS_ONLY",
-        "rules": "MEMBERS",
-        "notes": "MEMBERS",
-        "members": "MEMBERS",
-        "tagadmins": "MEMBERS",
-        "welcome": "ADMINS_OWNER",
-        "blacklist": "ADMINS_OWNER",
-        "save": "ADMINS_OWNER",
-        "deletenote": "ADMINS_OWNER",
-        "remove": "ADMINS_ONLY",
-        "all": "MEMBERS"
-      }
-    }
-  }
-);
+const COMMAND_PERMISSIONS = Object.freeze({
+  ping: "MEMBERS",
+  gemini: "MEMBERS",
+  qr: "MEMBERS",
+  shortlink: "MEMBERS",
+  schedule: "ADMINS_OWNER",
+  weather: "MEMBERS",
+  prayer: "MEMBERS",
+  tagadmins: "MEMBERS",
+  help: "MEMBERS",
+  score: "MEMBERS",
+  stt: "MEMBERS",
+  tts: "MEMBERS",
+  todo: "MEMBERS",
+  notes: "MEMBERS",
+  debt: "MEMBERS",
+  calc: "MEMBERS",
+  loop: "MEMBERS",
+  rand: "MEMBERS",
+  poll: "MEMBERS",
+  memory: "MEMBERS",
+  mod: "ADMINS_OWNER",
+  blacklist: "ADMINS_OWNER",
+  listschedules: "ADMINS_OWNER",
+  deleteschedule: "ADMINS_OWNER",
+  autoschedule: "OWNER_ONLY",
+  perm: "OWNER_ONLY",
+  setprefix: "OWNER_ONLY",
+  restart: "OWNER_ONLY",
+  shutdown: "OWNER_ONLY",
+  status: "OWNER_ONLY",
+  lang: "MEMBERS",
+  digit: "MEMBERS",
+  block: "OWNER_ONLY",
+  unblock: "OWNER_ONLY",
+  group: {
+    default_permission: "ADMINS_OWNER",
+    sub_commands: {
+      approveall: "ADMINS_OWNER",
+      setname: "ADMINS_OWNER",
+      setpp: "ADMINS_OWNER",
+      kick: "ADMINS_OWNER",
+      add: "ADMINS_OWNER",
+      promote: "ADMINS_OWNER",
+      demote: "ADMINS_OWNER",
+      removeall: "OWNER_ONLY",
+      setrules: "ADMINS_ONLY",
+      antilink: "ADMINS_ONLY",
+      media: "ADMINS_ONLY",
+      setwarn: "ADMINS_ONLY",
+      warn: "ADMINS_ONLY",
+      warns: "ADMINS_OWNER",
+      clearwarns: "ADMINS_ONLY",
+      rules: "MEMBERS",
+      notes: "MEMBERS",
+      members: "MEMBERS",
+      tagadmins: "MEMBERS",
+      welcome: "ADMINS_OWNER",
+      blacklist: "ADMINS_OWNER",
+      save: "ADMINS_OWNER",
+      deletenote: "ADMINS_OWNER",
+      remove: "ADMINS_ONLY",
+      all: "MEMBERS",
+    },
+  },
+});
 
 module.exports = {
   prefix: PREFIX,

package/src/config/lock.cjs

@@ -86,7 +86,7 @@ function acquireSingleInstanceLock() {
           `  ${LOCK_FILE}\n\n` +
           `  Only one Levix can run per data directory — a WhatsApp pairing is a\n` +
           `  single session. Stop the other one, or start this one with --data\n` +
-          `  pointing somewhere else.`
+          `  pointing somewhere else.`,
       );
       error.code = "ELEVIXLOCKED";
       throw error;
@@ -94,7 +94,7 @@ function acquireSingleInstanceLock() {
 
     // The holder is gone (a crash, a kill -9, a reboot). Take it over.
     logger.warn(
-      `[lock] Removing a stale lock from pid ${owner ?? "unknown"} — that process is gone`
+      `[lock] Removing a stale lock from pid ${owner ?? "unknown"} — that process is gone`,
     );
     fs.rmSync(LOCK_FILE, { force: true });
     claim();

package/src/config/modelCapabilities.cjs

@@ -0,0 +1,172 @@
+// Official capability metadata for known model IDs, dated 2026-09-18.
+//
+// This is fallback metadata only. It is never proof that a user's API key can
+// access the model. Live availability always comes from the provider API.
+//
+// Unknown / newly discovered IDs must NOT be inferred from name substrings.
+
+const FULL_MULTIMODAL = Object.freeze({
+  textInput: true,
+  textOutput: true,
+  vision: true,
+  audioInput: true,
+  stt: true,
+  videoInput: true,
+  pdfInput: true,
+});
+
+const VISION_TEXT = Object.freeze({
+  textInput: true,
+  textOutput: true,
+  vision: true,
+  audioInput: false,
+  stt: false,
+  videoInput: false,
+  pdfInput: true,
+});
+
+const TEXT_VISION_ONLY = Object.freeze({
+  textInput: true,
+  textOutput: true,
+  vision: true,
+  audioInput: false,
+  stt: false,
+  videoInput: false,
+  pdfInput: false,
+});
+
+// Exact IDs from the 2026-09-18 seed catalog + official docs. No prefix matching.
+const GEMINI_OFFICIAL = Object.freeze({
+  "gemini-2.5-flash": FULL_MULTIMODAL,
+  "gemini-2.5-pro": FULL_MULTIMODAL,
+  "gemini-2.5-flash-lite": FULL_MULTIMODAL,
+  "gemini-flash-latest": FULL_MULTIMODAL,
+  "gemini-flash-lite-latest": FULL_MULTIMODAL,
+  "gemini-pro-latest": FULL_MULTIMODAL,
+  "gemini-3-flash-preview": FULL_MULTIMODAL,
+  "gemini-3.1-pro-preview": FULL_MULTIMODAL,
+  "gemini-3.1-pro-preview-customtools": FULL_MULTIMODAL,
+  "gemini-3.1-flash-lite-preview": FULL_MULTIMODAL,
+  "gemini-3.1-flash-lite": FULL_MULTIMODAL,
+  "gemini-3.5-flash": FULL_MULTIMODAL,
+  "gemini-3.5-flash-lite": FULL_MULTIMODAL,
+  "gemini-3.6-flash": FULL_MULTIMODAL,
+  "gemini-3.7-flash": FULL_MULTIMODAL,
+  "gemini-3.8-flash": FULL_MULTIMODAL,
+  "gemini-omni-flash-preview": FULL_MULTIMODAL,
+  "gemini-omni-1.1-flash": FULL_MULTIMODAL,
+  "gemma-4-26b-a4b-it": TEXT_VISION_ONLY,
+  "gemma-4-31b-it": TEXT_VISION_ONLY,
+  "gemini-1.5-flash": FULL_MULTIMODAL,
+});
+
+const GEMINI_RECOMMENDED = new Set([
+  "gemini-3.8-flash",
+  "gemini-3.7-flash",
+  "gemini-3.5-flash",
+  "gemini-3.1-pro-preview",
+  "gemini-3.5-flash-lite",
+]);
+
+function officialCapabilities(provider, modelId) {
+  const id = String(modelId || "")
+    .trim()
+    .replace(/^models\//, "");
+  if (!id) return null;
+  if (provider === "gemini") return GEMINI_OFFICIAL[id] || null;
+  return null;
+}
+
+function isGeminiRecommended(modelId) {
+  const id = String(modelId || "")
+    .trim()
+    .replace(/^models\//, "");
+  return GEMINI_RECOMMENDED.has(id);
+}
+
+/**
+ * Conversational-LLM filter for the main model selector.
+ * Non-chat families (embeddings, image-gen, TTS, video, live/realtime) are out.
+ */
+function isConversationalLlm(provider, modelId, meta = {}) {
+  const id = String(modelId || "")
+    .toLowerCase()
+    .replace(/^models\//, "");
+  if (!id) return false;
+
+  const methods = Array.isArray(meta.methods)
+    ? meta.methods.map((m) => String(m))
+    : Array.isArray(meta.supportedGenerationMethods)
+      ? meta.supportedGenerationMethods.map((m) => String(m))
+      : Array.isArray(meta.supportedActions)
+        ? meta.supportedActions.map((m) => String(m))
+        : [];
+
+  if (provider === "openai") return isOpenAiChatModel(id);
+  if (provider === "anthropic") {
+    if (meta.type && String(meta.type).toLowerCase() !== "model") return false;
+    return true;
+  }
+  if (provider === "gemini") return isGeminiChatModel(id, methods);
+  return true;
+}
+
+function isOpenAiChatModel(id) {
+  if (id.includes("embedding") || id.includes("embed-")) return false;
+  if (id.includes("moderation")) return false;
+  if (id.startsWith("dall-e") || id.includes("dall-e")) return false;
+  if (id.startsWith("gpt-image") || id.startsWith("chatgpt-image")) return false;
+  if (id.startsWith("tts-") || id.includes("-tts")) return false;
+  if (id.startsWith("whisper-")) return false;
+  if (id.startsWith("sora")) return false;
+  if (id.includes("davinci") || id.includes("babbage") || id.includes("curie")) return false;
+  if (id.startsWith("ada-") || id.includes("text-similarity")) return false;
+  if (id.includes("canary")) return false;
+  return true;
+}
+
+function isGeminiChatModel(id, methods) {
+  if (id.includes("embedding") || id.includes("vector")) return false;
+  if (id === "aqa" || id.startsWith("aqa-")) return false;
+  if (id.startsWith("imagen") || id.includes("-image") || id.includes("nano-banana")) return false;
+  if (id.includes("-tts") || id.endsWith("tts")) return false;
+  if (id.startsWith("veo") || id.includes("lyria")) return false;
+  if (id.includes("transcribe")) return false;
+  if (id.includes("native-audio") || id.includes("realtime")) return false;
+  if (id.includes("-live") || /(^|-)live($|-)/.test(id)) return false;
+  if (
+    id.includes("robotics") ||
+    id.includes("computer-use") ||
+    id.includes("antigravity") ||
+    id.includes("deep-research")
+  ) {
+    return false;
+  }
+
+  if (methods.includes("embedContent") && !methods.includes("generateContent")) return false;
+  if (methods.includes("bidiGenerateContent") && !methods.includes("generateContent")) return false;
+  if (
+    methods.includes("bidiGenerateMusic") ||
+    methods.includes("predictLongRunning") ||
+    methods.includes("generateAnswer")
+  ) {
+    return false;
+  }
+  if (
+    methods.length &&
+    !methods.includes("generateContent") &&
+    !methods.includes("generateContentStream")
+  ) {
+    return false;
+  }
+  return true;
+}
+
+module.exports = {
+  FULL_MULTIMODAL,
+  VISION_TEXT,
+  TEXT_VISION_ONLY,
+  officialCapabilities,
+  isGeminiRecommended,
+  isConversationalLlm,
+};

package/src/config/runtime-config.cjs

@@ -17,12 +17,7 @@
 const defaults = require("./defaults.cjs");
 const logger = require("../utils/logger.cjs");
 
-const PERMISSION_LEVELS = Object.freeze([
-  "MEMBERS",
-  "ADMINS_ONLY",
-  "ADMINS_OWNER",
-  "OWNER_ONLY",
-]);
+const PERMISSION_LEVELS = Object.freeze(["MEMBERS", "ADMINS_ONLY", "ADMINS_OWNER", "OWNER_ONLY"]);
 
 const KEY_PERMISSIONS = "command_permissions";
 const KEY_ALIASES = "command_aliases";
@@ -84,11 +79,7 @@ function defaultPermission(commandKey) {
   if (sub) {
     const groupEntry = table[head];
     if (isPlainObject(groupEntry)) {
-      return (
-        groupEntry.sub_commands?.[sub] ||
-        groupEntry.default_permission ||
-        "MEMBERS"
-      );
+      return groupEntry.sub_commands?.[sub] || groupEntry.default_permission || "MEMBERS";
     }
     return "MEMBERS";
   }
@@ -166,7 +157,9 @@ function setAliases(commandName, aliases) {
     if (!Array.isArray(aliases)) throw new Error("Aliases must be a list");
     const cleaned = [];
     for (const raw of aliases) {
-      const alias = String(raw ?? "").trim().toLowerCase();
+      const alias = String(raw ?? "")
+        .trim()
+        .toLowerCase();
       if (!alias) continue;
       if (/\s/.test(alias)) throw new Error(`Alias "${alias}" can't contain spaces`);
       if (alias.length > 20) throw new Error(`Alias "${alias}" is too long`);
@@ -177,7 +170,9 @@ function setAliases(commandName, aliases) {
   }
 
   writeSetting(KEY_ALIASES, overrides);
-  logger.info(`[config] aliases ${commandName} -> ${JSON.stringify(overrides[commandName] ?? "(default)")}`);
+  logger.info(
+    `[config] aliases ${commandName} -> ${JSON.stringify(overrides[commandName] ?? "(default)")}`,
+  );
   return getAliases(commandName);
 }
 

package/src/config/secrets.cjs

@@ -9,7 +9,11 @@
 //   secret:session   the express-session signing key. 48 random bytes, made on
 //                    first start and reused forever after. Nobody ever sees it.
 //   auth:password    the dashboard password as an scrypt hash + salt. The
-//                    password itself is never written anywhere.
+//                    password itself is never written anywhere (not encrypted
+//                    for recovery — it is a one-way hash).
+//
+// WhatsApp session blobs and third-party API keys are sealed separately by
+// src/config/vault.cjs (AES-256-GCM, key in levix.key next to the database).
 //
 // Both live in `bot_settings`, i.e. inside the same SQLite file as the rest of
 // the bot's state — so a backup of that one file is a backup of the login too.
@@ -57,6 +61,13 @@ function hasDashboardPassword() {
   return !!(record && record.hash && record.salt);
 }
 
+/** Epoch stored on panel sessions so a password change or wipe revokes them. */
+function getPasswordUpdatedAt() {
+  const record = store.getBotSetting(PASSWORD_KEY, null);
+  if (!record?.hash || !record?.salt) return 0;
+  return Number(record.updatedAt) || 0;
+}
+
 /**
  * @throws {Error} when the password is too short — the dashboard holds a full
  *   WhatsApp account, so this is not a place for a 3-character password.
@@ -64,13 +75,13 @@ function hasDashboardPassword() {
 function setDashboardPassword(plain) {
   const password = String(plain ?? "");
   if (password.length < MIN_PASSWORD_LENGTH) {
-    throw new Error(
-      `Password must be at least ${MIN_PASSWORD_LENGTH} characters`
-    );
+    throw new Error(`Password must be at least ${MIN_PASSWORD_LENGTH} characters`);
   }
 
+  const previousEpoch = getPasswordUpdatedAt();
   const { salt, hash } = hashPassword(password);
-  store.saveBotSetting(PASSWORD_KEY, { alg: "scrypt", salt, hash, updatedAt: Date.now() });
+  const updatedAt = Math.max(Date.now(), previousEpoch + 1);
+  store.saveBotSetting(PASSWORD_KEY, { alg: "scrypt", salt, hash, updatedAt });
   logger.info("[secrets] Dashboard password updated");
 }
 
@@ -81,11 +92,7 @@ function verifyDashboardPassword(candidate) {
   if (typeof candidate !== "string") return false;
 
   const expected = Buffer.from(record.hash, "hex");
-  const actual = crypto.scryptSync(
-    candidate,
-    Buffer.from(record.salt, "hex"),
-    expected.length
-  );
+  const actual = crypto.scryptSync(candidate, Buffer.from(record.salt, "hex"), expected.length);
   return crypto.timingSafeEqual(expected, actual);
 }
 
@@ -140,6 +147,7 @@ module.exports = {
   MIN_PASSWORD_LENGTH,
   getSessionSecret,
   hasDashboardPassword,
+  getPasswordUpdatedAt,
   setDashboardPassword,
   verifyDashboardPassword,
   getSetupCode,

package/src/config/settings.cjs

@@ -16,6 +16,7 @@
 // dashboard only ever learns whether one is configured.
 
 const logger = require("../utils/logger.cjs");
+const { assertProviderBaseUrl } = require("../utils/providerUrl.cjs");
 
 const SETTINGS = [
   // --- General -----------------------------------------------------------
@@ -27,6 +28,20 @@ const SETTINGS = [
     label: "Timezone",
     hint: "IANA name, e.g. Africa/Cairo. Used by the AI, !prayer and the scheduler.",
   },
+  {
+    key: "bot_language",
+    type: "string",
+    default: "auto",
+    choices: ["auto", "ar", "en"],
+    choiceLabels: {
+      auto: "Auto-detect (follow user message)",
+      ar: "Modern Standard Arabic (العربية الفصحى)",
+      en: "English",
+    },
+    group: "general",
+    label: "Bot response language",
+    hint: "Preferred language for AI replies and status updates. Can also be switched with !lang.",
+  },
   {
     key: "bot_min_delay_ms",
     type: "int",
@@ -160,6 +175,52 @@ const SETTINGS = [
     label: "Gemini Google Search",
     hint: "Lets Gemini use Google's own search grounding when a question needs current information. Gemini only — the openai and anthropic providers never see it.",
   },
+  {
+    key: "ai_vision_enabled",
+    type: "bool",
+    default: false,
+    group: "ai",
+    label: "Vision & image analysis",
+    hint: "Allow the active model to inspect and analyze incoming images. Enabled natively on Gemini, and available on OpenAI-compatible/Anthropic when using vision-capable models (e.g. llama-3.2-11b-vision, gpt-4o, claude-3).",
+  },
+  {
+    key: "ai_stt_enabled",
+    type: "bool",
+    default: true,
+    group: "ai",
+    label: "Audio & Speech-to-text (STT)",
+    hint: "Enable audio processing and speech-to-text transcription with compatible models.",
+  },
+  {
+    key: "ai_auto_detect_capabilities",
+    type: "bool",
+    default: true,
+    group: "ai",
+    label: "Auto-detect model capabilities",
+    hint: "When the selected model does not support Vision or Speech-to-text, those toggles are turned off and locked automatically. Capabilities come from the provider API and the local registry — never from guessing at the model name.",
+  },
+  {
+    key: "ai_stt_provider",
+    type: "string",
+    default: "auto",
+    choices: ["auto", "gemini", "openai"],
+    choiceLabels: {
+      auto: "Auto (follow active provider)",
+      gemini: "Google Gemini",
+      openai: "OpenAI-compatible (Whisper)",
+    },
+    group: "ai",
+    label: "Speech-to-text provider",
+    hint: "Which engine powers !stt audio transcription. 'Auto' follows your active chat provider.",
+  },
+  {
+    key: "openai_stt_model",
+    type: "string",
+    default: "whisper-large-v3",
+    group: "ai",
+    label: "OpenAI-compatible Whisper model",
+    hint: "Model used for speech transcription when OpenAI-compatible is selected for STT (whisper-large-v3, whisper-1).",
+  },
   {
     key: "openai_api_key",
     type: "secret",
@@ -232,6 +293,14 @@ const SETTINGS = [
     label: "OpenWeatherMap API key",
     hint: "Needed by !weather.",
   },
+  {
+    key: "youtube_api_key",
+    type: "secret",
+    default: "",
+    group: "integrations",
+    label: "YouTube Data API key",
+    hint: "For YouTube video and search tools.",
+  },
 
   // --- Media -------------------------------------------------------------
   {
@@ -387,6 +456,9 @@ const SETTINGS = [
 ];
 
 const BY_KEY = new Map(SETTINGS.map((definition) => [definition.key, definition]));
+const SECRET_SETTING_KEYS = SETTINGS.filter((definition) => definition.type === "secret").map(
+  (definition) => definition.key,
+);
 
 const GROUP_LABELS = {
   general: "General",
@@ -402,11 +474,13 @@ const GROUP_LABELS = {
 // comes too early falls back to the default instead of throwing.
 function storedValue(key) {
   try {
-    const value = require("../utils/storage.cjs").getBotSetting(
-      `setting:${key}`,
-      undefined
-    );
-    return value === undefined || value === null ? undefined : value;
+    const value = require("../utils/storage.cjs").getBotSetting(`setting:${key}`, undefined);
+    if (value === undefined || value === null) return undefined;
+    const definition = BY_KEY.get(key);
+    if (definition?.type === "secret" && typeof value === "string") {
+      return require("./vault.cjs").open(value);
+    }
+    return value;
   } catch {
     return undefined;
   }
@@ -480,6 +554,9 @@ function validate(definition, value) {
       throw new Error(`"${text}" is not a valid timezone`);
     }
   }
+  if (["gemini_base_url", "openai_base_url", "anthropic_base_url"].includes(definition.key)) {
+    return assertProviderBaseUrl(text, { allowLoopback: true });
+  }
   return text;
 }
 
@@ -501,11 +578,11 @@ function set(key, value) {
   }
 
   const clean = validate(definition, value);
-  storage.saveBotSetting(`setting:${key}`, clean);
+  const toStore =
+    definition.type === "secret" ? require("./vault.cjs").seal(String(clean)) : clean;
+  storage.saveBotSetting(`setting:${key}`, toStore);
   // Never log the value of a secret.
-  logger.info(
-    `[settings] ${key} -> ${definition.type === "secret" ? "(updated)" : clean}`
-  );
+  logger.info(`[settings] ${key} -> ${definition.type === "secret" ? "(updated)" : clean}`);
   return get(key);
 }
 
@@ -537,4 +614,11 @@ function describe() {
   });
 }
 
-module.exports = { get, set, describe, sourceOf, SETTING_KEYS: [...BY_KEY.keys()] };
+module.exports = {
+  get,
+  set,
+  describe,
+  sourceOf,
+  SETTING_KEYS: [...BY_KEY.keys()],
+  SECRET_SETTING_KEYS: [...SECRET_SETTING_KEYS],
+};