open-multi-agent-kit 0.91.0 → 0.92.0

package/dist/core/agent-session.js

@@ -2409,7 +2409,9 @@ export class AgentSession {
             const message = capture.report.activeMessages[index];
             if (message?.role !== "user")
                 continue;
-            const candidate = sanitizeBinaryOutput(redactSensitiveText(this._getUserMessageText(message)).trim()).slice(0, 16_384);
+            const candidate = sanitizeBinaryOutput(redactSensitiveText(this._getUserMessageText(message)).trim())
+                .replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/gu, "")
+                .slice(0, 16_384);
             if (candidate.length > 0)
                 latestIntent = candidate;
             break;
@@ -2442,7 +2444,7 @@ export class AgentSession {
             branch: null,
             worktree: this._cwd,
             modelHistory,
-            nextAction: latestIntent,
+            nextAction: latestIntent.slice(0, 4096) || "Continue the current session",
         };
     }
     _barrierError(barrier) {
@@ -2751,7 +2753,7 @@ export class AgentSession {
                 throw new Error("Compaction cancelled");
             }
             const compactionResult = {
-                summary,
+                summary: redactSensitiveText(summary),
                 firstKeptEntryId,
                 tokensBefore,
                 details,
@@ -3034,7 +3036,7 @@ export class AgentSession {
                 return false;
             }
             const result = {
-                summary,
+                summary: redactSensitiveText(summary),
                 firstKeptEntryId,
                 tokensBefore,
                 details,
@@ -3629,11 +3631,10 @@ export class AgentSession {
             assertLoadoutAccess((request) => decideLoadoutAccess(this._loadoutAccessPolicy, request), { operation: "execute", toolName: "bash", command: resolvedCommand });
         }
         // Non-negotiable safety floor for headless callers (RPC bash): hard-deny
-        // block-tier commands and credential/secret file access before any shell is
-        // spawned. This mirrors the §0.1 freedom safety floor behavior in omakit.
+        // block-tier commands before any shell is spawned.
         if (options?.safetyGate === "headless") {
             const floorVerdict = classifyShellCommand(command);
-            if (floorVerdict.risk === "block" || floorVerdict.rule.startsWith("secret.")) {
+            if (floorVerdict.risk === "block") {
                 throw new Error(`OMK §0.1 safety floor blocked bash: [${floorVerdict.rule}] ${floorVerdict.reason}`);
             }
         }