pi-harness-runtime 1.1.164 → 1.1.166

package/packages/notification/dist/telegram-content-filter.js

@@ -0,0 +1,176 @@
+/**
+ * Telegram Content Filter — Jev-Powered Sensitive Content Detection
+ *
+ * Before sending to Telegram, this module analyzes content for sensitive
+ * credentials that should NOT be transmitted.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+/**
+ * Get API key from key file
+ */
+function getKeyFromFile(keyName) {
+    const keyPath = join(homedir(), ".pi-harness-runtime", "keys", `${keyName}.txt`);
+    if (existsSync(keyPath)) {
+        try {
+            return readFileSync(keyPath, "utf8").trim();
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return undefined;
+}
+/**
+ * Extract text content from notification payload
+ */
+function extractContent(payload) {
+    const parts = [];
+    if (payload.title)
+        parts.push(payload.title);
+    if (payload.message)
+        parts.push(payload.message);
+    if (payload.details) {
+        for (const [_key, value] of Object.entries(payload.details)) {
+            if (typeof value === "string" && value) {
+                parts.push(value);
+            }
+        }
+    }
+    return parts.join("\n");
+}
+/**
+ * Simple heuristic check for obvious credentials (fallback when Jev unavailable)
+ */
+function heuristicCheck(content) {
+    // Check for common credential patterns
+    const sensitivePatterns = [
+        /\d+:[-A-Za-z0-9_]{35,}/, // Telegram bot token
+        /sk-[a-zA-Z0-9]{20,}/, // OpenAI-style keys
+        /[a-zA-Z0-9_-]{32,}/, // Long API keys
+        /Bearer\s+[a-zA-Z0-9_-]{20,}/i, // Bearer tokens
+        /(api[_-]?key|secret|token|password|credential)[=:\s]+[^\s]{16,}/i,
+        /-----BEGIN\s+(RSA|EC|OPENSSH|DSA)\s+PRIVATE\s+KEY-----/,
+        /infisical[_-]?(client[_-])?(secret|id)/i,
+    ];
+    for (const pattern of sensitivePatterns) {
+        if (pattern.test(content)) {
+            let matchType = "api_key_or_secret";
+            if (/\d+:[-A-Za-z0-9_]{35,}/.test(content)) {
+                matchType = "telegram_bot_token";
+            }
+            else if (/sk-[a-zA-Z0-9]{20,}/.test(content)) {
+                matchType = "openai_style_key";
+            }
+            else if (/-----BEGIN\s+(RSA|EC|OPENSSH|DSA)\s+PRIVATE\s+KEY-----/.test(content)) {
+                matchType = "private_key";
+            }
+            else if (/infisical/i.test(content)) {
+                matchType = "infisical_credential";
+            }
+            return {
+                shouldSend: false,
+                judgment: "BLOCK",
+                reason: `Sensitive content detected: ${matchType}`,
+                confidence: 0.95,
+            };
+        }
+    }
+    return {
+        shouldSend: true,
+        judgment: "SEND",
+        confidence: 0.9,
+    };
+}
+/**
+ * Call Jev to analyze content for sensitive credentials
+ */
+async function callJev(content) {
+    // Get API key from environment or key file
+    const apiKey = process.env.TYPESAFE_API_KEY || getKeyFromFile("jev-api-key") || getKeyFromFile("typesafe-api-key");
+    if (!apiKey) {
+        return null; // Jev not available
+    }
+    try {
+        const response = await fetch("https://api.typesafe.ai/v1/jev/decide", {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${apiKey}`,
+            },
+            body: JSON.stringify({
+                question: "Does this message contain any API keys, tokens, secrets, passwords, or other sensitive credentials that should NOT be sent to a third-party service like Telegram? Answer only YES or NO.",
+                context: {
+                    message: content,
+                    action: "telegram_notification",
+                    security_level: "high",
+                },
+            }),
+        });
+        if (!response.ok) {
+            return null;
+        }
+        const data = (await response.json());
+        const decision = data.decision?.toUpperCase() ?? "UNKNOWN";
+        const isSensitive = decision === "YES" || decision === "BLOCK";
+        return {
+            shouldSend: !isSensitive,
+            judgment: isSensitive ? "BLOCK" : "SEND",
+            reason: data.reasoning,
+            confidence: data.confidence,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Filter notification content before sending to Telegram
+ *
+ * @param payload - The notification payload
+ * @returns Filter result with decision
+ */
+export async function filterTelegramContent(payload) {
+    const content = extractContent(payload);
+    // First, run heuristic check (always available)
+    const heuristicResult = heuristicCheck(content);
+    if (heuristicResult.judgment === "BLOCK") {
+        logFilterDecision("BLOCK", heuristicResult.reason ?? "Heuristic match", payload.jobId);
+        return heuristicResult;
+    }
+    // Try Jev if available
+    const jevResult = await callJev(content);
+    if (jevResult) {
+        if (jevResult.judgment === "BLOCK") {
+            logFilterDecision("BLOCK", jevResult.reason ?? "Jev judgment", payload.jobId);
+        }
+        return jevResult;
+    }
+    // Jev unavailable - use heuristic result
+    return heuristicResult;
+}
+/**
+ * Log filter decision securely (no content, just metadata)
+ */
+function logFilterDecision(decision, reason, jobId) {
+    console.warn(`[TelegramFilter] ${decision} job=${jobId} reason=${reason} channel=telegram`);
+}
+/**
+ * Mask a value safely for logging
+ */
+function maskValue(value) {
+    if (!value || value.length <= 8)
+        return "****";
+    return `${value.slice(0, 4)}...${value.slice(-4)}`;
+}
+/**
+ * Get safe notification version (masked) for logging
+ */
+export function getSafeNotificationLog(payload) {
+    const maskedTitle = maskValue(payload.title);
+    const maskedMessage = maskValue(payload.message);
+    const maskedJobId = maskValue(payload.jobId);
+    return `event=${payload.event} job=${maskedJobId} title=${maskedTitle} message_len=${maskedMessage.length}`;
+}
+//# sourceMappingURL=telegram-content-filter.js.map

package/packages/notification/dist/telegram-content-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telegram-content-filter.js","sourceRoot":"","sources":["../src/telegram-content-filter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,CAAC;IACjF,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACJ,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAqBD;;GAEG;AACH,SAAS,cAAc,CAAC,OAA4B;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;gBACxC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe;IACtC,uCAAuC;IACvC,MAAM,iBAAiB,GAAG;QACzB,wBAAwB,EAAE,qBAAqB;QAC/C,qBAAqB,EAAK,oBAAoB;QAC9C,oBAAoB,EAAM,gBAAgB;QAC1C,8BAA8B,EAAE,gBAAgB;QAChD,kEAAkE;QAClE,wDAAwD;QACxD,yCAAyC;KACzC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,IAAI,SAAS,GAAG,mBAAmB,CAAC;YACpC,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5C,SAAS,GAAG,oBAAoB,CAAC;YAClC,CAAC;iBAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChD,SAAS,GAAG,kBAAkB,CAAC;YAChC,CAAC;iBAAM,IAAI,wDAAwD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnF,SAAS,GAAG,aAAa,CAAC;YAC3B,CAAC;iBAAM,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,SAAS,GAAG,sBAAsB,CAAC;YACpC,CAAC;YAED,OAAO;gBACN,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,+BAA+B,SAAS,EAAE;gBAClD,UAAU,EAAE,IAAI;aAChB,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO;QACN,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,GAAG;KACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,OAAO,CAAC,OAAe;IACrC,2CAA2C;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,cAAc,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAEnH,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,CAAC,oBAAoB;IAClC,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,uCAAuC,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,QAAQ,EACP,2LAA2L;gBAC5L,OAAO,EAAE;oBACR,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,uBAAuB;oBAC/B,cAAc,EAAE,MAAM;iBACtB;aACD,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,SAAS,CAAC;QAC3D,MAAM,WAAW,GAAG,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO,CAAC;QAE/D,OAAO;YACN,UAAU,EAAE,CAAC,WAAW;YACxB,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YACxC,MAAM,EAAE,IAAI,CAAC,SAAS;YACtB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,OAA4B;IAE5B,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAExC,gDAAgD;IAChD,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,eAAe,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1C,iBAAiB,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvF,OAAO,eAAe,CAAC;IACxB,CAAC;IAED,uBAAuB;IACvB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,SAAS,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACpC,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,IAAI,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,yCAAyC;IACzC,OAAO,eAAe,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACzB,QAAyB,EACzB,MAAc,EACd,KAAa;IAEb,OAAO,CAAC,IAAI,CACX,oBAAoB,QAAQ,QAAQ,KAAK,WAAW,MAAM,mBAAmB,CAC7E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,KAAa;IAC/B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/C,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA4B;IAClE,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE7C,OAAO,SAAS,OAAO,CAAC,KAAK,QAAQ,WAAW,UAAU,WAAW,gBAAgB,aAAa,CAAC,MAAM,EAAE,CAAC;AAC7G,CAAC"}

package/packages/notification/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/notification",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "pi-harness-runtime — notification",
   "type": "module",
   "main": "./dist/index.js",

package/packages/notification/src/adapters/telegram-adapter.ts

@@ -19,6 +19,7 @@ import type {
 } from "../types.js";
 import { BaseChannelAdapter } from "../base-adapter.js";
 import { maskString } from "../mask-secrets.js";
+import { filterTelegramContent, getSafeNotificationLog } from "../telegram-content-filter.js";
 
 export class TelegramAdapter extends BaseChannelAdapter {
 readonly id = "telegram";
@@ -71,6 +72,21 @@ return this._botUsername;
 	 */
 	async send(payload: NotificationPayload): Promise<NotificationResult> {
 		try {
+			// SECURITY: Jev-powered content filter - block if contains sensitive credentials
+			const filterResult = await filterTelegramContent(payload);
+			if (!filterResult.shouldSend) {
+				console.warn(
+					`[TelegramAdapter] BLOCKED by Jev judgment=${filterResult.judgment} reason=${filterResult.reason} job=${payload.jobId}`,
+				);
+				// Log safe notification metadata (no secrets)
+				console.log(`[TelegramAdapter] ${getSafeNotificationLog(payload)}`);
+				return {
+					success: false,
+					channel: this.id,
+					error: "Content blocked: sensitive credentials detected",
+				};
+			}
+
 			const cfg = this.config.config as TelegramConfig;
 			const message = this.formatMessage(payload);
 

package/packages/notification/src/index.ts

@@ -17,3 +17,7 @@ export {
 	maskPayload,
 	isSensitiveField,
 } from "./mask-secrets.js";
+export {
+	filterTelegramContent,
+	getSafeNotificationLog,
+} from "./telegram-content-filter.js";

package/packages/notification/src/telegram-content-filter.ts

@@ -0,0 +1,225 @@
+/**
+ * Telegram Content Filter — Jev-Powered Sensitive Content Detection
+ *
+ * Before sending to Telegram, this module analyzes content for sensitive
+ * credentials that should NOT be transmitted.
+ */
+
+import type { NotificationPayload } from "./types.js";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+
+/**
+ * Get API key from key file
+ */
+function getKeyFromFile(keyName: string): string | undefined {
+	const keyPath = join(homedir(), ".pi-harness-runtime", "keys", `${keyName}.txt`);
+	if (existsSync(keyPath)) {
+		try {
+			return readFileSync(keyPath, "utf8").trim();
+		} catch {
+			return undefined;
+		}
+	}
+	return undefined;
+}
+
+/**
+ * Jev judgment result for content filtering
+ */
+export type ContentJudgment = "SEND" | "BLOCK" | "UNKNOWN";
+
+/**
+ * Result of content filtering decision
+ */
+export interface FilterResult {
+	/** Whether to send to Telegram */
+	shouldSend: boolean;
+	/** Jev's judgment */
+	judgment: ContentJudgment;
+	/** Reason for blocking (if blocked) */
+	reason?: string;
+	/** Confidence score (0-1) */
+	confidence?: number;
+}
+
+/**
+ * Extract text content from notification payload
+ */
+function extractContent(payload: NotificationPayload): string {
+	const parts: string[] = [];
+
+	if (payload.title) parts.push(payload.title);
+	if (payload.message) parts.push(payload.message);
+
+	if (payload.details) {
+		for (const [_key, value] of Object.entries(payload.details)) {
+			if (typeof value === "string" && value) {
+				parts.push(value);
+			}
+		}
+	}
+
+	return parts.join("\n");
+}
+
+/**
+ * Simple heuristic check for obvious credentials (fallback when Jev unavailable)
+ */
+function heuristicCheck(content: string): FilterResult {
+	// Check for common credential patterns
+	const sensitivePatterns = [
+		/\d+:[-A-Za-z0-9_]{35,}/, // Telegram bot token
+		/sk-[a-zA-Z0-9]{20,}/,    // OpenAI-style keys
+		/[a-zA-Z0-9_-]{32,}/,     // Long API keys
+		/Bearer\s+[a-zA-Z0-9_-]{20,}/i, // Bearer tokens
+		/(api[_-]?key|secret|token|password|credential)[=:\s]+[^\s]{16,}/i,
+		/-----BEGIN\s+(RSA|EC|OPENSSH|DSA)\s+PRIVATE\s+KEY-----/,
+		/infisical[_-]?(client[_-])?(secret|id)/i,
+	];
+
+	for (const pattern of sensitivePatterns) {
+		if (pattern.test(content)) {
+			let matchType = "api_key_or_secret";
+			if (/\d+:[-A-Za-z0-9_]{35,}/.test(content)) {
+				matchType = "telegram_bot_token";
+			} else if (/sk-[a-zA-Z0-9]{20,}/.test(content)) {
+				matchType = "openai_style_key";
+			} else if (/-----BEGIN\s+(RSA|EC|OPENSSH|DSA)\s+PRIVATE\s+KEY-----/.test(content)) {
+				matchType = "private_key";
+			} else if (/infisical/i.test(content)) {
+				matchType = "infisical_credential";
+			}
+
+			return {
+				shouldSend: false,
+				judgment: "BLOCK",
+				reason: `Sensitive content detected: ${matchType}`,
+				confidence: 0.95,
+			};
+		}
+	}
+
+	return {
+		shouldSend: true,
+		judgment: "SEND",
+		confidence: 0.9,
+	};
+}
+
+/**
+ * Call Jev to analyze content for sensitive credentials
+ */
+async function callJev(content: string): Promise<FilterResult | null> {
+	// Get API key from environment or key file
+	const apiKey = process.env.TYPESAFE_API_KEY || getKeyFromFile("jev-api-key") || getKeyFromFile("typesafe-api-key");
+
+	if (!apiKey) {
+		return null; // Jev not available
+	}
+
+	try {
+		const response = await fetch("https://api.typesafe.ai/v1/jev/decide", {
+			method: "POST",
+			headers: {
+				"Content-Type": "application/json",
+				Authorization: `Bearer ${apiKey}`,
+			},
+			body: JSON.stringify({
+				question:
+					"Does this message contain any API keys, tokens, secrets, passwords, or other sensitive credentials that should NOT be sent to a third-party service like Telegram? Answer only YES or NO.",
+				context: {
+					message: content,
+					action: "telegram_notification",
+					security_level: "high",
+				},
+			}),
+		});
+
+		if (!response.ok) {
+			return null;
+		}
+
+		const data = (await response.json()) as {
+			decision?: string;
+			confidence?: number;
+			reasoning?: string;
+		};
+
+		const decision = data.decision?.toUpperCase() ?? "UNKNOWN";
+		const isSensitive = decision === "YES" || decision === "BLOCK";
+
+		return {
+			shouldSend: !isSensitive,
+			judgment: isSensitive ? "BLOCK" : "SEND",
+			reason: data.reasoning,
+			confidence: data.confidence,
+		};
+	} catch {
+		return null;
+	}
+}
+
+/**
+ * Filter notification content before sending to Telegram
+ *
+ * @param payload - The notification payload
+ * @returns Filter result with decision
+ */
+export async function filterTelegramContent(
+	payload: NotificationPayload,
+): Promise<FilterResult> {
+	const content = extractContent(payload);
+
+	// First, run heuristic check (always available)
+	const heuristicResult = heuristicCheck(content);
+	if (heuristicResult.judgment === "BLOCK") {
+		logFilterDecision("BLOCK", heuristicResult.reason ?? "Heuristic match", payload.jobId);
+		return heuristicResult;
+	}
+
+	// Try Jev if available
+	const jevResult = await callJev(content);
+	if (jevResult) {
+		if (jevResult.judgment === "BLOCK") {
+			logFilterDecision("BLOCK", jevResult.reason ?? "Jev judgment", payload.jobId);
+		}
+		return jevResult;
+	}
+
+	// Jev unavailable - use heuristic result
+	return heuristicResult;
+}
+
+/**
+ * Log filter decision securely (no content, just metadata)
+ */
+function logFilterDecision(
+	decision: ContentJudgment,
+	reason: string,
+	jobId: string,
+): void {
+	console.warn(
+		`[TelegramFilter] ${decision} job=${jobId} reason=${reason} channel=telegram`,
+	);
+}
+
+/**
+ * Mask a value safely for logging
+ */
+function maskValue(value: string): string {
+	if (!value || value.length <= 8) return "****";
+	return `${value.slice(0, 4)}...${value.slice(-4)}`;
+}
+
+/**
+ * Get safe notification version (masked) for logging
+ */
+export function getSafeNotificationLog(payload: NotificationPayload): string {
+	const maskedTitle = maskValue(payload.title);
+	const maskedMessage = maskValue(payload.message);
+	const maskedJobId = maskValue(payload.jobId);
+
+	return `event=${payload.event} job=${maskedJobId} title=${maskedTitle} message_len=${maskedMessage.length}`;
+}

package/packages/observability/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/observability",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Comprehensive observability system with structured logging, tracing, metrics, and alerting",
   "type": "module",
   "main": "./dist/index.js",

package/packages/okf-indexer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/okf-indexer",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "OKF document indexer for SKILL.md files (RFC-0106)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/paperclip-integration/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/paperclip-integration",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Paperclip API integration: poll agent inbox, route tasks to pi.dev, Telegram alerts",
   "type": "module",
   "main": "./dist/index.js",

package/packages/performance-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/performance-optimizer",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Performance optimization analyzer for pi-harness runtime (RFC-0056)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/privilege-broker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/privilege-broker",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Privilege Broker — capability registry and command executor for autonomous runtime (RFC-0101 §7)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/project-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/project-analyzer",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Project analysis system for pi-harness-runtime - detects frameworks, rules, and project structure",
   "type": "module",
   "main": "./dist/index.js",

package/packages/project-bootstrap/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/project-bootstrap",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Project scaffolding from typed ProjectSpec",
   "type": "module",
   "main": "./dist/index.js",

package/packages/projection-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/projection-engine",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/prompt-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/prompt-compiler",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Deterministic prompt compiler for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/prompt-versioning/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/prompt-versioning",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "type": "module",
   "description": "Version control for prompts with rollback support (RFC-0019)",
   "main": "dist/index.js",

package/packages/provider-adapter-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/provider-adapter-sdk",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "SDK for building, testing, and registering AI provider adapters",
   "type": "module",
   "main": "./dist/index.js",

package/packages/provider-router/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/provider-router",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Enhanced Provider Router for pi-harness-runtime — intelligent routing with capabilities, costs, and quotas",
   "type": "module",
   "main": "./dist/provider-router.js",

package/packages/provider-selector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/provider-selector",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Multi-Provider Selector — route requests by cost, quality, and latency (RFC-0012)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/providers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/providers",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "pi-harness-runtime — providers",
   "type": "module",
   "main": "./dist/index.js",

package/packages/qdrant-skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/qdrant-skills",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Qdrant vector search integration for Hermes-style skill system",
   "type": "module",
   "main": "./dist/index.js",

package/packages/quota-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/quota-manager",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "pi-harness-runtime — quota-manager",
   "type": "module",
   "main": "./dist/index.js",

package/packages/rate-limiter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/rate-limiter",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "type": "module",
   "description": "Rate limiting with token bucket algorithm (RFC-0023)",
   "main": "dist/index.js",

package/packages/react-vite-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/react-vite-plugin",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "React/Vite framework analysis — components, config, TypeScript setup",
   "type": "module",
   "main": "./dist/index.js",

package/packages/release-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/release-manager",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "type": "module",
   "description": "Release management for pi-harness",
   "main": "dist/index.js",

package/packages/requirement-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/requirement-compiler",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "Compiles raw requirements into validated CompiledRequirement with ambiguity detection and risk tagging",
   "type": "module",
   "main": "./dist/index.js",

package/packages/runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/runtime",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "pi-harness-runtime — runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/scheduler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/scheduler",
-  "version": "1.1.164",
+  "version": "1.1.166",
   "description": "pi-harness-runtime — scheduler",
   "type": "module",
   "main": "./dist/index.js",