pi-roundtable 0.7.3 → 0.7.4

package/CHANGELOG.md

@@ -5,6 +5,21 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.7.4] - 2026-10-03
+
+### Added
+
+- Export `scrubDiagnostic` from the kit: mask credentials in subprocess or worker text (URL userinfo, bearer values, well-known token shapes, secret-named assignments), drop control characters and bound the length, so a host can show a failure's reason without its secrets.
+- Coding: `toolText` for the repository tools' descriptions and argument descriptions, `presentation.list` for the `repo_list` result, and `repo_push` takes a 7–40 character sha prefix of the reported commit.
+- Sandbox: `SandboxResearchWorker` accepts the host's own `tools` (extension packages and factories, active tool names, prompt), a `scope` around the session and the `aborted` wording.
+- Drawing: `cardPresentation.result` words the card draw result, and `mapLimits` lets a host accept longer relationship-map text.
+- Web: a channel Discord cannot name shows the `channel name unavailable` text.
+
+### Changed
+
+- Coding: git and gh failures name their scrubbed stderr again, a worker's own error reaches the report (scrubbed and bounded), the timeout and stop texts read as before ("the worker ran out of time (N minutes)", "the worker was stopped"), the refusals for a busy repository, a missing or over-long task and a full channel say what is wrong, a declined call is no longer listed as held, and the service reports the channels it works for so a shutdown can name them.
+- Sandbox: `ScopedSandboxDelegator` refuses with the reasons the core delegator gave ("title and task are required", the task length, the channel's running count), no longer limits the title, and reports a failed job's scrubbed error message or "the worker ran out of time" instead of "Sandbox task failed".
+
 ## [0.7.3] - 2026-10-03
 
 ### Fixed

package/docs/plugins.md

@@ -2490,6 +2490,7 @@ Import from the entries listed below; source area files are internal.
 | `withReplyFiles` | `pi-roundtable` | value |
 | `prepareImageBytes` | `pi-roundtable/kit` | value |
 | `ImagePreparationError` | `pi-roundtable/kit` | value |
+| `scrubDiagnostic` | `pi-roundtable/kit` | value |
 | `channelKey` | `pi-roundtable` | value |
 | `definePlugin` | `pi-roundtable` | value |
 | `defineRoundtable` | `pi-roundtable` | value |

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-roundtable",
-	"version": "0.7.3",
+	"version": "0.7.4",
 	"description": "A plugin-driven Pi agent server for Discord",
 	"type": "module",
 	"license": "MIT",

package/src/kit/diagnostics.ts

@@ -0,0 +1,43 @@
+/** Tool text that may name a credential: userinfo in URLs, bearer values, and well-known token shapes. */
+const CREDENTIALS: [RegExp, string][] = [
+	[/\b([a-z][a-z0-9+.-]*:\/\/)[^\s/@]+@/gi, "$1[redacted]@"],
+	[
+		/\b(authorization|proxy-authorization)\s*[:=]\s*[^\r\n]+/gi,
+		"$1: [redacted]",
+	],
+	[/\b(bearer|basic|token)\s+[A-Za-z0-9._~+/=-]{8,}/gi, "$1 [redacted]"],
+	[
+		/\b(gh[pousr]_[A-Za-z0-9]{20,}|github_pat_[A-Za-z0-9_]{20,}|glpat-[A-Za-z0-9_-]{16,}|sk-[A-Za-z0-9_-]{16,}|xox[abprs]-[A-Za-z0-9-]{10,}|AKIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{30,})\b/g,
+		"[redacted]",
+	],
+	[
+		/\b([A-Z0-9_]*(?:TOKEN|SECRET|PASSWORD|PASSWD|API_?KEY|CREDENTIAL)[A-Z0-9_]*)\s*=\s*\S+/g,
+		"$1=[redacted]",
+	],
+	[
+		/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z ]*PRIVATE KEY-----|$)/g,
+		"[redacted]",
+	],
+];
+
+/**
+ * Text from a failed subprocess or worker, safe to show a model or the owner: credentials are
+ * masked, control characters are removed, and the length is bounded. Empty input returns "".
+ */
+export function scrubDiagnostic(text: string, max = 600): string {
+	let clean = text;
+	for (const [pattern, replacement] of CREDENTIALS)
+		clean = clean.replace(pattern, replacement);
+	clean = Array.from(clean, (char) => {
+		const code = char.charCodeAt(0);
+		// Keep tab and newline; every other control character becomes a space.
+		return code === 9 || code === 10 || code > 31
+			? code === 127
+				? " "
+				: char
+			: " ";
+	})
+		.join("")
+		.trim();
+	return clean.length > max ? `${clean.slice(0, max - 1)}…` : clean;
+}

package/src/kit/index.ts

@@ -14,6 +14,7 @@ export {
 	withAttachmentsBlock,
 	withReference,
 } from "./channels.ts";
+export { scrubDiagnostic } from "./diagnostics.ts";
 export type {
 	ChoiceAnswer,
 	ChoiceQuestion,