pi-roundtable 0.7.3 → 0.7.5

package/CHANGELOG.md

@@ -5,6 +5,36 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.7.5] - 2026-10-03
+
+### Added
+
+- Coding: `workerBlockText` (what the worker reads for a declined or held call), `limits` (`reportChars`, `heldEntries`, `heldChars`) and `diagnosticChars`.
+- Drawing: `permissive` accepts what a looser host's callers send (unknown card exclusions, shared spread cells, repeated or empty node ids, self-edges), and `mapLimits` values are checked.
+- Sandbox: `ScopedSandboxDelegator` accepts `maxTitleChars`, `maxReportChars` and `diagnosticChars`.
+- Web: `skills.errorDetail` shows why a skill could not be read.
+
+### Changed
+
+- `scrubDiagnostic` also masks token, secret, password and API-key assignments in any case (query strings and JSON fields included), Cookie and API-key headers and JWTs, and works on a bounded prefix so hostile input stays fast.
+- Sandbox: `ScopedSandboxDelegator` limits a title to 200 characters again by default.
+- Web: the skill detail no longer refuses a body over 1 MiB or frontmatter over 64 KiB.
+
+## [0.7.4] - 2026-10-03
+
+### Added
+
+- Export `scrubDiagnostic` from the kit: mask credentials in subprocess or worker text (URL userinfo, bearer values, well-known token shapes, secret-named assignments), drop control characters and bound the length, so a host can show a failure's reason without its secrets.
+- Coding: `toolText` for the repository tools' descriptions and argument descriptions, `presentation.list` for the `repo_list` result, and `repo_push` takes a 7–40 character sha prefix of the reported commit.
+- Sandbox: `SandboxResearchWorker` accepts the host's own `tools` (extension packages and factories, active tool names, prompt), a `scope` around the session and the `aborted` wording.
+- Drawing: `cardPresentation.result` words the card draw result, and `mapLimits` lets a host accept longer relationship-map text.
+- Web: a channel Discord cannot name shows the `channel name unavailable` text.
+
+### Changed
+
+- Coding: git and gh failures name their scrubbed stderr again, a worker's own error reaches the report (scrubbed and bounded), the timeout and stop texts read as before ("the worker ran out of time (N minutes)", "the worker was stopped"), the refusals for a busy repository, a missing or over-long task and a full channel say what is wrong, a declined call is no longer listed as held, and the service reports the channels it works for so a shutdown can name them.
+- Sandbox: `ScopedSandboxDelegator` refuses with the reasons the core delegator gave ("title and task are required", the task length, the channel's running count), no longer limits the title, and reports a failed job's scrubbed error message or "the worker ran out of time" instead of "Sandbox task failed".
+
 ## [0.7.3] - 2026-10-03
 
 ### Fixed

package/docs/plugins.md

@@ -2490,6 +2490,7 @@ Import from the entries listed below; source area files are internal.
 | `withReplyFiles` | `pi-roundtable` | value |
 | `prepareImageBytes` | `pi-roundtable/kit` | value |
 | `ImagePreparationError` | `pi-roundtable/kit` | value |
+| `scrubDiagnostic` | `pi-roundtable/kit` | value |
 | `channelKey` | `pi-roundtable` | value |
 | `definePlugin` | `pi-roundtable` | value |
 | `defineRoundtable` | `pi-roundtable` | value |

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-roundtable",
-	"version": "0.7.3",
+	"version": "0.7.5",
 	"description": "A plugin-driven Pi agent server for Discord",
 	"type": "module",
 	"license": "MIT",

package/src/kit/diagnostics.ts

@@ -0,0 +1,50 @@
+/** Tool text that may name a credential: userinfo in URLs, bearer values, and well-known token shapes. */
+const CREDENTIALS: [RegExp, string][] = [
+	[/\b([a-z][a-z0-9+.-]*:\/\/)[^\s/@]+@/gi, "$1[redacted]@"],
+	[
+		/\b(authorization|proxy-authorization)\s*[:=]\s*[^\r\n]+/gi,
+		"$1: [redacted]",
+	],
+	[/\b(bearer|basic|token)\s+[A-Za-z0-9._~+/=-]{8,}/gi, "$1 [redacted]"],
+	[
+		/\b(gh[pousr]_[A-Za-z0-9]{20,}|github_pat_[A-Za-z0-9_]{20,}|glpat-[A-Za-z0-9_-]{16,}|sk-[A-Za-z0-9_-]{16,}|xox[abprs]-[A-Za-z0-9-]{10,}|AKIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{30,})\b/g,
+		"[redacted]",
+	],
+	// Assignments, query parameters and JSON fields whose name says it is a secret, in any case.
+	[
+		/\b([a-z0-9_-]*(?:token|secret|password|passwd|api[_-]?key|credential)[a-z0-9_-]*)(["']?\s*[:=]\s*["']?)[^\s"',&;]+/gi,
+		"$1$2[redacted]",
+	],
+	[
+		/\b(cookie|set-cookie|x-api-key|x-auth-token|x-access-token)\s*:\s*[^\r\n]+/gi,
+		"$1: [redacted]",
+	],
+	[/\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]*/g, "[redacted]"],
+	[
+		/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z ]*PRIVATE KEY-----|$)/g,
+		"[redacted]",
+	],
+];
+
+/**
+ * Text from a failed subprocess or worker, safe to show a model or the owner: credentials are
+ * masked, control characters are removed, and the length is bounded. Empty input returns "".
+ */
+export function scrubDiagnostic(text: string, max = 600): string {
+	// The patterns run on a bounded prefix, so hostile input cannot make them slow.
+	let clean = text.slice(0, Math.max(max * 4, 4096));
+	for (const [pattern, replacement] of CREDENTIALS)
+		clean = clean.replace(pattern, replacement);
+	clean = Array.from(clean, (char) => {
+		const code = char.charCodeAt(0);
+		// Keep tab and newline; every other control character becomes a space.
+		return code === 9 || code === 10 || code > 31
+			? code === 127
+				? " "
+				: char
+			: " ";
+	})
+		.join("")
+		.trim();
+	return clean.length > max ? `${clean.slice(0, max - 1)}…` : clean;
+}

package/src/kit/index.ts

@@ -14,6 +14,7 @@ export {
 	withAttachmentsBlock,
 	withReference,
 } from "./channels.ts";
+export { scrubDiagnostic } from "./diagnostics.ts";
 export type {
 	ChoiceAnswer,
 	ChoiceQuestion,