switchroom 0.19.34 → 0.19.36
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth-broker/index.js +7 -1
- package/dist/cli/skill-validate-pretool.mjs +15 -2
- package/dist/cli/switchroom.js +1005 -482
- package/dist/host-control/main.js +156 -4
- package/dist/vault/approvals/kernel-server.js +7 -1
- package/dist/vault/broker/server.js +7 -1
- package/package.json +4 -2
- package/profiles/_base/start.sh.hbs +37 -12
- package/telegram-plugin/dist/gateway/gateway.js +476 -116
- package/telegram-plugin/format.ts +70 -15
- package/telegram-plugin/gateway/gateway.ts +27 -31
- package/telegram-plugin/gateway/ipc-server.ts +18 -15
- package/telegram-plugin/gateway/model-command.ts +279 -23
- package/telegram-plugin/gateway/outbound-send-path.ts +12 -1
- package/telegram-plugin/operator-events.ts +40 -16
- package/telegram-plugin/secret-detect/db-uri.ts +90 -0
- package/telegram-plugin/secret-detect/index.ts +24 -1
- package/telegram-plugin/secret-detect/inert-values.ts +147 -0
- package/telegram-plugin/secret-detect/kv-scanner.ts +108 -0
- package/telegram-plugin/secret-detect/patterns.ts +24 -4
- package/telegram-plugin/tests/format-consistency.test.ts +93 -0
- package/telegram-plugin/tests/gateway-session-model-relaunch.test.ts +40 -2
- package/telegram-plugin/tests/ipc-server-validate-operator.test.ts +20 -11
- package/telegram-plugin/tests/model-command.test.ts +415 -4
- package/telegram-plugin/tests/outbound-send-path.test.ts +1 -1
- package/telegram-plugin/tests/secret-detect-cross-engine.test.ts +263 -0
- package/telegram-plugin/tests/secret-detect-write-path.test.ts +403 -0
- package/telegram-plugin/tests/turn-flush-safety.test.ts +2 -2
- package/vendor/hindsight-memory/scripts/lib/client.py +58 -0
- package/vendor/hindsight-memory/scripts/lib/secret_patterns.json +431 -0
- package/vendor/hindsight-memory/scripts/lib/secret_redact.py +563 -0
- package/vendor/hindsight-memory/scripts/lib/secret_redaction_vectors.json +397 -0
- package/vendor/hindsight-memory/scripts/subagent_retain.py +103 -7
- package/vendor/hindsight-memory/scripts/tests/test_secret_redact.py +522 -0
- package/vendor/hindsight-memory/scripts/tests/test_subagent_retain_learnings.py +377 -0
|
@@ -18787,6 +18787,9 @@ init_schema();
|
|
|
18787
18787
|
// src/config/users.ts
|
|
18788
18788
|
init_merge();
|
|
18789
18789
|
|
|
18790
|
+
// src/config/thinking-effort-risk.ts
|
|
18791
|
+
var RISKY_EFFORTS = new Set(["medium", "high", "xhigh", "max"]);
|
|
18792
|
+
|
|
18790
18793
|
// src/agents/scaffold.ts
|
|
18791
18794
|
init_merge();
|
|
18792
18795
|
init_timezone();
|
|
@@ -18908,12 +18911,15 @@ function pgMib(mib) {
|
|
|
18908
18911
|
}
|
|
18909
18912
|
var HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV = "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE";
|
|
18910
18913
|
var HINDSIGHT_PG_SHARED_BUFFERS_ENV = "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS";
|
|
18914
|
+
var HINDSIGHT_PG_FSYNC_ENV = "SWITCHROOM_HINDSIGHT_PG_FSYNC";
|
|
18915
|
+
var HINDSIGHT_PG_DEFAULT_FSYNC = "on";
|
|
18911
18916
|
var HINDSIGHT_PG_DEFAULTS = [
|
|
18912
18917
|
[
|
|
18913
18918
|
HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV,
|
|
18914
18919
|
pgMib(HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB)
|
|
18915
18920
|
],
|
|
18916
|
-
[HINDSIGHT_PG_SHARED_BUFFERS_ENV, pgMib(HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB)]
|
|
18921
|
+
[HINDSIGHT_PG_SHARED_BUFFERS_ENV, pgMib(HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB)],
|
|
18922
|
+
[HINDSIGHT_PG_FSYNC_ENV, HINDSIGHT_PG_DEFAULT_FSYNC]
|
|
18917
18923
|
];
|
|
18918
18924
|
var HINDSIGHT_PG_ENV_KEYS = new Set(HINDSIGHT_PG_DEFAULTS.map(([k]) => k));
|
|
18919
18925
|
|
|
@@ -7007,16 +7007,22 @@ var STRUCTURED_PATTERNS = [
|
|
|
7007
7007
|
},
|
|
7008
7008
|
{
|
|
7009
7009
|
rule_id: "bearer_auth_header",
|
|
7010
|
-
regex: /Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)/
|
|
7010
|
+
regex: /Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)/gi,
|
|
7011
7011
|
captureIndex: 1,
|
|
7012
7012
|
slugHint: "bearer_token"
|
|
7013
7013
|
},
|
|
7014
7014
|
{
|
|
7015
7015
|
rule_id: "bearer_loose",
|
|
7016
|
-
regex: /\bBearer\s+([A-Za-z0-9._\-+=]{18,})\b/
|
|
7016
|
+
regex: /\bBearer\s+([A-Za-z0-9._\-+=]{18,})\b/gi,
|
|
7017
7017
|
captureIndex: 1,
|
|
7018
7018
|
slugHint: "bearer_token"
|
|
7019
7019
|
},
|
|
7020
|
+
{
|
|
7021
|
+
rule_id: "basic_auth_header",
|
|
7022
|
+
regex: /Authorization\s*[:=]\s*Basic\s+([A-Za-z0-9+/=]{8,})/gi,
|
|
7023
|
+
captureIndex: 1,
|
|
7024
|
+
slugHint: "basic_auth"
|
|
7025
|
+
},
|
|
7020
7026
|
{
|
|
7021
7027
|
rule_id: "pem_private_key",
|
|
7022
7028
|
regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]+?-----END [A-Z ]*PRIVATE KEY-----/g,
|
|
@@ -7058,6 +7064,13 @@ var PROVIDER_PATTERNS = [
|
|
|
7058
7064
|
];
|
|
7059
7065
|
var ALL_PATTERNS = [...ANCHORED_PATTERNS, ...PROVIDER_PATTERNS, ...STRUCTURED_PATTERNS];
|
|
7060
7066
|
|
|
7067
|
+
// telegram-plugin/secret-detect/inert-values.ts
|
|
7068
|
+
var INERT_GATED_RULES = new Set([
|
|
7069
|
+
"env_key_value",
|
|
7070
|
+
"json_secret_field",
|
|
7071
|
+
"cli_flag"
|
|
7072
|
+
]);
|
|
7073
|
+
|
|
7061
7074
|
// telegram-plugin/secret-detect/chunker.ts
|
|
7062
7075
|
var CHUNK_THRESHOLD = 32 * 1024;
|
|
7063
7076
|
var WINDOW_SIZE = 16 * 1024;
|