switchroom 0.19.34 → 0.19.36

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (35) hide show
  1. package/dist/auth-broker/index.js +7 -1
  2. package/dist/cli/skill-validate-pretool.mjs +15 -2
  3. package/dist/cli/switchroom.js +1005 -482
  4. package/dist/host-control/main.js +156 -4
  5. package/dist/vault/approvals/kernel-server.js +7 -1
  6. package/dist/vault/broker/server.js +7 -1
  7. package/package.json +4 -2
  8. package/profiles/_base/start.sh.hbs +37 -12
  9. package/telegram-plugin/dist/gateway/gateway.js +476 -116
  10. package/telegram-plugin/format.ts +70 -15
  11. package/telegram-plugin/gateway/gateway.ts +27 -31
  12. package/telegram-plugin/gateway/ipc-server.ts +18 -15
  13. package/telegram-plugin/gateway/model-command.ts +279 -23
  14. package/telegram-plugin/gateway/outbound-send-path.ts +12 -1
  15. package/telegram-plugin/operator-events.ts +40 -16
  16. package/telegram-plugin/secret-detect/db-uri.ts +90 -0
  17. package/telegram-plugin/secret-detect/index.ts +24 -1
  18. package/telegram-plugin/secret-detect/inert-values.ts +147 -0
  19. package/telegram-plugin/secret-detect/kv-scanner.ts +108 -0
  20. package/telegram-plugin/secret-detect/patterns.ts +24 -4
  21. package/telegram-plugin/tests/format-consistency.test.ts +93 -0
  22. package/telegram-plugin/tests/gateway-session-model-relaunch.test.ts +40 -2
  23. package/telegram-plugin/tests/ipc-server-validate-operator.test.ts +20 -11
  24. package/telegram-plugin/tests/model-command.test.ts +415 -4
  25. package/telegram-plugin/tests/outbound-send-path.test.ts +1 -1
  26. package/telegram-plugin/tests/secret-detect-cross-engine.test.ts +263 -0
  27. package/telegram-plugin/tests/secret-detect-write-path.test.ts +403 -0
  28. package/telegram-plugin/tests/turn-flush-safety.test.ts +2 -2
  29. package/vendor/hindsight-memory/scripts/lib/client.py +58 -0
  30. package/vendor/hindsight-memory/scripts/lib/secret_patterns.json +431 -0
  31. package/vendor/hindsight-memory/scripts/lib/secret_redact.py +563 -0
  32. package/vendor/hindsight-memory/scripts/lib/secret_redaction_vectors.json +397 -0
  33. package/vendor/hindsight-memory/scripts/subagent_retain.py +103 -7
  34. package/vendor/hindsight-memory/scripts/tests/test_secret_redact.py +522 -0
  35. package/vendor/hindsight-memory/scripts/tests/test_subagent_retain_learnings.py +377 -0
@@ -18787,6 +18787,9 @@ init_schema();
18787
18787
  // src/config/users.ts
18788
18788
  init_merge();
18789
18789
 
18790
+ // src/config/thinking-effort-risk.ts
18791
+ var RISKY_EFFORTS = new Set(["medium", "high", "xhigh", "max"]);
18792
+
18790
18793
  // src/agents/scaffold.ts
18791
18794
  init_merge();
18792
18795
  init_timezone();
@@ -18908,12 +18911,15 @@ function pgMib(mib) {
18908
18911
  }
18909
18912
  var HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV = "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE";
18910
18913
  var HINDSIGHT_PG_SHARED_BUFFERS_ENV = "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS";
18914
+ var HINDSIGHT_PG_FSYNC_ENV = "SWITCHROOM_HINDSIGHT_PG_FSYNC";
18915
+ var HINDSIGHT_PG_DEFAULT_FSYNC = "on";
18911
18916
  var HINDSIGHT_PG_DEFAULTS = [
18912
18917
  [
18913
18918
  HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV,
18914
18919
  pgMib(HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB)
18915
18920
  ],
18916
- [HINDSIGHT_PG_SHARED_BUFFERS_ENV, pgMib(HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB)]
18921
+ [HINDSIGHT_PG_SHARED_BUFFERS_ENV, pgMib(HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB)],
18922
+ [HINDSIGHT_PG_FSYNC_ENV, HINDSIGHT_PG_DEFAULT_FSYNC]
18917
18923
  ];
18918
18924
  var HINDSIGHT_PG_ENV_KEYS = new Set(HINDSIGHT_PG_DEFAULTS.map(([k]) => k));
18919
18925
 
@@ -7007,16 +7007,22 @@ var STRUCTURED_PATTERNS = [
7007
7007
  },
7008
7008
  {
7009
7009
  rule_id: "bearer_auth_header",
7010
- regex: /Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)/g,
7010
+ regex: /Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)/gi,
7011
7011
  captureIndex: 1,
7012
7012
  slugHint: "bearer_token"
7013
7013
  },
7014
7014
  {
7015
7015
  rule_id: "bearer_loose",
7016
- regex: /\bBearer\s+([A-Za-z0-9._\-+=]{18,})\b/g,
7016
+ regex: /\bBearer\s+([A-Za-z0-9._\-+=]{18,})\b/gi,
7017
7017
  captureIndex: 1,
7018
7018
  slugHint: "bearer_token"
7019
7019
  },
7020
+ {
7021
+ rule_id: "basic_auth_header",
7022
+ regex: /Authorization\s*[:=]\s*Basic\s+([A-Za-z0-9+/=]{8,})/gi,
7023
+ captureIndex: 1,
7024
+ slugHint: "basic_auth"
7025
+ },
7020
7026
  {
7021
7027
  rule_id: "pem_private_key",
7022
7028
  regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]+?-----END [A-Z ]*PRIVATE KEY-----/g,
@@ -7058,6 +7064,13 @@ var PROVIDER_PATTERNS = [
7058
7064
  ];
7059
7065
  var ALL_PATTERNS = [...ANCHORED_PATTERNS, ...PROVIDER_PATTERNS, ...STRUCTURED_PATTERNS];
7060
7066
 
7067
+ // telegram-plugin/secret-detect/inert-values.ts
7068
+ var INERT_GATED_RULES = new Set([
7069
+ "env_key_value",
7070
+ "json_secret_field",
7071
+ "cli_flag"
7072
+ ]);
7073
+
7061
7074
  // telegram-plugin/secret-detect/chunker.ts
7062
7075
  var CHUNK_THRESHOLD = 32 * 1024;
7063
7076
  var WINDOW_SIZE = 16 * 1024;