switchroom 0.19.35 → 0.19.37

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.19.35", COMMIT_SHA = "76ae22ca";
+var VERSION = "0.19.37", COMMIT_SHA = "5d2f9a17";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -31355,8 +31355,8 @@ into your system prompt every session; this is the conversational summary.
   Kicking off a worker to crawl the changelog.
 
   **What it'll do**
-  \u2022 pull every entry since v0.14
-  \u2022 flag anything user-facing
+  - pull every entry since v0.14
+  - flag anything user-facing
 
   **Back in** ~2 min with a synthesized summary.
 - Use backtick-wrapped \`inline code\` for filenames, commands, and
@@ -31540,7 +31540,8 @@ You're writing for a phone screen in Telegram. Every reply renders as rich Markd
   fenced code blocks ALWAYS with a language
   hint (\`\`\`diff, \`\`\`json, \`\`\`bash \u2014 bare fence only for non-code fixed-width output);
   and the flagship \u2014 the **expandable blockquote** \`**> first line\` + \`> continuation\`
-  for a long quote, stack trace, or detailed aside the reader can collapse. Use it
+  for a long quote, stack trace, or detailed aside the reader can collapse. The \`**>\`
+  opener must be at the line start (column 0) \u2014 never indented \u2014 or it won't parse. Use it
   whenever a bulky supporting block would otherwise dominate the message.
 
 Renders wrong on this path \u2014 never emit: underline (\`__x__\` renders as bold),
@@ -31623,6 +31624,8 @@ var init_scaffold = __esm(() => {
     "mcp__hindsight__list_banks",
     "mcp__hindsight__get_memory",
     "mcp__hindsight__list_memories",
+    "mcp__hindsight__invalidate_memory",
+    "mcp__hindsight__update_memory",
     "mcp__hindsight__get_document",
     "mcp__hindsight__list_documents",
     "mcp__hindsight__delete_document",
@@ -35532,7 +35535,7 @@ class AuthBrokerClient {
       sock.once("error", onError);
       sock.once("connect", () => {
         sock.removeListener("error", onError);
-        sock.on("data", (chunk) => this.onData(chunk));
+        sock.on("data", (chunk2) => this.onData(chunk2));
         sock.on("error", (err) => this.onSocketError(err));
         sock.on("close", () => this.onSocketClose());
         this.socket = sock;
@@ -35546,8 +35549,8 @@ class AuthBrokerClient {
       this.connecting = null;
     }
   }
-  onData(chunk) {
-    this.buffer += chunk.toString("utf8");
+  onData(chunk2) {
+    this.buffer += chunk2.toString("utf8");
     let idx;
     while ((idx = this.buffer.indexOf(`
 `)) !== -1) {
@@ -39525,11 +39528,11 @@ function readAuditRaw(logPath, opts = {}) {
     const gen = `${logPath}.${n}`;
     if (!existsSync51(gen))
       break;
-    const chunk = tailBytes(gen, budget, strict);
-    if (chunk.length === 0)
+    const chunk2 = tailBytes(gen, budget, strict);
+    if (chunk2.length === 0)
       continue;
-    chunks.push(chunk);
-    budget -= Buffer.byteLength(chunk, "utf-8");
+    chunks.push(chunk2);
+    budget -= Buffer.byteLength(chunk2, "utf-8");
   }
   return chunks.reverse().filter((c) => c.length > 0).map((c) => c.endsWith(`
 `) ? c : c + `
@@ -44451,8 +44454,8 @@ async function hostdRequest(opts, req) {
         reject(err);
       }
     });
-    socket.on("data", (chunk) => {
-      buf += chunk.toString("utf8");
+    socket.on("data", (chunk2) => {
+      buf += chunk2.toString("utf8");
       if (Buffer.byteLength(buf, "utf8") > MAX_FRAME_BYTES3 * 2) {
         if (settled)
           return;
@@ -71143,9 +71146,600 @@ import { execFileSync as execFileSync11 } from "node:child_process";
 
 // src/agents/handoff-summarizer.ts
 init_atomic();
-init_observation_scopes();
 import { readFileSync as readFileSync19, writeFileSync as writeFileSync9, renameSync as renameSync7, mkdirSync as mkdirSync16, existsSync as existsSync23, statSync as statSync11, readdirSync as readdirSync10 } from "node:fs";
 import { join as join18 } from "node:path";
+
+// telegram-plugin/secret-detect/patterns.ts
+var ANCHORED_PATTERNS = [
+  { rule_id: "anthropic_api_key", regex: /\b(sk-ant-[A-Za-z0-9_-]{8,})\b/g, captureIndex: 1, slugHint: "anthropic_api_key" },
+  { rule_id: "anthropic_oauth_code", regex: /(?:^|\s)([A-Za-z0-9_-]{20,}#[A-Za-z0-9_-]{20,})(?=\s|$)/gm, captureIndex: 1, slugHint: "anthropic_oauth_code" },
+  { rule_id: "openai_api_key", regex: /\b(sk-[A-Za-z0-9_-]{20,})\b/g, captureIndex: 1, slugHint: "openai_api_key" },
+  { rule_id: "github_pat_classic", regex: /\b(ghp_[A-Za-z0-9]{20,})\b/g, captureIndex: 1, slugHint: "github_pat" },
+  { rule_id: "github_pat_fine_grained", regex: /\b(github_pat_[A-Za-z0-9_]{20,})\b/g, captureIndex: 1, slugHint: "github_pat" },
+  { rule_id: "slack_token", regex: /\b(xox[baprs]-[A-Za-z0-9-]{10,})\b/g, captureIndex: 1, slugHint: "slack_token" },
+  { rule_id: "slack_app_token", regex: /\b(xapp-[A-Za-z0-9-]{10,})\b/g, captureIndex: 1, slugHint: "slack_app_token" },
+  { rule_id: "groq_api_key", regex: /\b(gsk_[A-Za-z0-9_-]{10,})\b/g, captureIndex: 1, slugHint: "groq_api_key" },
+  { rule_id: "google_api_key", regex: /\b(AIza[0-9A-Za-z\-_]{20,})\b/g, captureIndex: 1, slugHint: "google_api_key" },
+  { rule_id: "perplexity_api_key", regex: /\b(pplx-[A-Za-z0-9_-]{10,})\b/g, captureIndex: 1, slugHint: "perplexity_api_key" },
+  { rule_id: "npm_token", regex: /\b(npm_[A-Za-z0-9]{10,})\b/g, captureIndex: 1, slugHint: "npm_token" },
+  { rule_id: "telegram_bot_token_prefixed", regex: /\bbot(\d{6,}:[A-Za-z0-9_-]{20,})\b/g, captureIndex: 1, slugHint: "telegram_bot_token" },
+  { rule_id: "telegram_bot_token", regex: /\b(\d{6,}:[A-Za-z0-9_-]{20,})\b/g, captureIndex: 1, slugHint: "telegram_bot_token" },
+  { rule_id: "laravel_sanctum_token", regex: /\b(\d+\|[A-Za-z0-9]{40,})\b/g, captureIndex: 1, slugHint: "api_token" },
+  { rule_id: "aws_access_key", regex: /\b(AKIA[0-9A-Z]{16})\b/g, captureIndex: 1, slugHint: "aws_access_key" },
+  { rule_id: "jwt", regex: /\b(eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,})\b/g, captureIndex: 1, slugHint: "jwt" }
+];
+var STRUCTURED_PATTERNS = [
+  {
+    rule_id: "env_key_value",
+    regex: /\b([A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD))\b\s*[=:]\s*(["']?)([^\s"'\\]+)\2/g,
+    captureIndex: 3,
+    slugHint: "env"
+  },
+  {
+    rule_id: "json_secret_field",
+    regex: /"(?:apiKey|token|secret|password|passwd|accessToken|refreshToken)"\s*:\s*"([^"]+)"/g,
+    captureIndex: 1,
+    slugHint: "json_secret"
+  },
+  {
+    rule_id: "cli_flag",
+    regex: /--(?:api[-_]?key|hook[-_]?token|token|secret|password|passwd)\s+(["']?)([^\s"']+)\1/g,
+    captureIndex: 2,
+    slugHint: "cli_flag"
+  },
+  {
+    rule_id: "bearer_auth_header",
+    regex: /Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)/gi,
+    captureIndex: 1,
+    slugHint: "bearer_token"
+  },
+  {
+    rule_id: "bearer_loose",
+    regex: /\bBearer\s+([A-Za-z0-9._\-+=]{18,})\b/gi,
+    captureIndex: 1,
+    slugHint: "bearer_token"
+  },
+  {
+    rule_id: "basic_auth_header",
+    regex: /Authorization\s*[:=]\s*Basic\s+([A-Za-z0-9+/=]{8,})/gi,
+    captureIndex: 1,
+    slugHint: "basic_auth"
+  },
+  {
+    rule_id: "pem_private_key",
+    regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]+?-----END [A-Z ]*PRIVATE KEY-----/g,
+    captureIndex: 0,
+    slugHint: "pem_private_key"
+  }
+];
+var PROVIDER_PATTERNS = [
+  { rule_id: "slack_webhook", regex: /(https:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9_/]+)/g, captureIndex: 1, slugHint: "slack_webhook" },
+  { rule_id: "stripe_live_secret", regex: /\b(sk_live_[A-Za-z0-9]{24,})\b/g, captureIndex: 1, slugHint: "stripe_key" },
+  { rule_id: "stripe_restricted", regex: /\b(rk_live_[A-Za-z0-9]{24,})\b/g, captureIndex: 1, slugHint: "stripe_key" },
+  { rule_id: "sendgrid_api_key", regex: /\b(SG\.[A-Za-z0-9_-]{22}\.[A-Za-z0-9_-]{43})\b/g, captureIndex: 1, slugHint: "sendgrid_key" },
+  { rule_id: "gitlab_pat", regex: /\b(glpat-[A-Za-z0-9_-]{20})\b/g, captureIndex: 1, slugHint: "gitlab_pat" },
+  { rule_id: "huggingface_token", regex: /\b(hf_[A-Za-z0-9]{34,})\b/g, captureIndex: 1, slugHint: "huggingface_token" },
+  { rule_id: "twilio_api_key", regex: /\b(SK[0-9a-f]{32})\b/g, captureIndex: 1, slugHint: "twilio_api_key" },
+  { rule_id: "mailgun_key", regex: /\b(key-[0-9a-f]{32})\b/g, captureIndex: 1, slugHint: "mailgun_key" },
+  { rule_id: "digitalocean_pat", regex: /\b(dop_v1_[a-f0-9]{64})\b/g, captureIndex: 1, slugHint: "digitalocean_token" },
+  { rule_id: "digitalocean_oauth", regex: /\b(doo_v1_[a-f0-9]{64})\b/g, captureIndex: 1, slugHint: "digitalocean_token" },
+  { rule_id: "digitalocean_refresh", regex: /\b(dor_v1_[a-f0-9]{64})\b/g, captureIndex: 1, slugHint: "digitalocean_token" },
+  { rule_id: "doppler_token", regex: /\b(dp\.(?:pt|st|ct|sa|scim|audit)\.[A-Za-z0-9]{40,44})\b/g, captureIndex: 1, slugHint: "doppler_token" },
+  { rule_id: "linear_api_key", regex: /\b(lin_api_[A-Za-z0-9]{40})\b/g, captureIndex: 1, slugHint: "linear_api_key" },
+  { rule_id: "shopify_access_token", regex: /\b(shpat_[a-fA-F0-9]{32})\b/g, captureIndex: 1, slugHint: "shopify_token" },
+  { rule_id: "shopify_shared_secret", regex: /\b(shpss_[a-fA-F0-9]{32})\b/g, captureIndex: 1, slugHint: "shopify_token" },
+  { rule_id: "shopify_private_app", regex: /\b(shppa_[a-fA-F0-9]{32})\b/g, captureIndex: 1, slugHint: "shopify_token" },
+  { rule_id: "square_access_token", regex: /\b(sq0atp-[A-Za-z0-9_-]{22})\b/g, captureIndex: 1, slugHint: "square_token" },
+  { rule_id: "square_oauth_secret", regex: /\b(sq0csp-[A-Za-z0-9_-]{43})\b/g, captureIndex: 1, slugHint: "square_token" },
+  { rule_id: "newrelic_key", regex: /\b(NRAK-[A-Z0-9]{27})\b/g, captureIndex: 1, slugHint: "newrelic_key" },
+  { rule_id: "notion_token", regex: /\b(ntn_[A-Za-z0-9]{46})\b/g, captureIndex: 1, slugHint: "notion_token" },
+  { rule_id: "planetscale_password", regex: /\b(pscale_pw_[A-Za-z0-9_.-]{43})\b/g, captureIndex: 1, slugHint: "planetscale_token" },
+  { rule_id: "planetscale_token", regex: /\b(pscale_tkn_[A-Za-z0-9_.-]{43})\b/g, captureIndex: 1, slugHint: "planetscale_token" },
+  { rule_id: "supabase_service_key", regex: /\b(sbp_[a-f0-9]{40})\b/g, captureIndex: 1, slugHint: "supabase_key" },
+  { rule_id: "atlassian_token", regex: /\b(ATATT[A-Za-z0-9_\-=]{20,})\b/g, captureIndex: 1, slugHint: "atlassian_token" },
+  { rule_id: "dropbox_token", regex: /\b(sl\.[A-Za-z0-9_-]{130,})/g, captureIndex: 1, slugHint: "dropbox_token" },
+  { rule_id: "databricks_token", regex: /\b(dapi[a-f0-9]{32})\b/g, captureIndex: 1, slugHint: "databricks_token" },
+  { rule_id: "grafana_service_account", regex: /\b(glsa_[A-Za-z0-9]{32}_[a-fA-F0-9]{8})\b/g, captureIndex: 1, slugHint: "grafana_token" },
+  { rule_id: "pypi_token", regex: /\b(pypi-AgEIcHlwaS[A-Za-z0-9_-]{50,})/g, captureIndex: 1, slugHint: "pypi_token" },
+  { rule_id: "aws_temp_access_key", regex: /\b(ASIA[0-9A-Z]{16})\b/g, captureIndex: 1, slugHint: "aws_access_key" },
+  { rule_id: "gcp_oauth_token", regex: /\b(ya29\.[A-Za-z0-9_-]{30,})/g, captureIndex: 1, slugHint: "gcp_oauth_token" }
+];
+var ALL_PATTERNS = [...ANCHORED_PATTERNS, ...PROVIDER_PATTERNS, ...STRUCTURED_PATTERNS];
+
+// telegram-plugin/secret-detect/entropy.ts
+function shannonEntropy(s) {
+  if (s.length === 0)
+    return 0;
+  const counts = new Map;
+  for (const ch of s) {
+    counts.set(ch, (counts.get(ch) ?? 0) + 1);
+  }
+  let h = 0;
+  const len = s.length;
+  for (const c of counts.values()) {
+    const p = c / len;
+    h -= p * Math.log2(p);
+  }
+  return h;
+}
+
+// telegram-plugin/secret-detect/inert-values.ts
+var INERT_VALUE_RE = [
+  /^\[REDACTED(?::[A-Za-z0-9_]+)?\]$/i,
+  /^\$\{?[A-Za-z_][A-Za-z0-9_]*\}?$/,
+  /^\{\{[^\n\r\u2028\u2029]*\}\}$/,
+  /^<[^<>\n\r\u2028\u2029]*>$/,
+  /^%[A-Za-z_][A-Za-z0-9_]*%$/,
+  /^vault:[A-Za-z0-9_./-]*$/i,
+  /^[*x\u2022.]+$/i,
+  /^(?:process\.env|import\.meta\.env|os\.environ)(?:\.[A-Za-z_$][A-Za-z0-9_$]*|\[["']?[A-Za-z_$][A-Za-z0-9_$]*["']?\])*$/,
+  /^(?:changeme|change-me|replaceme|replace-me|placeholder|todo|tbd|yourkey|your-key|yourpassword|your-password|yoursecret|your-secret|yourtoken|your-token)(?:[-_][A-Za-z0-9-]+)?$/i,
+  /^[a-z]+(?: [a-z]+){2,}$/
+];
+var CREDENTIAL_RUN_RE = /[A-Za-z0-9]{12,}/g;
+var MIXED_CLASS_RUN_MIN = 12;
+var SINGLE_CLASS_RUN_MIN = 16;
+function runIsCredentialShaped(run) {
+  let classes = 0;
+  if (/[a-z]/.test(run))
+    classes++;
+  if (/[A-Z]/.test(run))
+    classes++;
+  if (/[0-9]/.test(run))
+    classes++;
+  return run.length >= (classes >= 2 ? MIXED_CLASS_RUN_MIN : SINGLE_CLASS_RUN_MIN);
+}
+function hasCredentialShapedRun(value) {
+  for (const run of value.match(CREDENTIAL_RUN_RE) ?? []) {
+    if (runIsCredentialShaped(run))
+      return true;
+  }
+  return false;
+}
+function isInertValue(value) {
+  if (!INERT_VALUE_RE.some((re) => re.test(value)))
+    return false;
+  return !hasCredentialShapedRun(value);
+}
+var INERT_GATED_RULES = new Set([
+  "env_key_value",
+  "json_secret_field",
+  "cli_flag"
+]);
+var TRAILING_PUNCT_RE = /[.,;:!?)\]}]+$/;
+function stripTrailingPunctuation(value) {
+  return value.replace(TRAILING_PUNCT_RE, "");
+}
+
+// telegram-plugin/secret-detect/kv-scanner.ts
+var KV_RE = /\b([A-Za-z_][A-Za-z0-9_-]*(?:password|passwd|token|secret|key|api[_-]?key))\s*[:=]\s*["']?([^\s"'\\]{8,})["']?/gi;
+var KV_ENTROPY_THRESHOLD = 4;
+var MEMORABLE_PW_RE = /\b([A-Za-z0-9_-]*(?:password|passwd|passphrase|pwd))\b\s*(?:[:=]\s*|\s+is\s+)(["']?)([^\s"']{8,64})\2/gi;
+var MEMORABLE_PW_RULE_ID = "memorable_password";
+var MEMORABLE_PW_MIN_CLASSES = 2;
+function charClassCount(value) {
+  let n = 0;
+  if (/[a-z]/.test(value))
+    n++;
+  if (/[A-Z]/.test(value))
+    n++;
+  if (/[0-9]/.test(value))
+    n++;
+  if (/[^A-Za-z0-9]/.test(value))
+    n++;
+  return n;
+}
+function looksLikeMemorablePassword(value) {
+  if (isInertValue(value))
+    return false;
+  const core = stripTrailingPunctuation(value);
+  if (core.length < 8 || core.length > 64)
+    return false;
+  if (isInertValue(core))
+    return false;
+  if (new Set(core).size < 4)
+    return false;
+  return charClassCount(core) >= MEMORABLE_PW_MIN_CLASSES;
+}
+function scanMemorablePasswords(text) {
+  const hits = [];
+  MEMORABLE_PW_RE.lastIndex = 0;
+  let m;
+  while ((m = MEMORABLE_PW_RE.exec(text)) !== null) {
+    const keyName = m[1];
+    const value = m[3];
+    if (!value || !looksLikeMemorablePassword(value))
+      continue;
+    const valueOffsetInMatch = m[0].indexOf(value, keyName.length);
+    if (valueOffsetInMatch < 0)
+      continue;
+    const start = m.index + valueOffsetInMatch;
+    hits.push({
+      rule_id: MEMORABLE_PW_RULE_ID,
+      start,
+      end: start + value.length,
+      matched_text: value,
+      key_name: keyName,
+      confidence: "ambiguous"
+    });
+  }
+  return hits;
+}
+function scanKeyValue(text) {
+  const hits = [];
+  KV_RE.lastIndex = 0;
+  let m;
+  while ((m = KV_RE.exec(text)) !== null) {
+    const [, keyName, value] = m;
+    if (!value)
+      continue;
+    if (isInertValue(value))
+      continue;
+    const h = shannonEntropy(value);
+    if (h < KV_ENTROPY_THRESHOLD)
+      continue;
+    const valueOffsetInMatch = m[0].indexOf(value, keyName.length);
+    if (valueOffsetInMatch < 0)
+      continue;
+    const start = m.index + valueOffsetInMatch;
+    const end = start + value.length;
+    hits.push({
+      rule_id: "kv_entropy",
+      start,
+      end,
+      matched_text: value,
+      key_name: keyName,
+      confidence: "ambiguous"
+    });
+  }
+  return hits;
+}
+
+// telegram-plugin/secret-detect/db-uri.ts
+var DB_URI_RE = /\b([a-zA-Z][a-zA-Z0-9+.-]+):\/\/([^\s:/@]+):([^\s/?#]+)@([^\s/@?#]+)/g;
+var DB_URI_RULE_ID = "db_uri_password";
+function isInertPassword(value) {
+  if (value.startsWith("[REDACTED"))
+    return true;
+  return /^[*x]+$/i.test(value);
+}
+function scanDbUris(text) {
+  const hits = [];
+  DB_URI_RE.lastIndex = 0;
+  let m;
+  while ((m = DB_URI_RE.exec(text)) !== null) {
+    const scheme = m[1];
+    const user = m[2];
+    const password = m[3];
+    if (isInertPassword(password))
+      continue;
+    const start = m.index + scheme.length + 3 + user.length + 1;
+    hits.push({
+      rule_id: DB_URI_RULE_ID,
+      start,
+      end: start + password.length,
+      matched_text: password,
+      key_name: `${scheme}_password`,
+      confidence: "ambiguous"
+    });
+  }
+  return hits;
+}
+
+// telegram-plugin/secret-detect/generic-entropy.ts
+var CANDIDATE_RE = /[A-Za-z0-9]{28,}/g;
+var GENERIC_MIN_DISTINCT = 18;
+var MAX_GENERIC_HITS = 20;
+function hasDistinctChars(tok, n) {
+  const seen = new Uint8Array(128);
+  let distinct = 0;
+  for (let i = 0;i < tok.length; i++) {
+    const c = tok.charCodeAt(i);
+    if (seen[c] === 0) {
+      seen[c] = 1;
+      if (++distinct >= n)
+        return true;
+    }
+  }
+  return false;
+}
+function hasDigit(tok) {
+  for (let i = 0;i < tok.length; i++) {
+    const c = tok.charCodeAt(i);
+    if (c >= 48 && c <= 57)
+      return true;
+  }
+  return false;
+}
+function scanGenericSecrets(text) {
+  const hits = [];
+  CANDIDATE_RE.lastIndex = 0;
+  let m;
+  while ((m = CANDIDATE_RE.exec(text)) !== null) {
+    if (hits.length >= MAX_GENERIC_HITS)
+      break;
+    const tok = m[0];
+    if (!hasDigit(tok))
+      continue;
+    if (!hasDistinctChars(tok, GENERIC_MIN_DISTINCT))
+      continue;
+    hits.push({
+      rule_id: "generic_high_entropy",
+      start: m.index,
+      end: m.index + tok.length,
+      matched_text: tok,
+      confidence: "ambiguous"
+    });
+  }
+  return hits;
+}
+
+// telegram-plugin/secret-detect/chunker.ts
+var CHUNK_THRESHOLD = 32 * 1024;
+var WINDOW_SIZE = 16 * 1024;
+var OVERLAP = 8 * 1024;
+function chunk(text) {
+  if (text.length <= CHUNK_THRESHOLD) {
+    return [{ offset: 0, text }];
+  }
+  const out = [];
+  let offset = 0;
+  while (offset < text.length) {
+    const end = Math.min(offset + WINDOW_SIZE, text.length);
+    out.push({ offset, text: text.slice(offset, end) });
+    if (end >= text.length)
+      break;
+    offset = end - OVERLAP;
+  }
+  return out;
+}
+
+// telegram-plugin/secret-detect/suppressor.ts
+var MARKERS = ["test", "mock", "example", "fixture", "dummy"];
+var WINDOW = 40;
+var MARKER_RE = new RegExp(`\\b(?:${MARKERS.join("|")})\\b`, "i");
+function isSuppressed(text, start, end) {
+  const left = Math.max(0, start - WINDOW);
+  const right = Math.min(text.length, end + WINDOW);
+  const context = text.slice(left, start) + text.slice(end, right);
+  return MARKER_RE.test(context);
+}
+
+// telegram-plugin/secret-detect/slug.ts
+function sanitizeKeyName(raw) {
+  const up = raw.toUpperCase();
+  const cleaned = up.replace(/[^A-Z0-9_]+/g, "_").replace(/_+/g, "_").replace(/^_+|_+$/g, "");
+  return cleaned.length > 0 ? cleaned : "SECRET";
+}
+function datePart(now = new Date) {
+  const y = now.getUTCFullYear();
+  const m = String(now.getUTCMonth() + 1).padStart(2, "0");
+  const d = String(now.getUTCDate()).padStart(2, "0");
+  return `${y}${m}${d}`;
+}
+function deriveSlug(inputs, existing) {
+  let base;
+  if (inputs.key_name && inputs.key_name.trim().length > 0) {
+    base = sanitizeKeyName(inputs.key_name);
+  } else {
+    base = `${inputs.rule_id}_${datePart(inputs.now)}`;
+  }
+  if (!existing.has(base))
+    return base;
+  let n = 2;
+  while (existing.has(`${base}_${n}`))
+    n++;
+  return `${base}_${n}`;
+}
+// telegram-plugin/secret-detect/url-redact.ts
+var SENSITIVE_PARAMS = new Set([
+  "token",
+  "key",
+  "api_key",
+  "apikey",
+  "secret",
+  "access_token",
+  "password",
+  "pass",
+  "auth",
+  "client_secret",
+  "refresh_token",
+  "signature"
+]);
+var URL_RE = /\b(?:https?|wss?|ftp):\/\/[^\s<>"']+/gi;
+function redactUrls(text) {
+  return text.replace(URL_RE, (m) => {
+    const redacted = redactOne(m);
+    return redacted ?? m;
+  });
+}
+function redactOne(raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    return null;
+  }
+  let changed = false;
+  if (u.username || u.password) {
+    u.username = "***";
+    u.password = "";
+    changed = true;
+  }
+  for (const [key] of u.searchParams) {
+    if (SENSITIVE_PARAMS.has(key.toLowerCase())) {
+      u.searchParams.set(key, "***");
+      changed = true;
+    }
+  }
+  return changed ? u.toString() : null;
+}
+
+// telegram-plugin/secret-detect/index.ts
+function detectSecrets(text) {
+  if (!text || text.length === 0)
+    return [];
+  const windows = chunk(text);
+  const raw = [];
+  for (const win of windows) {
+    for (const p of ALL_PATTERNS) {
+      const re = new RegExp(p.regex.source, p.regex.flags.includes("g") ? p.regex.flags : p.regex.flags + "g");
+      let m;
+      while ((m = re.exec(win.text)) !== null) {
+        if (m[0].length === 0) {
+          re.lastIndex++;
+          continue;
+        }
+        const cap = p.captureIndex === 0 ? m[0] : m[p.captureIndex];
+        if (!cap)
+          continue;
+        const matchStart = p.captureIndex === 0 ? m.index : m.index + m[0].indexOf(cap);
+        if (matchStart < 0)
+          continue;
+        const globalStart = win.offset + matchStart;
+        const globalEnd = globalStart + cap.length;
+        const keyName = p.rule_id === "env_key_value" ? m[1] : undefined;
+        if (INERT_GATED_RULES.has(p.rule_id) && isInertValue(cap))
+          continue;
+        if (p.rule_id === "env_key_value") {
+          const ENV_KV_MIN_LEN = 12;
+          const ENV_KV_MIN_ENTROPY = 3.5;
+          if (cap.length < ENV_KV_MIN_LEN)
+            continue;
+          if (shannonEntropy(cap) < ENV_KV_MIN_ENTROPY)
+            continue;
+        }
+        raw.push({
+          rule_id: p.rule_id,
+          start: globalStart,
+          end: globalEnd,
+          matched_text: cap,
+          key_name: keyName,
+          confidence: "high"
+        });
+      }
+    }
+    const kvHits = scanKeyValue(win.text);
+    for (const h of kvHits) {
+      raw.push({ ...h, start: h.start + win.offset, end: h.end + win.offset });
+    }
+    for (const h of scanDbUris(win.text)) {
+      raw.push({ ...h, start: h.start + win.offset, end: h.end + win.offset });
+    }
+    for (const h of scanMemorablePasswords(win.text)) {
+      raw.push({ ...h, start: h.start + win.offset, end: h.end + win.offset });
+    }
+    const genHits = scanGenericSecrets(win.text);
+    for (const h of genHits) {
+      raw.push({ ...h, start: h.start + win.offset, end: h.end + win.offset });
+    }
+  }
+  const deduped = dedupeRaw(raw);
+  const final = dropOverlaps(deduped);
+  const existing = new Set;
+  const out = [];
+  for (const h of final) {
+    const suggested_slug = deriveSlug({ key_name: h.key_name, rule_id: h.rule_id }, existing);
+    existing.add(suggested_slug);
+    out.push({
+      rule_id: h.rule_id,
+      matched_text: h.matched_text,
+      start: h.start,
+      end: h.end,
+      confidence: h.confidence,
+      suppressed: isSuppressed(text, h.start, h.end),
+      suggested_slug,
+      key_name: h.key_name
+    });
+  }
+  out.sort((a, b) => a.start - b.start);
+  return out;
+}
+function dedupeRaw(raw) {
+  const seen = new Map;
+  for (const h of raw) {
+    const key = `${h.start}:${h.end}`;
+    const existing = seen.get(key);
+    if (!existing) {
+      seen.set(key, h);
+      continue;
+    }
+    if (existing.confidence === "ambiguous" && h.confidence === "high") {
+      seen.set(key, h);
+    }
+  }
+  return Array.from(seen.values());
+}
+function dropOverlaps(hits) {
+  const out = hits.filter((h) => !(h.confidence === "ambiguous" && hits.some((o) => o !== h && o.start <= h.start && o.end >= h.end && !(o.start === h.start && o.end === h.end))));
+  out.sort((a, b) => a.start - b.start || a.end - b.end);
+  return out;
+}
+
+// telegram-plugin/secret-detect/redact.ts
+var REDACTED_MARKER = "[REDACTED]";
+function redact(text) {
+  if (!text || text.length === 0)
+    return text;
+  const urlScrubbed = redactUrls(text);
+  const hits = detectSecrets(urlScrubbed).filter((h) => h.rule_id !== "generic_high_entropy");
+  if (hits.length === 0)
+    return urlScrubbed;
+  const sorted = [...hits].sort((a, b) => b.start - a.start);
+  let out = urlScrubbed;
+  for (const h of sorted) {
+    out = out.slice(0, h.start) + redactedMarker(h.rule_id) + out.slice(h.end);
+  }
+  return out;
+}
+function redactedMarker(ruleId) {
+  const trimmed = ruleId.replace(/^(kv|env)_/, "");
+  if (!trimmed || trimmed === "key_value" || trimmed === "kv_entropy") {
+    return REDACTED_MARKER;
+  }
+  return `[REDACTED:${trimmed}]`;
+}
+// src/memory/hindsight-write-redaction.ts
+function redactJsonStrings(value) {
+  if (typeof value === "string")
+    return redact(value);
+  if (Array.isArray(value))
+    return value.map(redactJsonStrings);
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      out[k] = redactJsonStrings(v);
+    }
+    return out;
+  }
+  return value;
+}
+var REDACTED_ITEM_FIELDS = ["content", "context"];
+function redactMemoryWriteBody(body) {
+  if (!body || typeof body !== "object" || Array.isArray(body))
+    return body;
+  const src = body;
+  if (!Array.isArray(src.items))
+    return body;
+  const items = src.items.map((item) => {
+    if (!item || typeof item !== "object" || Array.isArray(item))
+      return item;
+    const row = { ...item };
+    for (const field of REDACTED_ITEM_FIELDS) {
+      if (typeof row[field] === "string") {
+        row[field] = redact(row[field]);
+      }
+    }
+    if (row.metadata && typeof row.metadata === "object") {
+      row.metadata = redactJsonStrings(row.metadata);
+    }
+    return row;
+  });
+  return { ...src, items };
+}
+
+// src/agents/handoff-summarizer.ts
+init_observation_scopes();
 var HANDOFF_STATUS_MIRROR_SKIPPED = "mirror-skipped-invalid-scope";
 var DEFAULT_MAX_TURNS = 50;
 var TOPIC_MAX_CHARS = 117;
@@ -71332,7 +71926,7 @@ async function mirrorToHindsight(briefing, opts) {
 `);
     return false;
   }
-  const body = {
+  const body = redactMemoryWriteBody({
     items: [
       {
         content: briefing,
@@ -71342,7 +71936,7 @@ async function mirrorToHindsight(briefing, opts) {
       }
     ],
     async: true
-  };
+  });
   try {
     await fetchFn(endpoint, {
       method: "POST",
@@ -74348,8 +74942,8 @@ Bootstrapping agent: ${name}
     const code = await new Promise((resolve24) => {
       process.stdin.setEncoding("utf-8");
       let buf = "";
-      process.stdin.on("data", (chunk) => {
-        buf += chunk.toString();
+      process.stdin.on("data", (chunk2) => {
+        buf += chunk2.toString();
         const newlineIdx = buf.indexOf(`
 `);
         if (newlineIdx !== -1) {
@@ -74431,8 +75025,8 @@ switchroom agent add: ${name}
       return new Promise((resolveLine) => {
         process.stdin.setEncoding("utf-8");
         let buf = "";
-        const onData = (chunk) => {
-          buf += chunk.toString();
+        const onData = (chunk2) => {
+          buf += chunk2.toString();
           const newlineIdx = buf.indexOf(`
 `);
           if (newlineIdx !== -1) {
@@ -76463,8 +77057,8 @@ async function readHiddenLine2(prompt) {
       stdin.setRawMode(true);
     }
     let line = "";
-    const onData = (chunk) => {
-      const s = chunk.toString("utf8");
+    const onData = (chunk2) => {
+      const s = chunk2.toString("utf8");
       for (const ch of s) {
         if (ch === `
 ` || ch === "\r") {
@@ -77393,7 +77987,7 @@ function getVaultPath2(configPath) {
     return resolvePath("~/.switchroom/vault.enc");
   }
 }
-function maskToken(s) {
+function maskToken2(s) {
   if (s.length >= 18)
     return `${s.slice(0, 6)}...${s.slice(-4)}`;
   return "***";
@@ -77681,7 +78275,7 @@ function registerVaultSweep(vault, program3) {
     console.log("");
     console.log(source_default.dim(`masked values for display only:`));
     for (const v of values) {
-      console.log(`  vault:${v.key} \u2192 ${maskToken(v.value)}`);
+      console.log(`  vault:${v.key} \u2192 ${maskToken2(v.value)}`);
     }
     if (opts.dryRun) {
       console.log(source_default.yellow("dry-run \u2014 no files modified. Rerun without --dry-run to apply."));
@@ -80654,8 +81248,8 @@ class VaultBroker {
       peer = this.testOpts._testIdentify ? this.testOpts._testIdentify(listenerSocketPath, socket) : identify(listenerSocketPath, socket);
     }
     let buffer = "";
-    socket.on("data", (chunk) => {
-      buffer += chunk.toString("utf8");
+    socket.on("data", (chunk2) => {
+      buffer += chunk2.toString("utf8");
       if (Buffer.byteLength(buffer, "utf8") > MAX_FRAME_BYTES) {
         const resp = encodeResponse(errorResponse("BAD_REQUEST", "Frame exceeds 64 KiB limit"));
         socket.end(resp);
@@ -81764,8 +82358,8 @@ class VaultBroker {
     const auditCaller = isOperator ? "operator" : unlockPeer !== null ? callerFromPeer(unlockPeer) : `pid:${process.pid}`;
     const auditCgroup = isOperator ? undefined : unlockPeer?.systemdUnit ?? undefined;
     let buffer = "";
-    socket.on("data", (chunk) => {
-      buffer += chunk.toString("utf8");
+    socket.on("data", (chunk2) => {
+      buffer += chunk2.toString("utf8");
       const newlineIdx = buffer.indexOf(`
 `);
       if (newlineIdx === -1) {
@@ -83332,7 +83926,7 @@ function promptLine2(prompt, hidden = false) {
 function readStdinToEnd() {
   return new Promise((resolve30, reject) => {
     const chunks = [];
-    process.stdin.on("data", (chunk) => chunks.push(chunk));
+    process.stdin.on("data", (chunk2) => chunks.push(chunk2));
     process.stdin.on("end", () => {
       resolve30(Buffer.concat(chunks).toString("utf8"));
     });
@@ -85484,9 +86078,9 @@ Repairing vector index coverage for ${target}${opts.dryRun ? source_default.yell
 `));
     const child = spawn5("docker", argv, { stdio: ["ignore", "pipe", "inherit"] });
     let captured = "";
-    child.stdout?.on("data", (chunk) => {
-      captured += chunk.toString();
-      process.stdout.write(chunk);
+    child.stdout?.on("data", (chunk2) => {
+      captured += chunk2.toString();
+      process.stdout.write(chunk2);
     });
     const childExit = await new Promise((resolve30) => {
       child.on("error", () => resolve30(127));
@@ -85587,14 +86181,21 @@ Demoting memory ${source_default.cyan(memoryId)}`));
     const timeoutMs = Math.max(1000, parseInt(opts.timeout, 10) || 60000);
     const ctrl = new AbortController;
     const t = setTimeout(() => ctrl.abort(), timeoutMs);
+    const payload = redactMemoryWriteBody({
+      items: [{ content, tags: ["operator-authored", "profile"] }],
+      async: false
+    });
+    const stored = payload.items[0].content;
+    if (stored !== content) {
+      console.error(source_default.yellow(`\u26a0 Credential-shaped text in this fact was replaced with a
+` + `  [REDACTED] marker before it was stored. Put secrets in the
+` + "  vault (`switchroom vault set <key>`) and reference them as\n" + "  `vault:<key>` instead."));
+    }
     try {
       const res = await fetch(url, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-          items: [{ content, tags: ["operator-authored", "profile"] }],
-          async: false
-        }),
+        body: JSON.stringify(payload),
         signal: ctrl.signal
       });
       if (!res.ok) {
@@ -85602,7 +86203,7 @@ Demoting memory ${source_default.cyan(memoryId)}`));
         process.exit(1);
       }
       console.log(source_default.green(`\u2713 Added to profile bank "${bank}"`));
-      console.log(source_default.gray(`  ${content}`));
+      console.log(source_default.gray(`  ${stored}`));
       console.log(source_default.gray("  (fact extraction runs in the background \u2014 `profile list` may lag a few seconds)"));
       console.log(source_default.gray(`
   Wire it into agents via memory.recall.additional_banks: ["${bank}"] in switchroom.yaml,
@@ -87895,8 +88496,8 @@ function forwardToGateway(socketPath, req, opts = {}) {
       conn.write(JSON.stringify(req) + `
 `);
     });
-    conn.on("data", (chunk) => {
-      buf += chunk;
+    conn.on("data", (chunk2) => {
+      buf += chunk2;
       const nl = buf.indexOf(`
 `);
       if (nl === -1)
@@ -94075,410 +94676,6 @@ function computeFingerprint(source, code) {
   return `${source}::${code}`;
 }
 
-// telegram-plugin/secret-detect/patterns.ts
-var ANCHORED_PATTERNS = [
-  { rule_id: "anthropic_api_key", regex: /\b(sk-ant-[A-Za-z0-9_-]{8,})\b/g, captureIndex: 1, slugHint: "anthropic_api_key" },
-  { rule_id: "anthropic_oauth_code", regex: /(?:^|\s)([A-Za-z0-9_-]{20,}#[A-Za-z0-9_-]{20,})(?=\s|$)/gm, captureIndex: 1, slugHint: "anthropic_oauth_code" },
-  { rule_id: "openai_api_key", regex: /\b(sk-[A-Za-z0-9_-]{20,})\b/g, captureIndex: 1, slugHint: "openai_api_key" },
-  { rule_id: "github_pat_classic", regex: /\b(ghp_[A-Za-z0-9]{20,})\b/g, captureIndex: 1, slugHint: "github_pat" },
-  { rule_id: "github_pat_fine_grained", regex: /\b(github_pat_[A-Za-z0-9_]{20,})\b/g, captureIndex: 1, slugHint: "github_pat" },
-  { rule_id: "slack_token", regex: /\b(xox[baprs]-[A-Za-z0-9-]{10,})\b/g, captureIndex: 1, slugHint: "slack_token" },
-  { rule_id: "slack_app_token", regex: /\b(xapp-[A-Za-z0-9-]{10,})\b/g, captureIndex: 1, slugHint: "slack_app_token" },
-  { rule_id: "groq_api_key", regex: /\b(gsk_[A-Za-z0-9_-]{10,})\b/g, captureIndex: 1, slugHint: "groq_api_key" },
-  { rule_id: "google_api_key", regex: /\b(AIza[0-9A-Za-z\-_]{20,})\b/g, captureIndex: 1, slugHint: "google_api_key" },
-  { rule_id: "perplexity_api_key", regex: /\b(pplx-[A-Za-z0-9_-]{10,})\b/g, captureIndex: 1, slugHint: "perplexity_api_key" },
-  { rule_id: "npm_token", regex: /\b(npm_[A-Za-z0-9]{10,})\b/g, captureIndex: 1, slugHint: "npm_token" },
-  { rule_id: "telegram_bot_token_prefixed", regex: /\bbot(\d{6,}:[A-Za-z0-9_-]{20,})\b/g, captureIndex: 1, slugHint: "telegram_bot_token" },
-  { rule_id: "telegram_bot_token", regex: /\b(\d{6,}:[A-Za-z0-9_-]{20,})\b/g, captureIndex: 1, slugHint: "telegram_bot_token" },
-  { rule_id: "laravel_sanctum_token", regex: /\b(\d+\|[A-Za-z0-9]{40,})\b/g, captureIndex: 1, slugHint: "api_token" },
-  { rule_id: "aws_access_key", regex: /\b(AKIA[0-9A-Z]{16})\b/g, captureIndex: 1, slugHint: "aws_access_key" },
-  { rule_id: "jwt", regex: /\b(eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,})\b/g, captureIndex: 1, slugHint: "jwt" }
-];
-var STRUCTURED_PATTERNS = [
-  {
-    rule_id: "env_key_value",
-    regex: /\b([A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD))\b\s*[=:]\s*(["']?)([^\s"'\\]+)\2/g,
-    captureIndex: 3,
-    slugHint: "env"
-  },
-  {
-    rule_id: "json_secret_field",
-    regex: /"(?:apiKey|token|secret|password|passwd|accessToken|refreshToken)"\s*:\s*"([^"]+)"/g,
-    captureIndex: 1,
-    slugHint: "json_secret"
-  },
-  {
-    rule_id: "cli_flag",
-    regex: /--(?:api[-_]?key|hook[-_]?token|token|secret|password|passwd)\s+(["']?)([^\s"']+)\1/g,
-    captureIndex: 2,
-    slugHint: "cli_flag"
-  },
-  {
-    rule_id: "bearer_auth_header",
-    regex: /Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)/g,
-    captureIndex: 1,
-    slugHint: "bearer_token"
-  },
-  {
-    rule_id: "bearer_loose",
-    regex: /\bBearer\s+([A-Za-z0-9._\-+=]{18,})\b/g,
-    captureIndex: 1,
-    slugHint: "bearer_token"
-  },
-  {
-    rule_id: "pem_private_key",
-    regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]+?-----END [A-Z ]*PRIVATE KEY-----/g,
-    captureIndex: 0,
-    slugHint: "pem_private_key"
-  }
-];
-var PROVIDER_PATTERNS = [
-  { rule_id: "slack_webhook", regex: /(https:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9_/]+)/g, captureIndex: 1, slugHint: "slack_webhook" },
-  { rule_id: "stripe_live_secret", regex: /\b(sk_live_[A-Za-z0-9]{24,})\b/g, captureIndex: 1, slugHint: "stripe_key" },
-  { rule_id: "stripe_restricted", regex: /\b(rk_live_[A-Za-z0-9]{24,})\b/g, captureIndex: 1, slugHint: "stripe_key" },
-  { rule_id: "sendgrid_api_key", regex: /\b(SG\.[A-Za-z0-9_-]{22}\.[A-Za-z0-9_-]{43})\b/g, captureIndex: 1, slugHint: "sendgrid_key" },
-  { rule_id: "gitlab_pat", regex: /\b(glpat-[A-Za-z0-9_-]{20})\b/g, captureIndex: 1, slugHint: "gitlab_pat" },
-  { rule_id: "huggingface_token", regex: /\b(hf_[A-Za-z0-9]{34,})\b/g, captureIndex: 1, slugHint: "huggingface_token" },
-  { rule_id: "twilio_api_key", regex: /\b(SK[0-9a-f]{32})\b/g, captureIndex: 1, slugHint: "twilio_api_key" },
-  { rule_id: "mailgun_key", regex: /\b(key-[0-9a-f]{32})\b/g, captureIndex: 1, slugHint: "mailgun_key" },
-  { rule_id: "digitalocean_pat", regex: /\b(dop_v1_[a-f0-9]{64})\b/g, captureIndex: 1, slugHint: "digitalocean_token" },
-  { rule_id: "digitalocean_oauth", regex: /\b(doo_v1_[a-f0-9]{64})\b/g, captureIndex: 1, slugHint: "digitalocean_token" },
-  { rule_id: "digitalocean_refresh", regex: /\b(dor_v1_[a-f0-9]{64})\b/g, captureIndex: 1, slugHint: "digitalocean_token" },
-  { rule_id: "doppler_token", regex: /\b(dp\.(?:pt|st|ct|sa|scim|audit)\.[A-Za-z0-9]{40,44})\b/g, captureIndex: 1, slugHint: "doppler_token" },
-  { rule_id: "linear_api_key", regex: /\b(lin_api_[A-Za-z0-9]{40})\b/g, captureIndex: 1, slugHint: "linear_api_key" },
-  { rule_id: "shopify_access_token", regex: /\b(shpat_[a-fA-F0-9]{32})\b/g, captureIndex: 1, slugHint: "shopify_token" },
-  { rule_id: "shopify_shared_secret", regex: /\b(shpss_[a-fA-F0-9]{32})\b/g, captureIndex: 1, slugHint: "shopify_token" },
-  { rule_id: "shopify_private_app", regex: /\b(shppa_[a-fA-F0-9]{32})\b/g, captureIndex: 1, slugHint: "shopify_token" },
-  { rule_id: "square_access_token", regex: /\b(sq0atp-[A-Za-z0-9_-]{22})\b/g, captureIndex: 1, slugHint: "square_token" },
-  { rule_id: "square_oauth_secret", regex: /\b(sq0csp-[A-Za-z0-9_-]{43})\b/g, captureIndex: 1, slugHint: "square_token" },
-  { rule_id: "newrelic_key", regex: /\b(NRAK-[A-Z0-9]{27})\b/g, captureIndex: 1, slugHint: "newrelic_key" },
-  { rule_id: "notion_token", regex: /\b(ntn_[A-Za-z0-9]{46})\b/g, captureIndex: 1, slugHint: "notion_token" },
-  { rule_id: "planetscale_password", regex: /\b(pscale_pw_[A-Za-z0-9_.-]{43})\b/g, captureIndex: 1, slugHint: "planetscale_token" },
-  { rule_id: "planetscale_token", regex: /\b(pscale_tkn_[A-Za-z0-9_.-]{43})\b/g, captureIndex: 1, slugHint: "planetscale_token" },
-  { rule_id: "supabase_service_key", regex: /\b(sbp_[a-f0-9]{40})\b/g, captureIndex: 1, slugHint: "supabase_key" },
-  { rule_id: "atlassian_token", regex: /\b(ATATT[A-Za-z0-9_\-=]{20,})\b/g, captureIndex: 1, slugHint: "atlassian_token" },
-  { rule_id: "dropbox_token", regex: /\b(sl\.[A-Za-z0-9_-]{130,})/g, captureIndex: 1, slugHint: "dropbox_token" },
-  { rule_id: "databricks_token", regex: /\b(dapi[a-f0-9]{32})\b/g, captureIndex: 1, slugHint: "databricks_token" },
-  { rule_id: "grafana_service_account", regex: /\b(glsa_[A-Za-z0-9]{32}_[a-fA-F0-9]{8})\b/g, captureIndex: 1, slugHint: "grafana_token" },
-  { rule_id: "pypi_token", regex: /\b(pypi-AgEIcHlwaS[A-Za-z0-9_-]{50,})/g, captureIndex: 1, slugHint: "pypi_token" },
-  { rule_id: "aws_temp_access_key", regex: /\b(ASIA[0-9A-Z]{16})\b/g, captureIndex: 1, slugHint: "aws_access_key" },
-  { rule_id: "gcp_oauth_token", regex: /\b(ya29\.[A-Za-z0-9_-]{30,})/g, captureIndex: 1, slugHint: "gcp_oauth_token" }
-];
-var ALL_PATTERNS = [...ANCHORED_PATTERNS, ...PROVIDER_PATTERNS, ...STRUCTURED_PATTERNS];
-
-// telegram-plugin/secret-detect/entropy.ts
-function shannonEntropy(s) {
-  if (s.length === 0)
-    return 0;
-  const counts = new Map;
-  for (const ch of s) {
-    counts.set(ch, (counts.get(ch) ?? 0) + 1);
-  }
-  let h = 0;
-  const len = s.length;
-  for (const c of counts.values()) {
-    const p = c / len;
-    h -= p * Math.log2(p);
-  }
-  return h;
-}
-
-// telegram-plugin/secret-detect/kv-scanner.ts
-var KV_RE = /\b([A-Za-z_][A-Za-z0-9_-]*(?:password|passwd|token|secret|key|api[_-]?key))\s*[:=]\s*["']?([^\s"'\\]{8,})["']?/gi;
-var KV_ENTROPY_THRESHOLD = 4;
-function scanKeyValue(text) {
-  const hits = [];
-  KV_RE.lastIndex = 0;
-  let m;
-  while ((m = KV_RE.exec(text)) !== null) {
-    const [, keyName, value] = m;
-    if (!value)
-      continue;
-    const h = shannonEntropy(value);
-    if (h < KV_ENTROPY_THRESHOLD)
-      continue;
-    const valueOffsetInMatch = m[0].indexOf(value, keyName.length);
-    if (valueOffsetInMatch < 0)
-      continue;
-    const start = m.index + valueOffsetInMatch;
-    const end = start + value.length;
-    hits.push({
-      rule_id: "kv_entropy",
-      start,
-      end,
-      matched_text: value,
-      key_name: keyName,
-      confidence: "ambiguous"
-    });
-  }
-  return hits;
-}
-
-// telegram-plugin/secret-detect/generic-entropy.ts
-var CANDIDATE_RE = /[A-Za-z0-9]{28,}/g;
-var GENERIC_MIN_DISTINCT = 18;
-var MAX_GENERIC_HITS = 20;
-function hasDistinctChars(tok, n) {
-  const seen = new Uint8Array(128);
-  let distinct = 0;
-  for (let i = 0;i < tok.length; i++) {
-    const c = tok.charCodeAt(i);
-    if (seen[c] === 0) {
-      seen[c] = 1;
-      if (++distinct >= n)
-        return true;
-    }
-  }
-  return false;
-}
-function hasDigit(tok) {
-  for (let i = 0;i < tok.length; i++) {
-    const c = tok.charCodeAt(i);
-    if (c >= 48 && c <= 57)
-      return true;
-  }
-  return false;
-}
-function scanGenericSecrets(text) {
-  const hits = [];
-  CANDIDATE_RE.lastIndex = 0;
-  let m;
-  while ((m = CANDIDATE_RE.exec(text)) !== null) {
-    if (hits.length >= MAX_GENERIC_HITS)
-      break;
-    const tok = m[0];
-    if (!hasDigit(tok))
-      continue;
-    if (!hasDistinctChars(tok, GENERIC_MIN_DISTINCT))
-      continue;
-    hits.push({
-      rule_id: "generic_high_entropy",
-      start: m.index,
-      end: m.index + tok.length,
-      matched_text: tok,
-      confidence: "ambiguous"
-    });
-  }
-  return hits;
-}
-
-// telegram-plugin/secret-detect/chunker.ts
-var CHUNK_THRESHOLD = 32 * 1024;
-var WINDOW_SIZE = 16 * 1024;
-var OVERLAP = 8 * 1024;
-function chunk(text) {
-  if (text.length <= CHUNK_THRESHOLD) {
-    return [{ offset: 0, text }];
-  }
-  const out = [];
-  let offset = 0;
-  while (offset < text.length) {
-    const end = Math.min(offset + WINDOW_SIZE, text.length);
-    out.push({ offset, text: text.slice(offset, end) });
-    if (end >= text.length)
-      break;
-    offset = end - OVERLAP;
-  }
-  return out;
-}
-
-// telegram-plugin/secret-detect/suppressor.ts
-var MARKERS = ["test", "mock", "example", "fixture", "dummy"];
-var WINDOW = 40;
-var MARKER_RE = new RegExp(`\\b(?:${MARKERS.join("|")})\\b`, "i");
-function isSuppressed(text, start, end) {
-  const left = Math.max(0, start - WINDOW);
-  const right = Math.min(text.length, end + WINDOW);
-  const context = text.slice(left, start) + text.slice(end, right);
-  return MARKER_RE.test(context);
-}
-
-// telegram-plugin/secret-detect/slug.ts
-function sanitizeKeyName(raw) {
-  const up = raw.toUpperCase();
-  const cleaned = up.replace(/[^A-Z0-9_]+/g, "_").replace(/_+/g, "_").replace(/^_+|_+$/g, "");
-  return cleaned.length > 0 ? cleaned : "SECRET";
-}
-function datePart(now = new Date) {
-  const y = now.getUTCFullYear();
-  const m = String(now.getUTCMonth() + 1).padStart(2, "0");
-  const d = String(now.getUTCDate()).padStart(2, "0");
-  return `${y}${m}${d}`;
-}
-function deriveSlug(inputs, existing) {
-  let base;
-  if (inputs.key_name && inputs.key_name.trim().length > 0) {
-    base = sanitizeKeyName(inputs.key_name);
-  } else {
-    base = `${inputs.rule_id}_${datePart(inputs.now)}`;
-  }
-  if (!existing.has(base))
-    return base;
-  let n = 2;
-  while (existing.has(`${base}_${n}`))
-    n++;
-  return `${base}_${n}`;
-}
-// telegram-plugin/secret-detect/url-redact.ts
-var SENSITIVE_PARAMS = new Set([
-  "token",
-  "key",
-  "api_key",
-  "apikey",
-  "secret",
-  "access_token",
-  "password",
-  "pass",
-  "auth",
-  "client_secret",
-  "refresh_token",
-  "signature"
-]);
-var URL_RE = /\b(?:https?|wss?|ftp):\/\/[^\s<>"']+/gi;
-function redactUrls(text) {
-  return text.replace(URL_RE, (m) => {
-    const redacted = redactOne(m);
-    return redacted ?? m;
-  });
-}
-function redactOne(raw) {
-  let u;
-  try {
-    u = new URL(raw);
-  } catch {
-    return null;
-  }
-  let changed = false;
-  if (u.username || u.password) {
-    u.username = "***";
-    u.password = "";
-    changed = true;
-  }
-  for (const [key] of u.searchParams) {
-    if (SENSITIVE_PARAMS.has(key.toLowerCase())) {
-      u.searchParams.set(key, "***");
-      changed = true;
-    }
-  }
-  return changed ? u.toString() : null;
-}
-
-// telegram-plugin/secret-detect/index.ts
-function detectSecrets(text) {
-  if (!text || text.length === 0)
-    return [];
-  const windows = chunk(text);
-  const raw = [];
-  for (const win of windows) {
-    for (const p of ALL_PATTERNS) {
-      const re = new RegExp(p.regex.source, p.regex.flags.includes("g") ? p.regex.flags : p.regex.flags + "g");
-      let m;
-      while ((m = re.exec(win.text)) !== null) {
-        if (m[0].length === 0) {
-          re.lastIndex++;
-          continue;
-        }
-        const cap = p.captureIndex === 0 ? m[0] : m[p.captureIndex];
-        if (!cap)
-          continue;
-        const matchStart = p.captureIndex === 0 ? m.index : m.index + m[0].indexOf(cap);
-        if (matchStart < 0)
-          continue;
-        const globalStart = win.offset + matchStart;
-        const globalEnd = globalStart + cap.length;
-        const keyName = p.rule_id === "env_key_value" ? m[1] : undefined;
-        if (p.rule_id === "env_key_value") {
-          const ENV_KV_MIN_LEN = 12;
-          const ENV_KV_MIN_ENTROPY = 3.5;
-          if (cap.length < ENV_KV_MIN_LEN)
-            continue;
-          if (shannonEntropy(cap) < ENV_KV_MIN_ENTROPY)
-            continue;
-        }
-        raw.push({
-          rule_id: p.rule_id,
-          start: globalStart,
-          end: globalEnd,
-          matched_text: cap,
-          key_name: keyName,
-          confidence: "high"
-        });
-      }
-    }
-    const kvHits = scanKeyValue(win.text);
-    for (const h of kvHits) {
-      raw.push({ ...h, start: h.start + win.offset, end: h.end + win.offset });
-    }
-    const genHits = scanGenericSecrets(win.text);
-    for (const h of genHits) {
-      raw.push({ ...h, start: h.start + win.offset, end: h.end + win.offset });
-    }
-  }
-  const deduped = dedupeRaw(raw);
-  const final = dropOverlaps(deduped);
-  const existing = new Set;
-  const out = [];
-  for (const h of final) {
-    const suggested_slug = deriveSlug({ key_name: h.key_name, rule_id: h.rule_id }, existing);
-    existing.add(suggested_slug);
-    out.push({
-      rule_id: h.rule_id,
-      matched_text: h.matched_text,
-      start: h.start,
-      end: h.end,
-      confidence: h.confidence,
-      suppressed: isSuppressed(text, h.start, h.end),
-      suggested_slug,
-      key_name: h.key_name
-    });
-  }
-  out.sort((a, b) => a.start - b.start);
-  return out;
-}
-function dedupeRaw(raw) {
-  const seen = new Map;
-  for (const h of raw) {
-    const key = `${h.start}:${h.end}`;
-    const existing = seen.get(key);
-    if (!existing) {
-      seen.set(key, h);
-      continue;
-    }
-    if (existing.confidence === "ambiguous" && h.confidence === "high") {
-      seen.set(key, h);
-    }
-  }
-  return Array.from(seen.values());
-}
-function dropOverlaps(hits) {
-  const out = hits.filter((h) => !(h.confidence === "ambiguous" && hits.some((o) => o !== h && o.start <= h.start && o.end >= h.end && !(o.start === h.start && o.end === h.end))));
-  out.sort((a, b) => a.start - b.start || a.end - b.end);
-  return out;
-}
-
-// telegram-plugin/secret-detect/redact.ts
-var REDACTED_MARKER = "[REDACTED]";
-function redact(text) {
-  if (!text || text.length === 0)
-    return text;
-  const urlScrubbed = redactUrls(text);
-  const hits = detectSecrets(urlScrubbed).filter((h) => h.rule_id !== "generic_high_entropy");
-  if (hits.length === 0)
-    return urlScrubbed;
-  const sorted = [...hits].sort((a, b) => b.start - a.start);
-  let out = urlScrubbed;
-  for (const h of sorted) {
-    out = out.slice(0, h.start) + redactedMarker(h.rule_id) + out.slice(h.end);
-  }
-  return out;
-}
-function redactedMarker(ruleId) {
-  const trimmed = ruleId.replace(/^(kv|env)_/, "");
-  if (!trimmed || trimmed === "key_value" || trimmed === "kv_entropy") {
-    return REDACTED_MARKER;
-  }
-  return `[REDACTED:${trimmed}]`;
-}
 // src/issues/store.ts
 var ISSUES_FILE = "issues.jsonl";
 var ISSUES_LOCK = "issues.lock";
@@ -98428,6 +98625,42 @@ function withSynthesizedTools(result) {
     ]
   };
 }
+var READ_ONLY_TOOL_NAMES = new Set([
+  "recall",
+  "reflect",
+  "search",
+  "list_memories",
+  "list_directives",
+  "list_mental_models",
+  "get_mental_model",
+  "get_memory",
+  "get_bank"
+]);
+function redactToolArguments(value) {
+  if (typeof value === "string")
+    return redact(value);
+  if (Array.isArray(value))
+    return value.map(redactToolArguments);
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      out[k] = redactToolArguments(v);
+    }
+    return out;
+  }
+  return value;
+}
+function redactToolCallParams(params) {
+  const called = params;
+  if (!called || typeof called !== "object")
+    return params;
+  if (called.arguments === undefined || called.arguments === null)
+    return params;
+  if (typeof called.name === "string" && READ_ONLY_TOOL_NAMES.has(called.name)) {
+    return params;
+  }
+  return { ...called, arguments: redactToolArguments(called.arguments) };
+}
 function buildFallbackToolsList() {
   const tools = Object.entries(FALLBACK_TOOL_TABLE).map(([name, [required, props]]) => ({
     name,
@@ -98754,8 +98987,9 @@ class HindsightShim {
     if (called?.name && SYNTHESIZED_TOOL_NAMES.includes(called.name)) {
       return this.synthesizedCall(called.name, called.arguments);
     }
+    const forwarded = redactToolCallParams(params);
     try {
-      const res = await this.upstream.request("tools/call", params, this.opts.toolsCallTimeoutMs ?? TOOLS_CALL_TIMEOUT_MS);
+      const res = await this.upstream.request("tools/call", forwarded, this.opts.toolsCallTimeoutMs ?? TOOLS_CALL_TIMEOUT_MS);
       this.notifyIfRecovered();
       if (res.error) {
         return {