9 commits

Author	SHA1	Message	Date
Nick Tabeling	5869c15f9d	fix(DIS-102): handle both slash styles for Windows path sanitization ... os.homedir() returns backslashes on Windows but Claude Code outputs paths with forward slashes. Replace both C:\Users\x and C:/Users/x variants so home and repoRoot are always redacted. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-10 09:58:34 +02:00
Nick Tabeling	57cd3d4a43	feat(DIS-102): sanitizeForDiscord strips paths and tokens before Discord send ... Add sanitizeForDiscord() in src/runtime/sanitize.ts. Router applies sanitizer to all channel.send() calls. Prevents path/token leaks into Discord channels. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-10 09:50:37 +02:00
dev	6039e992bd	Merge pull request 'feat(DIS-101): introduce pino structured logger, remove console.*' (#45) from phase-1/pino-logger into main ... Reviewed-on: #45	2026-04-09 15:40:46 +00:00
Nick Tabeling	1cafaabe2a	feat(DIS-101): introduce pino structured logger, remove console.* ... Replace all console.* calls in src/ with pino child-loggers. Add rootLogger + childLogger(component) in src/runtime/logger.ts. pino-pretty used as dev transport only. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-09 17:09:37 +02:00
Nick Tabeling	04450bb6d9	feat(DIS-104): global semaphore for max_concurrent_agents cap ... Add Semaphore class in src/runtime/concurrency.ts. Runner acquires/releases slot around claude spawn. Default cap: 4, configurable via disclaw.yaml max_concurrent_agents. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-09 17:08:58 +02:00
Nick Tabeling	ca461d0da6	fix(env): remove CI=true from sanitizedEnv, breaks Claude Code OAuth login	2026-04-09 13:18:25 +02:00
Nick Tabeling	dc4a1ef241	feat(runtime): add startup lockfile to prevent double-start ... Implements acquireLock() in src/runtime/lockfile.ts that writes a PID-stamped lock file under workspaces_root, detects live vs stale locks via process.kill(pid, 0), and returns a release function. src/index.ts acquires the lock before DB init and releases it in the graceful-shutdown handler. Four unit tests cover acquire, duplicate- acquire rejection, stale-lock recovery, and release.	2026-04-09 11:49:17 +02:00
Nick Tabeling	510969b2d1	fix(runner): add sanitizedEnv, remove process.env passthrough ... Introduces src/runtime/env.ts with a pure sanitizedEnv() function that strips DISCORD_BOT_TOKEN, DISCORD_CLIENT_SECRET, DISCORD_PUBLIC_KEY, and all keys matching /^(DISCLAW_SECRET_|SECRET_|TOKEN_|API_KEY_?)/i before passing the environment to spawned Claude Code child processes. Adds optional env_blocklist field to DisclawConfig. Runner now passes DISCLAW_AGENT_NAME and respects the blocklist. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-09 10:39:06 +02:00
Nick Tabeling	bade6d07f6	fix(runner): replace shell:true with cross-spawn, add resolveClaude ... - Remove shell:true from runner.ts (command injection vector closed) - Import cross-spawn instead of child_process.spawn; add windowsHide:true - Add src/runtime/resolve-claude.ts: CLAUDE_PATH env override, where/which PATH fallback, in-memory cache, clear error message on not-found - Add tests/unit/resolve-claude.test.ts: 5 Vitest tests covering env override, PATH fallback, multi-line output trimming, error case, and cache behaviour - Add cross-spawn + @types/cross-spawn to package.json; add vitest + test script	2026-04-09 10:29:58 +02:00