rootiest
5462d0fee3
Replace the in-memory token map with self-contained cryptographic tokens. ggshield-flagged secrets are encrypted with AES-256-GCM under a persistent 256-bit master key; the placeholder carries IV ++ authTag ++ ciphertext as hex, so the proxy is stateless and resolves tokens across restarts and replayed chat histories. The streaming detokenizer now parses SSE content_block_delta events and reassembles placeholders fragmented across many deltas — a raw byte scan can't bridge the interleaved event/JSON framing. Plain JSON responses keep the simpler contiguous byte scan. The master key is generated 0600 on first run at ~/.config/claude-tokenization-proxy/master.key (override GG_MASTER_KEY_FILE); deleting it makes existing tokens unrecoverable.
25 lines
906 B
Plaintext
25 lines
906 B
Plaintext
|
|
# ──────────────── Added by agents-init ──────────────────
|
|
# agents-init --agents
|
|
AGENTS/
|
|
/AGENTS.md
|
|
/CLAUDE.md
|
|
# ────────────────────────────────────────────────────────
|
|
|
|
# ──────────────── Added by agents-init ──────────────────
|
|
# agents-init --plugins
|
|
docs/superpowers
|
|
docs/plans
|
|
docs/specs
|
|
docs/devlogs
|
|
# ────────────────────────────────────────────────────────
|
|
|
|
node_modules/
|
|
|
|
# ggshield local cache
|
|
.cache_ggshield
|
|
|
|
# Master key — never commit (default lives in ~/.config, but guard the project root)
|
|
master.key
|
|
*.master.key
|