Fase 2: 04_sanitize.py - scrubbing de secretos de skills/agentes/plans (10 secretos unicos, gate en verde)

This commit is contained in:
2026-07-29 00:35:59 +00:00
parent 21bc219f31
commit 837f91060f
79 changed files with 10153 additions and 0 deletions
@@ -0,0 +1,46 @@
# Plan: Add `--no-sleep` to `code tunnel` and change `exec` to run tunnel directly
## Context
The user wants two changes in `entrypoint.sh`:
1. Add `--no-sleep` flag to the `code tunnel` invocations at the end of the file.
2. Change the `exec` at line 84 to run `code tunnel` directly instead of re-invoking the entrypoint script.
## Files to modify
- `entrypoint.sh` — lines 8386 and 173177
## Changes
### 1. Replace the exec re-invocation (line 84)
**Before:**
```bash
exec sudo -u $HOME_USER bash -c "source /etc/environment; /usr/bin/entrypoint.sh"
```
**After:**
```bash
exec sudo ${HOME_USER} -c "code tunnel --accept-server-license-terms --no-sleep --name ${VSCODE_TUNNEL_NAME}"
```
### 2. Add `--no-sleep` to the existing `code tunnel` calls (lines 173177)
**Before:**
```bash
if [[ -v VSCODE_TUNNEL_NAME && -n "${VSCODE_TUNNEL_NAME}" ]]; then
sudo su ${HOME_USER} -c "code tunnel --accept-server-license-terms --name ${VSCODE_TUNNEL_NAME}"
else
sudo su ${HOME_USER} -c "code tunnel --accept-server-license-terms"
fi
```
**After:**
```bash
if [[ -v VSCODE_TUNNEL_NAME && -n "${VSCODE_TUNNEL_NAME}" ]]; then
sudo su ${HOME_USER} -c "code tunnel --accept-server-license-terms --no-sleep --name ${VSCODE_TUNNEL_NAME}"
else
sudo su ${HOME_USER} -c "code tunnel --accept-server-license-terms --no-sleep"
fi
```
## Verification
- `grep -- '--no-sleep' entrypoint.sh` should show 3 matches (1 in exec line, 2 in the if/else block).