@akasecurity/ai-tc-claude-code 0.9.0 → 0.9.1

package/scripts/filescan.js

@@ -542,6 +542,10 @@ var SQLITE_MIGRATIONS = [
   {
     tag: "0010_events_session_expression_index",
     sql: "-- Custom migration: partial expression index for session-scoped finding reads.\n--\n-- sessionFindingsCount, the session-scoped listGroupedFindings paths, and the\n-- insert-time session dedup all filter live-capture events by\n--   json_extract(e.metadata, '$.sessionId') = :sessionId\n-- \u2014 previously a full findings-join scan with a JSON parse per row. The\n-- IS NOT NULL predicate keeps the index to session-stamped events only (an\n-- equality probe implies non-null, so SQLite still uses it).\nCREATE INDEX `idx_events_session_id` ON `events` (json_extract(`metadata`, '$.sessionId')) WHERE json_extract(`metadata`, '$.sessionId') IS NOT NULL;\n"
+  },
+  {
+    tag: "0011_egress_writer",
+    sql: '-- Stable per-project reconcile key for egress call sites, plus a host-keyed\n-- egress decision override that survives destination pruning.\n--\n-- DROP INDEX IF EXISTS, not a bare DROP: the applier replays a pending\n-- migration\'s non-index statements verbatim, so a store that lost\n-- uq_share_call_site out of band would throw here \u2014 and on the plugin hook path\n-- that throw is swallowed fail-open, silently stopping capture.\n--\n-- Existing rows carry the old key\'s discriminator into project_key\n-- (\'legacy:\' || project), so the new unique index is a re-encoding of the old\n-- one and cannot collide on rows the old one allowed. Leaving them on the\n-- column default would collapse two projects\' identical file/line hits onto\n-- one key and abort the whole migration. Writer keys are \'git:\'/\'path:\'-\n-- prefixed, so a backfilled row never collides with a captured one either.\n--\n-- egress_decision_override.destination_id becomes nullable with ON DELETE SET\n-- NULL, which SQLite can only do by rebuilding the table. `host` is ADDed\n-- before the rebuild so the copy has a column to read and so the migration\n-- still presents two probeable columns to the applier\'s evidence check.\nALTER TABLE `share_call_site` ADD `project_key` text DEFAULT \'\' NOT NULL;--> statement-breakpoint\nUPDATE `share_call_site` SET `project_key` = \'legacy:\' || `project`;--> statement-breakpoint\nDROP INDEX IF EXISTS `uq_share_call_site`;--> statement-breakpoint\nCREATE UNIQUE INDEX `uq_share_call_site` ON `share_call_site` (`endpoint_id`,`project_key`,`file`,`line`);--> statement-breakpoint\nCREATE INDEX `idx_share_call_site_project` ON `share_call_site` (`project_key`,`endpoint_id`);--> statement-breakpoint\nALTER TABLE `egress_decision_override` ADD `host` text;--> statement-breakpoint\nPRAGMA foreign_keys=OFF;--> statement-breakpoint\nCREATE TABLE `__new_egress_decision_override` (\n	`id` text PRIMARY KEY NOT NULL,\n	`destination_id` text,\n	`host` text,\n	`decision` text NOT NULL,\n	`created_at` integer NOT NULL,\n	`updated_at` integer NOT NULL,\n	FOREIGN KEY (`destination_id`) REFERENCES `share_destination`(`id`) ON UPDATE no action ON DELETE set null\n);\n--> statement-breakpoint\nINSERT INTO `__new_egress_decision_override`("id", "destination_id", "host", "decision", "created_at", "updated_at") SELECT "id", "destination_id", "host", "decision", "created_at", "updated_at" FROM `egress_decision_override`;--> statement-breakpoint\nDROP TABLE `egress_decision_override`;--> statement-breakpoint\nALTER TABLE `__new_egress_decision_override` RENAME TO `egress_decision_override`;--> statement-breakpoint\nPRAGMA foreign_keys=ON;--> statement-breakpoint\nCREATE UNIQUE INDEX `uq_egress_decision_override` ON `egress_decision_override` (`destination_id`);--> statement-breakpoint\nCREATE UNIQUE INDEX `uq_egress_decision_override_host` ON `egress_decision_override` (`host`) WHERE `host` IS NOT NULL;\n'
   }
 ];
 
@@ -16197,6 +16201,7 @@ var ExceptionBundleEntry = DetectionException.pick({
 
 // ../../packages/schema/src/zod/rule.ts
 var MatcherType = external_exports.enum(["keyword", "regex", "validator"]).meta({ id: "MatcherType" });
+var RuleProbeVerdict = external_exports.enum(["safe", "quarantined"]).meta({ id: "RuleProbeVerdict" });
 var KeywordMatcher = external_exports.object({
   type: external_exports.literal("keyword"),
   // An empty keyword matches at every position, yielding one zero-length span
@@ -16221,9 +16226,10 @@ function matchesEmptyString(pattern, flags) {
     return false;
   }
 }
+var MAX_PATTERN_LENGTH = 2e3;
 var RegexMatcher = external_exports.object({
   type: external_exports.literal("regex"),
-  pattern: external_exports.string(),
+  pattern: external_exports.string().min(1).max(MAX_PATTERN_LENGTH),
   flags: external_exports.string().default("gi"),
   captureGroup: external_exports.number().int().nonnegative().optional()
 }).refine((v) => isValidRegex(v.pattern, v.flags), {
@@ -16790,6 +16796,212 @@ function buildDetectionsList(summaries, query) {
   return { counts, items: filtered.map(summaryToDetectionListItem) };
 }
 
+// ../../packages/schema/src/zod/shares.ts
+var DestinationKind = external_exports.enum(["provider", "internal", "external", "ip"]).meta({ id: "DestinationKind" });
+var Transport = external_exports.enum(["https", "http", "sftp", "grpc", "smtp", "ws", "wss"]).meta({ id: "Transport" });
+var DataClass = external_exports.enum(["secrets", "pii", "customer", "source", "telemetry", "logs", "metrics", "none"]).meta({ id: "DataClass" });
+var DATA_CLASS_ORDER = DataClass.options;
+var ShareTrustLevel = external_exports.enum(["recognized", "internal", "unverified", "ip"]).meta({ id: "ShareTrustLevel" });
+var EgressDecision = external_exports.enum(["allow", "block"]).meta({ id: "EgressDecision" });
+var EgressStatus = external_exports.enum(["allowed", "blocked", "review"]).meta({ id: "EgressStatus" });
+var ReviewReason = external_exports.enum(["raw_ip", "unverified_domain", "plaintext_transport"]).meta({ id: "ReviewReason" });
+var HttpMethod = external_exports.enum(["GET", "POST", "PUT", "DELETE", "SDK", "REF"]).meta({ id: "HttpMethod" });
+var ReviewInfo = external_exports.object({
+  needsReview: external_exports.boolean(),
+  reasons: external_exports.array(ReviewReason)
+}).meta({ id: "ReviewInfo" });
+var DestinationNetwork = external_exports.object({
+  port: external_exports.number().int().nullable(),
+  geo: external_exports.string().nullable(),
+  ptr: external_exports.string().nullable()
+}).meta({ id: "DestinationNetwork" });
+var EndpointSummary = external_exports.object({
+  id: external_exports.string(),
+  method: HttpMethod,
+  transport: Transport,
+  url: external_exports.string(),
+  template: external_exports.boolean(),
+  dataClass: DataClass,
+  lastSeen: external_exports.iso.datetime(),
+  callSiteCount: external_exports.number().int().nonnegative()
+}).meta({ id: "EndpointSummary" });
+var CallSite = external_exports.object({
+  id: external_exports.string(),
+  project: external_exports.string(),
+  file: external_exports.string(),
+  line: external_exports.number().int().nonnegative(),
+  snippet: external_exports.string(),
+  dynamic: external_exports.boolean(),
+  vendored: external_exports.boolean(),
+  /** Deep-link to the Inventory project, when the repo is governed there. */
+  projectId: external_exports.string().nullable()
+}).meta({ id: "CallSite" });
+var EndpointWithSites = EndpointSummary.extend({
+  sites: external_exports.array(CallSite)
+}).meta({ id: "EndpointWithSites" });
+var ShareDestinationSummary = external_exports.object({
+  id: external_exports.string(),
+  kind: DestinationKind,
+  name: external_exports.string(),
+  host: external_exports.string(),
+  category: external_exports.string(),
+  trust: ShareTrustLevel,
+  /** Effective state (decision applied over the trust default). */
+  status: EgressStatus,
+  /** True when an egress decision override differs from the trust default. */
+  isCustom: external_exports.boolean(),
+  lastSeen: external_exports.iso.datetime(),
+  endpointCount: external_exports.number().int().nonnegative(),
+  callSiteCount: external_exports.number().int().nonnegative(),
+  transports: external_exports.array(Transport),
+  /** Most-sensitive first. */
+  dataClasses: external_exports.array(DataClass),
+  review: ReviewInfo,
+  /** Non-provider hosts only; null for providers. */
+  network: DestinationNetwork.nullable(),
+  /** Embedded for inline expansion — no call sites here. */
+  endpoints: external_exports.array(EndpointSummary)
+}).meta({ id: "ShareDestinationSummary" });
+var ShareDestinationDetail = ShareDestinationSummary.omit({
+  endpointCount: true,
+  callSiteCount: true,
+  endpoints: true
+}).extend({
+  /** Ownership/geo rationale; null for providers. */
+  note: external_exports.string().nullable(),
+  endpoints: external_exports.array(EndpointWithSites)
+}).meta({ id: "ShareDestinationDetail" });
+var ReviewDestination = external_exports.object({
+  id: external_exports.string(),
+  kind: DestinationKind,
+  name: external_exports.string(),
+  /** Registrable host — lets the strip derive the provider lettermark, as the register does. */
+  host: external_exports.string(),
+  trust: ShareTrustLevel,
+  status: EgressStatus,
+  review: ReviewInfo,
+  topDataClass: DataClass,
+  callSiteCount: external_exports.number().int().nonnegative(),
+  lastSeen: external_exports.iso.datetime()
+}).meta({ id: "ReviewDestination" });
+var ShareDestinationGroup = external_exports.object({
+  kind: DestinationKind,
+  total: external_exports.number().int().nonnegative(),
+  items: external_exports.array(ShareDestinationSummary)
+}).meta({ id: "ShareDestinationGroup" });
+var ListShareDestinationsResponse = external_exports.object({ groups: external_exports.array(ShareDestinationGroup) }).meta({ id: "ListShareDestinationsResponse" });
+var NeedsReviewResponse = external_exports.object({ items: external_exports.array(ReviewDestination) }).meta({ id: "NeedsReviewResponse" });
+var SharesStats = external_exports.object({
+  destinations: external_exports.number().int().nonnegative(),
+  endpoints: external_exports.number().int().nonnegative(),
+  callSites: external_exports.number().int().nonnegative(),
+  needsReview: external_exports.number().int().nonnegative(),
+  insecure: external_exports.number().int().nonnegative(),
+  byKind: external_exports.object({
+    provider: external_exports.number().int().nonnegative(),
+    internal: external_exports.number().int().nonnegative(),
+    external: external_exports.number().int().nonnegative(),
+    ip: external_exports.number().int().nonnegative()
+  }),
+  byTrust: external_exports.object({
+    recognized: external_exports.number().int().nonnegative(),
+    internal: external_exports.number().int().nonnegative(),
+    unverified: external_exports.number().int().nonnegative(),
+    ip: external_exports.number().int().nonnegative()
+  })
+}).meta({ id: "SharesStats" });
+var SetEgressDecisionBody = external_exports.object({
+  /** `null` clears the override — reverts to the trust default, isCustom false. */
+  decision: EgressDecision.nullable()
+}).meta({ id: "SetEgressDecisionBody" });
+var SetEgressDecisionResponse = external_exports.object({ destination: ShareDestinationSummary }).meta({ id: "SetEgressDecisionResponse" });
+var ListShareDestinationsQuery = external_exports.object({
+  /** Case-insensitive match over destination name/category, endpoint url, call-site project/file. */
+  q: external_exports.string().optional(),
+  /** Repeatable. Restrict to these DestinationKind values; absent means all kinds. */
+  kind: external_exports.array(DestinationKind).optional(),
+  /** Reserved for future grouping modes; only 'destination' is supported today. */
+  groupBy: external_exports.enum(["destination"]).default("destination"),
+  /**
+   * When true, return a flat severity-ordered `items[]` instead of `groups`.
+   * Uses `z.stringbool()` (NOT `z.coerce.boolean()` — `Boolean(str)` is true for
+   * any non-empty string, so `?review=false`/`?review=0` would wrongly coerce
+   * to `true`). `z.stringbool()` parses true/1/yes vs false/0/no correctly.
+   */
+  review: external_exports.stringbool().default(false)
+});
+var ExportSharesQuery = external_exports.object({
+  format: external_exports.enum(["csv", "json"]).default("csv"),
+  q: external_exports.string().optional(),
+  kind: external_exports.array(DestinationKind).optional()
+});
+
+// ../../packages/schema/src/zod/egress-extraction.ts
+var EgressEcosystem = external_exports.enum(["npm", "pypi", "go", "maven", "rubygems", "cargo", "composer", "nuget"]).meta({ id: "EgressEcosystem" });
+var ProviderRegistryEntry = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  category: external_exports.string(),
+  /** Suffix-matched: 'stripe.com' matches api.stripe.com, never evilstripe.com. */
+  hostSuffixes: external_exports.array(external_exports.string()).min(1),
+  /** Canonical API base URL recorded for manifest-derived (method 'SDK') endpoints. */
+  apiBase: external_exports.string(),
+  /** Most-sensitive first; index 0 becomes the endpoint dataClass. */
+  defaultDataClasses: external_exports.array(DataClass).min(1),
+  /** SDK identifiers per ecosystem ('go' prefix-matched by path, 'maven' by group-id prefix). */
+  sdks: external_exports.partialRecord(EgressEcosystem, external_exports.array(external_exports.string()))
+}).meta({ id: "ProviderRegistryEntry" });
+var EgressCallSiteHit = external_exports.object({
+  file: external_exports.string(),
+  line: external_exports.number().int().positive(),
+  snippet: external_exports.string(),
+  dynamic: external_exports.boolean(),
+  vendored: external_exports.boolean()
+}).meta({ id: "EgressCallSiteHit" });
+var ResolvedEgressHit = external_exports.object({
+  host: external_exports.string(),
+  kind: DestinationKind,
+  name: external_exports.string(),
+  category: external_exports.string(),
+  trust: ShareTrustLevel,
+  network: DestinationNetwork.nullable(),
+  method: HttpMethod,
+  transport: Transport,
+  url: external_exports.string(),
+  template: external_exports.boolean(),
+  dataClass: DataClass,
+  site: EgressCallSiteHit
+}).meta({ id: "ResolvedEgressHit" });
+var EgressReconcile = external_exports.discriminatedUnion("mode", [
+  external_exports.object({ mode: external_exports.literal("walk"), walkedPrefix: external_exports.string() }),
+  external_exports.object({
+    mode: external_exports.literal("ledger"),
+    scannedFiles: external_exports.array(external_exports.string()),
+    deletedFiles: external_exports.array(external_exports.string())
+  })
+]).meta({ id: "EgressReconcile" });
+var RecordProjectEgressInput = external_exports.object({
+  /** Stable reconcile key: 'git:<repo identity>' or 'path:<abs root>' (non-git). */
+  projectKey: external_exports.string().min(1),
+  /** Display name only — never keys reconciliation. */
+  project: external_exports.string(),
+  projectId: external_exports.string().nullable(),
+  reconcile: EgressReconcile,
+  hits: external_exports.array(ResolvedEgressHit)
+}).meta({ id: "RecordProjectEgressInput" });
+var EgressWriteSummary = external_exports.object({
+  destinations: external_exports.number().int().nonnegative(),
+  endpoints: external_exports.number().int().nonnegative(),
+  callSites: external_exports.number().int().nonnegative(),
+  truncated: external_exports.boolean(),
+  /**
+   * Files the cap dropped whole. Their stored rows were left untouched, so a
+   * ledger-keeping caller must withhold their ledger entries and read them
+   * again next scan.
+   */
+  droppedFiles: external_exports.array(external_exports.string()).default([])
+}).meta({ id: "EgressWriteSummary" });
+
 // ../../packages/schema/src/zod/findings-group-build.ts
 function toApiAction(dbVal) {
   const map2 = {
@@ -17051,7 +17263,7 @@ var PatchInstalledPackRequest = external_exports.object({
 }).meta({ id: "PatchInstalledPackRequest" });
 
 // ../../packages/schema/src/zod/local.ts
-var WORKSPACE_SETTINGS_SPEC_VERSION = 2;
+var WORKSPACE_SETTINGS_SPEC_VERSION = 3;
 var RunMode = external_exports.enum(["standalone"]);
 var SimpleDetectionPolicy = external_exports.enum(["redact", "warn"]);
 var HistoricalAccess = external_exports.enum(["full", "session-only"]);
@@ -17066,6 +17278,9 @@ var WorkspaceSettings = external_exports.object({
   policy: SimpleDetectionPolicy.default("redact"),
   // Consent for scanning pre-install surfaces; opt-in (see HistoricalAccess).
   historicalAccess: HistoricalAccess.default("session-only"),
+  // In-place egress extraction on the scan paths; disable to stop all Data
+  // Shares writes.
+  dataSharesInPlace: external_exports.boolean().default(true),
   // Absent until /aka:setup completes; its presence is what "onboarded" means.
   onboardedAt: external_exports.iso.datetime().optional()
 });
@@ -17549,145 +17764,6 @@ var SetupHandoffOffer = external_exports.object({
   path: ["liveKeys"]
 });
 
-// ../../packages/schema/src/zod/shares.ts
-var DestinationKind = external_exports.enum(["provider", "internal", "ip"]).meta({ id: "DestinationKind" });
-var Transport = external_exports.enum(["https", "http", "sftp", "grpc", "smtp"]).meta({ id: "Transport" });
-var DataClass = external_exports.enum(["secrets", "pii", "customer", "source", "telemetry", "logs", "metrics", "none"]).meta({ id: "DataClass" });
-var DATA_CLASS_ORDER = DataClass.options;
-var ShareTrustLevel = external_exports.enum(["recognized", "internal", "unverified", "ip"]).meta({ id: "ShareTrustLevel" });
-var EgressDecision = external_exports.enum(["allow", "block"]).meta({ id: "EgressDecision" });
-var EgressStatus = external_exports.enum(["allowed", "blocked", "review"]).meta({ id: "EgressStatus" });
-var ReviewReason = external_exports.enum(["raw_ip", "unverified_domain", "plaintext_transport"]).meta({ id: "ReviewReason" });
-var HttpMethod = external_exports.enum(["GET", "POST", "PUT", "DELETE"]).meta({ id: "HttpMethod" });
-var ReviewInfo = external_exports.object({
-  needsReview: external_exports.boolean(),
-  reasons: external_exports.array(ReviewReason)
-}).meta({ id: "ReviewInfo" });
-var DestinationNetwork = external_exports.object({
-  port: external_exports.number().int().nullable(),
-  geo: external_exports.string().nullable(),
-  ptr: external_exports.string().nullable()
-}).meta({ id: "DestinationNetwork" });
-var EndpointSummary = external_exports.object({
-  id: external_exports.string(),
-  method: HttpMethod,
-  transport: Transport,
-  url: external_exports.string(),
-  template: external_exports.boolean(),
-  dataClass: DataClass,
-  lastSeen: external_exports.iso.datetime(),
-  callSiteCount: external_exports.number().int().nonnegative()
-}).meta({ id: "EndpointSummary" });
-var CallSite = external_exports.object({
-  id: external_exports.string(),
-  project: external_exports.string(),
-  file: external_exports.string(),
-  line: external_exports.number().int().nonnegative(),
-  snippet: external_exports.string(),
-  dynamic: external_exports.boolean(),
-  vendored: external_exports.boolean(),
-  /** Deep-link to the Inventory project, when the repo is governed there. */
-  projectId: external_exports.string().nullable()
-}).meta({ id: "CallSite" });
-var EndpointWithSites = EndpointSummary.extend({
-  sites: external_exports.array(CallSite)
-}).meta({ id: "EndpointWithSites" });
-var ShareDestinationSummary = external_exports.object({
-  id: external_exports.string(),
-  kind: DestinationKind,
-  name: external_exports.string(),
-  host: external_exports.string(),
-  category: external_exports.string(),
-  trust: ShareTrustLevel,
-  /** Effective state (decision applied over the trust default). */
-  status: EgressStatus,
-  /** True when an egress decision override differs from the trust default. */
-  isCustom: external_exports.boolean(),
-  lastSeen: external_exports.iso.datetime(),
-  endpointCount: external_exports.number().int().nonnegative(),
-  callSiteCount: external_exports.number().int().nonnegative(),
-  transports: external_exports.array(Transport),
-  /** Most-sensitive first. */
-  dataClasses: external_exports.array(DataClass),
-  review: ReviewInfo,
-  /** Non-provider hosts only; null for providers. */
-  network: DestinationNetwork.nullable(),
-  /** Embedded for inline expansion — no call sites here. */
-  endpoints: external_exports.array(EndpointSummary)
-}).meta({ id: "ShareDestinationSummary" });
-var ShareDestinationDetail = ShareDestinationSummary.omit({
-  endpointCount: true,
-  callSiteCount: true,
-  endpoints: true
-}).extend({
-  /** Ownership/geo rationale; null for providers. */
-  note: external_exports.string().nullable(),
-  endpoints: external_exports.array(EndpointWithSites)
-}).meta({ id: "ShareDestinationDetail" });
-var ReviewDestination = external_exports.object({
-  id: external_exports.string(),
-  kind: DestinationKind,
-  name: external_exports.string(),
-  /** Registrable host — lets the strip derive the provider lettermark, as the register does. */
-  host: external_exports.string(),
-  trust: ShareTrustLevel,
-  status: EgressStatus,
-  review: ReviewInfo,
-  topDataClass: DataClass,
-  callSiteCount: external_exports.number().int().nonnegative(),
-  lastSeen: external_exports.iso.datetime()
-}).meta({ id: "ReviewDestination" });
-var ShareDestinationGroup = external_exports.object({
-  kind: DestinationKind,
-  total: external_exports.number().int().nonnegative(),
-  items: external_exports.array(ShareDestinationSummary)
-}).meta({ id: "ShareDestinationGroup" });
-var ListShareDestinationsResponse = external_exports.object({ groups: external_exports.array(ShareDestinationGroup) }).meta({ id: "ListShareDestinationsResponse" });
-var NeedsReviewResponse = external_exports.object({ items: external_exports.array(ReviewDestination) }).meta({ id: "NeedsReviewResponse" });
-var SharesStats = external_exports.object({
-  destinations: external_exports.number().int().nonnegative(),
-  endpoints: external_exports.number().int().nonnegative(),
-  callSites: external_exports.number().int().nonnegative(),
-  needsReview: external_exports.number().int().nonnegative(),
-  insecure: external_exports.number().int().nonnegative(),
-  byKind: external_exports.object({
-    provider: external_exports.number().int().nonnegative(),
-    internal: external_exports.number().int().nonnegative(),
-    ip: external_exports.number().int().nonnegative()
-  }),
-  byTrust: external_exports.object({
-    recognized: external_exports.number().int().nonnegative(),
-    internal: external_exports.number().int().nonnegative(),
-    unverified: external_exports.number().int().nonnegative(),
-    ip: external_exports.number().int().nonnegative()
-  })
-}).meta({ id: "SharesStats" });
-var SetEgressDecisionBody = external_exports.object({
-  /** `null` clears the override — reverts to the trust default, isCustom false. */
-  decision: EgressDecision.nullable()
-}).meta({ id: "SetEgressDecisionBody" });
-var SetEgressDecisionResponse = external_exports.object({ destination: ShareDestinationSummary }).meta({ id: "SetEgressDecisionResponse" });
-var ListShareDestinationsQuery = external_exports.object({
-  /** Case-insensitive match over destination name/category, endpoint url, call-site project/file. */
-  q: external_exports.string().optional(),
-  /** Repeatable. Restrict to these DestinationKind values; absent means all kinds. */
-  kind: external_exports.array(DestinationKind).optional(),
-  /** Reserved for future grouping modes; only 'destination' is supported today. */
-  groupBy: external_exports.enum(["destination"]).default("destination"),
-  /**
-   * When true, return a flat severity-ordered `items[]` instead of `groups`.
-   * Uses `z.stringbool()` (NOT `z.coerce.boolean()` — `Boolean(str)` is true for
-   * any non-empty string, so `?review=false`/`?review=0` would wrongly coerce
-   * to `true`). `z.stringbool()` parses true/1/yes vs false/0/no correctly.
-   */
-  review: external_exports.stringbool().default(false)
-});
-var ExportSharesQuery = external_exports.object({
-  format: external_exports.enum(["csv", "json"]).default("csv"),
-  q: external_exports.string().optional(),
-  kind: external_exports.array(DestinationKind).optional()
-});
-
 // ../../packages/schema/src/zod/shares-access.ts
 var ALLOWED_BY_DEFAULT_TRUST = /* @__PURE__ */ new Set(["recognized", "internal"]);
 function trustDefaultStatus(trust) {
@@ -17707,7 +17783,7 @@ function deriveReviewReasons(trust, transports) {
   const reasons = [];
   if (trust === "ip") reasons.push("raw_ip");
   if (trust === "unverified") reasons.push("unverified_domain");
-  if (transports.includes("http")) reasons.push("plaintext_transport");
+  if (transports.includes("http") || transports.includes("ws")) reasons.push("plaintext_transport");
   return reasons;
 }
 function buildReviewInfo(trust, transports) {
@@ -17938,6 +18014,7 @@ function applyMigrations(db) {
   ensureSyncedAtColumn(db, "audit_events");
   ensureScanLedgerTable(db);
   ensureBlockedDetectionsTable(db);
+  ensureRuleProbeCacheTable(db);
   ensureWriteGateTrigger(db);
   ensureTokenUsageColumns(db);
   reconcileSourceProjectIds(db);
@@ -18077,6 +18154,14 @@ function ensureBlockedDetectionsTable(db) {
     blocked_at INTEGER NOT NULL
   )`);
 }
+function ensureRuleProbeCacheTable(db) {
+  db.exec(`CREATE TABLE IF NOT EXISTS rule_probe_cache (
+    rule_key TEXT PRIMARY KEY,
+    verdict TEXT NOT NULL,
+    worst_probe_ms REAL NOT NULL,
+    checked_at INTEGER NOT NULL
+  )`);
+}
 
 // ../../packages/persistence/src/paths.ts
 import { chmodSync, mkdirSync } from "fs";
@@ -21630,6 +21715,35 @@ var SqliteResolutionsRepository = class {
   }
 };
 
+// ../../packages/persistence/src/repositories/rule-probe-cache.ts
+var SqliteRuleProbeCacheRepository = class {
+  constructor(db) {
+    this.db = db;
+    this.upsertStmt = db.prepare(
+      `INSERT INTO rule_probe_cache (rule_key, verdict, worst_probe_ms, checked_at)
+       VALUES (:ruleKey, :verdict, :worstProbeMs, :checkedAt)
+       ON CONFLICT (rule_key) DO UPDATE SET
+         verdict = excluded.verdict,
+         worst_probe_ms = excluded.worst_probe_ms,
+         checked_at = excluded.checked_at`
+    );
+    this.readStmt = db.prepare(
+      `SELECT verdict, worst_probe_ms AS worstProbeMs FROM rule_probe_cache WHERE rule_key = :ruleKey`
+    );
+  }
+  db;
+  upsertStmt;
+  readStmt;
+  getVerdict(ruleKey) {
+    return getRow(this.readStmt, { ruleKey });
+  }
+  setVerdict(ruleKey, verdict, worstProbeMs2) {
+    failOpenTransaction(this.db, () => {
+      this.upsertStmt.run({ ruleKey, verdict, worstProbeMs: worstProbeMs2, checkedAt: Date.now() });
+    });
+  }
+};
+
 // ../../packages/persistence/src/repositories/scan-ledger.ts
 var SqliteScanLedgerRepository = class {
   constructor(db) {
@@ -22041,11 +22155,50 @@ var SqliteSecurityRepository = class {
 
 // ../../packages/persistence/src/repositories/shares.ts
 import { randomUUID as randomUUID7 } from "crypto";
-var KIND_ORDER = ["provider", "internal", "ip"];
+var MAX_EGRESS_CALL_SITES_PER_PROJECT = 5e3;
+var IN_CHUNK = 500;
+var KIND_ORDER = ["provider", "internal", "external", "ip"];
+var PLAINTEXT_TRANSPORT_SQL = "('http', 'ws')";
+var OVERRIDE_JOIN = `LEFT JOIN egress_decision_override oh ON oh.host = d.host
+             LEFT JOIN egress_decision_override ol ON ol.destination_id = d.id AND ol.host IS NULL`;
 var CALL_SITE_EMBED_CAP = 200;
 function parseNetwork(networkJson) {
   return safeJson(networkJson, null);
 }
+function capHits(all, mode) {
+  if (all.length <= MAX_EGRESS_CALL_SITES_PER_PROJECT) {
+    return { hits: [...all], droppedFiles: [], truncated: false };
+  }
+  if (mode === "walk") {
+    return {
+      hits: all.slice(0, MAX_EGRESS_CALL_SITES_PER_PROJECT),
+      droppedFiles: [],
+      truncated: true
+    };
+  }
+  const byFile = /* @__PURE__ */ new Map();
+  for (const hit of all) {
+    const bucket = byFile.get(hit.site.file);
+    if (bucket === void 0) byFile.set(hit.site.file, [hit]);
+    else bucket.push(hit);
+  }
+  const hits = [];
+  const droppedFiles = [];
+  for (const [file2, bucket] of byFile) {
+    if (hits.length + bucket.length > MAX_EGRESS_CALL_SITES_PER_PROJECT) droppedFiles.push(file2);
+    else hits.push(...bucket);
+  }
+  return { hits, droppedFiles, truncated: true };
+}
+function withoutDroppedFiles(reconcile, droppedFiles) {
+  if (reconcile.mode === "walk" || droppedFiles.length === 0) return reconcile;
+  const dropped = new Set(droppedFiles);
+  return {
+    mode: "ledger",
+    scannedFiles: reconcile.scannedFiles.filter((file2) => !dropped.has(file2)),
+    deletedFiles: reconcile.deletedFiles.filter((file2) => !dropped.has(file2))
+  };
+}
 function toEndpointSummary(row) {
   return {
     id: row.id,
@@ -22136,13 +22289,15 @@ var SqliteSharesRepository = class {
     const callSites = countScalar(this.db, "SELECT count(*) AS n FROM share_call_site");
     const insecure = countScalar(
       this.db,
-      "SELECT count(DISTINCT destination_id) AS n FROM share_endpoint WHERE transport = 'http'"
+      `SELECT count(DISTINCT destination_id) AS n FROM share_endpoint
+       WHERE transport IN ${PLAINTEXT_TRANSPORT_SQL}`
     );
     const needsReview = countScalar(
       this.db,
       `SELECT count(DISTINCT d.id) AS n
        FROM share_destination d
-       LEFT JOIN share_endpoint e ON e.destination_id = d.id AND e.transport = 'http'
+       LEFT JOIN share_endpoint e ON e.destination_id = d.id
+         AND e.transport IN ${PLAINTEXT_TRANSPORT_SQL}
        WHERE d.trust IN ('unverified', 'ip') OR e.id IS NOT NULL`
     );
     const kindCounts = countBy(
@@ -22152,6 +22307,7 @@ var SqliteSharesRepository = class {
     const byKind = {
       provider: kindCounts.get("provider") ?? 0,
       internal: kindCounts.get("internal") ?? 0,
+      external: kindCounts.get("external") ?? 0,
       ip: kindCounts.get("ip") ?? 0
     };
     const trustCounts = countBy(
@@ -22227,23 +22383,316 @@ var SqliteSharesRepository = class {
   // real edit from a no-such-destination.
   /**
    * Set (decision) or clear (null) the egress decision override for a destination.
-   * `null` deletes the override row → reverts to the trust default.
+   * `null` deletes the override rows → reverts to the trust default.
+   *
+   * The written row carries both the destination id and its host, so the
+   * decision re-attaches by host after the destination is pruned and
+   * re-detected under a fresh id. Rows written before the host column existed
+   * (host NULL, matched by destination id) are replaced rather than left to
+   * shadow the new one. Runs IMMEDIATE: the host lookup is read-then-write and
+   * would otherwise race a concurrent prune.
    */
   setEgressDecision(destinationId, decision) {
-    const exists = this.db.prepare("SELECT 1 FROM share_destination WHERE id = ?").get(destinationId);
-    if (exists === void 0) return false;
-    if (decision === null) {
-      this.db.prepare("DELETE FROM egress_decision_override WHERE destination_id = ?").run(destinationId);
-      return true;
+    let existed = false;
+    withTransaction(
+      this.db,
+      () => {
+        const dest = this.db.prepare("SELECT host FROM share_destination WHERE id = ?").get(destinationId);
+        if (dest === void 0) return;
+        existed = true;
+        this.db.prepare(
+          `DELETE FROM egress_decision_override
+             WHERE host = :host OR (destination_id = :destinationId AND host IS NULL)`
+        ).run({ host: dest.host, destinationId });
+        if (decision === null) return;
+        this.db.prepare(
+          `INSERT INTO egress_decision_override
+               (id, destination_id, host, decision, created_at, updated_at)
+             VALUES (:id, :destinationId, :host, :decision, :now, :now)`
+        ).run({
+          id: randomUUID7(),
+          destinationId,
+          host: dest.host,
+          decision,
+          now: Date.now()
+        });
+      },
+      "IMMEDIATE"
+    );
+    return existed;
+  }
+  /**
+   * Record one project's statically-extracted egress: reconcile the previously
+   * stored call sites against this scan, upsert destination → endpoint → call
+   * site for every hit, confirm `last_seen` on everything the project still
+   * references, and drop what no longer has evidence.
+   *
+   * Reconciliation keys on `projectKey` alone; `project` and `projectId` are
+   * display payload and never scope a delete. The whole write is one
+   * transaction: a failure leaves the project's previous inventory exactly as
+   * it was, and THROWS rather than reporting a partial write — callers decide
+   * their own fail-open behavior, and the scanner additionally withholds its
+   * ledger commit so the next scan retries.
+   *
+   * Over-cap input is truncated at a FILE boundary, and the files that lost
+   * their hits are both excluded from the reconcile delete and named in
+   * `droppedFiles`. That pairing is what keeps truncation non-destructive on
+   * the ledger path: a dropped file keeps whatever rows it already had, and its
+   * caller withholds the ledger entry so the next scan reads it again.
+   */
+  recordProjectEgress(input) {
+    const { hits, droppedFiles, truncated } = capHits(input.hits, input.reconcile.mode);
+    const reconcile = withoutDroppedFiles(input.reconcile, droppedFiles);
+    const now = Date.now();
+    let summary = {
+      destinations: 0,
+      endpoints: 0,
+      callSites: 0,
+      truncated,
+      droppedFiles
+    };
+    withTransaction(
+      this.db,
+      () => {
+        const projectId = input.projectId ?? this.knownProjectId(input.projectKey);
+        this.reconcileCallSites(input.projectKey, reconcile);
+        this.upsertHits(input, hits, projectId, now);
+        this.confirmLastSeen(input.projectKey, now);
+        this.pruneOrphans();
+        summary = { ...this.projectTotals(input.projectKey), truncated, droppedFiles };
+      },
+      "IMMEDIATE"
+    );
+    return summary;
+  }
+  // ─── Egress write internals ──────────────────────────────────────────────────
+  /**
+   * Clear the stored call sites this scan is responsible for re-creating.
+   *
+   * Each pipeline may only delete rows its own walker could have produced. The
+   * fs walk behind 'walk' mode never descends into dot-directories, so its
+   * delete excludes dot-path files — those rows are the plugin scanner's to
+   * reconcile, and deleting them here would make the two pipelines erase each
+   * other's rows on every alternating scan. 'ledger' mode names its files
+   * outright and never mass-deletes, so rows the fs walk contributed for files
+   * the scanner skips (vendored, oversize) survive it.
+   */
+  reconcileCallSites(projectKey, reconcile) {
+    if (reconcile.mode === "walk") {
+      const prefix = reconcile.walkedPrefix.replace(/\/+$/, "");
+      this.db.prepare(
+        `DELETE FROM share_call_site
+           WHERE project_key = :key
+             AND (:prefix = '' OR file = :prefix OR file LIKE :subtree ESCAPE '\\')
+             AND file NOT LIKE '.%'
+             AND file NOT LIKE '%/.%'`
+      ).run({ key: projectKey, prefix, subtree: `${escapeLikePattern(prefix)}/%` });
+      return;
+    }
+    const files = [.../* @__PURE__ */ new Set([...reconcile.scannedFiles, ...reconcile.deletedFiles])];
+    for (let i = 0; i < files.length; i += IN_CHUNK) {
+      const chunk = files.slice(i, i + IN_CHUNK);
+      this.db.prepare(
+        `DELETE FROM share_call_site
+           WHERE project_key = ? AND file IN (${placeholders(chunk.length)})`
+      ).run(projectKey, ...chunk);
+    }
+  }
+  /**
+   * Upsert every hit as destination → endpoint → call site. Destinations key on
+   * `host` and endpoints on `(destination_id, method, url)`, both shared across
+   * projects; only the call site carries `project_key`. A destination's `note`
+   * is user-owned and never overwritten. The id caches keep one upsert per
+   * distinct host and endpoint, so the first hit for a host supplies its
+   * classification for this batch.
+   */
+  upsertHits(input, hits, projectId, now) {
+    if (hits.length === 0) return;
+    const destStmt = this.db.prepare(
+      `INSERT INTO share_destination
+         (id, kind, name, host, category, trust, network_json, last_seen, provenance,
+          created_at, updated_at)
+       VALUES (:id, :kind, :name, :host, :category, :trust, :networkJson, :now, 'scan', :now, :now)
+       ON CONFLICT (host) DO UPDATE SET
+         kind = excluded.kind,
+         name = excluded.name,
+         category = excluded.category,
+         trust = excluded.trust,
+         network_json = excluded.network_json,
+         last_seen = excluded.last_seen,
+         updated_at = excluded.updated_at`
+    );
+    const destIdStmt = this.db.prepare("SELECT id FROM share_destination WHERE host = ?");
+    const endpointStmt = this.db.prepare(
+      `INSERT INTO share_endpoint
+         (id, destination_id, method, transport, url, template, data_class, last_seen,
+          created_at, updated_at)
+       VALUES (:id, :destinationId, :method, :transport, :url, :template, :dataClass, :now,
+               :now, :now)
+       ON CONFLICT (destination_id, method, url) DO UPDATE SET
+         transport = excluded.transport,
+         template = excluded.template,
+         data_class = excluded.data_class,
+         last_seen = excluded.last_seen,
+         updated_at = excluded.updated_at`
+    );
+    const endpointIdStmt = this.db.prepare(
+      "SELECT id FROM share_endpoint WHERE destination_id = ? AND method = ? AND url = ?"
+    );
+    const siteStmt = this.db.prepare(
+      `INSERT INTO share_call_site
+         (id, endpoint_id, project, project_key, file, line, snippet, dynamic, vendored,
+          project_id, created_at, updated_at)
+       VALUES (:id, :endpointId, :project, :projectKey, :file, :line, :snippet, :dynamic,
+               :vendored, :projectId, :now, :now)
+       ON CONFLICT (endpoint_id, project_key, file, line) DO UPDATE SET
+         snippet = excluded.snippet,
+         dynamic = excluded.dynamic,
+         vendored = excluded.vendored,
+         project = excluded.project,
+         project_id = COALESCE(excluded.project_id, share_call_site.project_id),
+         updated_at = excluded.updated_at`
+    );
+    const destIds = /* @__PURE__ */ new Map();
+    const endpointIds = /* @__PURE__ */ new Map();
+    for (const hit of hits) {
+      let destinationId = destIds.get(hit.host);
+      if (destinationId === void 0) {
+        destStmt.run({
+          id: randomUUID7(),
+          kind: hit.kind,
+          name: hit.name,
+          host: hit.host,
+          category: hit.category,
+          trust: hit.trust,
+          networkJson: hit.network === null ? null : JSON.stringify(hit.network),
+          now
+        });
+        destinationId = getRow(destIdStmt, [hit.host])?.id ?? "";
+        destIds.set(hit.host, destinationId);
+      }
+      const endpointKey = `${destinationId}\0${hit.method}\0${hit.url}`;
+      let endpointId = endpointIds.get(endpointKey);
+      if (endpointId === void 0) {
+        endpointStmt.run({
+          id: randomUUID7(),
+          destinationId,
+          method: hit.method,
+          transport: hit.transport,
+          url: hit.url,
+          template: boolToInt(hit.template),
+          dataClass: hit.dataClass,
+          now
+        });
+        endpointId = getRow(endpointIdStmt, [destinationId, hit.method, hit.url])?.id ?? "";
+        endpointIds.set(endpointKey, endpointId);
+      }
+      siteStmt.run({
+        id: randomUUID7(),
+        endpointId,
+        project: input.project,
+        projectKey: input.projectKey,
+        file: hit.site.file,
+        line: hit.site.line,
+        snippet: hit.site.snippet,
+        dynamic: boolToInt(hit.site.dynamic),
+        vendored: boolToInt(hit.site.vendored),
+        projectId,
+        now
+      });
     }
+  }
+  /**
+   * The source-project id this project's stored call sites already carry, if
+   * any. Only the pipeline that resolves a source project supplies one; the
+   * other passes null and inherits this, so the link stops flapping between a
+   * real id and NULL depending on which pipeline ran last. The value is a
+   * per-project attribute stored redundantly on each row, so any row's is
+   * representative.
+   */
+  knownProjectId(projectKey) {
+    return getRow(
+      this.db.prepare(
+        `SELECT project_id AS projectId FROM share_call_site
+           WHERE project_key = ? AND project_id IS NOT NULL LIMIT 1`
+      ),
+      [projectKey]
+    )?.projectId ?? null;
+  }
+  /**
+   * Stamp `last_seen` on every endpoint and destination this project still
+   * references — including rows the scan preserved rather than re-wrote, so a
+   * ledger-skipped file's references don't decay into "stale" on the page.
+   */
+  confirmLastSeen(projectKey, now) {
     this.db.prepare(
-      `INSERT INTO egress_decision_override (id, destination_id, decision, created_at, updated_at)
-         VALUES (:id, :destinationId, :decision, :now, :now)
-         ON CONFLICT (destination_id) DO UPDATE SET
-           decision = excluded.decision,
-           updated_at = excluded.updated_at`
-    ).run({ id: randomUUID7(), destinationId, decision, now: Date.now() });
-    return true;
+      `UPDATE share_endpoint SET last_seen = :now, updated_at = :now
+         WHERE id IN (SELECT DISTINCT endpoint_id FROM share_call_site WHERE project_key = :key)`
+    ).run({ now, key: projectKey });
+    this.db.prepare(
+      `UPDATE share_destination SET last_seen = :now, updated_at = :now
+         WHERE id IN (SELECT DISTINCT e.destination_id
+                      FROM share_endpoint e
+                      JOIN share_call_site c ON c.endpoint_id = e.id
+                      WHERE c.project_key = :key)`
+    ).run({ now, key: projectKey });
+  }
+  /**
+   * Drop rows left without evidence: endpoints with no call site, then
+   * destinations with no endpoint. Call sites are the only evidence either one
+   * has, so a row that lost its last one belongs to no project any more.
+   *
+   * Overrides are deleted between the two steps, and only the ones written
+   * before the host column existed. Those match a destination by id alone;
+   * because the id link is released on delete rather than cascading, leaving
+   * them would accumulate rows that match neither join arm and that nothing can
+   * reach again. Host-bearing rows deliberately survive — the host is what
+   * re-attaches a user's decision when the destination comes back.
+   */
+  pruneOrphans() {
+    this.db.exec(
+      `DELETE FROM share_endpoint
+       WHERE NOT EXISTS (SELECT 1 FROM share_call_site c WHERE c.endpoint_id = share_endpoint.id)`
+    );
+    this.db.exec(
+      `DELETE FROM egress_decision_override
+       WHERE host IS NULL
+         AND destination_id IN (
+           SELECT d.id FROM share_destination d
+           WHERE NOT EXISTS (SELECT 1 FROM share_endpoint e WHERE e.destination_id = d.id))`
+    );
+    this.db.exec(
+      `DELETE FROM share_destination
+       WHERE NOT EXISTS (
+         SELECT 1 FROM share_endpoint e WHERE e.destination_id = share_destination.id)`
+    );
+  }
+  /**
+   * Live totals for one project. Destinations and endpoints are shared across
+   * projects and carry no project column, so both are counted through the call
+   * sites that reference them.
+   */
+  projectTotals(projectKey) {
+    return {
+      destinations: countScalar(
+        this.db,
+        `SELECT count(DISTINCT e.destination_id) AS n
+         FROM share_endpoint e
+         JOIN share_call_site c ON c.endpoint_id = e.id
+         WHERE c.project_key = ?`,
+        [projectKey]
+      ),
+      endpoints: countScalar(
+        this.db,
+        "SELECT count(DISTINCT endpoint_id) AS n FROM share_call_site WHERE project_key = ?",
+        [projectKey]
+      ),
+      callSites: countScalar(
+        this.db,
+        "SELECT count(*) AS n FROM share_call_site WHERE project_key = ?",
+        [projectKey]
+      )
+    };
   }
   // ─── Raw fetchers ────────────────────────────────────────────────────────────
   mapDestRow(r) {
@@ -22263,7 +22712,8 @@ var SqliteSharesRepository = class {
   fetchDestinations(q, kinds, reviewOnly = false) {
     const cols = `d.id, d.kind, d.name, d.host, d.category, d.trust, d.note,
                   d.network_json AS networkJson, d.last_seen AS lastSeenMs,
-                  d.created_at AS createdAt, o.decision AS overrideDecision`;
+                  d.created_at AS createdAt,
+                  COALESCE(oh.decision, ol.decision) AS overrideDecision`;
     const conditions = [];
     const params = [];
     if (kinds && kinds.length > 0) {
@@ -22274,7 +22724,8 @@ var SqliteSharesRepository = class {
       conditions.push(
         `(d.trust IN ('unverified', 'ip')
           OR EXISTS (SELECT 1 FROM share_endpoint re
-                     WHERE re.destination_id = d.id AND re.transport = 'http'))`
+                     WHERE re.destination_id = d.id
+                       AND re.transport IN ${PLAINTEXT_TRANSPORT_SQL}))`
       );
     }
     let sql;
@@ -22287,7 +22738,7 @@ var SqliteSharesRepository = class {
       params.push(pattern, pattern, pattern, pattern, pattern);
       sql = `SELECT DISTINCT ${cols}
              FROM share_destination d
-             LEFT JOIN egress_decision_override o ON o.destination_id = d.id
+             ${OVERRIDE_JOIN}
              LEFT JOIN share_endpoint e ON e.destination_id = d.id
              LEFT JOIN share_call_site c ON c.endpoint_id = e.id
              ${conditions.length ? `WHERE ${conditions.join(" AND ")}` : ""}
@@ -22295,7 +22746,7 @@ var SqliteSharesRepository = class {
     } else {
       sql = `SELECT ${cols}
              FROM share_destination d
-             LEFT JOIN egress_decision_override o ON o.destination_id = d.id
+             ${OVERRIDE_JOIN}
              ${conditions.length ? `WHERE ${conditions.join(" AND ")}` : ""}
              ORDER BY d.created_at ASC, d.id ASC`;
     }
@@ -22310,9 +22761,9 @@ var SqliteSharesRepository = class {
       this.db.prepare(
         `SELECT d.id, d.kind, d.name, d.host, d.category, d.trust, d.note,
                 d.network_json AS networkJson, d.last_seen AS lastSeenMs,
-                o.decision AS overrideDecision
+                COALESCE(oh.decision, ol.decision) AS overrideDecision
          FROM share_destination d
-         LEFT JOIN egress_decision_override o ON o.destination_id = d.id
+         ${OVERRIDE_JOIN}
          WHERE d.id = ?`
       ),
       [destinationId]
@@ -22541,6 +22992,7 @@ function openLocalDatabase(dir) {
   const scanLedger = new SqliteScanLedgerRepository(db);
   const exceptions = new SqliteExceptionsRepository(db);
   const resolutions = new SqliteResolutionsRepository(db);
+  const ruleProbeCache = new SqliteRuleProbeCacheRepository(db);
   const security = new SqliteSecurityRepository(db);
   const detections = new SqliteDetectionsRepository(db);
   const shares = new SqliteSharesRepository(db);
@@ -22678,6 +23130,7 @@ function openLocalDatabase(dir) {
     scanLedger,
     exceptions,
     resolutions,
+    ruleProbeCache,
     security,
     detections,
     shares,
@@ -22918,108 +23371,1515 @@ import { readdirSync, readFileSync as readFileSync4, realpathSync, statSync as s
 import { homedir as homedir2 } from "os";
 import { basename as basename2, join as join7 } from "path";
 
-// ../../packages/detections/src/escape-regexp.ts
-function escapeRegExp(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-
-// ../../packages/detections/src/matchers/limits.ts
-var MAX_MATCHES_PER_RULE = 1e4;
-
-// ../../packages/detections/src/matchers/keyword.ts
-var KeywordMatcher2 = class {
-  match(text, rule) {
-    if (rule.matcher.type !== "keyword") return [];
-    const { keywords, caseSensitive } = rule.matcher;
-    const spans = [];
-    for (const kw of keywords) {
-      if (kw.length === 0) continue;
-      if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      const re = new RegExp(escapeRegExp(kw), caseSensitive ? "gu" : "giu");
-      let m;
-      while ((m = re.exec(text)) !== null) {
-        spans.push({ start: m.index, end: m.index + m[0].length });
-        if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      }
+// ../../packages/detections/src/egress/registry.ts
+var EXTRACTOR_VERSION = "1";
+var PROVIDER_REGISTRY = [
+  {
+    id: "stripe",
+    name: "Stripe",
+    category: "Payments",
+    hostSuffixes: ["stripe.com"],
+    apiBase: "https://api.stripe.com",
+    defaultDataClasses: ["pii", "customer"],
+    sdks: {
+      npm: ["stripe"],
+      pypi: ["stripe"],
+      go: ["github.com/stripe/stripe-go"],
+      maven: ["com.stripe"],
+      rubygems: ["stripe"],
+      composer: ["stripe/stripe-php"],
+      nuget: ["Stripe.net"]
     }
-    return spans;
-  }
-};
-
-// ../../packages/detections/src/matchers/regex.ts
-var RegexMatcher2 = class {
-  match(text, rule) {
-    if (rule.matcher.type !== "regex") return [];
-    const { pattern, flags, captureGroup } = rule.matcher;
-    const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
-    const spans = [];
-    let m;
-    while ((m = re.exec(text)) !== null) {
-      const group = captureGroup != null ? m[captureGroup] : m[0];
-      if (m[0].length === 0) re.lastIndex++;
-      if (group && spans.length < MAX_MATCHES_PER_RULE) {
-        const groupIndices = captureGroup != null ? m.indices?.[captureGroup] : void 0;
-        const start = groupIndices ? groupIndices[0] : m.index;
-        spans.push({ start, end: start + group.length });
-      }
-      if (!flags.includes("g") || spans.length >= MAX_MATCHES_PER_RULE) break;
+  },
+  {
+    id: "datadog",
+    name: "Datadog",
+    category: "Observability",
+    hostSuffixes: ["datadoghq.com", "datadoghq.eu"],
+    apiBase: "https://api.datadoghq.com",
+    defaultDataClasses: ["telemetry", "logs", "metrics"],
+    sdks: {
+      npm: ["dd-trace", "@datadog/browser-logs"],
+      pypi: ["datadog", "ddtrace"],
+      go: ["github.com/DataDog/dd-trace-go"],
+      maven: ["com.datadoghq"],
+      rubygems: ["ddtrace", "dogapi"],
+      nuget: ["Datadog.Trace"]
     }
-    return spans;
-  }
-};
-
-// ../../packages/detections/src/validators/entropy.ts
-function shannonEntropy(str2) {
-  const freq = {};
-  for (const ch of str2) {
-    freq[ch] = (freq[ch] ?? 0) + 1;
-  }
-  let entropy = 0;
-  for (const count of Object.values(freq)) {
-    const p = count / str2.length;
-    entropy -= p * Math.log2(p);
-  }
-  return entropy;
-}
-function isHighEntropy(value, threshold = 3.5, minLength = 20) {
-  return value.length >= minLength && shannonEntropy(value) >= threshold;
-}
-
-// ../../packages/detections/src/validators/luhn.ts
-function luhnCheck(digits) {
-  const nums = digits.replace(/\D/g, "");
-  if (nums.length < 13) return false;
-  let sum = 0;
-  let isOdd = true;
-  for (let i = nums.length - 1; i >= 0; i--) {
-    let digit = parseInt(nums[i] ?? "0", 10);
-    if (!isOdd) {
-      digit *= 2;
-      if (digit > 9) digit -= 9;
+  },
+  {
+    id: "newrelic",
+    name: "New Relic",
+    category: "Observability",
+    hostSuffixes: ["newrelic.com", "nr-data.net"],
+    apiBase: "https://api.newrelic.com",
+    defaultDataClasses: ["telemetry", "logs", "metrics"],
+    sdks: {
+      npm: ["newrelic"],
+      pypi: ["newrelic"],
+      go: ["github.com/newrelic/go-agent"],
+      maven: ["com.newrelic.agent.java"],
+      rubygems: ["newrelic_rpm"],
+      nuget: ["NewRelic.Agent"]
     }
-    sum += digit;
-    isOdd = !isOdd;
-  }
-  return sum % 10 === 0;
-}
-
-// ../../packages/detections/src/engine.ts
-var keywordMatcher = new KeywordMatcher2();
-var regexMatcher = new RegexMatcher2();
-var packs = /* @__PURE__ */ new Map();
-var POST_VALIDATORS = {
-  entropy: (value, config2) => isHighEntropy(value, numberOption(config2, "threshold"), numberOption(config2, "minLength")),
-  luhn: (value) => luhnCheck(value)
-};
-function numberOption(config2, key) {
-  const value = config2?.[key];
-  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
-}
-function passesPostValidators(rule, value) {
-  const validators = rule.postValidators;
-  if (!validators || validators.length === 0) return true;
-  for (const ref of validators) {
-    const name = typeof ref === "string" ? ref : ref.name;
+  },
+  {
+    id: "sentry",
+    name: "Sentry",
+    category: "Error tracking",
+    hostSuffixes: ["sentry.io"],
+    apiBase: "https://sentry.io",
+    defaultDataClasses: ["source", "telemetry"],
+    sdks: {
+      npm: ["@sentry/node", "@sentry/react", "@sentry/nextjs"],
+      pypi: ["sentry-sdk"],
+      go: ["github.com/getsentry/sentry-go"],
+      maven: ["io.sentry"],
+      rubygems: ["sentry-ruby"],
+      cargo: ["sentry"],
+      composer: ["sentry/sentry"],
+      nuget: ["Sentry"]
+    }
+  },
+  {
+    id: "openai",
+    name: "OpenAI",
+    category: "LLM provider",
+    hostSuffixes: ["openai.com"],
+    apiBase: "https://api.openai.com",
+    defaultDataClasses: ["pii", "source"],
+    sdks: {
+      npm: ["openai"],
+      pypi: ["openai"],
+      go: ["github.com/sashabaranov/go-openai"],
+      maven: ["com.openai"],
+      rubygems: ["ruby-openai"],
+      cargo: ["async-openai"],
+      composer: ["openai-php/client"],
+      nuget: ["OpenAI"]
+    }
+  },
+  {
+    id: "anthropic",
+    name: "Anthropic",
+    category: "LLM provider",
+    hostSuffixes: ["anthropic.com"],
+    apiBase: "https://api.anthropic.com",
+    defaultDataClasses: ["pii", "source"],
+    sdks: {
+      npm: ["@anthropic-ai/sdk"],
+      pypi: ["anthropic"],
+      go: ["github.com/anthropics/anthropic-sdk-go"],
+      nuget: ["Anthropic.SDK"]
+    }
+  },
+  {
+    id: "aws",
+    name: "Amazon Web Services",
+    category: "Cloud platform",
+    hostSuffixes: ["amazonaws.com"],
+    apiBase: "https://s3.amazonaws.com",
+    defaultDataClasses: ["secrets", "customer"],
+    sdks: {
+      npm: ["@aws-sdk/client-s3", "aws-sdk"],
+      pypi: ["boto3"],
+      go: ["github.com/aws/aws-sdk-go", "github.com/aws/aws-sdk-go-v2"],
+      maven: ["com.amazonaws", "software.amazon.awssdk"],
+      rubygems: ["aws-sdk-s3"],
+      cargo: ["aws-sdk-s3"],
+      nuget: ["AWSSDK.S3"]
+    }
+  },
+  {
+    id: "gcp",
+    name: "Google Cloud",
+    category: "Cloud platform",
+    hostSuffixes: ["googleapis.com"],
+    apiBase: "https://storage.googleapis.com",
+    defaultDataClasses: ["customer", "logs"],
+    sdks: {
+      npm: ["@google-cloud/storage"],
+      pypi: ["google-cloud-storage"],
+      go: ["cloud.google.com/go"],
+      maven: ["com.google.cloud"],
+      rubygems: ["google-cloud-storage"],
+      nuget: ["Google.Cloud.Storage.V1"]
+    }
+  },
+  {
+    id: "azure",
+    name: "Microsoft Azure",
+    category: "Cloud platform",
+    hostSuffixes: ["azure.com", "windows.net"],
+    apiBase: "https://management.azure.com",
+    defaultDataClasses: ["customer", "logs"],
+    sdks: {
+      npm: ["@azure/storage-blob"],
+      pypi: ["azure-storage-blob"],
+      go: ["github.com/Azure/azure-sdk-for-go"],
+      maven: ["com.azure"],
+      rubygems: ["azure-storage-blob"],
+      nuget: ["Azure.Storage.Blobs"]
+    }
+  },
+  {
+    id: "slack",
+    name: "Slack",
+    category: "Notifications",
+    hostSuffixes: ["slack.com"],
+    apiBase: "https://slack.com/api",
+    defaultDataClasses: ["logs"],
+    sdks: {
+      npm: ["@slack/web-api"],
+      pypi: ["slack-sdk"],
+      go: ["github.com/slack-go/slack"],
+      maven: ["com.slack.api"],
+      rubygems: ["slack-ruby-client"],
+      composer: ["slack-php/slack-api"],
+      nuget: ["SlackNet"]
+    }
+  },
+  {
+    id: "segment",
+    name: "Segment",
+    category: "Analytics",
+    hostSuffixes: ["segment.io", "segment.com"],
+    apiBase: "https://api.segment.io",
+    defaultDataClasses: ["customer"],
+    sdks: {
+      npm: ["@segment/analytics-node", "analytics-node"],
+      pypi: ["segment-analytics-python"],
+      go: ["github.com/segmentio/analytics-go"],
+      maven: ["com.segment.analytics.java"],
+      rubygems: ["analytics-ruby"],
+      nuget: ["Analytics"]
+    }
+  },
+  {
+    id: "twilio",
+    name: "Twilio",
+    category: "Communications",
+    hostSuffixes: ["twilio.com"],
+    apiBase: "https://api.twilio.com",
+    defaultDataClasses: ["pii", "customer"],
+    sdks: {
+      npm: ["twilio"],
+      pypi: ["twilio"],
+      go: ["github.com/twilio/twilio-go"],
+      maven: ["com.twilio.sdk"],
+      rubygems: ["twilio-ruby"],
+      composer: ["twilio/sdk"],
+      nuget: ["Twilio"]
+    }
+  },
+  {
+    id: "sendgrid",
+    name: "SendGrid",
+    category: "Email",
+    hostSuffixes: ["sendgrid.com"],
+    apiBase: "https://api.sendgrid.com",
+    defaultDataClasses: ["pii"],
+    sdks: {
+      npm: ["@sendgrid/mail"],
+      pypi: ["sendgrid"],
+      go: ["github.com/sendgrid/sendgrid-go"],
+      maven: ["com.sendgrid"],
+      rubygems: ["sendgrid-ruby"],
+      composer: ["sendgrid/sendgrid"],
+      nuget: ["SendGrid"]
+    }
+  },
+  {
+    id: "mailgun",
+    name: "Mailgun",
+    category: "Email",
+    hostSuffixes: ["mailgun.net"],
+    apiBase: "https://api.mailgun.net",
+    defaultDataClasses: ["pii"],
+    sdks: {
+      npm: ["mailgun.js"],
+      pypi: ["mailgun"],
+      rubygems: ["mailgun-ruby"],
+      composer: ["mailgun/mailgun-php"],
+      nuget: ["Mailgun"]
+    }
+  },
+  {
+    id: "mixpanel",
+    name: "Mixpanel",
+    category: "Analytics",
+    hostSuffixes: ["mixpanel.com"],
+    apiBase: "https://api.mixpanel.com",
+    defaultDataClasses: ["customer", "telemetry"],
+    sdks: {
+      npm: ["mixpanel"],
+      pypi: ["mixpanel"],
+      rubygems: ["mixpanel-ruby"],
+      nuget: ["Mixpanel"]
+    }
+  },
+  {
+    id: "amplitude",
+    name: "Amplitude",
+    category: "Analytics",
+    hostSuffixes: ["amplitude.com"],
+    apiBase: "https://api2.amplitude.com",
+    defaultDataClasses: ["customer", "telemetry"],
+    sdks: {
+      npm: ["@amplitude/analytics-node"],
+      pypi: ["amplitude-analytics"],
+      nuget: ["Amplitude"]
+    }
+  },
+  {
+    id: "posthog",
+    name: "PostHog",
+    category: "Analytics",
+    hostSuffixes: ["posthog.com"],
+    apiBase: "https://us.i.posthog.com",
+    defaultDataClasses: ["customer", "telemetry"],
+    sdks: {
+      npm: ["posthog-node", "posthog-js"],
+      pypi: ["posthog"],
+      go: ["github.com/posthog/posthog-go"],
+      rubygems: ["posthog-ruby"],
+      composer: ["posthog/posthog-php"],
+      nuget: ["PostHog"]
+    }
+  },
+  {
+    id: "honeycomb",
+    name: "Honeycomb",
+    category: "Observability",
+    hostSuffixes: ["honeycomb.io"],
+    apiBase: "https://api.honeycomb.io",
+    defaultDataClasses: ["telemetry", "metrics"],
+    sdks: {
+      npm: ["libhoney"],
+      pypi: ["libhoney"],
+      go: ["github.com/honeycombio/libhoney-go"],
+      rubygems: ["libhoney"]
+    }
+  },
+  {
+    id: "grafana",
+    name: "Grafana Cloud",
+    category: "Observability",
+    hostSuffixes: ["grafana.net"],
+    apiBase: "https://grafana.net",
+    defaultDataClasses: ["logs", "metrics"],
+    sdks: {
+      npm: ["@grafana/faro-web-sdk"]
+    }
+  },
+  {
+    id: "splunk",
+    name: "Splunk",
+    category: "Observability",
+    hostSuffixes: ["splunkcloud.com", "splunk.com"],
+    apiBase: "https://http-inputs.splunkcloud.com",
+    defaultDataClasses: ["logs"],
+    sdks: {
+      npm: ["splunk-logging"],
+      pypi: ["splunk-sdk"],
+      maven: ["com.splunk"],
+      nuget: ["Splunk.Logging.Common"]
+    }
+  },
+  {
+    id: "pagerduty",
+    name: "PagerDuty",
+    category: "Incident response",
+    hostSuffixes: ["pagerduty.com"],
+    apiBase: "https://api.pagerduty.com",
+    defaultDataClasses: ["logs"],
+    sdks: {
+      npm: ["@pagerduty/pdjs"],
+      pypi: ["pdpyras"],
+      go: ["github.com/PagerDuty/go-pagerduty"],
+      rubygems: ["pagerduty"]
+    }
+  },
+  {
+    id: "github",
+    name: "GitHub",
+    category: "Developer platform",
+    hostSuffixes: ["github.com", "githubusercontent.com"],
+    apiBase: "https://api.github.com",
+    defaultDataClasses: ["source"],
+    sdks: {
+      npm: ["@octokit/rest", "octokit"],
+      pypi: ["pygithub"],
+      go: ["github.com/google/go-github"],
+      maven: ["org.kohsuke.github-api"],
+      rubygems: ["octokit"],
+      cargo: ["octocrab"],
+      composer: ["knplabs/github-api"],
+      nuget: ["Octokit"]
+    }
+  },
+  {
+    id: "gitlab",
+    name: "GitLab",
+    category: "Developer platform",
+    hostSuffixes: ["gitlab.com"],
+    apiBase: "https://gitlab.com/api",
+    defaultDataClasses: ["source"],
+    sdks: {
+      npm: ["@gitbeaker/rest"],
+      pypi: ["python-gitlab"],
+      go: ["gitlab.com/gitlab-org/api/client-go"],
+      rubygems: ["gitlab"],
+      nuget: ["GitLabApiClient"]
+    }
+  },
+  {
+    id: "auth0",
+    name: "Auth0",
+    category: "Identity",
+    hostSuffixes: ["auth0.com"],
+    apiBase: "https://login.auth0.com",
+    defaultDataClasses: ["pii"],
+    sdks: {
+      npm: ["auth0"],
+      pypi: ["auth0-python"],
+      go: ["github.com/auth0/go-auth0"],
+      maven: ["com.auth0"],
+      rubygems: ["auth0"],
+      composer: ["auth0/auth0-php"],
+      nuget: ["Auth0.ManagementApi"]
+    }
+  },
+  {
+    id: "okta",
+    name: "Okta",
+    category: "Identity",
+    hostSuffixes: ["okta.com", "oktapreview.com"],
+    apiBase: "https://login.okta.com",
+    defaultDataClasses: ["pii"],
+    sdks: {
+      npm: ["@okta/okta-sdk-nodejs"],
+      pypi: ["okta"],
+      go: ["github.com/okta/okta-sdk-golang"],
+      maven: ["com.okta.sdk"],
+      nuget: ["Okta.Sdk"]
+    }
+  },
+  {
+    id: "clerk",
+    name: "Clerk",
+    category: "Identity",
+    hostSuffixes: ["clerk.com", "clerk.dev"],
+    apiBase: "https://api.clerk.com",
+    defaultDataClasses: ["pii"],
+    sdks: {
+      npm: ["@clerk/backend", "@clerk/nextjs"],
+      pypi: ["clerk-backend-api"],
+      go: ["github.com/clerk/clerk-sdk-go"]
+    }
+  },
+  {
+    id: "supabase",
+    name: "Supabase",
+    category: "Backend platform",
+    hostSuffixes: ["supabase.co", "supabase.com"],
+    apiBase: "https://api.supabase.com",
+    defaultDataClasses: ["pii", "customer"],
+    sdks: {
+      npm: ["@supabase/supabase-js"],
+      pypi: ["supabase"],
+      cargo: ["postgrest"]
+    }
+  },
+  {
+    id: "firebase",
+    name: "Firebase",
+    category: "Backend platform",
+    hostSuffixes: ["firebaseio.com", "firebase.google.com"],
+    apiBase: "https://firebaseio.com",
+    defaultDataClasses: ["customer"],
+    sdks: {
+      npm: ["firebase", "firebase-admin"],
+      pypi: ["firebase-admin"],
+      go: ["firebase.google.com/go"],
+      maven: ["com.google.firebase"]
+    }
+  },
+  {
+    id: "mongodb-atlas",
+    name: "MongoDB Atlas",
+    category: "Database SaaS",
+    hostSuffixes: ["mongodb.net", "mongodb.com"],
+    apiBase: "https://cloud.mongodb.com",
+    defaultDataClasses: ["customer"],
+    sdks: {
+      npm: ["mongodb"],
+      pypi: ["pymongo"],
+      go: ["go.mongodb.org/mongo-driver"],
+      maven: ["org.mongodb"],
+      rubygems: ["mongo"],
+      cargo: ["mongodb"],
+      nuget: ["MongoDB.Driver"]
+    }
+  },
+  {
+    id: "planetscale",
+    name: "PlanetScale",
+    category: "Database SaaS",
+    hostSuffixes: ["psdb.cloud", "planetscale.com"],
+    apiBase: "https://api.planetscale.com",
+    defaultDataClasses: ["customer"],
+    sdks: {
+      npm: ["@planetscale/database"],
+      go: ["github.com/planetscale/planetscale-go"]
+    }
+  },
+  {
+    id: "algolia",
+    name: "Algolia",
+    category: "Search SaaS",
+    hostSuffixes: ["algolia.net", "algolianet.com"],
+    apiBase: "https://algolia.net",
+    defaultDataClasses: ["customer"],
+    sdks: {
+      npm: ["algoliasearch"],
+      pypi: ["algoliasearch"],
+      go: ["github.com/algolia/algoliasearch-client-go"],
+      maven: ["com.algolia"],
+      rubygems: ["algolia"],
+      composer: ["algolia/algoliasearch-client-php"],
+      nuget: ["Algolia.Search"]
+    }
+  },
+  {
+    id: "cloudflare",
+    name: "Cloudflare",
+    category: "CDN / edge",
+    hostSuffixes: ["cloudflare.com", "workers.dev"],
+    apiBase: "https://api.cloudflare.com",
+    defaultDataClasses: ["logs"],
+    sdks: {
+      npm: ["cloudflare"],
+      pypi: ["cloudflare"],
+      go: ["github.com/cloudflare/cloudflare-go"],
+      nuget: ["CloudFlare.Client"]
+    }
+  },
+  {
+    id: "huggingface",
+    name: "Hugging Face",
+    category: "LLM provider",
+    hostSuffixes: ["huggingface.co"],
+    apiBase: "https://api-inference.huggingface.co",
+    defaultDataClasses: ["source"],
+    sdks: {
+      npm: ["@huggingface/inference"],
+      pypi: ["huggingface-hub", "transformers"],
+      rubygems: ["hugging-face"]
+    }
+  },
+  {
+    id: "cohere",
+    name: "Cohere",
+    category: "LLM provider",
+    hostSuffixes: ["cohere.com", "cohere.ai"],
+    apiBase: "https://api.cohere.com",
+    defaultDataClasses: ["pii", "source"],
+    sdks: {
+      npm: ["cohere-ai"],
+      pypi: ["cohere"],
+      go: ["github.com/cohere-ai/cohere-go"]
+    }
+  },
+  {
+    id: "mistral",
+    name: "Mistral AI",
+    category: "LLM provider",
+    hostSuffixes: ["mistral.ai"],
+    apiBase: "https://api.mistral.ai",
+    defaultDataClasses: ["pii", "source"],
+    sdks: {
+      npm: ["@mistralai/mistralai"],
+      pypi: ["mistralai"],
+      go: ["github.com/gage-technologies/mistral-go"]
+    }
+  }
+];
+var EGRESS_VERSION_MATERIAL = `${EXTRACTOR_VERSION}
+${JSON.stringify(PROVIDER_REGISTRY)}`;
+var INTERNAL_TLDS = ["internal", "local", "corp", "lan", "intranet", "home.arpa"];
+var EXCLUDED_HOST_SUFFIXES = [
+  "localhost",
+  "test",
+  "example",
+  "invalid",
+  "example.com",
+  "example.org",
+  "example.net",
+  "w3.org",
+  "schemas.openxmlformats.org",
+  "schemas.microsoft.com",
+  "schemas.android.com",
+  "maven.apache.org"
+];
+function hostMatchesSuffix(host, suffix) {
+  return host === suffix || host.endsWith(`.${suffix}`);
+}
+function isValidIPv4(host) {
+  const parts = host.split(".");
+  if (parts.length !== 4) return false;
+  return parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
+}
+function isPrivateOrReservedIPv4(host) {
+  const octets = host.split(".").map(Number);
+  const a = octets[0];
+  const b = octets[1];
+  if (a === void 0 || b === void 0) return false;
+  if (a === 0 || a === 10 || a === 127 || a >= 224) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  return false;
+}
+function normalizeIPv6Literal(host) {
+  const unbracketed = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+  const zoneIndex = unbracketed.indexOf("%");
+  const unzoned = zoneIndex === -1 ? unbracketed : unbracketed.slice(0, zoneIndex);
+  return unzoned.toLowerCase();
+}
+var IPV6_HEX_GROUP = /^[0-9a-f]{1,4}$/;
+function isValidIPv6(host) {
+  const h = normalizeIPv6Literal(host);
+  if (!h.includes(":")) return false;
+  const collapsedHalves = h.split("::");
+  if (collapsedHalves.length > 2) return false;
+  const sides = collapsedHalves.length === 2 ? collapsedHalves : [h];
+  const groups = sides.flatMap((side) => side === "" ? [] : side.split(":"));
+  if (!groups.every((g) => IPV6_HEX_GROUP.test(g))) return false;
+  return collapsedHalves.length === 2 ? groups.length <= 7 : groups.length === 8;
+}
+function isPrivateOrReservedIPv6(host) {
+  const h = normalizeIPv6Literal(host);
+  if (h === "::" || h === "::1") return true;
+  const firstGroup = (h.split(":")[0] ?? "").padStart(4, "0");
+  if (firstGroup.startsWith("fc") || firstGroup.startsWith("fd")) return true;
+  if (firstGroup.startsWith("fe") && "89ab".includes(firstGroup[2] ?? "")) return true;
+  if (firstGroup.startsWith("ff")) return true;
+  return false;
+}
+var IPV4_MAPPED_IPV6 = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/;
+function ipv4MappedAddress(host) {
+  const match = IPV4_MAPPED_IPV6.exec(normalizeIPv6Literal(host));
+  return match?.[1] ?? null;
+}
+function resolveHost(host, opts) {
+  const h = host.toLowerCase();
+  if (isValidIPv4(h)) {
+    if (isPrivateOrReservedIPv4(h)) return null;
+    return { kind: "ip", trust: "ip", name: h, category: "Unresolved host", entry: null };
+  }
+  if (isValidIPv6(h)) {
+    if (isPrivateOrReservedIPv6(h)) return null;
+    return { kind: "ip", trust: "ip", name: h, category: "Unresolved host", entry: null };
+  }
+  const mappedIPv4 = ipv4MappedAddress(h);
+  if (mappedIPv4 !== null && isValidIPv4(mappedIPv4)) {
+    if (isPrivateOrReservedIPv4(mappedIPv4)) return null;
+    return { kind: "ip", trust: "ip", name: h, category: "Unresolved host", entry: null };
+  }
+  if (EXCLUDED_HOST_SUFFIXES.some((suffix) => hostMatchesSuffix(h, suffix))) return null;
+  const entry = PROVIDER_REGISTRY.find(
+    (p) => p.hostSuffixes.some((suffix) => hostMatchesSuffix(h, suffix))
+  );
+  if (entry) {
+    return {
+      kind: "provider",
+      trust: "recognized",
+      name: entry.name,
+      category: entry.category,
+      entry
+    };
+  }
+  const internalDomains = opts?.internalDomains ?? [];
+  const isInternal = !h.includes(".") && !h.includes(":") || INTERNAL_TLDS.some((tld) => hostMatchesSuffix(h, tld)) || internalDomains.some((domain2) => hostMatchesSuffix(h, domain2.toLowerCase()));
+  if (isInternal) {
+    return {
+      kind: "internal",
+      trust: "internal",
+      name: h,
+      category: "Internal services",
+      entry: null
+    };
+  }
+  return {
+    kind: "external",
+    trust: "unverified",
+    name: h,
+    category: "External domain",
+    entry: null
+  };
+}
+function resolveSdk(ecosystem, pkg) {
+  for (const entry of PROVIDER_REGISTRY) {
+    const idents = entry.sdks[ecosystem];
+    if (idents === void 0) continue;
+    if (idents.some((ident) => sdkMatches(ecosystem, pkg, ident))) return entry;
+  }
+  return null;
+}
+function sdkMatches(ecosystem, pkg, ident) {
+  switch (ecosystem) {
+    case "nuget":
+      return pkg.toLowerCase() === ident.toLowerCase();
+    case "pypi":
+      return normalizePypi(pkg) === normalizePypi(ident);
+    case "go":
+      return pkg === ident || pkg.startsWith(`${ident}/`);
+    case "maven":
+      return pkg === ident || pkg.startsWith(`${ident}.`);
+    default:
+      return pkg === ident;
+  }
+}
+function normalizePypi(name) {
+  return name.toLowerCase().replace(/[-_.]+/g, "-");
+}
+
+// ../../packages/detections/src/egress/extract.ts
+var EGRESS_CODE_EXTENSIONS = /* @__PURE__ */ new Set([
+  ".ts",
+  ".tsx",
+  ".js",
+  ".jsx",
+  ".mjs",
+  ".cjs",
+  ".py",
+  ".java",
+  ".rb",
+  ".cs",
+  ".php",
+  ".go",
+  ".rs"
+]);
+var SNIPPET_MAX = 200;
+var MASK = "\u2022\u2022\u2022\u2022";
+var URL_CANDIDATE = /(https?|wss?|sftp|grpcs?|smtp):\/\/(?:[^\s'"`<>()[\]{},;]|\$\{[^}\s]{1,64}\}|\{[A-Za-z_]\w{0,63}\}|%[sd])+/gi;
+var PLACEHOLDER = /\$\{[^}\s]{1,64}\}|\{[A-Za-z_]\w{0,63}\}|%[sd]/g;
+var VAR_TOKEN = "${var}";
+var VAR_SENTINEL = "akaegressvar0";
+var TRAILING_PUNCTUATION = /[.,;:'"]+$/;
+var TRANSPORT_BY_SCHEME = {
+  http: "http",
+  https: "https",
+  ws: "ws",
+  wss: "wss",
+  sftp: "sftp",
+  grpc: "grpc",
+  grpcs: "grpc",
+  smtp: "smtp"
+};
+var BEFORE_WINDOW = 200;
+var AFTER_WINDOW = 300;
+var VERB_METHOD_OPENER = /\.\s*(get|post|put|delete)\s*\(\s*['"`]*$/i;
+var VERB_FIRST_ARGUMENT = /["'](GET|POST|PUT|DELETE)["']\s*,([^)\]};]{0,150})$/i;
+var OPTIONS_METHOD = /method\s*[:=]\s*['"](GET|POST|PUT|DELETE)/i;
+var CLIENT_OPENER = /\b(fetch|urlopen|got|ky)\s*\(\s*['"`]*$/i;
+var ANY_METHOD_KEY = /\bmethod\s*[:=]/i;
+var STATEMENT_BREAK = /;|\n\s*(?:(?:const|let|var|val|function|func|fn|def|class|return|export|import|if|for|while|switch|try|public|private)\b|\w+\s*=[^=])/;
+var IPV4_CANDIDATE = /\b(?:\d{1,3}\.){3}\d{1,3}(?::\d{1,5})?\b/g;
+var IP_HOST_CONTEXT = /\b(host|hostname|server|address|endpoint|ip|url|uri)\b/i;
+var IP_SFTP_CONTEXT = /\bs(ftp|cp|sh)\b/i;
+var IP_SMTP_CONTEXT = /\b(smtp|mail)\b/i;
+var SECRET_KEY_NAMES = "api[_-]?key|apikey|private[_-]?key|access[_-]?key|access[_-]?token|token|secret|credentials?|password|passwd|pwd|authorization|sig|signature|sas|assertion";
+var AUTH_SCHEMES = "Bearer|Basic|Token|Digest|ApiKey|SSWS|AWS4-HMAC-SHA256";
+var USERINFO = /:\/\/[^@/\s]+@/g;
+var SECRET_VALUE = new RegExp(
+  `((?:${SECRET_KEY_NAMES})['"\`]?\\s*[:=]\\s*['"\`]?)(?!(?:${AUTH_SCHEMES})[\\s'"\`])[^\\s'"\`&]+`,
+  "gi"
+);
+var AUTH_SCHEME_VALUE = new RegExp(
+  `((?:${SECRET_KEY_NAMES})['"\`]?\\s*[:=]\\s*['"\`]?)(${AUTH_SCHEMES})\\s+[^\\s'"\`]+`,
+  "gi"
+);
+var BEARER_TOKEN = /\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi;
+var WEBHOOK_SECRET_PATHS = [
+  { hosts: ["hooks.slack.com"], prefix: "/services/" },
+  {
+    hosts: ["discord.com", "discordapp.com", "ptb.discord.com", "canary.discord.com"],
+    prefix: "/api/webhooks/"
+  },
+  { hosts: ["hooks.zapier.com"], prefix: "/hooks/" },
+  { hosts: ["outlook.office.com", "outlook.office365.com"], prefix: "/webhook/" }
+];
+function escapeRegExp(literal2) {
+  return literal2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+var WEBHOOK_URL = new RegExp(
+  `(https?://(?:${WEBHOOK_SECRET_PATHS.flatMap(
+    (entry) => entry.hosts.map((host) => `${escapeRegExp(host)}${escapeRegExp(entry.prefix)}`)
+  ).join("|")}))[^\\s'"\`<>()[\\]{},;]+`,
+  "gi"
+);
+function maskWebhookPath(host, pathname) {
+  for (const entry of WEBHOOK_SECRET_PATHS) {
+    if (entry.hosts.includes(host) && pathname.startsWith(entry.prefix)) {
+      return `${entry.prefix}${MASK}`;
+    }
+  }
+  return pathname;
+}
+var VENDORED_PATH = /(^|\/)(vendor|third_party|external)\//;
+function isVendoredPath(file2) {
+  return VENDORED_PATH.test(file2);
+}
+function redactLine(line) {
+  return line.trim().replace(USERINFO, "://").replace(WEBHOOK_URL, `$1${MASK}`).replace(SECRET_VALUE, `$1${MASK}`).replace(AUTH_SCHEME_VALUE, `$1$2 ${MASK}`).replace(BEARER_TOKEN, `Bearer ${MASK}`);
+}
+function redactSnippet(line, anchor = 0) {
+  const redacted = redactLine(line);
+  if (redacted.length <= SNIPPET_MAX) return redacted;
+  const lead = line.length - line.trimStart().length;
+  const trimmed = line.trim();
+  const mapped = redacted.length === trimmed.length ? anchor - lead : redactLine(trimmed.slice(0, Math.max(0, anchor - lead))).length;
+  const start = Math.min(
+    Math.max(0, mapped - Math.floor(SNIPPET_MAX / 2)),
+    redacted.length - SNIPPET_MAX
+  );
+  return redacted.slice(start, start + SNIPPET_MAX);
+}
+function extractEgress(text) {
+  const lineStarts = lineStartOffsets(text);
+  const urlSpans = [];
+  const hits = [];
+  const lineTextOf = memoizeByLine((index) => lineTextAt(text, lineStarts, index));
+  const ipContextOf = memoizeByLine((index) => ipLineContext(lineTextOf(index)));
+  const snippetAt = (index, offset) => redactSnippet(lineTextOf(index), offset - (lineStarts[index] ?? 0));
+  for (const match of text.matchAll(URL_CANDIDATE)) {
+    const start = match.index;
+    const matched = match[0];
+    urlSpans.push([start, start + matched.length]);
+    const scheme = match[1];
+    if (scheme === void 0) continue;
+    const candidate = matched.replace(TRAILING_PUNCTUATION, "");
+    if (candidate === "") continue;
+    const parsed = parseCandidate(candidate, scheme);
+    if (parsed === null) continue;
+    const index = lineIndexAt(lineStarts, start);
+    hits.push({
+      ...parsed,
+      method: inferMethod(text, start, start + matched.length),
+      line: index + 1,
+      snippet: snippetAt(index, start)
+    });
+  }
+  for (const match of text.matchAll(IPV4_CANDIDATE)) {
+    const start = match.index;
+    if (isInsideSpan(urlSpans, start)) continue;
+    const index = lineIndexAt(lineStarts, start);
+    const parsed = parseBareIp(match[0], ipContextOf(index));
+    if (parsed === null) continue;
+    hits.push({ ...parsed, method: "REF", line: index + 1, snippet: snippetAt(index, start) });
+  }
+  return hits.sort(compareHits);
+}
+function parseCandidate(candidate, scheme) {
+  const transport = TRANSPORT_BY_SCHEME[scheme.toLowerCase()];
+  if (transport === void 0) return null;
+  let placeholders2 = 0;
+  const normalized = candidate.replace(PLACEHOLDER, () => {
+    placeholders2 += 1;
+    return VAR_TOKEN;
+  });
+  let parsed;
+  try {
+    parsed = new URL(normalized.split(VAR_TOKEN).join(VAR_SENTINEL));
+  } catch {
+    return null;
+  }
+  const host = parsed.hostname.toLowerCase();
+  if (host === "" || host.includes(VAR_SENTINEL)) return null;
+  const authority = parsed.host.toLowerCase();
+  const path = maskWebhookPath(host, parsed.pathname);
+  const url2 = `${transport}://${authority}${path}`.split(VAR_SENTINEL).join(VAR_TOKEN);
+  return {
+    url: url2,
+    host,
+    port: parsed.port === "" ? null : Number(parsed.port),
+    transport,
+    template: placeholders2 > 0
+  };
+}
+function parseBareIp(candidate, context) {
+  const [address, port] = splitPort(candidate);
+  if (!isValidIPv4(address) || isPrivateOrReservedIPv4(address)) return null;
+  if (!context.named) return null;
+  const { transport } = context;
+  return {
+    url: `${transport}://${address}${port === null ? "" : `:${String(port)}`}`,
+    host: address,
+    port,
+    transport,
+    template: false
+  };
+}
+function ipLineContext(line) {
+  const context = identifierWords(line);
+  let transport = "http";
+  if (IP_SFTP_CONTEXT.test(context)) transport = "sftp";
+  else if (IP_SMTP_CONTEXT.test(context)) transport = "smtp";
+  return { named: IP_HOST_CONTEXT.test(context), transport };
+}
+function isInsideSpan(spans, offset) {
+  let low = 0;
+  let high = spans.length - 1;
+  let found = -1;
+  while (low <= high) {
+    const mid = Math.floor((low + high) / 2);
+    const span2 = spans[mid];
+    if (span2 === void 0) break;
+    if (span2[0] <= offset) {
+      found = mid;
+      low = mid + 1;
+    } else {
+      high = mid - 1;
+    }
+  }
+  const span = found === -1 ? void 0 : spans[found];
+  return span !== void 0 && offset < span[1];
+}
+function splitPort(candidate) {
+  const colon = candidate.indexOf(":");
+  if (colon === -1) return [candidate, null];
+  return [candidate.slice(0, colon), Number(candidate.slice(colon + 1))];
+}
+function identifierWords(line) {
+  return line.replace(/[_-]+/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2");
+}
+function inferMethod(text, start, end) {
+  const before = text.slice(Math.max(0, start - BEFORE_WINDOW), start);
+  const after = text.slice(end, end + AFTER_WINDOW);
+  const opener = VERB_METHOD_OPENER.exec(before);
+  if (opener?.[1] !== void 0) return verbOf(opener[1]);
+  const firstArgument = VERB_FIRST_ARGUMENT.exec(before);
+  if (firstArgument?.[1] !== void 0 && !STATEMENT_BREAK.test(firstArgument[2] ?? "")) {
+    return verbOf(firstArgument[1]);
+  }
+  const options = OPTIONS_METHOD.exec(after);
+  if (options?.[1] !== void 0 && !STATEMENT_BREAK.test(after.slice(0, options.index))) {
+    return verbOf(options[1]);
+  }
+  if (CLIENT_OPENER.test(before)) {
+    const close = callCloseIndex(after);
+    if (close !== -1 && isSoleArgument(after, close) && !ANY_METHOD_KEY.test(after.slice(0, close))) {
+      return "GET";
+    }
+  }
+  return "REF";
+}
+function verbOf(raw) {
+  return raw.toUpperCase();
+}
+function callCloseIndex(span) {
+  let depth = 1;
+  for (let i = 0; i < span.length; i += 1) {
+    const char = span[i];
+    if (char === "(") depth += 1;
+    else if (char === ")") {
+      depth -= 1;
+      if (depth === 0) return i + 1;
+    }
+  }
+  return -1;
+}
+function isSoleArgument(span, close) {
+  const between = span.slice(0, close - 1).trimEnd();
+  const withoutTrailingComma = between.endsWith(",") ? between.slice(0, -1) : between;
+  return !withoutTrailingComma.includes(",");
+}
+function memoizeByLine(compute) {
+  const cache = /* @__PURE__ */ new Map();
+  return (index) => {
+    const cached2 = cache.get(index);
+    if (cached2 !== void 0) return cached2;
+    const value = compute(index);
+    cache.set(index, value);
+    return value;
+  };
+}
+function lineStartOffsets(text) {
+  const starts = [0];
+  for (let i = 0; i < text.length; i += 1) {
+    if (text[i] === "\n") starts.push(i + 1);
+  }
+  return starts;
+}
+function lineIndexAt(starts, offset) {
+  let low = 0;
+  let high = starts.length - 1;
+  while (low < high) {
+    const mid = Math.ceil((low + high) / 2);
+    if ((starts[mid] ?? 0) <= offset) low = mid;
+    else high = mid - 1;
+  }
+  return low;
+}
+function lineTextAt(text, starts, index) {
+  const start = starts[index] ?? 0;
+  const next = starts[index + 1];
+  return next === void 0 ? text.slice(start) : text.slice(start, next - 1);
+}
+function compareHits(a, b) {
+  if (a.line !== b.line) return a.line - b.line;
+  if (a.url !== b.url) return a.url < b.url ? -1 : 1;
+  return 0;
+}
+
+// ../../packages/detections/src/egress/manifests.ts
+var LOCKFILE_BASENAMES = /* @__PURE__ */ new Set([
+  "package-lock.json",
+  "yarn.lock",
+  "pnpm-lock.yaml",
+  "Cargo.lock",
+  "composer.lock",
+  "Gemfile.lock",
+  "poetry.lock",
+  "go.sum",
+  "packages.lock.json"
+]);
+var EXACT_KIND_BY_BASENAME = {
+  "package.json": "package.json",
+  "requirements.txt": "requirements.txt",
+  "pyproject.toml": "pyproject.toml",
+  "go.mod": "go.mod",
+  "pom.xml": "pom.xml",
+  "build.gradle": "build.gradle",
+  "build.gradle.kts": "build.gradle",
+  Gemfile: "Gemfile",
+  "Cargo.toml": "Cargo.toml",
+  "composer.json": "composer.json",
+  "packages.config": "packages.config"
+};
+function manifestKindOf(basename6) {
+  if (LOCKFILE_BASENAMES.has(basename6)) return null;
+  const exact = Object.hasOwn(EXACT_KIND_BY_BASENAME, basename6) ? EXACT_KIND_BY_BASENAME[basename6] : void 0;
+  if (exact !== void 0) return exact;
+  if (basename6.endsWith(".csproj")) return "csproj";
+  return null;
+}
+function extractManifestSdks(text, kind) {
+  switch (kind) {
+    case "package.json":
+      return extractPackageJson(text);
+    case "requirements.txt":
+      return extractRequirementsTxt(text);
+    case "pyproject.toml":
+      return extractPyprojectToml(text);
+    case "go.mod":
+      return extractGoMod(text);
+    case "pom.xml":
+      return extractPomXml(text);
+    case "build.gradle":
+      return extractBuildGradle(text);
+    case "Gemfile":
+      return extractGemfile(text);
+    case "Cargo.toml":
+      return extractCargoToml(text);
+    case "composer.json":
+      return extractComposerJson(text);
+    case "csproj":
+      return extractCsproj(text);
+    case "packages.config":
+      return extractPackagesConfig(text);
+    default:
+      return [];
+  }
+}
+function makeHit(ecosystem, pkg, line, rawLine) {
+  return { ecosystem, pkg, line, snippet: redactSnippet(rawLine) };
+}
+function extractPackageJson(text) {
+  const parsed = parseJson(text);
+  if (parsed === null) return [];
+  const seen = /* @__PURE__ */ new Set();
+  const hits = [];
+  for (const pkg of objectKeys(parsed.dependencies)) {
+    seen.add(pkg);
+    hits.push(hitAtQuotedKey("npm", pkg, text, "dependencies"));
+  }
+  for (const pkg of objectKeys(parsed.optionalDependencies)) {
+    if (seen.has(pkg)) continue;
+    seen.add(pkg);
+    hits.push(hitAtQuotedKey("npm", pkg, text, "optionalDependencies"));
+  }
+  return hits;
+}
+var REQUIREMENTS_NAME = /^\s*([A-Za-z0-9][\w.-]*)/;
+function extractRequirementsTxt(text) {
+  const hits = [];
+  eachLine(text, (rawLine, lineNumber) => {
+    const match = REQUIREMENTS_NAME.exec(rawLine);
+    const name = match?.[1];
+    if (name === void 0) return;
+    hits.push(makeHit("pypi", normalizePypi(name), lineNumber, rawLine));
+  });
+  return hits;
+}
+var TOML_SECTION = /^\s*\[([^\]]+)\]\s*$/;
+var TOML_QUOTED = /"([^"]*)"|'([^']*)'/g;
+var PEP508_NAME = /^([A-Za-z0-9][\w.-]*)/;
+var POETRY_KEY = /^\s*([A-Za-z0-9][\w.-]*)\s*=/;
+function extractPyprojectToml(text) {
+  const hits = [];
+  let section = "";
+  let inDependenciesArray = false;
+  eachLine(text, (rawLine, lineNumber) => {
+    const sectionMatch = TOML_SECTION.exec(rawLine);
+    if (sectionMatch) {
+      section = sectionMatch[1]?.trim() ?? "";
+      inDependenciesArray = false;
+      return;
+    }
+    if (!inDependenciesArray && /^\s*dependencies\s*=\s*\[/.test(rawLine)) {
+      inDependenciesArray = true;
+    }
+    if (inDependenciesArray) {
+      for (const spec of quotedStrings(rawLine)) {
+        const name = PEP508_NAME.exec(spec)?.[1];
+        if (name !== void 0)
+          hits.push(makeHit("pypi", normalizePypi(name), lineNumber, rawLine));
+      }
+      if (rawLine.includes("]")) inDependenciesArray = false;
+      return;
+    }
+    if (section === "tool.poetry.dependencies") {
+      const key = POETRY_KEY.exec(rawLine)?.[1];
+      if (key !== void 0 && key !== "python") {
+        hits.push(makeHit("pypi", normalizePypi(key), lineNumber, rawLine));
+      }
+    }
+  });
+  return hits;
+}
+function quotedStrings(line) {
+  return [...line.matchAll(TOML_QUOTED)].map((m) => m[1] ?? m[2] ?? "");
+}
+var GO_BLOCK_OPEN = /^\s*(require|exclude|replace|retract)\s*\(/;
+var GO_BLOCK_CLOSE = /^\s*\)/;
+var GO_REQUIRE_SINGLE_LINE = /^\s*require\s+([\w./-]+)\s+v\d/;
+var GO_MODULE_VERSION_LINE = /^\s*([\w./-]+)\s+v\d/;
+function extractGoMod(text) {
+  const hits = [];
+  let blockKeyword = null;
+  eachLine(text, (rawLine, lineNumber) => {
+    if (blockKeyword === null) {
+      const open = GO_BLOCK_OPEN.exec(rawLine)?.[1];
+      if (open !== void 0) {
+        blockKeyword = open;
+        return;
+      }
+      const path = GO_REQUIRE_SINGLE_LINE.exec(rawLine)?.[1];
+      if (path !== void 0) hits.push(makeHit("go", path, lineNumber, rawLine));
+      return;
+    }
+    if (GO_BLOCK_CLOSE.test(rawLine)) {
+      blockKeyword = null;
+      return;
+    }
+    if (blockKeyword === "require") {
+      const path = GO_MODULE_VERSION_LINE.exec(rawLine)?.[1];
+      if (path !== void 0) hits.push(makeHit("go", path, lineNumber, rawLine));
+    }
+  });
+  return hits;
+}
+var POM_CONTEXT_TAGS = /* @__PURE__ */ new Set([
+  "project",
+  "parent",
+  "dependencyManagement",
+  "dependencies",
+  "dependency",
+  "build",
+  "plugins",
+  "plugin",
+  "exclusions",
+  "exclusion"
+]);
+var XML_TAG = /<(\/?)([A-Za-z][\w.-]*)([^<>]*)>/g;
+var LEADING_TEXT = /^([^<]*)/;
+function extractPomXml(text) {
+  const hits = [];
+  const stack = [];
+  let inComment = false;
+  eachLine(text, (rawLine, lineNumber) => {
+    const stripped = stripXmlComments(rawLine, inComment);
+    inComment = stripped.inComment;
+    const visible = stripped.visible;
+    for (const match of visible.matchAll(XML_TAG)) {
+      const name = match[2];
+      if (name === void 0) continue;
+      const closing = match[1] === "/";
+      const rest = match[3] ?? "";
+      const selfClosing = rest.trimEnd().endsWith("/");
+      if (closing) {
+        if (POM_CONTEXT_TAGS.has(name) && stack[stack.length - 1] === name) stack.pop();
+        continue;
+      }
+      if (selfClosing) continue;
+      if (name === "groupId") {
+        const after = visible.slice(match.index + match[0].length);
+        const value = LEADING_TEXT.exec(after)?.[1]?.trim() ?? "";
+        if (value !== "" && isProjectDependencyGroupId(stack)) {
+          hits.push(makeHit("maven", value, lineNumber, rawLine));
+        }
+        continue;
+      }
+      if (POM_CONTEXT_TAGS.has(name)) stack.push(name);
+    }
+  });
+  return hits;
+}
+function isProjectDependencyGroupId(stack) {
+  return stack[stack.length - 1] === "dependency" && stack[stack.length - 2] === "dependencies" && !stack.includes("dependencyManagement") && !stack.includes("parent") && !stack.includes("build");
+}
+var GRADLE_DEPENDENCY = /\b(?:implementation|api|compile)\b\s*[('"]*(?:platform\s*\(\s*['"])?([\w.-]+):[\w.-]+/g;
+var LINE_COMMENT = /^\s*\/\//;
+function extractBuildGradle(text) {
+  const hits = [];
+  eachLine(text, (rawLine, lineNumber) => {
+    if (LINE_COMMENT.test(rawLine)) return;
+    for (const match of rawLine.matchAll(GRADLE_DEPENDENCY)) {
+      const groupId = match[1];
+      if (groupId !== void 0) hits.push(makeHit("maven", groupId, lineNumber, rawLine));
+    }
+  });
+  return hits;
+}
+var GEMFILE_DEPENDENCY = /^\s*gem\s+['"]([\w-]+)['"]/;
+function extractGemfile(text) {
+  const hits = [];
+  eachLine(text, (rawLine, lineNumber) => {
+    const name = GEMFILE_DEPENDENCY.exec(rawLine)?.[1];
+    if (name !== void 0) hits.push(makeHit("rubygems", name, lineNumber, rawLine));
+  });
+  return hits;
+}
+var CARGO_KEY = /^([A-Za-z0-9_-]+)\s*=/;
+function extractCargoToml(text) {
+  const hits = [];
+  let mode = "none";
+  eachLine(text, (rawLine, lineNumber) => {
+    const sectionMatch = TOML_SECTION.exec(rawLine);
+    if (sectionMatch) {
+      const name = sectionMatch[1]?.trim() ?? "";
+      if (name === "dependencies") {
+        mode = "plain";
+      } else if (name.startsWith("dependencies.")) {
+        mode = "dotted";
+        const crate = name.slice("dependencies.".length);
+        if (crate !== "") hits.push(makeHit("cargo", crate, lineNumber, rawLine));
+      } else {
+        mode = "none";
+      }
+      return;
+    }
+    if (mode === "plain") {
+      const crate = CARGO_KEY.exec(rawLine)?.[1];
+      if (crate !== void 0) hits.push(makeHit("cargo", crate, lineNumber, rawLine));
+    }
+  });
+  return hits;
+}
+function extractComposerJson(text) {
+  const parsed = parseJson(text);
+  if (parsed === null) return [];
+  const pkgs = objectKeys(parsed.require).filter((pkg) => pkg !== "php" && !pkg.startsWith("ext-"));
+  return pkgs.map((pkg) => hitAtQuotedKey("composer", pkg, text, "require"));
+}
+var CSPROJ_PACKAGE_REFERENCE = /<PackageReference\s+Include="([^"]+)"/;
+function extractCsproj(text) {
+  const hits = [];
+  let inComment = false;
+  eachLine(text, (rawLine, lineNumber) => {
+    const stripped = stripXmlComments(rawLine, inComment);
+    inComment = stripped.inComment;
+    const name = CSPROJ_PACKAGE_REFERENCE.exec(stripped.visible)?.[1];
+    if (name !== void 0) hits.push(makeHit("nuget", name, lineNumber, rawLine));
+  });
+  return hits;
+}
+var PACKAGES_CONFIG_PACKAGE = /<package\s+id="([^"]+)"/;
+function extractPackagesConfig(text) {
+  const hits = [];
+  let inComment = false;
+  eachLine(text, (rawLine, lineNumber) => {
+    const stripped = stripXmlComments(rawLine, inComment);
+    inComment = stripped.inComment;
+    const name = PACKAGES_CONFIG_PACKAGE.exec(stripped.visible)?.[1];
+    if (name !== void 0) hits.push(makeHit("nuget", name, lineNumber, rawLine));
+  });
+  return hits;
+}
+function stripXmlComments(line, inComment) {
+  let visible = "";
+  let rest = line;
+  let comment = inComment;
+  for (; ; ) {
+    if (comment) {
+      const end = rest.indexOf("-->");
+      if (end === -1) return { visible, inComment: true };
+      rest = rest.slice(end + 3);
+      comment = false;
+      continue;
+    }
+    const start = rest.indexOf("<!--");
+    if (start === -1) return { visible: visible + rest, inComment: false };
+    visible += rest.slice(0, start);
+    rest = rest.slice(start + 4);
+    comment = true;
+  }
+}
+function eachLine(text, fn) {
+  const lines = text.split("\n");
+  for (let i = 0; i < lines.length; i += 1) {
+    fn(lines[i] ?? "", i + 1);
+  }
+}
+function parseJson(text) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  if (typeof parsed !== "object" || parsed === null) return null;
+  const record2 = parsed;
+  return {
+    dependencies: record2.dependencies,
+    optionalDependencies: record2.optionalDependencies,
+    require: record2.require
+  };
+}
+function objectKeys(value) {
+  if (typeof value !== "object" || value === null) return [];
+  return Object.keys(value);
+}
+function hitAtQuotedKey(ecosystem, pkg, text, sectionKey) {
+  const sectionStart = text.indexOf(`"${sectionKey}"`);
+  const searchFrom = sectionStart === -1 ? 0 : sectionStart;
+  const index = text.indexOf(`"${pkg}"`, searchFrom);
+  if (index === -1) return makeHit(ecosystem, pkg, 1, pkg);
+  return makeHit(ecosystem, pkg, lineNumberAt(text, index), lineContaining(text, index));
+}
+function lineNumberAt(text, index) {
+  let line = 1;
+  for (let i = 0; i < index; i += 1) {
+    if (text[i] === "\n") line += 1;
+  }
+  return line;
+}
+function lineContaining(text, index) {
+  const start = text.lastIndexOf("\n", index) + 1;
+  const end = text.indexOf("\n", index);
+  return text.slice(start, end === -1 ? text.length : end);
+}
+
+// ../../packages/detections/src/egress/resolve.ts
+var VERB_METHODS = /* @__PURE__ */ new Set(["GET", "POST", "PUT", "DELETE"]);
+function resolveEgress(files, opts) {
+  const resolved = [];
+  for (const file2 of files) {
+    for (const endpoint of file2.endpoints) {
+      const hit = resolveEndpointHit(file2, endpoint, opts);
+      if (hit !== null) resolved.push(hit);
+    }
+    for (const sdkHit of file2.sdkHits) {
+      const hit = resolveSdkHit(file2, sdkHit);
+      if (hit !== null) resolved.push(hit);
+    }
+  }
+  return dropRefsWithVerbSibling(dedupeExact(resolved));
+}
+function resolveEndpointHit(file2, endpoint, opts) {
+  const resolution = resolveHost(endpoint.host, opts);
+  if (resolution === null) return null;
+  const isProvider = resolution.kind === "provider";
+  return {
+    host: endpoint.host,
+    kind: resolution.kind,
+    name: resolution.name,
+    category: resolution.category,
+    trust: resolution.trust,
+    network: isProvider ? null : { port: endpoint.port, geo: null, ptr: null },
+    method: endpoint.method,
+    transport: endpoint.transport,
+    url: endpoint.url,
+    template: endpoint.template,
+    dataClass: isProvider ? resolution.entry?.defaultDataClasses[0] ?? "none" : "none",
+    site: {
+      file: file2.file,
+      line: endpoint.line,
+      snippet: endpoint.snippet,
+      dynamic: endpoint.template,
+      vendored: file2.vendored
+    }
+  };
+}
+function resolveSdkHit(file2, sdkHit) {
+  const entry = resolveSdk(sdkHit.ecosystem, sdkHit.pkg);
+  if (entry === null) return null;
+  return {
+    host: new URL(entry.apiBase).hostname,
+    kind: "provider",
+    name: entry.name,
+    category: entry.category,
+    trust: "recognized",
+    network: null,
+    method: "SDK",
+    transport: "https",
+    url: entry.apiBase,
+    template: false,
+    dataClass: entry.defaultDataClasses[0] ?? "none",
+    site: {
+      file: file2.file,
+      line: sdkHit.line,
+      snippet: sdkHit.snippet,
+      dynamic: false,
+      vendored: file2.vendored
+    }
+  };
+}
+function dedupeExact(hits) {
+  const seen = /* @__PURE__ */ new Set();
+  const deduped = [];
+  for (const hit of hits) {
+    const key = exactKey(hit);
+    if (seen.has(key)) continue;
+    seen.add(key);
+    deduped.push(hit);
+  }
+  return deduped;
+}
+function exactKey(hit) {
+  return JSON.stringify([hit.host, hit.method, hit.url, hit.site.file, hit.site.line]);
+}
+function dropRefsWithVerbSibling(hits) {
+  const verbPairs = /* @__PURE__ */ new Set();
+  for (const hit of hits) {
+    if (VERB_METHODS.has(hit.method)) verbPairs.add(pairKey(hit));
+  }
+  return hits.filter((hit) => hit.method !== "REF" || !verbPairs.has(pairKey(hit)));
+}
+function pairKey(hit) {
+  return JSON.stringify([hit.host, hit.url]);
+}
+
+// ../../packages/detections/src/escape-regexp.ts
+function escapeRegExp2(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
+// ../../packages/detections/src/matchers/limits.ts
+var MAX_MATCHES_PER_RULE = 1e4;
+var MAX_REGEX_INPUT_LENGTH = 2e5;
+
+// ../../packages/detections/src/matchers/keyword.ts
+var KeywordMatcher2 = class {
+  match(text, rule) {
+    if (rule.matcher.type !== "keyword") return [];
+    const { keywords, caseSensitive } = rule.matcher;
+    const spans = [];
+    for (const kw of keywords) {
+      if (kw.length === 0) continue;
+      if (spans.length >= MAX_MATCHES_PER_RULE) break;
+      const re = new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
+      let m;
+      while ((m = re.exec(text)) !== null) {
+        spans.push({ start: m.index, end: m.index + m[0].length });
+        if (spans.length >= MAX_MATCHES_PER_RULE) break;
+      }
+    }
+    return spans;
+  }
+};
+
+// ../../packages/detections/src/matchers/regex.ts
+var RegexMatcher2 = class {
+  match(text, rule) {
+    if (rule.matcher.type !== "regex") return [];
+    const { pattern, flags, captureGroup } = rule.matcher;
+    const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
+    const scanText2 = text.length > MAX_REGEX_INPUT_LENGTH ? text.slice(0, MAX_REGEX_INPUT_LENGTH) : text;
+    const spans = [];
+    let m;
+    const maxIterations = scanText2.length + 1;
+    let iterations = 0;
+    while ((m = re.exec(scanText2)) !== null) {
+      if (++iterations > maxIterations) break;
+      const group = captureGroup != null ? m[captureGroup] : m[0];
+      if (m[0].length === 0) re.lastIndex++;
+      if (group && spans.length < MAX_MATCHES_PER_RULE) {
+        const groupIndices = captureGroup != null ? m.indices?.[captureGroup] : void 0;
+        const start = groupIndices ? groupIndices[0] : m.index;
+        spans.push({ start, end: start + group.length });
+      }
+      if (!flags.includes("g") || spans.length >= MAX_MATCHES_PER_RULE) break;
+    }
+    return spans;
+  }
+};
+
+// ../../packages/detections/src/validators/entropy.ts
+function shannonEntropy(str2) {
+  const freq = {};
+  for (const ch of str2) {
+    freq[ch] = (freq[ch] ?? 0) + 1;
+  }
+  let entropy = 0;
+  for (const count of Object.values(freq)) {
+    const p = count / str2.length;
+    entropy -= p * Math.log2(p);
+  }
+  return entropy;
+}
+function isHighEntropy(value, threshold = 3.5, minLength = 20) {
+  return value.length >= minLength && shannonEntropy(value) >= threshold;
+}
+
+// ../../packages/detections/src/validators/luhn.ts
+function luhnCheck(digits) {
+  const nums = digits.replace(/\D/g, "");
+  if (nums.length < 13) return false;
+  let sum = 0;
+  let isOdd = true;
+  for (let i = nums.length - 1; i >= 0; i--) {
+    let digit = parseInt(nums[i] ?? "0", 10);
+    if (!isOdd) {
+      digit *= 2;
+      if (digit > 9) digit -= 9;
+    }
+    sum += digit;
+    isOdd = !isOdd;
+  }
+  return sum % 10 === 0;
+}
+
+// ../../packages/detections/src/engine.ts
+var keywordMatcher = new KeywordMatcher2();
+var regexMatcher = new RegexMatcher2();
+var packs = /* @__PURE__ */ new Map();
+var POST_VALIDATORS = {
+  entropy: (value, config2) => isHighEntropy(value, numberOption(config2, "threshold"), numberOption(config2, "minLength")),
+  luhn: (value) => luhnCheck(value)
+};
+function numberOption(config2, key) {
+  const value = config2?.[key];
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function passesPostValidators(rule, value) {
+  const validators = rule.postValidators;
+  if (!validators || validators.length === 0) return true;
+  for (const ref of validators) {
+    const name = typeof ref === "string" ? ref : ref.name;
     const config2 = typeof ref === "string" ? void 0 : ref.config;
     const validate = POST_VALIDATORS[name];
     if (validate && !validate(value, config2)) return false;
@@ -23058,7 +24918,7 @@ function isCorroborated(candidate, candidates, text) {
     for (const label of labels) {
       const trimmed = label.trim();
       if (trimmed.length === 0) continue;
-      const re = new RegExp(`(?<![A-Za-z0-9])${escapeRegExp(trimmed)}(?![A-Za-z0-9])`, "i");
+      const re = new RegExp(`(?<![A-Za-z0-9])${escapeRegExp2(trimmed)}(?![A-Za-z0-9])`, "i");
       if (re.test(haystack)) return true;
     }
   }
@@ -23223,6 +25083,112 @@ var CONFIG_POSTURE_RULES = [
   }
 ];
 
+// ../../packages/detections/src/security/redos-probe.ts
+var BUDGET_MS = 100;
+var EXPONENTIAL_UNITS = [
+  "a",
+  "0",
+  " ",
+  "x",
+  "ab",
+  "a.",
+  "a-",
+  "a_",
+  "a@",
+  "a/",
+  "a:",
+  "a=",
+  "a;",
+  "aA0",
+  "	"
+];
+var EXPONENTIAL_PROBES = EXPONENTIAL_UNITS.flatMap(
+  (unit) => [23, 25].map((len) => unit.repeat(Math.ceil(len / unit.length)).slice(0, len) + "!")
+);
+var POLYNOMIAL_PROBES = ["abc-", "a.", "a ", "a=", "x", "0", "a@", "a/", "ab"].map(
+  (unit) => unit.repeat(1e4).slice(0, 4e4) + "!"
+);
+function literalPrefix(pattern) {
+  let prefix = "";
+  let i = 0;
+  if (pattern[i] === "^") i++;
+  while (i < pattern.length) {
+    const c = pattern[i];
+    if (c === void 0) break;
+    if (c === "\\") {
+      const next = pattern[i + 1];
+      if (next === "b" || next === "B") {
+        i += 2;
+        continue;
+      }
+      if (next === void 0 || /[dDwWsSnrtfv.]/.test(next)) break;
+      prefix += next;
+      i += 2;
+      continue;
+    }
+    if ("([{.*+?|)]}^$".includes(c)) break;
+    prefix += c;
+    i++;
+  }
+  return prefix;
+}
+function fuelChars(pattern) {
+  const fuel = /* @__PURE__ */ new Set();
+  for (const m of pattern.matchAll(/\[\^?([^\]]+)\]/g)) {
+    const body = m[1];
+    if (body === void 0) continue;
+    const range = /([A-Za-z0-9])-[A-Za-z0-9]/.exec(body);
+    const rangeStart = range?.[1];
+    if (rangeStart !== void 0) fuel.add(rangeStart);
+    else {
+      const literal2 = body.replace(/\\/g, "")[0];
+      if (literal2 !== void 0 && literal2 !== "^") fuel.add(literal2);
+    }
+  }
+  if (pattern.includes("\\w")) fuel.add("a");
+  if (pattern.includes("\\d")) fuel.add("0");
+  if (pattern.includes("\\s")) fuel.add(" ");
+  if (/(?<!\\)\./.test(pattern)) fuel.add("a");
+  if (fuel.size === 0) fuel.add("a");
+  return [...fuel];
+}
+function derivedProbes(pattern) {
+  const prefix = literalPrefix(pattern);
+  const fuel = fuelChars(pattern);
+  const terminators = ["!", "#", "~", "\n"];
+  const probes = [];
+  for (const f of fuel) {
+    for (const term of terminators) {
+      if (term === f) continue;
+      for (const len of [23, 25]) probes.push(prefix + f.repeat(len) + term);
+    }
+  }
+  return probes;
+}
+function probesFor(rule) {
+  const derived = rule.matcher.type === "regex" ? derivedProbes(rule.matcher.pattern) : [];
+  return [...derived, ...EXPONENTIAL_PROBES, ...POLYNOMIAL_PROBES];
+}
+function worstProbeMs(rule) {
+  let ms = 0;
+  let probe = "";
+  for (const text of probesFor(rule)) {
+    const start = performance.now();
+    scan(text, [rule]);
+    const elapsed = performance.now() - start;
+    if (elapsed > ms) {
+      ms = elapsed;
+      probe = text;
+    }
+    if (ms >= BUDGET_MS) break;
+  }
+  return { ms, probe };
+}
+function checkRuleTiming(rule) {
+  const { ms, probe } = worstProbeMs(rule);
+  return { safe: ms < BUDGET_MS, worstMs: ms, probe };
+}
+
 // ../../rules/code-flaws/auth-jwt-no-verify.json
 var auth_jwt_no_verify_default = {
   specVersion: 1,
@@ -25258,6 +27224,99 @@ function bundledDetections() {
 // ../../packages/plugin-sdk/src/repo.ts
 import { existsSync as existsSync3, readFileSync as readFileSync3, statSync } from "fs";
 import { basename, dirname, isAbsolute, join as join6, sep as sep2 } from "path";
+function resolveRepoIdentity(cwd) {
+  try {
+    const root = findGitRoot(cwd);
+    if (!root) return void 0;
+    const ctx = resolveGitContext(root);
+    const headRoot = ctx?.headRoot ?? root;
+    const url2 = ctx ? remoteUrl(ctx) : void 0;
+    return {
+      // The path fallback is normalized to posix separators (a no-op outside
+      // win32) so the persistence layer's `/`-separated checkout-path patterns
+      // (the ghost sweep + the read-side worktree filter) match it as written.
+      url: url2 ?? headRoot.split(sep2).join("/"),
+      name: (url2 ? slugFromUrl(url2) : void 0) ?? basename(headRoot)
+    };
+  } catch {
+    return void 0;
+  }
+}
+function resolveWorktreeRoot(cwd) {
+  try {
+    return findGitRoot(cwd);
+  } catch {
+    return void 0;
+  }
+}
+function findGitRoot(start) {
+  let dir = start;
+  for (; ; ) {
+    if (existsSync3(join6(dir, ".git"))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) return void 0;
+    dir = parent;
+  }
+}
+function resolveGitContext(root) {
+  const dotGit = join6(root, ".git");
+  try {
+    if (statSync(dotGit).isDirectory()) {
+      return { configPath: join6(dotGit, "config"), headRoot: root };
+    }
+  } catch {
+    return void 0;
+  }
+  const target = /^gitdir:\s*(.+?)\s*$/m.exec(safeRead(dotGit) ?? "")?.[1];
+  if (!target) return void 0;
+  const gitdir = isAbsolute(target) ? target : join6(root, target);
+  if (existsSync3(join6(gitdir, "config"))) {
+    return { configPath: join6(gitdir, "config"), headRoot: root };
+  }
+  const commonRaw = safeRead(join6(gitdir, "commondir"))?.trim();
+  if (!commonRaw) return void 0;
+  const commonGitDir = isAbsolute(commonRaw) ? commonRaw : join6(gitdir, commonRaw);
+  const headRoot = basename(commonGitDir) === ".git" ? dirname(commonGitDir) : root;
+  return { configPath: join6(commonGitDir, "config"), headRoot };
+}
+function safeRead(path) {
+  try {
+    return readFileSync3(path, "utf8");
+  } catch {
+    return void 0;
+  }
+}
+function remoteUrl(ctx) {
+  const config2 = safeRead(ctx.configPath);
+  if (config2 === void 0) return void 0;
+  const remotes = parseRemoteUrls(config2);
+  return remotes.origin ?? Object.values(remotes)[0];
+}
+function parseRemoteUrls(config2) {
+  const remotes = {};
+  let current;
+  for (const raw of config2.split("\n")) {
+    const line = raw.trim();
+    const header = /^\[remote "([^"]+)"\]$/.exec(line);
+    if (header) {
+      current = header[1];
+      continue;
+    }
+    if (line.startsWith("[")) {
+      current = void 0;
+      continue;
+    }
+    if (current && !(current in remotes)) {
+      const url2 = /^url\s*=\s*(.+)$/.exec(line)?.[1];
+      if (url2) remotes[current] = url2.trim();
+    }
+  }
+  return remotes;
+}
+function slugFromUrl(url2) {
+  const segment = url2.replace(/\.git$/, "").split(/[/:]/).filter(Boolean).pop();
+  return segment && segment.length > 0 ? segment : void 0;
+}
 
 // ../../packages/plugin-sdk/src/events.ts
 import { createHash as createHash3, randomUUID as randomUUID9 } from "crypto";
@@ -25299,10 +27358,97 @@ import { arch, hostname as hostname3, platform, release } from "os";
 import { mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
 import { join as join8 } from "path";
 
+// ../../packages/plugin-sdk/src/paths.ts
+import { readdirSync as readdirSync2, realpathSync as realpathSync2 } from "fs";
+import { basename as basename3, dirname as dirname2, sep as sep3 } from "path";
+function toPosix(path) {
+  return path.split(sep3).join("/");
+}
+var MAX_PROJECT_ROOT_LEVELS = 40;
+function findProjectRoot(startDir, recognizeMarker) {
+  let dir = startDir;
+  let root = null;
+  for (let level = 0; level < MAX_PROJECT_ROOT_LEVELS; level += 1) {
+    if (directoryHasMarker(dir, recognizeMarker)) root = dir;
+    const parent = dirname2(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return root ?? startDir;
+}
+function directoryHasMarker(dir, recognizeMarker) {
+  try {
+    for (const entry of readdirSync2(dir, { withFileTypes: true })) {
+      if (entry.isFile() && recognizeMarker(entry.name) != null) return true;
+    }
+  } catch {
+    return false;
+  }
+  return false;
+}
+function resolveNonGitProject(startDir, recognizeMarker) {
+  const projectRoot = findProjectRoot(startDir, recognizeMarker);
+  const realRoot = realpathSync2(projectRoot);
+  return { root: projectRoot, projectKey: `path:${realRoot}`, project: basename3(realRoot) };
+}
+
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
-import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync6 } from "fs";
-import { basename as basename3, join as join9, relative, sep as sep3 } from "path";
+import { existsSync as existsSync4, readdirSync as readdirSync3, readFileSync as readFileSync6 } from "fs";
+import { basename as basename4, join as join9, relative, sep as sep4 } from "path";
+
+// ../../packages/plugin-sdk/src/rule-quarantine.ts
+var PASS_BUDGET_MS = 2e3;
+function ruleProbeKey(rule) {
+  if (rule.matcher.type !== "regex") return void 0;
+  return contentHashOf(`${rule.matcher.pattern} ${rule.matcher.flags}`);
+}
+function warnQuarantined(rule, worstMs) {
+  const timing = worstMs === void 0 ? "not verified in time" : `${worstMs.toFixed(1)}ms`;
+  process.stderr.write(
+    `[aka] quarantined rule "${rule.id}": regex matcher exceeded the ReDoS timing budget (${timing}); excluded from this scan.
+`
+  );
+}
+async function filterUnsafeRules(rules, gateway, opts) {
+  const passBudgetMs = opts?.passBudgetMs ?? PASS_BUDGET_MS;
+  const passStart = performance.now();
+  const safe = [];
+  for (const rule of rules) {
+    const key = ruleProbeKey(rule);
+    if (key === void 0) {
+      safe.push(rule);
+      continue;
+    }
+    let cached2;
+    try {
+      cached2 = await gateway.getRuleProbeVerdict(key);
+    } catch {
+      cached2 = void 0;
+    }
+    if (cached2) {
+      if (cached2.verdict === "safe") safe.push(rule);
+      else warnQuarantined(rule, cached2.worstProbeMs);
+      continue;
+    }
+    if (performance.now() - passStart >= passBudgetMs) {
+      warnQuarantined(rule, void 0);
+      continue;
+    }
+    let isSafe;
+    let worstMs;
+    try {
+      ({ safe: isSafe, worstMs } = checkRuleTiming(rule));
+    } catch {
+      isSafe = false;
+      worstMs = Number.POSITIVE_INFINITY;
+    }
+    await gateway.setRuleProbeVerdict(key, isSafe ? "safe" : "quarantined", worstMs);
+    if (isSafe) safe.push(rule);
+    else warnQuarantined(rule, worstMs);
+  }
+  return safe;
+}
 
 // ../../packages/plugin-sdk/src/runtime.ts
 import { randomUUID as randomUUID10 } from "crypto";
@@ -25346,7 +27492,17 @@ function createPluginRuntime(gateway, settings, opts) {
         categoryActionIndex.set(p.target.category, p.action);
       }
     }
-    rules = bundle.rulesComplete ? bundle.rules ?? [] : [...getLoadedRules(), ...bundle.rules ?? []];
+    const bundledProbeKeys = new Set(
+      getLoadedRules().map(ruleProbeKey).filter((key) => key !== void 0)
+    );
+    const incoming = bundle.rules ?? [];
+    const ciVerified = incoming.filter((rule) => {
+      const key = ruleProbeKey(rule);
+      return key !== void 0 && bundledProbeKeys.has(key);
+    });
+    const needsGate = incoming.filter((rule) => !ciVerified.includes(rule));
+    const safeBundleRules = [...ciVerified, ...await filterUnsafeRules(needsGate, gateway)];
+    rules = bundle.rulesComplete ? safeBundleRules : [...getLoadedRules(), ...safeBundleRules];
     bundleExceptions = bundle.exceptions ?? [];
     initialized = true;
   }
@@ -25593,7 +27749,7 @@ import { mkdirSync as mkdirSync4, statSync as statSync3, writeFileSync as writeF
 import { join as join10 } from "path";
 
 // ../../packages/scanner/src/discover.ts
-import { readdirSync as readdirSync3 } from "fs";
+import { readdirSync as readdirSync4 } from "fs";
 import { join as join11 } from "path";
 
 // ../../packages/scanner/src/constants.ts
@@ -25623,7 +27779,7 @@ function discoverGitRepos(opts) {
     if (depth > maxDepth || excludePaths.has(dir)) return;
     let entries;
     try {
-      entries = readdirSync3(dir, { withFileTypes: true, encoding: "utf8" });
+      entries = readdirSync4(dir, { withFileTypes: true, encoding: "utf8" });
     } catch {
       return;
     }
@@ -25649,7 +27805,7 @@ function discoverGitRepos(opts) {
 }
 
 // ../../packages/scanner/src/render.ts
-import { basename as basename4, relative as relative2 } from "path";
+import { basename as basename5, relative as relative2 } from "path";
 var SEVERITY_ORDER2 = ["critical", "high", "medium", "low"];
 var SEVERITY_GLYPH = {
   critical: "\u2588",
@@ -25667,9 +27823,9 @@ function indent(text, spaces = 2) {
 }
 function table(headers, rows, gap = 3) {
   const widths = headers.map((h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length)));
-  const sep5 = " ".repeat(gap);
-  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep5);
-  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep5);
+  const sep6 = " ".repeat(gap);
+  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep6);
+  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep6);
   return [fmt(headers.map((h) => h.toUpperCase())), ruleLine, ...rows.map(fmt)].join("\n");
 }
 function metaBlock(rows) {
@@ -25729,7 +27885,7 @@ function renderMultiRepoSummary(summary, opts = {}) {
       "\n"
     );
   }
-  const repoRows = summary.repos.filter((r) => r.summary.scanned > 0 || r.summary.findings > 0).map((r) => [basename4(r.rootDir), String(r.summary.scanned), String(r.summary.findings)]);
+  const repoRows = summary.repos.filter((r) => r.summary.scanned > 0 || r.summary.findings > 0).map((r) => [basename5(r.rootDir), String(r.summary.scanned), String(r.summary.findings)]);
   const repoSection = repoRows.length > 0 ? ["", indent(table(["REPO", "SCANNED", "FINDINGS"], repoRows))].join("\n") : "";
   return [
     "\u2713 Multi-repo scan complete",
@@ -25742,8 +27898,8 @@ function renderMultiRepoSummary(summary, opts = {}) {
 }
 
 // ../../packages/scanner/src/scan.ts
-import { existsSync as existsSync5 } from "fs";
-import { isAbsolute as isAbsolute2, relative as relative4 } from "path";
+import { existsSync as existsSync5, readFileSync as readFileSync8 } from "fs";
+import { extname as extname2, isAbsolute as isAbsolute2, relative as relative4 } from "path";
 
 // ../../packages/plugin-runtime/src/standalone-gateway.ts
 import { randomUUID as randomUUID11 } from "crypto";
@@ -26014,6 +28170,13 @@ var StandaloneDataGateway = class {
     this.db.scanLedger.upsertEntries(entries);
     return Promise.resolve();
   }
+  getRuleProbeVerdict(ruleKey) {
+    return Promise.resolve(this.db.ruleProbeCache.getVerdict(ruleKey));
+  }
+  setRuleProbeVerdict(ruleKey, verdict, worstProbeMs2) {
+    this.db.ruleProbeCache.setVerdict(ruleKey, verdict, worstProbeMs2);
+    return Promise.resolve();
+  }
   openAtRestKeysForPath(path) {
     return Promise.resolve(this.db.resolutions.openAtRestKeysForPath(path));
   }
@@ -26024,6 +28187,12 @@ var StandaloneDataGateway = class {
     this.db.resolutions.insertResolution(input);
     return Promise.resolve();
   }
+  // Bare forward — no toggle read here. The plugin-path kill-switch is
+  // enforced by the caller, which already holds the parsed workspace
+  // settings; this class only ever sees `dataDir`, not the settings base.
+  recordProjectEgress(input) {
+    return Promise.resolve(this.db.shares.recordProjectEgress(input));
+  }
   close() {
     this.db.close();
     return Promise.resolve();
@@ -26040,16 +28209,13 @@ function resolveDataGateway(config2, meta3, gatewayFactory = standaloneGatewayFa
 import { randomUUID as randomUUID12 } from "crypto";
 var EXCEPTION_RETENTION_MS = 90 * 24 * 60 * 60 * 1e3;
 
-// ../../packages/scanner/src/resolve.ts
-function computeResolutions(prior, current) {
-  const cur = new Set(current);
-  return [...new Set(prior)].filter((k) => !cur.has(k));
-}
+// ../../packages/scanner/src/manifests.ts
+import { statSync as statSync5 } from "fs";
 
 // ../../packages/scanner/src/walk.ts
 var import_ignore2 = __toESM(require_ignore(), 1);
-import { readdirSync as readdirSync4, readFileSync as readFileSync7, statSync as statSync4 } from "fs";
-import { extname, join as join12, relative as relative3, sep as sep4 } from "path";
+import { readdirSync as readdirSync5, readFileSync as readFileSync7, statSync as statSync4 } from "fs";
+import { extname, join as join12, relative as relative3, sep as sep5 } from "path";
 var SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([
   ".ts",
   ".tsx",
@@ -26090,26 +28256,24 @@ function readIgnoreLayer(dir, filename) {
 function evaluate(layers, absPath, isDir) {
   let state = "unmatched";
   for (const layer of layers) {
-    const rel = relative3(layer.base, absPath).split(sep4).join("/") + (isDir ? "/" : "");
+    const rel = relative3(layer.base, absPath).split(sep5).join("/") + (isDir ? "/" : "");
     const verdict = layer.matcher.test(rel);
     if (verdict.ignored) state = "ignored";
     else if (verdict.unignored) state = "unignored";
   }
   return state;
 }
-function* walkSourceFiles(opts = {}) {
-  const rootDir = opts.rootDir ?? process.cwd();
-  const extensions = opts.extensions ?? SOURCE_EXTENSIONS;
-  const maxBytes = opts.maxFileSizeBytes ?? DEFAULT_MAX_BYTES;
+function* walkTree(rootDir, opts = {}) {
+  const trackGitignore = opts.trackGitignore ?? false;
   const rootSkipLayers = opts.excludePatterns && opts.excludePatterns.length > 0 ? [{ base: rootDir, matcher: (0, import_ignore2.default)().add(opts.excludePatterns) }] : [];
   function* visit(dir, markLayers, skipLayers, inIgnoredDir) {
     let dirents;
     try {
-      dirents = readdirSync4(dir, { withFileTypes: true, encoding: "utf8" });
+      dirents = readdirSync5(dir, { withFileTypes: true, encoding: "utf8" });
     } catch {
       return;
     }
-    const markLayer = inIgnoredDir ? void 0 : readIgnoreLayer(dir, ".gitignore");
+    const markLayer = trackGitignore && !inIgnoredDir ? readIgnoreLayer(dir, ".gitignore") : void 0;
     const dirMarkLayers = markLayer ? [...markLayers, markLayer] : markLayers;
     const skipLayer = readIgnoreLayer(dir, AKAIGNORE_FILENAME);
     const dirSkipLayers = skipLayer ? [...skipLayers, skipLayer] : skipLayers;
@@ -26121,57 +28285,137 @@ function* walkSourceFiles(opts = {}) {
         if (skipState !== "unignored" && (SKIP_DIRS.has(name) || skipState === "ignored")) {
           continue;
         }
-        const dirIgnored = inIgnoredDir || evaluate(dirMarkLayers, fullPath, true) === "ignored";
+        const dirIgnored = trackGitignore && (inIgnoredDir || evaluate(dirMarkLayers, fullPath, true) === "ignored");
         yield* visit(fullPath, dirMarkLayers, dirSkipLayers, dirIgnored);
         continue;
       }
       if (!entry.isFile()) continue;
-      const ext = extname(name);
-      if (!extensions.has(ext)) continue;
       if (evaluate(dirSkipLayers, fullPath, false) === "ignored") continue;
-      let size;
-      let mtime;
-      try {
-        const st = statSync4(fullPath);
-        size = st.size;
-        mtime = st.mtime;
-      } catch {
-        continue;
-      }
-      if (size > maxBytes) continue;
-      const meta3 = {
-        path: fullPath,
-        // Posix-separated like every stored relative path (and the ignore
-        // matching above) — native separators must not leak into the contract.
-        relativePath: relative3(rootDir, fullPath).split(sep4).join("/"),
-        mtime: mtime.toISOString(),
-        size,
-        gitignored: inIgnoredDir || evaluate(dirMarkLayers, fullPath, false) === "ignored"
-      };
-      if (opts.shouldRead && !opts.shouldRead(meta3)) continue;
-      let content;
-      try {
-        content = readFileSync7(fullPath, "utf8");
-      } catch {
-        continue;
-      }
       yield {
-        path: meta3.path,
-        relativePath: meta3.relativePath,
-        content,
-        mtime: meta3.mtime,
-        gitignored: meta3.gitignored
+        path: fullPath,
+        name,
+        gitignored: trackGitignore && (inIgnoredDir || evaluate(dirMarkLayers, fullPath, false) === "ignored")
       };
     }
   }
   yield* visit(rootDir, [], rootSkipLayers, false);
 }
+function* walkSourceFiles(opts = {}) {
+  const rootDir = opts.rootDir ?? process.cwd();
+  const extensions = opts.extensions ?? SOURCE_EXTENSIONS;
+  const maxBytes = opts.maxFileSizeBytes ?? DEFAULT_MAX_BYTES;
+  for (const file2 of walkTree(rootDir, {
+    excludePatterns: opts.excludePatterns,
+    trackGitignore: true
+  })) {
+    const ext = extname(file2.name);
+    if (!extensions.has(ext)) continue;
+    let size;
+    let mtime;
+    try {
+      const st = statSync4(file2.path);
+      size = st.size;
+      mtime = st.mtime;
+    } catch {
+      continue;
+    }
+    if (size > maxBytes) continue;
+    const meta3 = {
+      path: file2.path,
+      // Posix-separated like every stored relative path (and the ignore
+      // matching inside walkTree) — native separators must not leak into the
+      // contract.
+      relativePath: relative3(rootDir, file2.path).split(sep5).join("/"),
+      mtime: mtime.toISOString(),
+      size,
+      gitignored: file2.gitignored
+    };
+    if (opts.shouldRead && !opts.shouldRead(meta3)) continue;
+    let content;
+    try {
+      content = readFileSync7(file2.path, "utf8");
+    } catch {
+      continue;
+    }
+    yield {
+      path: meta3.path,
+      relativePath: meta3.relativePath,
+      content,
+      mtime: meta3.mtime,
+      gitignored: meta3.gitignored
+    };
+  }
+}
+
+// ../../packages/scanner/src/manifests.ts
+var MAX_MANIFEST_BYTES = 512 * 1024;
+function collectManifests(rootDir, maxFileSizeBytes = MAX_MANIFEST_BYTES) {
+  const found = [];
+  for (const file2 of walkTree(rootDir)) {
+    const kind = manifestKindOf(file2.name);
+    if (kind === null) continue;
+    try {
+      const st = statSync5(file2.path);
+      if (st.size > maxFileSizeBytes) continue;
+      found.push({ path: file2.path, kind, mtime: st.mtime.toISOString(), size: st.size });
+    } catch {
+      continue;
+    }
+  }
+  return found;
+}
+
+// ../../packages/scanner/src/resolve.ts
+function computeResolutions(prior, current) {
+  const cur = new Set(current);
+  return [...new Set(prior)].filter((k) => !cur.has(k));
+}
 
 // ../../packages/scanner/src/scan.ts
-async function loadLedger(gateway, runtime) {
-  const rulesetHash = await runtime.rulesetFingerprint();
+async function loadLedger(gateway, runtime, dataSharesInPlace) {
+  const egressMaterial = `${dataSharesInPlace ? "egress:on" : "egress:off"}
+${EGRESS_VERSION_MATERIAL}`;
+  const rulesetHash = contentHashOf(
+    `${await runtime.rulesetFingerprint()}:${contentHashOf(egressMaterial)}`
+  );
   return { previous: await gateway.scanLedger(rulesetHash), rulesetHash };
 }
+function resolveEgressProject(rootDir) {
+  try {
+    const identity = resolveRepoIdentity(rootDir);
+    const worktreeRoot = resolveWorktreeRoot(rootDir);
+    if (identity && worktreeRoot) {
+      return { root: worktreeRoot, projectKey: `git:${identity.url}`, project: identity.name };
+    }
+    return resolveNonGitProject(rootDir, manifestKindOf);
+  } catch {
+    return null;
+  }
+}
+function egressKey(root, absPath) {
+  const rel = toPosix(relative4(root, absPath));
+  return rel === "" || rel.startsWith("../") ? null : rel;
+}
+function startEgress(rootDir) {
+  const project = resolveEgressProject(rootDir);
+  if (project === null) return null;
+  return { project, files: [], scannedFiles: [], deletedFiles: [] };
+}
+function collectFileEgress(acc, absPath, content, manifestKind) {
+  const file2 = egressKey(acc.project.root, absPath);
+  if (file2 === null) return;
+  acc.scannedFiles.push(file2);
+  if (content.includes("\0")) return;
+  const vendored = isVendoredPath(file2);
+  if (manifestKind !== null) {
+    const sdkHits = extractManifestSdks(content, manifestKind);
+    if (sdkHits.length > 0) acc.files.push({ file: file2, vendored, endpoints: [], sdkHits });
+    return;
+  }
+  if (!EGRESS_CODE_EXTENSIONS.has(extname2(absPath))) return;
+  const endpoints = extractEgress(content);
+  if (endpoints.length > 0) acc.files.push({ file: file2, vendored, endpoints, sdkHits: [] });
+}
 async function resolveRemovedFindings(gateway, path, currentKeys, evidence) {
   const prior = await gateway.openAtRestKeysForPath(path);
   const toResolve = computeResolutions(prior, currentKeys);
@@ -26207,12 +28451,15 @@ function isUnderRoot(path, rootDir) {
   return rel !== "" && !rel.startsWith("..") && !isAbsolute2(rel);
 }
 async function sweepDeletedFiles(gateway, rootDir, previous) {
+  const deleted = [];
   for (const path of previous.keys()) {
     if (!isUnderRoot(path, rootDir) || existsSync5(path)) continue;
+    deleted.push(path);
     await resolveRemovedFindings(gateway, path, [], { deleted: true });
   }
+  return deleted;
 }
-async function scanDir(runtime, gateway, seen, ledger, rootDir, opts) {
+async function scanDir(runtime, gateway, config2, seen, ledger, rootDir, opts) {
   const byRule = {};
   const bySeverity = {};
   const updates = [];
@@ -26220,6 +28467,7 @@ async function scanDir(runtime, gateway, seen, ledger, rootDir, opts) {
   let skipped = 0;
   let findings = 0;
   let gitignoredFindings = 0;
+  const egress = config2.settings.dataSharesInPlace ? startEgress(rootDir) : null;
   const shouldRead = (meta3) => {
     const prev = ledger.previous.get(meta3.path);
     if (prev?.mtime === meta3.mtime) {
@@ -26246,6 +28494,7 @@ async function scanDir(runtime, gateway, seen, ledger, rootDir, opts) {
       updates.push(ledgerEntry);
       continue;
     }
+    if (egress) collectFileEgress(egress, file2.path, file2.content, null);
     if (seen.has(hash2) && (await gateway.openAtRestKeysForPath(file2.path)).length === 0) {
       skipped++;
       updates.push(ledgerEntry);
@@ -26287,18 +28536,77 @@ async function scanDir(runtime, gateway, seen, ledger, rootDir, opts) {
       contentHash: hash2
     });
   }
-  await gateway.recordScanned(updates);
-  await sweepDeletedFiles(gateway, rootDir, ledger.previous);
+  if (egress) scanManifests(egress, ledger, updates, rootDir);
+  const deleted = await sweepDeletedFiles(gateway, rootDir, ledger.previous);
+  if (egress) {
+    for (const path of deleted) {
+      const key = egressKey(egress.project.root, path);
+      if (key !== null) egress.deletedFiles.push(key);
+    }
+  }
+  const committed = await commitEgress(gateway, egress);
+  if (committed === null) {
+    return { rootDir, scanned, skipped, findings, gitignoredFindings, byRule, bySeverity };
+  }
+  await gateway.recordScanned(ledgerable(updates, egress, committed));
   return { rootDir, scanned, skipped, findings, gitignoredFindings, byRule, bySeverity };
 }
+function scanManifests(egress, ledger, updates, rootDir) {
+  for (const manifest of collectManifests(rootDir)) {
+    const prev = ledger.previous.get(manifest.path);
+    if (prev?.mtime === manifest.mtime) continue;
+    let content;
+    try {
+      content = readFileSync8(manifest.path, "utf8");
+    } catch {
+      continue;
+    }
+    const hash2 = contentHashOf(content);
+    updates.push({
+      path: manifest.path,
+      mtime: manifest.mtime,
+      contentHash: hash2,
+      rulesetHash: ledger.rulesetHash
+    });
+    if (prev?.contentHash === hash2) continue;
+    collectFileEgress(egress, manifest.path, content, manifest.kind);
+  }
+}
+async function commitEgress(gateway, egress) {
+  if (!egress) return EMPTY_DROPPED;
+  const { project, files, scannedFiles, deletedFiles } = egress;
+  if (scannedFiles.length === 0 && deletedFiles.length === 0 && files.length === 0) {
+    return EMPTY_DROPPED;
+  }
+  try {
+    const summary = await gateway.recordProjectEgress({
+      projectKey: project.projectKey,
+      project: project.project,
+      projectId: null,
+      reconcile: { mode: "ledger", scannedFiles, deletedFiles },
+      hits: resolveEgress(files)
+    });
+    return new Set(summary.droppedFiles);
+  } catch {
+    return null;
+  }
+}
+var EMPTY_DROPPED = /* @__PURE__ */ new Set();
+function ledgerable(updates, egress, dropped) {
+  if (!egress || dropped.size === 0) return [...updates];
+  return updates.filter((entry) => {
+    const key = egressKey(egress.project.root, entry.path);
+    return key === null || !dropped.has(key);
+  });
+}
 async function scanWorktree(config2, opts) {
   const rootDir = opts.rootDir ?? process.cwd();
   const gateway = resolveDataGateway(config2);
   const runtime = createPluginRuntime(gateway, config2.settings, { dataDir: config2.dataDir });
   try {
     const seen = await gateway.knownContentHashes();
-    const ledger = await loadLedger(gateway, runtime);
-    return await scanDir(runtime, gateway, seen, ledger, rootDir, opts);
+    const ledger = await loadLedger(gateway, runtime, config2.settings.dataSharesInPlace);
+    return await scanDir(runtime, gateway, config2, seen, ledger, rootDir, opts);
   } finally {
     await runtime.close();
   }
@@ -26318,9 +28626,9 @@ async function scanAllRepos(config2, opts) {
   };
   try {
     const seen = await gateway.knownContentHashes();
-    const ledger = await loadLedger(gateway, runtime);
+    const ledger = await loadLedger(gateway, runtime, config2.settings.dataSharesInPlace);
     for (const rootDir of repoDirs) {
-      const repoSummary = await scanDir(runtime, gateway, seen, ledger, rootDir, opts);
+      const repoSummary = await scanDir(runtime, gateway, config2, seen, ledger, rootDir, opts);
       summary.repos.push({ rootDir, summary: repoSummary });
       summary.totalScanned += repoSummary.scanned;
       summary.totalSkipped += repoSummary.skipped;