@akasecurity/ai-tc-claude-code 0.9.5 → 0.9.6

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "aka",
-  "version": "0.9.5",
+  "version": "0.9.6",
   "description": "AI Traffic Control — inspect and govern AI prompts in Claude Code. Detection runs locally; events are recorded to a local SQLite store on your machine.",
   "homepage": "https://github.com/akasecurity/ai-tc",
   "author": { "name": "AKA Security" }

package/commands/setup.md

@@ -892,3 +892,26 @@ declined, or a failed install you already reported — end with one warm close:
 
 Before you finish, confirm every AKA_SHOW region on the path you took was
 relayed to the user. If you summarized one instead of pasting it, paste it now.
+
+## Known limitations
+
+Be honest about every one of these if the user asks why something wasn't caught
+— never imply coverage this plugin does not have.
+
+**The model-judge step in step 3 cannot run on native Windows.** The judge
+spawns the `claude` CLI through a shell-free `execFileSync`, and an
+npm-installed CLI is a `.cmd` shim on Windows, which Node has refused to spawn
+without a shell since the CVE-2024-27980 fix. So a user who grants model-judge
+consent gets a spawn failure at that step rather than a rated set of findings,
+and the step exits non-zero instead of completing. Everything before it is
+unaffected — the posture check, the consent-gated historical read, and the local
+ruleset scan all run, and every finding is still detected and redacted locally.
+What is unavailable is only the model pass that rates false positives and
+severity.
+
+Say this plainly if a Windows user asks why setup stopped there, and do not
+offer to retry it: the fix is a code change, tracked separately. Two things
+worth getting right if it comes up — running under WSL2 is Linux rather than
+Windows and is not affected, and declining model-judge consent in step 1 is not
+a workaround so much as the other supported path, since the local scan is what
+produces the findings in the first place.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akasecurity/ai-tc-claude-code",
-  "version": "0.9.5",
+  "version": "0.9.6",
   "description": "AI Traffic Control — inspect and govern AI prompts in Claude Code",
   "license": "Apache-2.0",
   "type": "module",
@@ -27,13 +27,13 @@
     "typescript": "^5.8.0",
     "vitest": "^4.1.10",
     "zod": "^4.0.0",
-    "@akasecurity/persistence": "0.8.0",
     "@akasecurity/eslint-config": "0.8.0",
+    "@akasecurity/persistence": "0.8.0",
     "@akasecurity/plugin-sdk": "0.8.0",
     "@akasecurity/scanner": "0.8.0",
+    "@akasecurity/schema": "0.8.0",
     "@akasecurity/plugin-runtime": "0.8.0",
-    "@akasecurity/setup-wizard": "0.8.0",
-    "@akasecurity/schema": "0.8.0"
+    "@akasecurity/setup-wizard": "0.8.0"
   },
   "scripts": {
     "build": "tsup",

package/scripts/apply-suppressions.js

@@ -25890,6 +25890,40 @@ function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
+// ../../packages/detections/src/regex-cache.ts
+var singles = /* @__PURE__ */ new WeakMap();
+var keywordLists = /* @__PURE__ */ new WeakMap();
+var labelLists = /* @__PURE__ */ new WeakMap();
+function listCache(kind) {
+  return kind === "keyword" ? keywordLists : labelLists;
+}
+function memoizedRegExp(owner, build) {
+  const cached2 = singles.get(owner);
+  if (cached2 !== void 0) {
+    cached2.lastIndex = 0;
+    return cached2;
+  }
+  const compiled = build();
+  singles.set(owner, compiled);
+  return compiled;
+}
+function memoizedRegExpList(kind, owner, build) {
+  const cache = listCache(kind);
+  const cached2 = cache.get(owner);
+  if (cached2 !== void 0) {
+    if (cached2.stateful) {
+      for (const re of cached2.entries) if (re !== void 0) re.lastIndex = 0;
+    }
+    return cached2.entries;
+  }
+  const entries = build();
+  cache.set(owner, {
+    entries,
+    stateful: entries.some((re) => re !== void 0 && (re.global || re.sticky))
+  });
+  return entries;
+}
+
 // ../../packages/detections/src/matchers/limits.ts
 var MAX_MATCHES_PER_RULE = 1e4;
 var MAX_REGEX_INPUT_LENGTH = 2e5;
@@ -25900,10 +25934,17 @@ var KeywordMatcher2 = class {
     if (rule.matcher.type !== "keyword") return [];
     const { keywords, caseSensitive } = rule.matcher;
     const spans = [];
-    for (const kw of keywords) {
-      if (kw.length === 0) continue;
+    const compiled = memoizedRegExpList(
+      "keyword",
+      rule.matcher,
+      () => keywords.map((kw) => {
+        if (kw.length === 0) return void 0;
+        return new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
+      })
+    );
+    for (const re of compiled) {
+      if (re === void 0) continue;
       if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      const re = new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
       let m;
       while ((m = re.exec(text)) !== null) {
         spans.push({ start: m.index, end: m.index + m[0].length });
@@ -25919,7 +25960,10 @@ var RegexMatcher2 = class {
   match(text, rule) {
     if (rule.matcher.type !== "regex") return [];
     const { pattern, flags, captureGroup } = rule.matcher;
-    const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
+    const re = memoizedRegExp(
+      rule.matcher,
+      () => new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`)
+    );
     const scanText2 = text.length > MAX_REGEX_INPUT_LENGTH ? text.slice(0, MAX_REGEX_INPUT_LENGTH) : text;
     const spans = [];
     let m;
@@ -26027,11 +26071,15 @@ function isCorroborated(candidate, candidates, text) {
   const labels = req.labels;
   if (labels && labels.length > 0) {
     const haystack = text.slice(Math.max(0, winStart), winEnd);
-    for (const label of labels) {
-      const trimmed = label.trim();
-      if (trimmed.length === 0) continue;
-      const re = new RegExp(`(?<![A-Za-z0-9])${escapeRegExp2(trimmed)}(?![A-Za-z0-9])`, "i");
-      if (re.test(haystack)) return true;
+    for (const re of memoizedRegExpList(
+      "label",
+      req,
+      () => labels.map((label) => {
+        const trimmed = label.trim();
+        return trimmed.length === 0 ? void 0 : new RegExp(`(?<![A-Za-z0-9])${escapeRegExp2(trimmed)}(?![A-Za-z0-9])`, "i");
+      })
+    )) {
+      if (re?.test(haystack)) return true;
     }
   }
   return false;
@@ -28339,7 +28387,7 @@ function applyCategoryPosture(posture, repo, mode = "fill-gaps") {
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
 import { existsSync as existsSync8, readdirSync as readdirSync4, readFileSync as readFileSync8 } from "fs";
-import { basename as basename5, join as join12, relative, sep as sep4 } from "path";
+import { basename as basename5, join as join12 } from "path";
 
 // ../../packages/plugin-sdk/src/provider-env-antigravity.ts
 var optionalBaseUrl2 = external_exports.preprocess((v) => {
@@ -29433,8 +29481,8 @@ function table(headers, rows, opts = {}) {
   const widths = headers.map(
     (h, i) => Math.max(visibleLength(h), ...rows.map((r) => visibleLength(r[i] ?? "")))
   );
-  const sep5 = " ".repeat(gap);
-  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep5);
+  const sep4 = " ".repeat(gap);
+  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep4);
   const headerLine = fmt(headers.map((h) => h.toUpperCase()));
   if (opts.rowSep === true) {
     const fullWidth = widths.reduce((n, w) => n + w, 0) + gap * Math.max(0, widths.length - 1);
@@ -29446,7 +29494,7 @@ function table(headers, rows, opts = {}) {
     });
     return [headerLine, rule, ...body].join("\n");
   }
-  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep5);
+  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep4);
   return [headerLine, ruleLine, ...rows.map(fmt)].join("\n");
 }
 function fenced(body) {

package/scripts/backfill.js

@@ -26973,6 +26973,40 @@ function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
+// ../../packages/detections/src/regex-cache.ts
+var singles = /* @__PURE__ */ new WeakMap();
+var keywordLists = /* @__PURE__ */ new WeakMap();
+var labelLists = /* @__PURE__ */ new WeakMap();
+function listCache(kind) {
+  return kind === "keyword" ? keywordLists : labelLists;
+}
+function memoizedRegExp(owner, build) {
+  const cached2 = singles.get(owner);
+  if (cached2 !== void 0) {
+    cached2.lastIndex = 0;
+    return cached2;
+  }
+  const compiled = build();
+  singles.set(owner, compiled);
+  return compiled;
+}
+function memoizedRegExpList(kind, owner, build) {
+  const cache = listCache(kind);
+  const cached2 = cache.get(owner);
+  if (cached2 !== void 0) {
+    if (cached2.stateful) {
+      for (const re of cached2.entries) if (re !== void 0) re.lastIndex = 0;
+    }
+    return cached2.entries;
+  }
+  const entries = build();
+  cache.set(owner, {
+    entries,
+    stateful: entries.some((re) => re !== void 0 && (re.global || re.sticky))
+  });
+  return entries;
+}
+
 // ../../packages/detections/src/matchers/limits.ts
 var MAX_MATCHES_PER_RULE = 1e4;
 var MAX_REGEX_INPUT_LENGTH = 2e5;
@@ -26983,10 +27017,17 @@ var KeywordMatcher2 = class {
     if (rule.matcher.type !== "keyword") return [];
     const { keywords, caseSensitive } = rule.matcher;
     const spans = [];
-    for (const kw of keywords) {
-      if (kw.length === 0) continue;
+    const compiled = memoizedRegExpList(
+      "keyword",
+      rule.matcher,
+      () => keywords.map((kw) => {
+        if (kw.length === 0) return void 0;
+        return new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
+      })
+    );
+    for (const re of compiled) {
+      if (re === void 0) continue;
       if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      const re = new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
       let m;
       while ((m = re.exec(text)) !== null) {
         spans.push({ start: m.index, end: m.index + m[0].length });
@@ -27002,7 +27043,10 @@ var RegexMatcher2 = class {
   match(text, rule) {
     if (rule.matcher.type !== "regex") return [];
     const { pattern, flags, captureGroup } = rule.matcher;
-    const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
+    const re = memoizedRegExp(
+      rule.matcher,
+      () => new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`)
+    );
     const scanText2 = text.length > MAX_REGEX_INPUT_LENGTH ? text.slice(0, MAX_REGEX_INPUT_LENGTH) : text;
     const spans = [];
     let m;
@@ -27110,11 +27154,15 @@ function isCorroborated(candidate, candidates, text) {
   const labels = req.labels;
   if (labels && labels.length > 0) {
     const haystack = text.slice(Math.max(0, winStart), winEnd);
-    for (const label of labels) {
-      const trimmed = label.trim();
-      if (trimmed.length === 0) continue;
-      const re = new RegExp(`(?<![A-Za-z0-9])${escapeRegExp2(trimmed)}(?![A-Za-z0-9])`, "i");
-      if (re.test(haystack)) return true;
+    for (const re of memoizedRegExpList(
+      "label",
+      req,
+      () => labels.map((label) => {
+        const trimmed = label.trim();
+        return trimmed.length === 0 ? void 0 : new RegExp(`(?<![A-Za-z0-9])${escapeRegExp2(trimmed)}(?![A-Za-z0-9])`, "i");
+      })
+    )) {
+      if (re?.test(haystack)) return true;
     }
   }
   return false;
@@ -27382,13 +27430,14 @@ function probesFor(rule) {
   const derived = rule.matcher.type === "regex" ? derivedProbes(rule.matcher.pattern) : [];
   return [...derived, ...EXPONENTIAL_PROBES, ...POLYNOMIAL_PROBES];
 }
-function worstProbeMs(rule) {
+var wallClock = () => performance.now();
+function worstProbeMs(rule, now = wallClock) {
   let ms = 0;
   let probe = "";
   for (const text of probesFor(rule)) {
-    const start = performance.now();
+    const start = now();
     scan(text, [rule]);
-    const elapsed = performance.now() - start;
+    const elapsed = now() - start;
     if (elapsed > ms) {
       ms = elapsed;
       probe = text;
@@ -30105,7 +30154,7 @@ import { basename as basename4, dirname as dirname3, sep as sep3 } from "path";
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
 import { existsSync as existsSync8, readdirSync as readdirSync4, readFileSync as readFileSync8 } from "fs";
-import { basename as basename5, join as join12, relative, sep as sep4 } from "path";
+import { basename as basename5, join as join12 } from "path";
 
 // ../../packages/plugin-sdk/src/provider-env-antigravity.ts
 var optionalBaseUrl2 = external_exports.preprocess((v) => {
@@ -31583,7 +31632,7 @@ import { readFileSync as readFileSync12, renameSync as renameSync6, rmSync as rm
 
 // src/remediation/redact.ts
 import { readFileSync as readFileSync11, realpathSync as realpathSync3, renameSync as renameSync5, rmSync as rmSync6, writeFileSync as writeFileSync9 } from "fs";
-import { isAbsolute as isAbsolute2, relative as relative2, resolve } from "path";
+import { isAbsolute as isAbsolute2, relative, resolve } from "path";
 function platformRedactionScope(home) {
   return { artifactRoots: [transcriptsDir(home)] };
 }
@@ -31597,7 +31646,7 @@ function realPathOrNull(path) {
 function isWithinRoot(realTarget, root) {
   const realRoot = realPathOrNull(root);
   if (realRoot === null) return false;
-  const rel = relative2(realRoot, realTarget);
+  const rel = relative(realRoot, realTarget);
   return rel !== "" && !rel.startsWith("..") && !isAbsolute2(rel);
 }
 function resolveRedactableArtifact(filePath, scope) {

package/scripts/filescan.js

@@ -26912,6 +26912,40 @@ function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
+// ../../packages/detections/src/regex-cache.ts
+var singles = /* @__PURE__ */ new WeakMap();
+var keywordLists = /* @__PURE__ */ new WeakMap();
+var labelLists = /* @__PURE__ */ new WeakMap();
+function listCache(kind) {
+  return kind === "keyword" ? keywordLists : labelLists;
+}
+function memoizedRegExp(owner, build) {
+  const cached2 = singles.get(owner);
+  if (cached2 !== void 0) {
+    cached2.lastIndex = 0;
+    return cached2;
+  }
+  const compiled = build();
+  singles.set(owner, compiled);
+  return compiled;
+}
+function memoizedRegExpList(kind, owner, build) {
+  const cache = listCache(kind);
+  const cached2 = cache.get(owner);
+  if (cached2 !== void 0) {
+    if (cached2.stateful) {
+      for (const re of cached2.entries) if (re !== void 0) re.lastIndex = 0;
+    }
+    return cached2.entries;
+  }
+  const entries = build();
+  cache.set(owner, {
+    entries,
+    stateful: entries.some((re) => re !== void 0 && (re.global || re.sticky))
+  });
+  return entries;
+}
+
 // ../../packages/detections/src/matchers/limits.ts
 var MAX_MATCHES_PER_RULE = 1e4;
 var MAX_REGEX_INPUT_LENGTH = 2e5;
@@ -26922,10 +26956,17 @@ var KeywordMatcher2 = class {
     if (rule.matcher.type !== "keyword") return [];
     const { keywords, caseSensitive } = rule.matcher;
     const spans = [];
-    for (const kw of keywords) {
-      if (kw.length === 0) continue;
+    const compiled = memoizedRegExpList(
+      "keyword",
+      rule.matcher,
+      () => keywords.map((kw) => {
+        if (kw.length === 0) return void 0;
+        return new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
+      })
+    );
+    for (const re of compiled) {
+      if (re === void 0) continue;
       if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      const re = new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
       let m;
       while ((m = re.exec(text)) !== null) {
         spans.push({ start: m.index, end: m.index + m[0].length });
@@ -26941,7 +26982,10 @@ var RegexMatcher2 = class {
   match(text, rule) {
     if (rule.matcher.type !== "regex") return [];
     const { pattern, flags, captureGroup } = rule.matcher;
-    const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
+    const re = memoizedRegExp(
+      rule.matcher,
+      () => new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`)
+    );
     const scanText2 = text.length > MAX_REGEX_INPUT_LENGTH ? text.slice(0, MAX_REGEX_INPUT_LENGTH) : text;
     const spans = [];
     let m;
@@ -27049,11 +27093,15 @@ function isCorroborated(candidate, candidates, text) {
   const labels = req.labels;
   if (labels && labels.length > 0) {
     const haystack = text.slice(Math.max(0, winStart), winEnd);
-    for (const label of labels) {
-      const trimmed = label.trim();
-      if (trimmed.length === 0) continue;
-      const re = new RegExp(`(?<![A-Za-z0-9])${escapeRegExp2(trimmed)}(?![A-Za-z0-9])`, "i");
-      if (re.test(haystack)) return true;
+    for (const re of memoizedRegExpList(
+      "label",
+      req,
+      () => labels.map((label) => {
+        const trimmed = label.trim();
+        return trimmed.length === 0 ? void 0 : new RegExp(`(?<![A-Za-z0-9])${escapeRegExp2(trimmed)}(?![A-Za-z0-9])`, "i");
+      })
+    )) {
+      if (re?.test(haystack)) return true;
     }
   }
   return false;
@@ -27321,13 +27369,14 @@ function probesFor(rule) {
   const derived = rule.matcher.type === "regex" ? derivedProbes(rule.matcher.pattern) : [];
   return [...derived, ...EXPONENTIAL_PROBES, ...POLYNOMIAL_PROBES];
 }
-function worstProbeMs(rule) {
+var wallClock = () => performance.now();
+function worstProbeMs(rule, now = wallClock) {
   let ms = 0;
   let probe = "";
   for (const text of probesFor(rule)) {
-    const start = performance.now();
+    const start = now();
     scan(text, [rule]);
-    const elapsed = performance.now() - start;
+    const elapsed = now() - start;
     if (elapsed > ms) {
       ms = elapsed;
       probe = text;
@@ -29989,7 +30038,7 @@ function resolveNonGitProject(startDir, recognizeMarker) {
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
 import { existsSync as existsSync8, readdirSync as readdirSync4, readFileSync as readFileSync8 } from "fs";
-import { basename as basename5, join as join12, relative, sep as sep4 } from "path";
+import { basename as basename5, join as join12 } from "path";
 
 // ../../packages/plugin-sdk/src/provider-env-antigravity.ts
 var optionalBaseUrl2 = external_exports.preprocess((v) => {
@@ -30416,7 +30465,7 @@ function discoverGitRepos(opts) {
 }
 
 // ../../packages/scanner/src/render.ts
-import { basename as basename6, relative as relative2 } from "path";
+import { basename as basename6, relative } from "path";
 var SEVERITY_ORDER3 = ["critical", "high", "medium", "low"];
 var SEVERITY_GLYPH = {
   critical: "\u2588",
@@ -30434,9 +30483,9 @@ function indent(text, spaces = 2) {
 }
 function table(headers, rows, gap = 3) {
   const widths = headers.map((h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length)));
-  const sep6 = " ".repeat(gap);
-  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep6);
-  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep6);
+  const sep5 = " ".repeat(gap);
+  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep5);
+  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep5);
   return [fmt(headers.map((h) => h.toUpperCase())), ruleLine, ...rows.map(fmt)].join("\n");
 }
 function metaBlock(rows) {
@@ -30458,7 +30507,7 @@ function followUpSection(opts) {
   return opts.followUp !== void 0 ? ["", `  ${opts.followUp}`] : [];
 }
 function renderWorktreeSummary(summary, opts = {}) {
-  const rootLabel = relative2(process.cwd(), summary.rootDir) || ".";
+  const rootLabel = relative(process.cwd(), summary.rootDir) || ".";
   const meta3 = metaBlock([
     ["Root", rootLabel],
     ["Scanned", `${String(summary.scanned)} files`],
@@ -30510,7 +30559,7 @@ function renderMultiRepoSummary(summary, opts = {}) {
 
 // ../../packages/scanner/src/scan.ts
 import { existsSync as existsSync9, readFileSync as readFileSync10 } from "fs";
-import { extname as extname2, isAbsolute as isAbsolute2, relative as relative4 } from "path";
+import { extname as extname2, isAbsolute as isAbsolute2, relative as relative3 } from "path";
 
 // ../../packages/plugin-runtime/src/standalone-gateway.ts
 import { randomUUID as randomUUID15 } from "crypto";
@@ -30837,7 +30886,7 @@ import { statSync as statSync8 } from "fs";
 // ../../packages/scanner/src/walk.ts
 var import_ignore2 = __toESM(require_ignore(), 1);
 import { readdirSync as readdirSync6, readFileSync as readFileSync9, statSync as statSync7 } from "fs";
-import { extname, join as join15, relative as relative3, sep as sep5 } from "path";
+import { extname, join as join15, relative as relative2, sep as sep4 } from "path";
 var SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([
   ".ts",
   ".tsx",
@@ -30878,7 +30927,7 @@ function readIgnoreLayer(dir, filename) {
 function evaluate(layers, absPath, isDir) {
   let state = "unmatched";
   for (const layer of layers) {
-    const rel = relative3(layer.base, absPath).split(sep5).join("/") + (isDir ? "/" : "");
+    const rel = relative2(layer.base, absPath).split(sep4).join("/") + (isDir ? "/" : "");
     const verdict = layer.matcher.test(rel);
     if (verdict.ignored) state = "ignored";
     else if (verdict.unignored) state = "unignored";
@@ -30947,7 +30996,7 @@ function* walkSourceFiles(opts = {}) {
       // Posix-separated like every stored relative path (and the ignore
       // matching inside walkTree) — native separators must not leak into the
       // contract.
-      relativePath: relative3(rootDir, file2.path).split(sep5).join("/"),
+      relativePath: relative2(rootDir, file2.path).split(sep4).join("/"),
       mtime: mtime.toISOString(),
       size,
       gitignored: file2.gitignored
@@ -31015,7 +31064,7 @@ function resolveEgressProject(rootDir) {
   }
 }
 function egressKey(root, absPath) {
-  const rel = toPosix(relative4(root, absPath));
+  const rel = toPosix(relative3(root, absPath));
   return rel === "" || rel.startsWith("../") ? null : rel;
 }
 function startEgress(rootDir) {
@@ -31069,7 +31118,7 @@ async function reopenRedetectedFindings(gateway, path, currentKeys, evidence, re
   }
 }
 function isUnderRoot(path, rootDir) {
-  const rel = relative4(rootDir, path);
+  const rel = relative3(rootDir, path);
   return rel !== "" && !rel.startsWith("..") && !isAbsolute2(rel);
 }
 async function sweepDeletedFiles(gateway, rootDir, previous) {

package/scripts/firstrun.js

@@ -25926,6 +25926,40 @@ function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
+// ../../packages/detections/src/regex-cache.ts
+var singles = /* @__PURE__ */ new WeakMap();
+var keywordLists = /* @__PURE__ */ new WeakMap();
+var labelLists = /* @__PURE__ */ new WeakMap();
+function listCache(kind) {
+  return kind === "keyword" ? keywordLists : labelLists;
+}
+function memoizedRegExp(owner, build) {
+  const cached2 = singles.get(owner);
+  if (cached2 !== void 0) {
+    cached2.lastIndex = 0;
+    return cached2;
+  }
+  const compiled = build();
+  singles.set(owner, compiled);
+  return compiled;
+}
+function memoizedRegExpList(kind, owner, build) {
+  const cache = listCache(kind);
+  const cached2 = cache.get(owner);
+  if (cached2 !== void 0) {
+    if (cached2.stateful) {
+      for (const re of cached2.entries) if (re !== void 0) re.lastIndex = 0;
+    }
+    return cached2.entries;
+  }
+  const entries = build();
+  cache.set(owner, {
+    entries,
+    stateful: entries.some((re) => re !== void 0 && (re.global || re.sticky))
+  });
+  return entries;
+}
+
 // ../../packages/detections/src/matchers/limits.ts
 var MAX_MATCHES_PER_RULE = 1e4;
 var MAX_REGEX_INPUT_LENGTH = 2e5;
@@ -25936,10 +25970,17 @@ var KeywordMatcher2 = class {
     if (rule.matcher.type !== "keyword") return [];
     const { keywords, caseSensitive } = rule.matcher;
     const spans = [];
-    for (const kw of keywords) {
-      if (kw.length === 0) continue;
+    const compiled = memoizedRegExpList(
+      "keyword",
+      rule.matcher,
+      () => keywords.map((kw) => {
+        if (kw.length === 0) return void 0;
+        return new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
+      })
+    );
+    for (const re of compiled) {
+      if (re === void 0) continue;
       if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      const re = new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
       let m;
       while ((m = re.exec(text)) !== null) {
         spans.push({ start: m.index, end: m.index + m[0].length });
@@ -25955,7 +25996,10 @@ var RegexMatcher2 = class {
   match(text, rule) {
     if (rule.matcher.type !== "regex") return [];
     const { pattern, flags, captureGroup } = rule.matcher;
-    const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
+    const re = memoizedRegExp(
+      rule.matcher,
+      () => new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`)
+    );
     const scanText2 = text.length > MAX_REGEX_INPUT_LENGTH ? text.slice(0, MAX_REGEX_INPUT_LENGTH) : text;
     const spans = [];
     let m;
@@ -28113,7 +28157,7 @@ import { basename as basename4, dirname as dirname3, sep as sep3 } from "path";
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
 import { existsSync as existsSync8, readdirSync as readdirSync4, readFileSync as readFileSync8 } from "fs";
-import { basename as basename5, join as join12, relative, sep as sep4 } from "path";
+import { basename as basename5, join as join12 } from "path";
 
 // ../../packages/plugin-sdk/src/provider-env-antigravity.ts
 var optionalBaseUrl2 = external_exports.preprocess((v) => {
@@ -28557,8 +28601,8 @@ function table(headers, rows, opts = {}) {
   const widths = headers.map(
     (h, i) => Math.max(visibleLength(h), ...rows.map((r) => visibleLength(r[i] ?? "")))
   );
-  const sep5 = " ".repeat(gap);
-  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep5);
+  const sep4 = " ".repeat(gap);
+  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep4);
   const headerLine = fmt(headers.map((h) => h.toUpperCase()));
   if (opts.rowSep === true) {
     const fullWidth = widths.reduce((n, w) => n + w, 0) + gap * Math.max(0, widths.length - 1);
@@ -28570,7 +28614,7 @@ function table(headers, rows, opts = {}) {
     });
     return [headerLine, rule, ...body].join("\n");
   }
-  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep5);
+  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep4);
   return [headerLine, ruleLine, ...rows.map(fmt)].join("\n");
 }
 function fenced(body) {