@ankurhalder/codebase-snapshot 4.0.4 → 4.0.6

package/dist/bin.js

@@ -1942,6 +1942,7 @@ import * as path7 from "path";
 
 // src/config.ts
 import * as fs4 from "fs";
+import { createHash } from "crypto";
 import * as path4 from "path";
 import { pathToFileURL } from "url";
 var CONFIG_FILENAMES = [
@@ -2621,6 +2622,27 @@ function classifyKind(filePath, kinds) {
   }
   return "other";
 }
+function configDigest(config) {
+  const material = {
+    maxPartBytes: config.maxPartBytes,
+    largeFileBytes: config.largeFileBytes,
+    previewHeadLines: config.previewHeadLines,
+    previewTailLines: config.previewTailLines,
+    includeMonolith: config.includeMonolith,
+    maxMonolithBytes: config.maxMonolithBytes ?? null,
+    includeSensitiveFiles: config.includeSensitiveFiles,
+    artifacts: config.artifacts,
+    include: config.include,
+    excludePatterns: config.excludePatterns,
+    preset: config.preset,
+    layersMode: config.layersMode,
+    budgets: config.budgets,
+    layers: config.layers.map((layer2) => layer2.name),
+    kinds: config.kinds.map((kind) => kind.kind),
+    secretRules: config.secretRules.map((rule) => `${rule.rule}:${rule.pattern.source}`).sort()
+  };
+  return createHash("sha256").update(JSON.stringify(material)).digest("hex");
+}
 
 // src/partitioner/preview.ts
 function countLines(content) {
@@ -2708,21 +2730,28 @@ function isBinaryExtension(filePath) {
   return BINARY_EXTENSIONS.has(ext);
 }
 function isBinaryBuffer(buffer) {
-  const checkLength = Math.min(buffer.length, 8192);
-  for (let index = 0; index < checkLength; index++) {
+  for (let index = 0; index < buffer.length; index++) {
     if (buffer[index] === 0) return true;
   }
   return false;
 }
+var BINARY_SCAN_BYTES = 8 * 1024 * 1024;
+var CHUNK = 64 * 1024;
 function isBinaryFile(absolutePath) {
   if (isBinaryExtension(absolutePath)) return true;
   let fd;
   try {
     fd = fs5.openSync(absolutePath, "r");
-    const buffer = Buffer.alloc(8192);
-    const bytesRead = fs5.readSync(fd, buffer, 0, 8192, 0);
-    if (bytesRead === 0) return false;
-    return isBinaryBuffer(buffer.subarray(0, bytesRead));
+    const buffer = Buffer.alloc(CHUNK);
+    let position = 0;
+    while (position < BINARY_SCAN_BYTES) {
+      const wanted = Math.min(CHUNK, BINARY_SCAN_BYTES - position);
+      const bytesRead = fs5.readSync(fd, buffer, 0, wanted, position);
+      if (bytesRead === 0) return false;
+      if (isBinaryBuffer(buffer.subarray(0, bytesRead))) return true;
+      position += bytesRead;
+    }
+    return false;
   } catch {
     return false;
   } finally {
@@ -5256,6 +5285,11 @@ function validateSnapshot(configInput) {
   const currentExcludes = config.excludePatterns.map(maskValue);
   const currentInclude = config.include.map(maskValue);
   const recorded = manifest.config;
+  if (recorded?.digest && recorded.digest !== configDigest(config)) {
+    drift.configMismatches.push(
+      "configuration: the settings differ from the ones this snapshot was generated with (run generate)"
+    );
+  }
   if (recorded && typeof recorded === "object") {
     if (recorded.maxPartBytes !== config.maxPartBytes) {
       drift.configMismatches.push(
@@ -5471,7 +5505,7 @@ function validateSnapshot(configInput) {
 
 // src/index.ts
 var GENERATOR_NAME = "@ankurhalder/codebase-snapshot";
-var GENERATOR_VERSION = "4.0.4";
+var GENERATOR_VERSION = "4.0.6";
 var SCHEMA_VERSION = "3.0.0";
 function sha256Hex2(input) {
   return crypto3.createHash("sha256").update(input).digest("hex");
@@ -6238,8 +6272,8 @@ function generateSnapshot(configInput, options) {
     const lineCount = countLines(rawContent);
     totalLines += lineCount;
     totalSizeBytes += stats.size;
-    const layer2 = classifyLayer(relativePath, config.layers);
-    const kind = classifyKind(relativePath, config.kinds);
+    const layer2 = maskPathText(classifyLayer(relativePath, config.layers), config.secretRules);
+    const kind = maskPathText(classifyKind(relativePath, config.kinds), config.secretRules);
     const language = detectLanguage(relativePath);
     bump(layerCounts, layer2);
     bump(kindCounts, kind);
@@ -6338,6 +6372,7 @@ function generateSnapshot(configInput, options) {
       largeFileBytes: config.largeFileBytes
     },
     config: {
+      digest: configDigest(config),
       maxPartBytes: config.maxPartBytes,
       largeFileBytes: config.largeFileBytes,
       previewHeadLines: config.previewHeadLines,
@@ -6348,7 +6383,12 @@ function generateSnapshot(configInput, options) {
       include: [...config.include].map(maskName),
       preset: config.preset,
       layersMode: config.layersMode,
-      budgets: { default: config.budgets.default, byLayer: { ...config.budgets.byLayer } },
+      budgets: {
+        default: config.budgets.default,
+        byLayer: Object.fromEntries(
+          Object.entries(config.budgets.byLayer).map(([name, bytes]) => [maskName(name), bytes])
+        )
+      },
       excludePatterns: [...config.excludePatterns].map(maskName),
       layers: config.layers.map((layer2) => maskName(layer2.name)),
       kinds: config.kinds.map((kind) => maskName(kind.kind))

package/dist/{chunk-CDZDVU74.js → chunk-GAY7W5MK.js}

@@ -1,4 +1,5 @@
 import * as crypto from 'crypto';
+import { createHash } from 'crypto';
 import * as fs9 from 'fs';
 import * as os from 'os';
 import * as path10 from 'path';
@@ -3348,6 +3349,27 @@ function classifyKind(filePath, kinds) {
   }
   return "other";
 }
+function configDigest(config) {
+  const material = {
+    maxPartBytes: config.maxPartBytes,
+    largeFileBytes: config.largeFileBytes,
+    previewHeadLines: config.previewHeadLines,
+    previewTailLines: config.previewTailLines,
+    includeMonolith: config.includeMonolith,
+    maxMonolithBytes: config.maxMonolithBytes ?? null,
+    includeSensitiveFiles: config.includeSensitiveFiles,
+    artifacts: config.artifacts,
+    include: config.include,
+    excludePatterns: config.excludePatterns,
+    preset: config.preset,
+    layersMode: config.layersMode,
+    budgets: config.budgets,
+    layers: config.layers.map((layer2) => layer2.name),
+    kinds: config.kinds.map((kind) => kind.kind),
+    secretRules: config.secretRules.map((rule) => `${rule.rule}:${rule.pattern.source}`).sort()
+  };
+  return createHash("sha256").update(JSON.stringify(material)).digest("hex");
+}
 
 // src/define-config.ts
 function defineConfig(config) {
@@ -4055,21 +4077,28 @@ function isBinaryExtension(filePath) {
   return BINARY_EXTENSIONS.has(ext);
 }
 function isBinaryBuffer(buffer) {
-  const checkLength = Math.min(buffer.length, 8192);
-  for (let index = 0; index < checkLength; index++) {
+  for (let index = 0; index < buffer.length; index++) {
     if (buffer[index] === 0) return true;
   }
   return false;
 }
+var BINARY_SCAN_BYTES = 8 * 1024 * 1024;
+var CHUNK = 64 * 1024;
 function isBinaryFile(absolutePath) {
   if (isBinaryExtension(absolutePath)) return true;
   let fd;
   try {
     fd = fs9.openSync(absolutePath, "r");
-    const buffer = Buffer.alloc(8192);
-    const bytesRead = fs9.readSync(fd, buffer, 0, 8192, 0);
-    if (bytesRead === 0) return false;
-    return isBinaryBuffer(buffer.subarray(0, bytesRead));
+    const buffer = Buffer.alloc(CHUNK);
+    let position = 0;
+    while (position < BINARY_SCAN_BYTES) {
+      const wanted = Math.min(CHUNK, BINARY_SCAN_BYTES - position);
+      const bytesRead = fs9.readSync(fd, buffer, 0, wanted, position);
+      if (bytesRead === 0) return false;
+      if (isBinaryBuffer(buffer.subarray(0, bytesRead))) return true;
+      position += bytesRead;
+    }
+    return false;
   } catch {
     return false;
   } finally {
@@ -4304,6 +4333,11 @@ function validateSnapshot(configInput) {
   const currentExcludes = config.excludePatterns.map(maskValue);
   const currentInclude = config.include.map(maskValue);
   const recorded = manifest.config;
+  if (recorded?.digest && recorded.digest !== configDigest(config)) {
+    drift.configMismatches.push(
+      "configuration: the settings differ from the ones this snapshot was generated with (run generate)"
+    );
+  }
   if (recorded && typeof recorded === "object") {
     if (recorded.maxPartBytes !== config.maxPartBytes) {
       drift.configMismatches.push(
@@ -5434,7 +5468,7 @@ async function runInit(options) {
 
 // src/index.ts
 var GENERATOR_NAME = "@ankurhalder/codebase-snapshot";
-var GENERATOR_VERSION = "4.0.4";
+var GENERATOR_VERSION = "4.0.6";
 var SCHEMA_VERSION = "3.0.0";
 function sha256Hex2(input) {
   return crypto.createHash("sha256").update(input).digest("hex");
@@ -6201,8 +6235,8 @@ function generateSnapshot(configInput, options) {
     const lineCount = countLines(rawContent);
     totalLines += lineCount;
     totalSizeBytes += stats.size;
-    const layer2 = classifyLayer(relativePath, config.layers);
-    const kind = classifyKind(relativePath, config.kinds);
+    const layer2 = maskPathText(classifyLayer(relativePath, config.layers), config.secretRules);
+    const kind = maskPathText(classifyKind(relativePath, config.kinds), config.secretRules);
     const language = detectLanguage(relativePath);
     bump(layerCounts, layer2);
     bump(kindCounts, kind);
@@ -6301,6 +6335,7 @@ function generateSnapshot(configInput, options) {
       largeFileBytes: config.largeFileBytes
     },
     config: {
+      digest: configDigest(config),
       maxPartBytes: config.maxPartBytes,
       largeFileBytes: config.largeFileBytes,
       previewHeadLines: config.previewHeadLines,
@@ -6311,7 +6346,12 @@ function generateSnapshot(configInput, options) {
       include: [...config.include].map(maskName),
       preset: config.preset,
       layersMode: config.layersMode,
-      budgets: { default: config.budgets.default, byLayer: { ...config.budgets.byLayer } },
+      budgets: {
+        default: config.budgets.default,
+        byLayer: Object.fromEntries(
+          Object.entries(config.budgets.byLayer).map(([name, bytes]) => [maskName(name), bytes])
+        )
+      },
       excludePatterns: [...config.excludePatterns].map(maskName),
       layers: config.layers.map((layer2) => maskName(layer2.name)),
       kinds: config.kinds.map((kind) => maskName(kind.kind))
@@ -6494,5 +6534,5 @@ async function generateSnapshotAsync(configInput, options) {
 }
 
 export { ARTIFACT_NAMES, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, GENERATOR_NAME, GENERATOR_VERSION, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, PRESETS, PromptCancelled, SCHEMA_VERSION, anchorForPath, assertReplaceable, assertUsableConfigInput, collectFiles, compareManifests, countLines, defineConfig, detectLanguage, detectPreset, explainPath, fenceForContent, fenceForText, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, isBinaryBuffer, isBinaryExtension, isBinaryFile, isInteractive, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, profileForPath, renderConfig, renderDiffText, renderExplainText, renderMinimalConfig, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, unknownPresetMessage, validateSnapshot };
-//# sourceMappingURL=chunk-CDZDVU74.js.map
-//# sourceMappingURL=chunk-CDZDVU74.js.map
+//# sourceMappingURL=chunk-GAY7W5MK.js.map
+//# sourceMappingURL=chunk-GAY7W5MK.js.map

package/dist/cli.cjs

@@ -4,9 +4,9 @@ var fs9 = require('fs');
 var path10 = require('path');
 var util = require('util');
 var childProcess = require('child_process');
+var crypto = require('crypto');
 var url = require('url');
 var readline = require('readline');
-var crypto = require('crypto');
 var os = require('os');
 var ts = require('typescript');
 
@@ -33,8 +33,8 @@ function _interopNamespace(e) {
 var fs9__namespace = /*#__PURE__*/_interopNamespace(fs9);
 var path10__namespace = /*#__PURE__*/_interopNamespace(path10);
 var childProcess__namespace = /*#__PURE__*/_interopNamespace(childProcess);
-var readline__namespace = /*#__PURE__*/_interopNamespace(readline);
 var crypto__namespace = /*#__PURE__*/_interopNamespace(crypto);
+var readline__namespace = /*#__PURE__*/_interopNamespace(readline);
 var os__namespace = /*#__PURE__*/_interopNamespace(os);
 var ts__default = /*#__PURE__*/_interopDefault(ts);
 
@@ -2634,6 +2634,27 @@ function classifyKind(filePath, kinds) {
   }
   return "other";
 }
+function configDigest(config) {
+  const material = {
+    maxPartBytes: config.maxPartBytes,
+    largeFileBytes: config.largeFileBytes,
+    previewHeadLines: config.previewHeadLines,
+    previewTailLines: config.previewTailLines,
+    includeMonolith: config.includeMonolith,
+    maxMonolithBytes: config.maxMonolithBytes ?? null,
+    includeSensitiveFiles: config.includeSensitiveFiles,
+    artifacts: config.artifacts,
+    include: config.include,
+    excludePatterns: config.excludePatterns,
+    preset: config.preset,
+    layersMode: config.layersMode,
+    budgets: config.budgets,
+    layers: config.layers.map((layer2) => layer2.name),
+    kinds: config.kinds.map((kind) => kind.kind),
+    secretRules: config.secretRules.map((rule) => `${rule.rule}:${rule.pattern.source}`).sort()
+  };
+  return crypto.createHash("sha256").update(JSON.stringify(material)).digest("hex");
+}
 
 // src/partitioner/preview.ts
 function countLines(content) {
@@ -2717,21 +2738,28 @@ function isBinaryExtension(filePath) {
   return BINARY_EXTENSIONS.has(ext);
 }
 function isBinaryBuffer(buffer) {
-  const checkLength = Math.min(buffer.length, 8192);
-  for (let index = 0; index < checkLength; index++) {
+  for (let index = 0; index < buffer.length; index++) {
     if (buffer[index] === 0) return true;
   }
   return false;
 }
+var BINARY_SCAN_BYTES = 8 * 1024 * 1024;
+var CHUNK = 64 * 1024;
 function isBinaryFile(absolutePath) {
   if (isBinaryExtension(absolutePath)) return true;
   let fd;
   try {
     fd = fs9__namespace.openSync(absolutePath, "r");
-    const buffer = Buffer.alloc(8192);
-    const bytesRead = fs9__namespace.readSync(fd, buffer, 0, 8192, 0);
-    if (bytesRead === 0) return false;
-    return isBinaryBuffer(buffer.subarray(0, bytesRead));
+    const buffer = Buffer.alloc(CHUNK);
+    let position = 0;
+    while (position < BINARY_SCAN_BYTES) {
+      const wanted = Math.min(CHUNK, BINARY_SCAN_BYTES - position);
+      const bytesRead = fs9__namespace.readSync(fd, buffer, 0, wanted, position);
+      if (bytesRead === 0) return false;
+      if (isBinaryBuffer(buffer.subarray(0, bytesRead))) return true;
+      position += bytesRead;
+    }
+    return false;
   } catch {
     return false;
   } finally {
@@ -5236,6 +5264,11 @@ function validateSnapshot(configInput) {
   const currentExcludes = config.excludePatterns.map(maskValue);
   const currentInclude = config.include.map(maskValue);
   const recorded = manifest.config;
+  if (recorded?.digest && recorded.digest !== configDigest(config)) {
+    drift.configMismatches.push(
+      "configuration: the settings differ from the ones this snapshot was generated with (run generate)"
+    );
+  }
   if (recorded && typeof recorded === "object") {
     if (recorded.maxPartBytes !== config.maxPartBytes) {
       drift.configMismatches.push(
@@ -5451,7 +5484,7 @@ function validateSnapshot(configInput) {
 
 // src/index.ts
 var GENERATOR_NAME = "@ankurhalder/codebase-snapshot";
-var GENERATOR_VERSION = "4.0.4";
+var GENERATOR_VERSION = "4.0.6";
 var SCHEMA_VERSION = "3.0.0";
 function sha256Hex2(input) {
   return crypto__namespace.createHash("sha256").update(input).digest("hex");
@@ -6218,8 +6251,8 @@ function generateSnapshot(configInput, options) {
     const lineCount = countLines(rawContent);
     totalLines += lineCount;
     totalSizeBytes += stats.size;
-    const layer2 = classifyLayer(relativePath, config.layers);
-    const kind = classifyKind(relativePath, config.kinds);
+    const layer2 = maskPathText(classifyLayer(relativePath, config.layers), config.secretRules);
+    const kind = maskPathText(classifyKind(relativePath, config.kinds), config.secretRules);
     const language = detectLanguage(relativePath);
     bump(layerCounts, layer2);
     bump(kindCounts, kind);
@@ -6318,6 +6351,7 @@ function generateSnapshot(configInput, options) {
       largeFileBytes: config.largeFileBytes
     },
     config: {
+      digest: configDigest(config),
       maxPartBytes: config.maxPartBytes,
       largeFileBytes: config.largeFileBytes,
       previewHeadLines: config.previewHeadLines,
@@ -6328,7 +6362,12 @@ function generateSnapshot(configInput, options) {
       include: [...config.include].map(maskName),
       preset: config.preset,
       layersMode: config.layersMode,
-      budgets: { default: config.budgets.default, byLayer: { ...config.budgets.byLayer } },
+      budgets: {
+        default: config.budgets.default,
+        byLayer: Object.fromEntries(
+          Object.entries(config.budgets.byLayer).map(([name, bytes]) => [maskName(name), bytes])
+        )
+      },
       excludePatterns: [...config.excludePatterns].map(maskName),
       layers: config.layers.map((layer2) => maskName(layer2.name)),
       kinds: config.kinds.map((kind) => maskName(kind.kind))

package/dist/cli.d.cts

@@ -1,4 +1,4 @@
-import { O as OutputFormat } from './types-LSfwsKE-.cjs';
+import { O as OutputFormat } from './types-x7aogSer.cjs';
 
 type Command = "generate" | "validate" | "report" | "init" | "explain" | "diff" | "describe" | "skill";
 /** A user-input problem: printed without a stack trace, exits 2. */

package/dist/cli.d.ts

@@ -1,4 +1,4 @@
-import { O as OutputFormat } from './types-LSfwsKE-.js';
+import { O as OutputFormat } from './types-x7aogSer.js';
 
 type Command = "generate" | "validate" | "report" | "init" | "explain" | "diff" | "describe" | "skill";
 /** A user-input problem: printed without a stack trace, exits 2. */

package/dist/cli.js

@@ -1,4 +1,4 @@
-import { loadConfigFileDetailed, resolveConfig, validateSnapshot, explainPath, compareManifests, loadManifest, renderDiffText, generateSnapshot, GENERATOR_VERSION, ARTIFACT_NAMES, getPreset, unknownPresetMessage, GENERATOR_NAME, runInit, PromptCancelled, MIN_MAX_PART_BYTES, SCHEMA_VERSION, PRESETS, parseByteSize, renderExplainText } from './chunk-CDZDVU74.js';
+import { loadConfigFileDetailed, resolveConfig, validateSnapshot, explainPath, compareManifests, loadManifest, renderDiffText, generateSnapshot, GENERATOR_VERSION, ARTIFACT_NAMES, getPreset, unknownPresetMessage, GENERATOR_NAME, runInit, PromptCancelled, MIN_MAX_PART_BYTES, SCHEMA_VERSION, PRESETS, parseByteSize, renderExplainText } from './chunk-GAY7W5MK.js';
 import * as fs from 'fs';
 import * as path2 from 'path';
 import { parseArgs } from 'util';

package/dist/index.cjs

@@ -3378,6 +3378,27 @@ function classifyKind(filePath, kinds) {
   }
   return "other";
 }
+function configDigest(config) {
+  const material = {
+    maxPartBytes: config.maxPartBytes,
+    largeFileBytes: config.largeFileBytes,
+    previewHeadLines: config.previewHeadLines,
+    previewTailLines: config.previewTailLines,
+    includeMonolith: config.includeMonolith,
+    maxMonolithBytes: config.maxMonolithBytes ?? null,
+    includeSensitiveFiles: config.includeSensitiveFiles,
+    artifacts: config.artifacts,
+    include: config.include,
+    excludePatterns: config.excludePatterns,
+    preset: config.preset,
+    layersMode: config.layersMode,
+    budgets: config.budgets,
+    layers: config.layers.map((layer2) => layer2.name),
+    kinds: config.kinds.map((kind) => kind.kind),
+    secretRules: config.secretRules.map((rule) => `${rule.rule}:${rule.pattern.source}`).sort()
+  };
+  return crypto.createHash("sha256").update(JSON.stringify(material)).digest("hex");
+}
 
 // src/define-config.ts
 function defineConfig(config) {
@@ -4085,21 +4106,28 @@ function isBinaryExtension(filePath) {
   return BINARY_EXTENSIONS.has(ext);
 }
 function isBinaryBuffer(buffer) {
-  const checkLength = Math.min(buffer.length, 8192);
-  for (let index = 0; index < checkLength; index++) {
+  for (let index = 0; index < buffer.length; index++) {
     if (buffer[index] === 0) return true;
   }
   return false;
 }
+var BINARY_SCAN_BYTES = 8 * 1024 * 1024;
+var CHUNK = 64 * 1024;
 function isBinaryFile(absolutePath) {
   if (isBinaryExtension(absolutePath)) return true;
   let fd;
   try {
     fd = fs9__namespace.openSync(absolutePath, "r");
-    const buffer = Buffer.alloc(8192);
-    const bytesRead = fs9__namespace.readSync(fd, buffer, 0, 8192, 0);
-    if (bytesRead === 0) return false;
-    return isBinaryBuffer(buffer.subarray(0, bytesRead));
+    const buffer = Buffer.alloc(CHUNK);
+    let position = 0;
+    while (position < BINARY_SCAN_BYTES) {
+      const wanted = Math.min(CHUNK, BINARY_SCAN_BYTES - position);
+      const bytesRead = fs9__namespace.readSync(fd, buffer, 0, wanted, position);
+      if (bytesRead === 0) return false;
+      if (isBinaryBuffer(buffer.subarray(0, bytesRead))) return true;
+      position += bytesRead;
+    }
+    return false;
   } catch {
     return false;
   } finally {
@@ -4334,6 +4362,11 @@ function validateSnapshot(configInput) {
   const currentExcludes = config.excludePatterns.map(maskValue);
   const currentInclude = config.include.map(maskValue);
   const recorded = manifest.config;
+  if (recorded?.digest && recorded.digest !== configDigest(config)) {
+    drift.configMismatches.push(
+      "configuration: the settings differ from the ones this snapshot was generated with (run generate)"
+    );
+  }
   if (recorded && typeof recorded === "object") {
     if (recorded.maxPartBytes !== config.maxPartBytes) {
       drift.configMismatches.push(
@@ -5464,7 +5497,7 @@ async function runInit(options) {
 
 // src/index.ts
 var GENERATOR_NAME = "@ankurhalder/codebase-snapshot";
-var GENERATOR_VERSION = "4.0.4";
+var GENERATOR_VERSION = "4.0.6";
 var SCHEMA_VERSION = "3.0.0";
 function sha256Hex2(input) {
   return crypto__namespace.createHash("sha256").update(input).digest("hex");
@@ -6231,8 +6264,8 @@ function generateSnapshot(configInput, options) {
     const lineCount = countLines(rawContent);
     totalLines += lineCount;
     totalSizeBytes += stats.size;
-    const layer2 = classifyLayer(relativePath, config.layers);
-    const kind = classifyKind(relativePath, config.kinds);
+    const layer2 = maskPathText(classifyLayer(relativePath, config.layers), config.secretRules);
+    const kind = maskPathText(classifyKind(relativePath, config.kinds), config.secretRules);
     const language = detectLanguage(relativePath);
     bump(layerCounts, layer2);
     bump(kindCounts, kind);
@@ -6331,6 +6364,7 @@ function generateSnapshot(configInput, options) {
       largeFileBytes: config.largeFileBytes
     },
     config: {
+      digest: configDigest(config),
       maxPartBytes: config.maxPartBytes,
       largeFileBytes: config.largeFileBytes,
       previewHeadLines: config.previewHeadLines,
@@ -6341,7 +6375,12 @@ function generateSnapshot(configInput, options) {
       include: [...config.include].map(maskName),
       preset: config.preset,
       layersMode: config.layersMode,
-      budgets: { default: config.budgets.default, byLayer: { ...config.budgets.byLayer } },
+      budgets: {
+        default: config.budgets.default,
+        byLayer: Object.fromEntries(
+          Object.entries(config.budgets.byLayer).map(([name, bytes]) => [maskName(name), bytes])
+        )
+      },
       excludePatterns: [...config.excludePatterns].map(maskName),
       layers: config.layers.map((layer2) => maskName(layer2.name)),
       kinds: config.kinds.map((kind) => maskName(kind.kind))

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { J as JsonSummary, M as MarkdownSummary, S as SourceSummary, R as ResolvedSnapshotConfig, a as SnapshotConfig, B as ByteSize, C as CliOptions, F as FileEntry, P as PartMetadata, L as LayerRule, K as KindRule, b as SecretRule, c as SecretFinding, V as ValidationResult, d as Manifest, A as ArtifactSelection, e as SkipRecord } from './types-LSfwsKE-.cjs';
-export { f as BudgetConfig, H as HooksConfig, I as InclusionMode, g as ManifestArtifact, h as ManifestConfigSnapshot, i as ManifestIndexes, j as ManifestTotals, k as Mode, O as OutputFormat, l as PartFileEntry, m as ResolvedArtifacts, n as ResolvedBudgets, o as SecretRuleInput, p as SkipReason, q as SummaryQuality, r as ValidationDrift } from './types-LSfwsKE-.cjs';
+import { J as JsonSummary, M as MarkdownSummary, S as SourceSummary, R as ResolvedSnapshotConfig, a as SnapshotConfig, B as ByteSize, C as CliOptions, F as FileEntry, P as PartMetadata, L as LayerRule, K as KindRule, b as SecretRule, c as SecretFinding, V as ValidationResult, d as Manifest, A as ArtifactSelection, e as SkipRecord } from './types-x7aogSer.cjs';
+export { f as BudgetConfig, H as HooksConfig, I as InclusionMode, g as ManifestArtifact, h as ManifestConfigSnapshot, i as ManifestIndexes, j as ManifestTotals, k as Mode, O as OutputFormat, l as PartFileEntry, m as ResolvedArtifacts, n as ResolvedBudgets, o as SecretRuleInput, p as SkipReason, q as SummaryQuality, r as ValidationDrift } from './types-x7aogSer.cjs';
 
 /**
  * Strips `//` and block comments the way JSONC does, without touching anything
@@ -495,7 +495,7 @@ declare function matchesExclude(relativePath: string, pattern: string): boolean;
 declare function collectFiles(cwd: string, options?: CollectOptions): CollectResult;
 
 declare const GENERATOR_NAME = "@ankurhalder/codebase-snapshot";
-declare const GENERATOR_VERSION = "4.0.4";
+declare const GENERATOR_VERSION = "4.0.6";
 declare const SCHEMA_VERSION = "3.0.0";
 interface GenerateOptions {
     /** Compute the full manifest but write nothing to disk. */

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { J as JsonSummary, M as MarkdownSummary, S as SourceSummary, R as ResolvedSnapshotConfig, a as SnapshotConfig, B as ByteSize, C as CliOptions, F as FileEntry, P as PartMetadata, L as LayerRule, K as KindRule, b as SecretRule, c as SecretFinding, V as ValidationResult, d as Manifest, A as ArtifactSelection, e as SkipRecord } from './types-LSfwsKE-.js';
-export { f as BudgetConfig, H as HooksConfig, I as InclusionMode, g as ManifestArtifact, h as ManifestConfigSnapshot, i as ManifestIndexes, j as ManifestTotals, k as Mode, O as OutputFormat, l as PartFileEntry, m as ResolvedArtifacts, n as ResolvedBudgets, o as SecretRuleInput, p as SkipReason, q as SummaryQuality, r as ValidationDrift } from './types-LSfwsKE-.js';
+import { J as JsonSummary, M as MarkdownSummary, S as SourceSummary, R as ResolvedSnapshotConfig, a as SnapshotConfig, B as ByteSize, C as CliOptions, F as FileEntry, P as PartMetadata, L as LayerRule, K as KindRule, b as SecretRule, c as SecretFinding, V as ValidationResult, d as Manifest, A as ArtifactSelection, e as SkipRecord } from './types-x7aogSer.js';
+export { f as BudgetConfig, H as HooksConfig, I as InclusionMode, g as ManifestArtifact, h as ManifestConfigSnapshot, i as ManifestIndexes, j as ManifestTotals, k as Mode, O as OutputFormat, l as PartFileEntry, m as ResolvedArtifacts, n as ResolvedBudgets, o as SecretRuleInput, p as SkipReason, q as SummaryQuality, r as ValidationDrift } from './types-x7aogSer.js';
 
 /**
  * Strips `//` and block comments the way JSONC does, without touching anything
@@ -495,7 +495,7 @@ declare function matchesExclude(relativePath: string, pattern: string): boolean;
 declare function collectFiles(cwd: string, options?: CollectOptions): CollectResult;
 
 declare const GENERATOR_NAME = "@ankurhalder/codebase-snapshot";
-declare const GENERATOR_VERSION = "4.0.4";
+declare const GENERATOR_VERSION = "4.0.6";
 declare const SCHEMA_VERSION = "3.0.0";
 interface GenerateOptions {
     /** Compute the full manifest but write nothing to disk. */

package/dist/index.js

@@ -1,3 +1,3 @@
-export { ARTIFACT_NAMES, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, GENERATOR_NAME, GENERATOR_VERSION, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, PRESETS, PromptCancelled, SCHEMA_VERSION, anchorForPath, assertReplaceable, assertUsableConfigInput, collectFiles, compareManifests, countLines, defineConfig, detectLanguage, detectPreset, explainPath, fenceForContent, fenceForText, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, isBinaryBuffer, isBinaryExtension, isBinaryFile, isInteractive, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, profileForPath, renderConfig, renderDiffText, renderExplainText, renderMinimalConfig, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot } from './chunk-CDZDVU74.js';
+export { ARTIFACT_NAMES, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, GENERATOR_NAME, GENERATOR_VERSION, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, PRESETS, PromptCancelled, SCHEMA_VERSION, anchorForPath, assertReplaceable, assertUsableConfigInput, collectFiles, compareManifests, countLines, defineConfig, detectLanguage, detectPreset, explainPath, fenceForContent, fenceForText, generateProjectTree, generateSnapshot, generateSnapshotAsync, getPreset, globToRegExp, isBinaryBuffer, isBinaryExtension, isBinaryFile, isInteractive, isResolvedConfig, isSensitivePath, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, profileForPath, renderConfig, renderDiffText, renderExplainText, renderMinimalConfig, renumberParts, resolveConfig, resolveSafeOutputDirs, runInit, scanAndRedactSecrets, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, validateSnapshot } from './chunk-GAY7W5MK.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/{types-LSfwsKE-.d.cts → types-x7aogSer.d.cts}

@@ -207,6 +207,8 @@ interface ManifestIndexes {
 }
 /** Effective configuration recorded so `validate` can detect config drift. */
 interface ManifestConfigSnapshot {
+    /** Digest of the effective settings; see `configDigest`. */
+    digest?: string;
     maxPartBytes: number;
     largeFileBytes: number;
     previewHeadLines: number;

package/dist/{types-LSfwsKE-.d.ts → types-x7aogSer.d.ts}

@@ -207,6 +207,8 @@ interface ManifestIndexes {
 }
 /** Effective configuration recorded so `validate` can detect config drift. */
 interface ManifestConfigSnapshot {
+    /** Digest of the effective settings; see `configDigest`. */
+    digest?: string;
     maxPartBytes: number;
     largeFileBytes: number;
     previewHeadLines: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ankurhalder/codebase-snapshot",
-  "version": "4.0.4",
+  "version": "4.0.6",
   "description": "Production-grade LLM codebase snapshot generator, auditor, and AST partitioner",
   "keywords": [
     "codebase",