@brainervirus/workit-pi 8.24.0 → 8.25.0

package/dist/worker.js

@@ -7167,6 +7167,104 @@ import { createHash as createHash3, randomBytes } from "node:crypto";
 import fs3 from "node:fs";
 import path5 from "node:path";
 
+// packages/workit-core/src/core/policy/substance.ts
+var SLASH_BLOCK = [["/*", "*/"]];
+var C_LIKE = { line: ["//"], block: SLASH_BLOCK, quotes: `"'` };
+var SYNTAXES = Object.fromEntries([
+  ...["ts", "mts", "cts", "js", "mjs", "cjs"].map((ext) => [ext, { ...C_LIKE, js: true }]),
+  ...["java", "kt", "kts", "scala", "swift", "dart", "groovy"].map((ext) => [
+    ext,
+    { ...C_LIKE, triple: true }
+  ]),
+  ["go", { ...C_LIKE, rawBacktick: true }],
+  ...["css", "scss", "less"].map((ext) => [
+    ext,
+    { line: [], block: SLASH_BLOCK, quotes: `"'`, cssUrl: true }
+  ]),
+  ...["py", "pyi"].map((ext) => [
+    ext,
+    { line: ["#"], block: [], quotes: `"'`, triple: true, indented: true, fstring: true }
+  ]),
+  ["toml", { line: ["#"], block: [], quotes: `"`, literal: "'", triple: true }],
+  ...["html", "htm", "xml", "svg", "xhtml"].map((ext) => [
+    ext,
+    { line: [], block: [["<!--", "-->"]], quotes: "", indented: true }
+  ])
+]);
+var REGEX_KEYWORDS = new Set([
+  "return",
+  "typeof",
+  "instanceof",
+  "case",
+  "do",
+  "else",
+  "in",
+  "of",
+  "new",
+  "delete",
+  "void",
+  "throw",
+  "yield",
+  "await"
+]);
+var decoder = new TextDecoder("utf-8", { fatal: true });
+
+// packages/workit-core/src/core/policy/lane.ts
+var RISK_TOKENS = new Set([
+  "auth",
+  "authn",
+  "authz",
+  "oauth",
+  "security",
+  "permission",
+  "permissions",
+  "secret",
+  "secrets",
+  "crypto",
+  "gate",
+  "gates",
+  "policy",
+  "policies",
+  "hook",
+  "hooks",
+  "husky",
+  "lefthook",
+  "release",
+  "releases",
+  "migration",
+  "migrations",
+  "migrate",
+  "workflows"
+]);
+var RISK_FILES = new Set([
+  ".gitlab-ci.yml",
+  "Jenkinsfile",
+  "azure-pipelines.yml",
+  ".pre-commit-config.yaml",
+  ".workit/risk-paths"
+]);
+var RISK_NAMES = new Set([".gitattributes"]);
+var LOCKFILES = new Set([
+  "bun.lock",
+  "bun.lockb",
+  "package-lock.json",
+  "npm-shrinkwrap.json",
+  "yarn.lock",
+  "pnpm-lock.yaml",
+  "Cargo.lock",
+  "go.sum",
+  "poetry.lock",
+  "uv.lock",
+  "Pipfile.lock",
+  "Gemfile.lock",
+  "composer.lock"
+]);
+var globCache = new Map;
+var REGULAR = new Set(["100644", "100755"]);
+
+// packages/workit-core/src/core/policy/carry.ts
+var TEST_ONLY_KINDS = new Set(["doc", "cosmetic", "generated", "test"]);
+
 // packages/workit-core/src/hooks/standing-signal.ts
 import { createHash as createHash2 } from "node:crypto";
 import fs2 from "node:fs";
@@ -7506,6 +7604,7 @@ var SHELL_VOUCHED_HOSTS = new Set([
   "codex_cli",
   "codex_desktop"
 ]);
+var restackExact = new WeakMap;
 var fromLead = (row, leads) => leads === null || row.actor.session !== null && leads.includes(row.actor.session);
 function activeStanding(rows, fanout, leads = null) {
   const active = [];
@@ -7534,109 +7633,6 @@ var OBSERVED_ONLY = new Set([
   "policy.judged",
   ...PR_ROW_TYPES
 ]);
-// packages/workit-core/src/forge/redact.ts
-var KEY = String.raw`[A-Za-z0-9_.-]*?(?:token|secret|password|passwd|pwd|api[_-]?key|access[_-]?key|account[_-]?key|private[_-]?key|client[_-]?secret|credentials?|authorization|cookie|signature)[A-Za-z0-9_.-]*`;
-var ASSIGNMENT = new RegExp(String.raw`(?<![A-Za-z0-9])(["']?${KEY}["']?\s*[:=]\s*["']?)((?:bearer|basic|token|digest)\s+)?([^\s"',;&]+)`, "giu");
-var QUOTED_ASSIGNMENT = new RegExp(String.raw`(?<![A-Za-z0-9])(["']?${KEY}["']?\s*[:=]\s*)(["'])([^"'\n]*[^\s"'][^"'\n]*)\2`, "giu");
-var ANSI = new RegExp(String.raw`\u001b\[[0-9;?]*[ -/]*[@-~]|\u001b\][^\u0007]*\u0007`, "gu");
-
-// packages/workit-core/src/git/ops.ts
-var COMMIT_TIMEOUT_MS = 10 * 60000;
-
-// packages/workit-core/src/core/policy/substance.ts
-var SLASH_BLOCK = [["/*", "*/"]];
-var C_LIKE = { line: ["//"], block: SLASH_BLOCK, quotes: `"'` };
-var SYNTAXES = Object.fromEntries([
-  ...["ts", "mts", "cts", "js", "mjs", "cjs"].map((ext) => [ext, { ...C_LIKE, js: true }]),
-  ...["java", "kt", "kts", "scala", "swift", "dart", "groovy"].map((ext) => [
-    ext,
-    { ...C_LIKE, triple: true }
-  ]),
-  ["go", { ...C_LIKE, rawBacktick: true }],
-  ...["css", "scss", "less"].map((ext) => [
-    ext,
-    { line: [], block: SLASH_BLOCK, quotes: `"'`, cssUrl: true }
-  ]),
-  ...["py", "pyi"].map((ext) => [
-    ext,
-    { line: ["#"], block: [], quotes: `"'`, triple: true, indented: true, fstring: true }
-  ]),
-  ["toml", { line: ["#"], block: [], quotes: `"`, literal: "'", triple: true }],
-  ...["html", "htm", "xml", "svg", "xhtml"].map((ext) => [
-    ext,
-    { line: [], block: [["<!--", "-->"]], quotes: "", indented: true }
-  ])
-]);
-var REGEX_KEYWORDS = new Set([
-  "return",
-  "typeof",
-  "instanceof",
-  "case",
-  "do",
-  "else",
-  "in",
-  "of",
-  "new",
-  "delete",
-  "void",
-  "throw",
-  "yield",
-  "await"
-]);
-var decoder = new TextDecoder("utf-8", { fatal: true });
-
-// packages/workit-core/src/core/policy/lane.ts
-var RISK_TOKENS = new Set([
-  "auth",
-  "authn",
-  "authz",
-  "oauth",
-  "security",
-  "permission",
-  "permissions",
-  "secret",
-  "secrets",
-  "crypto",
-  "gate",
-  "gates",
-  "policy",
-  "policies",
-  "hook",
-  "hooks",
-  "husky",
-  "lefthook",
-  "release",
-  "releases",
-  "migration",
-  "migrations",
-  "migrate",
-  "workflows"
-]);
-var RISK_FILES = new Set([
-  ".gitlab-ci.yml",
-  "Jenkinsfile",
-  "azure-pipelines.yml",
-  ".pre-commit-config.yaml",
-  ".workit/risk-paths"
-]);
-var RISK_NAMES = new Set([".gitattributes"]);
-var LOCKFILES = new Set([
-  "bun.lock",
-  "bun.lockb",
-  "package-lock.json",
-  "npm-shrinkwrap.json",
-  "yarn.lock",
-  "pnpm-lock.yaml",
-  "Cargo.lock",
-  "go.sum",
-  "poetry.lock",
-  "uv.lock",
-  "Pipfile.lock",
-  "Gemfile.lock",
-  "composer.lock"
-]);
-var globCache = new Map;
-var REGULAR = new Set(["100644", "100755"]);
 // packages/workit-core/src/hooks/raw-git.ts
 var SHELLS = new Set(["sh", "bash", "zsh", "dash", "ksh", "ash", "mksh", "yash", "fish"]);
 var POWERSHELLS = new Set(["pwsh", "powershell"]);