@c4a/extract-rush 0.7.1 → 0.7.5

package/README.md

@@ -7,10 +7,10 @@ workspace. It reports project identity, tags, subspaces, publish intent, entry
 signals, direct dependency/consumer edges, build phases and commands, release
 units, decoupled dependencies, and nearest `OWNERS` boundaries.
 
-The index is evidence for a Context knowledge project; it is not a product
-taxonomy. A project decides which facts matter to its audience and maps them to
-candidates through `extractCustom()`. Context continues to own source identity,
-candidate freshness, review, approved knowledge, and package output.
+The index is evidence for a Code Indexer Provider; it is not a product taxonomy.
+The Provider decides which facts matter to its audience and returns the current
+Indexer result. Context owns source identity, Candidate freshness, Review,
+approved knowledge, and package output.
 
 ## Place in the knowledge workflow
 
@@ -19,7 +19,7 @@ confirmed Rush repository boundary
               ↓
 rush.json + package.json + Rush config + OWNERS facts
               ↓
-project-owned candidate mapping
+selected Code Indexer Provider
               ↓
 reviewed architecture / ownership / package knowledge
 ```
@@ -62,7 +62,7 @@ index and Evidence ABI never copy raw shell commands or package scripts into
 facts.
 
 This optional package does not add a public Agent entry or Context lifecycle
-phase. It remains a reusable structural library for project adapters.
+phase. It remains a reusable structural library for Indexer Providers.
 The Evidence ABI conversion assigns one primary owner to each `rush.json`,
 selected `package.json`, and `OWNERS` input, binds project files to authorized
 module refs, and publishes workspace/project/dependency/owner facts as catalog

package/README.zh-CN.md

@@ -6,9 +6,9 @@
 subspace、发布意图、入口信号、直接依赖/消费者边、构建 phase/command、发布单元、解耦依赖和
 最近的 `OWNERS` 边界。
 
-这些索引是 Context 知识项目的证据，不是产品分类。项目决定哪些事实对目标读者有
-价值，并通过 `extractCustom()` 映射为候选；来源身份、候选新鲜度、审核、正式知识
-和知识包产出继续由 Context 负责。
+这些索引是 Code Indexer Provider 的结构证据，不是产品分类。Provider 决定哪些
+事实对目标读者有价值并返回当前 Indexer Result；来源身份、Candidate 新鲜度、
+审核、正式知识和知识包产出继续由 Context 负责。
 
 ## 在知识生产链中的位置
 
@@ -17,7 +17,7 @@ subspace、发布意图、入口信号、直接依赖/消费者边、构建 phas
            ↓
 rush.json + package.json + Rush 配置 + OWNERS 事实
            ↓
-项目自有候选映射
+选中的 Code Indexer Provider
            ↓
 经过审核的架构 / 归属 / package 知识
 ```

package/index.js

@@ -11653,6 +11653,8 @@ function keyTokens(key) {
   return key.replace(/([a-z0-9])([A-Z])/gu, "$1-$2").replace(/[^A-Za-z0-9]+/gu, "-").toLowerCase().split("-").filter(Boolean);
 }
 function sensitiveKey(key, value) {
+  if (value === INDEXER_OUTPUT_REDACTION_MARKER)
+    return false;
   const tokens = keyTokens(key);
   if (tokens.length === 0)
     return false;
@@ -11694,12 +11696,12 @@ function replaceWithCount(value, pattern, replacement, count) {
 function redactKnownText(value, count) {
   let output = value;
   output = replaceWithCount(output, /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/gu, INDEXER_OUTPUT_REDACTION_MARKER, count);
-  output = replaceWithCount(output, /(\bauthorization\s*:\s*(?:bearer|basic)\s+)[^\s,;]+/giu, (_match, prefix) => `${prefix}${INDEXER_OUTPUT_REDACTION_MARKER}`, count);
+  output = replaceWithCount(output, new RegExp(`(\\bauthorization\\s*:\\s*(?:bearer|basic)\\s+)` + `(?!${escapeRegExp(INDEXER_OUTPUT_REDACTION_MARKER)})[^\\s,;]+`, "giu"), (_match, prefix) => `${prefix}${INDEXER_OUTPUT_REDACTION_MARKER}`, count);
   output = replaceWithCount(output, /([a-z][a-z0-9+.-]*:\/\/)[^\s/@:]+:[^\s/@]+@/giu, (_match, prefix) => `${prefix}${INDEXER_OUTPUT_REDACTION_MARKER}@`, count);
-  output = replaceWithCount(output, /([?&](?:access_token|refresh_token|api_key|password|secret)=)[^&#\s]+/giu, (_match, prefix) => `${prefix}${INDEXER_OUTPUT_REDACTION_MARKER}`, count);
+  output = replaceWithCount(output, new RegExp(`([?&](?:access_token|refresh_token|api_key|password|secret)=)` + `(?!${escapeRegExp(INDEXER_OUTPUT_REDACTION_MARKER)})[^&#\\s]+`, "giu"), (_match, prefix) => `${prefix}${INDEXER_OUTPUT_REDACTION_MARKER}`, count);
   const key = "(?:[A-Za-z0-9_.-]*(?:password|passwd|pwd|secret|token|credential|cookie)[A-Za-z0-9_.-]*|api[-_]?key|access[-_]?(?:key|token)|private[-_]?key|client[-_]?secret|authorization)";
   const assignment = `(?:=\\s*|:\\s+(?=\\S)|:\\s*(?=["']))`;
-  output = replaceWithCount(output, new RegExp(`((?:["']?${key}["']?)\\s*${assignment})(?:"(?:\\\\.|[^"])*"|'(?:\\\\.|[^'])*'|[^\\s,;}\\]]+)`, "giu"), (_match, prefix) => `${prefix}"${INDEXER_OUTPUT_REDACTION_MARKER}"`, count);
+  output = replaceWithCount(output, new RegExp(`((?:["']?${key}["']?)\\s*${assignment})` + `(?!["']?${escapeRegExp(INDEXER_OUTPUT_REDACTION_MARKER)})` + `(?:"(?:\\\\.|[^"])*"|'(?:\\\\.|[^'])*'|[^\\s,;}\\]]+)`, "giu"), (_match, prefix) => `${prefix}"${INDEXER_OUTPUT_REDACTION_MARKER}"`, count);
   return output;
 }
 function redactBlockedText(value, blocked, count) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4a/extract-rush",
-  "version": "0.7.1",
+  "version": "0.7.5",
   "type": "module",
   "description": "Rush workspace structural index for Context",
   "license": "MIT",