@jinn-network/core 0.1.0-canary.a8ebdb2a → 0.1.1-canary.7b188db5

package/dist/scrub/eval/fixtures.js

@@ -66,6 +66,23 @@ export function syntheticFixtures() {
             profile: 'seed',
             mustSurvive: true,
         },
+        // Hazard: GIT_CONFIG tutorial blocks are env-shaped but not secret dumps (#2005).
+        {
+            id: 'hazard-git-config-tutorial-survive',
+            text: [
+                'export GIT_CONFIG_GLOBAL=/dev/null',
+                'export GIT_CONFIG_SYSTEM=/dev/null',
+                'export GIT_CONFIG_NOSYSTEM=1',
+                'export GIT_CONFIG_COUNT=2',
+                'export GIT_CONFIG_KEY_0=credential.helper',
+                'export GIT_CONFIG_VALUE_0=',
+                'export GIT_CONFIG_KEY_1=core.askPass',
+                'export GIT_CONFIG_VALUE_1=/attempt/askpass',
+            ].join('\n'),
+            labels: [],
+            profile: 'seed',
+            mustSurvive: true,
+        },
         // Hazard: loopback IP must survive (illustrative config knowledge).
         {
             id: 'hazard-loopback-ip-survive',

package/dist/scrub/reject-classes-detector.js

@@ -25,6 +25,9 @@ const KEY_CONTEXT = /\b(?:private[_\s-]?key|privkey|secret[_\s-]?key|wallet[_\s-
 const HEX64 = /\b(?:0x)?([a-fA-F0-9]{64})\b/g;
 /** ENV-style assignment line. */
 const ENV_LINE = /^[A-Z][A-Z0-9_]*=.*$/;
+const ENV_KEY = /^([A-Z][A-Z0-9_]*)=/;
+/** Git's GIT_CONFIG_* override tutorial shape — not a secret dump (#2005). */
+const GIT_CONFIG_ENV_KEY = /^GIT_CONFIG(?:_|$)/i;
 const MIN_ENV_RUN = 3;
 export function rejectClassesDetector(policy) {
     const meta = { name: 'reject-classes', version: VERSION };
@@ -156,7 +159,7 @@ function scanEnvBlocks(text, key, detector) {
         const trimmed = line.trim();
         // Allow optional leading export / whitespace.
         const candidate = trimmed.replace(/^export\s+/, '');
-        if (ENV_LINE.test(candidate)) {
+        if (isEnvBlockAssignment(candidate)) {
             if (runStart < 0) {
                 runStart = i;
                 runStartOffset = offset + (line.length - line.trimStart().length);
@@ -164,9 +167,9 @@ function scanEnvBlocks(text, key, detector) {
             runCount += 1;
             runEndOffset = offset + line.length;
         }
-        else if (trimmed === '' && runCount > 0) {
-            // Blank line inside a dump still counts as continuing the block visually,
-            // but does not increment — only flush on a non-env non-blank line.
+        else if ((trimmed === '' || isGitConfigEnvAssignment(candidate)) && runCount > 0) {
+            // Blank and GIT_CONFIG tutorial lines inside a dump keep the run open,
+            // but do not increment it — only flush on another non-env line.
         }
         else {
             flush();
@@ -176,3 +179,17 @@ function scanEnvBlocks(text, key, detector) {
     flush();
     return findings;
 }
+function isEnvBlockAssignment(candidate) {
+    if (!ENV_LINE.test(candidate))
+        return false;
+    const keyMatch = ENV_KEY.exec(candidate);
+    if (!keyMatch)
+        return false;
+    return !GIT_CONFIG_ENV_KEY.test(keyMatch[1]);
+}
+function isGitConfigEnvAssignment(candidate) {
+    if (!ENV_LINE.test(candidate))
+        return false;
+    const keyMatch = ENV_KEY.exec(candidate);
+    return keyMatch !== null && GIT_CONFIG_ENV_KEY.test(keyMatch[1]);
+}

package/dist/scrub/reject-publish-error.d.ts

@@ -11,7 +11,14 @@ export declare class RejectPublishError extends Error {
     readonly findings: Finding[];
     constructor(scrubClass: ScrubClass, findings?: Finding[]);
 }
-/** Findings whose policy disposition is reject-publish. */
+/**
+ * Findings whose policy disposition is reject-publish.
+ *
+ * A5 `drop-key` findings are structural removals, not catastrophic content:
+ * the key-policy detector has already removed the entire attribute before
+ * this guard runs. Only content-level A5 findings (such as an env-block
+ * embedded in tool output) must abort the publish.
+ */
 export declare function rejectPublishFindings(findings: Finding[] | undefined, policy?: PolicyTable): Finding[];
 /**
  * Throw a class-named {@link RejectPublishError} when reject-publish fired.

package/dist/scrub/reject-publish-error.js

@@ -17,11 +17,19 @@ export class RejectPublishError extends Error {
         this.findings = findings;
     }
 }
-/** Findings whose policy disposition is reject-publish. */
+/**
+ * Findings whose policy disposition is reject-publish.
+ *
+ * A5 `drop-key` findings are structural removals, not catastrophic content:
+ * the key-policy detector has already removed the entire attribute before
+ * this guard runs. Only content-level A5 findings (such as an env-block
+ * embedded in tool output) must abort the publish.
+ */
 export function rejectPublishFindings(findings, policy = DEFAULT_POLICY) {
     if (!findings?.length)
         return [];
-    return findings.filter((f) => resolveDisposition(f.class, f.confidence, policy) === 'reject-publish');
+    return findings.filter((f) => !f.evidence.includes('drop-key') &&
+        resolveDisposition(f.class, f.confidence, policy) === 'reject-publish');
 }
 /**
  * Throw a class-named {@link RejectPublishError} when reject-publish fired.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jinn-network/core",
-  "version": "0.1.0-canary.a8ebdb2a",
+  "version": "0.1.1-canary.7b188db5",
   "description": "Domain core for Jinn — evidence/contribution stores, scrub, trajectory parsing, and corpus reads. Independent of client/src.",
   "type": "module",
   "packageManager": "yarn@4.13.0",
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@huggingface/transformers": "^4.2.0",
-    "@jinn-network/plugin": "0.1.0-canary.a8ebdb2a",
+    "@jinn-network/plugin": "0.1.1-canary.7b188db5",
     "@lmoe/gliner-onnx": "0.1.0",
     "@noble/hashes": "^2.2.0",
     "@secretlint/core": "^13.0.2",