@mnemonik/cli 7.141.0 → 7.141.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (40) hide show
  1. package/dist/auth/credentials.js +266 -3
  2. package/dist/auth/index.js +266 -3
  3. package/dist/auth/installSession.js +262 -0
  4. package/dist/auth/status.js +262 -0
  5. package/dist/authorizationWords.js +262 -0
  6. package/dist/diagnostics.js +266 -3
  7. package/dist/digests.json +38 -38
  8. package/dist/hooksLog.js +4 -0
  9. package/dist/identity/migrate.js +266 -3
  10. package/dist/install/hosts.js +262 -0
  11. package/dist/install/journal.js +266 -3
  12. package/dist/install/journey.js +266 -3
  13. package/dist/install/ownership.js +266 -3
  14. package/dist/install/transaction.js +266 -3
  15. package/dist/install/ui.js +266 -3
  16. package/dist/installSession.js +262 -0
  17. package/dist/installation.js +266 -3
  18. package/dist/launcher.js +266 -3
  19. package/dist/preflight.js +354 -92
  20. package/dist/project/eligibility.js +266 -3
  21. package/dist/project/records.js +266 -3
  22. package/dist/project.js +270 -7
  23. package/dist/router.js +270 -7
  24. package/dist/runtime/releaseSource.js +266 -3
  25. package/dist/runtime/selfUpdate.js +266 -3
  26. package/dist/runtime/signers.js +67 -7
  27. package/dist/runtime/store.js +4 -0
  28. package/dist/runtime/updateCheck.js +266 -3
  29. package/dist/sbom.json +21 -21
  30. package/dist/scanner/control.js +266 -3
  31. package/dist/scanner/data.js +262 -0
  32. package/dist/scanner/discover.js +354 -92
  33. package/dist/scanner/enable.js +270 -7
  34. package/dist/scanner/picker.js +325 -63
  35. package/dist/scanner/service.js +266 -3
  36. package/dist/scanner/update.js +266 -3
  37. package/dist/scanner-release.json +24 -24
  38. package/dist/status.js +266 -3
  39. package/dist/vendor/local-setup.js +266 -3
  40. package/package.json +31 -31
package/dist/digests.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "dist/authorizationWords.d.ts": "1a1de1fa3e9b11676b8af98d26da1a0658632667c11911a63084fb45aea9c8bd",
3
3
  "dist/authorizationWords.d.ts.map": "260ff8f1e21dae3eac3e5df35b098f3f1e18ad66938817acd0407f85edc49977",
4
- "dist/authorizationWords.js": "4a605e8b84a49c9d6261e69c721ec37b14f7ab525d87ea8eba7a2dfa51a6e25f",
4
+ "dist/authorizationWords.js": "4d5da4c1b0db49859d047d23534bf353ddfb10afe2f91e51460f8374b80c79c0",
5
5
  "dist/authorizationWords.js.map": "e6553632fa9fe8a1e145a228f740a1b0681c2bb49da936a65ce12952aa74c195",
6
6
  "dist/bin.d.ts": "eacba108ec9dd580caa5068fe681580d84c4afa3473d19fd2b5b607237f3a25c",
7
7
  "dist/bin.d.ts.map": "c5ed654e79ddd9ae0c330f5ea6b66d5f9e94d567b8880961b305c3e00b008127",
@@ -13,7 +13,7 @@
13
13
  "dist/consent.js.map": "caa36a4d56ad058c43100794648f3fcdff13a29ee6da0044eb043f262a4d30c5",
14
14
  "dist/diagnostics.d.ts": "419b5baee4bee84895b08c54b0761bbab6064cee4ae387c45b8f0dad25643e8b",
15
15
  "dist/diagnostics.d.ts.map": "770d7e9aae1f897f14ec83e911f57bce583d5197a38c9581aba9f3be2cb5eb6c",
16
- "dist/diagnostics.js": "ca914358fa0e3ad7528d1f407284e83590bb3dd60c93baab17c00f35848da50c",
16
+ "dist/diagnostics.js": "3b8b949f9510126c3e1912797995319dbdbd6dcfc6c4726424550a2ea78f9943",
17
17
  "dist/diagnostics.js.map": "26fc5a309012ae742562401dd5969a4c4c19b0f53364cbd1cbadd5746e14a38d",
18
18
  "dist/help.d.ts": "d39f9bfe9eba143f1775a5f212dd7302ab8d15eef480c0caef43ef886f2b322a",
19
19
  "dist/help.d.ts.map": "519b90447a74f24ab43cd58f59b884d0af11aadf825d23d0104a1f6807a9bfca",
@@ -21,7 +21,7 @@
21
21
  "dist/help.js.map": "3575e3da92c72fad5bd86ce3670c535cb573df8942c3bd8b757ad5eb108af9b3",
22
22
  "dist/hooksLog.d.ts": "3a9de944469513a7266410e92d6ac99ea8e8e7dd2fe17c7aa6414cc98b801088",
23
23
  "dist/hooksLog.d.ts.map": "ba94ffb2a27b26b15fd641039958857f7ffc60479d67aaa30862822d0d97cceb",
24
- "dist/hooksLog.js": "55b7d9c9185a562447b756f08813fc8642ac1c8a7c13f146fab50450354b92cf",
24
+ "dist/hooksLog.js": "5161112f35e19b812b84b75e0cf3e0ea3360fbb09b80947cc1d22ecc707b71be",
25
25
  "dist/hooksLog.js.map": "eb8895df6a2fb69ae68b4a15d20e4a557221bb51dfe62106cd25e134e3e09a60",
26
26
  "dist/hostDiscovery.d.ts": "7ed39f9b4da7e9df762bc7a3d76637a0b3c271024ae78de31af408b3858c3920",
27
27
  "dist/hostDiscovery.d.ts.map": "59a6632184d195e4d0f569d26cc2d00b0abe2a897402c476d754f440e36938e7",
@@ -37,15 +37,15 @@
37
37
  "dist/index.js.map": "cdeb50386d1aa1615e6e67bb4c609cd16f1f314437463798f7d063e12a1f5c9c",
38
38
  "dist/installSession.d.ts": "ad8b459885dd96ffc155827326ac5d8bda9b9f36ea1dff4686dcf639e05ee0b7",
39
39
  "dist/installSession.d.ts.map": "7f901d81b02f52048cc650754e9838453f05be027abccbe018f3c919c10962f7",
40
- "dist/installSession.js": "2435def89db303be1cf354ce315dd2a1f4a2e688ff102ab525881b01aa98d62a",
40
+ "dist/installSession.js": "68424e43cdf2eb963598919de4bce12363499ef744a3f3fa25601801ab14b605",
41
41
  "dist/installSession.js.map": "d38f26456e4504bdd038ce888c796589538e17f4cc6a90dbc7981984cb5426a0",
42
42
  "dist/installation.d.ts": "88d4e47f7d48d104cdf67d882aaa3313cde8e9cd9232f160f38d1a77f49a37ea",
43
43
  "dist/installation.d.ts.map": "43b04d7f3b2058b2665fb3e9f43ebaeb56c75a9dee9880ab60abe9761c569572",
44
- "dist/installation.js": "373e8d992698e4b6fa374b773728501683216301c3684795240380245f3b336e",
44
+ "dist/installation.js": "f052cee38ec5b6f2768b16c743753292a3745745ea489338249560eedffd36a2",
45
45
  "dist/installation.js.map": "a9ad48929b3f9e92b0c0faa1a803276b2a3564cc7046b39501e09d16eacd1970",
46
46
  "dist/launcher.d.ts": "f8ad93b83e6f57df9c2d4244f3713fdb3f5d7fb88f697d5c559f0220a017112c",
47
47
  "dist/launcher.d.ts.map": "3a3383c49c2cd0f481ca84d63c76d8105b1498b90711dc8d0e41bbd7b913af4d",
48
- "dist/launcher.js": "a56604e26436a68d9e55d828beef1dd5cba11f6392712678fad52fc55b7c7870",
48
+ "dist/launcher.js": "88d6b9a158ef542f05dd9498900dbb7879c47f14b7fed4d6610110df64c79c32",
49
49
  "dist/launcher.js.map": "2c5e3b9c20483fbe53a0f7ba755a6596365f9e0c03d6245c8b435bc97b42c5e4",
50
50
  "dist/output.d.ts": "42b742421ba5ef89e56d50d8fbae20150cb9f7197a154d86a3db50cf0cb4ac67",
51
51
  "dist/output.d.ts.map": "0927960c51b81dac40c0625037e86f67a01767529f9eb1b60d1ec4e2c8715d65",
@@ -53,25 +53,25 @@
53
53
  "dist/output.js.map": "241954e67e0dec98ddaea021987f5f81692fe66ab66812d24641265d603e1ebc",
54
54
  "dist/preflight.d.ts": "343f123530adb2dfbac45c3f4081e4188a8052bb2a4da9c21af46cdaf4e89478",
55
55
  "dist/preflight.d.ts.map": "6d8a4cfe7176686e9aa9e6c5f5913f718e3a45e9371fbf66332031e2ed2146c1",
56
- "dist/preflight.js": "5ec5a398cf6206e6a03c073ecd0c5c2b0f8983c8961dae0d656a92768d6ebd17",
56
+ "dist/preflight.js": "bd0754764aee62fd570060794e4b8fe64988a2b62807c872e9b08101f6cda139",
57
57
  "dist/preflight.js.map": "f4a10cb59874fb7d163d27ec348bf717b9e529f54b6ed96c27d2b68985b8b4cf",
58
58
  "dist/project.d.ts": "b3bcb4e900b14dbefbe182b896dd750f06d83fd1a306fba5d6242c9a223c7f3f",
59
59
  "dist/project.d.ts.map": "71314e36ba36b3cc4a6e95e366519d6762fffd6d5ae5100362f8715f7cf4b580",
60
- "dist/project.js": "b5d5970a0dcac950d201765be29f783a0425e9142ff524ff093cb80489ba9824",
60
+ "dist/project.js": "327f595e50eb2f55fc3c2c37af637545394a29d0dd940812707dce09e1d465d5",
61
61
  "dist/project.js.map": "926e28071ea230678afdc319c69b637c5058cd49fed31d6338c1829d7c92c16a",
62
62
  "dist/router.d.ts": "592849076349d8805cd0e654036e060b3c4b8ce0eca4742580756834f829f918",
63
63
  "dist/router.d.ts.map": "34a08fa1e02abb0d735dd299034bb8490a97a8d781e299d4a33e9e4128b383ac",
64
- "dist/router.js": "e007b47c7dd0a1bcb36114044daa1c46eafbcd4ecadf7cc47791312bd5a69add",
64
+ "dist/router.js": "bf7401c543b1935478aacfd08ff30dcedd79cd4fc431b335e5bc4862855ad013",
65
65
  "dist/router.js.map": "39e552670c6591bda58e5efc412a0e13fbc0f8d50219a96ebaf3a4e94f5843a6",
66
- "dist/sbom.json": "26e2c1c176d0cd8c574c16f2dce6585bea73b69b9e0b4fbe9d694d7e12692474",
67
- "dist/scanner-release.json": "38d1e2788cb588788bb557f5591c3b1f6eb67fa91824d75ef27b99182a966503",
66
+ "dist/sbom.json": "11480c12dad9ed62d5a8d9f54f407611e8ed1a98904f5f8936eaa163ca0b71cd",
67
+ "dist/scanner-release.json": "0bb3a418df4d513df3c2c928f721aa0dcf695fd0db898d63b8bb96e3da442c06",
68
68
  "dist/screens.d.ts": "365071231380d4e1513575d6c5196976195836b2983027f626d61ea2951b4cdd",
69
69
  "dist/screens.d.ts.map": "f905a74cd814586a12569acedf95b7375f72179ad979f5a6eea6aedc7c8291c3",
70
70
  "dist/screens.js": "c4b8e563b6268552e97780460f46fd860c5a323f32df59290615f54ec7e84443",
71
71
  "dist/screens.js.map": "92c71902f4eb8086ce0337cadf4ca169eb0377b844b6978b41a55220ffdafb00",
72
72
  "dist/status.d.ts": "989b0fa46de345b7aa2a52db38aad3d8342604c75ee2669900e398b76f90b340",
73
73
  "dist/status.d.ts.map": "153b7b7bb32bf38d0a2435eb6815da872701d5c4f4df0da481324cc2e9638a9a",
74
- "dist/status.js": "2f26479e7aab884f5d593600552a7a20089e33ffe5b76d5a17351df7ce315649",
74
+ "dist/status.js": "c7e9d9e02433bf7eac01aeb9266974ddd647e7fe12dadd4f38a787bb568300d3",
75
75
  "dist/status.js.map": "5e7521261db7b10f92101d8f0cd2d0625af818d3a9871b7819a383f8afb09888",
76
76
  "dist/auth/claudeCodeSignIn.d.ts": "173aab8a1c3616ac7f72d7c495c45a7bde3755a70c9e5d4440f0c82c857ecbc4",
77
77
  "dist/auth/claudeCodeSignIn.d.ts.map": "f088daa170871ee96d14096f6ca43ec959d69110a79a84c98421480f1eb64f9f",
@@ -83,7 +83,7 @@
83
83
  "dist/auth/codexAuthorization.js.map": "3da00f1924a98866fbcc0f0f5b35e0c9f46f10b82fdacfb9fb88468a923505d1",
84
84
  "dist/auth/credentials.d.ts": "6cbb63a8c50243770046f3d1dd56fb156d96344a5de79eb35b535b6ec0159480",
85
85
  "dist/auth/credentials.d.ts.map": "9615a56dfec89fe88d470cded00eabaefd4950fc148e95536da8c5b810a4c27d",
86
- "dist/auth/credentials.js": "045248b4994cf11ee820670bd5db780b3097c6fd465b5e04d218fa6bde0467a8",
86
+ "dist/auth/credentials.js": "80e68ae029fbcb3436559e2f72e2021b95059c33de28008ad7fb84a9fccdc068",
87
87
  "dist/auth/credentials.js.map": "7751d7e9e0e1140707879173eaabb320abfddb4f4a8d43a59f68955b3c10a80c",
88
88
  "dist/auth/cursorAuthorization.d.ts": "e85e1af269a8d42a1bdd7c7f2a330704c177a55b3ca89e7e62432efc1b1213b2",
89
89
  "dist/auth/cursorAuthorization.d.ts.map": "05e6a572f98d361dab86d495b899a07c3411e178ea355730b1539b711ac58a63",
@@ -95,11 +95,11 @@
95
95
  "dist/auth/device.js.map": "0aa0dd9ca470e82b02e07d8fb52ee57b8967354c356ee49b8e5838a35fd7cf66",
96
96
  "dist/auth/index.d.ts": "9ed95ab82eba373d54220dede98a2e8b8fc9eaccbc8671939e8d620cdef4f5d4",
97
97
  "dist/auth/index.d.ts.map": "dea0cc099019e3b1daba03da1fe8ec3609f68cfe4fb0eccd2916d7f55a735269",
98
- "dist/auth/index.js": "d760aa5701a7e0024664cbae6bf9867963aa1fdfac68e172ba50566a11675be5",
98
+ "dist/auth/index.js": "c8d02d240bbbc72aa3da14609fbda96b312b10c242d040211626bfd8907c63bd",
99
99
  "dist/auth/index.js.map": "41a979f9a4121dfd09b8b20933d69f17999e541cfc58dcfe0918ff170d9f19b4",
100
100
  "dist/auth/installSession.d.ts": "ed8988db918345f6b7129c0ef5b4d6e56dd614ae49b9f24857ba69a69df90116",
101
101
  "dist/auth/installSession.d.ts.map": "cf175e2b3a290c6316bf1668ac4a6480339b6f48fb6921ec6a4f3cf09ce13c83",
102
- "dist/auth/installSession.js": "f3b7b5db34d5af1dc94a9b9584a792f1852e19328a7713e5b866ccbcc63a78f9",
102
+ "dist/auth/installSession.js": "1a589a6f663e2d23c67c28a31b96ef3038a4570d4037cb3e3349eefc9c769f8c",
103
103
  "dist/auth/installSession.js.map": "a1b949763834411f84441c4ffc7ce493320217df5e8477717720c935c1559485",
104
104
  "dist/auth/machineName.d.ts": "2c9287cf76d171da88a45b8859c721254b45f8fdae3710eb247ae48bf3a1bc82",
105
105
  "dist/auth/machineName.d.ts.map": "432ee18e59b6d876a7fc32bef8fdc4c383d8cc4b0fa9339f68d9b61907f4b4ac",
@@ -111,7 +111,7 @@
111
111
  "dist/auth/pkce.js.map": "46cfb493a0b3f59d34a3b3214db05b0473f566be8552f629750505de325bfa32",
112
112
  "dist/auth/status.d.ts": "bec633d49f3a61206bd6245ec785417af2852dd2cbcc184a5615bb52dc752479",
113
113
  "dist/auth/status.d.ts.map": "c9989de25590b3ded130e24294c30b06bd5d3b52dd9d10d0e82de2ed6e3be939",
114
- "dist/auth/status.js": "96bb3a08f5ec9963eae7a3781a3cb7bdc5b0781c1022c53be29b42cab8b39412",
114
+ "dist/auth/status.js": "53a90ea66d6cc86cf54474644aea48124459e85ae86e666c31f5f5ac483a08d0",
115
115
  "dist/auth/status.js.map": "f10b653847a3195b5b5a0c1b7a774663ca9d1c7924ab4e38bc5c20805e84760a",
116
116
  "dist/auth/storedAuthorization.d.ts": "a5909b6cd5895e5b8e3bb42645db9dffc8a09a39a6a82c6555f72af8a7107a7b",
117
117
  "dist/auth/storedAuthorization.d.ts.map": "12f2c9b29fc2afb4fd172826477ff18a5d9724de0324ac3fe130f98e5b4f7c69",
@@ -119,7 +119,7 @@
119
119
  "dist/auth/storedAuthorization.js.map": "aa0fda8bc360f1a3463fb03fabfd2c6d917ab7277b71777226982133a47de75f",
120
120
  "dist/identity/migrate.d.ts": "7493955bc95dd1876cef60481bda4808af7be2a9ccfc4cc02831e41043b16c29",
121
121
  "dist/identity/migrate.d.ts.map": "0d3a9da77695c3f39e3c98fcc6089c62bb0518a75f2bde72948cd3d20712b2bf",
122
- "dist/identity/migrate.js": "e3b479865de89e5f0ae0732b25b0a31e2b4d34a780c16310e20ea414f9aa80ad",
122
+ "dist/identity/migrate.js": "872b5eff010ce57836030bcb167badc86ab799d4a1c007f2b2fec70a88b588a5",
123
123
  "dist/identity/migrate.js.map": "0c2b6595648cac1f4328d418d05ab9b10d17c1292f880ab62fc02804d8c6d783",
124
124
  "dist/install/adapters.d.ts": "434f0969014bb88273becf1424d44bd75a7af1b66ff0e82bcb7292e494d01043",
125
125
  "dist/install/adapters.d.ts.map": "3748700f553d503d962cc56e68709f229e6657d9dee87da2fd9fca008d223e5f",
@@ -127,35 +127,35 @@
127
127
  "dist/install/adapters.js.map": "2de4b94e31ef14f16cf4ec21ded8a41acbe8c8b514aeff7b75d1839ef1f0ce79",
128
128
  "dist/install/hosts.d.ts": "83037a95c5baae06a1a3cd4609994f54d182bc84549fad2785a2a9b6cc9d2013",
129
129
  "dist/install/hosts.d.ts.map": "85006328bbf6a876ed2324de77045c6246505059bf8821c22bb4e79d3ff60b61",
130
- "dist/install/hosts.js": "fe6f9aa9e9fe963cf10525ef9e30a54028bd06bde337560f7311089d29e5b12a",
130
+ "dist/install/hosts.js": "2d006e175eed0b83e93e81bb786bf411cb3e847a69d6e8a5d0caf2b3891d8233",
131
131
  "dist/install/hosts.js.map": "792bc157b09ae00ec565819b67f33f3f62d9467ba6284eaf3ab60b43bd6352e5",
132
132
  "dist/install/journal.d.ts": "cb1540745df6e406cb915a47334bf6af7630c2950224b814d197ec1aa6ea6d1e",
133
133
  "dist/install/journal.d.ts.map": "3ac23b8b40f673942246c29ba1e21537a2039c58ca9b4f2b1420b4cc449261ed",
134
- "dist/install/journal.js": "63edaad9df8fd1da613365669091f2f660a6db10d3179a5bfff0877c337dacb7",
134
+ "dist/install/journal.js": "88f71c609ee2bea3845f30d994638fa6dba7c8406ae4ff1320ec43d22888c602",
135
135
  "dist/install/journal.js.map": "48affa7d7173a87549e8a035da63248a4f6609374a678774ddab9995a26930fe",
136
136
  "dist/install/journey.d.ts": "0e445a57e030fff9ecddb5da7b8fbe2871d6d9d447874e06cd7f9e6e4046474f",
137
137
  "dist/install/journey.d.ts.map": "07a1839ffb6ed9353bb03c8aa345b5cd82a77eb555eb4999e62e4e718046e1c1",
138
- "dist/install/journey.js": "a40461cd64887f5c8cb4928a80551363107ed5262d6f4833db2fbb7c7f5a4b9d",
138
+ "dist/install/journey.js": "b051b2ad4105e0e3974d000c8322359b4c3f4097e73b249aeff6019339321b66",
139
139
  "dist/install/journey.js.map": "06dfb525351f79f08be94b07d4f42a51d8e92f1b502f95b717a00d58299fe77d",
140
140
  "dist/install/ownership.d.ts": "9ce76111b3424693a29036cd459ed14158ed11167f5f0aed13247df33941202b",
141
141
  "dist/install/ownership.d.ts.map": "46300e7cd4219176701d7d9cff1cb1d45eac43c89e5ee639b2be81729d449984",
142
- "dist/install/ownership.js": "8abc0dae50d638ad745c753a6a445a103dae180f472257be2fa7a5f5d2c4cf43",
142
+ "dist/install/ownership.js": "6adf0fa85b1902959f11f3f3e81884ad28bef211c3c8ecf11da704dcdba74e34",
143
143
  "dist/install/ownership.js.map": "89d2593b130a01ae65b42520c5703c359bf803be904cc401ca10e7f3560de269",
144
144
  "dist/install/transaction.d.ts": "cb5bf2eef12f4f5bcc1036e7b5c8d9fd488d367a0e778660def8821393445869",
145
145
  "dist/install/transaction.d.ts.map": "964d51dd02c97579f3471ad0d2a091e4eda0648714a40005aa9b3c1e3e2ad1a0",
146
- "dist/install/transaction.js": "2a3ac5e5388e23a6e36019b8f4e9f3ef79edb0d4f71c79370b2973b26c76f658",
146
+ "dist/install/transaction.js": "0c8ab99fc8ee0541420bbfa75039bb7eba214d6750d5afebe9ef3790425a2d89",
147
147
  "dist/install/transaction.js.map": "0bf373afac1167eee7ae0911ba6502a428eb1a17e8686ba263fbb84be70e9d85",
148
148
  "dist/install/ui.d.ts": "7ec8f2f4278af8ad311d2b1404e7081ad40290e2b69bcaea02e083e127d0b82b",
149
149
  "dist/install/ui.d.ts.map": "c49464a959e41a287cc128f06c8df20bbbba43aa7c16255f18e953c9ae61ada1",
150
- "dist/install/ui.js": "7bc9a638c5dff24aaa1f0dcc542af7a3947b9f175bb44bc3ee3cddd498643c62",
150
+ "dist/install/ui.js": "d4b598860e12a4cbf9752f2f8ef254bbb69336ae5bcb2db2fb7bb4767ea1b65f",
151
151
  "dist/install/ui.js.map": "d87677e5a0e3dc3a414197337b2556b6e489d4da5a4dd63f3d75e867c1c2e61d",
152
152
  "dist/project/eligibility.d.ts": "120e0cfe62f9d2399f33902c3db27255f8bac7fe782c20c6640befef0977a76b",
153
153
  "dist/project/eligibility.d.ts.map": "3501caf6830ac41ab99c8fc89158c91fc48603de96109a83ee54a0f000d7aa16",
154
- "dist/project/eligibility.js": "efdd5a732176158cd66e2eb599dd7987a58e1425bb5feb95a517a55405df8a20",
154
+ "dist/project/eligibility.js": "6266226dcb5c3192766b6967e92e5bbfd77541ac3ab4d23370f4ac1fcefce0c0",
155
155
  "dist/project/eligibility.js.map": "a0b96a4badb12f15f6fc15d86947499157dcde87e129b20ba465d2bea4927a9c",
156
156
  "dist/project/records.d.ts": "f67fa8b3ca81748a84065b2f5a89da2e4719b20e81cfdc53d851aa7e1a7f39ad",
157
157
  "dist/project/records.d.ts.map": "1f572d8df5e71d6820ca3e5bf4e0d0878b6822375c78afb054d114b2a04dac0b",
158
- "dist/project/records.js": "1d9b11c14161a1dd6a9f8acf96de73a73f3ee7e1417b24821055701b609a1448",
158
+ "dist/project/records.js": "9391335f0f111cd49c73cc7c069cada083fbae24b5b2fa93bf0e332b732e8076",
159
159
  "dist/project/records.js.map": "349fd9dca72f084d3c4747159f241bd6afab76295e42c326b75235adca3778fe",
160
160
  "dist/runtime/bootstrap.d.ts": "b5584c6aa08e8b35c088edc10d9727fdbbcc9487ef1676cdabc665f484e92156",
161
161
  "dist/runtime/bootstrap.d.ts.map": "c3d0afb5d4d0042e24a595aa0083af3ae86848eb3d336e3840180c690f76db3e",
@@ -163,51 +163,51 @@
163
163
  "dist/runtime/bootstrap.js.map": "19360037319afe2380d4fd8e68226dd1297744788e50f21e8f862304bd2ff579",
164
164
  "dist/runtime/releaseSource.d.ts": "bbcbc4df7d3aeff8469870e449a4eb9e0e653a1845ce52d07efd8f860a9755ae",
165
165
  "dist/runtime/releaseSource.d.ts.map": "6d709b016e65352d4c853fc2a59a266142a4a8d85f3416467fc8a0e8410f0417",
166
- "dist/runtime/releaseSource.js": "33f7f9af0f8b1e8f7eed9a867b8b1f4a24e2c449db377834511bc268a39390b2",
166
+ "dist/runtime/releaseSource.js": "58ac902c91ea91d86456fe128cd7d93acc3b2c26cddc61cde20c464bfc0a77e3",
167
167
  "dist/runtime/releaseSource.js.map": "388cc61e7e806993e9a29dfd7236dc7687603970e24b55eb8e7c4012e73d2db4",
168
168
  "dist/runtime/selfUpdate.d.ts": "8435e9d392ebf8d13df53ae5865f359cae2e74e4dea328171a9175f3f852f5fd",
169
169
  "dist/runtime/selfUpdate.d.ts.map": "6b7b7c7d838341705d01b0b489565b21f0384071884581cddbf1863644b5fa1b",
170
- "dist/runtime/selfUpdate.js": "6add6d9cfd391c946b2cc650ef07fed8fe8e0465507b7439b2783a65c948ea49",
170
+ "dist/runtime/selfUpdate.js": "90c7bd80b23d7a1e28ae0ddf50168a9c5e06fd02106a63d1a00d6d6f7bad0382",
171
171
  "dist/runtime/selfUpdate.js.map": "0df30cc8e599b215e3f4523a75f167580327832b2543434f8de3df0986d0b5e3",
172
172
  "dist/runtime/signers.d.ts": "17be1b960fecf7258349ad2908c365965d2cb10386adbb3e75e444948c5d8f0c",
173
173
  "dist/runtime/signers.d.ts.map": "1f409bff90a743f3246eb7ca4071bae38af31df995c53d1409876a82fa208660",
174
- "dist/runtime/signers.js": "376b4220d273ed4c085732fe9192b23a40125869c393ef9b277e16581d66419e",
174
+ "dist/runtime/signers.js": "64bbebd6642565eddf62f4200467b7295bc14227c14352cff2ec105bd1aecfad",
175
175
  "dist/runtime/signers.js.map": "65ec15f70d76c9547ab085302960e6dc6dd1fd94d0154c121e8dab6863acb123",
176
176
  "dist/runtime/store.d.ts": "be061748a1967fab6cc077a4f66d45e85df252fb17fa3056daba15123d9fe8fa",
177
177
  "dist/runtime/store.d.ts.map": "bd5fcee6910bcf4e5c3e615050931f3dc8126a365800c949a76a004fc6a791ca",
178
- "dist/runtime/store.js": "bd72b0fc5bf19a852a1f206c5145d2885779473b77115e8d19e31539754fc24c",
178
+ "dist/runtime/store.js": "2053fb9f010df0a00dcbfb07b570d3a624a209cf74b087ddeba1f0134d1b17ef",
179
179
  "dist/runtime/store.js.map": "bbb50a2f1cc779bce7a727252e085b2b459fbd0552f3378f00c78cc369f30965",
180
180
  "dist/runtime/updateCheck.d.ts": "2a1050b7a2b557bc7f7024e482d89b2dddc9dca473782943173566520513d7af",
181
181
  "dist/runtime/updateCheck.d.ts.map": "78b9e7de5caf251579049f8bcacfbc4e843102efd013b87839987ef1537cc259",
182
- "dist/runtime/updateCheck.js": "0580d38f6a1651bfbfd97e7dfed2bea45b7857522791a9ae83be6d2f086021fb",
182
+ "dist/runtime/updateCheck.js": "6913bca5049c0ddcf86eef74762278b97a997373e65b2a3c47b5bafc399f3480",
183
183
  "dist/runtime/updateCheck.js.map": "975907c0a6bfd24d3de9148bd84de3e001004460327a2edfa0fd2498155330d3",
184
184
  "dist/scanner/control.d.ts": "86034b1438e61a74ef8babb7c3434b13901179ea4dcc4bda82169652d2f6fd7e",
185
185
  "dist/scanner/control.d.ts.map": "d7d35ef2f3c9e0217aafdd80c29ded5a7848053408f769e35e66e63b366dd775",
186
- "dist/scanner/control.js": "533d58db066a02b7ceca8073348bf141416323e76e5532debc0a3cf9be93b40b",
186
+ "dist/scanner/control.js": "301c1799c6e08b14d1eca4e30586397ac0d01af8db663cda4067c5649afa1471",
187
187
  "dist/scanner/control.js.map": "3319fd0314fab4b6adbb7bd1f29d0c5760ad4bb9c03c035b37e9f16d33b8f741",
188
188
  "dist/scanner/data.d.ts": "cfb3f35766ee44898849a54553b3b60386e80706b6c952c9e2e7807cff232c58",
189
189
  "dist/scanner/data.d.ts.map": "997415437937f3c1c8848497198eb8a070fd5296adf6d5faffdfc5a885d26f7e",
190
- "dist/scanner/data.js": "b439966ee8ebc04627f67b63a9ec921d9c8ec05f3711a7cf116bf076a48eca3b",
190
+ "dist/scanner/data.js": "101665cc12d33d602584288755057338cd4efa8e61145dbb912fe603d21c0c3e",
191
191
  "dist/scanner/data.js.map": "490a61e186b7be15e63cc846563e323e91add45e1ed4a28a185ec22b07c7e8bd",
192
192
  "dist/scanner/discover.d.ts": "72c4b5424e17dda9aa256d31333310f5fc916b3e49d38e2bcd5faead71709338",
193
193
  "dist/scanner/discover.d.ts.map": "d1e389b030d4380ec249d7676f8977199d2b054c31744ee43b0566de3ac70a69",
194
- "dist/scanner/discover.js": "1a201075ac676a2c9824207f46c3bdd8af599f6925a7845b57365efeb74fd262",
194
+ "dist/scanner/discover.js": "486d8822b3a2c0220a8b9f7a03e4351fb0bf248d5d077a2734df4f7b69a72f69",
195
195
  "dist/scanner/discover.js.map": "ab622bb5adb81dc0b35b18306ad1d33087415ca3d2f65aae0842b653771b648f",
196
196
  "dist/scanner/enable.d.ts": "ca475c77c1659a076036770c3c040f2913af50e25019841eb27545c0e0ed277b",
197
197
  "dist/scanner/enable.d.ts.map": "074ae32dd67ed2f6c14111786341be87f9c1a82cc4b2fbd0d55e1939e68304ba",
198
- "dist/scanner/enable.js": "69292c678499159bfeb4a581f27a3b5f5b9af3f1f9b7ef170e0c5335fbb3070a",
198
+ "dist/scanner/enable.js": "4aa877b0233a4ba969dbe5fb95c7394d936a145cd84a9fd8e732acf26b7db3d9",
199
199
  "dist/scanner/enable.js.map": "082c0cd153f0dd0323b693e1892ec9a8fd71fc1f6801b3d1c4eb2e7a27239e54",
200
200
  "dist/scanner/picker.d.ts": "a120f20ef8644d23b6ed25f69e927b1f1f84f63016f5d43380922b9de1d8d35a",
201
201
  "dist/scanner/picker.d.ts.map": "6cf2810586080007044c55c56e06fe15ef0dfd3dc86c53adca94fb713941ce7e",
202
- "dist/scanner/picker.js": "79d3416e17f42bac975e25178b53591abca59fff50dd63f1f8a7c45e9433fca9",
202
+ "dist/scanner/picker.js": "9c494f50d5b86b3b21f185c67d491f6011f0a58d50d34cb618765880776db378",
203
203
  "dist/scanner/picker.js.map": "39eef53ff31f9a6407da795466854353213e7d989eb6e168e00805d25046b8c6",
204
204
  "dist/scanner/service.d.ts": "02024a93c3d2ed915396029bbf2086ab8902ff71ed21c968b6d583b4c5aaf49e",
205
205
  "dist/scanner/service.d.ts.map": "1edd946634661a654e8762e7dbd6dc1843cc003befcf5ae34bceb08900afabec",
206
- "dist/scanner/service.js": "c3d045e0cfe91549c94a2a24d85e21273cc1ca8241a6431dc4948cbacda2bb76",
206
+ "dist/scanner/service.js": "760f6ea71698bd41618278f43ef73d41475fc3cf6207c023b9f4b89d87eb46c3",
207
207
  "dist/scanner/service.js.map": "5fd23d937d6251fb100ae21624b5e9361279ff28a186b926780925a8843eb32d",
208
208
  "dist/scanner/update.d.ts": "4649e5af6224705a9a075171e2f1c61a88c6c4f8921aa6bbcc0c5669e312367e",
209
209
  "dist/scanner/update.d.ts.map": "b7357d9a2faef7154572fb6dd942a2610c4a0ee277cceabbea339f6b60503694",
210
- "dist/scanner/update.js": "111612cbf32a32ad6641c01ce4aeea4c29659e1a62fc1c0ffe723c9c133cef7b",
210
+ "dist/scanner/update.js": "082a0fcdfccdd5f3d6db2a1c5faba120daf19f9680d0cadec94cf4a607e52012",
211
211
  "dist/scanner/update.js.map": "bebd2ddb56423303782beb7119a46ee2690d70be04d3d0923b76b0b1bf164f24",
212
212
  "dist/screens/journey.d.ts": "1f77d84c36f5e480b2a28d741a0ff47e176ed02c213bfd9c65117525af89f8d8",
213
213
  "dist/screens/journey.d.ts.map": "76500d5b4f7b41696c9bbf2f6dd3dd478b0890299cd4f39bd3c7917f3bc1720b",
@@ -217,7 +217,7 @@
217
217
  "dist/transport/server.d.ts.map": "a2919525586b314f4964bc79c2fbbd819150755313dcd85340d7b656c16cd722",
218
218
  "dist/transport/server.js": "e361b54c942a9ed8482fbfea45dac79608c6d718465cf36c4717bc836b28c684",
219
219
  "dist/transport/server.js.map": "0a3707c7b0b6c6252dc5df6c2033818ca2619df7f420c4fa83ec60917e8bf033",
220
- "dist/vendor/local-setup.js": "c3b0823bf3bbf50e342a9d4e473fef96e55b17cbd4922722092c295de893216d",
220
+ "dist/vendor/local-setup.js": "a10fbdc11bf36dbcccc0224c42a2fe69d02e1087db842927cea59a1c8e8c1342",
221
221
  "dist/vendor/shared/runtimeReader.js": "956e5ea529d290671a478cbbfcb092cd98eca997da7f8bb2201887950f7424c8",
222
222
  "dist/vendor/shared/runtimeSigners.js": "b9f036b9d758f8701b323d4f6873fa0b1dfb52d1626449463b41ef59c0cf0666"
223
223
  }
package/dist/hooksLog.js CHANGED
@@ -59,9 +59,13 @@ var init_protectedPaths = __esm({
59
59
  });
60
60
 
61
61
  // packages/shared/dist/secretPatterns.js
62
+ var SECRET_LABEL, SECRET_LABEL_RE, LABELED_VALUE_RE;
62
63
  var init_secretPatterns = __esm({
63
64
  "packages/shared/dist/secretPatterns.js"() {
64
65
  "use strict";
66
+ SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|credential|auth)|aws_secret_access_key`;
67
+ SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
68
+ LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
65
69
  }
66
70
  });
67
71
 
@@ -886,9 +886,13 @@ var require_ignore = __commonJS({
886
886
  });
887
887
 
888
888
  // packages/shared/dist/secretPatterns.js
889
+ var SECRET_LABEL, SECRET_LABEL_RE, LABELED_VALUE_RE;
889
890
  var init_secretPatterns = __esm({
890
891
  "packages/shared/dist/secretPatterns.js"() {
891
892
  "use strict";
893
+ SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|credential|auth)|aws_secret_access_key`;
894
+ SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
895
+ LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
892
896
  }
893
897
  });
894
898
 
@@ -2785,9 +2789,6 @@ var MCP_INSTRUCTIONS = getMcpInstructions();
2785
2789
 
2786
2790
  // packages/shared/dist/codeScanner.js
2787
2791
  var import_ignore = __toESM(require_ignore(), 1);
2788
- init_secretPatterns();
2789
- init_protectedPaths();
2790
- init_projectIdentityFile();
2791
2792
 
2792
2793
  // node_modules/web-tree-sitter/web-tree-sitter.js
2793
2794
  var __defProp2 = Object.defineProperty;
@@ -6840,7 +6841,269 @@ var WASM_DIR = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "wasm")
6840
6841
  // packages/shared/dist/ast/astChunker.js
6841
6842
  var MAX_AST_PARSE_BYTES = 2 * 1024 * 1024;
6842
6843
 
6844
+ // packages/shared/dist/redactCredentials.js
6845
+ var REDACTED = "<redacted credential>";
6846
+ var MAX_PEM_BODY_LENGTH = 8 * 1024;
6847
+ var LETTER_OR_DIGIT = /[A-Za-z0-9]/;
6848
+ function hasLetterOrDigit(value) {
6849
+ return LETTER_OR_DIGIT.test(value);
6850
+ }
6851
+ function redactContextValue(match, head = "", value = "") {
6852
+ return hasLetterOrDigit(value) ? `${head}${REDACTED}` : match;
6853
+ }
6854
+ var PLACEHOLDER_PASSWORD = /^(?:\[REDACTED(?::[A-Za-z0-9_-]+)?\]|redacted|<[^<>]*>|\{\{[^{}]*\}\}|\$\{[^{}]+\}|%[A-Za-z_][A-Za-z0-9_]*%|\*+|x{3,}|\.\.\.|\u2026|password|passwd|pass|pwd|pw|secret|changeme|change[_-]me|example|test|(?:your|my)[a-z_-]*?(?:password|passwd|pass|pwd|secret|key|token|here))$/i;
6855
+ var PLACEHOLDER_ENV_VAR = /^\$[A-Z_][A-Z0-9_]*$/;
6856
+ function isPlaceholderPassword(password) {
6857
+ return PLACEHOLDER_PASSWORD.test(password) || PLACEHOLDER_ENV_VAR.test(password);
6858
+ }
6859
+ function redactUrlPassword(match, head = "", password = "") {
6860
+ return isPlaceholderPassword(password) || !hasLetterOrDigit(password) ? match : `${head}${REDACTED}@`;
6861
+ }
6862
+ var SHELL_WORD = String.raw`'[^'\n]*'|"[^"\n]*"|(?!${REDACTED})[^\s'"\`;|&()[\]{}\\,/][^\s'"\`;|&]*`;
6863
+ var OPENING_QUOTE = String.raw`(["'\`]?)`;
6864
+ var TRAILING_PUNCTUATION = /[.,:;!?)\]}]+$/;
6865
+ var PROSE_WORDS = /* @__PURE__ */ new Set([
6866
+ "a",
6867
+ "an",
6868
+ "and",
6869
+ "as",
6870
+ "for",
6871
+ "in",
6872
+ "is",
6873
+ "it",
6874
+ "on",
6875
+ "or",
6876
+ "the",
6877
+ "to",
6878
+ "with",
6879
+ "flag",
6880
+ "option",
6881
+ "argument",
6882
+ "instead",
6883
+ "which",
6884
+ "that",
6885
+ "this",
6886
+ "puts",
6887
+ "passes",
6888
+ "leaks",
6889
+ "exposes"
6890
+ ]);
6891
+ var REGEX_DELIMITER = /\/(?:[{}()[\];]|$)/;
6892
+ function shellWordSecret(word) {
6893
+ const quote = word[0];
6894
+ if ((quote === "'" || quote === '"') && word.length >= 2 && word.endsWith(quote)) {
6895
+ const inner = word.slice(1, -1);
6896
+ if (!hasLetterOrDigit(inner) || quote === '"' && inner.startsWith("$"))
6897
+ return null;
6898
+ if (inner !== inner.trim())
6899
+ return null;
6900
+ return isPlaceholderPassword(inner) ? null : inner;
6901
+ }
6902
+ if (word.startsWith("$"))
6903
+ return null;
6904
+ const core = word.replace(TRAILING_PUNCTUATION, "");
6905
+ if (!hasLetterOrDigit(core) || isPlaceholderPassword(core))
6906
+ return null;
6907
+ if (REGEX_DELIMITER.test(core))
6908
+ return null;
6909
+ return PROSE_WORDS.has(core.toLowerCase()) ? null : core;
6910
+ }
6911
+ function redactShellWord(match, head = "", word = "", tail = "") {
6912
+ return shellWordSecret(word) === null ? match : `${head}${REDACTED}${tail}`;
6913
+ }
6914
+ function redactQuotedShellWord(match, head = "", openingQuote = "", word = "", tail = "") {
6915
+ if (openingQuote !== "" && word.startsWith(openingQuote))
6916
+ return match;
6917
+ return redactShellWord(match, head, word, tail);
6918
+ }
6919
+ var SSHPASS_COMMAND = String.raw`ssh|scp|sftp|rsync|ssh-copy-id|ansible[\w-]*`;
6920
+ function redactSshpassWord(match, head = "", openingQuote = "", word = "", tail = "", command = "") {
6921
+ if (openingQuote !== "" && word.startsWith(openingQuote))
6922
+ return match;
6923
+ const secret = shellWordSecret(word);
6924
+ if (secret === null)
6925
+ return match;
6926
+ const bare = word[0] !== "'" && word[0] !== '"';
6927
+ if (bare && /^[a-z]+$/.test(secret) && command === "")
6928
+ return match;
6929
+ return `${head}${REDACTED}${tail}`;
6930
+ }
6931
+ var PATTERNS = [
6932
+ {
6933
+ kind: "bearer",
6934
+ pattern: /(\bBearer\s+)([^\s]{40,})/gi,
6935
+ replacement: redactContextValue,
6936
+ secretGroup: 2
6937
+ },
6938
+ {
6939
+ // Before openai, whose sk- shape would otherwise claim these keys.
6940
+ kind: "anthropic",
6941
+ pattern: /(?<![A-Za-z0-9_-])sk-ant-(?=[_-]*[A-Za-z0-9])[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
6942
+ replacement: REDACTED
6943
+ },
6944
+ {
6945
+ kind: "openai",
6946
+ pattern: /(?<![A-Za-z0-9_-])sk-(?:proj-)?(?=[_-]*[A-Za-z0-9])[A-Za-z0-9_-]{16,}(?![A-Za-z0-9_-])/g,
6947
+ replacement: REDACTED
6948
+ },
6949
+ {
6950
+ kind: "shopify",
6951
+ pattern: /(?<![A-Za-z0-9_])shp(?:at|ss|ca)_[A-Za-z0-9]{16,}(?![A-Za-z0-9])/g,
6952
+ replacement: REDACTED
6953
+ },
6954
+ {
6955
+ kind: "aws_access_key",
6956
+ pattern: /(?<![A-Z0-9])AKIA[A-Z0-9]{16}(?![A-Z0-9])/g,
6957
+ replacement: REDACTED
6958
+ },
6959
+ {
6960
+ kind: "github",
6961
+ pattern: /(?<![A-Za-z0-9_])gh[opu]_[A-Za-z0-9]{20,}(?![A-Za-z0-9])/g,
6962
+ replacement: REDACTED
6963
+ },
6964
+ {
6965
+ kind: "slack",
6966
+ pattern: /(?<![A-Za-z0-9-])xox[abp]-(?=-*[A-Za-z0-9])[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g,
6967
+ replacement: REDACTED
6968
+ },
6969
+ {
6970
+ kind: "sentry",
6971
+ pattern: /(?<![A-Za-z0-9_])sntry[us]_(?=[_-]*[A-Za-z0-9])[A-Za-z0-9_-]{16,}(?![A-Za-z0-9_-])/g,
6972
+ replacement: REDACTED
6973
+ },
6974
+ {
6975
+ kind: "fly",
6976
+ pattern: /(?<![A-Za-z0-9_])(?:FlyV1\s+)?fm2_(?=[_-]*[A-Za-z0-9])[A-Za-z0-9_-]{16,}(?![A-Za-z0-9_-])/g,
6977
+ replacement: REDACTED
6978
+ },
6979
+ {
6980
+ kind: "google_api_key",
6981
+ pattern: /(?<![A-Za-z0-9_-])AIza(?=[_-]*[A-Za-z0-9])[0-9A-Za-z_-]{35}(?![A-Za-z0-9_-])/g,
6982
+ replacement: REDACTED
6983
+ },
6984
+ {
6985
+ kind: "jwt",
6986
+ // header.payload.signature, both JSON segments starting eyJ. The length
6987
+ // floors keep `eyJ...` prose and signature-less examples out.
6988
+ pattern: /(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{16,}(?![A-Za-z0-9_-])/g,
6989
+ replacement: REDACTED
6990
+ },
6991
+ {
6992
+ kind: "mnemonik_component_token",
6993
+ // mnc_ / mncr_ + 43 base64url (oauth/components.ts); 32+ also catches a
6994
+ // partial token. The body must contain an upper-case letter or digit, so a
6995
+ // snake_case identifier is not mistaken for one; the 8-character
6996
+ // display prefix (mnc_ + 8) is too short.
6997
+ pattern: /(?<![A-Za-z0-9_])mncr?_(?=[A-Za-z0-9_-]*[A-Z0-9])[A-Za-z0-9_-]{32,}/g,
6998
+ replacement: REDACTED
6999
+ },
7000
+ {
7001
+ kind: "stripe",
7002
+ // Secret and restricted keys (sk_/rk_ live|test) and webhook signing secrets.
7003
+ pattern: /(?<![A-Za-z0-9_])(?:(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{16,}|whsec_[A-Za-z0-9]{20,})(?![A-Za-z0-9])/g,
7004
+ replacement: REDACTED
7005
+ },
7006
+ {
7007
+ kind: "mnemonik_proxy_token",
7008
+ // pxt_ + 32 hex (the format server.ts validates). A bare prefix in prose is left.
7009
+ pattern: /(?<![A-Za-z0-9_])pxt_[0-9a-f]{32,}/g,
7010
+ replacement: REDACTED
7011
+ },
7012
+ {
7013
+ kind: "mnemonik_api_key",
7014
+ // mnk_ + 64 hex (AuthManager.generateApiKey); 32+ also catches a half key.
7015
+ // The stored 12-character key_prefix (mnk_ + 8 hex) is not a credential.
7016
+ pattern: /(?<![A-Za-z0-9_])mnk_[0-9a-f]{32,}/g,
7017
+ replacement: REDACTED
7018
+ },
7019
+ {
7020
+ kind: "mnemonik_api_key_legacy",
7021
+ // mnk_ + 43 base64url: keys minted by hand before AuthManager's hex form
7022
+ // (production's only key in 2026-10 has this shape, and one stored memory
7023
+ // held a development key in it). Authentication accepts any mnk_ bearer.
7024
+ // The body needs upper and lower case and a digit, so a snake_case
7025
+ // identifier that starts mnk_ is not taken for one.
7026
+ pattern: /(?<![A-Za-z0-9_])mnk_(?=[A-Za-z0-9_-]*[A-Z])(?=[A-Za-z0-9_-]*[a-z])(?=[A-Za-z0-9_-]*[0-9])[A-Za-z0-9_-]{40,}(?![A-Za-z0-9_-])/g,
7027
+ replacement: REDACTED
7028
+ },
7029
+ {
7030
+ kind: "named_value",
7031
+ pattern: /(\b[A-Za-z_][A-Za-z0-9_]*(?:_TOKEN|_KEY|_SECRET|_PASSWORD|_PASS|APIKEY|API_KEY)\s*(?:=|:)\s*)([^\s]{16,})/gi,
7032
+ replacement: redactContextValue,
7033
+ secretGroup: 2
7034
+ },
7035
+ {
7036
+ kind: "connection_string",
7037
+ // scheme://user:password@host: only the password is replaced; scheme,
7038
+ // user, host and database stay readable. The user may be empty
7039
+ // (redis://:password@host). The password runs to the last `@` before a
7040
+ // path, query, fragment, quote or whitespace, so an unencoded `@` inside
7041
+ // it is still covered. Runs after named_value, which already replaces a
7042
+ // whole URL assigned to a secret-named variable.
7043
+ pattern: /\b((?:postgres(?:ql)?|mysql|mariadb|mongodb|rediss?|amqps?|mssql|sqlserver)(?:\+[a-z0-9]+)?:\/\/[^\s:/?#@'"`<>]{0,256}:)([^\s/?#'"`]{1,512})@/gi,
7044
+ replacement: redactUrlPassword,
7045
+ secretGroup: 2
7046
+ },
7047
+ {
7048
+ kind: "url_basic_auth",
7049
+ // https://user:password@host: same shape and placeholder rules as a
7050
+ // connection string; only the password is replaced.
7051
+ pattern: /\b(https?:\/\/[^\s:/?#@'"`<>]{0,256}:)([^\s/?#'"`]{1,512})@/gi,
7052
+ replacement: redactUrlPassword,
7053
+ secretGroup: 2
7054
+ },
7055
+ // Command-line passwords. Each keeps the command and replaces only the
7056
+ // password word; an expansion or placeholder in that position is left.
7057
+ {
7058
+ // sshpass -p <password> (also -p'<password>' and -p"<password>"), after
7059
+ // any other sshpass flags. 13 memories, 11 scanner chunks, 15 versions and
7060
+ // 6 dated facts in production held one on 2026-10-12.
7061
+ kind: "sshpass_password",
7062
+ pattern: new RegExp(String.raw`(${OPENING_QUOTE}\bsshpass(?:[ \t]+-[a-oq-zA-Z]\S*)*[ \t]+-p[ \t]*)(${SHELL_WORD})()(?=((?:[ \t]+(?:${SSHPASS_COMMAND})(?![\w-]))?))`, "g"),
7063
+ replacement: redactSshpassWord,
7064
+ secretGroup: 3,
7065
+ commandLine: true
7066
+ },
7067
+ {
7068
+ // Environment variables whose only purpose is a password, in shell
7069
+ // assignment form (no space around `=`): libpq's PGPASSWORD (one memory,
7070
+ // version and fact in production), MySQL's MYSQL_PWD, sshpass -e's
7071
+ // SSHPASS. named_value needs an `_PASSWORD`-style suffix and 16
7072
+ // characters, so it misses all three. Not an awk program that matches or
7073
+ // prints the assignment: `/^PGPASSWORD=/ { print "PGPASSWORD=" pw }`.
7074
+ kind: "password_env_var",
7075
+ pattern: new RegExp(String.raw`(${OPENING_QUOTE}\b(?:PGPASSWORD|MYSQL_PWD|SSHPASS)=)(${SHELL_WORD})()`, "g"),
7076
+ replacement: redactQuotedShellWord,
7077
+ secretGroup: 3,
7078
+ commandLine: true
7079
+ },
7080
+ {
7081
+ // --password=<value>, the long option every CLI that takes one spells
7082
+ // this way. The `=` keeps prose about the option ("--password is
7083
+ // required") out; the spaced form is not matched for that reason.
7084
+ kind: "password_option",
7085
+ pattern: new RegExp(String.raw`(${OPENING_QUOTE}(?<![\w-])--password=)(${SHELL_WORD})()`, "g"),
7086
+ replacement: redactQuotedShellWord,
7087
+ secretGroup: 3,
7088
+ commandLine: true
7089
+ },
7090
+ {
7091
+ // echo <password> | sudo -S: sudo reads the password from stdin. One
7092
+ // memory, two versions and two facts in production.
7093
+ kind: "sudo_password",
7094
+ pattern: new RegExp(String.raw`(\becho[ \t]+(?:-[neE]+[ \t]+)?)(${SHELL_WORD})([ \t]*\|[ \t]*sudo\b[^|\n]*?[ \t](?:-[A-Za-z]*S[A-Za-z]*|--stdin)\b)`, "g"),
7095
+ replacement: redactShellWord,
7096
+ secretGroup: 2,
7097
+ commandLine: true
7098
+ }
7099
+ ];
7100
+
7101
+ // packages/shared/dist/sourceRedaction.js
7102
+ init_secretPatterns();
7103
+
6843
7104
  // packages/shared/dist/codeScanner.js
7105
+ init_protectedPaths();
7106
+ init_projectIdentityFile();
6844
7107
  var MAX_SCANNED_FILE_BYTES = 10 * 1024 * 1024;
6845
7108
  var BUILT_IN_IGNORE_DIRS = [
6846
7109
  // JS / web