@mnemonik/cli 7.154.3 → 7.156.0

package/dist/scanner/estimate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"estimate.js","sourceRoot":"","sources":["../../src/scanner/estimate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA4BjC,uDAAuD;AACvD,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAI1C,KAAK,UAAU,aAAa;IAC1B,2EAA2E;IAC3E,sEAAsE;IACtE,2EAA2E;IAC3E,iBAAiB;IACjB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAwB,EACxB,OAAO,GAAgE,EAAE;IAEzE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,mBAAmB,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,QAAQ,GAAG,GAAG,EAAE,CAAC;QACnC,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC;YACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;SACnF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,GAAG,EAAE,GAAG,QAAQ;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAC1B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EACnB,GAAG,EAAE,CAAC,IAAI,CACX,CACF,CACF,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,KAAK,IAAI;oBAAE,SAAS;gBAC5B,KAAK,EAAE,CAAC;gBACR,KAAK,IAAI,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;AAEhE,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC;IAC9E,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACzF,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3D,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,IAAI,OAAO,GAAG,EAAE,GAAG,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC/F,IAAI,OAAO,GAAG,EAAE,GAAG,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACpF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,WAAmB;IACzE,IAAI,WAAW,GAAG,EAAE;QAAE,OAAO,gBAAgB,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAChF,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;QACxB,OAAO,SAAS,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACpF,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9E,OAAO,SAAS,GAAG,CAAC,KAAK,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,uBAAuB,CACrC,KAAkB,EAClB,QAA+B;IAE/B,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9G,MAAM,KAAK,GAAG,CAAC,uBAAuB,KAAK,KAAK,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,KAAK,CAAC,IAAI,CACR,sBAAsB,mBAAmB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,IAAI,oFAAoF,CAChL,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/scanner/picker.js

@@ -912,9 +912,6 @@ function getMcpInstructions() {
 }
 var MCP_INSTRUCTIONS = getMcpInstructions();
 
-// packages/shared/dist/codeScanner.js
-var import_ignore = __toESM(require_ignore(), 1);
-
 // node_modules/web-tree-sitter/web-tree-sitter.js
 var __defProp2 = Object.defineProperty;
 var __name = (target, value) => __defProp2(target, "name", { value, configurable: true });
@@ -4963,9 +4960,6 @@ import { dirname, extname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 var WASM_DIR = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "wasm");
 
-// packages/shared/dist/ast/astChunker.js
-var MAX_AST_PARSE_BYTES = 2 * 1024 * 1024;
-
 // packages/shared/dist/redactCredentials.js
 var REDACTED = "<redacted credential>";
 var MAX_PEM_BODY_LENGTH = 8 * 1024;
@@ -5228,6 +5222,15 @@ var SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|creden
 var SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
 var LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
 
+// packages/shared/dist/sourceRedaction.js
+var MAX_SOURCE_REDACTION_BYTES = 10 * 1024 * 1024;
+
+// packages/shared/dist/ast/astChunker.js
+var MAX_AST_PARSE_BYTES = 2 * 1024 * 1024;
+
+// packages/shared/dist/fileSelection.js
+var import_ignore = __toESM(require_ignore(), 1);
+
 // packages/shared/dist/protectedPaths.js
 import { homedir } from "node:os";
 import { posix, win32 } from "node:path";
@@ -5291,8 +5294,7 @@ function protectedPathsWithinRoot(root, protectedPaths = protectedLocalPaths(),
   return protectedPaths.filter((candidate) => isProtectedLocalPath(candidate, [root], platform));
 }
 
-// packages/shared/dist/codeScanner.js
-var MAX_SCANNED_FILE_BYTES = 10 * 1024 * 1024;
+// packages/shared/dist/fileSelection.js
 var BUILT_IN_IGNORE_DIRS = [
   // JS / web
   "node_modules",
@@ -5449,20 +5451,31 @@ var DEFAULT_INCLUDE_EXTENSIONS = [
   ".nix",
   ".bzl"
 ];
+var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
+var DEFAULT_IGNORE_PATTERNS = [
+  ...BUILT_IN_IGNORE_DIRS,
+  ...BUILT_IN_IGNORE_FILE_PATTERNS
+];
+
+// packages/shared/dist/codeScanner.js
+var MAX_SCANNED_FILE_BYTES = 10 * 1024 * 1024;
 var DEFAULT_OPTIONS = {
   maxChunkSize: 8e3,
   // ~2000 tokens
   minChunkSize: 100,
-  ignorePatterns: [...BUILT_IN_IGNORE_DIRS, ...BUILT_IN_IGNORE_FILE_PATTERNS],
+  ignorePatterns: [...DEFAULT_IGNORE_PATTERNS],
   includeExtensions: [...DEFAULT_INCLUDE_EXTENSIONS],
   maxAstParseBytes: MAX_AST_PARSE_BYTES,
   protectedPaths: []
 };
-var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
 
 // packages/shared/dist/indexJudge.js
 var import_ignore2 = __toESM(require_ignore(), 1);
 
+// packages/shared/dist/sourceRedactionPool.js
+var MB = 1024 * 1024;
+var LARGE_FILE_BYTES = 1 * MB;
+
 // packages/shared/dist/runtimeSigners.js
 var ttl = 10 * 6e4;
 

package/dist/scanner/service.js

@@ -43,6 +43,17 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// packages/shared/dist/secretPatterns.js
+var SECRET_LABEL, SECRET_LABEL_RE, LABELED_VALUE_RE;
+var init_secretPatterns = __esm({
+  "packages/shared/dist/secretPatterns.js"() {
+    "use strict";
+    SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|credential|auth)|aws_secret_access_key`;
+    SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
+    LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
+  }
+});
+
 // node_modules/ignore/index.js
 var require_ignore = __commonJS({
   "node_modules/ignore/index.js"(exports, module2) {
@@ -885,17 +896,6 @@ var require_ignore = __commonJS({
   }
 });
 
-// packages/shared/dist/secretPatterns.js
-var SECRET_LABEL, SECRET_LABEL_RE, LABELED_VALUE_RE;
-var init_secretPatterns = __esm({
-  "packages/shared/dist/secretPatterns.js"() {
-    "use strict";
-    SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|credential|auth)|aws_secret_access_key`;
-    SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
-    LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
-  }
-});
-
 // packages/shared/dist/protectedPaths.js
 var init_protectedPaths = __esm({
   "packages/shared/dist/protectedPaths.js"() {
@@ -1016,7 +1016,7 @@ var init_repositoryRoot = __esm({
 });
 
 // packages/shared/dist/hookTrace.js
-var HOOK_TRACE_MAX_BYTES;
+var HOOK_TRACE_MAX_BYTES, HOOK_MISS_WINDOW_MS, HOOK_MISS_TAIL_BYTES;
 var init_hookTrace = __esm({
   "packages/shared/dist/hookTrace.js"() {
     "use strict";
@@ -1024,6 +1024,8 @@ var init_hookTrace = __esm({
     init_runtimeSigners();
     init_secretPatterns();
     HOOK_TRACE_MAX_BYTES = 2 * 1024 * 1024;
+    HOOK_MISS_WINDOW_MS = 30 * 60 * 1e3;
+    HOOK_MISS_TAIL_BYTES = 64 * 1024;
   }
 });
 
@@ -2732,9 +2734,6 @@ function getMcpInstructions() {
 }
 var MCP_INSTRUCTIONS = getMcpInstructions();
 
-// packages/shared/dist/codeScanner.js
-var import_ignore = __toESM(require_ignore(), 1);
-
 // node_modules/web-tree-sitter/web-tree-sitter.js
 var __defProp2 = Object.defineProperty;
 var __name = (target, value) => __defProp2(target, "name", { value, configurable: true });
@@ -6783,9 +6782,6 @@ import { dirname, extname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 var WASM_DIR = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "wasm");
 
-// packages/shared/dist/ast/astChunker.js
-var MAX_AST_PARSE_BYTES = 2 * 1024 * 1024;
-
 // packages/shared/dist/redactCredentials.js
 var REDACTED = "<redacted credential>";
 var MAX_PEM_BODY_LENGTH = 8 * 1024;
@@ -7045,11 +7041,15 @@ var PATTERNS = [
 
 // packages/shared/dist/sourceRedaction.js
 init_secretPatterns();
+var MAX_SOURCE_REDACTION_BYTES = 10 * 1024 * 1024;
 
-// packages/shared/dist/codeScanner.js
+// packages/shared/dist/ast/astChunker.js
+var MAX_AST_PARSE_BYTES = 2 * 1024 * 1024;
+
+// packages/shared/dist/fileSelection.js
+var import_ignore = __toESM(require_ignore(), 1);
 init_protectedPaths();
 init_projectIdentityFile();
-var MAX_SCANNED_FILE_BYTES = 10 * 1024 * 1024;
 var BUILT_IN_IGNORE_DIRS = [
   // JS / web
   "node_modules",
@@ -7206,22 +7206,35 @@ var DEFAULT_INCLUDE_EXTENSIONS = [
   ".nix",
   ".bzl"
 ];
+var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
+var DEFAULT_IGNORE_PATTERNS = [
+  ...BUILT_IN_IGNORE_DIRS,
+  ...BUILT_IN_IGNORE_FILE_PATTERNS
+];
+
+// packages/shared/dist/codeScanner.js
+var MAX_SCANNED_FILE_BYTES = 10 * 1024 * 1024;
 var DEFAULT_OPTIONS = {
   maxChunkSize: 8e3,
   // ~2000 tokens
   minChunkSize: 100,
-  ignorePatterns: [...BUILT_IN_IGNORE_DIRS, ...BUILT_IN_IGNORE_FILE_PATTERNS],
+  ignorePatterns: [...DEFAULT_IGNORE_PATTERNS],
   includeExtensions: [...DEFAULT_INCLUDE_EXTENSIONS],
   maxAstParseBytes: MAX_AST_PARSE_BYTES,
   protectedPaths: []
 };
-var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
 
 // packages/shared/dist/indexJudge.js
 var import_ignore2 = __toESM(require_ignore(), 1);
 
 // packages/shared/dist/index.js
 init_secretPatterns();
+
+// packages/shared/dist/sourceRedactionPool.js
+var MB = 1024 * 1024;
+var LARGE_FILE_BYTES = 1 * MB;
+
+// packages/shared/dist/index.js
 init_hookTimeouts();
 
 // packages/shared/dist/jitDeliveryAck.js

package/dist/scanner/update.js

@@ -43,6 +43,17 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// packages/shared/dist/secretPatterns.js
+var SECRET_LABEL, SECRET_LABEL_RE, LABELED_VALUE_RE;
+var init_secretPatterns = __esm({
+  "packages/shared/dist/secretPatterns.js"() {
+    "use strict";
+    SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|credential|auth)|aws_secret_access_key`;
+    SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
+    LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
+  }
+});
+
 // node_modules/ignore/index.js
 var require_ignore = __commonJS({
   "node_modules/ignore/index.js"(exports, module2) {
@@ -885,17 +896,6 @@ var require_ignore = __commonJS({
   }
 });
 
-// packages/shared/dist/secretPatterns.js
-var SECRET_LABEL, SECRET_LABEL_RE, LABELED_VALUE_RE;
-var init_secretPatterns = __esm({
-  "packages/shared/dist/secretPatterns.js"() {
-    "use strict";
-    SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|credential|auth)|aws_secret_access_key`;
-    SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
-    LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
-  }
-});
-
 // packages/shared/dist/protectedPaths.js
 var init_protectedPaths = __esm({
   "packages/shared/dist/protectedPaths.js"() {
@@ -1016,7 +1016,7 @@ var init_repositoryRoot = __esm({
 });
 
 // packages/shared/dist/hookTrace.js
-var HOOK_TRACE_MAX_BYTES;
+var HOOK_TRACE_MAX_BYTES, HOOK_MISS_WINDOW_MS, HOOK_MISS_TAIL_BYTES;
 var init_hookTrace = __esm({
   "packages/shared/dist/hookTrace.js"() {
     "use strict";
@@ -1024,6 +1024,8 @@ var init_hookTrace = __esm({
     init_runtimeSigners();
     init_secretPatterns();
     HOOK_TRACE_MAX_BYTES = 2 * 1024 * 1024;
+    HOOK_MISS_WINDOW_MS = 30 * 60 * 1e3;
+    HOOK_MISS_TAIL_BYTES = 64 * 1024;
   }
 });
 
@@ -2732,9 +2734,6 @@ function getMcpInstructions() {
 }
 var MCP_INSTRUCTIONS = getMcpInstructions();
 
-// packages/shared/dist/codeScanner.js
-var import_ignore = __toESM(require_ignore(), 1);
-
 // node_modules/web-tree-sitter/web-tree-sitter.js
 var __defProp2 = Object.defineProperty;
 var __name = (target, value) => __defProp2(target, "name", { value, configurable: true });
@@ -6783,9 +6782,6 @@ import { dirname, extname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 var WASM_DIR = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "wasm");
 
-// packages/shared/dist/ast/astChunker.js
-var MAX_AST_PARSE_BYTES = 2 * 1024 * 1024;
-
 // packages/shared/dist/redactCredentials.js
 var REDACTED = "<redacted credential>";
 var MAX_PEM_BODY_LENGTH = 8 * 1024;
@@ -7045,11 +7041,15 @@ var PATTERNS = [
 
 // packages/shared/dist/sourceRedaction.js
 init_secretPatterns();
+var MAX_SOURCE_REDACTION_BYTES = 10 * 1024 * 1024;
 
-// packages/shared/dist/codeScanner.js
+// packages/shared/dist/ast/astChunker.js
+var MAX_AST_PARSE_BYTES = 2 * 1024 * 1024;
+
+// packages/shared/dist/fileSelection.js
+var import_ignore = __toESM(require_ignore(), 1);
 init_protectedPaths();
 init_projectIdentityFile();
-var MAX_SCANNED_FILE_BYTES = 10 * 1024 * 1024;
 var BUILT_IN_IGNORE_DIRS = [
   // JS / web
   "node_modules",
@@ -7206,22 +7206,35 @@ var DEFAULT_INCLUDE_EXTENSIONS = [
   ".nix",
   ".bzl"
 ];
+var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
+var DEFAULT_IGNORE_PATTERNS = [
+  ...BUILT_IN_IGNORE_DIRS,
+  ...BUILT_IN_IGNORE_FILE_PATTERNS
+];
+
+// packages/shared/dist/codeScanner.js
+var MAX_SCANNED_FILE_BYTES = 10 * 1024 * 1024;
 var DEFAULT_OPTIONS = {
   maxChunkSize: 8e3,
   // ~2000 tokens
   minChunkSize: 100,
-  ignorePatterns: [...BUILT_IN_IGNORE_DIRS, ...BUILT_IN_IGNORE_FILE_PATTERNS],
+  ignorePatterns: [...DEFAULT_IGNORE_PATTERNS],
   includeExtensions: [...DEFAULT_INCLUDE_EXTENSIONS],
   maxAstParseBytes: MAX_AST_PARSE_BYTES,
   protectedPaths: []
 };
-var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
 
 // packages/shared/dist/indexJudge.js
 var import_ignore2 = __toESM(require_ignore(), 1);
 
 // packages/shared/dist/index.js
 init_secretPatterns();
+
+// packages/shared/dist/sourceRedactionPool.js
+var MB = 1024 * 1024;
+var LARGE_FILE_BYTES = 1 * MB;
+
+// packages/shared/dist/index.js
 init_hookTimeouts();
 
 // packages/shared/dist/jitDeliveryAck.js

package/dist/scanner-release.json

@@ -1,23 +1,23 @@
 {
-  "version": "7.154.3",
-  "digestsSha256": "aaa5b677f93129b14b439bb9d1a4b2b5b36ae9663f058c2a0376d086ab150482",
+  "version": "7.156.0",
+  "digestsSha256": "b2411d3f639bf17985bd5cbbaa9350c345a498031d897afee077b75dc14d1780",
   "platforms": {
     "darwin-arm64": {
       "schemaVersion": 1,
       "artifact": "scanner",
-      "version": "7.154.3",
+      "version": "7.156.0",
       "entry": "scanner-darwin-arm64",
       "files": {
         "scanner-darwin-arm64": {
-          "sha256": "0511a43e8c247064902516e7cfcac81b894092e5638ed68abf1b48c8034c04b0",
-          "size": 152043472,
+          "sha256": "5a6f9f73ef63f382605d793fd7552497c12a0e830ad693d13ec4d97a7609d5de",
+          "size": 152340688,
           "executable": true
         }
       },
-      "totalSize": 152043472,
+      "totalSize": 152340688,
       "source": {
         "kind": "release",
-        "url": "https://github.com/JayDeeCo-Limited/mnemonik-cli/releases/download/scanner-v7.154.3/"
+        "url": "https://github.com/JayDeeCo-Limited/mnemonik-cli/releases/download/scanner-v7.156.0/"
       },
       "signer": {
         "platform": "darwin",
@@ -29,24 +29,24 @@
     "linux-arm64": {
       "schemaVersion": 1,
       "artifact": "scanner",
-      "version": "7.154.3",
+      "version": "7.156.0",
       "entry": "scanner-linux-arm64",
       "files": {
         "scanner-linux-arm64": {
-          "sha256": "c13eec6e5c8bc011b8feb1793e6793df6b37cf72812c47d0ef10516967b19e99",
-          "size": 152964224,
+          "sha256": "dbceac2331e509ef60775197c7a7e81642a99b6f4867e107bdd0cdbced6f6847",
+          "size": 153226368,
           "executable": true
         },
         "scanner-linux-arm64.minisig": {
-          "sha256": "e2f3ca4a8a010e8a4d879240091271625e67996ee0541c0cba3e0124b47f5bae",
+          "sha256": "afc9e6782e3117f60c4d0df802cc95f1b33cfbfc46c0a11ec98a11bf1ea5fdb1",
           "size": 314,
           "executable": false
         }
       },
-      "totalSize": 152964538,
+      "totalSize": 153226682,
       "source": {
         "kind": "release",
-        "url": "https://github.com/JayDeeCo-Limited/mnemonik-cli/releases/download/scanner-v7.154.3/"
+        "url": "https://github.com/JayDeeCo-Limited/mnemonik-cli/releases/download/scanner-v7.156.0/"
       },
       "signer": {
         "platform": "linux",
@@ -59,24 +59,24 @@
     "linux-x64": {
       "schemaVersion": 1,
       "artifact": "scanner",
-      "version": "7.154.3",
+      "version": "7.156.0",
       "entry": "scanner-linux-x64",
       "files": {
         "scanner-linux-x64": {
-          "sha256": "6b7d27c7b8ff40a8e91cadcc1048b836dd1b5492366670bf117cae27a3612b6d",
-          "size": 156437696,
+          "sha256": "a0e80cbd41b6f2d81948bb94b11f8803d69fceb0bfd4772e565fe38d4580af06",
+          "size": 156699840,
           "executable": true
         },
         "scanner-linux-x64.minisig": {
-          "sha256": "04371803ab347369e18ef059c877e47fbe161789e6118afddf0982fa83247eae",
+          "sha256": "0d3e814915b71d0608b5a5bf8969d565ba8e6f80ac4701004719c61b57e2975f",
           "size": 312,
           "executable": false
         }
       },
-      "totalSize": 156438008,
+      "totalSize": 156700152,
       "source": {
         "kind": "release",
-        "url": "https://github.com/JayDeeCo-Limited/mnemonik-cli/releases/download/scanner-v7.154.3/"
+        "url": "https://github.com/JayDeeCo-Limited/mnemonik-cli/releases/download/scanner-v7.156.0/"
       },
       "signer": {
         "platform": "linux",
@@ -89,19 +89,19 @@
     "win-x64": {
       "schemaVersion": 1,
       "artifact": "scanner",
-      "version": "7.154.3",
+      "version": "7.156.0",
       "entry": "scanner-win-x64.exe",
       "files": {
         "scanner-win-x64.exe": {
-          "sha256": "0af799b557381acd545433bc7c9b442f26bfd5fd223821b36c7621c2471be88e",
-          "size": 123540992,
+          "sha256": "4bdc5622e815e75a721e1bc52f566c923e4421f52edb1c915196bfeab506e206",
+          "size": 123833344,
           "executable": true
         }
       },
-      "totalSize": 123540992,
+      "totalSize": 123833344,
       "source": {
         "kind": "release",
-        "url": "https://github.com/JayDeeCo-Limited/mnemonik-cli/releases/download/scanner-v7.154.3/"
+        "url": "https://github.com/JayDeeCo-Limited/mnemonik-cli/releases/download/scanner-v7.156.0/"
       },
       "signingStatus": "unsigned",
       "disclosureVersion": "2026.09.1"

package/dist/status.js

@@ -43,6 +43,17 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// packages/shared/dist/secretPatterns.js
+var SECRET_LABEL, SECRET_LABEL_RE, LABELED_VALUE_RE;
+var init_secretPatterns = __esm({
+  "packages/shared/dist/secretPatterns.js"() {
+    "use strict";
+    SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|credential|auth)|aws_secret_access_key`;
+    SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
+    LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
+  }
+});
+
 // node_modules/ignore/index.js
 var require_ignore = __commonJS({
   "node_modules/ignore/index.js"(exports, module2) {
@@ -885,17 +896,6 @@ var require_ignore = __commonJS({
   }
 });
 
-// packages/shared/dist/secretPatterns.js
-var SECRET_LABEL, SECRET_LABEL_RE, LABELED_VALUE_RE;
-var init_secretPatterns = __esm({
-  "packages/shared/dist/secretPatterns.js"() {
-    "use strict";
-    SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|credential|auth)|aws_secret_access_key`;
-    SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
-    LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
-  }
-});
-
 // packages/shared/dist/protectedPaths.js
 var init_protectedPaths = __esm({
   "packages/shared/dist/protectedPaths.js"() {
@@ -1016,7 +1016,7 @@ var init_repositoryRoot = __esm({
 });
 
 // packages/shared/dist/hookTrace.js
-var HOOK_TRACE_MAX_BYTES;
+var HOOK_TRACE_MAX_BYTES, HOOK_MISS_WINDOW_MS, HOOK_MISS_TAIL_BYTES;
 var init_hookTrace = __esm({
   "packages/shared/dist/hookTrace.js"() {
     "use strict";
@@ -1024,6 +1024,8 @@ var init_hookTrace = __esm({
     init_runtimeSigners();
     init_secretPatterns();
     HOOK_TRACE_MAX_BYTES = 2 * 1024 * 1024;
+    HOOK_MISS_WINDOW_MS = 30 * 60 * 1e3;
+    HOOK_MISS_TAIL_BYTES = 64 * 1024;
   }
 });
 
@@ -2810,9 +2812,6 @@ function getMcpInstructions() {
 }
 var MCP_INSTRUCTIONS = getMcpInstructions();
 
-// packages/shared/dist/codeScanner.js
-var import_ignore = __toESM(require_ignore(), 1);
-
 // node_modules/web-tree-sitter/web-tree-sitter.js
 var __defProp2 = Object.defineProperty;
 var __name = (target, value) => __defProp2(target, "name", { value, configurable: true });
@@ -6861,9 +6860,6 @@ import { dirname, extname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 var WASM_DIR = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "wasm");
 
-// packages/shared/dist/ast/astChunker.js
-var MAX_AST_PARSE_BYTES = 2 * 1024 * 1024;
-
 // packages/shared/dist/redactCredentials.js
 var REDACTED = "<redacted credential>";
 var MAX_PEM_BODY_LENGTH = 8 * 1024;
@@ -7123,11 +7119,15 @@ var PATTERNS = [
 
 // packages/shared/dist/sourceRedaction.js
 init_secretPatterns();
+var MAX_SOURCE_REDACTION_BYTES = 10 * 1024 * 1024;
 
-// packages/shared/dist/codeScanner.js
+// packages/shared/dist/ast/astChunker.js
+var MAX_AST_PARSE_BYTES = 2 * 1024 * 1024;
+
+// packages/shared/dist/fileSelection.js
+var import_ignore = __toESM(require_ignore(), 1);
 init_protectedPaths();
 init_projectIdentityFile();
-var MAX_SCANNED_FILE_BYTES = 10 * 1024 * 1024;
 var BUILT_IN_IGNORE_DIRS = [
   // JS / web
   "node_modules",
@@ -7284,22 +7284,35 @@ var DEFAULT_INCLUDE_EXTENSIONS = [
   ".nix",
   ".bzl"
 ];
+var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
+var DEFAULT_IGNORE_PATTERNS = [
+  ...BUILT_IN_IGNORE_DIRS,
+  ...BUILT_IN_IGNORE_FILE_PATTERNS
+];
+
+// packages/shared/dist/codeScanner.js
+var MAX_SCANNED_FILE_BYTES = 10 * 1024 * 1024;
 var DEFAULT_OPTIONS = {
   maxChunkSize: 8e3,
   // ~2000 tokens
   minChunkSize: 100,
-  ignorePatterns: [...BUILT_IN_IGNORE_DIRS, ...BUILT_IN_IGNORE_FILE_PATTERNS],
+  ignorePatterns: [...DEFAULT_IGNORE_PATTERNS],
   includeExtensions: [...DEFAULT_INCLUDE_EXTENSIONS],
   maxAstParseBytes: MAX_AST_PARSE_BYTES,
   protectedPaths: []
 };
-var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
 
 // packages/shared/dist/indexJudge.js
 var import_ignore2 = __toESM(require_ignore(), 1);
 
 // packages/shared/dist/index.js
 init_secretPatterns();
+
+// packages/shared/dist/sourceRedactionPool.js
+var MB = 1024 * 1024;
+var LARGE_FILE_BYTES = 1 * MB;
+
+// packages/shared/dist/index.js
 init_hookTimeouts();
 
 // packages/shared/dist/jitDeliveryAck.js