@mrciphersmith/keryx 0.3.19 → 0.3.20

package/dist/cli.js

@@ -9091,8 +9091,24 @@ function lastLineOf(before) {
 `);
   return newline < 0 ? before : before.slice(newline + 1);
 }
+function isPlainCasedWord(letters) {
+  return /^[a-z]+$/.test(letters) || /^[A-Z]+$/.test(letters) || /^[A-Z][a-z]*$/.test(letters);
+}
 function isSingleTransitionTag(segment) {
-  return /^[A-Za-z]+[0-9]+$/.test(segment) || /^[0-9]+[A-Za-z]+$/.test(segment);
+  const letterThenDigit = /^([A-Za-z]+)([0-9]+)$/.exec(segment);
+  if (letterThenDigit !== null) {
+    const letters = letterThenDigit[1];
+    return letters.length <= TAG_MAX_LETTER_RUN && isPlainCasedWord(letters);
+  }
+  const digitThenLetter = /^([0-9]+)([A-Za-z]+)$/.exec(segment);
+  if (digitThenLetter !== null) {
+    const letters = digitThenLetter[2];
+    return letters.length <= TAG_MAX_LETTER_RUN && isPlainCasedWord(letters);
+  }
+  return false;
+}
+function isSlugHexTail(segment) {
+  return SLUG_HEX_TAIL_RE.test(segment);
 }
 function isWordSlug(value) {
   const segments = value.split(/[-_]/);
@@ -9100,15 +9116,25 @@ function isWordSlug(value) {
     return false;
   }
   let words = 0;
-  for (const segment of segments) {
-    const isAlpha = /^[A-Za-z]+$/.test(segment);
+  for (let i = 0;i < segments.length; i += 1) {
+    const segment = segments[i];
     const isDigits = /^[0-9]+$/.test(segment);
-    if (!isAlpha && !isDigits && !isSingleTransitionTag(segment)) {
-      return false;
+    if (isDigits) {
+      continue;
     }
-    if (isAlpha && segment.length >= 3) {
-      words += 1;
+    if (isPlainCasedWord(segment)) {
+      if (segment.length >= 3) {
+        words += 1;
+      }
+      continue;
+    }
+    if (isSingleTransitionTag(segment)) {
+      continue;
+    }
+    if (i === segments.length - 1 && isSlugHexTail(segment)) {
+      continue;
     }
+    return false;
   }
   return words >= 1;
 }
@@ -9252,6 +9278,29 @@ function secretShapedCandidatesIn(text) {
 function looksSecretShapedIn(text) {
   return secretShapedCandidatesIn(text).length > 0;
 }
+function labelledPieceQualifies(piece) {
+  const base = bareShapeQualifies(piece);
+  if (base.qualifies) {
+    return { entropy: base.entropy };
+  }
+  if (isAllowShapedValue(piece)) {
+    return { entropy: base.entropy };
+  }
+  return null;
+}
+function firstQualifyingSlashPiece(head) {
+  let offset = 0;
+  for (const piece of head.split("/")) {
+    if (piece.length > 0) {
+      const found = labelledPieceQualifies(piece);
+      if (found !== null) {
+        return { offset, length: piece.length, entropy: found.entropy };
+      }
+    }
+    offset += piece.length + 1;
+  }
+  return null;
+}
 function detectEntropy(content) {
   const matches = [];
   const urlSpans = findUrlSpans(content);
@@ -9291,25 +9340,31 @@ function detectEntropy(content) {
     if (matches.some((existing) => start < existing.end && end > existing.start)) {
       continue;
     }
-    const head = TOKEN_HEAD.exec(value)?.[0] ?? value;
-    const { qualifies, entropy } = bareShapeQualifies(head);
-    if (!qualifies) {
+    const before = lastLineOf(content.slice(Math.max(0, start - LABEL_WINDOW), start));
+    if (!ADJACENT_LABEL.test(before)) {
       continue;
     }
-    const before = lastLineOf(content.slice(Math.max(0, start - LABEL_WINDOW), start));
-    if (!SENSITIVE_LABEL.test(before)) {
+    const head = TOKEN_HEAD.exec(value)?.[0] ?? value;
+    if (head.includes("/")) {
+      const piece = firstQualifyingSlashPiece(head);
+      if (piece === null) {
+        continue;
+      }
+      const pieceStart = start + piece.offset;
+      const pieceEnd = pieceStart + piece.length;
+      matches.push(buildMatch(pieceStart, pieceEnd, content.slice(pieceStart, pieceEnd), piece.entropy));
       continue;
     }
-    if (isAllowShapedValue(head) && !ADJACENT_LABEL.test(before)) {
+    const found = labelledPieceQualifies(head);
+    if (found === null) {
       continue;
     }
-    matches.push(buildMatch(start, end, value, entropy));
+    matches.push(buildMatch(start, end, value, found.entropy));
   }
   return matches.sort((a, b) => a.start - b.start);
 }
-var SENSITIVE_LABEL_WORDS = "key|secret|token|password|passwd|api|credential|auth|bearer", caseless = (words) => words.replace(/[a-z]/g, (ch) => `[${ch}${ch.toUpperCase()}]`), SENSITIVE_LABEL, ADJACENT_LABEL, LABEL_ASSIGNMENT_RE, TOKEN, TOKEN_HEAD, LABEL_WINDOW = 40, HEX_BLOB, FULL_GIT_SHA_RE, UUID_RE, INTEGRITY_RE, URL_SPAN_RE, URL_TRAILING_PUNCTUATION_RE, URL_COMPONENT_MIN_LENGTH = 20;
+var SENSITIVE_LABEL_WORDS = "key|secret|token|password|passwd|api|credential|auth|bearer", caseless = (words) => words.replace(/[a-z]/g, (ch) => `[${ch}${ch.toUpperCase()}]`), ADJACENT_LABEL, LABEL_ASSIGNMENT_RE, TOKEN, TOKEN_HEAD, LABEL_WINDOW = 40, HEX_BLOB, FULL_GIT_SHA_RE, UUID_RE, INTEGRITY_RE, TAG_MAX_LETTER_RUN = 8, SLUG_HEX_TAIL_RE, URL_SPAN_RE, URL_TRAILING_PUNCTUATION_RE, URL_COMPONENT_MIN_LENGTH = 20;
 var init_entropy = __esm(() => {
-  SENSITIVE_LABEL = new RegExp(`(?:^|[^A-Za-z0-9])(${caseless(SENSITIVE_LABEL_WORDS)})(?:$|[^A-Za-z0-9]|(?=[A-Z]))`);
   ADJACENT_LABEL = new RegExp(`(?:^|[^A-Za-z0-9])(?:${caseless(SENSITIVE_LABEL_WORDS)})[A-Za-z0-9_-]*["']?\\s*[:=]?\\s*["']?$`);
   LABEL_ASSIGNMENT_RE = new RegExp(`(?:^|[^A-Za-z0-9])(?:${SENSITIVE_LABEL_WORDS})[A-Za-z0-9_-]*"?\\s*=\\s*"?([A-Za-z0-9+/_=-]{6,})`, "gi");
   TOKEN = /[A-Za-z0-9+/=_-]{20,}(?:\.[A-Za-z0-9+/=_-]{6,})*/g;
@@ -9318,6 +9373,7 @@ var init_entropy = __esm(() => {
   FULL_GIT_SHA_RE = /^[0-9a-f]{40}$/i;
   UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
   INTEGRITY_RE = /^(?:sha256|sha512)-[A-Za-z0-9+/]+=*$/;
+  SLUG_HEX_TAIL_RE = /^[0-9a-f]{10,16}$/i;
   URL_SPAN_RE = /\bhttps?:\/\/[^\s<>"'\\]+/g;
   URL_TRAILING_PUNCTUATION_RE = /[.,;:!?)\]}]$/;
 });
@@ -18037,7 +18093,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@mrciphersmith/keryx",
-    version: "0.3.19",
+    version: "0.3.20",
     description: "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
     private: false,
     publishConfig: {

package/dist/core.js

@@ -4040,8 +4040,24 @@ function lastLineOf(before) {
 `);
   return newline < 0 ? before : before.slice(newline + 1);
 }
+function isPlainCasedWord(letters) {
+  return /^[a-z]+$/.test(letters) || /^[A-Z]+$/.test(letters) || /^[A-Z][a-z]*$/.test(letters);
+}
 function isSingleTransitionTag(segment) {
-  return /^[A-Za-z]+[0-9]+$/.test(segment) || /^[0-9]+[A-Za-z]+$/.test(segment);
+  const letterThenDigit = /^([A-Za-z]+)([0-9]+)$/.exec(segment);
+  if (letterThenDigit !== null) {
+    const letters = letterThenDigit[1];
+    return letters.length <= TAG_MAX_LETTER_RUN && isPlainCasedWord(letters);
+  }
+  const digitThenLetter = /^([0-9]+)([A-Za-z]+)$/.exec(segment);
+  if (digitThenLetter !== null) {
+    const letters = digitThenLetter[2];
+    return letters.length <= TAG_MAX_LETTER_RUN && isPlainCasedWord(letters);
+  }
+  return false;
+}
+function isSlugHexTail(segment) {
+  return SLUG_HEX_TAIL_RE.test(segment);
 }
 function isWordSlug(value) {
   const segments = value.split(/[-_]/);
@@ -4049,15 +4065,25 @@ function isWordSlug(value) {
     return false;
   }
   let words = 0;
-  for (const segment of segments) {
-    const isAlpha = /^[A-Za-z]+$/.test(segment);
+  for (let i = 0;i < segments.length; i += 1) {
+    const segment = segments[i];
     const isDigits = /^[0-9]+$/.test(segment);
-    if (!isAlpha && !isDigits && !isSingleTransitionTag(segment)) {
-      return false;
+    if (isDigits) {
+      continue;
     }
-    if (isAlpha && segment.length >= 3) {
-      words += 1;
+    if (isPlainCasedWord(segment)) {
+      if (segment.length >= 3) {
+        words += 1;
+      }
+      continue;
+    }
+    if (isSingleTransitionTag(segment)) {
+      continue;
     }
+    if (i === segments.length - 1 && isSlugHexTail(segment)) {
+      continue;
+    }
+    return false;
   }
   return words >= 1;
 }
@@ -4201,6 +4227,29 @@ function secretShapedCandidatesIn(text) {
 function looksSecretShapedIn(text) {
   return secretShapedCandidatesIn(text).length > 0;
 }
+function labelledPieceQualifies(piece) {
+  const base = bareShapeQualifies(piece);
+  if (base.qualifies) {
+    return { entropy: base.entropy };
+  }
+  if (isAllowShapedValue(piece)) {
+    return { entropy: base.entropy };
+  }
+  return null;
+}
+function firstQualifyingSlashPiece(head) {
+  let offset = 0;
+  for (const piece of head.split("/")) {
+    if (piece.length > 0) {
+      const found = labelledPieceQualifies(piece);
+      if (found !== null) {
+        return { offset, length: piece.length, entropy: found.entropy };
+      }
+    }
+    offset += piece.length + 1;
+  }
+  return null;
+}
 function detectEntropy(content) {
   const matches = [];
   const urlSpans = findUrlSpans(content);
@@ -4240,25 +4289,31 @@ function detectEntropy(content) {
     if (matches.some((existing) => start < existing.end && end > existing.start)) {
       continue;
     }
-    const head = TOKEN_HEAD.exec(value)?.[0] ?? value;
-    const { qualifies, entropy } = bareShapeQualifies(head);
-    if (!qualifies) {
+    const before = lastLineOf(content.slice(Math.max(0, start - LABEL_WINDOW), start));
+    if (!ADJACENT_LABEL.test(before)) {
       continue;
     }
-    const before = lastLineOf(content.slice(Math.max(0, start - LABEL_WINDOW), start));
-    if (!SENSITIVE_LABEL.test(before)) {
+    const head = TOKEN_HEAD.exec(value)?.[0] ?? value;
+    if (head.includes("/")) {
+      const piece = firstQualifyingSlashPiece(head);
+      if (piece === null) {
+        continue;
+      }
+      const pieceStart = start + piece.offset;
+      const pieceEnd = pieceStart + piece.length;
+      matches.push(buildMatch(pieceStart, pieceEnd, content.slice(pieceStart, pieceEnd), piece.entropy));
       continue;
     }
-    if (isAllowShapedValue(head) && !ADJACENT_LABEL.test(before)) {
+    const found = labelledPieceQualifies(head);
+    if (found === null) {
       continue;
     }
-    matches.push(buildMatch(start, end, value, entropy));
+    matches.push(buildMatch(start, end, value, found.entropy));
   }
   return matches.sort((a, b) => a.start - b.start);
 }
-var SENSITIVE_LABEL_WORDS = "key|secret|token|password|passwd|api|credential|auth|bearer", caseless = (words) => words.replace(/[a-z]/g, (ch) => `[${ch}${ch.toUpperCase()}]`), SENSITIVE_LABEL, ADJACENT_LABEL, LABEL_ASSIGNMENT_RE, TOKEN, TOKEN_HEAD, LABEL_WINDOW = 40, HEX_BLOB, FULL_GIT_SHA_RE, UUID_RE, INTEGRITY_RE, URL_SPAN_RE, URL_TRAILING_PUNCTUATION_RE, URL_COMPONENT_MIN_LENGTH = 20;
+var SENSITIVE_LABEL_WORDS = "key|secret|token|password|passwd|api|credential|auth|bearer", caseless = (words) => words.replace(/[a-z]/g, (ch) => `[${ch}${ch.toUpperCase()}]`), ADJACENT_LABEL, LABEL_ASSIGNMENT_RE, TOKEN, TOKEN_HEAD, LABEL_WINDOW = 40, HEX_BLOB, FULL_GIT_SHA_RE, UUID_RE, INTEGRITY_RE, TAG_MAX_LETTER_RUN = 8, SLUG_HEX_TAIL_RE, URL_SPAN_RE, URL_TRAILING_PUNCTUATION_RE, URL_COMPONENT_MIN_LENGTH = 20;
 var init_entropy = __esm(() => {
-  SENSITIVE_LABEL = new RegExp(`(?:^|[^A-Za-z0-9])(${caseless(SENSITIVE_LABEL_WORDS)})(?:$|[^A-Za-z0-9]|(?=[A-Z]))`);
   ADJACENT_LABEL = new RegExp(`(?:^|[^A-Za-z0-9])(?:${caseless(SENSITIVE_LABEL_WORDS)})[A-Za-z0-9_-]*["']?\\s*[:=]?\\s*["']?$`);
   LABEL_ASSIGNMENT_RE = new RegExp(`(?:^|[^A-Za-z0-9])(?:${SENSITIVE_LABEL_WORDS})[A-Za-z0-9_-]*"?\\s*=\\s*"?([A-Za-z0-9+/_=-]{6,})`, "gi");
   TOKEN = /[A-Za-z0-9+/=_-]{20,}(?:\.[A-Za-z0-9+/=_-]{6,})*/g;
@@ -4267,6 +4322,7 @@ var init_entropy = __esm(() => {
   FULL_GIT_SHA_RE = /^[0-9a-f]{40}$/i;
   UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
   INTEGRITY_RE = /^(?:sha256|sha512)-[A-Za-z0-9+/]+=*$/;
+  SLUG_HEX_TAIL_RE = /^[0-9a-f]{10,16}$/i;
   URL_SPAN_RE = /\bhttps?:\/\/[^\s<>"'\\]+/g;
   URL_TRAILING_PUNCTUATION_RE = /[.,;:!?)\]}]$/;
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrciphersmith/keryx",
-  "version": "0.3.19",
+  "version": "0.3.20",
   "description": "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   "private": false,
   "publishConfig": {