@pretense/cli 0.6.12 → 0.6.13

package/dist/{chunk-K3L4E6HN.js → chunk-HWSWJ4EC.js}

@@ -17,7 +17,7 @@ function versionFromPackageJson() {
     return void 0;
   }
 }
-var PRETENSE_VERSION = (true ? "0.6.12" : void 0) ?? versionFromPackageJson() ?? "0.0.0-unknown";
+var PRETENSE_VERSION = (true ? "0.6.13" : void 0) ?? versionFromPackageJson() ?? "0.0.0-unknown";
 
 export {
   PRETENSE_VERSION

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   PRETENSE_VERSION
-} from "./chunk-K3L4E6HN.js";
+} from "./chunk-HWSWJ4EC.js";
 import {
   __commonJS,
   __toESM,
@@ -12171,6 +12171,19 @@ var SECRET_PATTERNS = [
     defaultAction: "block",
     pattern: /\bgithub_pat_[A-Za-z0-9_]{22,}\b/g
   },
+  // FIX 1 (v0.6.13) — HuggingFace access tokens. `hf_` user and fine-grained
+  // access tokens are `hf_` + 34+ base62 chars. Confirmed leaking on 0.6.12:
+  // an `hf_` token in bare prose scanned clean (a real credential egressed to
+  // the LLM) because no `hf_`/`huggingface` pattern existed. The `hf_` prefix
+  // plus a 34+ base62 body is a near-zero-false-positive signal. Critical/block
+  // because a live model-registry token grants push access to private models.
+  {
+    name: "huggingface-token",
+    category: "secret",
+    severity: "critical",
+    defaultAction: "block",
+    pattern: /\bhf_[A-Za-z0-9]{34,}\b/g
+  },
   {
     name: "gitlab-token",
     category: "secret",
@@ -12745,8 +12758,9 @@ var ENV_PATTERNS = [
     // variable references (`$VAR`, `${VAR}`, `process.env.X`, `os.environ…`),
     // connection URLs (handled by `database-url`), and values that begin with a
     // recognised structured-secret prefix (Stripe `sk_`/`pk_`/`rk_`, OpenAI
-    // `sk-`, Slack `xox*`, GitHub `gh*_`/`glpat-`, AWS `AKIA`, Google `AIza`,
-    // Stripe webhook `whsec_`) are deliberately skipped so a generic
+    // `sk-`, Slack `xox*`, GitHub `gh*_`/`glpat-`, HuggingFace `hf_`, AWS
+    // `AKIA`, Google `AIza`, Stripe webhook `whsec_`) are deliberately skipped
+    // so a generic
     // `KEY=variable` reference is not flagged and the dedicated, higher-fidelity
     // patterns above own those matches. Placed last so more-specific patterns
     // win overlap deduplication on ties.
@@ -12760,7 +12774,7 @@ var ENV_PATTERNS = [
     // specific env-var names rather than generic secret-label tails, so they do
     // not belong in the shared vocabulary.
     pattern: new RegExp(
-      `(?<![A-Za-z0-9])(?:[A-Z0-9]+[._-])*(?:${ENV_SECRET_LABEL_ALTERNATION}|DATABASE_URL|VAULT_TOKEN)\\s*[=:]\\s*(?!['"\\s])(?!\\$)(?!process\\.env)(?!os\\.environ)(?![A-Za-z][A-Za-z0-9+.-]*:\\/\\/)(?!sk[-_]|pk_|rk_|whsec_|xox[bpors]-|ghp_|gho_|ghs_|glpat-|AKIA|AIza)[A-Za-z0-9/+._@:!#%^&*?~-]{8,}`,
+      `(?<![A-Za-z0-9])(?:[A-Z0-9]+[._-])*(?:${ENV_SECRET_LABEL_ALTERNATION}|DATABASE_URL|VAULT_TOKEN)\\s*[=:]\\s*(?!['"\\s])(?!\\$)(?!process\\.env)(?!os\\.environ)(?![A-Za-z][A-Za-z0-9+.-]*:\\/\\/)(?!sk[-_]|pk_|rk_|whsec_|xox[bpors]-|ghp_|gho_|ghs_|glpat-|hf_|AKIA|AIza)[A-Za-z0-9/+._@:!#%^&*?~-]{8,}`,
       "gi"
     ),
     // PRECISION: reject `PASSWORD=changeme`, `PASSWORD=<your-password>` and
@@ -13827,6 +13841,8 @@ function overlapsAny(m, sorted) {
 }
 async function scanLevel2(text, language, opts = {}) {
   const lang = language ?? opts.language ?? "typescript";
+  const t0 = performance.now();
+  const elapsed = () => Math.round((performance.now() - t0) * 100) / 100;
   const base = opts.presidioUrl ? await scanWithPresidio(text, opts.presidioUrl, opts) : scan(text, opts);
   const l1Matches = base.matches.map((m) => ({ ...m, level: 1 }));
   const l1Findings = base.findings.map((f) => ({ ...f, level: 1 }));
@@ -13834,6 +13850,8 @@ async function scanLevel2(text, language, opts = {}) {
     ...base,
     matches: l1Matches,
     findings: l1Findings,
+    // Real wall time up to this early return, not the L1 sub-phase alone.
+    durationMs: elapsed(),
     l2: status
   });
   const native = loadNative();
@@ -13911,7 +13929,9 @@ async function scanLevel2(text, language, opts = {}) {
     matches: merged,
     findings: mergedFindings,
     scannedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    durationMs: base.durationMs,
+    // Real elapsed wall time for the full L1+L2 scan (was base.durationMs, the
+    // L1-only time, which undercounted the AST work ~25x — see FIX 3/TASK-16).
+    durationMs: elapsed(),
     patternCount: base.patternCount,
     // Bounded-work state is a property of the underlying scan and MUST survive
     // this merge — dropping it here would re-create the silent-incomplete hole
@@ -16425,11 +16445,11 @@ function versionFromCliPackageJson() {
   return void 0;
 }
 function productVersion() {
-  return override ?? (true ? "0.6.12" : void 0) ?? versionFromCliPackageJson() ?? "0.0.0-unknown";
+  return override ?? (true ? "0.6.13" : void 0) ?? versionFromCliPackageJson() ?? "0.0.0-unknown";
 }
 var UNKNOWN_COMMIT = "unknown";
 function bakedCommitSha() {
-  return "cd2bfc0670d3c8aadaa5a163493ba152391489a1".length > 0 ? "cd2bfc0670d3c8aadaa5a163493ba152391489a1" : UNKNOWN_COMMIT;
+  return "a36bf5d80a91cfd8fbf57e6c5a6a9b9114826309".length > 0 ? "a36bf5d80a91cfd8fbf57e6c5a6a9b9114826309" : UNKNOWN_COMMIT;
 }
 var FEATURE_TIERS = {
   compliance_export: "pro",
@@ -18323,9 +18343,24 @@ var SKIP_DIRS = /* @__PURE__ */ new Set([
   ".idea",
   ".vscode"
 ]);
+function isSkippableWalkError(err) {
+  const code = err?.code;
+  return code === "EACCES" || code === "EPERM" || code === "ENOENT" || code === "ELOOP" || code === "ENOTDIR";
+}
 function walkDir(dir) {
   const files = [];
-  for (const entry of readdirSync2(dir, { withFileTypes: true })) {
+  let entries;
+  try {
+    entries = readdirSync2(dir, { withFileTypes: true });
+  } catch (err) {
+    if (isSkippableWalkError(err)) {
+      const code = err.code;
+      console.error(chalk4.yellow(`  Skipping unreadable path (${code}): ${dir}`));
+      return files;
+    }
+    throw err;
+  }
+  for (const entry of entries) {
     if (entry.isDirectory()) {
       if (entry.name.startsWith(".") || SKIP_DIRS.has(entry.name)) continue;
       files.push(...walkDir(join7(dir, entry.name)));
@@ -18378,6 +18413,18 @@ function l2LanguageFor(filePath) {
   if (!filePath) return void 0;
   return L2_LANGUAGE_BY_EXT[extname2(filePath).toLowerCase()];
 }
+var L2_LARGE_FILE_WARN_BYTES = 5 * 1024 * 1024;
+function warnIfLargeForL2(byteLength, filePath) {
+  if (byteLength <= L2_LARGE_FILE_WARN_BYTES) return false;
+  const mb = (byteLength / (1024 * 1024)).toFixed(1);
+  const where = filePath ? ` \u2014 ${basename(filePath)}` : "";
+  console.error(
+    chalk4.yellow(
+      `  Note: L2 AST scanning is slow on very large files (${mb}MB${where}); this may take a while.`
+    )
+  );
+  return true;
+}
 async function scanContent(content, opts, filePath) {
   return withLocations(await scanContentRaw(content, opts, filePath), content);
 }
@@ -18421,6 +18468,7 @@ async function scanContentRaw(content, opts, filePath) {
       }
     };
   }
+  warnIfLargeForL2(Buffer.byteLength(content, "utf-8"), filePath);
   const result = await scanLevel2(content, language, scanOpts);
   if (opts.level === 2) {
     const only2 = result.matches.filter((m) => m.level === 2);

package/dist/postinstall.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   PRETENSE_VERSION
-} from "./chunk-K3L4E6HN.js";
+} from "./chunk-HWSWJ4EC.js";
 import {
   init_esm_shims
 } from "./chunk-TWMRHZGM.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pretense/cli",
-  "version": "0.6.12",
+  "version": "0.6.13",
   "description": "Local-first AI firewall that mutates proprietary code before sending to LLM APIs",
   "type": "module",
   "bin": {
@@ -23,11 +23,11 @@
     "tsx": "^4.0.0",
     "typescript": "^5.4.0",
     "vitest": "^1.0.0",
-    "@pretense/compliance-engine": "0.1.0",
-    "@pretense/billing": "0.1.0",
     "@pretense/protocol": "0.1.0",
     "@pretense/learner": "0.2.0",
+    "@pretense/compliance-engine": "0.1.0",
     "@pretense/mutator": "0.2.0",
+    "@pretense/billing": "0.1.0",
     "@pretense/proxy": "0.1.0",
     "@pretense/scanner": "0.2.0",
     "@pretense/scanner-rs": "0.2.0",