@tinyviber/a2h 0.1.0

package/dist/renderer/content.d.ts

@@ -0,0 +1,11 @@
+import type { ArtifactContent, ContentKind, FileEntry } from '../types';
+export interface ContentContext {
+    rootDir: string;
+    /** Workspace-relative paths (normalized) of all image files. */
+    knownImages: Set<string>;
+    /** Maps a workspace-relative path to a safe URL the renderer can load. */
+    fileUrl: (relPath: string) => string;
+}
+export declare function contentKindFor(entry: FileEntry): ContentKind;
+export declare function renderContent(entry: FileEntry, ctx: ContentContext, mode?: 'tail' | 'full'): ArtifactContent;
+//# sourceMappingURL=content.d.ts.map

package/dist/renderer/content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/renderer/content.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAgBxE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,0EAA0E;IAC1E,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CACtC;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW,CAE5D;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,cAAc,EACnB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GACrB,eAAe,CA0CjB"}

package/dist/renderer/content.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.contentKindFor = contentKindFor;
+exports.renderContent = renderContent;
+const node_fs_1 = require("node:fs");
+const classify_1 = require("../scanner/classify");
+const markdown_1 = require("../parsers/markdown");
+const diff_1 = require("../parsers/diff");
+const json_1 = require("../parsers/json");
+const log_1 = require("../parsers/log");
+const code_1 = require("../parsers/code");
+const text_1 = require("../parsers/text");
+const safeRead_1 = require("../util/safeRead");
+const path_1 = require("../util/path");
+function contentKindFor(entry) {
+    return (0, classify_1.contentKindOf)(entry.kind);
+}
+function renderContent(entry, ctx, mode) {
+    if (entry.sensitive) {
+        return { type: 'file', isBinary: false, note: 'Content hidden (sensitive file)' };
+    }
+    // Symlinks are never followed. A link whose name looks like markdown must not
+    // become a read primitive for files outside the workspace.
+    if (entry.isSymlink) {
+        return { type: 'file', isBinary: false, note: 'Symlink (not followed)' };
+    }
+    try {
+        switch (contentKindFor(entry)) {
+            case 'markdown': {
+                const { text } = (0, text_1.readFileText)(entry.absolutePath, 2 * 1024 * 1024);
+                const { frontmatter, body } = (0, markdown_1.splitFrontmatter)(text);
+                const baseDir = entry.path.includes('/') ? entry.path.slice(0, entry.path.lastIndexOf('/')) : '';
+                const html = (0, markdown_1.renderMarkdown)(body, (src) => resolveImage(src, baseDir, ctx));
+                return { type: 'markdown', html, frontmatter };
+            }
+            case 'diff': {
+                const { text } = (0, text_1.readFileText)(entry.absolutePath, 2 * 1024 * 1024);
+                return (0, diff_1.parseDiff)(text);
+            }
+            case 'json':
+                return (0, json_1.parseJson)(entry.absolutePath);
+            case 'log':
+                return (0, log_1.parseLog)(entry.absolutePath, mode === 'full');
+            case 'code':
+                return (0, code_1.parseCode)(entry.absolutePath, entry.ext);
+            case 'image':
+                return { type: 'image', url: ctx.fileUrl(entry.path) };
+            case 'file':
+            default:
+                return renderFile(entry);
+        }
+    }
+    catch (err) {
+        return renderFileFallback(entry, `Could not render this file as ${contentKindFor(entry)} — showing raw text instead.`);
+    }
+}
+function resolveImage(src, baseDir, ctx) {
+    // Ignore query/hash and URL-encoded spaces, then resolve relative to the
+    // markdown file's directory.
+    const clean = decodeURIComponent(src.split('#')[0].split('?')[0]).trim();
+    const rel = baseDir ? (0, path_1.normalizeRel)(`${baseDir}/${clean}`) : (0, path_1.normalizeRel)(clean);
+    if (!rel)
+        return undefined;
+    if (!ctx.knownImages.has(rel))
+        return undefined;
+    return ctx.fileUrl(rel);
+}
+function renderFile(entry) {
+    if (entry.isSymlink) {
+        return { type: 'file', isBinary: false, note: 'Symlink (not followed)' };
+    }
+    if (entry.kind === 'binary') {
+        return { type: 'file', isBinary: true };
+    }
+    // Unknown extension: inspect the first chunk for a binary signature.
+    const head = readBytes(entry.absolutePath, 8192);
+    if (hasNullByte(head)) {
+        return { type: 'file', isBinary: true };
+    }
+    const { text, truncated } = (0, text_1.readFileText)(entry.absolutePath, 64 * 1024);
+    return { type: 'file', isBinary: false, text, truncated };
+}
+/**
+ * Last-resort rendering. An artifact page must never fail because a file was
+ * stranger than expected — a malformed patch, a truncated image header, an
+ * encoding surprise. Better a plain text view with a note than an error.
+ */
+function renderFileFallback(entry, reason) {
+    const { text, truncated } = (0, text_1.readFileText)(entry.absolutePath, 64 * 1024);
+    if (hasNullByte(Buffer.from(text.slice(0, 8192), 'utf8'))) {
+        return { type: 'file', isBinary: true, note: reason };
+    }
+    return { type: 'file', isBinary: false, text, truncated, note: reason };
+}
+function readBytes(path, max) {
+    const buf = Buffer.alloc(max);
+    let fd;
+    try {
+        fd = (0, safeRead_1.openNoFollow)(path);
+        const n = (0, node_fs_1.readSync)(fd, buf, 0, max, 0);
+        return buf.subarray(0, n);
+    }
+    catch {
+        return Buffer.alloc(0);
+    }
+    finally {
+        if (fd !== undefined)
+            (0, node_fs_1.closeSync)(fd);
+    }
+}
+function hasNullByte(buf) {
+    return buf.includes(0);
+}
+//# sourceMappingURL=content.js.map

package/dist/renderer/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../src/renderer/content.ts"],"names":[],"mappings":";;AAyBA,wCAEC;AAED,sCA8CC;AA3ED,qCAA8C;AAE9C,kDAAoD;AACpD,kDAAuE;AACvE,0CAA4C;AAC5C,0CAA4C;AAC5C,wCAA0C;AAC1C,0CAA4C;AAC5C,0CAA+C;AAC/C,+CAAgD;AAChD,uCAA4C;AAe5C,SAAgB,cAAc,CAAC,KAAgB;IAC7C,OAAO,IAAA,wBAAa,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAgB,aAAa,CAC3B,KAAgB,EAChB,GAAmB,EACnB,IAAsB;IAEtB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC;IACpF,CAAC;IAED,8EAA8E;IAC9E,2DAA2D;IAC3D,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,mBAAY,EAAC,KAAK,CAAC,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;gBACnE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAA,2BAAgB,EAAC,IAAI,CAAC,CAAC;gBACrD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjG,MAAM,IAAI,GAAG,IAAA,yBAAc,EAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YACjD,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,mBAAY,EAAC,KAAK,CAAC,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;gBACnE,OAAO,IAAA,gBAAS,EAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YACD,KAAK,MAAM;gBACT,OAAO,IAAA,gBAAS,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACvC,KAAK,KAAK;gBACR,OAAO,IAAA,cAAQ,EAAC,KAAK,CAAC,YAAY,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC;YACvD,KAAK,MAAM;gBACT,OAAO,IAAA,gBAAS,EAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,KAAK,OAAO;gBACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,KAAK,MAAM,CAAC;YACZ;gBACE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,kBAAkB,CACvB,KAAK,EACL,iCAAiC,cAAc,CAAC,KAAK,CAAC,8BAA8B,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,GAAW,EACX,OAAe,EACf,GAAmB;IAEnB,yEAAyE;IACzE,6BAA6B;IAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAA,mBAAY,EAAC,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAA,mBAAY,EAAC,KAAK,CAAC,CAAC;IAChF,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB;IAClC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,qEAAqE;IACrE,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAA,mBAAY,EAAC,KAAK,CAAC,YAAY,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IACxE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAgB,EAAE,MAAc;IAC1D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAA,mBAAY,EAAC,KAAK,CAAC,YAAY,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IACxE,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,IAAA,uBAAY,EAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,IAAA,kBAAQ,EAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC"}

package/dist/scanner/classify.d.ts

@@ -0,0 +1,17 @@
+import type { ContentKind, FileKind } from '../types';
+export declare function extensionOf(name: string): string;
+export interface Classification {
+    kind: FileKind;
+    language?: string;
+    sensitive: boolean;
+}
+export declare function classifyFile(name: string): Classification;
+/** True for content we treat as image previews. */
+export declare function isImageExt(ext: string): boolean;
+/**
+ * Maps the scanner's broad file kind onto the way the content should be drawn.
+ * Everything the renderer has no special handling for degrades to "file", which
+ * is the safe default (hex/text preview, or a binary notice).
+ */
+export declare function contentKindOf(kind: FileKind): ContentKind;
+//# sourceMappingURL=classify.d.ts.map

package/dist/scanner/classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../src/scanner/classify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAqEtD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIhD;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAuBzD;AAED,mDAAmD;AACnD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,WAAW,CAUzD"}

package/dist/scanner/classify.js

@@ -0,0 +1,117 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extensionOf = extensionOf;
+exports.classifyFile = classifyFile;
+exports.isImageExt = isImageExt;
+exports.contentKindOf = contentKindOf;
+// Extension-based classification. Deterministic and convention-driven; the
+// semantic IR layer adds meaning on top of these broad categories.
+const MARKDOWN_EXTS = new Set([
+    'md', 'markdown', 'mdown', 'mkd', 'mkdn', 'mdx', 'rst',
+]);
+const CODE_EXTS = new Set([
+    'ts', 'tsx', 'js', 'jsx', 'mjs', 'cjs',
+    'py', 'go', 'rs', 'java', 'c', 'cc', 'cpp', 'cxx', 'h', 'hh', 'hpp',
+    'cs', 'rb', 'php', 'swift', 'kt', 'kts', 'scala', 'dart', 'lua',
+    'sh', 'bash', 'zsh', 'fish', 'ps1', 'bat', 'cmd',
+    'sql', 'graphql', 'gql',
+    'html', 'htm', 'css', 'scss', 'sass', 'less', 'styl',
+    'vue', 'svelte', 'astro',
+    'yaml', 'yml', 'toml', 'xml', 'proto', 'nim',
+    'el', 'ex', 'exs', 'clj', 'cljs', 'erl', 'hrl', 'hs', 'fs', 'fsx',
+]);
+const JSON_EXTS = new Set(['json', 'jsonc', 'geojson', 'jsonl', 'ndjson', 'ipynb']);
+const LOG_EXTS = new Set(['log', 'out']);
+const DIFF_EXTS = new Set(['diff', 'patch']);
+const IMAGE_EXTS = new Set([
+    'png', 'jpg', 'jpeg', 'gif', 'webp', 'svg', 'bmp', 'ico', 'avif', 'tif', 'tiff',
+]);
+const BINARY_EXTS = new Set([
+    'pdf', 'zip', 'gz', 'tgz', 'tar', '7z', 'rar',
+    'exe', 'dll', 'so', 'dylib', 'o', 'a', 'class', 'jar', 'war', 'bin',
+    'dat', 'db', 'sqlite', 'sqlite3',
+    'woff', 'woff2', 'ttf', 'otf', 'eot',
+    'mp3', 'mp4', 'mov', 'avi', 'mkv', 'wav', 'flac', 'webm', 'wasm',
+    'pyc', 'dmg', 'iso', 'docx', 'xlsx', 'pptx', 'doc', 'xls', 'ppt',
+]);
+const LANGUAGE_BY_EXT = {
+    ts: 'TypeScript', tsx: 'TSX', js: 'JavaScript', jsx: 'JSX', mjs: 'JavaScript', cjs: 'JavaScript',
+    py: 'Python', go: 'Go', rs: 'Rust', java: 'Java',
+    c: 'C', cc: 'C++', cpp: 'C++', cxx: 'C++', h: 'C', hh: 'C++', hpp: 'C++',
+    cs: 'C#', rb: 'Ruby', php: 'PHP', swift: 'Swift', kt: 'Kotlin', kts: 'Kotlin',
+    scala: 'Scala', dart: 'Dart', lua: 'Lua',
+    sh: 'Shell', bash: 'Shell', zsh: 'Shell', fish: 'Shell', ps1: 'PowerShell', bat: 'Batch', cmd: 'Batch',
+    sql: 'SQL', graphql: 'GraphQL', gql: 'GraphQL',
+    html: 'HTML', htm: 'HTML', css: 'CSS', scss: 'SCSS', sass: 'Sass', less: 'Less', styl: 'Stylus',
+    vue: 'Vue', svelte: 'Svelte', astro: 'Astro',
+    yaml: 'YAML', yml: 'YAML', toml: 'TOML', xml: 'XML', proto: 'Protobuf', nim: 'Nim',
+    el: 'Elixir', ex: 'Elixir', exs: 'Elixir', clj: 'Clojure', cljs: 'ClojureScript',
+    erl: 'Erlang', hrl: 'Erlang', hs: 'Haskell', fs: 'F#', fsx: 'F#',
+};
+/** Filenames whose content should not be previewed (secrets / credentials). */
+const SENSITIVE_PATTERNS = [
+    /^\.env(\..*)?$/,
+    /\.pem$/,
+    /\.key$/,
+    /\.p12$/,
+    /\.pfx$/,
+    /^id_rsa($|\.)/,
+    /^id_dsa($|\.)/,
+    /credential/i,
+    /secret/i,
+    /token/i,
+];
+function extensionOf(name) {
+    const dot = name.lastIndexOf('.');
+    if (dot <= 0)
+        return '';
+    return name.slice(dot + 1).toLowerCase();
+}
+function classifyFile(name) {
+    const base = name.toLowerCase();
+    const ext = extensionOf(base);
+    // Filename-driven overrides take precedence over extension.
+    if (base === 'readme.md' || base === 'readme.markdown' || base === 'readme') {
+        return { kind: 'markdown', language: 'Markdown', sensitive: false };
+    }
+    if (/\.(diff|patch)$/.test(base)) {
+        return { kind: 'diff', sensitive: false };
+    }
+    const sensitive = SENSITIVE_PATTERNS.some((re) => re.test(base));
+    if (MARKDOWN_EXTS.has(ext))
+        return { kind: 'markdown', language: 'Markdown', sensitive };
+    if (DIFF_EXTS.has(ext))
+        return { kind: 'diff', sensitive };
+    if (LOG_EXTS.has(ext))
+        return { kind: 'log', sensitive };
+    if (JSON_EXTS.has(ext))
+        return { kind: 'json', language: 'JSON', sensitive };
+    if (IMAGE_EXTS.has(ext))
+        return { kind: 'image', sensitive };
+    if (BINARY_EXTS.has(ext))
+        return { kind: 'binary', sensitive };
+    if (CODE_EXTS.has(ext))
+        return { kind: 'code', language: LANGUAGE_BY_EXT[ext], sensitive };
+    return { kind: 'other', sensitive };
+}
+/** True for content we treat as image previews. */
+function isImageExt(ext) {
+    return IMAGE_EXTS.has(ext.toLowerCase());
+}
+/**
+ * Maps the scanner's broad file kind onto the way the content should be drawn.
+ * Everything the renderer has no special handling for degrades to "file", which
+ * is the safe default (hex/text preview, or a binary notice).
+ */
+function contentKindOf(kind) {
+    switch (kind) {
+        case 'markdown': return 'markdown';
+        case 'diff': return 'diff';
+        case 'json': return 'json';
+        case 'log': return 'log';
+        case 'image': return 'image';
+        case 'code': return 'code';
+        default: return 'file';
+    }
+}
+//# sourceMappingURL=classify.js.map

package/dist/scanner/classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../src/scanner/classify.ts"],"names":[],"mappings":";;AAqEA,kCAIC;AAQD,oCAuBC;AAGD,gCAEC;AAOD,sCAUC;AA5HD,2EAA2E;AAC3E,mEAAmE;AAEnE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;CACvD,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IACtC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK;IACnE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;IAC/D,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAChD,KAAK,EAAE,SAAS,EAAE,KAAK;IACvB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACpD,KAAK,EAAE,QAAQ,EAAE,OAAO;IACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;IAC5C,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK;CAClE,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE7C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAChF,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK;IAC7C,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IACnE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS;IAChC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IACpC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAChE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;CACjE,CAAC,CAAC;AAEH,MAAM,eAAe,GAA2B;IAC9C,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY;IAChG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAChD,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK;IACxE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ;IAC7E,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;IACxC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO;IACtG,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS;IAC9C,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ;IAC/F,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO;IAC5C,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK;IAClF,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe;IAChF,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI;CACjE,CAAC;AAEF,+EAA+E;AAC/E,MAAM,kBAAkB,GAAG;IACzB,gBAAgB;IAChB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,eAAe;IACf,aAAa;IACb,SAAS;IACT,QAAQ;CACT,CAAC;AAEF,SAAgB,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3C,CAAC;AAQD,SAAgB,YAAY,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAE9B,4DAA4D;IAC5D,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjE,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACzF,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3D,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACzD,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC7E,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC7D,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;IAE3F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACtC,CAAC;AAED,mDAAmD;AACnD,SAAgB,UAAU,CAAC,GAAW;IACpC,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,IAAc;IAC1C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;QACnC,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;QAC3B,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;QAC3B,KAAK,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC;QACzB,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;QAC7B,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;QAC3B,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/scanner/git.d.ts

@@ -0,0 +1,3 @@
+import type { GitInfo } from '../types';
+export declare function readGitInfo(root: string): GitInfo;
+//# sourceMappingURL=git.d.ts.map

package/dist/scanner/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/scanner/git.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAmBxC,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAoBjD"}

package/dist/scanner/git.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readGitInfo = readGitInfo;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+// Git metadata is read-only and best-effort. If git is unavailable or the
+// directory is not a repository, we degrade to `{ isRepo: false }` silently.
+function tryGit(root, args) {
+    try {
+        const out = (0, node_child_process_1.execFileSync)('git', args, {
+            cwd: root,
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+            timeout: 3000,
+        });
+        return out.trim();
+    }
+    catch {
+        return undefined;
+    }
+}
+function readGitInfo(root) {
+    if (!(0, node_fs_1.existsSync)((0, node_path_1.join)(root, '.git'))) {
+        return { isRepo: false };
+    }
+    const branch = tryGit(root, ['rev-parse', '--abbrev-ref', 'HEAD']);
+    const hash = tryGit(root, ['rev-parse', '--short', 'HEAD']);
+    const subject = tryGit(root, ['log', '-1', '--pretty=%s']);
+    const date = tryGit(root, ['log', '-1', '--pretty=%ct']);
+    const info = { isRepo: true };
+    if (branch && branch !== 'HEAD')
+        info.branch = branch;
+    if (hash) {
+        info.lastCommit = {
+            hash,
+            dateMs: date ? Number(date) * 1000 : 0,
+            subject: subject ?? '',
+        };
+    }
+    return info;
+}
+//# sourceMappingURL=git.js.map

package/dist/scanner/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/scanner/git.ts"],"names":[],"mappings":";;AAsBA,kCAoBC;AA1CD,2DAAkD;AAClD,qCAAqC;AACrC,yCAAiC;AAGjC,0EAA0E;AAC1E,6EAA6E;AAE7E,SAAS,MAAM,CAAC,IAAY,EAAE,IAAc;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,iCAAY,EAAC,KAAK,EAAE,IAAI,EAAE;YACpC,GAAG,EAAE,IAAI;YACT,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAEzD,MAAM,IAAI,GAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvC,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtD,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,UAAU,GAAG;YAChB,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACtC,OAAO,EAAE,OAAO,IAAI,EAAE;SACvB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/scanner/ignore.d.ts

@@ -0,0 +1,22 @@
+export interface IgnoreRule {
+    reason: string;
+}
+export declare function shouldIgnoreDir(name: string): {
+    ignore: boolean;
+    reason?: string;
+};
+export declare function shouldIgnoreFile(name: string): {
+    ignore: boolean;
+    reason?: string;
+};
+/** Files larger than this are ignored entirely. */
+export declare const MAX_FILE_BYTES: number;
+/** Text files larger than this are truncated when previewed. */
+export declare const MAX_TEXT_BYTES: number;
+/** Safety cap on the total number of scanned files. */
+export declare const MAX_TOTAL_FILES = 20000;
+/** Safety cap on entries within a single directory. */
+export declare const MAX_DIR_ENTRIES = 2000;
+/** Maximum number of lines we will tail from a log for the preview. */
+export declare const LOG_TAIL_LINES = 200;
+//# sourceMappingURL=ignore.d.ts.map

package/dist/scanner/ignore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignore.d.ts","sourceRoot":"","sources":["../../src/scanner/ignore.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAyBD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAKlF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAQnF;AAMD,mDAAmD;AACnD,eAAO,MAAM,cAAc,QAAmB,CAAC;AAE/C,gEAAgE;AAChE,eAAO,MAAM,cAAc,QAAa,CAAC;AAEzC,uDAAuD;AACvD,eAAO,MAAM,eAAe,QAAQ,CAAC;AAErC,uDAAuD;AACvD,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,uEAAuE;AACvE,eAAO,MAAM,cAAc,MAAM,CAAC"}

package/dist/scanner/ignore.js

@@ -0,0 +1,57 @@
+"use strict";
+// Ignore rules for directories and files that are clearly not worth scanning.
+// Kept as a single table so future configuration has one obvious seam.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LOG_TAIL_LINES = exports.MAX_DIR_ENTRIES = exports.MAX_TOTAL_FILES = exports.MAX_TEXT_BYTES = exports.MAX_FILE_BYTES = void 0;
+exports.shouldIgnoreDir = shouldIgnoreDir;
+exports.shouldIgnoreFile = shouldIgnoreFile;
+const IGNORED_DIRS = new Set([
+    '.git', '.hg', '.svn',
+    'node_modules', 'bower_components',
+    '.cache', '.parcel-cache', '.next', '.nuxt', '.turbo', '.svelte-kit',
+    'dist', 'build', 'out', 'target', '.output',
+    'coverage', '.nyc_output',
+    '__pycache__', '.pytest_cache', '.mypy_cache', '.ruff_cache', '.tox',
+    '.venv', 'venv', '.virtualenv',
+    '.yarn', '.pnpm-store',
+    'vendor',
+    '.idea', '.vscode', '.fleet',
+    // A2H protocol directory: it is read as semantics, never shown as content.
+    '.a2h',
+]);
+const IGNORED_FILE_NAMES = new Set([
+    '.DS_Store', 'Thumbs.db', 'desktop.ini',
+    'package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'bun.lockb',
+    'Cargo.lock', 'Pipfile.lock', 'poetry.lock', 'go.sum',
+    // Reserved protocol name — consumed as the manifest, not rendered as data.
+    'a2h.json',
+]);
+function shouldIgnoreDir(name) {
+    if (IGNORED_DIRS.has(name)) {
+        return { ignore: true, reason: 'ignored directory' };
+    }
+    return { ignore: false };
+}
+function shouldIgnoreFile(name) {
+    if (IGNORED_FILE_NAMES.has(name)) {
+        return { ignore: true, reason: 'lockfile / os metadata' };
+    }
+    if (name.endsWith('~') || name.endsWith('.swp') || name.endsWith('.swo')) {
+        return { ignore: true, reason: 'editor temp file' };
+    }
+    return { ignore: false };
+}
+// ---------------------------------------------------------------------------
+// Size / count guards
+// ---------------------------------------------------------------------------
+/** Files larger than this are ignored entirely. */
+exports.MAX_FILE_BYTES = 20 * 1024 * 1024;
+/** Text files larger than this are truncated when previewed. */
+exports.MAX_TEXT_BYTES = 512 * 1024;
+/** Safety cap on the total number of scanned files. */
+exports.MAX_TOTAL_FILES = 20000;
+/** Safety cap on entries within a single directory. */
+exports.MAX_DIR_ENTRIES = 2000;
+/** Maximum number of lines we will tail from a log for the preview. */
+exports.LOG_TAIL_LINES = 200;
+//# sourceMappingURL=ignore.js.map

package/dist/scanner/ignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignore.js","sourceRoot":"","sources":["../../src/scanner/ignore.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,uEAAuE;;;AA6BvE,0CAKC;AAED,4CAQC;AAtCD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,MAAM,EAAE,KAAK,EAAE,MAAM;IACrB,cAAc,EAAE,kBAAkB;IAClC,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa;IACpE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS;IAC3C,UAAU,EAAE,aAAa;IACzB,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM;IACpE,OAAO,EAAE,MAAM,EAAE,aAAa;IAC9B,OAAO,EAAE,aAAa;IACtB,QAAQ;IACR,OAAO,EAAE,SAAS,EAAE,QAAQ;IAC5B,2EAA2E;IAC3E,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,WAAW,EAAE,WAAW,EAAE,aAAa;IACvC,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW;IAC/D,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ;IACrD,2EAA2E;IAC3E,UAAU;CACX,CAAC,CAAC;AAEH,SAAgB,eAAe,CAAC,IAAY;IAC1C,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,mDAAmD;AACtC,QAAA,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C,gEAAgE;AACnD,QAAA,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAEzC,uDAAuD;AAC1C,QAAA,eAAe,GAAG,KAAK,CAAC;AAErC,uDAAuD;AAC1C,QAAA,eAAe,GAAG,IAAI,CAAC;AAEpC,uEAAuE;AAC1D,QAAA,cAAc,GAAG,GAAG,CAAC"}

package/dist/scanner/scan.d.ts

@@ -0,0 +1,8 @@
+import { relative, sep } from 'node:path';
+import type { ScanResult } from '../types';
+export interface ScanOptions {
+    rootDir: string;
+}
+export declare function scanWorkspace(options: ScanOptions): ScanResult;
+export { relative as relativePath, sep };
+//# sourceMappingURL=scan.d.ts.map

package/dist/scanner/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/scanner/scan.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,QAAQ,EAAW,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAA2B,UAAU,EAAE,MAAM,UAAU,CAAC;AAgBpE,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CAa9D;AAqGD,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,GAAG,EAAE,CAAC"}

package/dist/scanner/scan.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sep = exports.relativePath = void 0;
+exports.scanWorkspace = scanWorkspace;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+Object.defineProperty(exports, "relativePath", { enumerable: true, get: function () { return node_path_1.relative; } });
+Object.defineProperty(exports, "sep", { enumerable: true, get: function () { return node_path_1.sep; } });
+const classify_1 = require("./classify");
+const ignore_1 = require("./ignore");
+const git_1 = require("./git");
+const identity_1 = require("../ir/identity");
+const ROOT_NAME_IGNORE = new Set([
+    '.git', 'node_modules', '.hg', '.svn',
+]);
+function scanWorkspace(options) {
+    const rootDir = (0, node_path_1.resolve)(options.rootDir);
+    const files = [];
+    const ignored = [];
+    const warnings = [];
+    const state = { count: 0 };
+    walk(rootDir, '', files, ignored, warnings, state);
+    const identity = (0, identity_1.deriveIdentity)(rootDir, files);
+    const git = (0, git_1.readGitInfo)(rootDir);
+    return { rootDir, identity, git, files, ignored, warnings };
+}
+function walk(absDir, relDir, files, ignored, warnings, state) {
+    let entries;
+    try {
+        entries = (0, node_fs_1.readdirSync)(absDir, { withFileTypes: true });
+    }
+    catch (err) {
+        warnings.push(`could not read directory ${relDir || '.'}: ${err.message}`);
+        return;
+    }
+    if (entries.length > ignore_1.MAX_DIR_ENTRIES) {
+        warnings.push(`directory ${relDir || '.'} has ${entries.length} entries; only first ${ignore_1.MAX_DIR_ENTRIES} scanned`);
+        entries = entries.slice(0, ignore_1.MAX_DIR_ENTRIES);
+    }
+    for (const dirent of entries) {
+        if (state.count >= ignore_1.MAX_TOTAL_FILES) {
+            warnings.push(`stopped scanning after ${ignore_1.MAX_TOTAL_FILES} files`);
+            return;
+        }
+        const name = dirent.name;
+        const relPath = relDir ? `${relDir}/${name}` : name;
+        if (dirent.isDirectory()) {
+            if (ROOT_NAME_IGNORE.has(name)) {
+                ignored.push({ path: relPath, reason: 'ignored directory' });
+                continue;
+            }
+            const dirCheck = (0, ignore_1.shouldIgnoreDir)(name);
+            if (dirCheck.ignore) {
+                ignored.push({ path: relPath, reason: dirCheck.reason ?? 'ignored directory' });
+                continue;
+            }
+            walk((0, node_path_1.join)(absDir, name), relPath, files, ignored, warnings, state);
+            continue;
+        }
+        // Non-directory (file, symlink, socket, etc.).
+        const fileCheck = (0, ignore_1.shouldIgnoreFile)(name);
+        if (fileCheck.ignore) {
+            ignored.push({ path: relPath, reason: fileCheck.reason ?? 'ignored file' });
+            continue;
+        }
+        const absPath = (0, node_path_1.join)(absDir, name);
+        let st;
+        try {
+            st = (0, node_fs_1.lstatSync)(absPath);
+        }
+        catch {
+            warnings.push(`could not stat ${relPath}`);
+            continue;
+        }
+        const isSymlink = st.isSymbolicLink();
+        if (!isSymlink && !st.isFile()) {
+            continue; // sockets, fifos, devices — skip silently.
+        }
+        // Resolve size / mtime (for symlinks, stat the link itself; we do not follow).
+        const size = st.size;
+        const mtimeMs = st.mtimeMs;
+        if (size > ignore_1.MAX_FILE_BYTES) {
+            ignored.push({ path: relPath, reason: 'too large' });
+            continue;
+        }
+        const { kind, language, sensitive } = (0, classify_1.classifyFile)(name);
+        const ext = extensionLower(name);
+        files.push({
+            path: relPath,
+            absolutePath: absPath,
+            kind,
+            size,
+            mtimeMs,
+            ext,
+            isSymlink,
+            sensitive,
+            depth: relDir.split('/').length,
+        });
+        state.count += 1;
+    }
+}
+function extensionLower(name) {
+    const dot = name.lastIndexOf('.');
+    if (dot <= 0)
+        return '';
+    return name.slice(dot + 1).toLowerCase();
+}
+//# sourceMappingURL=scan.js.map

package/dist/scanner/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/scanner/scan.ts"],"names":[],"mappings":";;;AAsBA,sCAaC;AAnCD,qCAA2D;AAC3D,yCAAyD;AAuIpC,6FAvIN,oBAAQ,OAuIU;AAAE,oFAvID,eAAG,OAuIC;AArItC,yCAA0C;AAC1C,qCAMkB;AAClB,+BAAoC;AACpC,6CAAgD;AAEhD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM;CACtC,CAAC,CAAC;AAMH,SAAgB,aAAa,CAAC,OAAoB;IAChD,MAAM,OAAO,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAE3B,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAA,iBAAW,EAAC,OAAO,CAAC,CAAC;IAEjC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,IAAI,CACX,MAAc,EACd,MAAc,EACd,KAAkB,EAClB,OAAuB,EACvB,QAAkB,EAClB,KAAwB;IAExB,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,IAAA,qBAAW,EAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC,4BAA4B,MAAM,IAAI,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAe,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,aAAa,MAAM,IAAI,GAAG,QAAQ,OAAO,CAAC,MAAM,wBAAwB,wBAAe,UAAU,CAAC,CAAC;QACjH,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAe,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,KAAK,IAAI,wBAAe,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,wBAAe,QAAQ,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAEpD,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC7D,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAA,wBAAe,EAAC,IAAI,CAAC,CAAC;YACvC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC,CAAC;gBAChF,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QAED,+CAA+C;QAC/C,MAAM,SAAS,GAAG,IAAA,yBAAgB,EAAC,IAAI,CAAC,CAAC;QACzC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,IAAA,mBAAS,EAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC;QACtC,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/B,SAAS,CAAC,2CAA2C;QACvD,CAAC;QAED,+EAA+E;QAC/E,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;QACrB,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;QAE3B,IAAI,IAAI,GAAG,uBAAc,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAA,uBAAY,EAAC,IAAI,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAEjC,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,OAAO;YACb,YAAY,EAAE,OAAO;YACrB,IAAI;YACJ,IAAI;YACJ,OAAO;YACP,GAAG;YACH,SAAS;YACT,SAAS;YACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3C,CAAC"}

package/dist/security/boundary.d.ts

@@ -0,0 +1,19 @@
+export declare function isWithin(root: string, target: string): boolean;
+/**
+ * Resolves a workspace-relative POSIX path to an absolute path strictly
+ * inside the workspace root. Returns null on traversal attempts.
+ *
+ * This is a lexical check: it refuses `..`, but says nothing about symlinks.
+ * Use `resolveRealPath` when the answer must survive a link in the tree.
+ */
+export declare function resolveRelPath(root: string, rel: string): string | null;
+/**
+ * Like resolveRelPath, but also resolves symlinks and verifies the *real* path
+ * stays inside the workspace. This is the check that catches an intermediate
+ * directory which is a link out of the tree — `leak -> /etc` makes
+ * `leak/passwd` lexical, but never contained.
+ *
+ * Returns the lexical absolute path (stable, knows no symlinks) on success.
+ */
+export declare function resolveRealPath(root: string, rel: string): string | null;
+//# sourceMappingURL=boundary.d.ts.map

package/dist/security/boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary.d.ts","sourceRoot":"","sources":["../../src/security/boundary.ts"],"names":[],"mappings":"AAWA,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAI9D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMvE;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWxE"}