@unbrained/pm-cli 2026.10.14 → 2026.10.15

package/dist/core/shared/errors.d.ts

@@ -6,203 +6,203 @@
 /** Carries structured recovery guidance attached to expected pm CLI errors. */
 export interface PmCliErrorRecoveryPayload {
 /** Strategy used to control recovery behavior. */
-recovery_mode?: "compact";
+recovery_mode?:"compact";
 /** Value that configures or reports attempted command for this contract. */
-attempted_command?: string;
+attempted_command?:string;
 /** Value that configures or reports normalized args for this contract. */
-normalized_args?: string[];
+normalized_args?:string[];
 /** Positional tokens paired with their parser roles for unambiguous recovery. */
-parsed_positionals?: Array<{
-role: string;
-value: string;
+parsed_positionals?:Array<{
+role:string;
+value:string;
 }>;
 /** Value that configures or reports provided fields for this contract. */
-provided_fields?: string[];
+provided_fields?:string[];
 /** Value that configures or reports missing for this contract. */
-missing?: string[];
+missing?:string[];
 /** Value that configures or reports missing required fields for this contract. */
-missing_required_fields?: string[];
+missing_required_fields?:string[];
 /** Value that configures or reports suggested flags for this contract. */
-suggested_flags?: string[];
+suggested_flags?:string[];
 /** Complete allowed value set for a refused positional or enum token. */
-allowed_values?: string[];
+allowed_values?:string[];
 /** Ranked command paths that accept an option rejected on the attempted path. */
-candidate_commands?: string[];
+candidate_commands?:string[];
 /** Complete number of accepting command paths before the recovery ceiling. */
-candidate_commands_total?: number;
+candidate_commands_total?:number;
 /** Whether additional accepting command paths were omitted from this payload. */
-candidate_commands_truncated?: boolean;
+candidate_commands_truncated?:boolean;
 /** Declared lexicon membership of an option rejected by the attempted path. */
-option_scope?: "declared_on_path" | "declared_elsewhere" | "declared_nowhere";
+option_scope?:"declared_on_path" | "declared_elsewhere" | "declared_nowhere";
 /** Value that configures or reports suggested retry for this contract. */
-suggested_retry?: string;
+suggested_retry?:string;
 /** Tokenized retry arguments for direct execution without reparsing display text. */
-suggested_retry_args?: string[];
+suggested_retry_args?:string[];
 /** Elapsed time in milliseconds for retry after. */
-retry_after_ms?: number;
+retry_after_ms?:number;
 /** Value that configures or reports fallback candidates for this contract. */
-fallback_candidates?: Array<{
-source: string;
-command: string;
-reason: string;
+fallback_candidates?:Array<{
+source:string;
+command:string;
+reason:string;
 }>;
 /** Value that configures or reports next best command for this contract. */
-next_best_command?: string;
+next_best_command?:string;
 }
 /** Documents the pm cli error context payload exchanged by command, SDK, and package integrations. */
 export interface PmCliErrorContext {
 /** Value that configures or reports code for this contract. */
-code?: string;
+code?:string;
 /** Canonical existing item identity returned by a refused create operation. */
-id?: string;
+id?:string;
 /** Actual persisted existing-item path returned by a refused create operation. */
-path?: string;
+path?:string;
 /** Item whose document could not be decoded or parsed. */
-item_id?: string;
+item_id?:string;
 /** Ordered mutation that failed semantic preview validation. */
-transaction_operation?: {
+transaction_operation?:{
 /** Zero-based position in the resolved batch. */
-index: number;
+index:number;
 /** Mutation kind from the resolved batch. */
-op: string;
+op:string;
 /** Resolved target identity. */
-id: string;
+id:string;
 };
 /** Verified retained deletion and the latest recoverable durable address. */
-tombstone?: {
+tombstone?:{
 /** The retained stream proves the item is currently deleted. */
-deleted: true;
+deleted:true;
 /** Timestamp of the most recent recorded deletion. */
-deleted_at: string;
+deleted_at:string;
 /** Whether a retained materialized state has an unambiguous recovery address. */
-recoverable: boolean;
+recoverable:boolean;
 /** Durable version before deletion, or null when compaction lost the mapping. */
-last_materialized_version: number | null;
+last_materialized_version:number | null;
 };
 /** Bounded policy violations explaining a refused mutation without item values. */
-policy_violations?: Array<{
+policy_violations?:Array<{
 /** Stable declaration that refused the mutation. */
-policy_id: string;
+policy_id:string;
 /** Requirement kind evaluated by the policy engine. */
-rule: string;
+rule:string;
 /** Workspace-authored rationale, when declared. */
-description?: string;
+description?:string;
 /** Required metadata paths absent from the proposed record. */
-missing_fields: string[];
+missing_fields:string[];
 }>;
 /** Total violations before the diagnostic's three-policy ceiling. */
-policy_violation_count?: number;
+policy_violation_count?:number;
 /** Exact filesystem path of the unreadable item document. */
-item_path?: string;
+item_path?:string;
 /** Tracker-relative documents claiming the same item identity. */
-paths?: string[];
+paths?:string[];
 /** Original document size before decoding or parsing. */
-byte_length?: number;
+byte_length?:number;
 /** Whether the original item document contained no bytes. */
-empty?: boolean;
+empty?:boolean;
 /** Stable failure class within the operation-specific error code. */
-reason?: string;
+reason?:string;
 /** Metadata field responsible for a validation failure, when known. */
-field?: string;
+field?:string;
 /** Assurance gate whose evaluation was refused, when known. */
-gate_id?: string;
+gate_id?:string;
 /** Assurance assertion whose evaluation was refused, when known. */
-assertion_id?: string;
+assertion_id?:string;
 /** Assurance measurement whose source could not resolve, when known. */
-measurement_id?: string;
+measurement_id?:string;
 /** Assurance measurement source kind involved in a refusal, when known. */
-source_kind?: string;
+source_kind?:string;
 /** Source item whose endpoint metadata violated a relationship contract. */
-source_id?: string;
+source_id?:string;
 /** Source item creation time used to evaluate a temporal relationship contract. */
-source_created_at?: string;
+source_created_at?:string;
 /** Target item whose endpoint metadata violated a relationship contract. */
-target_id?: string;
+target_id?:string;
 /** Target item creation time used to evaluate a temporal relationship contract. */
-target_created_at?: string;
+target_created_at?:string;
 /** Temporal relationship rule evaluated for the source and target. */
-temporal_order?: string;
+temporal_order?:string;
 /** Active one-edge relationship constraint violated by a prospective mutation. */
-relationship_cardinality?: {
+relationship_cardinality?:{
 /** Canonical registered relationship kind. */
-kind: string;
+kind:string;
 /** Endpoint orientation whose multiplicity is constrained. */
-direction: "outgoing" | "incoming";
+direction:"outgoing" | "incoming";
 /** Node whose one-edge constraint would be exceeded. */
-node_id: string;
+node_id:string;
 /** Distinct conflicting logical endpoints in deterministic order. */
-endpoint_ids: string[];
+endpoint_ids:string[];
 };
 /** Validate or health check selected by an assurance source, when known. */
-check?: string;
+check?:string;
 /** Serialization format involved in a parse failure. */
-format?: string;
+format?:string;
 /** CLI flag whose supplied value violated a shared mutation grammar. */
-flag?: string;
+flag?:string;
 /** Supplied scalar value that violated a shared mutation grammar. */
-value?: string;
+value?:string;
 /** Item format version involved in a compatibility failure. */
-format_version?: number;
+format_version?:number;
 /** Schema type that determines the shape and validation rules for this value. */
-type?: string;
+type?:string;
 /** Value that configures or reports required for this contract. */
-required?: string;
+required?:string;
 /** Value that configures or reports why for this contract. */
-why?: string;
+why?:string;
 /** Filesystem path selected by target resolution, when relevant. */
-resolved_path?: string;
+resolved_path?:string;
 /** Filesystem path from which target resolution began, when relevant. */
-requested_path?: string;
+requested_path?:string;
 /** Safer explicit filesystem target suggested for recovery. */
-suggested_path?: string;
+suggested_path?:string;
 /** Value that configures or reports examples for this contract. */
-examples?: string[];
+examples?:string[];
 /** Value that configures or reports next steps for this contract. */
-nextSteps?: string[];
+nextSteps?:string[];
 /** Exact selectors that could not be matched by a lossless removal. */
-unmatched?: string[];
+unmatched?:string[];
 /** Dependency selectors that matched no stored edge. */
-unmatched_selectors?: Array<{
-id: string;
-kind?: string;
-source_kind?: string;
-author?: string;
-created_at?: string;
+unmatched_selectors?:Array<{
+id:string;
+kind?:string;
+source_kind?:string;
+author?:string;
+created_at?:string;
 }>;
 /** Compact stored dependency identities available when a removal failed. */
-available_dependencies?: Array<{
-id: string;
-kind: string;
-source_kind?: string;
-author?: string;
-created_at?: string;
+available_dependencies?:Array<{
+id:string;
+kind:string;
+source_kind?:string;
+author?:string;
+created_at?:string;
 }>;
 /** Exact verifier findings that caused an integrity-sensitive operation to refuse. */
-verification_errors?: string[];
+verification_errors?:string[];
 /** Local dependency targets that could not be resolved before mutation. */
-unresolved_targets?: string[];
+unresolved_targets?:string[];
 /** Available history bounds for a failed point-in-time read or restore target. */
-valid_range?: {
+valid_range?:{
 /** Earliest available one-based version, or null for an empty stream. */
-first_version: number | null;
+first_version:number | null;
 /** Latest available one-based version, or null for an empty stream. */
-last_version: number | null;
+last_version:number | null;
 /** Earliest available history timestamp, or null for an empty stream. */
-first_timestamp: string | null;
+first_timestamp:string | null;
 /** Latest available history timestamp, or null for an empty stream. */
-last_timestamp: string | null;
+last_timestamp:string | null;
 };
 /** Value that configures or reports recovery for this contract. */
-recovery?: PmCliErrorRecoveryPayload;
+recovery?:PmCliErrorRecoveryPayload;
 }
 /** Implements the exported pm cli error runtime abstraction for core/shared/errors.ts. */
 export declare class PmCliError extends Error {
 /** Value that configures or reports exit code for this contract. */
-readonly exitCode: number;
+readonly exitCode:number;
 /** Stable machine-readable code mirrored from context for direct SDK consumption. */
-readonly code?: string;
+readonly code?:string;
 /** Value that configures or reports context for this contract. */
-readonly context: PmCliErrorContext;
+readonly context:PmCliErrorContext;
 /** Value that configures or reports constructor for this contract. */
-constructor(message: string, exitCode: number, context?: PmCliErrorContext);
+constructor(message:string,exitCode:number,context?:PmCliErrorContext);
 }

package/dist/core/shared/html-entity-decode.d.ts

@@ -12,7 +12,7 @@
  * Single-pass semantics guarantee `<` decodes to `<` (literal) rather
  * than collapsing to `<`, preserving any intentional double-encoding.
  */
-export declare function decodeHtmlEntitiesIfEscaped(input: string): string;
+export declare function decodeHtmlEntitiesIfEscaped(input:string):string;
 /**
  * Walk an arbitrary value (string / array / plain object) and apply
  * {@link decodeHtmlEntitiesIfEscaped} to every string leaf. Non-string scalars
@@ -24,4 +24,4 @@ export declare function decodeHtmlEntitiesIfEscaped(input: string): string;
  * a WeakMap is used as defensive protection against accidental cycles and
  * repeated references.
  */
-export declare function decodeHtmlEntitiesInOptions<T>(options: T): T;
+export declare function decodeHtmlEntitiesInOptions<T>(options:T):T;

package/dist/core/shared/item-metadata-contract.d.ts

@@ -5,6 +5,6 @@
  * storage, query projections, generated contracts, and package consumers.
  */
 /** Portable project-context fields shared by storage order and structured mutation IO. */
-export declare const ITEM_PROJECT_CONTEXT_KEYS: readonly ["goal", "objective", "value", "impact", "outcome", "why_now", "parent", "reviewer", "risk", "confidence", "sprint", "release", "blocked_by", "blocked_reason", "unblock_note", "reporter", "severity", "environment", "repro_steps", "resolution", "expected_result", "actual_result"];
+export declare const ITEM_PROJECT_CONTEXT_KEYS:readonly ["goal","objective","value","impact","outcome","why_now","parent","reviewer","risk","confidence","sprint","release","blocked_by","blocked_reason","unblock_note","reporter","severity","environment","repro_steps","resolution","expected_result","actual_result"];
 /** Public contract for item metadata key order, shared by SDK and presentation-layer consumers. */
-export declare const ITEM_METADATA_KEY_ORDER: ReadonlyArray<string>;
+export declare const ITEM_METADATA_KEY_ORDER:ReadonlyArray<string>;

package/dist/core/shared/lazy-module.d.ts

@@ -4,4 +4,4 @@
  * Provides shared primitives and utilities for Lazy Module.
  */
 /** Creates a memoized async module loader for optional or expensive runtime dependencies. */
-export declare function createLazyModule<T>(importer: () => Promise<T>): () => Promise<T>;
+export declare function createLazyModule<T>(importer:() => Promise<T>):() => Promise<T>;

package/dist/core/shared/levenshtein.d.ts

@@ -4,4 +4,4 @@
  * Provides shared primitives and utilities for Levenshtein.
  */
 /** Computes bounded Levenshtein distance for typo suggestions without scanning unnecessary suffixes. */
-export declare function levenshteinDistanceWithinLimit(left: string, right: string, limit: number): number | null;
+export declare function levenshteinDistanceWithinLimit(left:string,right:string,limit:number):number | null;

package/dist/core/shared/memo.d.ts

@@ -4,4 +4,4 @@
  * Provides shared primitives and utilities for capped memoization maps.
  */
 /** Drop the oldest-inserted half of a memo map (Map preserves insertion order), so a size-cap hit mid-scan keeps the newest-inserted half instead of cold-starting the memo. Callers that re-insert entries on hit (the envelope memo) get LRU eviction; the scalar comparator memos evict purely by insertion order. */
-export declare function evictOldestMemoEntries<Value>(memo: Map<string, Value>): void;
+export declare function evictOldestMemoEntries<Value>(memo:Map<string,Value>):void;

package/dist/core/shared/numeric-parsers.d.ts

@@ -1,2 +1,2 @@
 /** Parses a non-negative numeric limit and floors fractional values. */
-export declare function parseLimit(raw: string | undefined, label?: string): number | undefined;
+export declare function parseLimit(raw:string | undefined,label?:string):number | undefined;

package/dist/core/shared/option-alias-visibility.d.ts

@@ -16,9 +16,9 @@
  * stay visible.
  */
 /** Extract every long flag (for example `--create-mode`) from a commander flag spec that may include short aliases and a value placeholder. A spec can list more than one long flag, for example `"--estimate, --estimated-minutes <value>"` → `["--estimate", "--estimated-minutes"]`. */
-export declare function extractLongFlags(flagSpec: string): string[];
+export declare function extractLongFlags(flagSpec:string):string[];
 /** Extract the first long flag from a commander flag spec, or null when none is present. */
-export declare function extractLongFlag(flagSpec: string): string | null;
+export declare function extractLongFlag(flagSpec:string):string | null;
 /**
  * Returns true when `aliasFlagSpec` differs from `canonicalFlagSpec` ONLY by
  * substituting one or more interior hyphens with underscores — i.e. it is a
@@ -33,4 +33,4 @@ export declare function extractLongFlag(flagSpec: string): string | null;
  *   --order                  <- --rank    (different identifier)
  *   --strict-exit            <- --fail-on-warn (semantically distinct)
  */
-export declare function isPureSnakeCaseAlias(canonicalFlagSpec: string, aliasFlagSpec: string): boolean;
+export declare function isPureSnakeCaseAlias(canonicalFlagSpec:string,aliasFlagSpec:string):boolean;

package/dist/core/shared/primitives.d.ts

@@ -7,28 +7,28 @@
  * several CLI command modules.
  */
 /** Return a trimmed non-empty string, or `null` for non-string/blank input. */
-export declare function toNonEmptyString(value: unknown): string | null;
+export declare function toNonEmptyString(value:unknown):string | null;
 /** Implements to non empty string or undefined for the public runtime surface of this module. */
-export declare function toNonEmptyStringOrUndefined(value: unknown): string | undefined;
+export declare function toNonEmptyStringOrUndefined(value:unknown):string | undefined;
 /** Implements trim trailing slashes for the public runtime surface of this module. */
-export declare function trimTrailingSlashes(value: string): string;
+export declare function trimTrailingSlashes(value:string):string;
 /** Implements check whether finite number array for the public runtime surface of this module. */
-export declare function isFiniteNumberArray(value: unknown): value is number[];
+export declare function isFiniteNumberArray(value:unknown):value is number[];
 /** Implements to error message for the public runtime surface of this module. */
-export declare function toErrorMessage(error: unknown): string;
+export declare function toErrorMessage(error:unknown):string;
 /** Parse either a finite numeric literal or a non-empty numeric string. Returns `null` for unsupported input types, empty strings, and non-finite numeric values. */
-export declare function coerceFiniteNumber(value: unknown): number | null;
+export declare function coerceFiniteNumber(value:unknown):number | null;
 /** Implements coerce positive integer for the public runtime surface of this module. */
-export declare function coercePositiveInteger(value: unknown): number | null;
+export declare function coercePositiveInteger(value:unknown):number | null;
 /** Implements coerce number in range for the public runtime surface of this module. */
-export declare function coerceNumberInRange(value: unknown, min: number, max: number): number | null;
+export declare function coerceNumberInRange(value:unknown,min:number,max:number):number | null;
 /**
  * Narrow a value to a plain object, returning `null` for non-objects,
  * `null`, and arrays. Returns the original reference (no clone).
  *
  * Matches the historical `asRecord` in src/cli/main.ts.
  */
-export declare function asRecordOrNull(value: unknown): Record<string, unknown> | null;
+export declare function asRecordOrNull(value:unknown):Record<string,unknown> | null;
 /**
  * Narrow a value to a plain object, returning `null` only for non-objects and
  * `null` while accepting arrays (arrays are objects). Returns the original
@@ -37,15 +37,15 @@ export declare function asRecordOrNull(value: unknown): Record<string, unknown>
  * Matches the historical `asRecord` in src/core/extensions/loader.ts, which
  * intentionally omits the array guard.
  */
-export declare function asRecordLoose(value: unknown): Record<string, unknown> | null;
+export declare function asRecordLoose(value:unknown):Record<string,unknown> | null;
 /** Narrow a value to a property-bearing object or function. Dynamic module exports can be function/class values with static lifecycle properties, so activation boundaries need a wider record shape than plain-object parsing. */
-export declare function asPropertyRecord(value: unknown): Record<string, unknown> | null;
+export declare function asPropertyRecord(value:unknown):Record<string,unknown> | null;
 /** Resolve the module or default export record that owns an `activate` lifecycle function. Accepts object and function/class-shaped exports so runtime loading and SDK tests share the same extension interop rule. */
-export declare function resolveActivatablePropertyRecord(value: unknown): Record<string, unknown> | null;
+export declare function resolveActivatablePropertyRecord(value:unknown):Record<string,unknown> | null;
 /**
  * Narrow a value to a plain object, returning an empty object for non-objects,
  * `null`, and arrays. Returns a shallow clone of the source object.
  *
  * Matches the historical `asRecord` in src/mcp/server.ts.
  */
-export declare function asRecordClone(value: unknown): Record<string, unknown>;
+export declare function asRecordClone(value:unknown):Record<string,unknown>;

package/dist/core/shared/secret-rules.d.ts

@@ -6,105 +6,105 @@
 /** One detector and any explicit repository-only scope exception. */
 export interface SecretRule {
 /** Repository diagnostic identifier. */
-name: string;
+name:string;
 /** Compatible SDK diagnostic identifier. */
-mutationRule: string;
+mutationRule:string;
 /** Global pattern; consumers reset lastIndex before each scan. */
-regex: RegExp;
+regex:RegExp;
 /** Repository paths with deliberate fixture exemptions. */
-excludeFiles?: RegExp;
+excludeFiles?:RegExp;
 /** Repository paths eligible for this rule. */
-includeFiles?: RegExp;
+includeFiles?:RegExp;
 /** Why the repository gate deliberately omits this mutation heuristic. */
-mutationOnlyReason?: string;
+mutationOnlyReason?:string;
 /** Minimum Shannon entropy of the first capture group, when applicable. */
-minimumEntropy?: number;
+minimumEntropy?:number;
 }
 /** Canonical patterns; repository exemptions never exempt mutation payloads. */
-export declare const SECRET_RULES: readonly [{
-readonly name: "private-key";
-readonly mutationRule: "private_key";
-readonly regex: RegExp;
-}, {
-readonly name: "github-token";
-readonly mutationRule: "github_token";
-readonly regex: RegExp;
-}, {
-readonly name: "npm-token";
-readonly mutationRule: "npm_token";
-readonly regex: RegExp;
-}, {
-readonly name: "aws-access-key";
-readonly mutationRule: "aws_access_key";
-readonly regex: RegExp;
-}, {
-readonly name: "google-api-key";
-readonly mutationRule: "google_api_key";
-readonly regex: RegExp;
-}, {
-readonly name: "slack-token";
-readonly mutationRule: "slack_token";
-readonly regex: RegExp;
-}, {
-readonly name: "anthropic-api-key";
-readonly mutationRule: "anthropic_api_key";
-readonly regex: RegExp;
-}, {
-readonly name: "openai-api-key";
-readonly mutationRule: "openai_api_key";
-readonly regex: RegExp;
-}, {
-readonly name: "gitlab-token";
-readonly mutationRule: "gitlab_token";
-readonly regex: RegExp;
-}, {
-readonly name: "jwt-like-token";
-readonly mutationRule: "jwt_like_token";
-readonly regex: RegExp;
-}, {
-readonly name: "npm-auth-token-assignment";
-readonly mutationRule: "npm_auth_token_assignment";
-readonly regex: RegExp;
-}, {
-readonly name: "sentry-user-token";
-readonly mutationRule: "sentry_user_token";
-readonly regex: RegExp;
-}, {
-readonly name: "sentry-org-token";
-readonly mutationRule: "sentry_org_token";
-readonly regex: RegExp;
-}, {
-readonly name: "private-ip";
-readonly mutationRule: "private_ip";
-readonly regex: RegExp;
-}, {
-readonly name: "private-ssh-target";
-readonly mutationRule: "private_ssh_target";
-readonly regex: RegExp;
-}, {
-readonly name: "sshpass-inline-password";
-readonly mutationRule: "sshpass_inline_password";
-readonly regex: RegExp;
-}, {
-readonly name: "password-assignment";
-readonly mutationRule: "password_assignment";
-readonly regex: RegExp;
-}, {
-readonly name: "absolute-home-path";
-readonly mutationRule: "absolute_home_path";
-readonly regex: RegExp;
-readonly excludeFiles: RegExp;
-}, {
-readonly name: "user-at-private-host";
-readonly mutationRule: "user_at_private_host";
-readonly regex: RegExp;
-readonly excludeFiles: RegExp;
-}, {
-readonly name: "high-entropy-assignment";
-readonly mutationRule: "high_entropy_assignment";
-readonly regex: RegExp;
-readonly mutationOnlyReason: "Generic assignments in source code are not credentials; preserve the existing mutation heuristic without treating source identifiers as secrets.";
-readonly minimumEntropy: 3.5;
+export declare const SECRET_RULES:readonly [{
+readonly name:"private-key";
+readonly mutationRule:"private_key";
+readonly regex:RegExp;
+},{
+readonly name:"github-token";
+readonly mutationRule:"github_token";
+readonly regex:RegExp;
+},{
+readonly name:"npm-token";
+readonly mutationRule:"npm_token";
+readonly regex:RegExp;
+},{
+readonly name:"aws-access-key";
+readonly mutationRule:"aws_access_key";
+readonly regex:RegExp;
+},{
+readonly name:"google-api-key";
+readonly mutationRule:"google_api_key";
+readonly regex:RegExp;
+},{
+readonly name:"slack-token";
+readonly mutationRule:"slack_token";
+readonly regex:RegExp;
+},{
+readonly name:"anthropic-api-key";
+readonly mutationRule:"anthropic_api_key";
+readonly regex:RegExp;
+},{
+readonly name:"openai-api-key";
+readonly mutationRule:"openai_api_key";
+readonly regex:RegExp;
+},{
+readonly name:"gitlab-token";
+readonly mutationRule:"gitlab_token";
+readonly regex:RegExp;
+},{
+readonly name:"jwt-like-token";
+readonly mutationRule:"jwt_like_token";
+readonly regex:RegExp;
+},{
+readonly name:"npm-auth-token-assignment";
+readonly mutationRule:"npm_auth_token_assignment";
+readonly regex:RegExp;
+},{
+readonly name:"sentry-user-token";
+readonly mutationRule:"sentry_user_token";
+readonly regex:RegExp;
+},{
+readonly name:"sentry-org-token";
+readonly mutationRule:"sentry_org_token";
+readonly regex:RegExp;
+},{
+readonly name:"private-ip";
+readonly mutationRule:"private_ip";
+readonly regex:RegExp;
+},{
+readonly name:"private-ssh-target";
+readonly mutationRule:"private_ssh_target";
+readonly regex:RegExp;
+},{
+readonly name:"sshpass-inline-password";
+readonly mutationRule:"sshpass_inline_password";
+readonly regex:RegExp;
+},{
+readonly name:"password-assignment";
+readonly mutationRule:"password_assignment";
+readonly regex:RegExp;
+},{
+readonly name:"absolute-home-path";
+readonly mutationRule:"absolute_home_path";
+readonly regex:RegExp;
+readonly excludeFiles:RegExp;
+},{
+readonly name:"user-at-private-host";
+readonly mutationRule:"user_at_private_host";
+readonly regex:RegExp;
+readonly excludeFiles:RegExp;
+},{
+readonly name:"high-entropy-assignment";
+readonly mutationRule:"high_entropy_assignment";
+readonly regex:RegExp;
+readonly mutationOnlyReason:"Generic assignments in source code are not credentials; preserve the existing mutation heuristic without treating source identifiers as secrets.";
+readonly minimumEntropy:3.5;
 }];
 /** Accept a pattern match, applying the declared entropy predicate when present. */
-export declare function acceptsSecretMatch(rule: SecretRule, match: RegExpMatchArray): boolean;
+export declare function acceptsSecretMatch(rule:SecretRule,match:RegExpMatchArray):boolean;