border-customs 0.8.2 → 0.8.3

package/README.md

@@ -839,7 +839,7 @@ plugin entry ships as `exports["./server"]`):
 ```jsonc
 {
   // pin the exact version — an @latest channel hits the registry on every cold start
-  "plugin": ["border-customs@0.8.2"]
+  "plugin": ["border-customs@0.8.3"]
 }
 ```
 
@@ -969,6 +969,15 @@ and every pull request, plus version single-source, typecheck, build, and audit
 
 ## Changelog
 
+### 0.8.3 (2026-11-02)
+- Fix: `exfil-cred-location` is now syntax-aware in JS/TS sources (handoff b61b42a) —
+  `.env` tokens count only inside string-literal spans (TypeScript compiler API, shipped
+  as a runtime dependency, bundle stays external-pinned); member accesses (`opts.env`),
+  short receivers and comment text are no longer reported. Markdown/text keep the
+  bare-mention behavior; every other rule is untouched. All tree faces (check, history,
+  tip lens) share the guard; parse failure ⇒ old behavior + one stderr note, exit codes
+  unchanged. Rules fingerprint rotated (cached PASSes re-verify once).
+
 ### 0.8.2 (2026-11-01)
 - Production dependency graph now measures ZERO advisories (`npm audit --omit=dev`): the
   pattern rule is vendored (`src/engines/borderPatternRule.ts`, MIT attribution; drops the

package/dist/assets/exfil-src/rules.ts

@@ -31,6 +31,11 @@ export type RuleOptions = {
   readonly hosts?: readonly string[];
   /** exemption-band override (production default DEFAULT_EXEMPT_BANDS; [] forces in-range arms red in unit tests). */
   readonly exemptBands?: readonly string[];
+  /** source path (tree facet only) — drives the syntax-aware credential-location
+   *  guard (handoff b61b42a): JS/TS sources classify .env tokens by literal spans. */
+  readonly filePath?: string;
+  /** one-shot diagnostic sink (parse-failure notes; wired to stderr by the tree leg). */
+  readonly onNote?: (line: string) => void;
 };
 
 // ---------------------------------------------------------------- IPv4 machinery

package/dist/assets/exfil-src/rulesPath.ts

@@ -4,6 +4,7 @@
 // Self-stealth: no absolute workspace paths and no dotted quads in this file
 // (see rules.ts header for the 0.5.1 dogfood lesson this obeys).
 import type { RuleHit, RuleOptions } from "./rules.ts";
+import { inSpan, isJsTsPath, literalSpans, type LiteralSpan } from "./tsSpans.ts";
 
 // ---------------------------------------------------------------- exfil-home-path
 
@@ -52,20 +53,48 @@ function envTokenIsLocation(tok: string): boolean {
  * prefix, or has a real file-stem receiver (≥3 chars, never the process/os
  * API names); the JS optional-chain read `x?.env` never counts.
  */
-export function matchCredLocation(text: string, _o: RuleOptions): RuleHit[] {
+export function matchCredLocation(text: string, o: RuleOptions): RuleHit[] {
   const hits: RuleHit[] = [];
   const push = (matched: string, line: number): void => {
     hits.push({ rule: "exfil-cred-location", matched, line, message: "Reference to a credential-bearing location (env file / pypirc / SSHPASS); the location itself, value not required to fire." });
   };
-  text.split("\n").forEach((body, idx) => {
-    for (const m of body.matchAll(PYPIRC_RE)) push(m[0] ?? "", idx + 1);
-    for (const m of body.matchAll(SSHPASS_RE)) push(m[0] ?? "", idx + 1);
+  // Syntax-aware guard (handoff b61b42a §3): in JS/TS sources a .env token is a
+  // path candidate ONLY inside a string-like literal span. Property accesses
+  // (opts.env), short receivers and comment text are syntactically not paths —
+  // no lexical rule over receiver names can tell them apart (read-aloud proof
+  // in the handoff). Parse failure ⇒ old behavior + one stderr note, exit code
+  // untouched. pypirc/SSHPASS tokens are untouched by the guard, in any file.
+  const filePath = o.filePath ?? "";
+  let spans: LiteralSpan[] | null | undefined;
+  const spansFor = (): LiteralSpan[] | null => {
+    if (spans === undefined) {
+      spans = literalSpans(filePath, text);
+      if (spans === null) o.onNote?.(`${filePath}: JS/TS parse unavailable — credential-location matches reported by the pre-0.8.3 text rule for this file`);
+    }
+    return spans;
+  };
+  const guarded = isJsTsPath(filePath);
+  let lineOffset = 0;
+  for (const [idx, body] of text.split("\n").entries()) {
+    const line = idx + 1;
+    for (const m of body.matchAll(PYPIRC_RE)) push(m[0] ?? "", line);
+    for (const m of body.matchAll(SSHPASS_RE)) push(m[0] ?? "", line);
     for (const m of body.matchAll(ENVFILE_RE)) {
       const tok = m[0] ?? "";
       if ((body[(m.index ?? 0) - 1] ?? "") === "?") continue;
-      if (envTokenIsLocation(tok)) push(tok, idx + 1);
+      if (!envTokenIsLocation(tok)) continue;
+      if (guarded) {
+        const sp = spansFor();
+        // token starts one char past the match (leading '.'); comment and
+        // identifier positions sit outside every literal span.
+        const offset = lineOffset + (m.index ?? 0) + 1;
+        if (sp === null) { /* parse-failure fallback: report (old behavior) */ }
+        else if (!inSpan(sp, offset)) continue;
+      }
+      push(tok, line);
     }
-  });
+    lineOffset += body.length + 1;
+  }
   return hits;
 }
 

package/dist/assets/exfil-src/scan.ts

@@ -69,6 +69,12 @@ export type ExfilScanInput = {
   readonly source: string;
   /** operator's rules.hosts (config.ts:102) for the ssh-target predicate. */
   readonly hosts?: readonly string[];
+  /** source file path (tree facet) — threaded to predicates for the syntax-aware
+   *  credential-location guard; message facets keep it undefined (a commit message
+   *  is not JS source). */
+  readonly filePath?: string;
+  /** parse-failure diagnostic sink for the tree leg. */
+  readonly onNote?: (line: string) => void;
   /**
    * Ingest hook mirroring the redact.ts adapter contract ("every adapter
    * registers every value it ingests"): the check pipeline passes
@@ -111,7 +117,12 @@ const PREDICATES: Readonly<Record<ExfilRuleId, (text: string, o: RuleOptions) =>
  */
 function scanFacet(input: ExfilScanInput, facet: Extract<ExfilFacet, "tree" | "message">): ExfilFinding[] {
   const channel: ExfilChannel = "native";
-  const options: RuleOptions = { facet, ...(input.hosts !== undefined ? { hosts: input.hosts } : {}) };
+  const options: RuleOptions = {
+    facet,
+    ...(input.hosts !== undefined ? { hosts: input.hosts } : {}),
+    ...(input.filePath !== undefined ? { filePath: input.filePath } : {}),
+    ...(input.onNote !== undefined ? { onNote: input.onNote } : {}),
+  };
   const findings: ExfilFinding[] = [];
   for (const rule of emitRulesFor(facet, channel)) {
     const severity = observedSeverity(rule, facet, channel);

package/dist/assets/exfil-src/tsSpans.ts

@@ -0,0 +1,88 @@
+// provenance: Abathur handoff 2026-11-01 (rule-class-3 false positives, commit b61b42a).
+//
+// `.env` is a disk location inside a string literal and a property access inside
+// code — the same characters, a SYNTACTIC distinction no receiver-shaped regex can
+// draw (opts vs secrets are both plain identifiers; proven by the handoff's
+// read-aloud round). This module answers one question for JS/TS sources: at which
+// byte spans does the file contain string-like literal text?
+//
+// Contract (handoff §3, decided there):
+//   * string literals, no-substitution template literals, and template fragments
+//     (head/middle/tail) are literal spans — the ${...} regions are INCLUDED,
+//     deliberately conservative: a location inside an interpolation is still the
+//     author writing a location into source text;
+//   * comments are NOT literal spans (the AST visitor never yields them);
+//   * parse diagnostics ⇒ null ⇒ the CALLER keeps the old behavior and emits the
+//     required stderr diagnostic. This module stays silent and side-effect free.
+// typescript is a real dependency resolved at runtime (esbuild keeps it external;
+// the createRequire banner in the bundle resolves it from the installed package).
+import { createRequire } from "node:module";
+
+const JS_TS_KINDS: Readonly<Record<string, string>> = {
+  ".js": "JS", ".jsx": "JSX", ".mjs": "JS", ".cjs": "JS",
+  ".ts": "TS", ".tsx": "TSX", ".mts": "TS", ".cts": "TS",
+};
+
+export type LiteralSpan = { readonly start: number; readonly end: number };
+
+export function isJsTsPath(filePath: string): boolean {
+  const dot = filePath.lastIndexOf(".");
+  return dot >= 0 && JS_TS_KINDS[filePath.slice(dot).toLowerCase()] !== undefined;
+}
+
+let tsApi: any; // eslint-disable-line @typescript-eslint/no-explicit-any -- compiler API is structural here
+function loadTs(): any {
+  if (tsApi === undefined) {
+    try {
+      tsApi = createRequire(import.meta.url)("typescript");
+    } catch {
+      tsApi = null; // resolution failure behaves like a parse failure: caller keeps old behavior + diagnostic
+    }
+  }
+  return tsApi;
+}
+
+/** Literal spans for a JS/TS source; null when no tree can be trusted. */
+export function literalSpans(filePath: string, text: string): LiteralSpan[] | null {
+  const ts = loadTs();
+  if (ts === null) return null;
+  const dot = filePath.lastIndexOf(".");
+  const kind = JS_TS_KINDS[filePath.slice(dot).toLowerCase()] ?? "TS";
+  const scriptKind = ts.ScriptKind[kind as keyof typeof ts.ScriptKind];
+  let sf: any; // eslint-disable-line @typescript-eslint/no-explicit-any
+  try {
+    sf = ts.createSourceFile(filePath, text, scriptKind, /* setParentNodes */ true);
+  } catch {
+    return null;
+  }
+  const parseDiagnostics: unknown[] = sf.parseDiagnostics ?? [];
+  if (parseDiagnostics.length > 0) return null;
+  const spans: LiteralSpan[] = [];
+  const visit = (node: any): void => { // eslint-disable-line @typescript-eslint/no-explicit-any
+    const k = node.kind as number;
+    if (
+      k === ts.SyntaxKind.StringLiteral
+      || k === ts.SyntaxKind.NoSubstitutionTemplateLiteral
+      || k === ts.SyntaxKind.TemplateHead
+      || k === ts.SyntaxKind.TemplateMiddle
+      || k === ts.SyntaxKind.TemplateTail
+    ) {
+      spans.push({ start: node.getStart(sf), end: node.getEnd() });
+    }
+    node.forEachChild(visit);
+  };
+  visit(sf);
+  spans.sort((a: LiteralSpan, b: LiteralSpan) => a.start - b.start);
+  return spans;
+}
+
+/** Membership: is offset inside any span? Linear with early exit — literal
+ *  spans nest (template head inside full template), and nested intervals
+ *  defeat a plain binary walk (a right sibling can shadow its left ancestor). */
+export function inSpan(spans: readonly LiteralSpan[], offset: number): boolean {
+  for (const s of spans) {
+    if (s.start > offset) break;
+    if (offset < s.end) return true;
+  }
+  return false;
+}

package/dist/assets/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "border-customs",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "border-customs",
-      "version": "0.8.2",
+      "version": "0.8.3",
       "license": "MIT",
       "dependencies": {
         "@secretlint/core": "13.0.5",
@@ -15,8 +15,9 @@
         "@secretlint/secretlint-rule-preset-recommend": "13.0.5",
         "@textlint/regexp-string-matcher": "2.0.2",
         "publint": "0.3.24",
+        "typescript": "5.9.3",
         "yaml": "2.9.0",
-        "zod": "4.5.4"
+        "zod": "4.6.7"
       },
       "bin": {
         "border": "dist/index.js"
@@ -27,7 +28,6 @@
         "@types/node": "22.19.0",
         "esbuild": "0.25.12",
         "secretlint": "13.0.5",
-        "typescript": "5.9.3",
         "verdaccio": "6.10.2"
       },
       "engines": {
@@ -5760,7 +5760,6 @@
       "version": "5.9.3",
       "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
       "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
-      "dev": true,
       "license": "Apache-2.0",
       "bin": {
         "tsc": "bin/tsc",
@@ -6105,9 +6104,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "4.5.4",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.5.4.tgz",
-      "integrity": "sha512-sC95tT5iHHH9gtpj6A81kh+NEaRAUFN+qlUPDUbRfOMvNf5QCBqsb3WgvnpVtK5Y+4UfA6KqufotuTvMGiTlsA==",
+      "version": "4.6.7",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz",
+      "integrity": "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"