codebase-snapshot 0.9.12 → 0.9.14

package/dist/index.d.cts

@@ -1,6 +1,6 @@
-import { S as SecretRule, D as DiscoveryMode, a as SkipRecord, J as JsonSummary, M as MarkdownSummary, b as SourceSummary, K as KindRule, L as LayerRule, R as ResolvedSnapshotConfig, c as SnapshotConfig, B as ByteSize, C as CliOptions, P as PartMetadata, F as FileEntry, T as TextEncoding, d as SecretFinding, V as ValidationResult, e as Manifest, A as ArtifactSelection } from './types-CTewen3J.cjs';
-export { f as BudgetConfig, H as HooksConfig, I as InclusionMode, g as ManifestArtifact, h as ManifestConfigSnapshot, i as ManifestIndexes, j as ManifestTotals, k as Mode, O as OutputFormat, l as PartFileEntry, m as ResolvedArtifacts, n as ResolvedBudgets, o as SecretRuleInput, p as SkipReason, q as SummaryQuality, r as ValidationDrift } from './types-CTewen3J.cjs';
-export { w as workerEntry } from './generate-worker-D5Xgh27c.cjs';
+import { S as SecretRule, D as DiscoveryMode, a as SkipRecord, J as JsonSummary, M as MarkdownSummary, b as SourceSummary, K as KindRule, L as LayerRule, R as ResolvedSnapshotConfig, c as SnapshotConfig, B as ByteSize, C as CliOptions, P as PartMetadata, F as FileEntry, T as TextEncoding, d as SecretFinding, V as ValidationResult, e as Manifest, A as ArtifactSelection } from './types-DIX6zWSt.cjs';
+export { f as BudgetConfig, H as HooksConfig, I as InclusionMode, g as ManifestArtifact, h as ManifestConfigSnapshot, i as ManifestIndexes, j as ManifestTotals, k as Mode, O as OutputFormat, l as PartFileEntry, m as ResolvedArtifacts, n as ResolvedBudgets, o as SecretRuleInput, p as SkipReason, q as SummaryQuality, r as ValidationDrift } from './types-DIX6zWSt.cjs';
+export { w as workerEntry } from './generate-worker-D_mUjgXw.cjs';
 
 interface GitInfo {
     branch: string;
@@ -70,6 +70,12 @@ declare function findSecretInPath(relativePath: string, extraRules?: readonly Se
  * Brace groups and character classes are supported because they are what people
  * actually write: `*.{ts,tsx}` previously matched nothing at all, since `{` and
  * `}` were escaped as literals.
+ *
+ * Compiled once per distinct pattern. `matchesExclude` calls this for every
+ * (file, include), (file, exclude), (file, layer rule) and (file, kind rule)
+ * pair, so a 20 000-file repository with 55 patterns compiled over a million
+ * identical RegExp objects per run. The result is a pure function of the string,
+ * so the cache cannot change an answer.
  */
 declare function globToRegExp(glob: string): RegExp;
 /**
@@ -90,9 +96,19 @@ declare function matchesExclude(relativePath: string, pattern: string): boolean;
 declare function collectFiles(cwd: string, options?: CollectOptions): CollectResult;
 
 /**
- * Strips `//` and block comments the way JSONC does, without touching anything
- * inside a string literal. `JSON.parse` alone made every `.jsonc` file report
- * `invalid-json`, losing its key shape entirely.
+ * Strips `//` and block comments the way JSONC does, plus trailing commas, without touching
+ * anything inside a string literal.
+ *
+ * `JSON.parse` alone made every `.jsonc` file — and every `tsconfig.json` an editor had
+ * reformatted — report `invalid-json`, losing its key shape entirely. Two things this file's
+ * matcher did that `src/config.ts`'s did not, and both are JSONC, not extensions of it:
+ *
+ * - **Trailing commas.** `{ "a": 1, }` is valid JSONC and invalid JSON.
+ * - **`\r`-only line endings.** A `//` comment ended only at `\n`, so on a CR-delimited file it
+ *   swallowed everything to the end of the document.
+ *
+ * A block comment keeps the line breaks it spans. Dropping them renumbered every line after it,
+ * and the only thing a reader has to place a summary key is the line number.
  */
 declare function stripJsonComments(content: string): string;
 declare function summarizeJson(content: string): JsonSummary;
@@ -170,13 +186,6 @@ declare function supportsTypeScriptImports(): boolean;
  * "unknown setting(s): secretRules" while the same key worked when passed in code).
  */
 declare const CONFIG_KEYS: ReadonlySet<string>;
-/**
- * Loads the first usable config file from `cwd`.
- *
- * Every failure is reported through `warnings` instead of being swallowed by an
- * empty `catch`: a syntax error in a user's config used to be indistinguishable
- * from having no config at all.
- */
 declare function loadConfigFileDetailed(cwd: string): Promise<ConfigLoadResult>;
 declare function loadConfigFile(cwd: string): Promise<SnapshotConfig | null>;
 /** Smallest usable part budget: a part header plus one section must fit. */
@@ -324,6 +333,10 @@ interface PreviewResult {
  *
  * Previously `index.ts` recorded 0 for an empty file while `preview.ts` recorded
  * 1, and every newline-terminated file was over-counted by one.
+ *
+ * Counted by scanning rather than by `split`: this runs on every file body and on every part, and
+ * normalising first would allocate a second copy of a multi-megabyte string to answer a question
+ * about its terminator count.
  */
 declare function countLines(content: string): number;
 /**
@@ -465,18 +478,6 @@ declare function isBinaryFile(absolutePath: string): boolean;
 
 declare function detectLanguage(filePath: string): string;
 
-/**
- * Redacts secrets from `content`.
- *
- * - Replaces only the matched span, so unrelated code sharing the line survives
- *   (the previous implementation discarded the whole line).
- * - When a rule declares `valueGroup`, only that capture group is masked, so
- *   `dbPassword: "…"` keeps its key and stays parseable.
- * - Masks PEM private-key blocks as a unit; per-line rules can only see the
- *   `BEGIN` header, which left every body line of a real key in the output.
- * - Records `{ rule, line, path }` only. No excerpt of the source is retained,
- *   because that excerpt was being written verbatim into `reports/audit.md`.
- */
 declare function scanAndRedactSecrets(content: string, rules: SecretRule[], filePath?: string): {
     redacted: string;
     findings: SecretFinding[];
@@ -508,7 +509,7 @@ declare function validateSnapshot(configInput: ResolvedSnapshotConfig | Snapshot
  * `package.json` carries the same version; `npm run verify` compares the two.
  */
 declare const GENERATOR_NAME = "codebase-snapshot";
-declare const GENERATOR_VERSION = "0.9.12";
+declare const GENERATOR_VERSION = "0.9.14";
 
 /** The one endpoint this package will ever request. */
 declare const PACKAGE_LATEST_URL = "https://registry.npmjs.org/codebase-snapshot/latest";
@@ -553,7 +554,13 @@ interface UpdateCheckOptions {
     fetchLatest?: (url: string, timeoutMs: number) => Promise<string | null>;
     enabled?: boolean;
 }
-/** True when `candidate` is a strictly higher release than `current`. */
+/**
+ * True when `candidate` is a version worth telling somebody about.
+ *
+ * A prerelease is never announced — being offered `1.0.0-rc.1` while running `0.9.12` is not an
+ * upgrade, and a check that says so is wrong every time it fires. A stable release *is* newer than
+ * the prerelease of itself, so somebody on `0.9.12-beta.1` is told about `0.9.12`.
+ */
 declare function isNewer(candidate: string, current: string): boolean;
 /** The per-user cache directory, following each platform's convention. */
 declare function cacheDirectory(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): string;
@@ -566,7 +573,18 @@ declare function cacheFilePath(env?: NodeJS.ProcessEnv): string;
  * spends a CI job's network and pollutes a machine-readable stream.
  */
 declare function shouldCheck(argv: readonly string[], env: NodeJS.ProcessEnv): boolean;
-/** One HTTPS GET with a hard timeout. Resolves null for every failure. */
+/**
+ * One GET with a hard deadline. Resolves null for every failure.
+ *
+ * The deadline is a **wall clock**, not an idle-socket timeout. `request.setTimeout` only fires
+ * when the socket goes quiet, so a slow or trickling proxy — one that sends a byte every second —
+ * kept the CLI process alive long past `REQUEST_TIMEOUT_MS`. The timer below is absolute: when it
+ * fires the request is destroyed and the answer is "could not determine", which is what the notice
+ * already treats as "say nothing".
+ *
+ * The scheme picks the transport so the deadline can be exercised against a local server; the
+ * default URL is https either way.
+ */
 declare function fetchLatestVersion(url?: string, timeoutMs?: number): Promise<string | null>;
 /**
  * Returns a notice when a newer version is published, or null.
@@ -1049,8 +1067,7 @@ interface ChangedScope {
  */
 declare function resolveChangedScope(cwd: string, request: ChangedScopeRequest): ChangedScope;
 
-/**
- * One-pass lookup tables for relative-import resolution.
+/** One-pass lookup tables for relative-import resolution.
  *
  * `resolveSpecifier` used to fall back to scanning every known file for every
  * unresolved import — 100k files × 100k imports — and built a RegExp from the
@@ -1093,9 +1110,9 @@ declare function importsOfText(relativePath: string, text: string): string[];
 /**
  * Import specifiers of one file on disk.
  *
- * A file this cannot read, a binary file and a file the parser rejects all contribute `[]`, which
- * is what the generator saw for them too — so the answer stays consistent with the snapshot
- * rather than becoming a third opinion about it.
+ * A file this cannot read, a binary file, an oversized file and a file the parser rejects all
+ * contribute `[]`, which is what the generator saw for them too — so the answer stays consistent
+ * with the snapshot rather than becoming a third opinion about it.
  */
 declare function importsOfFile(relativePath: string, absolutePath: string): string[];
 
@@ -1111,7 +1128,7 @@ interface SkeletonResult {
  * replacement never invalidates a later span's offsets.
  */
 /**
- * True when a filename is TypeScript-with-JSX, in any letter case.
+ * True when a filename is JavaScript-with-JSX, in any letter case.
  *
  * One function for one question, because two spellings of it is exactly how `.TSX` came to be
  * eligible for a skeleton and then parsed as plain TypeScript, where JSX is a syntax error.
@@ -1121,7 +1138,13 @@ interface SkeletonResult {
  */
 declare function isTsxFileName(fileName: string): boolean;
 declare function skeletonizeTypeScript(source: string, fileName?: string): SkeletonResult;
-/** True for a path this module can compress. */
+/**
+ * True for a path this module can compress.
+ *
+ * `.d.ts` and friends are excluded first: they are declarations, so there is nothing to collapse,
+ * and parsing them was pure cost. Everything else the TypeScript parser can read is included —
+ * JavaScript and JSX included, which is most of the code in most repositories.
+ */
 declare function isSkeletonizable(filePath: string): boolean;
 
 /**

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-import { S as SecretRule, D as DiscoveryMode, a as SkipRecord, J as JsonSummary, M as MarkdownSummary, b as SourceSummary, K as KindRule, L as LayerRule, R as ResolvedSnapshotConfig, c as SnapshotConfig, B as ByteSize, C as CliOptions, P as PartMetadata, F as FileEntry, T as TextEncoding, d as SecretFinding, V as ValidationResult, e as Manifest, A as ArtifactSelection } from './types-CTewen3J.js';
-export { f as BudgetConfig, H as HooksConfig, I as InclusionMode, g as ManifestArtifact, h as ManifestConfigSnapshot, i as ManifestIndexes, j as ManifestTotals, k as Mode, O as OutputFormat, l as PartFileEntry, m as ResolvedArtifacts, n as ResolvedBudgets, o as SecretRuleInput, p as SkipReason, q as SummaryQuality, r as ValidationDrift } from './types-CTewen3J.js';
-export { w as workerEntry } from './generate-worker-D5Xgh27c.js';
+import { S as SecretRule, D as DiscoveryMode, a as SkipRecord, J as JsonSummary, M as MarkdownSummary, b as SourceSummary, K as KindRule, L as LayerRule, R as ResolvedSnapshotConfig, c as SnapshotConfig, B as ByteSize, C as CliOptions, P as PartMetadata, F as FileEntry, T as TextEncoding, d as SecretFinding, V as ValidationResult, e as Manifest, A as ArtifactSelection } from './types-DIX6zWSt.js';
+export { f as BudgetConfig, H as HooksConfig, I as InclusionMode, g as ManifestArtifact, h as ManifestConfigSnapshot, i as ManifestIndexes, j as ManifestTotals, k as Mode, O as OutputFormat, l as PartFileEntry, m as ResolvedArtifacts, n as ResolvedBudgets, o as SecretRuleInput, p as SkipReason, q as SummaryQuality, r as ValidationDrift } from './types-DIX6zWSt.js';
+export { w as workerEntry } from './generate-worker-D_mUjgXw.js';
 
 interface GitInfo {
     branch: string;
@@ -70,6 +70,12 @@ declare function findSecretInPath(relativePath: string, extraRules?: readonly Se
  * Brace groups and character classes are supported because they are what people
  * actually write: `*.{ts,tsx}` previously matched nothing at all, since `{` and
  * `}` were escaped as literals.
+ *
+ * Compiled once per distinct pattern. `matchesExclude` calls this for every
+ * (file, include), (file, exclude), (file, layer rule) and (file, kind rule)
+ * pair, so a 20 000-file repository with 55 patterns compiled over a million
+ * identical RegExp objects per run. The result is a pure function of the string,
+ * so the cache cannot change an answer.
  */
 declare function globToRegExp(glob: string): RegExp;
 /**
@@ -90,9 +96,19 @@ declare function matchesExclude(relativePath: string, pattern: string): boolean;
 declare function collectFiles(cwd: string, options?: CollectOptions): CollectResult;
 
 /**
- * Strips `//` and block comments the way JSONC does, without touching anything
- * inside a string literal. `JSON.parse` alone made every `.jsonc` file report
- * `invalid-json`, losing its key shape entirely.
+ * Strips `//` and block comments the way JSONC does, plus trailing commas, without touching
+ * anything inside a string literal.
+ *
+ * `JSON.parse` alone made every `.jsonc` file — and every `tsconfig.json` an editor had
+ * reformatted — report `invalid-json`, losing its key shape entirely. Two things this file's
+ * matcher did that `src/config.ts`'s did not, and both are JSONC, not extensions of it:
+ *
+ * - **Trailing commas.** `{ "a": 1, }` is valid JSONC and invalid JSON.
+ * - **`\r`-only line endings.** A `//` comment ended only at `\n`, so on a CR-delimited file it
+ *   swallowed everything to the end of the document.
+ *
+ * A block comment keeps the line breaks it spans. Dropping them renumbered every line after it,
+ * and the only thing a reader has to place a summary key is the line number.
  */
 declare function stripJsonComments(content: string): string;
 declare function summarizeJson(content: string): JsonSummary;
@@ -170,13 +186,6 @@ declare function supportsTypeScriptImports(): boolean;
  * "unknown setting(s): secretRules" while the same key worked when passed in code).
  */
 declare const CONFIG_KEYS: ReadonlySet<string>;
-/**
- * Loads the first usable config file from `cwd`.
- *
- * Every failure is reported through `warnings` instead of being swallowed by an
- * empty `catch`: a syntax error in a user's config used to be indistinguishable
- * from having no config at all.
- */
 declare function loadConfigFileDetailed(cwd: string): Promise<ConfigLoadResult>;
 declare function loadConfigFile(cwd: string): Promise<SnapshotConfig | null>;
 /** Smallest usable part budget: a part header plus one section must fit. */
@@ -324,6 +333,10 @@ interface PreviewResult {
  *
  * Previously `index.ts` recorded 0 for an empty file while `preview.ts` recorded
  * 1, and every newline-terminated file was over-counted by one.
+ *
+ * Counted by scanning rather than by `split`: this runs on every file body and on every part, and
+ * normalising first would allocate a second copy of a multi-megabyte string to answer a question
+ * about its terminator count.
  */
 declare function countLines(content: string): number;
 /**
@@ -465,18 +478,6 @@ declare function isBinaryFile(absolutePath: string): boolean;
 
 declare function detectLanguage(filePath: string): string;
 
-/**
- * Redacts secrets from `content`.
- *
- * - Replaces only the matched span, so unrelated code sharing the line survives
- *   (the previous implementation discarded the whole line).
- * - When a rule declares `valueGroup`, only that capture group is masked, so
- *   `dbPassword: "…"` keeps its key and stays parseable.
- * - Masks PEM private-key blocks as a unit; per-line rules can only see the
- *   `BEGIN` header, which left every body line of a real key in the output.
- * - Records `{ rule, line, path }` only. No excerpt of the source is retained,
- *   because that excerpt was being written verbatim into `reports/audit.md`.
- */
 declare function scanAndRedactSecrets(content: string, rules: SecretRule[], filePath?: string): {
     redacted: string;
     findings: SecretFinding[];
@@ -508,7 +509,7 @@ declare function validateSnapshot(configInput: ResolvedSnapshotConfig | Snapshot
  * `package.json` carries the same version; `npm run verify` compares the two.
  */
 declare const GENERATOR_NAME = "codebase-snapshot";
-declare const GENERATOR_VERSION = "0.9.12";
+declare const GENERATOR_VERSION = "0.9.14";
 
 /** The one endpoint this package will ever request. */
 declare const PACKAGE_LATEST_URL = "https://registry.npmjs.org/codebase-snapshot/latest";
@@ -553,7 +554,13 @@ interface UpdateCheckOptions {
     fetchLatest?: (url: string, timeoutMs: number) => Promise<string | null>;
     enabled?: boolean;
 }
-/** True when `candidate` is a strictly higher release than `current`. */
+/**
+ * True when `candidate` is a version worth telling somebody about.
+ *
+ * A prerelease is never announced — being offered `1.0.0-rc.1` while running `0.9.12` is not an
+ * upgrade, and a check that says so is wrong every time it fires. A stable release *is* newer than
+ * the prerelease of itself, so somebody on `0.9.12-beta.1` is told about `0.9.12`.
+ */
 declare function isNewer(candidate: string, current: string): boolean;
 /** The per-user cache directory, following each platform's convention. */
 declare function cacheDirectory(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): string;
@@ -566,7 +573,18 @@ declare function cacheFilePath(env?: NodeJS.ProcessEnv): string;
  * spends a CI job's network and pollutes a machine-readable stream.
  */
 declare function shouldCheck(argv: readonly string[], env: NodeJS.ProcessEnv): boolean;
-/** One HTTPS GET with a hard timeout. Resolves null for every failure. */
+/**
+ * One GET with a hard deadline. Resolves null for every failure.
+ *
+ * The deadline is a **wall clock**, not an idle-socket timeout. `request.setTimeout` only fires
+ * when the socket goes quiet, so a slow or trickling proxy — one that sends a byte every second —
+ * kept the CLI process alive long past `REQUEST_TIMEOUT_MS`. The timer below is absolute: when it
+ * fires the request is destroyed and the answer is "could not determine", which is what the notice
+ * already treats as "say nothing".
+ *
+ * The scheme picks the transport so the deadline can be exercised against a local server; the
+ * default URL is https either way.
+ */
 declare function fetchLatestVersion(url?: string, timeoutMs?: number): Promise<string | null>;
 /**
  * Returns a notice when a newer version is published, or null.
@@ -1049,8 +1067,7 @@ interface ChangedScope {
  */
 declare function resolveChangedScope(cwd: string, request: ChangedScopeRequest): ChangedScope;
 
-/**
- * One-pass lookup tables for relative-import resolution.
+/** One-pass lookup tables for relative-import resolution.
  *
  * `resolveSpecifier` used to fall back to scanning every known file for every
  * unresolved import — 100k files × 100k imports — and built a RegExp from the
@@ -1093,9 +1110,9 @@ declare function importsOfText(relativePath: string, text: string): string[];
 /**
  * Import specifiers of one file on disk.
  *
- * A file this cannot read, a binary file and a file the parser rejects all contribute `[]`, which
- * is what the generator saw for them too — so the answer stays consistent with the snapshot
- * rather than becoming a third opinion about it.
+ * A file this cannot read, a binary file, an oversized file and a file the parser rejects all
+ * contribute `[]`, which is what the generator saw for them too — so the answer stays consistent
+ * with the snapshot rather than becoming a third opinion about it.
  */
 declare function importsOfFile(relativePath: string, absolutePath: string): string[];
 
@@ -1111,7 +1128,7 @@ interface SkeletonResult {
  * replacement never invalidates a later span's offsets.
  */
 /**
- * True when a filename is TypeScript-with-JSX, in any letter case.
+ * True when a filename is JavaScript-with-JSX, in any letter case.
  *
  * One function for one question, because two spellings of it is exactly how `.TSX` came to be
  * eligible for a skeleton and then parsed as plain TypeScript, where JSX is a syntax error.
@@ -1121,7 +1138,13 @@ interface SkeletonResult {
  */
 declare function isTsxFileName(fileName: string): boolean;
 declare function skeletonizeTypeScript(source: string, fileName?: string): SkeletonResult;
-/** True for a path this module can compress. */
+/**
+ * True for a path this module can compress.
+ *
+ * `.d.ts` and friends are excluded first: they are declarations, so there is nothing to collapse,
+ * and parsing them was pure cost. Everything else the TypeScript parser can read is included —
+ * JavaScript and JSX included, which is most of the code in most repositories.
+ */
 declare function isSkeletonizable(filePath: string): boolean;
 
 /**

package/dist/index.js

@@ -1 +1 @@
-export { ARTIFACT_NAMES, CHECK_INTERVAL_MS, CONFIG_KEYS, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, FAILURE_INTERVAL_MS, GENERATOR_NAME, GENERATOR_VERSION, HOOK_MARKER, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, MIN_MAX_PART_TOKENS, PACKAGE_LATEST_URL, PRESETS, PromptBack, PromptCancelled, REQUEST_TIMEOUT_MS, SCHEMA_VERSION, anchorForPath, assertReplaceable, assertUsableConfigInput, buildImportResolver, bytesForTokens, cacheDirectory, cacheFilePath, checkForUpdate, classifyKind, classifyLayer, collectFiles, compareManifests, configDigest, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, displayPath, displayWidth, enforceBudget, estimateTokens, explainPath, fenceForContent, fenceForText, fetchLatestVersion, findSecretInPath, firstRunMessage, formatTokens, formatUpdateNotice, generateProjectTree, generateSarifReport, generateSnapshot, generateSnapshotAsync, getGitInfo, getPreset, globToRegExp, hasPriorSnapshot, importsChangedFile, importsOfFile, importsOfText, installKind, installPreCommitHook, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, isSkeletonizable, isTsxFileName, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, lockPathFor, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveChangedScope, resolveConfig, resolveSafeOutputDirs, resolveSpecifier, runInit, scanAndRedactSecrets, shouldCheck, skeletonizeTypeScript, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, updateCommand, validateSnapshot, workerEntry, wrapLines } from './chunk-3H45YMBG.js';
+export { ARTIFACT_NAMES, CHECK_INTERVAL_MS, CONFIG_KEYS, DEFAULT_ANSWERS, DEFAULT_SECRET_PATTERNS, FAILURE_INTERVAL_MS, GENERATOR_NAME, GENERATOR_VERSION, HOOK_MARKER, LANGUAGE_PROFILES, MIN_MAX_PART_BYTES, MIN_MAX_PART_TOKENS, PACKAGE_LATEST_URL, PRESETS, PromptBack, PromptCancelled, REQUEST_TIMEOUT_MS, SCHEMA_VERSION, anchorForPath, assertReplaceable, assertUsableConfigInput, buildImportResolver, bytesForTokens, cacheDirectory, cacheFilePath, checkForUpdate, classifyKind, classifyLayer, collectFiles, compareManifests, configDigest, countInvalidUtf8Bytes, countLines, decodeText, defineConfig, detectLanguage, detectPreset, displayPath, displayWidth, enforceBudget, estimateTokens, explainPath, fenceForContent, fenceForText, fetchLatestVersion, findSecretInPath, firstRunMessage, formatTokens, formatUpdateNotice, generateProjectTree, generateSarifReport, generateSnapshot, generateSnapshotAsync, getGitInfo, getPreset, globToRegExp, hasPriorSnapshot, importsChangedFile, importsOfFile, importsOfText, installKind, installPreCommitHook, isBinaryBuffer, isBinaryExtension, isBinaryFile, isEffectivelyEmpty, isInteractive, isNewer, isResolvedConfig, isSensitivePath, isSkeletonizable, isTsxFileName, listPresetNames, loadConfigFile, loadConfigFileDetailed, loadManifest, lockPathFor, markResolvedConfig, matchRule, matchesExclude, normalizeResolvedConfig, parseByteSize, partitionFiles, planFirstRun, profileForPath, renderConfig, renderDiffText, renderExplainText, renumberParts, resolveChangedScope, resolveConfig, resolveSafeOutputDirs, resolveSpecifier, runInit, scanAndRedactSecrets, shouldCheck, skeletonizeTypeScript, stripJsonComments, summarizeJson, summarizeMarkdown, summarizeTypeScriptSource, summarizeWithProfile, supportsTypeScriptImports, truncatePreview, truncateToBytes, updateCommand, validateSnapshot, workerEntry, wrapLines } from './chunk-DUZK5VL2.js';