ctxpool 0.1.0 → 0.4.0

package/dist/pack.js

@@ -0,0 +1,121 @@
+import { hasRedactions, redactSecrets } from "./redact.js";
+import { estimateTokens, formatTokens, labelize } from "./text.js";
+export const CATEGORY_ORDER = [
+    "intent",
+    "instruction",
+    "next-action",
+    "decision",
+    "constraint",
+    "verification",
+    "risk",
+    "changed-file",
+    "transcript"
+];
+export const CATEGORY_TITLES = {
+    intent: "Intent",
+    instruction: "Instructions",
+    "next-action": "Next actions",
+    decision: "Decisions",
+    constraint: "Constraints",
+    verification: "Verification",
+    risk: "Risks",
+    "changed-file": "Changed files",
+    transcript: "Transcript"
+};
+export function createContextPack(name, blocks = [], options = {}) {
+    const now = options.now || new Date().toISOString();
+    const id = `pack_${shortHash(`${name}:${now}:${Math.random()}`)}`;
+    return {
+        id,
+        name: name.trim() || "Untitled pack",
+        createdAt: now,
+        updatedAt: now,
+        includeRawTranscript: options.includeRawTranscript === true,
+        items: blocks.map((block, index) => packItem(block, index, id))
+    };
+}
+export function packItem(block, order, seed = "") {
+    return { id: `item_${shortHash(`${seed}:${block.id}:${order}:${Math.random()}`)}`, blockId: block.id, block, order, enabled: true };
+}
+export function normalizeContextPack(pack) {
+    return {
+        ...pack,
+        includeRawTranscript: pack.includeRawTranscript === true,
+        name: pack.name.trim() || "Untitled pack",
+        items: pack.items
+            .map((item, index) => ({
+            ...item,
+            order: Number.isFinite(item.order) ? item.order : index,
+            enabled: item.enabled !== false,
+            block: { ...item.block, text: redactSecrets(item.block.text), estimatedChars: item.block.text.length }
+        }))
+            .sort((a, b) => a.order - b.order)
+            .map((item, index) => ({ ...item, order: index }))
+    };
+}
+/**
+ * Render the agent-ready prompt for a pack. Transcript blocks are left out unless the pack opts in,
+ * so a pack can be shared without leaking raw conversation.
+ */
+export function renderContextPackOutput(pack) {
+    const normalized = normalizeContextPack(pack);
+    const enabled = normalized.items.filter((item) => item.enabled);
+    const exported = enabled.filter((item) => normalized.includeRawTranscript || item.block.category !== "transcript");
+    const withheld = enabled.length - exported.length;
+    const warnings = [];
+    if (withheld)
+        warnings.push(`${withheld} transcript ${withheld === 1 ? "block is" : "blocks are"} left out. Turn on “Include transcript” to export ${withheld === 1 ? "it" : "them"}.`);
+    if (exported.some((item) => hasRedactions(item.block.text)))
+        warnings.push("Possible secrets were redacted.");
+    if (!exported.length)
+        warnings.push("Nothing to export yet. Add or enable blocks.");
+    const body = renderBody(exported);
+    const estimatedChars = body.length;
+    const estimatedTokens = estimateTokens(body);
+    const header = [
+        `# Context: ${normalized.name}`,
+        "",
+        `${exported.length} ${exported.length === 1 ? "block" : "blocks"} · ~${formatTokens(estimatedTokens)} tokens · transcript ${normalized.includeRawTranscript ? "included" : "excluded"}`,
+        "",
+        "Use this context to continue the work without re-deriving earlier decisions, checks, or next steps."
+    ];
+    const markdown = [...header, ...(body ? ["", body] : [])].join("\n");
+    return {
+        pack: normalized,
+        markdown,
+        json: {
+            id: normalized.id,
+            name: normalized.name,
+            createdAt: normalized.createdAt,
+            updatedAt: normalized.updatedAt,
+            includeRawTranscript: normalized.includeRawTranscript,
+            estimatedChars,
+            estimatedTokens,
+            warnings,
+            items: exported
+        },
+        estimatedChars,
+        estimatedTokens,
+        warnings
+    };
+}
+function renderBody(items) {
+    const sections = [];
+    for (const category of CATEGORY_ORDER) {
+        const inCategory = items.filter((item) => item.block.category === category);
+        if (!inCategory.length)
+            continue;
+        sections.push([`## ${CATEGORY_TITLES[category] || labelize(category)}`, ...inCategory.map((item) => `- ${item.block.text} _(${item.block.sourceTask}, ${item.block.provenance.kind})_`)].join("\n"));
+    }
+    return sections.join("\n\n");
+}
+/** FNV-1a, enough for collision-resistant local ids without a crypto dependency. */
+function shortHash(value) {
+    let hash = 0x811c9dc5;
+    for (let index = 0; index < value.length; index++) {
+        hash ^= value.charCodeAt(index);
+        hash = Math.imul(hash, 0x01000193);
+    }
+    return (hash >>> 0).toString(16).padStart(8, "0") + Date.now().toString(36);
+}
+//# sourceMappingURL=pack.js.map

package/dist/pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack.js","sourceRoot":"","sources":["../src/pack.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEnE,MAAM,CAAC,MAAM,cAAc,GAA2B;IACpD,QAAQ;IACR,aAAa;IACb,aAAa;IACb,UAAU;IACV,YAAY;IACZ,cAAc;IACd,MAAM;IACN,cAAc;IACd,YAAY;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAyC;IACnE,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,cAAc;IAC3B,aAAa,EAAE,cAAc;IAC7B,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,aAAa;IACzB,YAAY,EAAE,cAAc;IAC5B,IAAI,EAAE,OAAO;IACb,cAAc,EAAE,eAAe;IAC/B,UAAU,EAAE,YAAY;CACzB,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAAyB,EAAE,EAAE,UAA4D,EAAE;IACzI,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpD,MAAM,EAAE,GAAG,QAAQ,SAAS,CAAC,GAAG,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAClE,OAAO;QACL,EAAE;QACF,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,eAAe;QACpC,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,KAAK,IAAI;QAC3D,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAmB,EAAE,KAAa,EAAE,IAAI,GAAG,EAAE;IACpE,OAAO,EAAE,EAAE,EAAE,QAAQ,SAAS,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACtI,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAiB;IACpD,OAAO;QACL,GAAG,IAAI;QACP,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,KAAK,IAAI;QACxD,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,eAAe;QACzC,KAAK,EAAE,IAAI,CAAC,KAAK;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACrB,GAAG,IAAI;YACP,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;YACvD,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,KAAK;YAC/B,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;SACvG,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;aACjC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;KACrD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAiB;IACvD,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,oBAAoB,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC;IACnH,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAElD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,eAAe,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,qDAAqD,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACxL,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC9G,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAEpF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACnC,MAAM,eAAe,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG;QACb,cAAc,UAAU,CAAC,IAAI,EAAE;QAC/B,EAAE;QACF,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,OAAO,YAAY,CAAC,eAAe,CAAC,wBAAwB,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE;QACvL,EAAE;QACF,qGAAqG;KACtG,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAErE,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ;QACR,IAAI,EAAE;YACJ,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;YACrD,cAAc;YACd,eAAe;YACf,QAAQ;YACR,KAAK,EAAE,QAAQ;SAChB;QACD,cAAc;QACd,eAAe;QACf,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAwB;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,CAAC,MAAM;YAAE,SAAS;QACjC,QAAQ,CAAC,IAAI,CACX,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACtL,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,oFAAoF;AACpF,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/paths.d.ts

@@ -6,5 +6,20 @@ export type CtxPaths = {
     teamExportsDir: string;
     configPath: string;
 };
+export type CtxConfig = {
+    version: 1;
+    ui: {
+        host: string;
+        port: number;
+    };
+    ollama: {
+        enabled: boolean;
+        model?: string;
+    };
+};
+export declare const DEFAULT_CONFIG: CtxConfig;
 export declare function getCtxPaths(): CtxPaths;
+/** Create the store directories. They hold transcripts and diffs, so they are private to the user. */
 export declare function ensureCtxDirs(paths?: CtxPaths): CtxPaths;
+/** Read config.json, falling back to defaults for anything missing or malformed. */
+export declare function loadConfig(paths?: CtxPaths): CtxConfig;

package/dist/paths.js

@@ -1,6 +1,11 @@
-import { mkdirSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
+export const DEFAULT_CONFIG = {
+    version: 1,
+    ui: { host: "127.0.0.1", port: 4377 },
+    ollama: { enabled: false }
+};
 export function getCtxPaths() {
     const home = process.env.CTXPOOL_HOME || join(homedir(), ".ctxpool");
     return {
@@ -12,11 +17,36 @@ export function getCtxPaths() {
         configPath: join(home, "config.json")
     };
 }
+/** Create the store directories. They hold transcripts and diffs, so they are private to the user. */
 export function ensureCtxDirs(paths = getCtxPaths()) {
-    mkdirSync(paths.home, { recursive: true });
-    mkdirSync(paths.rawDir, { recursive: true });
-    mkdirSync(paths.handoffsDir, { recursive: true });
-    mkdirSync(paths.teamExportsDir, { recursive: true });
+    for (const dir of [paths.home, paths.rawDir, paths.handoffsDir, paths.teamExportsDir]) {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
     return paths;
 }
+/** Read config.json, falling back to defaults for anything missing or malformed. */
+export function loadConfig(paths = getCtxPaths()) {
+    if (!existsSync(paths.configPath))
+        return DEFAULT_CONFIG;
+    let raw;
+    try {
+        raw = JSON.parse(readFileSync(paths.configPath, "utf8"));
+    }
+    catch {
+        return DEFAULT_CONFIG;
+    }
+    const ui = (raw.ui || {});
+    const ollama = (raw.ollama || {});
+    return {
+        version: 1,
+        ui: {
+            host: typeof ui.host === "string" && ui.host ? ui.host : DEFAULT_CONFIG.ui.host,
+            port: typeof ui.port === "number" && Number.isInteger(ui.port) ? ui.port : DEFAULT_CONFIG.ui.port
+        },
+        ollama: {
+            enabled: ollama.enabled === true,
+            model: typeof ollama.model === "string" && ollama.model ? ollama.model : undefined
+        }
+    };
+}
 //# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAWjC,MAAM,UAAU,WAAW;IACzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;IACrE,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QACzB,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QACnC,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;QAC1C,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAK,GAAG,WAAW,EAAE;IACjD,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAiBjC,MAAM,CAAC,MAAM,cAAc,GAAc;IACvC,OAAO,EAAE,CAAC;IACV,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE;IACrC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;CAC3B,CAAC;AAEF,MAAM,UAAU,WAAW;IACzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;IACrE,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QACzB,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QACnC,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;QAC1C,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,aAAa,CAAC,KAAK,GAAG,WAAW,EAAE;IACjD,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QACtF,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,KAAK,GAAG,WAAW,EAAE;IAC9C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,cAAc,CAAC;IACzD,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAA4B,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAA4B,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IAC7D,OAAO;QACL,OAAO,EAAE,CAAC;QACV,EAAE,EAAE;YACF,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI;YAC/E,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI;SAClG;QACD,MAAM,EAAE;YACN,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI;YAChC,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SACnF;KACF,CAAC;AACJ,CAAC"}

package/dist/redact.d.ts

@@ -0,0 +1,6 @@
+export declare function redactSecrets(text: string): string;
+export declare function hasRedactions(text: string): boolean;
+/** Recursively redact every string in a JSON-like value. */
+export declare function redactDeep<T>(value: T): T;
+/** Files whose contents should never be copied into a handoff, even redacted. */
+export declare function isSensitivePath(path: string): boolean;

package/dist/redact.js

@@ -0,0 +1,85 @@
+// Secret redaction shared by the CLI, MCP server, and web UI. Keep this module free of Node imports.
+const TOKEN_RULES = [
+    [/-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z0-9 ]*PRIVATE KEY-----|$)/g, "[redacted-private-key]"],
+    [/\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g, "[redacted-aws-key]"],
+    [/\bgithub_pat_[A-Za-z0-9_]{22,}/g, "[redacted-token]"],
+    [/\bgh[pousr]_[A-Za-z0-9]{30,}/g, "[redacted-token]"],
+    [/\bglpat-[A-Za-z0-9_-]{20,}/g, "[redacted-token]"],
+    [/\bsk-(?:proj-|ant-[a-z]+\d*-|svcacct-|admin-)?[A-Za-z0-9_-]{20,}/g, "[redacted-token]"],
+    [/\b(?:sk|rk|pk)_(?:live|test)_[A-Za-z0-9]{16,}/g, "[redacted-token]"],
+    [/\bwhsec_[A-Za-z0-9+/=]{20,}/g, "[redacted-token]"],
+    [/\bxox[abposr]-[A-Za-z0-9-]{10,}/g, "[redacted-token]"],
+    [/\bAIza[0-9A-Za-z_-]{35}/g, "[redacted-token]"],
+    [/\bnpm_[A-Za-z0-9]{36}/g, "[redacted-token]"],
+    [/\bhf_[A-Za-z0-9]{30,}/g, "[redacted-token]"],
+    [/\bpypi-[A-Za-z0-9_-]{50,}/g, "[redacted-token]"],
+    [/\beyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g, "[redacted-jwt]"],
+    [/\b(Bearer|Basic|Token)\s+[A-Za-z0-9._~+/-]{20,}=*/g, "$1 [redacted]"]
+];
+const URL_CREDENTIALS = /\b([a-z][a-z0-9+.-]*:\/\/)([^\s:/@]+):([^\s/@]+)@/gi;
+const ASSIGNMENT = /\b([A-Za-z0-9_.-]*?(?:api[_-]?key|secret|token|passw(?:or)?d|private[_-]?key|access[_-]?key|client[_-]?secret|database[_-]?url|dsn)(?:[_.-][A-Za-z0-9]+)*)\b(["']?\s*[:=]\s*["'`]?)([^\s"'`,;)}\]]+)/gi;
+const NOT_A_LITERAL = /^(?:\$|process\.env|import\.meta|os\.environ|env\b|<|\{|\[redacted|null$|undefined$|true$|false$|none$|string$|number$|boolean$|any$|unknown$|await$|new$|this\b|typeof$|x{3,}|\*{3,}|\.{3})/i;
+const HIGH_ENTROPY = /[A-Za-z0-9+/_-]{32,}={0,2}/g;
+export function redactSecrets(text) {
+    if (!text)
+        return text;
+    let next = text;
+    for (const [pattern, replacement] of TOKEN_RULES)
+        next = next.replace(pattern, replacement);
+    next = next.replace(URL_CREDENTIALS, "$1$2:[redacted]@");
+    next = next.replace(ASSIGNMENT, (match, key, separator, value) => {
+        if (value.length < 4 || value.includes("(") || NOT_A_LITERAL.test(value))
+            return match;
+        return `${key}${separator}[redacted]`;
+    });
+    return next.replace(HIGH_ENTROPY, (token) => (looksLikeSecret(token) ? "[redacted-secret]" : token));
+}
+export function hasRedactions(text) {
+    return /\[redacted(?:-[a-z-]+)?\]/.test(text);
+}
+/** Recursively redact every string in a JSON-like value. */
+export function redactDeep(value) {
+    if (typeof value === "string")
+        return redactSecrets(value);
+    if (Array.isArray(value))
+        return value.map((item) => redactDeep(item));
+    if (value && typeof value === "object") {
+        const result = {};
+        for (const [key, item] of Object.entries(value))
+            result[key] = redactDeep(item);
+        return result;
+    }
+    return value;
+}
+/** Files whose contents should never be copied into a handoff, even redacted. */
+export function isSensitivePath(path) {
+    const name = path.split(/[\\/]/).pop() || path;
+    if (/^\.env\.(?:example|sample|template|defaults)$/i.test(name))
+        return false;
+    return (/^\.env(?:\..+)?$/i.test(name) ||
+        /^(?:\.npmrc|\.pypirc|\.netrc|\.pgpass|credentials(?:\.json)?|secrets?\.(?:json|ya?ml|toml))$/i.test(name) ||
+        /^id_(?:rsa|dsa|ecdsa|ed25519)$/i.test(name) ||
+        /\.(?:pem|key|p12|pfx|jks|keystore)$/i.test(name));
+}
+function looksLikeSecret(token) {
+    const bare = token.replace(/[-_=]/g, "");
+    if (/^[0-9a-f]+$/i.test(bare))
+        return false;
+    if (!/[a-z]/.test(token) || !/[A-Z]/.test(token) || !/[0-9]/.test(token))
+        return false;
+    if (token.split("/").length > 3)
+        return false;
+    return shannonEntropy(token) >= 4.5;
+}
+function shannonEntropy(value) {
+    const counts = new Map();
+    for (const char of value)
+        counts.set(char, (counts.get(char) || 0) + 1);
+    let entropy = 0;
+    for (const count of counts.values()) {
+        const p = count / value.length;
+        entropy -= p * Math.log2(p);
+    }
+    return entropy;
+}
+//# sourceMappingURL=redact.js.map

package/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA,qGAAqG;AAErG,MAAM,WAAW,GAAuB;IACtC,CAAC,yFAAyF,EAAE,wBAAwB,CAAC;IACrH,CAAC,gCAAgC,EAAE,oBAAoB,CAAC;IACxD,CAAC,iCAAiC,EAAE,kBAAkB,CAAC;IACvD,CAAC,+BAA+B,EAAE,kBAAkB,CAAC;IACrD,CAAC,6BAA6B,EAAE,kBAAkB,CAAC;IACnD,CAAC,mEAAmE,EAAE,kBAAkB,CAAC;IACzF,CAAC,gDAAgD,EAAE,kBAAkB,CAAC;IACtE,CAAC,8BAA8B,EAAE,kBAAkB,CAAC;IACpD,CAAC,kCAAkC,EAAE,kBAAkB,CAAC;IACxD,CAAC,0BAA0B,EAAE,kBAAkB,CAAC;IAChD,CAAC,wBAAwB,EAAE,kBAAkB,CAAC;IAC9C,CAAC,wBAAwB,EAAE,kBAAkB,CAAC;IAC9C,CAAC,4BAA4B,EAAE,kBAAkB,CAAC;IAClD,CAAC,kEAAkE,EAAE,gBAAgB,CAAC;IACtF,CAAC,oDAAoD,EAAE,eAAe,CAAC;CACxE,CAAC;AAEF,MAAM,eAAe,GAAG,qDAAqD,CAAC;AAE9E,MAAM,UAAU,GACd,wMAAwM,CAAC;AAE3M,MAAM,aAAa,GACjB,+LAA+L,CAAC;AAElM,MAAM,YAAY,GAAG,6BAA6B,CAAC;AAEnD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,WAAW;QAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC5F,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;IACzD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,SAAiB,EAAE,KAAa,EAAE,EAAE;QACvF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvF,OAAO,GAAG,GAAG,GAAG,SAAS,YAAY,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAAI,KAAQ;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,aAAa,CAAC,KAAK,CAAM,CAAC;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAM,CAAC;IAC5E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChF,OAAO,MAAW,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;IAC/C,IAAI,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,+FAA+F,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1G,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5C,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/repo.d.ts

@@ -1,4 +1,9 @@
 import type { FileChange, GitSnapshot } from "./types.js";
+export declare function gitTopLevel(cwd?: string): string | undefined;
 export declare function captureGitSnapshot(cwd?: string): GitSnapshot;
 export declare function inferTaskName(explicitTask: string | undefined, repo: GitSnapshot): string;
-export declare function parseFileChanges(statusOutput: string, numstatOutput?: string, patch?: string): FileChange[];
+/**
+ * Parse `git status --porcelain=v1` output into file changes. Accepts NUL-separated (-z) or
+ * newline-separated output; numstat may be in either form too.
+ */
+export declare function parseFileChanges(statusOutput: string, numstatOutput?: string): FileChange[];

package/dist/repo.js

@@ -1,13 +1,21 @@
 import { basename } from "node:path";
+import { isSensitivePath, redactSecrets } from "./redact.js";
 import { limit, runOptional, slugify } from "./util.js";
 const MAX_DIFF_PATCH_CHARS = 120_000;
+const MAX_FILE_CHANGES = 200;
+const EMPTY_TREE = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
+const GIT_FLAGS = ["-c", "core.quotePath=false", "-c", "color.ui=never"];
+function git(args, cwd) {
+    return runOptional("git", [...GIT_FLAGS, ...args], cwd);
+}
+export function gitTopLevel(cwd = process.cwd()) {
+    return git(["rev-parse", "--show-toplevel"], cwd).trim() || undefined;
+}
 export function captureGitSnapshot(cwd = process.cwd()) {
-    const topLevel = runOptional("git", ["rev-parse", "--show-toplevel"], cwd);
-    const repoPath = topLevel || cwd;
-    const isGitRepo = Boolean(topLevel);
-    if (!isGitRepo) {
+    const topLevel = gitTopLevel(cwd);
+    if (!topLevel) {
         return {
-            repoPath,
+            repoPath: cwd,
             isGitRepo: false,
             branch: "no-git",
             commit: "unknown",
@@ -16,84 +24,81 @@ export function captureGitSnapshot(cwd = process.cwd()) {
             diffStat: "",
             diffPatch: "",
             diffPatchTruncated: false,
-            stagedDiffPatch: "",
-            stagedDiffPatchTruncated: false,
-            unstagedDiffPatch: "",
-            unstagedDiffPatchTruncated: false,
             recentCommits: []
         };
     }
-    const branch = runOptional("git", ["branch", "--show-current"], repoPath) || "detached";
-    const commit = runOptional("git", ["rev-parse", "--short", "HEAD"], repoPath) || "unknown";
-    const status = runOptional("git", ["status", "--porcelain=v1"], repoPath);
-    const diffStat = runOptional("git", ["diff", "--stat"], repoPath);
-    const allPatch = truncatePatch(runOptional("git", ["diff", "HEAD", "--no-ext-diff", "--unified=3"], repoPath));
-    const stagedPatch = truncatePatch(runOptional("git", ["diff", "--cached", "--no-ext-diff", "--unified=3"], repoPath));
-    const unstagedPatch = truncatePatch(runOptional("git", ["diff", "--no-ext-diff", "--unified=3"], repoPath));
-    const numstat = runOptional("git", ["diff", "HEAD", "--numstat"], repoPath);
-    const recent = runOptional("git", ["log", "--oneline", "-5"], repoPath);
-    const fileChanges = parseFileChanges(status, numstat, allPatch.patch);
+    const repoPath = topLevel;
+    const hasHead = Boolean(git(["rev-parse", "--verify", "--quiet", "HEAD"], repoPath).trim());
+    const base = hasHead ? "HEAD" : EMPTY_TREE;
+    const branch = git(["branch", "--show-current"], repoPath).trim() || (hasHead ? "detached" : "unborn");
+    const commit = hasHead ? git(["rev-parse", "--short", "HEAD"], repoPath).trim() : "none";
+    const status = git(["status", "--porcelain=v1", "-z"], repoPath);
+    const numstat = git(["diff", base, "--numstat", "-z", "--no-ext-diff"], repoPath);
+    const fileChanges = parseFileChanges(status, numstat).slice(0, MAX_FILE_CHANGES);
+    const patch = buildPatch(git(["diff", base, "--no-ext-diff", "--unified=3"], repoPath));
     return {
         repoPath,
-        isGitRepo,
+        isGitRepo: true,
         branch,
         commit,
         dirtyFiles: limit(fileChanges.map((change) => change.path), 40),
-        fileChanges: limitFileChanges(fileChanges, 120),
-        diffStat,
-        diffPatch: allPatch.patch,
-        diffPatchTruncated: allPatch.truncated,
-        stagedDiffPatch: stagedPatch.patch,
-        stagedDiffPatchTruncated: stagedPatch.truncated,
-        unstagedDiffPatch: unstagedPatch.patch,
-        unstagedDiffPatchTruncated: unstagedPatch.truncated,
-        recentCommits: limit(recent.split("\n"), 5)
+        fileChanges,
+        diffStat: git(["diff", base, "--shortstat", "--no-ext-diff"], repoPath).trim(),
+        diffPatch: patch.patch,
+        diffPatchTruncated: patch.truncated,
+        recentCommits: limit(git(["log", "--oneline", "-5"], repoPath).split("\n"), 5)
     };
 }
+const BRANCH_PREFIX = /^(?:feature|feat|fix|bugfix|hotfix|chore|task|refactor|docs|claude|codex|cursor|agent)\//;
+const TRUNK_BRANCHES = ["main", "master", "develop", "dev", "trunk", "detached", "unborn", "no-git"];
 export function inferTaskName(explicitTask, repo) {
     if (explicitTask)
         return slugify(explicitTask);
     const branch = repo.branch.trim();
-    if (branch && !["main", "master", "develop", "dev", "trunk", "detached", "no-git"].includes(branch)) {
-        return slugify(branch.replace(/^(feature|feat|fix|bugfix|chore|task)\//, ""));
-    }
+    if (branch && !TRUNK_BRANCHES.includes(branch))
+        return slugify(branch.replace(BRANCH_PREFIX, ""));
     return slugify(basename(repo.repoPath));
 }
-export function parseFileChanges(statusOutput, numstatOutput = "", patch = "") {
+/**
+ * Parse `git status --porcelain=v1` output into file changes. Accepts NUL-separated (-z) or
+ * newline-separated output; numstat may be in either form too.
+ */
+export function parseFileChanges(statusOutput, numstatOutput = "") {
     const stats = parseNumstat(numstatOutput);
-    const diffs = splitPatchByFile(patch);
-    return statusOutput
-        .split("\n")
-        .map((line) => parseStatusLine(line, stats, diffs))
-        .filter((change) => Boolean(change));
-}
-function parseStatusLine(line, stats, diffs) {
-    if (!line.trim())
-        return undefined;
-    const trimmedUnstaged = /^[MADRC] .+/.test(line) && line[2] !== " ";
-    const indexStatus = trimmedUnstaged ? " " : line[0] || " ";
-    const worktreeStatus = trimmedUnstaged ? line[0] : line[1] || " ";
-    const rawPath = (trimmedUnstaged ? line.slice(2) : line.slice(3)).trim();
-    if (!rawPath)
-        return undefined;
-    const renamed = rawPath.includes(" -> ");
-    const [oldPath, currentPath] = renamed ? rawPath.split(" -> ", 2) : ["", rawPath];
-    const path = currentPath || rawPath;
-    const status = mapStatus(indexStatus, worktreeStatus, renamed);
-    const stat = stats.get(path) || stats.get(oldPath) || { additions: 0, deletions: 0 };
-    return {
-        path,
-        oldPath: oldPath || undefined,
-        status,
-        indexStatus: indexStatus.trim() || undefined,
-        worktreeStatus: worktreeStatus.trim() || undefined,
-        additions: stat.additions,
-        deletions: stat.deletions,
-        staged: indexStatus !== " " && indexStatus !== "?",
-        unstaged: worktreeStatus !== " " && worktreeStatus !== "?",
-        untracked: indexStatus === "?" && worktreeStatus === "?",
-        diff: diffs.get(path) || diffs.get(oldPath)
-    };
+    const changes = [];
+    const nulSeparated = statusOutput.includes("\0");
+    const entries = nulSeparated ? statusOutput.split("\0") : statusOutput.split("\n");
+    for (let index = 0; index < entries.length; index++) {
+        const entry = entries[index];
+        if (entry.length < 4)
+            continue;
+        const indexStatus = entry[0];
+        const worktreeStatus = entry[1];
+        let path = entry.slice(3);
+        let oldPath;
+        if (indexStatus === "R" || indexStatus === "C" || worktreeStatus === "R" || worktreeStatus === "C") {
+            if (nulSeparated) {
+                oldPath = entries[++index];
+            }
+            else if (path.includes(" -> ")) {
+                [oldPath, path] = path.split(" -> ", 2);
+            }
+        }
+        const stat = stats.get(path) || (oldPath ? stats.get(oldPath) : undefined) || { additions: 0, deletions: 0 };
+        changes.push({
+            path,
+            oldPath,
+            status: mapStatus(indexStatus, worktreeStatus, Boolean(oldPath)),
+            indexStatus: indexStatus.trim() || undefined,
+            worktreeStatus: worktreeStatus.trim() || undefined,
+            additions: stat.additions,
+            deletions: stat.deletions,
+            staged: indexStatus !== " " && indexStatus !== "?",
+            unstaged: worktreeStatus !== " " && worktreeStatus !== "?",
+            untracked: indexStatus === "?" && worktreeStatus === "?"
+        });
+    }
+    return changes;
 }
 function mapStatus(indexStatus, worktreeStatus, renamed) {
     if (indexStatus === "?" && worktreeStatus === "?")
@@ -106,77 +111,58 @@ function mapStatus(indexStatus, worktreeStatus, renamed) {
         return "added";
     if (indexStatus === "D" || worktreeStatus === "D")
         return "deleted";
-    if (indexStatus === "M" || worktreeStatus === "M")
+    if (indexStatus === "M" || worktreeStatus === "M" || indexStatus === "T" || worktreeStatus === "T")
         return "modified";
     return "unknown";
 }
 function parseNumstat(output) {
     const stats = new Map();
+    const count = (value) => (value === "-" ? 0 : Number(value) || 0);
+    if (output.includes("\0")) {
+        const parts = output.split("\0");
+        for (let index = 0; index < parts.length; index++) {
+            const fields = parts[index].replace(/^\n/, "").split("\t");
+            if (fields.length < 3)
+                continue;
+            const stat = { additions: count(fields[0]), deletions: count(fields[1]) };
+            // Renames: "added\tdeleted\t" followed by the old and new paths as separate entries.
+            const path = fields[2] || (index += 2, parts[index]);
+            if (path)
+                stats.set(path, stat);
+        }
+        return stats;
+    }
     for (const line of output.split("\n")) {
-        const parts = line.split("\t");
-        if (parts.length < 3)
+        const fields = line.split("\t");
+        if (fields.length < 3)
             continue;
-        const additions = parts[0] === "-" ? 0 : Number(parts[0]) || 0;
-        const deletions = parts[1] === "-" ? 0 : Number(parts[1]) || 0;
-        const path = normalizeNumstatPath(parts.slice(2).join("\t"));
+        const path = expandRenamePath(fields.slice(2).join("\t"));
         if (path)
-            stats.set(path, { additions, deletions });
+            stats.set(path, { additions: count(fields[0]), deletions: count(fields[1]) });
     }
     return stats;
 }
-function normalizeNumstatPath(path) {
-    const renameMatch = path.match(/^(.*) => (.*)$/);
-    if (!renameMatch)
-        return path.trim();
-    const [, before, after] = renameMatch;
-    const prefix = before.includes("{") && after.includes("}") ? "" : "";
-    return `${prefix}${after.replace(/[{}]/g, "")}`.trim();
-}
-function splitPatchByFile(patch) {
-    const chunks = new Map();
-    const lines = patch.split("\n");
-    let currentPath = "";
-    let current = [];
-    const flush = () => {
-        if (currentPath && current.length)
-            chunks.set(currentPath, current.join("\n"));
-    };
-    for (const line of lines) {
-        if (line.startsWith("diff --git ")) {
-            flush();
-            current = [line];
-            currentPath = parseDiffPath(line);
-        }
-        else if (current.length) {
-            current.push(line);
-        }
-    }
-    flush();
-    return chunks;
-}
-function parseDiffPath(line) {
-    const match = line.match(/^diff --git a\/(.+) b\/(.+)$/);
-    return match?.[2] || "";
+/** `src/{old => new}/file.ts` -> `src/new/file.ts`; `old.ts => new.ts` -> `new.ts`. */
+function expandRenamePath(path) {
+    const braced = /^(.*)\{(.*) => (.*)\}(.*)$/.exec(path);
+    if (braced)
+        return `${braced[1]}${braced[3]}${braced[4]}`.replace(/\/\//g, "/").trim();
+    const plain = /^(.*) => (.*)$/.exec(path);
+    return (plain ? plain[2] : path).trim();
 }
-function truncatePatch(value) {
-    const truncated = value.length > MAX_DIFF_PATCH_CHARS;
+/** Redact secrets and drop the bodies of sensitive files (.env, keys) before the patch is stored. */
+function buildPatch(raw) {
+    const sections = raw.split(/(?=^diff --git )/m).map((section) => {
+        const path = /^diff --git a\/.+ b\/(.+)$/m.exec(section)?.[1] || "";
+        if (!isSensitivePath(path))
+            return section;
+        return `${section.split("\n")[0]}\n[ContextPool: diff omitted for sensitive file]\n`;
+    });
+    const patch = redactSecrets(sections.join(""));
+    const truncated = patch.length > MAX_DIFF_PATCH_CHARS;
     return {
-        patch: truncated ? `${value.slice(0, MAX_DIFF_PATCH_CHARS)}\n\n[ContextPool: diff truncated at ${MAX_DIFF_PATCH_CHARS} characters]` : value,
+        patch: truncated ? `${patch.slice(0, MAX_DIFF_PATCH_CHARS)}\n\n[ContextPool: diff truncated at ${MAX_DIFF_PATCH_CHARS} characters]` : patch,
         truncated
     };
 }
-function limitFileChanges(changes, count) {
-    const seen = new Set();
-    const result = [];
-    for (const change of changes) {
-        const key = `${change.status}:${change.path}`;
-        if (seen.has(key))
-            continue;
-        seen.add(key);
-        result.push(change);
-        if (result.length >= count)
-            break;
-    }
-    return result;
-}
 //# sourceMappingURL=repo.js.map