footprintjs 9.44.0 → 9.44.1

package/dist/types/lib/memory/redaction.d.ts

@@ -402,8 +402,29 @@ export declare function useWalkLimit(limit: number): () => void;
  * inside one segment — and an ancestor whose NAME matches is masked whole
  * before the walk goes below it, so the name decides. Conservative: `true`
  * whenever in doubt.
+ *
+ * Linear in the length of `pattern.source`: every scan here is one forward
+ * pass ({@link classBodies}) or a regex that does constant work per position.
  */
 export declare function needsPath(pattern: RegExp): boolean;
+/**
+ * The body of each character class in `source`, left to right: the text
+ * between a `[` and the first `]` after it that no `\` escapes (a `\` takes
+ * the character after it along). ONE forward pass.
+ *
+ * It replaces `source.matchAll(/\[((?:\\[\s\S]|[^\]\\])*)\]/g)` and gives the
+ * same bodies for every string (pinned against that regex as the control,
+ * test/lib/memory/security/needs-path-linear.security.test.ts). The regex was
+ * quadratic: after a `[` that never closed it retried at every later `[`,
+ * each retry rescanning to the end — `\[` repeated 32,000 times took 0.7 s,
+ * and `setPolicy` runs once per stage's scope (CodeQL js/polynomial-redos).
+ * The pass stops at the first `[` that never closes instead: a later `[`
+ * starts its body where the failed scan was also between two tokens, so it
+ * reads the same tail the same way and closes nowhere either.
+ *
+ * @internal Exported for that test only — not on any public door.
+ */
+export declare function classBodies(source: string): string[];
 /**
  * THE TAINT RULE at a subflow mapper boundary (an `inputMapper` seeding a
  * subflow, an `outputMapper` merging it back): a key the mapper writes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "footprintjs",
-  "version": "9.44.0",
+  "version": "9.44.1",
   "description": "Explainable backend flows — automatic causal traces, decision evidence, and MCP tool generation for AI agents",
   "license": "MIT",
   "author": "Sanjay Krishna Anbalagan",