helm-env-delta 1.14.0 → 1.14.2

package/README.md

@@ -56,7 +56,7 @@ HelmEnvDelta (`hed`) automates environment synchronization for GitOps workflows
 
 📦 **Config Inheritance** - Reuse base configurations with environment-specific overrides.
 
-📊 **Multiple Reports** - Console, HTML (visual, self-contained), and JSON (CI/CD) output formats. HTML reports include collapsible diff stats dashboard, stop rule violations table (dry-run only), synchronized side-by-side scrolling, copy diff buttons, file search, and collapse/expand controls. Empty categories are automatically hidden.
+📊 **Multiple Reports** - Console, HTML (visual, self-contained), and JSON (CI/CD) output formats. HTML reports include collapsible diff stats dashboard, stop rule violations table (dry-run only), synchronized side-by-side scrolling, copy diff buttons, file search, collapse/expand controls, jump-to-sidebar navigation, and auto-collapse for large file sets. Empty categories are automatically hidden.
 
 🔍 **Discovery Tools** - Preview files (`-l`), inspect config (`--show-config`), filter by filename/content (`-f`), filter by change type (`-m`), validate with comprehensive warnings including unused pattern detection.
 
@@ -64,7 +64,9 @@ HelmEnvDelta (`hed`) automates environment synchronization for GitOps workflows
 
 🛡️ **Safety First** - Pre-execution summary, first-run tips, improved error messages with helpful examples.
 
-⚡ **High Performance** - 45-60% faster than alternatives with intelligent caching and parallel processing.
+⚡ **High Performance** - Intelligent caching and parallel processing. Formatting rules, compiled regexes, and array normalization are all cached for fast repeated runs.
+
+🔐 **Security Hardened** - Regex inputs (stop rules, transforms, pattern files) are validated against ReDoS (catastrophic backtracking). Fixed values are validated against prototype pollution attacks.
 
 🔔 **Auto Updates** - Notifies when newer versions are available (skips in CI/CD).
 
@@ -119,7 +121,7 @@ hed -c config.yaml
 hed -c config.yaml -H
 ```
 
-Self-contained HTML report — works offline, no CDN required. Includes collapsible diff stats dashboard, stop rule violations table (shown in dry-run mode), synchronized side-by-side scrolling, copy buttons, sidebar search, and collapse/expand controls. Empty categories are automatically hidden.
+Self-contained HTML report — works offline, no CDN required. Includes collapsible diff stats dashboard, stop rule violations table (shown in dry-run mode), synchronized side-by-side scrolling, copy buttons, sidebar search, collapse/expand controls, and jump-to-sidebar navigation. File blocks auto-collapse when there are more than 10 files. Empty categories are automatically hidden.
 
 ### 5️⃣ Get Smart Suggestions (Optional)
 
@@ -523,7 +525,7 @@ fixedValues:
 
 **Supported filter operators:** `=` (equals), `^=` (startsWith), `$=` (endsWith), `*=` (contains) - updates ALL matching items
 
-**Value types:** String, number, boolean, null, object, array
+**Value types:** String, number, boolean, null, object, array (objects with `__proto__`, `constructor`, or `prototype` keys are rejected)
 
 **Behavior:**
 
@@ -678,6 +680,8 @@ stopRules:
 
 **Override:** Use `--force` to bypass stop rules when needed.
 
+**Regex safety:** All `regex` patterns (inline and from files) are validated against catastrophic backtracking (ReDoS). Patterns with nested quantifiers on groups (e.g., `(a+)+`) are rejected at config load time.
+
 **Visibility:** Stop rule violations appear in console output, JSON reports, and HTML reports (dry-run mode only, as a collapsible table in the header area).
 
 ---

package/dist/config/configFile.d.ts

@@ -82,7 +82,7 @@ declare const keySortRuleSchema: z.ZodObject<{
 }, z.core.$strip>;
 declare const fixedValueRuleSchema: z.ZodObject<{
     path: z.ZodString;
-    value: z.ZodUnknown;
+    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull, z.ZodArray<z.ZodUnknown>, z.ZodRecord<z.ZodString, z.ZodUnknown>]>;
 }, z.core.$strip>;
 declare const transformRuleSchema: z.ZodObject<{
     find: z.ZodString;
@@ -173,7 +173,7 @@ declare const baseConfigSchema: z.ZodObject<{
     }, z.core.$strict>], "type">>>>;
     fixedValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
         path: z.ZodString;
-        value: z.ZodUnknown;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull, z.ZodArray<z.ZodUnknown>, z.ZodRecord<z.ZodString, z.ZodUnknown>]>;
     }, z.core.$strip>>>>;
 }, z.core.$strip>;
 declare const finalConfigSchema: z.ZodObject<{
@@ -227,7 +227,7 @@ declare const finalConfigSchema: z.ZodObject<{
     }, z.core.$strict>], "type">>>>;
     fixedValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
         path: z.ZodString;
-        value: z.ZodUnknown;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull, z.ZodArray<z.ZodUnknown>, z.ZodRecord<z.ZodString, z.ZodUnknown>]>;
     }, z.core.$strip>>>>;
     include: z.ZodDefault<z.ZodArray<z.ZodString>>;
     exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -302,7 +302,7 @@ declare const formatOnlyConfigSchema: z.ZodObject<{
     }, z.core.$strict>], "type">>>>;
     fixedValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
         path: z.ZodString;
-        value: z.ZodUnknown;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull, z.ZodArray<z.ZodUnknown>, z.ZodRecord<z.ZodString, z.ZodUnknown>]>;
     }, z.core.$strip>>>>;
     include: z.ZodDefault<z.ZodArray<z.ZodString>>;
     exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;

package/dist/config/configFile.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.isConfigValidationError = exports.ConfigValidationError = exports.parseConfig = exports.parseFormatOnlyConfig = exports.parseFinalConfig = exports.parseBaseConfig = void 0;
 const node_path_1 = __importDefault(require("node:path"));
 const zod_1 = require("zod");
+const regexSafety_1 = require("../utils/regexSafety");
 const ZodError_1 = require("./ZodError");
 const semverMajorUpgradeRuleSchema = zod_1.z.object({
     type: zod_1.z.literal('semverMajorUpgrade'),
@@ -47,6 +48,10 @@ const regexRuleSchema = zod_1.z
 }, {
     message: 'Invalid regular expression pattern',
     path: ['regex']
+})
+    .refine((data) => (0, regexSafety_1.isSafeRegex)(data.regex), {
+    message: 'Potentially unsafe regex pattern (may cause catastrophic backtracking / ReDoS)',
+    path: ['regex']
 });
 const regexFileRuleSchema = zod_1.z.object({
     type: zod_1.z.literal('regexFile'),
@@ -80,9 +85,25 @@ const arraySortRuleSchema = zod_1.z.object({
     order: zod_1.z.enum(['asc', 'desc']).default('asc')
 });
 const keySortRuleSchema = zod_1.z.object({ path: zod_1.z.string().min(1) });
+const DANGEROUS_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+const hasDangerousKeys = (value) => {
+    if (value === null || typeof value !== 'object')
+        return false;
+    if (Array.isArray(value))
+        return value.some((item) => hasDangerousKeys(item));
+    for (const key of Object.keys(value))
+        if (DANGEROUS_KEYS.has(key) || hasDangerousKeys(value[key]))
+            return true;
+    return false;
+};
+const safeFixedValue = zod_1.z
+    .union([zod_1.z.string(), zod_1.z.number(), zod_1.z.boolean(), zod_1.z.null(), zod_1.z.array(zod_1.z.unknown()), zod_1.z.record(zod_1.z.string(), zod_1.z.unknown())])
+    .refine((value) => !hasDangerousKeys(value), {
+    message: 'Value must not contain prototype-polluting keys (__proto__, constructor, prototype)'
+});
 const fixedValueRuleSchema = zod_1.z.object({
     path: zod_1.z.string().min(1).describe('JSONPath to the value to set'),
-    value: zod_1.z.unknown().describe('The constant value to set (any type: string, number, boolean, null, object, array)')
+    value: safeFixedValue.describe('The constant value to set (any type: string, number, boolean, null, object, array)')
 });
 const transformRuleSchema = zod_1.z
     .object({
@@ -100,6 +121,10 @@ const transformRuleSchema = zod_1.z
 }, {
     message: 'Invalid regular expression pattern',
     path: ['find']
+})
+    .refine((data) => (0, regexSafety_1.isSafeRegex)(data.find), {
+    message: 'Potentially unsafe regex pattern (may cause catastrophic backtracking / ReDoS)',
+    path: ['find']
 });
 const transformRulesSchema = zod_1.z
     .object({

package/dist/pipeline/fileDiff.d.ts

@@ -1,4 +1,4 @@
-import { Config, FixedValueConfig, TransformConfig } from '../config';
+import { Config, FixedValueConfig, FixedValueRule, TransformConfig } from '../config';
 import { FileMap } from './fileLoader';
 export interface FileDiffResult {
     addedFiles: AddedFile[];
@@ -16,6 +16,7 @@ export interface ChangedFile {
     rawParsedSource: unknown;
     rawParsedDest: unknown;
     skipPaths: string[];
+    fixedValueRules: FixedValueRule[];
     normalizedSource?: unknown;
     normalizedDest?: unknown;
     parsedSource?: unknown;

package/dist/pipeline/fileDiff.js

@@ -117,10 +117,33 @@ const applySkipPaths = (data, skipPaths) => {
         return data;
     if (skipPaths.length === 0)
         return data;
-    const cloned = structuredClone(data);
+    const affectedKeys = new Set();
+    let needsFullClone = false;
+    for (const skipPath of skipPaths) {
+        const parts = (0, jsonPath_1.parseJsonPath)(skipPath);
+        if (parts.length === 0)
+            continue;
+        const firstPart = parts[0];
+        if (firstPart === '*' || ((0, jsonPath_1.isFilterSegment)(firstPart) && Array.isArray(data))) {
+            needsFullClone = true;
+            break;
+        }
+        affectedKeys.add(firstPart);
+    }
+    if (needsFullClone) {
+        const cloned = structuredClone(data);
+        for (const path of skipPaths)
+            deleteJsonPath(cloned, path);
+        return cloned;
+    }
+    const object = data;
+    const result = { ...object };
+    for (const key of affectedKeys)
+        if (key in result)
+            result[key] = structuredClone(result[key]);
     for (const path of skipPaths)
-        deleteJsonPath(cloned, path);
-    return cloned;
+        deleteJsonPath(result, path);
+    return result;
 };
 const getSkipPathsForFile = (filePath, skipPath) => {
     if (!skipPath)
@@ -193,6 +216,7 @@ const processYamlFile = (options) => {
         rawParsedSource: sourceFiltered,
         rawParsedDest: destinationFiltered,
         skipPaths: pathsToSkip,
+        fixedValueRules,
         normalizedSource,
         normalizedDest: normalizedDestination,
         parsedSource: sourceParsed,
@@ -237,7 +261,8 @@ const processChangedFiles = (sourceFiles, destinationFiles, skipPath, transforms
                 processedDestContent: destinationContent,
                 rawParsedSource: sourceContent,
                 rawParsedDest: destinationContent,
-                skipPaths: []
+                skipPaths: [],
+                fixedValueRules: []
             });
     }
     return { changedFiles, unchangedFiles };

package/dist/pipeline/fileUpdater.js

@@ -93,9 +93,21 @@ const deepMerge = (fullTarget, filteredSource, filteredTarget, currentPath = [],
             }
             result.push(sourceItem);
         }
-        for (const item of fullTargetArray)
-            if ((0, arrayMerger_1.shouldPreserveItem)(item, applicableFilters, result))
+        const resultKeySet = new Set(result
+            .filter((item) => !!item && typeof item === 'object')
+            .map((item) => JSON.stringify(applicableFilters.map((f) => item[f.filter.property]))));
+        for (const item of fullTargetArray) {
+            if (!item || typeof item !== 'object')
+                continue;
+            const { matches } = (0, arrayMerger_1.itemMatchesAnyFilter)(item, applicableFilters);
+            if (!matches)
+                continue;
+            const key = JSON.stringify(applicableFilters.map((f) => item[f.filter.property]));
+            if (!resultKeySet.has(key)) {
                 result.push(item);
+                resultKeySet.add(key);
+            }
+        }
         return result;
     }
     if (typeof filteredSource === 'object' && typeof fullTarget === 'object') {
@@ -142,7 +154,7 @@ const mergeYamlContent = (destinationContent, processedSourceContent, filteredDe
         });
     }
     try {
-        return yaml_1.default.stringify(merged);
+        return { content: yaml_1.default.stringify(merged), merged };
     }
     catch (error) {
         throw new FileUpdaterError('Failed to serialize merged YAML', {
@@ -198,15 +210,21 @@ const updateFile = async (options) => {
         logger.fileOp('update', changedFile.path, true);
         return;
     }
-    let contentToWrite = (0, fileType_1.isYamlFile)(changedFile.path)
-        ? mergeYamlContent(changedFile.destinationContent, changedFile.rawParsedSource, changedFile.rawParsedDest, changedFile.path, changedFile.skipPaths)
-        : changedFile.sourceContent;
+    let contentToWrite;
+    let mergedObject;
+    if ((0, fileType_1.isYamlFile)(changedFile.path)) {
+        const mergeResult = mergeYamlContent(changedFile.destinationContent, changedFile.rawParsedSource, changedFile.rawParsedDest, changedFile.path, changedFile.skipPaths);
+        contentToWrite = mergeResult.content;
+        mergedObject = mergeResult.merged;
+    }
+    else
+        contentToWrite = changedFile.sourceContent;
     if ((0, fileType_1.isYamlFile)(changedFile.path)) {
-        const fixedValueRules = (0, fixedValues_1.getFixedValuesForFile)(changedFile.path, config.fixedValues);
+        const fixedValueRules = changedFile.fixedValueRules ?? (0, fixedValues_1.getFixedValuesForFile)(changedFile.path, config.fixedValues);
         if (fixedValueRules.length > 0) {
-            const parsed = yaml_1.default.parse(contentToWrite);
-            (0, fixedValues_1.applyFixedValues)(parsed, fixedValueRules);
-            contentToWrite = yaml_1.default.stringify(parsed);
+            const target = mergedObject ?? yaml_1.default.parse(contentToWrite);
+            (0, fixedValues_1.applyFixedValues)(target, fixedValueRules);
+            contentToWrite = yaml_1.default.stringify(target);
         }
         const effectiveOutputFormat = skipFormat ? undefined : config.outputFormat;
         contentToWrite = (0, yamlFormatter_1.formatYaml)(contentToWrite, changedFile.path, effectiveOutputFormat);

package/dist/pipeline/yamlFormatter.js

@@ -18,7 +18,16 @@ exports.YamlFormatterError = (0, errors_1.createErrorClass)('YAML Formatter Erro
     PATTERN_MATCH_ERROR: 'File pattern matching failed'
 });
 exports.isYamlFormatterError = (0, errors_1.createErrorTypeGuard)(exports.YamlFormatterError);
+const formattingRulesCache = new WeakMap();
 const getFormattingRules = (filePath, outputFormat) => {
+    let fileMap = formattingRulesCache.get(outputFormat);
+    if (!fileMap) {
+        fileMap = new Map();
+        formattingRulesCache.set(outputFormat, fileMap);
+    }
+    const cached = fileMap.get(filePath);
+    if (cached)
+        return cached;
     const keyOrders = [];
     const keySort = [];
     const arraySort = [];
@@ -52,7 +61,9 @@ const getFormattingRules = (filePath, outputFormat) => {
         if (quoteValue)
             quoteValues.push(quoteValue);
     }
-    return { keyOrders, keySort, arraySort, quoteValues };
+    const rules = { keyOrders, keySort, arraySort, quoteValues };
+    fileMap.set(filePath, rules);
+    return rules;
 };
 const preserveMultilineStrings = (yamlDocument) => {
     if (!yamlDocument.contents)

package/dist/reporters/htmlReporter.js

@@ -59,13 +59,14 @@ const generateAddedFileSummary = (file) => {
         return file.path;
     return `<span class="filename-transform">${file.originalPath} → ${file.path}</span>`;
 };
-const generateAddedFileSection = (file, fileId) => {
+const JUMP_TO_SIDEBAR_ICON = `<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 16 16" fill="currentColor" aria-hidden="true"><path d="M2 2h3v12H2V2zm0-1a1 1 0 0 0-1 1v12a1 1 0 0 0 1 1h3a1 1 0 0 0 1-1V2a1 1 0 0 0-1-1H2zm5 4h7v1H7V5zm0 3h7v1H7V8zm0 3h5v1H7v-1z"/></svg>`;
+const generateAddedFileSection = (file, fileId, open) => {
     const summary = generateAddedFileSummary(file);
     const escapedContent = (0, treeRenderer_1.escapeHtml)(file.processedContent);
     const filename = file.path.split('/').pop() || file.path;
     return `
-    <details class="file-section" id="${fileId}" data-file-id="${fileId}" open>
-      <summary>${summary}</summary>
+    <details class="file-section" id="${fileId}" data-file-id="${fileId}"${open ? ' open' : ''}>
+      <summary><a class="jump-to-sidebar-link" data-file-id="${fileId}" href="#" title="Show in file browser">${JUMP_TO_SIDEBAR_ICON}</a><span class="summary-expand-icon"></span>${summary}</summary>
       <div class="content-container">
         <div class="content-actions">
           <button class="copy-btn" data-file-id="${fileId}" title="Copy to clipboard">📋 Copy</button>
@@ -76,7 +77,7 @@ const generateAddedFileSection = (file, fileId) => {
     </details>
   `;
 };
-const generateChangedFileSection = (file, fileId) => {
+const generateChangedFileSection = (file, fileId, open) => {
     const isYaml = (0, fileType_1.isYamlFile)(file.path);
     const summary = generateFileSummary(file);
     const destinationContent = (0, serialization_1.serializeForDiff)(file.processedDestContent, isYaml);
@@ -86,8 +87,8 @@ const generateChangedFileSection = (file, fileId) => {
     const { added, removed } = countDiffLines(unifiedDiff);
     const escapedDiff = (0, treeRenderer_1.escapeHtml)(unifiedDiff);
     const html = `
-    <details class="file-section" id="${fileId}" data-file-id="${fileId}" open>
-      <summary>${summary}<span class="summary-badges"><span class="line-badge line-added">+${added}</span><span class="line-badge line-removed">-${removed}</span></span></summary>
+    <details class="file-section" id="${fileId}" data-file-id="${fileId}"${open ? ' open' : ''}>
+      <summary><a class="jump-to-sidebar-link" data-file-id="${fileId}" href="#" title="Show in file browser">${JUMP_TO_SIDEBAR_ICON}</a><span class="summary-expand-icon"></span>${summary}<span class="summary-badges"><span class="line-badge line-added">+${added}</span><span class="line-badge line-removed">-${removed}</span></span></summary>
       <div class="diff-toolbar">
         <button class="copy-diff-btn" data-file-id="${fileId}">Copy Diff</button>
       </div>
@@ -131,16 +132,19 @@ const generateHtmlReport = async (diffResult, formattedFiles, config, dryRun, lo
     const changedFileIds = new Map();
     for (const [index, file] of diffResult.changedFiles.entries())
         changedFileIds.set(file.path, `file-${index}`);
+    const COLLAPSE_THRESHOLD = 10;
+    const changedOpen = diffResult.changedFiles.length <= COLLAPSE_THRESHOLD;
+    const addedOpen = diffResult.addedFiles.length <= COLLAPSE_THRESHOLD;
     const fileStats = new Map();
     const changedSections = diffResult.changedFiles.map((file, index) => {
-        const result = generateChangedFileSection(file, `file-${index}`);
+        const result = generateChangedFileSection(file, `file-${index}`, changedOpen);
         fileStats.set(file.path, { added: result.added, removed: result.removed });
         return result.html;
     });
     const addedFileIds = new Map();
     for (const [index, file] of diffResult.addedFiles.entries())
         addedFileIds.set(file.path, `added-file-${index}`);
-    const addedSections = diffResult.addedFiles.map((file, index) => generateAddedFileSection(file, `added-file-${index}`));
+    const addedSections = diffResult.addedFiles.map((file, index) => generateAddedFileSection(file, `added-file-${index}`, addedOpen));
     let totalAdded = 0;
     let totalRemoved = 0;
     const statsArray = [];

package/dist/reporters/htmlStyles.d.ts

@@ -1,3 +1,3 @@
 export declare const DIFF2HTML_STYLES: string;
-export declare const HTML_STYLES = "\n  /* Custom styles */\n  body {\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Helvetica, Arial, sans-serif;\n    margin: 0;\n    padding: 20px;\n    background: #f6f8fa;\n  }\n\n  header {\n    background: white;\n    padding: 20px;\n    border-radius: 6px;\n    margin-bottom: 20px;\n    box-shadow: 0 1px 3px rgba(0,0,0,0.12);\n  }\n\n  h1 {\n    margin: 0 0 10px 0;\n    color: #24292e;\n  }\n\n  .metadata {\n    display: flex;\n    gap: 20px;\n    margin: 10px 0;\n    color: #586069;\n    font-size: 14px;\n  }\n\n  .dry-run-badge {\n    display: inline-block;\n    padding: 4px 8px;\n    background: #cfe2ff;\n    color: #084298;\n    border-radius: 4px;\n    font-weight: bold;\n    font-size: 12px;\n  }\n\n  .summary {\n    display: flex;\n    gap: 12px;\n    margin: 15px 0;\n  }\n\n  .stat {\n    padding: 8px 16px;\n    border-radius: 6px;\n    font-weight: 600;\n    font-size: 14px;\n  }\n\n  .stat.added { background: #d4edda; color: #155724; }\n  .stat.changed { background: #fff3cd; color: #856404; }\n  .stat.deleted { background: #f8d7da; color: #721c24; }\n  .stat.formatted { background: #d1ecf1; color: #0c5460; }\n  .stat.unchanged { background: #e2e3e5; color: #383d41; }\n\n  .tabs {\n    display: flex;\n    background: white;\n    border-radius: 6px 6px 0 0;\n    border-bottom: 1px solid #d0d7de;\n    box-shadow: 0 1px 3px rgba(0,0,0,0.12);\n  }\n\n  .tab {\n    padding: 12px 24px;\n    border: none;\n    background: transparent;\n    cursor: pointer;\n    font-size: 14px;\n    color: #586069;\n    transition: all 0.2s;\n  }\n\n  .tab:hover {\n    color: #24292e;\n  }\n\n  .tab.active {\n    border-bottom: 2px solid #0969da;\n    color: #0969da;\n    font-weight: 600;\n  }\n\n  main {\n    background: white;\n    padding: 20px;\n    border-radius: 0 0 6px 6px;\n    box-shadow: 0 1px 3px rgba(0,0,0,0.12);\n  }\n\n  .tab-content {\n    display: none;\n  }\n\n  .tab-content.active {\n    display: block;\n  }\n\n  .file-section {\n    margin: 12px 0;\n    border: 1px solid #d0d7de;\n    border-radius: 6px;\n  }\n\n  .file-section summary {\n    padding: 12px 16px;\n    background: #f6f8fa;\n    cursor: pointer;\n    font-weight: 600;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 13px;\n    color: #24292e;\n  }\n\n  .file-section summary:hover {\n    background: #eaeef2;\n  }\n\n  .file-section[open] > summary {\n    position: sticky;\n    top: 0;\n    z-index: 10;\n    border-bottom: 1px solid #d0d7de;\n    box-shadow: 0 2px 4px rgba(0,0,0,0.1);\n  }\n\n  .filename-transform {\n    color: #0969da;\n  }\n\n  .diff-container {\n    padding: 0;\n  }\n\n  /* Hide diff2html file header with rename badge */\n  .d2h-file-header {\n    display: none;\n  }\n\n  .file-list {\n    margin: 20px 0;\n  }\n\n  .file-list ul {\n    list-style: none;\n    padding: 0;\n    margin: 10px 0;\n  }\n\n  .file-list li {\n    padding: 8px 16px;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 13px;\n    color: #586069;\n    border-bottom: 1px solid #f6f8fa;\n  }\n\n  .file-list li:hover {\n    background: #f6f8fa;\n  }\n\n  /* Treeview styles */\n  .tree-root {\n    list-style: none;\n    padding: 0;\n    margin: 10px 0;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 13px;\n  }\n\n  .tree-root ul {\n    list-style: none;\n    padding-left: 20px;\n    margin: 0;\n  }\n\n  .tree-folder,\n  .tree-file {\n    padding: 4px 8px;\n    border-radius: 4px;\n    cursor: default;\n  }\n\n  .tree-folder:hover,\n  .tree-file:hover {\n    background: #f6f8fa;\n  }\n\n  .tree-toggle {\n    display: inline-block;\n    width: 16px;\n    cursor: pointer;\n    color: #586069;\n    font-size: 10px;\n    user-select: none;\n  }\n\n  .tree-folder.collapsed > .tree-toggle {\n    transform: rotate(-90deg);\n  }\n\n  .tree-folder.collapsed > .tree-children {\n    display: none;\n  }\n\n  .tree-folder-name {\n    color: #0969da;\n    font-weight: 500;\n  }\n\n  .tree-file-name {\n    color: #586069;\n    padding-left: 16px;\n  }\n\n  /* Sidebar styles */\n  .sidebar-container {\n    display: flex;\n    gap: 0;\n  }\n\n  .sidebar {\n    width: 280px;\n    min-width: 280px;\n    border-right: 1px solid #d0d7de;\n    background: #f6f8fa;\n    transition: width 0.2s, min-width 0.2s, padding 0.2s, opacity 0.2s;\n  }\n\n  .sidebar.collapsed {\n    width: 0;\n    min-width: 0;\n    padding: 0;\n    overflow: hidden;\n    border-right: none;\n  }\n\n  .sidebar-header {\n    display: flex;\n    justify-content: space-between;\n    align-items: center;\n    padding: 12px 16px;\n    border-bottom: 1px solid #d0d7de;\n    background: #fff;\n    font-weight: 600;\n    font-size: 14px;\n    color: #24292e;\n    position: sticky;\n    top: 0;\n    z-index: 1;\n  }\n\n  .sidebar-toggle {\n    background: none;\n    border: 1px solid #d0d7de;\n    border-radius: 4px;\n    cursor: pointer;\n    padding: 4px 8px;\n    color: #586069;\n    font-size: 12px;\n  }\n\n  .sidebar-toggle:hover {\n    background: #f6f8fa;\n    color: #24292e;\n  }\n\n  .sidebar-content {\n    padding: 8px;\n  }\n\n  .sidebar-tree .tree-file-link {\n    color: #586069;\n    text-decoration: none;\n    padding-left: 16px;\n    display: block;\n  }\n\n  .sidebar-tree .tree-file-link:hover {\n    color: #0969da;\n  }\n\n  .sidebar-tree .tree-file.active .tree-file-link {\n    color: #0969da;\n    font-weight: 600;\n  }\n\n  .changed-content {\n    flex: 1;\n    min-width: 0;\n    padding-left: 20px;\n  }\n\n  .sidebar-expand-btn {\n    display: none;\n    position: fixed;\n    left: 0;\n    top: 50%;\n    transform: translateY(-50%);\n    background: #f6f8fa;\n    border: 1px solid #d0d7de;\n    border-left: none;\n    border-radius: 0 4px 4px 0;\n    padding: 8px 4px;\n    cursor: pointer;\n    color: #586069;\n    z-index: 100;\n  }\n\n  .sidebar-expand-btn:hover {\n    background: #eaeef2;\n    color: #24292e;\n  }\n\n  .sidebar.collapsed ~ .sidebar-expand-btn {\n    display: block;\n  }\n\n  /* Added content area (same as changed-content) */\n  .added-content {\n    flex: 1;\n    min-width: 0;\n    padding-left: 20px;\n  }\n\n  /* Content container for added files */\n  .content-container {\n    padding: 16px;\n    background: #f6f8fa;\n    border-top: 1px solid #d0d7de;\n  }\n\n  .content-actions {\n    display: flex;\n    gap: 8px;\n    margin-bottom: 12px;\n  }\n\n  .copy-btn,\n  .download-btn {\n    padding: 6px 12px;\n    border: 1px solid #d0d7de;\n    border-radius: 6px;\n    background: white;\n    cursor: pointer;\n    font-size: 13px;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Helvetica, Arial, sans-serif;\n    color: #24292e;\n    transition: all 0.2s;\n  }\n\n  .copy-btn:hover,\n  .download-btn:hover {\n    background: #f3f4f6;\n    border-color: #b0b7be;\n  }\n\n  .copy-btn.copied {\n    background: #d4edda;\n    border-color: #28a745;\n    color: #155724;\n  }\n\n  .file-content {\n    margin: 0;\n    padding: 16px;\n    background: white;\n    border: 1px solid #d0d7de;\n    border-radius: 6px;\n    overflow-x: auto;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 12px;\n    line-height: 1.5;\n    white-space: pre;\n  }\n\n  .file-content code {\n    font-family: inherit;\n  }\n\n  /* Scroll-to-top button */\n  .scroll-to-top {\n    display: none;\n    position: fixed;\n    bottom: 30px;\n    right: 30px;\n    width: 40px;\n    height: 40px;\n    border: none;\n    border-radius: 50%;\n    background: #0969da;\n    color: white;\n    font-size: 18px;\n    cursor: pointer;\n    box-shadow: 0 2px 8px rgba(0,0,0,0.2);\n    transition: opacity 0.2s, background 0.2s;\n    z-index: 200;\n    line-height: 40px;\n    text-align: center;\n    padding: 0;\n  }\n\n  .scroll-to-top:hover {\n    background: #0550ae;\n  }\n\n  .scroll-to-top.visible {\n    display: block;\n  }\n\n  /* Content toolbar (collapse/expand buttons) */\n  .content-toolbar {\n    display: flex;\n    gap: 8px;\n    justify-content: flex-end;\n    margin-bottom: 12px;\n  }\n\n  .collapse-all-btn,\n  .expand-all-btn {\n    padding: 4px 12px;\n    border: 1px solid #d0d7de;\n    border-radius: 4px;\n    background: none;\n    cursor: pointer;\n    font-size: 12px;\n    color: #586069;\n    transition: all 0.2s;\n  }\n\n  .collapse-all-btn:hover,\n  .expand-all-btn:hover {\n    background: #f6f8fa;\n    color: #24292e;\n  }\n\n  /* Line change count badges */\n  .summary-badges {\n    float: right;\n    display: inline-flex;\n    gap: 6px;\n    margin-left: 12px;\n  }\n\n  .line-badge {\n    display: inline-block;\n    padding: 1px 8px;\n    border-radius: 10px;\n    font-size: 11px;\n    font-weight: 600;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    line-height: 18px;\n  }\n\n  .line-added {\n    background: #d4edda;\n    color: #155724;\n  }\n\n  .line-removed {\n    background: #f8d7da;\n    color: #721c24;\n  }\n\n  /* Diff toolbar */\n  .diff-toolbar {\n    display: flex;\n    justify-content: flex-end;\n    padding: 8px 16px;\n    border-bottom: 1px solid #d0d7de;\n    background: #f6f8fa;\n  }\n\n  .copy-diff-btn {\n    padding: 4px 12px;\n    border: 1px solid #d0d7de;\n    border-radius: 6px;\n    background: white;\n    cursor: pointer;\n    font-size: 12px;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Helvetica, Arial, sans-serif;\n    color: #24292e;\n    transition: all 0.2s;\n  }\n\n  .copy-diff-btn:hover {\n    background: #f3f4f6;\n    border-color: #b0b7be;\n  }\n\n  .copy-diff-btn.copied {\n    background: #d4edda;\n    border-color: #28a745;\n    color: #155724;\n  }\n\n  /* Sidebar search */\n  .sidebar-search {\n    width: 100%;\n    padding: 6px 8px;\n    border: 1px solid #d0d7de;\n    border-radius: 4px;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 12px;\n    margin-bottom: 8px;\n    box-sizing: border-box;\n    position: sticky;\n    top: 0;\n    z-index: 1;\n    background: #fff;\n  }\n\n  .sidebar-search:focus {\n    outline: none;\n    border-color: #0969da;\n    box-shadow: 0 0 0 3px rgba(9,105,218,0.15);\n  }\n\n  /* Stats toggle button */\n  .stats-toggle-btn {\n    padding: 4px 12px;\n    border: 1px solid #d0d7de;\n    border-radius: 4px;\n    background: none;\n    cursor: pointer;\n    font-size: 12px;\n    color: #586069;\n    transition: all 0.2s;\n  }\n\n  .stats-toggle-btn:hover {\n    background: #f6f8fa;\n    color: #24292e;\n  }\n\n  /* Statistics dashboard */\n  .stats-dashboard {\n    margin: 15px 0 0;\n    padding: 12px 0 0;\n    border-top: 1px solid #e1e4e8;\n  }\n\n  .stats-summary {\n    display: flex;\n    gap: 16px;\n    align-items: center;\n    margin-bottom: 10px;\n  }\n\n  .stats-summary .total-added {\n    font-weight: 700;\n    color: #155724;\n    font-size: 16px;\n  }\n\n  .stats-summary .total-removed {\n    font-weight: 700;\n    color: #721c24;\n    font-size: 16px;\n  }\n\n  .stats-bar {\n    display: flex;\n    height: 8px;\n    border-radius: 4px;\n    overflow: hidden;\n    background: #e1e4e8;\n    margin-bottom: 10px;\n  }\n\n  .stats-segment {\n    height: 100%;\n    min-width: 2px;\n  }\n\n  .stats-segment.added-segment {\n    background: #28a745;\n  }\n\n  .stats-segment.removed-segment {\n    background: #d73a49;\n  }\n\n  .top-changed-files {\n    list-style: none;\n    padding: 0;\n    margin: 0;\n    font-size: 13px;\n  }\n\n  .top-changed-files li {\n    display: flex;\n    justify-content: space-between;\n    align-items: center;\n    padding: 3px 0;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    color: #586069;\n  }\n\n  .top-changed-files .file-path {\n    overflow: hidden;\n    text-overflow: ellipsis;\n    white-space: nowrap;\n    margin-right: 8px;\n  }\n\n  .top-changed-files .file-stats {\n    white-space: nowrap;\n    flex-shrink: 0;\n  }\n\n  /* Stop rules violations badge */\n  .stat.violations { background: #f8d7da; color: #721c24; }\n\n  /* Violations section */\n  .violations-section {\n    margin: 15px 0 0;\n    padding: 12px 0 0;\n    border-top: 1px solid #e1e4e8;\n  }\n\n  .violations-toggle-btn {\n    padding: 4px 12px;\n    border: 1px solid #d0d7de;\n    border-radius: 4px;\n    background: none;\n    cursor: pointer;\n    font-size: 12px;\n    color: #586069;\n    transition: all 0.2s;\n  }\n\n  .violations-toggle-btn:hover {\n    background: #f6f8fa;\n    color: #24292e;\n  }\n\n  .violations-table {\n    width: 100%;\n    border-collapse: collapse;\n    font-size: 13px;\n    margin-top: 10px;\n  }\n\n  .violations-table th {\n    background: #f6f8fa;\n    text-align: left;\n    padding: 8px 12px;\n    border-bottom: 2px solid #d0d7de;\n    font-weight: 600;\n    color: #24292e;\n  }\n\n  .violations-table td {\n    padding: 8px 12px;\n    border-bottom: 1px solid #e1e4e8;\n    color: #24292e;\n    vertical-align: top;\n  }\n\n  .violations-table tr:hover td {\n    background: #f6f8fa;\n  }\n\n  .violation-rule-badge {\n    display: inline-block;\n    padding: 2px 8px;\n    border-radius: 10px;\n    font-size: 11px;\n    font-weight: 600;\n    background: #fff3cd;\n    color: #856404;\n    white-space: nowrap;\n  }\n\n  .violation-value {\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 12px;\n    background: #f6f8fa;\n    padding: 2px 6px;\n    border-radius: 3px;\n    border: 1px solid #e1e4e8;\n  }\n";
+export declare const HTML_STYLES = "\n  /* Custom styles */\n  body {\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Helvetica, Arial, sans-serif;\n    margin: 0;\n    padding: 20px;\n    background: #f6f8fa;\n  }\n\n  header {\n    background: white;\n    padding: 20px;\n    border-radius: 6px;\n    margin-bottom: 20px;\n    box-shadow: 0 1px 3px rgba(0,0,0,0.12);\n  }\n\n  h1 {\n    margin: 0 0 10px 0;\n    color: #24292e;\n  }\n\n  .metadata {\n    display: flex;\n    gap: 20px;\n    margin: 10px 0;\n    color: #586069;\n    font-size: 14px;\n  }\n\n  .dry-run-badge {\n    display: inline-block;\n    padding: 4px 8px;\n    background: #cfe2ff;\n    color: #084298;\n    border-radius: 4px;\n    font-weight: bold;\n    font-size: 12px;\n  }\n\n  .summary {\n    display: flex;\n    gap: 12px;\n    margin: 15px 0;\n  }\n\n  .stat {\n    padding: 8px 16px;\n    border-radius: 6px;\n    font-weight: 600;\n    font-size: 14px;\n  }\n\n  .stat.added { background: #d4edda; color: #155724; }\n  .stat.changed { background: #fff3cd; color: #856404; }\n  .stat.deleted { background: #f8d7da; color: #721c24; }\n  .stat.formatted { background: #d1ecf1; color: #0c5460; }\n  .stat.unchanged { background: #e2e3e5; color: #383d41; }\n\n  .tabs {\n    display: flex;\n    background: white;\n    border-radius: 6px 6px 0 0;\n    border-bottom: 1px solid #d0d7de;\n    box-shadow: 0 1px 3px rgba(0,0,0,0.12);\n  }\n\n  .tab {\n    padding: 12px 24px;\n    border: none;\n    background: transparent;\n    cursor: pointer;\n    font-size: 14px;\n    color: #586069;\n    transition: all 0.2s;\n  }\n\n  .tab:hover {\n    color: #24292e;\n  }\n\n  .tab.active {\n    border-bottom: 2px solid #0969da;\n    color: #0969da;\n    font-weight: 600;\n  }\n\n  main {\n    background: white;\n    padding: 20px;\n    border-radius: 0 0 6px 6px;\n    box-shadow: 0 1px 3px rgba(0,0,0,0.12);\n  }\n\n  .tab-content {\n    display: none;\n  }\n\n  .tab-content.active {\n    display: block;\n  }\n\n  .file-section {\n    margin: 12px 0;\n    border: 1px solid #d0d7de;\n    border-radius: 6px;\n  }\n\n  .file-section summary {\n    padding: 12px 16px;\n    background: #f6f8fa;\n    cursor: pointer;\n    font-weight: 600;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 13px;\n    color: #24292e;\n    display: flex;\n    align-items: center;\n    gap: 6px;\n    list-style: none;\n  }\n\n  .file-section summary::-webkit-details-marker {\n    display: none;\n  }\n\n  .summary-expand-icon::before {\n    content: '\u25B6';\n    font-size: 10px;\n    color: #6a737d;\n  }\n\n  .file-section[open] > summary .summary-expand-icon::before {\n    content: '\u25BC';\n  }\n\n  .jump-to-sidebar-link {\n    display: inline-flex;\n    align-items: center;\n    color: #6a737d;\n    text-decoration: none;\n    padding: 2px 3px;\n    border-radius: 3px;\n    flex-shrink: 0;\n    line-height: 1;\n  }\n\n  .jump-to-sidebar-link:hover {\n    color: #0969da;\n    background: rgba(9, 105, 218, 0.08);\n  }\n\n  .file-section summary:hover {\n    background: #eaeef2;\n  }\n\n  .file-section[open] > summary {\n    position: sticky;\n    top: 0;\n    z-index: 10;\n    border-bottom: 1px solid #d0d7de;\n    box-shadow: 0 2px 4px rgba(0,0,0,0.1);\n  }\n\n  .filename-transform {\n    color: #0969da;\n  }\n\n  .diff-container {\n    padding: 0;\n  }\n\n  /* Hide diff2html file header with rename badge */\n  .d2h-file-header {\n    display: none;\n  }\n\n  .file-list {\n    margin: 20px 0;\n  }\n\n  .file-list ul {\n    list-style: none;\n    padding: 0;\n    margin: 10px 0;\n  }\n\n  .file-list li {\n    padding: 8px 16px;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 13px;\n    color: #586069;\n    border-bottom: 1px solid #f6f8fa;\n  }\n\n  .file-list li:hover {\n    background: #f6f8fa;\n  }\n\n  /* Treeview styles */\n  .tree-root {\n    list-style: none;\n    padding: 0;\n    margin: 10px 0;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 13px;\n  }\n\n  .tree-root ul {\n    list-style: none;\n    padding-left: 20px;\n    margin: 0;\n  }\n\n  .tree-folder,\n  .tree-file {\n    padding: 4px 8px;\n    border-radius: 4px;\n    cursor: default;\n  }\n\n  .tree-folder:hover,\n  .tree-file:hover {\n    background: #f6f8fa;\n  }\n\n  .tree-toggle {\n    display: inline-block;\n    width: 16px;\n    cursor: pointer;\n    color: #586069;\n    font-size: 10px;\n    user-select: none;\n  }\n\n  .tree-folder.collapsed > .tree-toggle {\n    transform: rotate(-90deg);\n  }\n\n  .tree-folder.collapsed > .tree-children {\n    display: none;\n  }\n\n  .tree-folder-name {\n    color: #0969da;\n    font-weight: 500;\n  }\n\n  .tree-file-name {\n    color: #586069;\n    padding-left: 16px;\n  }\n\n  /* Sidebar styles */\n  .sidebar-container {\n    display: flex;\n    gap: 0;\n  }\n\n  .sidebar {\n    width: 280px;\n    min-width: 280px;\n    border-right: 1px solid #d0d7de;\n    background: #f6f8fa;\n    transition: width 0.2s, min-width 0.2s, padding 0.2s, opacity 0.2s;\n  }\n\n  .sidebar.collapsed {\n    width: 0;\n    min-width: 0;\n    padding: 0;\n    overflow: hidden;\n    border-right: none;\n  }\n\n  .sidebar-header {\n    display: flex;\n    justify-content: space-between;\n    align-items: center;\n    padding: 12px 16px;\n    border-bottom: 1px solid #d0d7de;\n    background: #fff;\n    font-weight: 600;\n    font-size: 14px;\n    color: #24292e;\n    position: sticky;\n    top: 0;\n    z-index: 1;\n  }\n\n  .sidebar-toggle {\n    background: none;\n    border: 1px solid #d0d7de;\n    border-radius: 4px;\n    cursor: pointer;\n    padding: 4px 8px;\n    color: #586069;\n    font-size: 12px;\n  }\n\n  .sidebar-toggle:hover {\n    background: #f6f8fa;\n    color: #24292e;\n  }\n\n  .sidebar-content {\n    padding: 8px;\n  }\n\n  .sidebar-tree .tree-file-link {\n    color: #586069;\n    text-decoration: none;\n    padding-left: 16px;\n    display: block;\n  }\n\n  .sidebar-tree .tree-file-link:hover {\n    color: #0969da;\n  }\n\n  .sidebar-tree .tree-file.active .tree-file-link {\n    color: #0969da;\n    font-weight: 600;\n  }\n\n  .changed-content {\n    flex: 1;\n    min-width: 0;\n    padding-left: 20px;\n  }\n\n  .sidebar-expand-btn {\n    display: none;\n    position: fixed;\n    left: 0;\n    top: 50%;\n    transform: translateY(-50%);\n    background: #f6f8fa;\n    border: 1px solid #d0d7de;\n    border-left: none;\n    border-radius: 0 4px 4px 0;\n    padding: 8px 4px;\n    cursor: pointer;\n    color: #586069;\n    z-index: 100;\n  }\n\n  .sidebar-expand-btn:hover {\n    background: #eaeef2;\n    color: #24292e;\n  }\n\n  .sidebar.collapsed ~ .sidebar-expand-btn {\n    display: block;\n  }\n\n  /* Added content area (same as changed-content) */\n  .added-content {\n    flex: 1;\n    min-width: 0;\n    padding-left: 20px;\n  }\n\n  /* Content container for added files */\n  .content-container {\n    padding: 16px;\n    background: #f6f8fa;\n    border-top: 1px solid #d0d7de;\n  }\n\n  .content-actions {\n    display: flex;\n    gap: 8px;\n    margin-bottom: 12px;\n  }\n\n  .copy-btn,\n  .download-btn {\n    padding: 6px 12px;\n    border: 1px solid #d0d7de;\n    border-radius: 6px;\n    background: white;\n    cursor: pointer;\n    font-size: 13px;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Helvetica, Arial, sans-serif;\n    color: #24292e;\n    transition: all 0.2s;\n  }\n\n  .copy-btn:hover,\n  .download-btn:hover {\n    background: #f3f4f6;\n    border-color: #b0b7be;\n  }\n\n  .copy-btn.copied {\n    background: #d4edda;\n    border-color: #28a745;\n    color: #155724;\n  }\n\n  .file-content {\n    margin: 0;\n    padding: 16px;\n    background: white;\n    border: 1px solid #d0d7de;\n    border-radius: 6px;\n    overflow-x: auto;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 12px;\n    line-height: 1.5;\n    white-space: pre;\n  }\n\n  .file-content code {\n    font-family: inherit;\n  }\n\n  /* Scroll-to-top button */\n  .scroll-to-top {\n    display: none;\n    position: fixed;\n    bottom: 30px;\n    right: 30px;\n    width: 40px;\n    height: 40px;\n    border: none;\n    border-radius: 50%;\n    background: #0969da;\n    color: white;\n    font-size: 18px;\n    cursor: pointer;\n    box-shadow: 0 2px 8px rgba(0,0,0,0.2);\n    transition: opacity 0.2s, background 0.2s;\n    z-index: 200;\n    line-height: 40px;\n    text-align: center;\n    padding: 0;\n  }\n\n  .scroll-to-top:hover {\n    background: #0550ae;\n  }\n\n  .scroll-to-top.visible {\n    display: block;\n  }\n\n  /* Content toolbar (collapse/expand buttons) */\n  .content-toolbar {\n    display: flex;\n    gap: 8px;\n    justify-content: flex-end;\n    margin-bottom: 12px;\n  }\n\n  .collapse-all-btn,\n  .expand-all-btn {\n    padding: 4px 12px;\n    border: 1px solid #d0d7de;\n    border-radius: 4px;\n    background: none;\n    cursor: pointer;\n    font-size: 12px;\n    color: #586069;\n    transition: all 0.2s;\n  }\n\n  .collapse-all-btn:hover,\n  .expand-all-btn:hover {\n    background: #f6f8fa;\n    color: #24292e;\n  }\n\n  /* Line change count badges */\n  .summary-badges {\n    display: inline-flex;\n    gap: 6px;\n    margin-left: auto;\n  }\n\n  .line-badge {\n    display: inline-block;\n    padding: 1px 8px;\n    border-radius: 10px;\n    font-size: 11px;\n    font-weight: 600;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    line-height: 18px;\n  }\n\n  .line-added {\n    background: #d4edda;\n    color: #155724;\n  }\n\n  .line-removed {\n    background: #f8d7da;\n    color: #721c24;\n  }\n\n  /* Diff toolbar */\n  .diff-toolbar {\n    display: flex;\n    justify-content: flex-end;\n    padding: 8px 16px;\n    border-bottom: 1px solid #d0d7de;\n    background: #f6f8fa;\n  }\n\n  .copy-diff-btn {\n    padding: 4px 12px;\n    border: 1px solid #d0d7de;\n    border-radius: 6px;\n    background: white;\n    cursor: pointer;\n    font-size: 12px;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Helvetica, Arial, sans-serif;\n    color: #24292e;\n    transition: all 0.2s;\n  }\n\n  .copy-diff-btn:hover {\n    background: #f3f4f6;\n    border-color: #b0b7be;\n  }\n\n  .copy-diff-btn.copied {\n    background: #d4edda;\n    border-color: #28a745;\n    color: #155724;\n  }\n\n  /* Sidebar search */\n  .sidebar-search {\n    width: 100%;\n    padding: 6px 8px;\n    border: 1px solid #d0d7de;\n    border-radius: 4px;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 12px;\n    margin-bottom: 8px;\n    box-sizing: border-box;\n    position: sticky;\n    top: 0;\n    z-index: 1;\n    background: #fff;\n  }\n\n  .sidebar-search:focus {\n    outline: none;\n    border-color: #0969da;\n    box-shadow: 0 0 0 3px rgba(9,105,218,0.15);\n  }\n\n  /* Stats toggle button */\n  .stats-toggle-btn {\n    padding: 4px 12px;\n    border: 1px solid #d0d7de;\n    border-radius: 4px;\n    background: none;\n    cursor: pointer;\n    font-size: 12px;\n    color: #586069;\n    transition: all 0.2s;\n  }\n\n  .stats-toggle-btn:hover {\n    background: #f6f8fa;\n    color: #24292e;\n  }\n\n  /* Statistics dashboard */\n  .stats-dashboard {\n    margin: 15px 0 0;\n    padding: 12px 0 0;\n    border-top: 1px solid #e1e4e8;\n  }\n\n  .stats-summary {\n    display: flex;\n    gap: 16px;\n    align-items: center;\n    margin-bottom: 10px;\n  }\n\n  .stats-summary .total-added {\n    font-weight: 700;\n    color: #155724;\n    font-size: 16px;\n  }\n\n  .stats-summary .total-removed {\n    font-weight: 700;\n    color: #721c24;\n    font-size: 16px;\n  }\n\n  .stats-bar {\n    display: flex;\n    height: 8px;\n    border-radius: 4px;\n    overflow: hidden;\n    background: #e1e4e8;\n    margin-bottom: 10px;\n  }\n\n  .stats-segment {\n    height: 100%;\n    min-width: 2px;\n  }\n\n  .stats-segment.added-segment {\n    background: #28a745;\n  }\n\n  .stats-segment.removed-segment {\n    background: #d73a49;\n  }\n\n  .top-changed-files {\n    list-style: none;\n    padding: 0;\n    margin: 0;\n    font-size: 13px;\n  }\n\n  .top-changed-files li {\n    display: flex;\n    justify-content: space-between;\n    align-items: center;\n    padding: 3px 0;\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    color: #586069;\n  }\n\n  .top-changed-files .file-path {\n    overflow: hidden;\n    text-overflow: ellipsis;\n    white-space: nowrap;\n    margin-right: 8px;\n  }\n\n  .top-changed-files .file-stats {\n    white-space: nowrap;\n    flex-shrink: 0;\n  }\n\n  /* Stop rules violations badge */\n  .stat.violations { background: #f8d7da; color: #721c24; }\n\n  /* Violations section */\n  .violations-section {\n    margin: 15px 0 0;\n    padding: 12px 0 0;\n    border-top: 1px solid #e1e4e8;\n  }\n\n  .violations-toggle-btn {\n    padding: 4px 12px;\n    border: 1px solid #d0d7de;\n    border-radius: 4px;\n    background: none;\n    cursor: pointer;\n    font-size: 12px;\n    color: #586069;\n    transition: all 0.2s;\n  }\n\n  .violations-toggle-btn:hover {\n    background: #f6f8fa;\n    color: #24292e;\n  }\n\n  .violations-table {\n    width: 100%;\n    border-collapse: collapse;\n    font-size: 13px;\n    margin-top: 10px;\n  }\n\n  .violations-table th {\n    background: #f6f8fa;\n    text-align: left;\n    padding: 8px 12px;\n    border-bottom: 2px solid #d0d7de;\n    font-weight: 600;\n    color: #24292e;\n  }\n\n  .violations-table td {\n    padding: 8px 12px;\n    border-bottom: 1px solid #e1e4e8;\n    color: #24292e;\n    vertical-align: top;\n  }\n\n  .violations-table tr:hover td {\n    background: #f6f8fa;\n  }\n\n  .violation-rule-badge {\n    display: inline-block;\n    padding: 2px 8px;\n    border-radius: 10px;\n    font-size: 11px;\n    font-weight: 600;\n    background: #fff3cd;\n    color: #856404;\n    white-space: nowrap;\n  }\n\n  .violation-value {\n    font-family: ui-monospace, SFMono-Regular, \"SF Mono\", Menlo, Consolas, \"Liberation Mono\", monospace;\n    font-size: 12px;\n    background: #f6f8fa;\n    padding: 2px 6px;\n    border-radius: 3px;\n    border: 1px solid #e1e4e8;\n  }\n";
 export declare const TAB_SCRIPT: string;

package/dist/reporters/htmlStyles.js

@@ -119,6 +119,40 @@ exports.HTML_STYLES = `
     font-family: ui-monospace, SFMono-Regular, "SF Mono", Menlo, Consolas, "Liberation Mono", monospace;
     font-size: 13px;
     color: #24292e;
+    display: flex;
+    align-items: center;
+    gap: 6px;
+    list-style: none;
+  }
+
+  .file-section summary::-webkit-details-marker {
+    display: none;
+  }
+
+  .summary-expand-icon::before {
+    content: '\u25B6';
+    font-size: 10px;
+    color: #6a737d;
+  }
+
+  .file-section[open] > summary .summary-expand-icon::before {
+    content: '\u25BC';
+  }
+
+  .jump-to-sidebar-link {
+    display: inline-flex;
+    align-items: center;
+    color: #6a737d;
+    text-decoration: none;
+    padding: 2px 3px;
+    border-radius: 3px;
+    flex-shrink: 0;
+    line-height: 1;
+  }
+
+  .jump-to-sidebar-link:hover {
+    color: #0969da;
+    background: rgba(9, 105, 218, 0.08);
   }
 
   .file-section summary:hover {
@@ -445,10 +479,9 @@ exports.HTML_STYLES = `
 
   /* Line change count badges */
   .summary-badges {
-    float: right;
     display: inline-flex;
     gap: 6px;
-    margin-left: 12px;
+    margin-left: auto;
   }
 
   .line-badge {
@@ -770,6 +803,37 @@ exports.TAB_SCRIPT = String.raw `
     });
   });
 
+  // Jump-to-sidebar link in file block headers
+  document.querySelectorAll('.jump-to-sidebar-link').forEach(link => {
+    link.addEventListener('click', (e) => {
+      e.preventDefault();
+      e.stopPropagation(); // prevent <details> toggle
+      const fileId = link.getAttribute('data-file-id');
+      const tabContent = link.closest('.tab-content');
+      if (!tabContent || !fileId) return;
+
+      const treeFile = tabContent.querySelector('.tree-file[data-file-id="' + fileId + '"]');
+      if (!treeFile) return;
+
+      // Expand any collapsed parent folders
+      let el = treeFile.parentElement;
+      while (el) {
+        if (el.classList.contains('tree-children')) {
+          el.style.display = '';
+          if (el.parentElement) el.parentElement.classList.remove('collapsed');
+        }
+        el = el.parentElement;
+      }
+
+      // Highlight in sidebar
+      tabContent.querySelectorAll('.sidebar-tree .tree-file').forEach(f => f.classList.remove('active'));
+      treeFile.classList.add('active');
+
+      // Scroll sidebar to the file entry
+      treeFile.scrollIntoView({ behavior: 'smooth', block: 'center' });
+    });
+  });
+
   // IntersectionObserver to highlight current file on scroll
   const fileSections = document.querySelectorAll('.file-section[id]');
   if (fileSections.length > 0 && 'IntersectionObserver' in window) {

package/dist/reporters/htmlTemplate.js

@@ -144,6 +144,10 @@ const generateHtmlTemplate = (diffResult, formattedFiles, trulyUnchangedFiles, m
           </aside>
           <button class="sidebar-expand-btn" data-sidebar="added">&#9654;</button>
           <div class="added-content">
+            <div class="content-toolbar">
+              <button class="collapse-all-btn">Collapse All</button>
+              <button class="expand-all-btn">Expand All</button>
+            </div>
             ${addedSections.join('\n')}
           </div>
         </div>

package/dist/utils/regexPatternFileLoader.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadRegexPatternsFromKeys = exports.loadRegexPatternArray = exports.isRegexPatternFileLoaderError = exports.RegexPatternFileLoaderError = void 0;
 const errors_1 = require("./errors");
+const regexSafety_1 = require("./regexSafety");
 const yamlFileLoader_1 = require("./yamlFileLoader");
 exports.RegexPatternFileLoaderError = (0, errors_1.createErrorClass)('RegexPatternFileLoaderError', {
     INVALID_FORMAT_NOT_ARRAY: 'Pattern file must contain a YAML array of regex patterns',
@@ -38,6 +39,8 @@ const validateRegexPattern = (pattern, source) => {
             cause: error
         });
     }
+    if (!(0, regexSafety_1.isSafeRegex)(pattern))
+        throw new exports.RegexPatternFileLoaderError(`Potentially unsafe regex pattern "${pattern}" ${source} — may cause catastrophic backtracking (ReDoS)`, { code: 'INVALID_REGEX' });
 };
 const loadRegexPatternArray = (filePath, configDirectory) => {
     let parsedData;

package/dist/utils/regexSafety.d.ts

@@ -0,0 +1 @@
+export declare const isSafeRegex: (pattern: string) => boolean;

package/dist/utils/regexSafety.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSafeRegex = void 0;
+const isSafeRegex = (pattern) => {
+    if (/\([^()]*[*+][^()]*\)[*+{]/.test(pattern))
+        return false;
+    return true;
+};
+exports.isSafeRegex = isSafeRegex;

package/dist/utils/regexTransform.js

@@ -1,11 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.applyRegexRulesSequentially = void 0;
+const regexCache = new Map();
 const applyRegexRulesSequentially = (value, rules, throwOnError = false) => {
     let result = value;
     for (const rule of rules)
         try {
-            const regex = new RegExp(rule.find, 'g');
+            let regex = regexCache.get(rule.find);
+            if (!regex) {
+                regex = new RegExp(rule.find, 'g');
+                regexCache.set(rule.find, regex);
+            }
             result = result.replace(regex, rule.replace);
         }
         catch (error) {

package/dist/utils/serialization.js

@@ -15,6 +15,19 @@ const serializeForDiff = (content, isYaml) => {
     });
 };
 exports.serializeForDiff = serializeForDiff;
+const deepSortKeys = (value) => {
+    if (value === null || value === undefined)
+        return value;
+    if (Array.isArray(value))
+        return value.map((item) => deepSortKeys(item));
+    if (typeof value === 'object') {
+        const sorted = {};
+        for (const key of Object.keys(value).toSorted())
+            sorted[key] = deepSortKeys(value[key]);
+        return sorted;
+    }
+    return value;
+};
 const normalizeForComparison = (value) => {
     if (value === null || value === undefined)
         return value;
@@ -25,7 +38,7 @@ const normalizeForComparison = (value) => {
         const normalized = value.map((item) => (0, exports.normalizeForComparison)(item));
         const serializedItems = normalized.map((item) => ({
             item,
-            serialized: yaml_1.default.stringify(item, { sortMapEntries: true }) ?? ''
+            serialized: JSON.stringify(deepSortKeys(item)) ?? ''
         }));
         return serializedItems.toSorted((a, b) => a.serialized.localeCompare(b.serialized)).map(({ item }) => item);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "helm-env-delta",
-  "version": "1.14.0",
+  "version": "1.14.2",
   "description": "HelmEnvDelta – environment-aware YAML delta and sync for GitOps",
   "author": "BCsabaEngine",
   "license": "ISC",
@@ -65,18 +65,18 @@
   ],
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@types/node": "^25.3.0",
+    "@types/node": "^25.5.0",
     "@types/picomatch": "^4.0.2",
-    "@typescript-eslint/eslint-plugin": "^8.56.1",
-    "@vitest/coverage-v8": "^4.0.18",
-    "eslint": "^10.0.2",
+    "@typescript-eslint/eslint-plugin": "^8.57.1",
+    "@vitest/coverage-v8": "^4.1.0",
+    "eslint": "^10.0.3",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-simple-import-sort": "^12.1.1",
     "eslint-plugin-unicorn": "^63.0.0",
     "prettier": "^3.8.1",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
-    "vitest": "^4.0.18"
+    "vitest": "^4.1.0"
   },
   "dependencies": {
     "chalk": "^5.6.2",