jinzd-ai-cli 0.4.222 → 0.4.224

package/dist/{chunk-SLSWPBK3.js → chunk-B5TYJO7V.js}

@@ -38,16 +38,19 @@ var DEFAULT_PATTERNS = [
   // Bearer <token> in Authorization headers
   { kind: "bearer", regex: /\b(Authorization:\s*Bearer\s+)([a-zA-Z0-9_\-.=]{20,500})/g },
   // Private key PEM blocks — catch the header+footer together
-  { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g }
+  // P2-PERF-02: PEM bodies use strict Base64 + =\n — narrowed char class avoids backtracking
+  { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[ \t\n\r]*[A-Za-z0-9+/=\n\r-]*[ \t\n\r]*-----END [A-Z ]*PRIVATE KEY-----/g }
 ];
 var MAX_CUSTOM = 32;
 var MAX_PATTERN_LEN = 500;
 var SUSPICIOUS_REDOS = /\([^)]*[+*][^)]*\)\s*[+*{]/;
+var MAX_REDACT_INPUT = 512e3;
 function render(placeholder, kind) {
   return placeholder.replace("{kind}", kind);
 }
 function redactString(input, options) {
   if (!options.enabled || !input) return { redacted: input, hits: [] };
+  if (input.length > MAX_REDACT_INPUT) return { redacted: input, hits: [] };
   const placeholder = options.placeholder ?? "[REDACTED:{kind}]";
   const customSrcs = (options.customRegexes ?? []).slice(0, MAX_CUSTOM);
   const patterns = [

package/dist/{chunk-QT5FA2ZY.js → chunk-DEHVRQWW.js}

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 import {
   SessionManager
-} from "./chunk-5GTWZ4QF.js";
+} from "./chunk-QYQCCIBT.js";
 
 // src/hub/persist.ts
 import { join } from "path";
 function discussionToMessages(state) {
   const out = [];
   const t0 = state.messages[0]?.timestamp ?? /* @__PURE__ */ new Date();
-  out.push({ role: "user", content: `\u{1F3DB} Topic: ${state.topic}`, timestamp: t0 });
+  out.push({ role: "user", content: `\u{1F3DB} Topic: ${state.topic}`, timestamp: new Date(t0) });
   for (const m of state.messages) {
     if (m.speaker === "system") {
-      out.push({ role: "system", content: m.content, timestamp: m.timestamp });
+      out.push({ role: "system", content: m.content, timestamp: new Date(m.timestamp) });
       continue;
     }
     if (m.speaker === "human") {
-      out.push({ role: "user", content: `\u{1F9ED} ${m.speakerName}: ${m.content}`, timestamp: m.timestamp });
+      out.push({ role: "user", content: `\u{1F9ED} ${m.speakerName}: ${m.content}`, timestamp: new Date(m.timestamp) });
       continue;
     }
     if (m.passed || !m.content.trim()) continue;
@@ -25,7 +25,7 @@ function discussionToMessages(state) {
       content: `**${m.speakerName}** (${m.speaker})${tag}
 
 ${m.content}`,
-      timestamp: m.timestamp
+      timestamp: new Date(m.timestamp)
     });
   }
   if (state.summary && state.summary.trim()) {

package/dist/{chunk-AV5OPK7Q.js → chunk-HLXQXV23.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.222";
+var VERSION = "0.4.224";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-TNW22OUY.js → chunk-JDMFVRFG.js}

@@ -2,7 +2,7 @@
 import {
   evaluateCiGate,
   normalizeCiThresholds
-} from "./chunk-VWTUYDZG.js";
+} from "./chunk-34RV4ZKA.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -13,10 +13,10 @@ import {
 } from "./chunk-PUBCJF7E.js";
 import {
   ConfigManager
-} from "./chunk-UWUTLIOH.js";
+} from "./chunk-35OPVVEK.js";
 import {
   VERSION
-} from "./chunk-NNWWMGYK.js";
+} from "./chunk-QJUAQKH2.js";
 
 // src/cli/ci.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-S6L5R6SS.js → chunk-JU7OI4BN.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-NNWWMGYK.js";
+} from "./chunk-QJUAQKH2.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{chunk-VHY6NVMQ.js → chunk-LF3OUJHK.js}

@@ -51,16 +51,19 @@ var DEFAULT_PATTERNS = [
   // Bearer <token> in Authorization headers
   { kind: "bearer", regex: /\b(Authorization:\s*Bearer\s+)([a-zA-Z0-9_\-.=]{20,500})/g },
   // Private key PEM blocks — catch the header+footer together
-  { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g }
+  // P2-PERF-02: PEM bodies use strict Base64 + =\n — narrowed char class avoids backtracking
+  { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[ \t\n\r]*[A-Za-z0-9+/=\n\r-]*[ \t\n\r]*-----END [A-Z ]*PRIVATE KEY-----/g }
 ];
 var MAX_CUSTOM = 32;
 var MAX_PATTERN_LEN = 500;
 var SUSPICIOUS_REDOS = /\([^)]*[+*][^)]*\)\s*[+*{]/;
+var MAX_REDACT_INPUT = 512e3;
 function render(placeholder, kind) {
   return placeholder.replace("{kind}", kind);
 }
 function redactString(input, options) {
   if (!options.enabled || !input) return { redacted: input, hits: [] };
+  if (input.length > MAX_REDACT_INPUT) return { redacted: input, hits: [] };
   const placeholder = options.placeholder ?? "[REDACTED:{kind}]";
   const customSrcs = (options.customRegexes ?? []).slice(0, MAX_CUSTOM);
   const patterns = [

package/dist/{chunk-TB4W4Y4T.js → chunk-NVUCDUXE.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-KHYD3WXE.js";
 import {
   redactString
-} from "./chunk-SLSWPBK3.js";
+} from "./chunk-B5TYJO7V.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chunk-NNWWMGYK.js → chunk-QJUAQKH2.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.222";
+var VERSION = "0.4.224";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-5GTWZ4QF.js → chunk-QYQCCIBT.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   redactJson
-} from "./chunk-SLSWPBK3.js";
+} from "./chunk-B5TYJO7V.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chunk-Q3ZUDA6S.js → chunk-VT6NRDD2.js}

@@ -2,7 +2,7 @@
 import {
   HubAgent,
   isConverged
-} from "./chunk-NZ4X6GUC.js";
+} from "./chunk-3ARPAVNV.js";
 
 // src/hub/discuss.ts
 var DiscussionOrchestrator = class {

package/dist/{ci-IB7NWHZN.js → ci-UAQFOAMS.js}

@@ -3,14 +3,14 @@ import {
   CI_COMMENT_MARKER,
   countSeverity,
   runCi
-} from "./chunk-TNW22OUY.js";
-import "./chunk-VWTUYDZG.js";
+} from "./chunk-JDMFVRFG.js";
+import "./chunk-34RV4ZKA.js";
 import "./chunk-HLWUDRBO.js";
 import "./chunk-PUBCJF7E.js";
 import "./chunk-XPBEJB27.js";
-import "./chunk-UWUTLIOH.js";
+import "./chunk-35OPVVEK.js";
 import "./chunk-5ULLIOVC.js";
-import "./chunk-NNWWMGYK.js";
+import "./chunk-QJUAQKH2.js";
 import "./chunk-IW3Q7AE5.js";
 export {
   CI_COMMENT_MARKER,

package/dist/{ci-format-YLGZN3D4.js → ci-format-MNUHYUTO.js}

@@ -6,8 +6,8 @@ import {
   formatCiResult,
   formatCiSarif,
   normalizeCiThresholds
-} from "./chunk-VWTUYDZG.js";
-import "./chunk-NNWWMGYK.js";
+} from "./chunk-34RV4ZKA.js";
+import "./chunk-QJUAQKH2.js";
 export {
   DEFAULT_CI_THRESHOLDS,
   detectCiGateSignals,

package/dist/{constants-BOMLZEXC.js → constants-PGDTYD2R.js}

@@ -38,7 +38,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-NNWWMGYK.js";
+} from "./chunk-QJUAQKH2.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,

package/dist/{doctor-cli-2ND4LONW.js → doctor-cli-F6A3GOVY.js}

@@ -2,14 +2,14 @@
 import {
   formatDoctorReport,
   runDoctorCli
-} from "./chunk-VBRCWH55.js";
+} from "./chunk-6FEZAWH5.js";
 import "./chunk-PUBCJF7E.js";
-import "./chunk-SISFAT6W.js";
+import "./chunk-A2AVDSXJ.js";
 import "./chunk-XPBEJB27.js";
-import "./chunk-UWUTLIOH.js";
+import "./chunk-35OPVVEK.js";
 import "./chunk-5ULLIOVC.js";
 import "./chunk-HOSJZMQS.js";
-import "./chunk-NNWWMGYK.js";
+import "./chunk-QJUAQKH2.js";
 import "./chunk-IW3Q7AE5.js";
 export {
   formatDoctorReport,