jinzd-ai-cli 0.4.233 → 0.4.234

package/dist/index.js

@@ -14,7 +14,7 @@ import {
   scanProject,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-7KS3RGZ7.js";
+} from "./chunk-5VPRZMZB.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -52,7 +52,7 @@ import {
   theme,
   undoStack,
   updateMemoryApproval
-} from "./chunk-HX67JAK6.js";
+} from "./chunk-E5RLXMSU.js";
 import "./chunk-K3CF65QH.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -60,7 +60,7 @@ import "./chunk-BXP6YZ2P.js";
 import {
   SessionManager,
   getContentText
-} from "./chunk-ZWU7FWHO.js";
+} from "./chunk-JMP3LJC2.js";
 import {
   CostTracker
 } from "./chunk-YVMACMXW.js";
@@ -74,7 +74,7 @@ import {
   formatDoctorReport,
   loadContextFiles,
   writeCrashLog
-} from "./chunk-NXYXFRPA.js";
+} from "./chunk-5DTEEWYC.js";
 import {
   ProviderRegistry
 } from "./chunk-QYQI7ZWK.js";
@@ -94,7 +94,7 @@ import {
   trustHook,
   trustPlugin,
   untrustHook
-} from "./chunk-EZGZOK6E.js";
+} from "./chunk-II6RZRTF.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -116,7 +116,7 @@ import {
 } from "./chunk-O3XSFPYH.js";
 import {
   ConfigManager
-} from "./chunk-5PKNKJYP.js";
+} from "./chunk-L5PNAQ6O.js";
 import {
   AuthError,
   ProviderError,
@@ -130,7 +130,7 @@ import {
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
-import "./chunk-M4FW2NPU.js";
+import "./chunk-AFT6VFMI.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -149,18 +149,18 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-ACTO5C6K.js";
+} from "./chunk-3KTSJ2EL.js";
 import {
   buildChatIndex,
   clearChatIndex,
   getChatIndexStatus,
   searchChatMemory
-} from "./chunk-NVUCDUXE.js";
+} from "./chunk-5MYPIQ3Y.js";
 import "./chunk-KHYD3WXE.js";
 import {
   DEFAULT_PATTERNS,
   scanString
-} from "./chunk-B5TYJO7V.js";
+} from "./chunk-KCEO2XJ4.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
@@ -1821,7 +1821,7 @@ No tools match "${filter}".
           const { join: join7 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-UROQJXLY.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-DC4EXFSB.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2800,7 +2800,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-FLCVJ6TK.js");
+          const { executeTests } = await import("./run-tests-G5BNTMWQ.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -5954,7 +5954,7 @@ Session '${this.resumeSessionId}' not found.
     })();
     void (async () => {
       try {
-        const { getChatIndexStatus: getChatIndexStatus2, buildChatIndex: buildChatIndex2 } = await import("./chat-index-O56HDGFI.js");
+        const { getChatIndexStatus: getChatIndexStatus2, buildChatIndex: buildChatIndex2 } = await import("./chat-index-7HXBWQFH.js");
         const initial = getChatIndexStatus2();
         this.chatMemoryStatus = {
           exists: initial.exists,
@@ -7745,7 +7745,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-W2X3C6GJ.js");
+  const { startWebServer } = await import("./server-64WZVZZN.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7912,11 +7912,11 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-MZCDTJWB.js");
+  const { runUsageCli } = await import("./usage-T3HFMNNV.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-BY3FIV2B.js");
+  const { runDoctorCli } = await import("./doctor-cli-HKREND6Q.js");
   const argv = process.argv.slice(2);
   await runDoctorCli({
     json: !!options.json || argv.includes("--json"),
@@ -7925,7 +7925,7 @@ program.command("doctor").description("Health check: API keys, config, MCP, rece
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-WWNPYQ6G.js");
+    const batch = await import("./batch-T3FRX4B6.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7968,7 +7968,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-E6LZB72O.js");
+  const { startMcpServer } = await import("./server-EO6VQHKL.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7981,7 +7981,7 @@ program.command("pr <action> [target]").description("PR review helpers: review |
     console.error(`Unknown pr action: ${action}. Use review | security-review | summarize.`);
     process.exit(1);
   }
-  const { runPrCli } = await import("./pr-IJRUPR5C.js");
+  const { runPrCli } = await import("./pr-4VODJVRV.js");
   const result = await runPrCli({
     action,
     target,
@@ -8001,8 +8001,8 @@ program.command("pr <action> [target]").description("PR review helpers: review |
   process.exit(result.exitCode);
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number or URL; diff fetched via gh pr diff <value>", (v) => /^#?\d+$/.test(v) ? parseInt(v.replace(/^#/, ""), 10) : v).option("--base <ref>", "Base ref for git diff <ref>...HEAD (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").option("--json", "Output a structured JSON report").option("--markdown", "Output Markdown report (default)").option("--sarif", "Output SARIF 2.1.0 for code scanning artifacts").option("--fail-on-security-high", "Fail when the security review contains HIGH/CRITICAL findings (default)").option("--no-fail-on-security-high", "Do not fail on security HIGH/CRITICAL findings").option("--fail-on-test-failure", "Fail when the report mentions test failures (default)").option("--no-fail-on-test-failure", "Do not fail on test failure findings").option("--fail-on-lint-failure", "Fail when the report mentions lint/typecheck failures (default)").option("--no-fail-on-lint-failure", "Do not fail on lint/typecheck failure findings").action(async (options) => {
-  const { runCi } = await import("./ci-V5V3JSJC.js");
-  const { formatCiResult } = await import("./ci-format-XS7LKBO5.js");
+  const { runCi } = await import("./ci-GJ53GPLA.js");
+  const { formatCiResult } = await import("./ci-format-AXE4QCI6.js");
   const formats = [options.json, options.markdown, options.sarif].filter(Boolean).length;
   if (formats > 1) {
     console.error("Choose only one output format: --json, --markdown, or --sarif.");
@@ -8160,7 +8160,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     config.get("customProviders"),
     config.getConfigDir()
   );
-  const { startHub } = await import("./hub-L2QCRI5M.js");
+  const { startHub } = await import("./hub-LTTKRGZC.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{persist-I3JI27OK.js → persist-AMH5SQ4W.js}

@@ -2,9 +2,9 @@
 import {
   discussionToMessages,
   persistDiscussion
-} from "./chunk-4KM53GLG.js";
-import "./chunk-ZWU7FWHO.js";
-import "./chunk-B5TYJO7V.js";
+} from "./chunk-2QQKS56X.js";
+import "./chunk-JMP3LJC2.js";
+import "./chunk-KCEO2XJ4.js";
 import "./chunk-IW3Q7AE5.js";
 export {
   discussionToMessages,

package/dist/{pr-IJRUPR5C.js → pr-4VODJVRV.js}

@@ -2,8 +2,8 @@
 import {
   countSeverity,
   runCi
-} from "./chunk-FQSAK75P.js";
-import "./chunk-TJK7AU65.js";
+} from "./chunk-6MJMHHRK.js";
+import "./chunk-TAXIG7HH.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -15,11 +15,11 @@ import {
 import "./chunk-O3XSFPYH.js";
 import {
   ConfigManager
-} from "./chunk-5PKNKJYP.js";
+} from "./chunk-L5PNAQ6O.js";
 import "./chunk-5ULLIOVC.js";
 import {
   VERSION
-} from "./chunk-ACTO5C6K.js";
+} from "./chunk-3KTSJ2EL.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/cli/pr.ts

package/dist/{run-tests-FLCVJ6TK.js → run-tests-G5BNTMWQ.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-M4FW2NPU.js";
-import "./chunk-ACTO5C6K.js";
+} from "./chunk-AFT6VFMI.js";
+import "./chunk-3KTSJ2EL.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-NNXBS4EL.js → run-tests-QR2PYR2P.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-4OAV7QMB.js";
+} from "./chunk-ETJ5X6V7.js";
 export {
   executeTests,
   runTestsTool

package/dist/{server-W2X3C6GJ.js → server-64WZVZZN.js}

@@ -7,7 +7,7 @@ import {
 import "./chunk-3ARPAVNV.js";
 import {
   persistDiscussion
-} from "./chunk-4KM53GLG.js";
+} from "./chunk-2QQKS56X.js";
 import {
   AuthManager,
   TOKEN_EXPIRY_MS
@@ -23,7 +23,7 @@ import {
   scanDirTree,
   scanProject,
   setupProxy
-} from "./chunk-7KS3RGZ7.js";
+} from "./chunk-5VPRZMZB.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -67,7 +67,7 @@ import {
   truncateOutput,
   undoStack,
   updateMemoryApproval
-} from "./chunk-HX67JAK6.js";
+} from "./chunk-E5RLXMSU.js";
 import "./chunk-K3CF65QH.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -75,7 +75,7 @@ import "./chunk-BXP6YZ2P.js";
 import {
   SessionManager,
   getContentText
-} from "./chunk-ZWU7FWHO.js";
+} from "./chunk-JMP3LJC2.js";
 import {
   computeCost,
   formatCost
@@ -84,7 +84,7 @@ import {
   buildDoctorReport,
   formatDoctorReport,
   loadContextFiles
-} from "./chunk-NXYXFRPA.js";
+} from "./chunk-5DTEEWYC.js";
 import {
   ProviderRegistry
 } from "./chunk-QYQI7ZWK.js";
@@ -102,7 +102,7 @@ import {
   runTool,
   setPluginEnabled,
   trustPlugin
-} from "./chunk-EZGZOK6E.js";
+} from "./chunk-II6RZRTF.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -121,7 +121,7 @@ import {
 } from "./chunk-O3XSFPYH.js";
 import {
   ConfigManager
-} from "./chunk-5PKNKJYP.js";
+} from "./chunk-L5PNAQ6O.js";
 import "./chunk-5ULLIOVC.js";
 import {
   formatGitContextForPrompt,
@@ -129,7 +129,7 @@ import {
   getGitRoot
 } from "./chunk-HOSJZMQS.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-M4FW2NPU.js";
+import "./chunk-AFT6VFMI.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -146,12 +146,12 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-ACTO5C6K.js";
-import "./chunk-NVUCDUXE.js";
+} from "./chunk-3KTSJ2EL.js";
+import "./chunk-5MYPIQ3Y.js";
 import "./chunk-KHYD3WXE.js";
 import {
   scanString
-} from "./chunk-B5TYJO7V.js";
+} from "./chunk-KCEO2XJ4.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
@@ -1593,7 +1593,7 @@ async function handleSecurityReview(args, ctx) {
 async function handleTest(args, ctx) {
   ctx.send({ type: "info", message: "\u{1F9EA} Running tests..." });
   try {
-    const { executeTests } = await import("./run-tests-FLCVJ6TK.js");
+    const { executeTests } = await import("./run-tests-G5BNTMWQ.js");
     const argStr = args.join(" ").trim();
     let testArgs = {};
     if (argStr) {
@@ -3456,7 +3456,7 @@ ${entry.content}`;
       return;
     }
     try {
-      const { searchChatMemory, loadChatIndex } = await import("./chat-index-O56HDGFI.js");
+      const { searchChatMemory, loadChatIndex } = await import("./chat-index-7HXBWQFH.js");
       const loaded = loadChatIndex();
       if (!loaded || loaded.idx.chunks.length === 0) {
         this.send({ type: "memory_hits", query: q, hits: [], indexMissing: true });
@@ -3492,7 +3492,7 @@ ${entry.content}`;
   }
   async handleMemoryStatus() {
     try {
-      const { getChatIndexStatus } = await import("./chat-index-O56HDGFI.js");
+      const { getChatIndexStatus } = await import("./chat-index-7HXBWQFH.js");
       const s = getChatIndexStatus();
       this.send({
         type: "memory_status",
@@ -3517,7 +3517,7 @@ ${entry.content}`;
         type: "info",
         message: full ? "\u{1F9E0} Rebuilding chat memory index (this may take a while on first run \u2014 ~117 MB embedder)." : "\u{1F9E0} Refreshing chat memory index (incremental)\u2026"
       });
-      const { buildChatIndex } = await import("./chat-index-O56HDGFI.js");
+      const { buildChatIndex } = await import("./chat-index-7HXBWQFH.js");
       const stats = await buildChatIndex({
         full,
         onProgress: (p) => {

package/dist/{server-E6LZB72O.js → server-EO6VQHKL.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-HX67JAK6.js";
+} from "./chunk-E5RLXMSU.js";
 import "./chunk-K3CF65QH.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
 import "./chunk-BXP6YZ2P.js";
 import {
   runTool
-} from "./chunk-EZGZOK6E.js";
+} from "./chunk-II6RZRTF.js";
 import {
   getDangerLevel,
   schemaToJsonSchema
@@ -16,13 +16,13 @@ import {
 import "./chunk-5ULLIOVC.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-M4FW2NPU.js";
+import "./chunk-AFT6VFMI.js";
 import {
   VERSION
-} from "./chunk-ACTO5C6K.js";
-import "./chunk-NVUCDUXE.js";
+} from "./chunk-3KTSJ2EL.js";
+import "./chunk-5MYPIQ3Y.js";
 import "./chunk-KHYD3WXE.js";
-import "./chunk-B5TYJO7V.js";
+import "./chunk-KCEO2XJ4.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/mcp/server.ts

package/dist/{task-orchestrator-W55VKYTC.js → task-orchestrator-4INCZMLT.js}

@@ -3,14 +3,14 @@ import {
   ToolRegistry,
   googleSearchContext,
   truncateOutput
-} from "./chunk-HX67JAK6.js";
+} from "./chunk-E5RLXMSU.js";
 import "./chunk-K3CF65QH.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
 import "./chunk-BXP6YZ2P.js";
 import {
   runTool
-} from "./chunk-EZGZOK6E.js";
+} from "./chunk-II6RZRTF.js";
 import {
   getDangerLevel,
   runLeanAgentLoop
@@ -18,13 +18,13 @@ import {
 import "./chunk-5ULLIOVC.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-M4FW2NPU.js";
+import "./chunk-AFT6VFMI.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-ACTO5C6K.js";
-import "./chunk-NVUCDUXE.js";
+} from "./chunk-3KTSJ2EL.js";
+import "./chunk-5MYPIQ3Y.js";
 import "./chunk-KHYD3WXE.js";
-import "./chunk-B5TYJO7V.js";
+import "./chunk-KCEO2XJ4.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{usage-MZCDTJWB.js → usage-T3HFMNNV.js}

@@ -8,9 +8,9 @@ import {
 } from "./chunk-E44DTERW.js";
 import {
   ConfigManager
-} from "./chunk-5PKNKJYP.js";
+} from "./chunk-L5PNAQ6O.js";
 import "./chunk-5ULLIOVC.js";
-import "./chunk-ACTO5C6K.js";
+import "./chunk-3KTSJ2EL.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/cli/usage.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.233",
+  "version": "0.4.234",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",

package/dist/chunk-B5TYJO7V.js

@@ -1,123 +0,0 @@
-#!/usr/bin/env node
-
-// src/security/redactor.ts
-var DEFAULT_PATTERNS = [
-  // password: xxx / password = xxx / password="xxx"
-  // Covers YAML / JSON / shell-ish / env-file forms.
-  { kind: "password", regex: /\b(password|passwd|pwd)\s*[:=]\s*["']?([^\s"',;{}]{4,200})["']?/gi },
-  // PGPASSWORD=xxx (explicit bash env-var form, separate rule because no quotes usually)
-  { kind: "pgpassword-env", regex: /\b(PGPASSWORD)=([^\s"']{4,200})/g },
-  // JDBC/PG/MySQL/Mongo connection strings with inline credentials
-  // postgresql://user:pass@host/db → redact pass
-  { kind: "db-uri-password", regex: /(\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp|mssql):\/\/[^:\s]+:)([^@\s]+)(@)/gi },
-  // Anthropic API keys
-  { kind: "anthropic-key", regex: /(sk-ant-[a-zA-Z0-9_-]{90,})/g },
-  // L6 (v0.4.108): Zhipu / GLM API keys — `<24+ hex/base64-ish>.<32+>`
-  // Two segments separated by a dot, each safely identifiable by length
-  // and char class. Conservative on the lower bound so we don't eat
-  // version strings like `1.0.0` or filenames.
-  { kind: "zhipu-key", regex: /\b([a-zA-Z0-9]{24,}\.[a-zA-Z0-9]{32,})\b/g },
-  // OpenAI / generic sk- keys — requires length ≥32 to avoid eating short identifiers
-  { kind: "openai-key", regex: /(sk-(?:proj-)?[a-zA-Z0-9_-]{32,})/g },
-  // GitHub personal access tokens
-  { kind: "github-pat", regex: /\b(ghp_[a-zA-Z0-9]{36})\b/g },
-  { kind: "github-oauth", regex: /\b(gho_[a-zA-Z0-9]{36})\b/g },
-  { kind: "github-install", regex: /\b(ghs_[a-zA-Z0-9]{36})\b/g },
-  // Slack tokens
-  { kind: "slack-bot", regex: /\b(xoxb-\d+-\d+-[a-zA-Z0-9]+)\b/g },
-  { kind: "slack-user", regex: /\b(xoxp-\d+-\d+-\d+-[a-zA-Z0-9]+)\b/g },
-  // AWS access key IDs (AKIA...) and secret access keys are context-dependent;
-  // we only catch the ID because secret key alone is indistinguishable from random base64.
-  { kind: "aws-access-key-id", regex: /\b(AKIA[0-9A-Z]{16})\b/g },
-  // Google API keys
-  { kind: "google-api-key", regex: /\b(AIza[0-9A-Za-z_-]{35})\b/g },
-  // Generic "api_key": "..." / "apiKey": "..." / api-key=xxx
-  { kind: "api-key", regex: /\b(api[_-]?key)\s*[:=]\s*["']?([a-zA-Z0-9_\-.]{16,200})["']?/gi },
-  // Generic token: xxx (only when value looks token-shaped; avoids eating human prose)
-  { kind: "token", regex: /\b(token|access[_-]?token|bearer[_-]?token)\s*[:=]\s*["']?([a-zA-Z0-9_\-.]{20,300})["']?/gi },
-  // Bearer <token> in Authorization headers
-  { kind: "bearer", regex: /\b(Authorization:\s*Bearer\s+)([a-zA-Z0-9_\-.=]{20,500})/g },
-  // Private key PEM blocks — catch the header+footer together
-  // P2-PERF-02: PEM bodies use strict Base64 + =\n — narrowed char class avoids backtracking
-  { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[ \t\n\r]*[A-Za-z0-9+/=\n\r-]*[ \t\n\r]*-----END [A-Z ]*PRIVATE KEY-----/g }
-];
-var MAX_CUSTOM = 32;
-var MAX_PATTERN_LEN = 500;
-var SUSPICIOUS_REDOS = /\([^)]*[+*][^)]*\)\s*[+*{]/;
-var MAX_REDACT_INPUT = 512e3;
-function render(placeholder, kind) {
-  return placeholder.replace("{kind}", kind);
-}
-function redactString(input, options) {
-  if (!options.enabled || !input) return { redacted: input, hits: [] };
-  if (input.length > MAX_REDACT_INPUT) return { redacted: input, hits: [] };
-  const placeholder = options.placeholder ?? "[REDACTED:{kind}]";
-  const customSrcs = (options.customRegexes ?? []).slice(0, MAX_CUSTOM);
-  const patterns = [
-    ...options.patterns ?? DEFAULT_PATTERNS,
-    ...customSrcs.flatMap((src, i) => {
-      if (typeof src !== "string" || src.length === 0 || src.length > MAX_PATTERN_LEN) return [];
-      try {
-        const flags = src.match(/^\/.*\/([gimsuy]*)$/)?.[1] ?? "";
-        const body = src.replace(/^\/(.*)\/[gimsuy]*$/, "$1");
-        if (SUSPICIOUS_REDOS.test(body)) return [];
-        const regex = new RegExp(body, flags.includes("g") ? flags : flags + "g");
-        return [{ kind: `custom-${i}`, regex }];
-      } catch {
-        return [];
-      }
-    })
-  ];
-  let redacted = input;
-  const hits = [];
-  for (const { kind, regex } of patterns) {
-    const rx = new RegExp(regex.source, regex.flags);
-    const captureCount = new RegExp(rx.source + "|").exec("").length - 1;
-    redacted = redacted.replace(rx, (...args) => {
-      const match = args[0];
-      const g1 = captureCount >= 1 ? args[1] : void 0;
-      const g2 = captureCount >= 2 ? args[2] : void 0;
-      const offset = args[1 + captureCount];
-      if (captureCount >= 2 && typeof g2 === "string") {
-        hits.push({ kind, start: offset + (g1?.length ?? 0), length: g2.length, secret: g2 });
-        return `${g1}${render(placeholder, kind)}`;
-      }
-      hits.push({ kind, start: offset, length: match.length, secret: g1 ?? match });
-      return render(placeholder, kind);
-    });
-  }
-  return { redacted, hits };
-}
-function redactJson(value, options) {
-  if (!options.enabled) return { value, hits: [] };
-  const allHits = [];
-  function walk(v) {
-    if (typeof v === "string") {
-      const r = redactString(v, options);
-      allHits.push(...r.hits);
-      return r.redacted;
-    }
-    if (Array.isArray(v)) return v.map(walk);
-    if (v && typeof v === "object") {
-      const out = {};
-      for (const [k, vv] of Object.entries(v)) {
-        out[k] = walk(vv);
-      }
-      return out;
-    }
-    return v;
-  }
-  const redacted = walk(value);
-  return { value: redacted, hits: allHits };
-}
-function scanString(input, options) {
-  const { hits } = redactString(input, { ...options, enabled: true });
-  return hits;
-}
-
-export {
-  DEFAULT_PATTERNS,
-  redactString,
-  redactJson,
-  scanString
-};