opencode-hashline 1.3.1 → 1.3.3

package/dist/{chunk-VSVVWPET.js → chunk-2FSVSE7C.js}

@@ -4,7 +4,7 @@ import {
   resolveConfig,
   shouldExclude,
   stripHashes
-} from "./chunk-GKXY5ZBM.js";
+} from "./chunk-C323JLG3.js";
 
 // src/hooks.ts
 import { appendFileSync } from "fs";
@@ -12,18 +12,23 @@ import { join } from "path";
 import { homedir } from "os";
 var DEBUG_LOG = join(homedir(), ".config", "opencode", "hashline-debug.log");
 var MAX_PROCESSED_IDS = 1e4;
-function createBoundedSet(maxSize) {
-  const set = /* @__PURE__ */ new Set();
-  const originalAdd = set.add.bind(set);
-  set.add = (value) => {
-    if (set.size >= maxSize) {
-      const first = set.values().next().value;
-      if (first !== void 0) set.delete(first);
+var BoundedSet = class {
+  constructor(maxSize) {
+    this.maxSize = maxSize;
+  }
+  maxSize;
+  set = /* @__PURE__ */ new Set();
+  has(value) {
+    return this.set.has(value);
+  }
+  add(value) {
+    if (this.set.size >= this.maxSize) {
+      const first = this.set.values().next().value;
+      if (first !== void 0) this.set.delete(first);
     }
-    return originalAdd(value);
-  };
-  return set;
-}
+    this.set.add(value);
+  }
+};
 var debugEnabled = false;
 function setDebug(enabled) {
   debugEnabled = enabled;
@@ -58,7 +63,7 @@ function createFileReadAfterHook(cache, config) {
   const resolved = config ?? resolveConfig();
   const hashLen = resolved.hashLength || 0;
   const prefix = resolved.prefix;
-  const processedCallIds = createBoundedSet(MAX_PROCESSED_IDS);
+  const processedCallIds = new BoundedSet(MAX_PROCESSED_IDS);
   return async (input, output) => {
     debug("tool.execute.after:", input.tool, "args:", input.args);
     if (input.callID) {
@@ -67,6 +72,8 @@ function createFileReadAfterHook(cache, config) {
         return;
       }
       processedCallIds.add(input.callID);
+    } else {
+      debug("no callID \u2014 deduplication disabled for this call");
     }
     if (!isFileReadTool(input.tool, input.args)) {
       debug("skipped: not a file-read tool");
@@ -105,13 +112,16 @@ function createFileReadAfterHook(cache, config) {
 function createFileEditBeforeHook(config) {
   const resolved = config ?? resolveConfig();
   const prefix = resolved.prefix;
-  const processedCallIds = createBoundedSet(MAX_PROCESSED_IDS);
+  const processedCallIds = new BoundedSet(MAX_PROCESSED_IDS);
   return async (input, output) => {
     if (input.callID) {
       if (processedCallIds.has(input.callID)) {
+        debug("skipped: duplicate callID (edit)", input.callID);
         return;
       }
       processedCallIds.add(input.callID);
+    } else {
+      debug("no callID \u2014 deduplication disabled for this edit call");
     }
     const toolName = input.tool.toLowerCase();
     const isFileEdit = FILE_EDIT_TOOLS.some(

package/dist/{chunk-GKXY5ZBM.js → chunk-C323JLG3.js}

@@ -204,6 +204,7 @@ function formatFileWithHashes(content, hashLen, prefix, includeFileRev) {
   for (let idx = 0; idx < lines.length; idx++) {
     hashes[idx] = computeLineHash(idx, lines[idx], effectiveLen);
   }
+  let dirtyIndices = null;
   let hasCollisions = true;
   while (hasCollisions) {
     hasCollisions = false;
@@ -217,16 +218,29 @@ function formatFileWithHashes(content, hashLen, prefix, includeFileRev) {
         seen.set(h, [idx]);
       }
     }
+    const nextDirty = /* @__PURE__ */ new Set();
     for (const [, group] of seen) {
       if (group.length < 2) continue;
+      if (dirtyIndices !== null && !group.some((idx) => dirtyIndices.has(idx))) continue;
       for (const idx of group) {
         const newLen = Math.min(hashLens[idx] + 1, 8);
         if (newLen === hashLens[idx]) continue;
         hashLens[idx] = newLen;
         hashes[idx] = computeLineHash(idx, lines[idx], newLen);
+        nextDirty.add(idx);
         hasCollisions = true;
       }
     }
+    dirtyIndices = nextDirty;
+  }
+  const finalSeen = /* @__PURE__ */ new Map();
+  for (let idx = 0; idx < lines.length; idx++) {
+    const existing = finalSeen.get(hashes[idx]);
+    if (existing !== void 0) {
+      hashes[idx] = `${hashes[idx]}${idx.toString(16)}`;
+    } else {
+      finalSeen.set(hashes[idx], idx);
+    }
   }
   const annotatedLines = lines.map((line, idx) => {
     return `${effectivePrefix}${idx + 1}:${hashes[idx]}|${line}`;
@@ -241,12 +255,16 @@ var stripRegexCache = /* @__PURE__ */ new Map();
 function stripHashes(content, prefix) {
   const effectivePrefix = prefix === void 0 ? DEFAULT_PREFIX : prefix === false ? "" : prefix;
   const escapedPrefix = effectivePrefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  let hashLinePattern = stripRegexCache.get(escapedPrefix);
-  if (!hashLinePattern) {
-    hashLinePattern = new RegExp(`^([+ \\-])?${escapedPrefix}\\d+:[0-9a-f]{2,8}\\|`);
-    stripRegexCache.set(escapedPrefix, hashLinePattern);
+  let cached = stripRegexCache.get(escapedPrefix);
+  if (!cached) {
+    cached = {
+      hashLine: new RegExp(`^([+ \\-])?${escapedPrefix}\\d+:[0-9a-f]{2,8}\\|`),
+      rev: new RegExp(`^${escapedPrefix}REV:[0-9a-f]{8}$`)
+    };
+    stripRegexCache.set(escapedPrefix, cached);
   }
-  const revPattern = new RegExp(`^${escapedPrefix}REV:[0-9a-f]{8}$`);
+  const hashLinePattern = cached.hashLine;
+  const revPattern = cached.rev;
   const lineEnding = detectLineEnding(content);
   const normalized = lineEnding === "\r\n" ? content.replace(/\r\n/g, "\n") : content;
   const result = normalized.split("\n").filter((line) => !revPattern.test(line)).map((line) => {
@@ -395,10 +413,10 @@ function resolveRange(startRef, endRef, content, hashLen, safeReapply) {
     content: rangeLines.join(lineEnding)
   };
 }
-function replaceRange(startRef, endRef, content, replacement, hashLen) {
+function replaceRange(startRef, endRef, content, replacement, hashLen, safeReapply) {
   const lineEnding = detectLineEnding(content);
   const normalized = lineEnding === "\r\n" ? content.replace(/\r\n/g, "\n") : content;
-  const range = resolveRange(startRef, endRef, normalized, hashLen);
+  const range = resolveRange(startRef, endRef, normalized, hashLen, safeReapply);
   const lines = normalized.split("\n");
   const before = lines.slice(0, range.startLine - 1);
   const after = lines.slice(range.endLine);
@@ -568,9 +586,8 @@ function matchesGlob(filePath, pattern) {
 function shouldExclude(filePath, patterns) {
   return patterns.some((pattern) => matchesGlob(filePath, pattern));
 }
-var textEncoder = new TextEncoder();
 function getByteLength(content) {
-  return textEncoder.encode(content).length;
+  return Buffer.byteLength(content, "utf-8");
 }
 function detectLineEnding(content) {
   return content.includes("\r\n") ? "\r\n" : "\n";

package/dist/{hashline-37RYBX5A.js → hashline-DDPVX355.js}

@@ -25,7 +25,7 @@ import {
   stripHashes,
   verifyFileRev,
   verifyHash
-} from "./chunk-GKXY5ZBM.js";
+} from "./chunk-C323JLG3.js";
 export {
   DEFAULT_CONFIG,
   DEFAULT_EXCLUDE_PATTERNS,

package/dist/{hashline-A7k2yn3G.d.ts → hashline-DWndArr4.d.cts}

@@ -262,7 +262,7 @@ declare function resolveRange(startRef: string, endRef: string, content: string,
  * @param hashLen - override hash length (0 or undefined = use hash.length from ref)
  * @returns new file content with the range replaced
  */
-declare function replaceRange(startRef: string, endRef: string, content: string, replacement: string, hashLen?: number): string;
+declare function replaceRange(startRef: string, endRef: string, content: string, replacement: string, hashLen?: number, safeReapply?: boolean): string;
 /**
  * Apply a hash-aware edit operation directly against file content.
  *
@@ -308,6 +308,11 @@ declare function matchesGlob(filePath: string, pattern: string): boolean;
  * Check if a file path should be excluded based on config patterns.
  */
 declare function shouldExclude(filePath: string, patterns: string[]): boolean;
+/**
+ * Get the UTF-8 byte length of a string.
+ * Uses TextEncoder for accurate UTF-8 byte counting.
+ * This correctly handles multi-byte characters (Cyrillic, CJK, emoji, etc.).
+ */
 declare function getByteLength(content: string): number;
 /**
  * A Hashline instance with custom configuration.

package/dist/{hashline-A7k2yn3G.d.cts → hashline-DWndArr4.d.ts}

@@ -262,7 +262,7 @@ declare function resolveRange(startRef: string, endRef: string, content: string,
  * @param hashLen - override hash length (0 or undefined = use hash.length from ref)
  * @returns new file content with the range replaced
  */
-declare function replaceRange(startRef: string, endRef: string, content: string, replacement: string, hashLen?: number): string;
+declare function replaceRange(startRef: string, endRef: string, content: string, replacement: string, hashLen?: number, safeReapply?: boolean): string;
 /**
  * Apply a hash-aware edit operation directly against file content.
  *
@@ -308,6 +308,11 @@ declare function matchesGlob(filePath: string, pattern: string): boolean;
  * Check if a file path should be excluded based on config patterns.
  */
 declare function shouldExclude(filePath: string, patterns: string[]): boolean;
+/**
+ * Get the UTF-8 byte length of a string.
+ * Uses TextEncoder for accurate UTF-8 byte counting.
+ * This correctly handles multi-byte characters (Cyrillic, CJK, emoji, etc.).
+ */
 declare function getByteLength(content: string): number;
 /**
  * A Hashline instance with custom configuration.

package/dist/opencode-hashline.cjs

@@ -159,6 +159,7 @@ function formatFileWithHashes(content, hashLen, prefix, includeFileRev) {
   for (let idx = 0; idx < lines.length; idx++) {
     hashes[idx] = computeLineHash(idx, lines[idx], effectiveLen);
   }
+  let dirtyIndices = null;
   let hasCollisions = true;
   while (hasCollisions) {
     hasCollisions = false;
@@ -172,16 +173,29 @@ function formatFileWithHashes(content, hashLen, prefix, includeFileRev) {
         seen.set(h, [idx]);
       }
     }
+    const nextDirty = /* @__PURE__ */ new Set();
     for (const [, group] of seen) {
       if (group.length < 2) continue;
+      if (dirtyIndices !== null && !group.some((idx) => dirtyIndices.has(idx))) continue;
       for (const idx of group) {
         const newLen = Math.min(hashLens[idx] + 1, 8);
         if (newLen === hashLens[idx]) continue;
         hashLens[idx] = newLen;
         hashes[idx] = computeLineHash(idx, lines[idx], newLen);
+        nextDirty.add(idx);
         hasCollisions = true;
       }
     }
+    dirtyIndices = nextDirty;
+  }
+  const finalSeen = /* @__PURE__ */ new Map();
+  for (let idx = 0; idx < lines.length; idx++) {
+    const existing = finalSeen.get(hashes[idx]);
+    if (existing !== void 0) {
+      hashes[idx] = `${hashes[idx]}${idx.toString(16)}`;
+    } else {
+      finalSeen.set(hashes[idx], idx);
+    }
   }
   const annotatedLines = lines.map((line, idx) => {
     return `${effectivePrefix}${idx + 1}:${hashes[idx]}|${line}`;
@@ -195,12 +209,16 @@ function formatFileWithHashes(content, hashLen, prefix, includeFileRev) {
 function stripHashes(content, prefix) {
   const effectivePrefix = prefix === void 0 ? DEFAULT_PREFIX : prefix === false ? "" : prefix;
   const escapedPrefix = effectivePrefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  let hashLinePattern = stripRegexCache.get(escapedPrefix);
-  if (!hashLinePattern) {
-    hashLinePattern = new RegExp(`^([+ \\-])?${escapedPrefix}\\d+:[0-9a-f]{2,8}\\|`);
-    stripRegexCache.set(escapedPrefix, hashLinePattern);
+  let cached = stripRegexCache.get(escapedPrefix);
+  if (!cached) {
+    cached = {
+      hashLine: new RegExp(`^([+ \\-])?${escapedPrefix}\\d+:[0-9a-f]{2,8}\\|`),
+      rev: new RegExp(`^${escapedPrefix}REV:[0-9a-f]{8}$`)
+    };
+    stripRegexCache.set(escapedPrefix, cached);
   }
-  const revPattern = new RegExp(`^${escapedPrefix}REV:[0-9a-f]{8}$`);
+  const hashLinePattern = cached.hashLine;
+  const revPattern = cached.rev;
   const lineEnding = detectLineEnding(content);
   const normalized = lineEnding === "\r\n" ? content.replace(/\r\n/g, "\n") : content;
   const result = normalized.split("\n").filter((line) => !revPattern.test(line)).map((line) => {
@@ -349,10 +367,10 @@ function resolveRange(startRef, endRef, content, hashLen, safeReapply) {
     content: rangeLines.join(lineEnding)
   };
 }
-function replaceRange(startRef, endRef, content, replacement, hashLen) {
+function replaceRange(startRef, endRef, content, replacement, hashLen, safeReapply) {
   const lineEnding = detectLineEnding(content);
   const normalized = lineEnding === "\r\n" ? content.replace(/\r\n/g, "\n") : content;
-  const range = resolveRange(startRef, endRef, normalized, hashLen);
+  const range = resolveRange(startRef, endRef, normalized, hashLen, safeReapply);
   const lines = normalized.split("\n");
   const before = lines.slice(0, range.startLine - 1);
   const after = lines.slice(range.endLine);
@@ -463,7 +481,7 @@ function shouldExclude(filePath, patterns) {
   return patterns.some((pattern) => matchesGlob(filePath, pattern));
 }
 function getByteLength(content) {
-  return textEncoder.encode(content).length;
+  return Buffer.byteLength(content, "utf-8");
 }
 function detectLineEnding(content) {
   return content.includes("\r\n") ? "\r\n" : "\n";
@@ -531,7 +549,7 @@ function createHashline(config) {
     }
   };
 }
-var import_picomatch, DEFAULT_EXCLUDE_PATTERNS, DEFAULT_PREFIX, DEFAULT_CONFIG, HashlineError, modulusCache, stripRegexCache, HashlineCache, globMatcherCache, textEncoder;
+var import_picomatch, DEFAULT_EXCLUDE_PATTERNS, DEFAULT_PREFIX, DEFAULT_CONFIG, HashlineError, modulusCache, stripRegexCache, HashlineCache, globMatcherCache;
 var init_hashline = __esm({
   "src/hashline.ts"() {
     "use strict";
@@ -702,7 +720,6 @@ var init_hashline = __esm({
       }
     };
     globMatcherCache = /* @__PURE__ */ new Map();
-    textEncoder = new TextEncoder();
   }
 });
 
@@ -711,7 +728,8 @@ var src_exports = {};
 __export(src_exports, {
   HashlinePlugin: () => HashlinePlugin,
   createHashlinePlugin: () => createHashlinePlugin,
-  default: () => src_default
+  default: () => src_default,
+  sanitizeConfig: () => sanitizeConfig
 });
 module.exports = __toCommonJS(src_exports);
 var import_fs3 = require("fs");
@@ -727,18 +745,23 @@ var import_os = require("os");
 init_hashline();
 var DEBUG_LOG = (0, import_path.join)((0, import_os.homedir)(), ".config", "opencode", "hashline-debug.log");
 var MAX_PROCESSED_IDS = 1e4;
-function createBoundedSet(maxSize) {
-  const set = /* @__PURE__ */ new Set();
-  const originalAdd = set.add.bind(set);
-  set.add = (value) => {
-    if (set.size >= maxSize) {
-      const first = set.values().next().value;
-      if (first !== void 0) set.delete(first);
+var BoundedSet = class {
+  constructor(maxSize) {
+    this.maxSize = maxSize;
+  }
+  maxSize;
+  set = /* @__PURE__ */ new Set();
+  has(value) {
+    return this.set.has(value);
+  }
+  add(value) {
+    if (this.set.size >= this.maxSize) {
+      const first = this.set.values().next().value;
+      if (first !== void 0) this.set.delete(first);
     }
-    return originalAdd(value);
-  };
-  return set;
-}
+    this.set.add(value);
+  }
+};
 var debugEnabled = false;
 function setDebug(enabled) {
   debugEnabled = enabled;
@@ -773,7 +796,7 @@ function createFileReadAfterHook(cache, config) {
   const resolved = config ?? resolveConfig();
   const hashLen = resolved.hashLength || 0;
   const prefix = resolved.prefix;
-  const processedCallIds = createBoundedSet(MAX_PROCESSED_IDS);
+  const processedCallIds = new BoundedSet(MAX_PROCESSED_IDS);
   return async (input, output) => {
     debug("tool.execute.after:", input.tool, "args:", input.args);
     if (input.callID) {
@@ -782,6 +805,8 @@ function createFileReadAfterHook(cache, config) {
         return;
       }
       processedCallIds.add(input.callID);
+    } else {
+      debug("no callID \u2014 deduplication disabled for this call");
     }
     if (!isFileReadTool(input.tool, input.args)) {
       debug("skipped: not a file-read tool");
@@ -820,13 +845,16 @@ function createFileReadAfterHook(cache, config) {
 function createFileEditBeforeHook(config) {
   const resolved = config ?? resolveConfig();
   const prefix = resolved.prefix;
-  const processedCallIds = createBoundedSet(MAX_PROCESSED_IDS);
+  const processedCallIds = new BoundedSet(MAX_PROCESSED_IDS);
   return async (input, output) => {
     if (input.callID) {
       if (processedCallIds.has(input.callID)) {
+        debug("skipped: duplicate callID (edit)", input.callID);
         return;
       }
       processedCallIds.add(input.callID);
+    } else {
+      debug("no callID \u2014 deduplication disabled for this edit call");
     }
     const toolName = input.tool.toLowerCase();
     const isFileEdit = FILE_EDIT_TOOLS.some(
@@ -1110,9 +1138,7 @@ function sanitizeConfig(raw) {
   const r = raw;
   const result = {};
   if (Array.isArray(r.exclude)) {
-    result.exclude = r.exclude.filter(
-      (p) => typeof p === "string" && p.length <= 512
-    );
+    result.exclude = r.exclude.filter((p) => typeof p === "string" && p.length <= 512).slice(0, 1e3);
   }
   if (typeof r.maxFileSize === "number" && Number.isFinite(r.maxFileSize) && r.maxFileSize >= 0) {
     result.maxFileSize = r.maxFileSize;
@@ -1164,14 +1190,13 @@ function loadConfig(projectDir, userConfig) {
 }
 function createHashlinePlugin(userConfig) {
   return async (input) => {
-    const projectDir = input.directory;
-    const worktree = input.worktree;
+    const { directory: projectDir, worktree } = input;
     const fileConfig = loadConfig(projectDir, userConfig);
     const config = resolveConfig(fileConfig);
     const cache = new HashlineCache(config.cacheSize);
     setDebug(config.debug);
-    const { appendFileSync: writeLog } = await import("fs");
     const debugLog = (0, import_path3.join)((0, import_os2.homedir)(), ".config", "opencode", "hashline-debug.log");
+    const writeLog = import_fs3.appendFileSync;
     if (config.debug) {
       try {
         writeLog(debugLog, `[${(/* @__PURE__ */ new Date()).toISOString()}] plugin loaded, prefix: ${JSON.stringify(config.prefix)}, maxFileSize: ${config.maxFileSize}, projectDir: ${projectDir}
@@ -1264,5 +1289,6 @@ var src_default = HashlinePlugin;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   HashlinePlugin,
-  createHashlinePlugin
+  createHashlinePlugin,
+  sanitizeConfig
 });

package/dist/opencode-hashline.d.cts

@@ -1,6 +1,6 @@
 import { Plugin } from '@opencode-ai/plugin';
-import { H as HashlineConfig } from './hashline-A7k2yn3G.cjs';
-export { C as CandidateLine, a as HashEditInput, b as HashEditOperation, c as HashEditResult, d as HashlineErrorCode, e as HashlineInstance, R as ResolvedRange, V as VerifyHashResult } from './hashline-A7k2yn3G.cjs';
+import { H as HashlineConfig } from './hashline-DWndArr4.cjs';
+export { C as CandidateLine, a as HashEditInput, b as HashEditOperation, c as HashEditResult, d as HashlineErrorCode, e as HashlineInstance, R as ResolvedRange, V as VerifyHashResult } from './hashline-DWndArr4.cjs';
 
 /**
  * opencode-hashline — Hashline plugin for OpenCode
@@ -14,6 +14,13 @@ export { C as CandidateLine, a as HashEditInput, b as HashEditOperation, c as Ha
  * constants, import from "opencode-hashline/utils".
  */
 
+/**
+ * Sanitize and validate a raw parsed config object.
+ * Accepts only known keys with expected types; silently drops invalid values.
+ * This prevents prototype pollution, type confusion, and prompt injection via
+ * a malicious or hand-crafted config file.
+ */
+declare function sanitizeConfig(raw: unknown): HashlineConfig;
 /**
  * Create a Hashline plugin instance with optional user configuration.
  *
@@ -45,4 +52,4 @@ declare function createHashlinePlugin(userConfig?: HashlineConfig): Plugin;
  */
 declare const HashlinePlugin: Plugin;
 
-export { HashlineConfig, HashlinePlugin, createHashlinePlugin, HashlinePlugin as default };
+export { HashlineConfig, HashlinePlugin, createHashlinePlugin, HashlinePlugin as default, sanitizeConfig };

package/dist/opencode-hashline.d.ts

@@ -1,6 +1,6 @@
 import { Plugin } from '@opencode-ai/plugin';
-import { H as HashlineConfig } from './hashline-A7k2yn3G.js';
-export { C as CandidateLine, a as HashEditInput, b as HashEditOperation, c as HashEditResult, d as HashlineErrorCode, e as HashlineInstance, R as ResolvedRange, V as VerifyHashResult } from './hashline-A7k2yn3G.js';
+import { H as HashlineConfig } from './hashline-DWndArr4.js';
+export { C as CandidateLine, a as HashEditInput, b as HashEditOperation, c as HashEditResult, d as HashlineErrorCode, e as HashlineInstance, R as ResolvedRange, V as VerifyHashResult } from './hashline-DWndArr4.js';
 
 /**
  * opencode-hashline — Hashline plugin for OpenCode
@@ -14,6 +14,13 @@ export { C as CandidateLine, a as HashEditInput, b as HashEditOperation, c as Ha
  * constants, import from "opencode-hashline/utils".
  */
 
+/**
+ * Sanitize and validate a raw parsed config object.
+ * Accepts only known keys with expected types; silently drops invalid values.
+ * This prevents prototype pollution, type confusion, and prompt injection via
+ * a malicious or hand-crafted config file.
+ */
+declare function sanitizeConfig(raw: unknown): HashlineConfig;
 /**
  * Create a Hashline plugin instance with optional user configuration.
  *
@@ -45,4 +52,4 @@ declare function createHashlinePlugin(userConfig?: HashlineConfig): Plugin;
  */
 declare const HashlinePlugin: Plugin;
 
-export { HashlineConfig, HashlinePlugin, createHashlinePlugin, HashlinePlugin as default };
+export { HashlineConfig, HashlinePlugin, createHashlinePlugin, HashlinePlugin as default, sanitizeConfig };

package/dist/opencode-hashline.js

@@ -3,17 +3,17 @@ import {
   createFileReadAfterHook,
   createSystemPromptHook,
   setDebug
-} from "./chunk-VSVVWPET.js";
+} from "./chunk-2FSVSE7C.js";
 import {
   HashlineCache,
   HashlineError,
   applyHashEdit,
   getByteLength,
   resolveConfig
-} from "./chunk-GKXY5ZBM.js";
+} from "./chunk-C323JLG3.js";
 
 // src/index.ts
-import { readFileSync as readFileSync2, realpathSync as realpathSync2, writeFileSync as writeFileSync2, mkdtempSync, openSync, closeSync, rmSync, constants as fsConstants } from "fs";
+import { readFileSync as readFileSync2, realpathSync as realpathSync2, writeFileSync as writeFileSync2, appendFileSync, mkdtempSync, openSync, closeSync, rmSync, constants as fsConstants } from "fs";
 import { join, resolve as resolve2, sep as sep2 } from "path";
 import { homedir, tmpdir } from "os";
 import { randomBytes } from "crypto";
@@ -173,9 +173,7 @@ function sanitizeConfig(raw) {
   const r = raw;
   const result = {};
   if (Array.isArray(r.exclude)) {
-    result.exclude = r.exclude.filter(
-      (p) => typeof p === "string" && p.length <= 512
-    );
+    result.exclude = r.exclude.filter((p) => typeof p === "string" && p.length <= 512).slice(0, 1e3);
   }
   if (typeof r.maxFileSize === "number" && Number.isFinite(r.maxFileSize) && r.maxFileSize >= 0) {
     result.maxFileSize = r.maxFileSize;
@@ -227,14 +225,13 @@ function loadConfig(projectDir, userConfig) {
 }
 function createHashlinePlugin(userConfig) {
   return async (input) => {
-    const projectDir = input.directory;
-    const worktree = input.worktree;
+    const { directory: projectDir, worktree } = input;
     const fileConfig = loadConfig(projectDir, userConfig);
     const config = resolveConfig(fileConfig);
     const cache = new HashlineCache(config.cacheSize);
     setDebug(config.debug);
-    const { appendFileSync: writeLog } = await import("fs");
     const debugLog = join(homedir(), ".config", "opencode", "hashline-debug.log");
+    const writeLog = appendFileSync;
     if (config.debug) {
       try {
         writeLog(debugLog, `[${(/* @__PURE__ */ new Date()).toISOString()}] plugin loaded, prefix: ${JSON.stringify(config.prefix)}, maxFileSize: ${config.maxFileSize}, projectDir: ${projectDir}
@@ -256,7 +253,7 @@ function createHashlinePlugin(userConfig) {
           const out = output;
           const hashLen = config.hashLength || 0;
           const prefix = config.prefix;
-          const { formatFileWithHashes, shouldExclude, getByteLength: getByteLength2 } = await import("./hashline-37RYBX5A.js");
+          const { formatFileWithHashes, shouldExclude, getByteLength: getByteLength2 } = await import("./hashline-DDPVX355.js");
           for (const p of out.parts ?? []) {
             if (p.type !== "file") continue;
             if (!p.url || !p.mime?.startsWith("text/")) continue;
@@ -327,5 +324,6 @@ var src_default = HashlinePlugin;
 export {
   HashlinePlugin,
   createHashlinePlugin,
-  src_default as default
+  src_default as default,
+  sanitizeConfig
 };

package/dist/utils.cjs

@@ -268,6 +268,7 @@ function formatFileWithHashes(content, hashLen, prefix, includeFileRev) {
   for (let idx = 0; idx < lines.length; idx++) {
     hashes[idx] = computeLineHash(idx, lines[idx], effectiveLen);
   }
+  let dirtyIndices = null;
   let hasCollisions = true;
   while (hasCollisions) {
     hasCollisions = false;
@@ -281,16 +282,29 @@ function formatFileWithHashes(content, hashLen, prefix, includeFileRev) {
         seen.set(h, [idx]);
       }
     }
+    const nextDirty = /* @__PURE__ */ new Set();
     for (const [, group] of seen) {
       if (group.length < 2) continue;
+      if (dirtyIndices !== null && !group.some((idx) => dirtyIndices.has(idx))) continue;
       for (const idx of group) {
         const newLen = Math.min(hashLens[idx] + 1, 8);
         if (newLen === hashLens[idx]) continue;
         hashLens[idx] = newLen;
         hashes[idx] = computeLineHash(idx, lines[idx], newLen);
+        nextDirty.add(idx);
         hasCollisions = true;
       }
     }
+    dirtyIndices = nextDirty;
+  }
+  const finalSeen = /* @__PURE__ */ new Map();
+  for (let idx = 0; idx < lines.length; idx++) {
+    const existing = finalSeen.get(hashes[idx]);
+    if (existing !== void 0) {
+      hashes[idx] = `${hashes[idx]}${idx.toString(16)}`;
+    } else {
+      finalSeen.set(hashes[idx], idx);
+    }
   }
   const annotatedLines = lines.map((line, idx) => {
     return `${effectivePrefix}${idx + 1}:${hashes[idx]}|${line}`;
@@ -305,12 +319,16 @@ var stripRegexCache = /* @__PURE__ */ new Map();
 function stripHashes(content, prefix) {
   const effectivePrefix = prefix === void 0 ? DEFAULT_PREFIX : prefix === false ? "" : prefix;
   const escapedPrefix = effectivePrefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  let hashLinePattern = stripRegexCache.get(escapedPrefix);
-  if (!hashLinePattern) {
-    hashLinePattern = new RegExp(`^([+ \\-])?${escapedPrefix}\\d+:[0-9a-f]{2,8}\\|`);
-    stripRegexCache.set(escapedPrefix, hashLinePattern);
+  let cached = stripRegexCache.get(escapedPrefix);
+  if (!cached) {
+    cached = {
+      hashLine: new RegExp(`^([+ \\-])?${escapedPrefix}\\d+:[0-9a-f]{2,8}\\|`),
+      rev: new RegExp(`^${escapedPrefix}REV:[0-9a-f]{8}$`)
+    };
+    stripRegexCache.set(escapedPrefix, cached);
   }
-  const revPattern = new RegExp(`^${escapedPrefix}REV:[0-9a-f]{8}$`);
+  const hashLinePattern = cached.hashLine;
+  const revPattern = cached.rev;
   const lineEnding = detectLineEnding(content);
   const normalized = lineEnding === "\r\n" ? content.replace(/\r\n/g, "\n") : content;
   const result = normalized.split("\n").filter((line) => !revPattern.test(line)).map((line) => {
@@ -459,10 +477,10 @@ function resolveRange(startRef, endRef, content, hashLen, safeReapply) {
     content: rangeLines.join(lineEnding)
   };
 }
-function replaceRange(startRef, endRef, content, replacement, hashLen) {
+function replaceRange(startRef, endRef, content, replacement, hashLen, safeReapply) {
   const lineEnding = detectLineEnding(content);
   const normalized = lineEnding === "\r\n" ? content.replace(/\r\n/g, "\n") : content;
-  const range = resolveRange(startRef, endRef, normalized, hashLen);
+  const range = resolveRange(startRef, endRef, normalized, hashLen, safeReapply);
   const lines = normalized.split("\n");
   const before = lines.slice(0, range.startLine - 1);
   const after = lines.slice(range.endLine);
@@ -632,9 +650,8 @@ function matchesGlob(filePath, pattern) {
 function shouldExclude(filePath, patterns) {
   return patterns.some((pattern) => matchesGlob(filePath, pattern));
 }
-var textEncoder = new TextEncoder();
 function getByteLength(content) {
-  return textEncoder.encode(content).length;
+  return Buffer.byteLength(content, "utf-8");
 }
 function detectLineEnding(content) {
   return content.includes("\r\n") ? "\r\n" : "\n";
@@ -709,18 +726,23 @@ var import_path = require("path");
 var import_os = require("os");
 var DEBUG_LOG = (0, import_path.join)((0, import_os.homedir)(), ".config", "opencode", "hashline-debug.log");
 var MAX_PROCESSED_IDS = 1e4;
-function createBoundedSet(maxSize) {
-  const set = /* @__PURE__ */ new Set();
-  const originalAdd = set.add.bind(set);
-  set.add = (value) => {
-    if (set.size >= maxSize) {
-      const first = set.values().next().value;
-      if (first !== void 0) set.delete(first);
+var BoundedSet = class {
+  constructor(maxSize) {
+    this.maxSize = maxSize;
+  }
+  maxSize;
+  set = /* @__PURE__ */ new Set();
+  has(value) {
+    return this.set.has(value);
+  }
+  add(value) {
+    if (this.set.size >= this.maxSize) {
+      const first = this.set.values().next().value;
+      if (first !== void 0) this.set.delete(first);
     }
-    return originalAdd(value);
-  };
-  return set;
-}
+    this.set.add(value);
+  }
+};
 var debugEnabled = false;
 function debug(...args) {
   if (!debugEnabled) return;
@@ -752,7 +774,7 @@ function createFileReadAfterHook(cache, config) {
   const resolved = config ?? resolveConfig();
   const hashLen = resolved.hashLength || 0;
   const prefix = resolved.prefix;
-  const processedCallIds = createBoundedSet(MAX_PROCESSED_IDS);
+  const processedCallIds = new BoundedSet(MAX_PROCESSED_IDS);
   return async (input, output) => {
     debug("tool.execute.after:", input.tool, "args:", input.args);
     if (input.callID) {
@@ -761,6 +783,8 @@ function createFileReadAfterHook(cache, config) {
         return;
       }
       processedCallIds.add(input.callID);
+    } else {
+      debug("no callID \u2014 deduplication disabled for this call");
     }
     if (!isFileReadTool(input.tool, input.args)) {
       debug("skipped: not a file-read tool");
@@ -799,13 +823,16 @@ function createFileReadAfterHook(cache, config) {
 function createFileEditBeforeHook(config) {
   const resolved = config ?? resolveConfig();
   const prefix = resolved.prefix;
-  const processedCallIds = createBoundedSet(MAX_PROCESSED_IDS);
+  const processedCallIds = new BoundedSet(MAX_PROCESSED_IDS);
   return async (input, output) => {
     if (input.callID) {
       if (processedCallIds.has(input.callID)) {
+        debug("skipped: duplicate callID (edit)", input.callID);
         return;
       }
       processedCallIds.add(input.callID);
+    } else {
+      debug("no callID \u2014 deduplication disabled for this edit call");
     }
     const toolName = input.tool.toLowerCase();
     const isFileEdit = FILE_EDIT_TOOLS.some(

package/dist/utils.d.cts

@@ -1,5 +1,5 @@
-import { H as HashlineConfig, f as HashlineCache } from './hashline-A7k2yn3G.cjs';
-export { C as CandidateLine, D as DEFAULT_CONFIG, g as DEFAULT_EXCLUDE_PATTERNS, h as DEFAULT_PREFIX, a as HashEditInput, b as HashEditOperation, c as HashEditResult, i as HashlineError, d as HashlineErrorCode, e as HashlineInstance, R as ResolvedRange, V as VerifyHashResult, j as applyHashEdit, k as buildHashMap, l as computeFileRev, m as computeLineHash, n as createHashline, o as extractFileRev, p as findCandidateLines, q as formatFileWithHashes, r as getAdaptiveHashLength, s as getByteLength, t as matchesGlob, u as normalizeHashRef, v as parseHashRef, w as replaceRange, x as resolveConfig, y as resolveRange, z as shouldExclude, A as stripHashes, B as verifyFileRev, E as verifyHash } from './hashline-A7k2yn3G.cjs';
+import { H as HashlineConfig, f as HashlineCache } from './hashline-DWndArr4.cjs';
+export { C as CandidateLine, D as DEFAULT_CONFIG, g as DEFAULT_EXCLUDE_PATTERNS, h as DEFAULT_PREFIX, a as HashEditInput, b as HashEditOperation, c as HashEditResult, i as HashlineError, d as HashlineErrorCode, e as HashlineInstance, R as ResolvedRange, V as VerifyHashResult, j as applyHashEdit, k as buildHashMap, l as computeFileRev, m as computeLineHash, n as createHashline, o as extractFileRev, p as findCandidateLines, q as formatFileWithHashes, r as getAdaptiveHashLength, s as getByteLength, t as matchesGlob, u as normalizeHashRef, v as parseHashRef, w as replaceRange, x as resolveConfig, y as resolveRange, z as shouldExclude, A as stripHashes, B as verifyFileRev, E as verifyHash } from './hashline-DWndArr4.cjs';
 import { Hooks } from '@opencode-ai/plugin';
 
 /**

package/dist/utils.d.ts

@@ -1,5 +1,5 @@
-import { H as HashlineConfig, f as HashlineCache } from './hashline-A7k2yn3G.js';
-export { C as CandidateLine, D as DEFAULT_CONFIG, g as DEFAULT_EXCLUDE_PATTERNS, h as DEFAULT_PREFIX, a as HashEditInput, b as HashEditOperation, c as HashEditResult, i as HashlineError, d as HashlineErrorCode, e as HashlineInstance, R as ResolvedRange, V as VerifyHashResult, j as applyHashEdit, k as buildHashMap, l as computeFileRev, m as computeLineHash, n as createHashline, o as extractFileRev, p as findCandidateLines, q as formatFileWithHashes, r as getAdaptiveHashLength, s as getByteLength, t as matchesGlob, u as normalizeHashRef, v as parseHashRef, w as replaceRange, x as resolveConfig, y as resolveRange, z as shouldExclude, A as stripHashes, B as verifyFileRev, E as verifyHash } from './hashline-A7k2yn3G.js';
+import { H as HashlineConfig, f as HashlineCache } from './hashline-DWndArr4.js';
+export { C as CandidateLine, D as DEFAULT_CONFIG, g as DEFAULT_EXCLUDE_PATTERNS, h as DEFAULT_PREFIX, a as HashEditInput, b as HashEditOperation, c as HashEditResult, i as HashlineError, d as HashlineErrorCode, e as HashlineInstance, R as ResolvedRange, V as VerifyHashResult, j as applyHashEdit, k as buildHashMap, l as computeFileRev, m as computeLineHash, n as createHashline, o as extractFileRev, p as findCandidateLines, q as formatFileWithHashes, r as getAdaptiveHashLength, s as getByteLength, t as matchesGlob, u as normalizeHashRef, v as parseHashRef, w as replaceRange, x as resolveConfig, y as resolveRange, z as shouldExclude, A as stripHashes, B as verifyFileRev, E as verifyHash } from './hashline-DWndArr4.js';
 import { Hooks } from '@opencode-ai/plugin';
 
 /**

package/dist/utils.js

@@ -3,7 +3,7 @@ import {
   createFileReadAfterHook,
   createSystemPromptHook,
   isFileReadTool
-} from "./chunk-VSVVWPET.js";
+} from "./chunk-2FSVSE7C.js";
 import {
   DEFAULT_CONFIG,
   DEFAULT_EXCLUDE_PATTERNS,
@@ -30,7 +30,7 @@ import {
   stripHashes,
   verifyFileRev,
   verifyHash
-} from "./chunk-GKXY5ZBM.js";
+} from "./chunk-C323JLG3.js";
 export {
   DEFAULT_CONFIG,
   DEFAULT_EXCLUDE_PATTERNS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-hashline",
-  "version": "1.3.1",
+  "version": "1.3.3",
   "description": "Hashline plugin for OpenCode — content-addressable line hashing for precise AI code editing",
   "main": "dist/opencode-hashline.cjs",
   "module": "dist/opencode-hashline.js",
@@ -53,7 +53,7 @@
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
     "vitest": "^4.0.18",
-    "zod": "^4.1.8"
+    "zod": "~4.1.8"
   },
   "dependencies": {
     "picomatch": "^4.0.3"