skillwiki 0.10.96 → 0.10.97

package/dist/{chunk-BXEG5OWD.js → chunk-EEO2YDPX.js}

@@ -6,7 +6,7 @@ import {
 import {
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-3KEMRVWR.js";
+} from "./chunk-XYXTV2YD.js";
 import {
   CONFIG_KEYS,
   VAULT_HYGIENE_GENERATED_COMMIT_PATHS,
@@ -40,11 +40,11 @@ import {
   snapshotterAliasForLocalHost,
   toUndirectedWeighted,
   writeDotenv
-} from "./chunk-OTESAW36.js";
+} from "./chunk-MRYWP5HY.js";
 import {
   atomicWriteText,
   prepareTypedPage
-} from "./chunk-C5WOEVX3.js";
+} from "./chunk-KDH352MC.js";
 import {
   applySourceCompileClaim,
   applySourceCompilePublished,
@@ -57,11 +57,11 @@ import {
   planSourceCompileRelease,
   planSourceReview,
   runSourcesPending
-} from "./chunk-UDOZKMCN.js";
+} from "./chunk-H42EY6E7.js";
 import {
   eventPathFor,
   writeLogEvent
-} from "./chunk-LTSIHHKD.js";
+} from "./chunk-F5GFUYPF.js";
 import {
   CompoundSchema,
   ExitCode,
@@ -82,7 +82,7 @@ import {
   scanVault,
   splitFrontmatter,
   systemdPropertyFor
-} from "./chunk-SXNKZGNM.js";
+} from "./chunk-QM64LUEY.js";
 
 // src/commands/log-append.ts
 import { readFile, stat } from "fs/promises";
@@ -6485,7 +6485,7 @@ async function runQuery(input) {
   }
   let pendingSources;
   if (input.includePending) {
-    const { runSourcesPending: runSourcesPending2 } = await import("./sources-4KCCBNCO.js");
+    const { runSourcesPending: runSourcesPending2 } = await import("./sources-OSGKH6KN.js");
     const pending = await runSourcesPending2({
       vault: input.vault,
       match: input.text,

package/dist/{chunk-LTSIHHKD.js → chunk-F5GFUYPF.js}

@@ -6,7 +6,7 @@ import {
   readPage,
   scanSensitiveContent,
   splitFrontmatter
-} from "./chunk-SXNKZGNM.js";
+} from "./chunk-QM64LUEY.js";
 
 // src/utils/vault-path-safety.ts
 import { lstatSync, realpathSync } from "fs";

package/dist/{chunk-UDOZKMCN.js → chunk-H42EY6E7.js}

@@ -8,7 +8,7 @@ import {
   readLogEvents,
   resolveExistingRegularFileInsideVault,
   writeLogEvent
-} from "./chunk-LTSIHHKD.js";
+} from "./chunk-F5GFUYPF.js";
 import {
   ExitCode,
   RawSourceSchema,
@@ -19,7 +19,7 @@ import {
   scanSensitiveContent,
   scanVault,
   splitFrontmatter
-} from "./chunk-SXNKZGNM.js";
+} from "./chunk-QM64LUEY.js";
 
 // src/commands/sources.ts
 import { readFile as readFile4 } from "fs/promises";

package/dist/{chunk-C5WOEVX3.js → chunk-KDH352MC.js}

@@ -8,7 +8,7 @@ import {
   ok,
   scanSensitiveContent,
   scanVault
-} from "./chunk-SXNKZGNM.js";
+} from "./chunk-QM64LUEY.js";
 
 // src/utils/atomic-write.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-OTESAW36.js → chunk-MRYWP5HY.js}

@@ -2,7 +2,7 @@
 import {
   atomicWriteText,
   buildRootIndexUniverse
-} from "./chunk-C5WOEVX3.js";
+} from "./chunk-KDH352MC.js";
 import {
   authorizeRawOperation,
   buildSourceReferenceIndex,
@@ -22,7 +22,7 @@ import {
   resolveExistingRegularFileInsideVault,
   stripFencedBlocks,
   writeLogEvent
-} from "./chunk-LTSIHHKD.js";
+} from "./chunk-F5GFUYPF.js";
 import {
   ExitCode,
   FleetManifestSchema,
@@ -41,7 +41,7 @@ import {
   scanVault,
   splitFrontmatter,
   vaultIoConcurrency
-} from "./chunk-SXNKZGNM.js";
+} from "./chunk-QM64LUEY.js";
 
 // src/utils/managed-write-preflight.ts
 import { existsSync as existsSync11 } from "fs";

package/dist/{chunk-SXNKZGNM.js → chunk-QM64LUEY.js}

@@ -564,7 +564,7 @@ var MATCHERS = [
   },
   {
     kind: "password",
-    re: /\b(?:password|passwd)["']?\s*[:=]\s*["']?([^\s`"']{8,})["']?/gi,
+    re: /\b(?:password|passwd)["']?\s*[:=]\s*[`"']?([^\s`"']{8,})[`"']?/gi,
     valueGroup: 1
   },
   {
@@ -590,12 +590,35 @@ function redactMarker(kind, value) {
 function isSyntheticPlaceholder(value) {
   return REDACTED_RE.test(value) || SYNTHETIC_RE.test(value.trim());
 }
+function isInsideRedactedMarker(text, start, end) {
+  for (const marker of text.matchAll(new RegExp(REDACTED_RE.source, "gi"))) {
+    const markerStart = marker.index ?? 0;
+    const markerEnd = markerStart + marker[0].length;
+    if (start >= markerStart && end <= markerEnd) return true;
+  }
+  return false;
+}
 function isNonSecretTokenCapture(value) {
   if (value.startsWith("//")) return true;
   if (value.includes("/")) return true;
   if (/^[a-z0-9.]+(?:-[a-z0-9.]+)+$/.test(value) && !/^[0-9a-f]+(?:-[0-9a-f]+)+$/.test(value)) return true;
   return false;
 }
+var PASSWORD_PROSE_SENTINELS = /* @__PURE__ */ new Set([
+  "generated",
+  "configured",
+  "required",
+  "optional",
+  "provided",
+  "disabled",
+  "enabled",
+  "undefined",
+  "unspecified",
+  "unknown"
+]);
+function isNonSecretPasswordCapture(value) {
+  return PASSWORD_PROSE_SENTINELS.has(value.toLowerCase());
+}
 function collectMatches(text) {
   const matches = [];
   for (const matcher of MATCHERS) {
@@ -603,10 +626,11 @@ function collectMatches(text) {
     for (const m of text.matchAll(matcher.re)) {
       const whole = m[0];
       const start = m.index ?? 0;
-      if (REDACTED_RE.test(whole)) continue;
+      if (REDACTED_RE.test(whole) || isInsideRedactedMarker(text, start, start + whole.length)) continue;
       const value = matcher.valueGroup ? m[matcher.valueGroup] : whole;
       if (isSyntheticPlaceholder(value)) continue;
       if (matcher.kind === "token" && isNonSecretTokenCapture(value)) continue;
+      if (matcher.kind === "password" && isNonSecretPasswordCapture(value)) continue;
       const valueOffset = whole.lastIndexOf(value);
       const valueStart = start + Math.max(0, valueOffset);
       matches.push({

package/dist/{chunk-3KEMRVWR.js → chunk-XYXTV2YD.js}

@@ -3,11 +3,11 @@ import {
   ROOT_INDEX_SECTION_ORDER,
   atomicWriteText,
   buildRootIndexUniverse
-} from "./chunk-C5WOEVX3.js";
+} from "./chunk-KDH352MC.js";
 import {
   err,
   ok
-} from "./chunk-SXNKZGNM.js";
+} from "./chunk-QM64LUEY.js";
 
 // src/utils/index-projection.ts
 import { readFile } from "fs/promises";

package/dist/cli.js

@@ -55,7 +55,7 @@ import {
   snapshotterHealthChecks,
   upsertIndexEntry,
   vectorIndexStatus
-} from "./chunk-BXEG5OWD.js";
+} from "./chunk-EEO2YDPX.js";
 import {
   normalizeDistTag,
   readCache,
@@ -68,7 +68,7 @@ import {
   UNMANAGED_START,
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-3KEMRVWR.js";
+} from "./chunk-XYXTV2YD.js";
 import {
   FLEET_REL_PATH,
   REDACTED_MALFORMED_REFERENCE,
@@ -160,12 +160,12 @@ import {
   supersedeStaleReviewRequiredJournals,
   taxonomyCommentForPage,
   writeDotenv
-} from "./chunk-OTESAW36.js";
+} from "./chunk-MRYWP5HY.js";
 import {
   assertTargetInsideVault,
   atomicWriteText,
   prepareTypedPage
-} from "./chunk-C5WOEVX3.js";
+} from "./chunk-KDH352MC.js";
 import {
   applySourceDisposition,
   decodeSourceActionApproval,
@@ -173,7 +173,7 @@ import {
   inventorySources,
   planSourceDisposition,
   runSourcesPending
-} from "./chunk-UDOZKMCN.js";
+} from "./chunk-H42EY6E7.js";
 import {
   authorizeRawOperation,
   buildSourceReferenceIndex,
@@ -190,7 +190,7 @@ import {
   resolveExistingRegularFileInsideVault,
   validateLogEvent,
   writeLogEvent
-} from "./chunk-LTSIHHKD.js";
+} from "./chunk-F5GFUYPF.js";
 import {
   ExitCode,
   MetaSchema,
@@ -211,7 +211,7 @@ import {
   scanVault,
   splitFrontmatter,
   vaultIoConcurrency
-} from "./chunk-SXNKZGNM.js";
+} from "./chunk-QM64LUEY.js";
 
 // src/cli.ts
 import { join as join44 } from "path";
@@ -3788,7 +3788,7 @@ ${fmRewritten}
   }
   let indexUpdated = false;
   if (!isRaw) {
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-3ZMM53WL.js");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-6OHDINHT.js");
     const before = await readFile7(join19(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
@@ -3911,7 +3911,7 @@ async function runRemove(input) {
   if (relPath.endsWith(".md") && !relPath.startsWith("raw/")) {
     const { readFile: readFile23 } = await import("fs/promises");
     const { join: pathJoin } = await import("path");
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-3ZMM53WL.js");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-6OHDINHT.js");
     const before = await readFile23(pathJoin(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
@@ -10888,7 +10888,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-T4WOM52R.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-THGIM2U7.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,

package/dist/{index-projection-3ZMM53WL.js → index-projection-6OHDINHT.js}

@@ -4,9 +4,9 @@ import {
   UNMANAGED_START,
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-3KEMRVWR.js";
-import "./chunk-C5WOEVX3.js";
-import "./chunk-SXNKZGNM.js";
+} from "./chunk-XYXTV2YD.js";
+import "./chunk-KDH352MC.js";
+import "./chunk-QM64LUEY.js";
 export {
   UNMANAGED_END,
   UNMANAGED_START,

package/dist/{managed-write-preflight-T4WOM52R.js → managed-write-preflight-THGIM2U7.js}

@@ -6,10 +6,10 @@ import {
   runManagedWritePeerGate,
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-OTESAW36.js";
-import "./chunk-C5WOEVX3.js";
-import "./chunk-LTSIHHKD.js";
-import "./chunk-SXNKZGNM.js";
+} from "./chunk-MRYWP5HY.js";
+import "./chunk-KDH352MC.js";
+import "./chunk-F5GFUYPF.js";
+import "./chunk-QM64LUEY.js";
 export {
   DEFAULT_MANAGED_WRITE_WAIT_MS,
   MANAGED_WRITE_POLL_INTERVAL_MS,

package/dist/skillwiki-mcp.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-BXEG5OWD.js";
+} from "./chunk-EEO2YDPX.js";
 import "./chunk-7I2TPIV5.js";
-import "./chunk-3KEMRVWR.js";
-import "./chunk-OTESAW36.js";
-import "./chunk-C5WOEVX3.js";
-import "./chunk-UDOZKMCN.js";
-import "./chunk-LTSIHHKD.js";
-import "./chunk-SXNKZGNM.js";
+import "./chunk-XYXTV2YD.js";
+import "./chunk-MRYWP5HY.js";
+import "./chunk-KDH352MC.js";
+import "./chunk-H42EY6E7.js";
+import "./chunk-F5GFUYPF.js";
+import "./chunk-QM64LUEY.js";
 
 // src/mcp-entry.ts
 runSkillwikiMcpStdio().catch((error) => {

package/dist/sources-OSGKH6KN.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import {
+  runSourcesPending
+} from "./chunk-H42EY6E7.js";
+import "./chunk-F5GFUYPF.js";
+import "./chunk-QM64LUEY.js";
+export {
+  runSourcesPending
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.96",
+  "version": "0.10.97",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.96",
+  "version": "0.10.97",
   "skills": "./",
   "description": "Project-aware Karpathy-style knowledge base for Claude Code: 21 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp) backed by the deterministic `skillwiki` CLI.",
   "author": {

package/skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.96",
+  "version": "0.10.97",
   "description": "Project-aware Karpathy-style knowledge base for Codex with 21 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",

package/skills/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.96",
+  "version": "0.10.97",
   "description": "Project-aware Karpathy-style knowledge base: 21 prompt-only skills (wiki-*, proj-*, using-skillwiki, skillwiki-mcp) backed by HTTP MCP wiki_capture.",
   "author": {
     "name": "karlorz"

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.96",
+  "version": "0.10.97",
   "private": true,
   "files": [
     "wiki-*",

package/dist/sources-4KCCBNCO.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-import {
-  runSourcesPending
-} from "./chunk-UDOZKMCN.js";
-import "./chunk-LTSIHHKD.js";
-import "./chunk-SXNKZGNM.js";
-export {
-  runSourcesPending
-};