sphica 0.5.5 → 0.5.7

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "sphica",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
   "author": {
     "name": "iroha924",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sphica",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
   "author": {
     "name": "iroha924",

package/README.md

@@ -7,6 +7,8 @@
 [![SLSA Build L2](https://img.shields.io/badge/SLSA-Build%20L2-green)](https://www.npmjs.com/package/sphica#provenance)
 [![Dependabot: GitHub Actions](https://img.shields.io/badge/Dependabot-GitHub%20Actions-025E8C?logo=dependabot)](https://github.com/iroha924/sphica/blob/main/.github/dependabot.yml)
 
+What the badges cover: CI runs the checks in [Contributing](https://github.com/iroha924/sphica#contributing), and how each release is built and published is in [Security](https://github.com/iroha924/sphica#security). A passing badge does not mean the code is free of bugs or vulnerabilities.
+
 English | [日本語](https://github.com/iroha924/sphica/blob/main/README.ja.md)
 
 **Local memory of past implementation and decisions for Claude Code and Codex.**
@@ -116,7 +118,7 @@ The agent searches with Sphica's `search` and opens full records with `read`. `s
 - **What.** Your prompts, the agent's final reply for each turn, and the paths of changed files. Background-task notifications and messages from other agents are skipped when Sphica recognizes their format. Replies in the middle of a turn are not kept, nor are files created and deleted within one turn without the edit tools.
 - **What was shown.** Each automatic delivery is logged by which records it showed, not their text.
 - **Unregistered repositories.** Sessions in a repository you have not registered stay in the queue and are written after you register it. Held sessions are dropped after 30 days, and when more than 1,000 are waiting the oldest go first.
-- **Secrets.** Only secrets with a recognizable shape are masked:
+- **Secrets.** In your prompts, pull request text, and the file lines `/sphica:glean` cites, only secrets with a recognizable shape are masked (excerpts saved before 0.5.7 stay as they were):
   - keys with known prefixes
   - `KEY=…` and `"password": …` assignments
   - credentials in URLs

package/dist/capture.js

@@ -11108,24 +11108,32 @@ var MYSQL_PASSWORD = /(\s-p)(?:'[^'\n]*'|"[^"\n]*"|(?=[^\s-])\S+)/;
 var URL_CREDENTIALS = /\b((?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|rediss?|amqps?|https?):\/\/[^:\s/@]*:)[^\s/]*@([^@\s/?#]+)/g;
 var KEY_BEGIN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/g;
 var KEY_END = /-----END [A-Z ]*PRIVATE KEY-----/g;
-function maskPrivateKeys(text) {
+function keyBlocks(text) {
   const ends = [...text.matchAll(KEY_END)].map((m) => [m.index, m.index + m[0].length]);
-  if (ends.length === 0)
-    return text;
-  let out = "";
+  const out = [];
   let last = 0;
   let e = 0;
-  for (const m of text.matchAll(KEY_BEGIN)) {
-    const after = m.index + m[0].length;
-    if (m.index < last)
-      continue;
-    while (e < ends.length && (ends[e]?.[0] ?? 0) < after)
-      e++;
-    const end = ends[e];
-    if (!end)
-      break;
-    out += `${text.slice(last, m.index)}[redacted: private key]`;
-    last = end[1];
+  if (ends.length > 0)
+    for (const m of text.matchAll(KEY_BEGIN)) {
+      const after = m.index + m[0].length;
+      if (m.index < last)
+        continue;
+      while (e < ends.length && (ends[e]?.[0] ?? 0) < after)
+        e++;
+      const end = ends[e];
+      if (!end)
+        break;
+      out.push([m.index, end[1]]);
+      last = end[1];
+    }
+  return out;
+}
+function maskPrivateKeys(text) {
+  let out = "";
+  let last = 0;
+  for (const [a, b] of keyBlocks(text)) {
+    out += `${text.slice(last, a)}[redacted: private key]`;
+    last = b;
   }
   return out + text.slice(last);
 }

package/dist/cli.js

@@ -3193,24 +3193,32 @@ var MYSQL_PASSWORD = /(\s-p)(?:'[^'\n]*'|"[^"\n]*"|(?=[^\s-])\S+)/;
 var URL_CREDENTIALS = /\b((?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|rediss?|amqps?|https?):\/\/[^:\s/@]*:)[^\s/]*@([^@\s/?#]+)/g;
 var KEY_BEGIN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/g;
 var KEY_END = /-----END [A-Z ]*PRIVATE KEY-----/g;
-function maskPrivateKeys(text) {
+function keyBlocks(text) {
   const ends = [...text.matchAll(KEY_END)].map((m) => [m.index, m.index + m[0].length]);
-  if (ends.length === 0)
-    return text;
-  let out = "";
+  const out = [];
   let last = 0;
   let e = 0;
-  for (const m of text.matchAll(KEY_BEGIN)) {
-    const after = m.index + m[0].length;
-    if (m.index < last)
-      continue;
-    while (e < ends.length && (ends[e]?.[0] ?? 0) < after)
-      e++;
-    const end = ends[e];
-    if (!end)
-      break;
-    out += `${text.slice(last, m.index)}[redacted: private key]`;
-    last = end[1];
+  if (ends.length > 0)
+    for (const m of text.matchAll(KEY_BEGIN)) {
+      const after = m.index + m[0].length;
+      if (m.index < last)
+        continue;
+      while (e < ends.length && (ends[e]?.[0] ?? 0) < after)
+        e++;
+      const end = ends[e];
+      if (!end)
+        break;
+      out.push([m.index, end[1]]);
+      last = end[1];
+    }
+  return out;
+}
+function maskPrivateKeys(text) {
+  let out = "";
+  let last = 0;
+  for (const [a2, b] of keyBlocks(text)) {
+    out += `${text.slice(last, a2)}[redacted: private key]`;
+    last = b;
   }
   return out + text.slice(last);
 }

package/dist/deliver.js

@@ -21,6 +21,255 @@ import path7 from "node:path";
 
 // server/src/anchors.ts
 import path from "node:path";
+
+// server/src/text.ts
+import crypto from "node:crypto";
+var segmenter = new Intl.Segmenter("ja", { granularity: "word" });
+var HIRAGANA_ONLY = /^[\p{Script=Hiragana}ー]+$/u;
+var STOP = new Set(["the", "a", "an", "of", "to", "in", "is", "and", "or", "for", "on", "it", "be"]);
+var IDENT = /#\d+|[a-z0-9][a-z0-9_./#-]*[a-z0-9]/g;
+var MAX_TERM = 100;
+var OKURIGANA = /^(\p{Script=Han}+)[\p{Script=Hiragana}ー]+$/u;
+function singular(w) {
+  if (!/^[a-z]{4,}$/.test(w))
+    return w;
+  if (w.endsWith("ies"))
+    return `${w.slice(0, -3)}y`;
+  if (w.endsWith("ie"))
+    return `${w.slice(0, -2)}y`;
+  if (/(?:ss|us|x|z|ch|sh)es$/.test(w))
+    return w.slice(0, -2);
+  if (/(?:ch|sh|us)e$/.test(w))
+    return w.slice(0, -1);
+  return w.endsWith("s") && !/(?:ss|us|is)$/.test(w) ? w.slice(0, -1) : w;
+}
+function terms(text) {
+  const norm = text.normalize("NFKC").toLowerCase();
+  const out = [];
+  const keep = (w) => {
+    if (w.length > MAX_TERM || STOP.has(w) || HIRAGANA_ONLY.test(w))
+      return;
+    out.push(OKURIGANA.exec(w)?.[1] ?? singular(w));
+  };
+  for (const s of segmenter.segment(norm))
+    if (s.isWordLike)
+      keep(s.segment.trim());
+  for (const m of norm.matchAll(IDENT))
+    if (m[0].length >= 3)
+      keep(m[0]);
+  return out.filter(Boolean);
+}
+var QUESTION = new Set([
+  ...[
+    "why",
+    "what",
+    "which",
+    "when",
+    "where",
+    "who",
+    "how",
+    "do",
+    "does",
+    "did",
+    "we",
+    "our",
+    "us",
+    "you",
+    "i",
+    "are",
+    "was",
+    "were"
+  ],
+  ...[
+    "will",
+    "would",
+    "should",
+    "can",
+    "could",
+    "there",
+    "this",
+    "that",
+    "with",
+    "from",
+    "any",
+    "ever",
+    "long",
+    "use",
+    "used",
+    "using"
+  ],
+  ...["add", "get", "make", "have", "has", "not", "no", "yes", "reason"],
+  ...["理由", "仕組", "何", "方", "場合", "今", "件"]
+]);
+var sha256 = (s) => crypto.createHash("sha256").update(s).digest();
+function uuidFrom(...parts) {
+  const b = crypto.createHash("sha256").update(parts.join("\x00")).digest().subarray(0, 16);
+  b[6] = (b[6] ?? 0) & 15 | 128;
+  b[8] = (b[8] ?? 0) & 63 | 128;
+  const h = b.toString("hex");
+  return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
+}
+var bytes = (s) => Buffer.byteLength(s, "utf8");
+function head(s, n) {
+  if (bytes(s) <= n)
+    return s;
+  let out = "";
+  let used = 0;
+  for (const ch of s) {
+    const b = bytes(ch);
+    if (used + b > n)
+      break;
+    out += ch;
+    used += b;
+  }
+  return out;
+}
+function tail(s, n) {
+  if (bytes(s) <= n)
+    return s;
+  const chars = [...s];
+  let used = 0;
+  let i = chars.length;
+  while (i > 0) {
+    const b = bytes(chars[i - 1] ?? "");
+    if (used + b > n)
+      break;
+    used += b;
+    i--;
+  }
+  return chars.slice(i).join("");
+}
+var clean = (s) => s.replaceAll("\x00", "");
+var visible = (s) => s.replace(/(?!\p{Join_Control}|\p{Variation_Selector})\p{Default_Ignorable_Code_Point}/gu, "");
+var SECRETS = [
+  [/\bsk-(?:proj-|ant-)?[A-Za-z0-9_-]{20,}/g, "API key"],
+  [/\b[srp]k_(?:live|test)_[A-Za-z0-9]{16,}/g, "API key"],
+  [/\bwhsec_[A-Za-z0-9+/=]{16,}/g, "webhook signing secret"],
+  [/\bpa-[A-Za-z0-9_-]{20,}/g, "API key"],
+  [/\bAIza[0-9A-Za-z_-]{35}/g, "API key"],
+  [/\bnpg_[A-Za-z0-9]{12,}/g, "database password"],
+  [/\bnapi_[A-Za-z0-9]{30,}/g, "API key"],
+  [/\bnpm_[A-Za-z0-9]{36}\b/g, "npm token"],
+  [/\bglpat-[A-Za-z0-9_-]{20,}/g, "GitLab token"],
+  [/\bgh[pousr]_[A-Za-z0-9]{30,}/g, "GitHub token"],
+  [/\bgithub_pat_[A-Za-z0-9_]{40,}/g, "GitHub token"],
+  [/\bxox[abprs]-[A-Za-z0-9-]{10,}/g, "Slack token"],
+  [/https:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9/]+/g, "Slack webhook"],
+  [/\bAKIA[0-9A-Z]{16}\b/g, "AWS key"],
+  [/(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g, "JWT"],
+  [/\b(?:Bearer|BEARER)\s+(?=[A-Za-z0-9._~+/=-]{0,512}\d)[A-Za-z0-9._~+/=-]{16,}/g, "auth header value"]
+];
+var AUTH_HEADER = /(\bAuthorization["']?\s*[:=]\s*(?:["']\s*)?(?:Bearer|Basic|Token|Digest)\s+)[A-Za-z0-9._~+/=-]{8,}/gi;
+var HEADER_BEARER = /(:[ \t]*(?:["'][ \t]*)?bearer[ \t]+)[A-Za-z0-9._~+/=-]{16,}/gi;
+var ENV_ASSIGN = /\b((?:[A-Z][A-Z0-9_]*_)?(?:API|SECRET|MASTER|ENCRYPTION|PRIVATE|ACCESS|SIGNING|AUTH)?KEY|[A-Z][A-Z0-9_]*_(?:PASS|PWD)|(?:[A-Z][A-Z0-9_]*?)?(?:TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIALS?))(\s*=\s*)(?:"(?!\$)[^"\n]+"|'(?!\$)[^'\n]+'|(?![$"'])[^\s"']+)/g;
+var FIELD_NAME = /(?:(?:api|account|access|private|secret)[-_]?key|secret|token|passw(?:or)?d)["']?\s*(?::=|=>|[:=])\s*/gi;
+var MAX_QUOTED = 4096;
+var BARE_HEAD = /[^\s"',;)]{1,256}/y;
+var BARE_REST = /[^\s"',;)]*/y;
+var NEXT_PARAM = /&[A-Za-z_][\w.-]*=/;
+var bareAt = (re, text, at) => {
+  re.lastIndex = at;
+  const v = re.exec(text)?.[0] ?? "";
+  const cut = v.search(NEXT_PARAM);
+  return cut < 0 ? v : v.slice(0, cut);
+};
+function secretValue(quoted, v) {
+  if (v.length < 8 || /^\$(?:\{|[A-Za-z_])/.test(v))
+    return false;
+  if (!quoted)
+    return !/^[#$]/.test(v) && /\d/.test(v) && /[A-Za-z]/.test(v) && !/[()]/.test(v);
+  if (/^#[0-9a-f]{3,8}$/i.test(v) || !/[A-Za-z0-9]/.test(v))
+    return false;
+  return !/\s/.test(v) || v.split(/\s+/).some((w) => /\d/.test(w) && /[A-Za-z]/.test(w));
+}
+function maskFields(text) {
+  let out = "";
+  let last = 0;
+  FIELD_NAME.lastIndex = 0;
+  for (let m = FIELD_NAME.exec(text);m; m = FIELD_NAME.exec(text)) {
+    const at = m.index + m[0].length;
+    const q = text[at];
+    let quote = "";
+    let value;
+    if (q === '"' || q === "'") {
+      const close = text.indexOf(q, at + 1);
+      if (close < 0 || close - at - 1 > MAX_QUOTED)
+        continue;
+      value = text.slice(at + 1, close);
+      if (value.includes(`
+`))
+        continue;
+      quote = q;
+    } else {
+      value = bareAt(BARE_HEAD, text, at);
+    }
+    if (!secretValue(quote !== "", value))
+      continue;
+    if (!quote && value.length === 256)
+      value += bareAt(BARE_REST, text, at + 256);
+    out += `${text.slice(last, at)}${quote}[redacted]`;
+    last = at + quote.length + value.length;
+    FIELD_NAME.lastIndex = last;
+  }
+  return out + text.slice(last);
+}
+var MYSQL_COMMAND = /\bmysql(?:dump|admin)?\b(?:'[^'\n]*'|"[^"\n]*"|[^\n;&|\\'"]|\\\r?\n|\\(?!\r?\n))*/g;
+var MYSQL_PASSWORD = /(\s-p)(?:'[^'\n]*'|"[^"\n]*"|(?=[^\s-])\S+)/;
+var URL_CREDENTIALS = /\b((?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|rediss?|amqps?|https?):\/\/[^:\s/@]*:)[^\s/]*@([^@\s/?#]+)/g;
+var KEY_BEGIN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/g;
+var KEY_END = /-----END [A-Z ]*PRIVATE KEY-----/g;
+function keyBlocks(text) {
+  const ends = [...text.matchAll(KEY_END)].map((m) => [m.index, m.index + m[0].length]);
+  const out = [];
+  let last = 0;
+  let e = 0;
+  if (ends.length > 0)
+    for (const m of text.matchAll(KEY_BEGIN)) {
+      const after = m.index + m[0].length;
+      if (m.index < last)
+        continue;
+      while (e < ends.length && (ends[e]?.[0] ?? 0) < after)
+        e++;
+      const end = ends[e];
+      if (!end)
+        break;
+      out.push([m.index, end[1]]);
+      last = end[1];
+    }
+  return out;
+}
+function maskPrivateKeys(text) {
+  let out = "";
+  let last = 0;
+  for (const [a, b] of keyBlocks(text)) {
+    out += `${text.slice(last, a)}[redacted: private key]`;
+    last = b;
+  }
+  return out + text.slice(last);
+}
+function mask(text) {
+  let out = maskFields(maskPrivateKeys(text).replace(URL_CREDENTIALS, "$1[redacted]@$2").replace(AUTH_HEADER, "$1[redacted]").replace(HEADER_BEARER, "$1[redacted]").replace(ENV_ASSIGN, "$1$2[redacted]")).replace(MYSQL_COMMAND, (command) => command.replace(MYSQL_PASSWORD, "$1[redacted]"));
+  for (const [re, what] of SECRETS)
+    out = out.replace(re, `[redacted: ${what}]`);
+  return out;
+}
+var reason = (e) => explain(e, 0) || "unknown failure";
+var plural = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
+function explain(e, depth) {
+  if (!(e instanceof Error)) {
+    try {
+      return String(e);
+    } catch {
+      return "";
+    }
+  }
+  const own = e.message || (e.name === "Error" || e.name === "AggregateError" ? "" : e.name);
+  const parts = depth >= 3 ? [] : [...e instanceof AggregateError ? e.errors : [], ...e.cause === undefined ? [] : [e.cause]];
+  const inner = parts.map((x) => explain(x, depth + 1)).filter(Boolean).join(" / ");
+  return own && inner ? `${own} (${inner})` : own || inner;
+}
+
+// server/src/anchors.ts
 var MAX_BYTES = 2 * 1024 * 1024;
 var leaves = (rel) => rel === ".." || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel);
 
@@ -4154,8 +4403,8 @@ class Deferred {
     this.#resolve?.(value);
     this.#resolve = this.#reject = undefined;
   };
-  reject = (reason) => {
-    this.#reject?.(reason);
+  reject = (reason2) => {
+    this.#reject?.(reason2);
     this.#reject = this.#resolve = undefined;
   };
 }
@@ -4207,9 +4456,9 @@ function assertNotAborted(signal, timing, beforeThrow) {
     throwReasonWithTiming(signal.reason, timing);
   }
 }
-function throwReasonWithTiming(reason, timing) {
-  decorateWithTiming(reason, timing);
-  throw reason;
+function throwReasonWithTiming(reason2, timing) {
+  decorateWithTiming(reason2, timing);
+  throw reason2;
 }
 var ABORTED = {};
 async function waitOrAbort(promise, signal, name, onAbort) {
@@ -4234,11 +4483,11 @@ async function waitOrAbort(promise, signal, name, onAbort) {
   }
 }
 function printBackgroundFail(name) {
-  return (reason) => console.error(`\`${name}\` failed in the background after abortion: ${getMessage(reason)}`);
+  return (reason2) => console.error(`\`${name}\` failed in the background after abortion: ${getMessage(reason2)}`);
 }
-function decorateWithTiming(reason, timing) {
-  if (reason !== null && typeof reason === "object" && !Object.isFrozen(reason)) {
-    Object.defineProperty(reason, "__kysely_timing__", {
+function decorateWithTiming(reason2, timing) {
+  if (reason2 !== null && typeof reason2 === "object" && !Object.isFrozen(reason2)) {
+    Object.defineProperty(reason2, "__kysely_timing__", {
       configurable: true,
       enumerable: false,
       value: timing,
@@ -8163,9 +8412,9 @@ class RuntimeDriver {
     }
     this.#initPromise ??= this.#driver.init(options).then(() => {
       this.#initDone = true;
-    }).catch((reason) => {
+    }).catch((reason2) => {
       this.#initPromise = undefined;
-      throw reason;
+      throw reason2;
     });
     await waitOrAbort(this.#initPromise, options?.signal, "init");
   }
@@ -8226,9 +8475,9 @@ class RuntimeDriver {
       return;
     }
     await waitOrAbort(this.#initPromise, options?.signal, "destroy:initPromise");
-    this.#destroyPromise ??= this.#driver.destroy(options).catch((reason) => {
+    this.#destroyPromise ??= this.#driver.destroy(options).catch((reason2) => {
       this.#destroyPromise = undefined;
-      throw reason;
+      throw reason2;
     });
     await waitOrAbort(this.#destroyPromise, options?.signal, "destroy");
   }
@@ -10959,247 +11208,6 @@ function sqliteCode(e) {
 
 // server/src/db-write.ts
 import { constants as C2, DatabaseSync as DatabaseSync2 } from "node:sqlite";
-
-// server/src/text.ts
-import crypto from "node:crypto";
-var segmenter = new Intl.Segmenter("ja", { granularity: "word" });
-var HIRAGANA_ONLY = /^[\p{Script=Hiragana}ー]+$/u;
-var STOP = new Set(["the", "a", "an", "of", "to", "in", "is", "and", "or", "for", "on", "it", "be"]);
-var IDENT = /#\d+|[a-z0-9][a-z0-9_./#-]*[a-z0-9]/g;
-var MAX_TERM = 100;
-var OKURIGANA = /^(\p{Script=Han}+)[\p{Script=Hiragana}ー]+$/u;
-function singular(w) {
-  if (!/^[a-z]{4,}$/.test(w))
-    return w;
-  if (w.endsWith("ies"))
-    return `${w.slice(0, -3)}y`;
-  if (w.endsWith("ie"))
-    return `${w.slice(0, -2)}y`;
-  if (/(?:ss|us|x|z|ch|sh)es$/.test(w))
-    return w.slice(0, -2);
-  if (/(?:ch|sh|us)e$/.test(w))
-    return w.slice(0, -1);
-  return w.endsWith("s") && !/(?:ss|us|is)$/.test(w) ? w.slice(0, -1) : w;
-}
-function terms(text) {
-  const norm = text.normalize("NFKC").toLowerCase();
-  const out = [];
-  const keep = (w) => {
-    if (w.length > MAX_TERM || STOP.has(w) || HIRAGANA_ONLY.test(w))
-      return;
-    out.push(OKURIGANA.exec(w)?.[1] ?? singular(w));
-  };
-  for (const s of segmenter.segment(norm))
-    if (s.isWordLike)
-      keep(s.segment.trim());
-  for (const m of norm.matchAll(IDENT))
-    if (m[0].length >= 3)
-      keep(m[0]);
-  return out.filter(Boolean);
-}
-var QUESTION = new Set([
-  ...[
-    "why",
-    "what",
-    "which",
-    "when",
-    "where",
-    "who",
-    "how",
-    "do",
-    "does",
-    "did",
-    "we",
-    "our",
-    "us",
-    "you",
-    "i",
-    "are",
-    "was",
-    "were"
-  ],
-  ...[
-    "will",
-    "would",
-    "should",
-    "can",
-    "could",
-    "there",
-    "this",
-    "that",
-    "with",
-    "from",
-    "any",
-    "ever",
-    "long",
-    "use",
-    "used",
-    "using"
-  ],
-  ...["add", "get", "make", "have", "has", "not", "no", "yes", "reason"],
-  ...["理由", "仕組", "何", "方", "場合", "今", "件"]
-]);
-var sha256 = (s) => crypto.createHash("sha256").update(s).digest();
-function uuidFrom(...parts) {
-  const b = crypto.createHash("sha256").update(parts.join("\x00")).digest().subarray(0, 16);
-  b[6] = (b[6] ?? 0) & 15 | 128;
-  b[8] = (b[8] ?? 0) & 63 | 128;
-  const h = b.toString("hex");
-  return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
-}
-var bytes = (s) => Buffer.byteLength(s, "utf8");
-function head(s, n) {
-  if (bytes(s) <= n)
-    return s;
-  let out = "";
-  let used = 0;
-  for (const ch of s) {
-    const b = bytes(ch);
-    if (used + b > n)
-      break;
-    out += ch;
-    used += b;
-  }
-  return out;
-}
-function tail(s, n) {
-  if (bytes(s) <= n)
-    return s;
-  const chars = [...s];
-  let used = 0;
-  let i = chars.length;
-  while (i > 0) {
-    const b = bytes(chars[i - 1] ?? "");
-    if (used + b > n)
-      break;
-    used += b;
-    i--;
-  }
-  return chars.slice(i).join("");
-}
-var clean = (s) => s.replaceAll("\x00", "");
-var visible = (s) => s.replace(/(?!\p{Join_Control}|\p{Variation_Selector})\p{Default_Ignorable_Code_Point}/gu, "");
-var SECRETS = [
-  [/\bsk-(?:proj-|ant-)?[A-Za-z0-9_-]{20,}/g, "API key"],
-  [/\b[srp]k_(?:live|test)_[A-Za-z0-9]{16,}/g, "API key"],
-  [/\bwhsec_[A-Za-z0-9+/=]{16,}/g, "webhook signing secret"],
-  [/\bpa-[A-Za-z0-9_-]{20,}/g, "API key"],
-  [/\bAIza[0-9A-Za-z_-]{35}/g, "API key"],
-  [/\bnpg_[A-Za-z0-9]{12,}/g, "database password"],
-  [/\bnapi_[A-Za-z0-9]{30,}/g, "API key"],
-  [/\bnpm_[A-Za-z0-9]{36}\b/g, "npm token"],
-  [/\bglpat-[A-Za-z0-9_-]{20,}/g, "GitLab token"],
-  [/\bgh[pousr]_[A-Za-z0-9]{30,}/g, "GitHub token"],
-  [/\bgithub_pat_[A-Za-z0-9_]{40,}/g, "GitHub token"],
-  [/\bxox[abprs]-[A-Za-z0-9-]{10,}/g, "Slack token"],
-  [/https:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9/]+/g, "Slack webhook"],
-  [/\bAKIA[0-9A-Z]{16}\b/g, "AWS key"],
-  [/(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g, "JWT"],
-  [/\b(?:Bearer|BEARER)\s+(?=[A-Za-z0-9._~+/=-]{0,512}\d)[A-Za-z0-9._~+/=-]{16,}/g, "auth header value"]
-];
-var AUTH_HEADER = /(\bAuthorization["']?\s*[:=]\s*(?:["']\s*)?(?:Bearer|Basic|Token|Digest)\s+)[A-Za-z0-9._~+/=-]{8,}/gi;
-var HEADER_BEARER = /(:[ \t]*(?:["'][ \t]*)?bearer[ \t]+)[A-Za-z0-9._~+/=-]{16,}/gi;
-var ENV_ASSIGN = /\b((?:[A-Z][A-Z0-9_]*_)?(?:API|SECRET|MASTER|ENCRYPTION|PRIVATE|ACCESS|SIGNING|AUTH)?KEY|[A-Z][A-Z0-9_]*_(?:PASS|PWD)|(?:[A-Z][A-Z0-9_]*?)?(?:TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIALS?))(\s*=\s*)(?:"(?!\$)[^"\n]+"|'(?!\$)[^'\n]+'|(?![$"'])[^\s"']+)/g;
-var FIELD_NAME = /(?:(?:api|account|access|private|secret)[-_]?key|secret|token|passw(?:or)?d)["']?\s*(?::=|=>|[:=])\s*/gi;
-var MAX_QUOTED = 4096;
-var BARE_HEAD = /[^\s"',;)]{1,256}/y;
-var BARE_REST = /[^\s"',;)]*/y;
-var NEXT_PARAM = /&[A-Za-z_][\w.-]*=/;
-var bareAt = (re, text, at) => {
-  re.lastIndex = at;
-  const v = re.exec(text)?.[0] ?? "";
-  const cut = v.search(NEXT_PARAM);
-  return cut < 0 ? v : v.slice(0, cut);
-};
-function secretValue(quoted, v) {
-  if (v.length < 8 || /^\$(?:\{|[A-Za-z_])/.test(v))
-    return false;
-  if (!quoted)
-    return !/^[#$]/.test(v) && /\d/.test(v) && /[A-Za-z]/.test(v) && !/[()]/.test(v);
-  if (/^#[0-9a-f]{3,8}$/i.test(v) || !/[A-Za-z0-9]/.test(v))
-    return false;
-  return !/\s/.test(v) || v.split(/\s+/).some((w) => /\d/.test(w) && /[A-Za-z]/.test(w));
-}
-function maskFields(text) {
-  let out = "";
-  let last = 0;
-  FIELD_NAME.lastIndex = 0;
-  for (let m = FIELD_NAME.exec(text);m; m = FIELD_NAME.exec(text)) {
-    const at = m.index + m[0].length;
-    const q = text[at];
-    let quote = "";
-    let value;
-    if (q === '"' || q === "'") {
-      const close = text.indexOf(q, at + 1);
-      if (close < 0 || close - at - 1 > MAX_QUOTED)
-        continue;
-      value = text.slice(at + 1, close);
-      if (value.includes(`
-`))
-        continue;
-      quote = q;
-    } else {
-      value = bareAt(BARE_HEAD, text, at);
-    }
-    if (!secretValue(quote !== "", value))
-      continue;
-    if (!quote && value.length === 256)
-      value += bareAt(BARE_REST, text, at + 256);
-    out += `${text.slice(last, at)}${quote}[redacted]`;
-    last = at + quote.length + value.length;
-    FIELD_NAME.lastIndex = last;
-  }
-  return out + text.slice(last);
-}
-var MYSQL_COMMAND = /\bmysql(?:dump|admin)?\b(?:'[^'\n]*'|"[^"\n]*"|[^\n;&|\\'"]|\\\r?\n|\\(?!\r?\n))*/g;
-var MYSQL_PASSWORD = /(\s-p)(?:'[^'\n]*'|"[^"\n]*"|(?=[^\s-])\S+)/;
-var URL_CREDENTIALS = /\b((?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|rediss?|amqps?|https?):\/\/[^:\s/@]*:)[^\s/]*@([^@\s/?#]+)/g;
-var KEY_BEGIN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/g;
-var KEY_END = /-----END [A-Z ]*PRIVATE KEY-----/g;
-function maskPrivateKeys(text) {
-  const ends = [...text.matchAll(KEY_END)].map((m) => [m.index, m.index + m[0].length]);
-  if (ends.length === 0)
-    return text;
-  let out = "";
-  let last = 0;
-  let e = 0;
-  for (const m of text.matchAll(KEY_BEGIN)) {
-    const after = m.index + m[0].length;
-    if (m.index < last)
-      continue;
-    while (e < ends.length && (ends[e]?.[0] ?? 0) < after)
-      e++;
-    const end = ends[e];
-    if (!end)
-      break;
-    out += `${text.slice(last, m.index)}[redacted: private key]`;
-    last = end[1];
-  }
-  return out + text.slice(last);
-}
-function mask(text) {
-  let out = maskFields(maskPrivateKeys(text).replace(URL_CREDENTIALS, "$1[redacted]@$2").replace(AUTH_HEADER, "$1[redacted]").replace(HEADER_BEARER, "$1[redacted]").replace(ENV_ASSIGN, "$1$2[redacted]")).replace(MYSQL_COMMAND, (command) => command.replace(MYSQL_PASSWORD, "$1[redacted]"));
-  for (const [re, what] of SECRETS)
-    out = out.replace(re, `[redacted: ${what}]`);
-  return out;
-}
-var reason = (e) => explain(e, 0) || "unknown failure";
-var plural = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
-function explain(e, depth) {
-  if (!(e instanceof Error)) {
-    try {
-      return String(e);
-    } catch {
-      return "";
-    }
-  }
-  const own = e.message || (e.name === "Error" || e.name === "AggregateError" ? "" : e.name);
-  const parts = depth >= 3 ? [] : [...e instanceof AggregateError ? e.errors : [], ...e.cause === undefined ? [] : [e.cause]];
-  const inner = parts.map((x) => explain(x, depth + 1)).filter(Boolean).join(" / ");
-  return own && inner ? `${own} (${inner})` : own || inner;
-}
-
-// server/src/db-write.ts
 var ddl = null;
 var DDL = () => ddl ??= new Set([
   "SQLITE_ALTER_TABLE",

package/dist/mcp-record.js

@@ -45822,27 +45822,80 @@ var MYSQL_PASSWORD = /(\s-p)(?:'[^'\n]*'|"[^"\n]*"|(?=[^\s-])\S+)/;
 var URL_CREDENTIALS = /\b((?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|rediss?|amqps?|https?):\/\/[^:\s/@]*:)[^\s/]*@([^@\s/?#]+)/g;
 var KEY_BEGIN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/g;
 var KEY_END = /-----END [A-Z ]*PRIVATE KEY-----/g;
-function maskPrivateKeys(text) {
+function keyBlocks(text) {
   const ends = [...text.matchAll(KEY_END)].map((m) => [m.index, m.index + m[0].length]);
-  if (ends.length === 0)
-    return text;
-  let out = "";
+  const out = [];
   let last = 0;
   let e = 0;
-  for (const m of text.matchAll(KEY_BEGIN)) {
-    const after = m.index + m[0].length;
-    if (m.index < last)
-      continue;
-    while (e < ends.length && (ends[e]?.[0] ?? 0) < after)
-      e++;
-    const end = ends[e];
-    if (!end)
-      break;
-    out += `${text.slice(last, m.index)}[redacted: private key]`;
-    last = end[1];
+  if (ends.length > 0)
+    for (const m of text.matchAll(KEY_BEGIN)) {
+      const after = m.index + m[0].length;
+      if (m.index < last)
+        continue;
+      while (e < ends.length && (ends[e]?.[0] ?? 0) < after)
+        e++;
+      const end = ends[e];
+      if (!end)
+        break;
+      out.push([m.index, end[1]]);
+      last = end[1];
+    }
+  return out;
+}
+function maskPrivateKeys(text) {
+  let out = "";
+  let last = 0;
+  for (const [a, b] of keyBlocks(text)) {
+    out += `${text.slice(last, a)}[redacted: private key]`;
+    last = b;
   }
   return out + text.slice(last);
 }
+function privateKeyRanges(text) {
+  return byteRanges(text, keyBlocks(text));
+}
+function byteRanges(text, ranges) {
+  const out = [];
+  let at = 0;
+  let pos = 0;
+  for (const [a, b] of ranges) {
+    pos += bytes(text.slice(at, a));
+    const end = pos + bytes(text.slice(a, b));
+    out.push([pos, end]);
+    at = b;
+    pos = end;
+  }
+  return out;
+}
+var PLACEHOLDER = /\[redacted(?:: [^\]\n]{1,40})?\]/g;
+function placeholderRanges(masked) {
+  return [...masked.matchAll(PLACEHOLDER)].map((x) => [x.index, x.index + x[0].length]);
+}
+function starts(hay, needle) {
+  const out = [];
+  for (let at = hay.indexOf(needle);at >= 0; at = hay.indexOf(needle, at + 1))
+    out.push(at);
+  return out;
+}
+function quoteSpan(raw, masked, quote) {
+  const q = Buffer.from(quote, "utf8");
+  if (q.length === 0)
+    return null;
+  const m = Buffer.from(masked, "utf8");
+  if (raw === masked) {
+    const at = m.indexOf(q);
+    return at < 0 ? null : [at, at + q.length];
+  }
+  const holes = byteRanges(masked, placeholderRanges(masked));
+  let h = 0;
+  const kept = starts(m, q).filter((at) => {
+    while ((holes[h]?.[1] ?? Number.POSITIVE_INFINITY) <= at)
+      h++;
+    return !((holes[h]?.[0] ?? Number.POSITIVE_INFINITY) < at + q.length);
+  });
+  const first = kept[0];
+  return first !== undefined && kept.length === starts(Buffer.from(raw, "utf8"), q).length ? [first, first + q.length] : null;
+}
 function mask(text) {
   let out = maskFields(maskPrivateKeys(text).replace(URL_CREDENTIALS, "$1[redacted]@$2").replace(AUTH_HEADER, "$1[redacted]").replace(HEADER_BEARER, "$1[redacted]").replace(ENV_ASSIGN, "$1$2[redacted]")).replace(MYSQL_COMMAND, (command) => command.replace(MYSQL_PASSWORD, "$1[redacted]"));
   for (const [re, what] of SECRETS)
@@ -46053,14 +46106,61 @@ function readText(root, rel) {
 function findSymbol(text, symbol2) {
   const re = new RegExp(`(?<![\\w$])${literal3(symbol2)}(?![\\w$])`);
   const lines = text.split(/\r?\n/);
-  const i = lines.findIndex((l) => re.test(l));
-  return i < 0 ? null : { line: i + 1, excerpt: (lines[i] ?? "").trim().slice(0, 200) };
+  return { lines, i: lines.findIndex((l) => re.test(l)) };
+}
+function swallowed(root, rel, symbol2) {
+  if (mask(symbol2) !== symbol2)
+    return true;
+  const text = root ? readText(root, rel) : null;
+  if (text === undefined)
+    return true;
+  if (text === null)
+    return false;
+  const re = new RegExp(`(?<![\\w$])${literal3(symbol2)}(?![\\w$])`, "g");
+  let raw = 0;
+  for (let m = re.exec(text);m; m = re.exec(text))
+    raw++;
+  if (raw === 0)
+    return false;
+  const masked = mask(text);
+  const holes = placeholderRanges(masked);
+  let h = 0;
+  let kept = 0;
+  re.lastIndex = 0;
+  for (let m = re.exec(masked);m; m = re.exec(masked)) {
+    while ((holes[h]?.[1] ?? Number.POSITIVE_INFINITY) < m.index)
+      h++;
+    if (!((holes[h]?.[0] ?? Number.POSITIVE_INFINITY) <= m.index + symbol2.length))
+      kept++;
+  }
+  return kept !== raw;
+}
+function masksSymbol(root, rel, symbol2) {
+  const trimmed = symbol2.trim();
+  return swallowed(root, rel, symbol2) || trimmed !== symbol2 && trimmed !== "" && swallowed(root, rel, trimmed);
 }
 function locate(root, rel, symbol2) {
   if (!root)
     return null;
   const text = readText(root, rel);
-  return typeof text === "string" ? findSymbol(text, symbol2) : null;
+  if (typeof text !== "string")
+    return null;
+  const { lines, i } = findSymbol(text, symbol2);
+  if (i < 0)
+    return null;
+  const line = lines[i] ?? "";
+  const from = bytes(lines.slice(0, i).join(`
+`)) + (i > 0 ? 1 : 0);
+  if (privateKeyRanges(lines.join(`
+`)).some(([a, b]) => a < from + bytes(line) && b > from))
+    return { line: i + 1, excerpt: "[redacted: private key]" };
+  const before = lines.slice(0, i).map((l) => `${l}
+`).join("");
+  const after = lines.slice(i + 1).map((l) => `
+${l}`).join("");
+  const own2 = mask(line);
+  const cut = mask(before + line) !== mask(before) + own2 || mask(line + after) !== own2 + mask(after);
+  return { line: i + 1, excerpt: cut ? "[redacted]" : own2.trim().slice(0, 200) };
 }
 
 // server/src/project.ts
@@ -46750,9 +46850,23 @@ import { promisify } from "node:util";
 var exec = promisify(execFile);
 var MAX_ISSUES = 5;
 var CLOSES = /\b(?:close[sd]?|fix(?:e[sd])?|resolve[sd]?)\s*:?\s+(?:([\w.-]+\/[\w.-]+)#|https:\/\/github\.com\/([\w.-]+\/[\w.-]+)\/issues\/|#)(\d{1,9})\b/gi;
+function visible2(body) {
+  let out = "";
+  let at = 0;
+  for (;; ) {
+    const open2 = body.indexOf("<!--", at);
+    if (open2 < 0)
+      return out + body.slice(at);
+    out += body.slice(at, open2);
+    const close = body.indexOf("-->", open2 + 4);
+    if (close < 0)
+      return out;
+    at = close + 3;
+  }
+}
 function closingRefs(body, repo) {
   const here = repo?.toLowerCase();
-  return [...body.matchAll(CLOSES)].flatMap((m) => {
+  return [...visible2(body).matchAll(CLOSES)].flatMap((m) => {
     const named = (m[1] ?? m[2])?.toLowerCase();
     return !named || named === here ? [Number(m[3])] : [];
   });
@@ -47198,19 +47312,36 @@ async function checkRecord(db, target, raw) {
       adoption.push({ source: s.id, start: span[0], end: span[1], route });
     }
     const anchors = [];
+    const fallbacks = new Set;
     for (const a of u.anchors) {
       const p = repoPath(a.path);
       if (!p) {
         problems.push(`${key}: anchor path ${JSON.stringify(head(a.path, 80))} is not inside the repository; left out`);
         continue;
       }
+      const symbol2 = a.symbol && masksSymbol(target.root, p, a.symbol) ? undefined : a.symbol;
+      if (a.symbol && !symbol2)
+        problems.push(`${key}: anchor symbol in ${p} is text Sphica masks; the anchor keeps only its path`);
       let commit = a.commit;
       if (commit && !(target.root && commitHolds(target.root, commit, p))) {
         problems.push(`${key}: commit ${commit.slice(0, 12)} does not hold ${p} in the repository${target.root ? "" : " (no working tree to check)"}; the anchor keeps no commit`);
         commit = undefined;
       }
       const observation = a.role === "evidence" && !commit && target.sessionId ? (await db.selectFrom("edit_observation").select("id").where("session_id", "=", target.sessionId).where("path", "=", p).orderBy("id", "desc").executeTakeFirst())?.id ?? null : null;
-      anchors.push({ ...a, commit, path: p, observation });
+      const planned = { ...a, symbol: symbol2, commit, path: p, observation };
+      if (a.symbol && !symbol2)
+        fallbacks.add(planned);
+      anchors.push(planned);
+    }
+    const place = (x) => `${x.path}\x00${x.role}\x00${x.commit}\x00${x.lines ? [x.lines[0], Math.max(...x.lines)] : ""}`;
+    const covered = new Set(anchors.filter((x) => !x.symbol && !fallbacks.has(x)).map(place));
+    for (const x of [...fallbacks]) {
+      if (!covered.has(place(x))) {
+        covered.add(place(x));
+        continue;
+      }
+      problems.push(`${key}: another path-only anchor on ${x.path} already covers it; left out`);
+      anchors.splice(anchors.indexOf(x), 1);
     }
     const aliases = [...new Set(u.aliases.map((a) => a.trim()))];
     const bad = aliases.filter((a) => !a || a.length > 40);
@@ -47332,12 +47463,13 @@ ${checked.errors.map((e) => `  ${e}`).join(`
       }).onConflict((oc) => oc.doNothing()).execute();
     }
     for (const a of p.anchors) {
-      const at = a.lines ? null : a.symbol ? locate(target.root, a.path, a.symbol) : null;
+      const symbol2 = a.symbol && !masksSymbol(target.root, a.path, a.symbol) ? a.symbol : undefined;
+      const at = a.lines ? null : symbol2 ? locate(target.root, a.path, symbol2) : null;
       const lines = a.lines ?? (at ? [at.line, at.line] : null);
       await trx.insertInto("unit_anchor").values({
         unit_id: id,
         path: a.path,
-        symbol: a.symbol ?? null,
+        symbol: symbol2 ?? null,
         commit_sha: a.commit ?? null,
         line_start: lines?.[0] ?? null,
         line_end: lines ? Math.max(lines[0], lines[1]) : null,
@@ -47535,15 +47667,24 @@ function readExcerpt(root, file2) {
   } catch {
     throw new Error(`${p} is not UTF-8 text`);
   }
-  const starts = [0];
+  const starts2 = [0];
   for (let i = 0;i < buf.length; i++)
     if (buf[i] === 10 && i + 1 < buf.length)
-      starts.push(i + 1);
+      starts2.push(i + 1);
   const [a, b] = file2.lines;
-  if (a > b || b > starts.length)
-    throw new Error(`${p} has ${starts.length} lines; lines ${a}-${b} are not in it`);
-  const text2 = buf.subarray(starts[a - 1], b < starts.length ? starts[b] : buf.length).toString("utf8");
-  return { path: p, commit, blob, size, lines: [a, b], text: text2 };
+  if (a > b || b > starts2.length)
+    throw new Error(`${p} has ${starts2.length} lines; lines ${a}-${b} are not in it`);
+  const from = starts2[a - 1] ?? 0;
+  const to = b < starts2.length ? starts2[b] ?? buf.length : buf.length;
+  if (privateKeyRanges(buf.toString("utf8")).some(([s, e]) => s < to && e > from && (s < from || e > to)))
+    throw new Error(`${p} lines ${a}-${b} are inside a private key; cite lines outside it`);
+  const raw = buf.subarray(from, to).toString("utf8");
+  const text2 = mask(raw);
+  const before = buf.subarray(0, from).toString("utf8");
+  const after = buf.subarray(to).toString("utf8");
+  if (mask(before + raw) !== mask(before) + text2 || mask(raw + after) !== text2 + mask(after))
+    throw new Error(`${p} lines ${a}-${b} cut through text Sphica masks; cite more lines around it`);
+  return { path: p, commit, blob, size, lines: [a, b], raw, text: text2 };
 }
 var locate3 = (body, q) => {
   const at = Buffer.from(body, "utf8").indexOf(Buffer.from(q, "utf8"));
@@ -47607,8 +47748,10 @@ async function checkGlean(db, target, raw) {
           if (!target.root)
             throw new Error("the repository is not known");
           excerpt = readExcerpt(target.root, op.file);
-          if (!locate3(excerpt.text, op.quote))
+          if (!locate3(excerpt.raw, op.quote))
             errors3.push(`${what}: quote not found in ${excerpt.path} lines ${op.file.lines.join("-")}`);
+          else if (!quoteSpan(excerpt.raw, excerpt.text, op.quote))
+            errors3.push(`${what}: the quote also appears in text Sphica masks; quote a longer or different part`);
         } catch (e) {
           errors3.push(`${what}: ${e.message}`);
         }
@@ -47629,6 +47772,10 @@ async function checkGlean(db, target, raw) {
     }
     if (op.op === "anchor" && !repoPath(op.path))
       errors3.push(`${what}: the path is not inside the repository`);
+    const pinned = op.op === "anchor" ? op : op.op === "replace_anchor" ? op.to : null;
+    const pinnedPath = pinned && repoPath(pinned.path);
+    if (pinned?.symbol && pinnedPath && masksSymbol(target.root, pinnedPath, pinned.symbol))
+      errors3.push(`${what}: the symbol is text Sphica masks; anchor a name, not a key`);
     if (op.op === "anchor" && op.commit) {
       const rel2 = repoPath(op.path);
       if (rel2 && !(target.root && commitHolds(target.root, op.commit, rel2)))
@@ -47718,24 +47865,25 @@ async function checkGlean(db, target, raw) {
 }
 async function excerptSource(trx, projectId2, x) {
   const external2 = `file:${x.path}@${x.blob}#L${x.lines[0]}-${x.lines[1]}`;
-  const found = await trx.selectFrom("source").select("id").where("project_id", "=", projectId2).where("kind", "=", "file_excerpt").where("external_id", "=", external2).executeTakeFirst();
-  if (found)
+  const hash2 = sha256(x.text);
+  const found = await trx.selectFrom("source").select(["id", "revision", "content_hash"]).where("project_id", "=", projectId2).where("kind", "=", "file_excerpt").where("external_id", "=", external2).orderBy("revision", "desc").executeTakeFirst();
+  if (found?.content_hash.equals(hash2))
     return found.id;
   const now = iso(Date.now());
-  const partial2 = Buffer.byteLength(x.text, "utf8") !== x.size;
   const row = await trx.insertInto("source").values({
     project_id: projectId2,
     kind: "file_excerpt",
     artifact: `file:${x.path}`,
     external_id: external2,
-    revision: 1,
+    revision: (found?.revision ?? 0) + 1,
     author_kind: "person",
     created_at: now,
     captured_at: now,
     text: x.text,
-    truncated: partial2 ? 1 : 0,
+    truncated: bytes(x.raw) !== x.size ? 1 : 0,
+    redacted: x.text !== x.raw ? 1 : 0,
     original_bytes: x.size,
-    content_hash: sha256(x.text),
+    content_hash: hash2,
     path: x.path,
     line_start: x.lines[0],
     line_end: x.lines[1],
@@ -47785,7 +47933,10 @@ ${c.errors.map((e) => `  ${e}`).join(`
     touched.set(p.unitId, op.unit);
     if (op.op === "add_evidence") {
       const s = p.excerpt ? { id: await excerptSource(trx, target.projectId, p.excerpt), text: p.excerpt.text } : await trx.selectFrom("source").select(["id", "text"]).where("id", "=", Number(op.source?.slice(1))).executeTakeFirstOrThrow();
-      const at = locate3(s.text, op.quote) ?? [0, 0];
+      const at = (p.excerpt ? quoteSpan(p.excerpt.raw, s.text, op.quote) : locate3(s.text, op.quote)) ?? [
+        0,
+        0
+      ];
       await trx.insertInto("unit_evidence").values({
         unit_id: p.unitId,
         source_id: s.id,
@@ -47812,11 +47963,13 @@ ${c.errors.map((e) => `  ${e}`).join(`
       changed2.push(`${op.unit}: adopted`);
     } else if (op.op === "anchor" || op.op === "replace_anchor") {
       const to = op.op === "anchor" ? op : op.to;
-      const at = to.symbol ? locate(target.root, repoPath(to.path) ?? to.path, to.symbol) : null;
+      const rel = repoPath(to.path) ?? to.path;
+      const symbol2 = to.symbol && !masksSymbol(target.root, rel, to.symbol) ? to.symbol : null;
+      const at = symbol2 ? locate(target.root, rel, symbol2) : null;
       const added = await trx.insertInto("unit_anchor").values({
         unit_id: p.unitId,
-        path: repoPath(to.path) ?? to.path,
-        symbol: to.symbol ?? null,
+        path: rel,
+        symbol: symbol2,
         commit_sha: op.op === "anchor" ? op.commit ?? null : null,
         line_start: at?.line ?? null,
         line_end: at?.line ?? null,

package/dist/mcp.js

@@ -45821,8 +45821,7 @@ function readText(root, rel) {
 function findSymbol(text, symbol2) {
   const re = new RegExp(`(?<![\\w$])${literal3(symbol2)}(?![\\w$])`);
   const lines = text.split(/\r?\n/);
-  const i = lines.findIndex((l) => re.test(l));
-  return i < 0 ? null : { line: i + 1, excerpt: (lines[i] ?? "").trim().slice(0, 200) };
+  return { lines, i: lines.findIndex((l) => re.test(l)) };
 }
 function checkAnchor(root, a) {
   if (!root)
@@ -45834,12 +45833,12 @@ function checkAnchor(root, a) {
     return { state: "unknown", line: null };
   if (!a.symbol)
     return { state: "located", line: a.line_start };
-  const found = findSymbol(text, a.symbol);
-  if (!found)
+  const { i } = findSymbol(text, a.symbol);
+  if (i < 0)
     return { state: "missing", line: null };
   return {
-    state: a.line_start === null || a.line_start === found.line ? "located" : "moved",
-    line: found.line
+    state: a.line_start === null || a.line_start === i + 1 ? "located" : "moved",
+    line: i + 1
   };
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sphica",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
   "license": "MIT",
   "type": "module",

package/skills/glean/SKILL.md

@@ -67,9 +67,9 @@ read tools `search` and `read`. Pass the repository root as `cwd` to every tool.
 
 | Op | What it does |
 |---|---|
-| `add_evidence` | Cites a `source` ref or a committed `file` (path, commit, lines). `role` as in trace. When the owner reports what someone else said, add `reported_speaker`: it stays the owner's report, never that person's statement or an adoption |
+| `add_evidence` | Cites a `source` ref or a committed `file` (path, commit, lines). `role` as in trace. When the owner reports what someone else said, add `reported_speaker`: it stays the owner's report, never that person's statement or an adoption. A file excerpt is stored with keys masked, so quote words around a key, never the key, and cite whole lines around it: a range that cuts through a private key, or leaves a key's name outside, is refused |
 | `adopt` | The owner's (or a maintainer's) words that settle a decision or constraint. "Kimura said it was agreed" is not adoption; the owner saying "let's make it final" is |
-| `anchor` / `replace_anchor` | Adds a code location, or replaces one whose code moved (`from` and `to`, citing the owner's words); the old one is kept as history. A replacement carries no commit, so an implementation whose proof was the replaced anchor goes back to candidate: add an `anchor` op with `commit` in the same batch to keep it active |
+| `anchor` / `replace_anchor` | Adds a code location, or replaces one whose code moved (`from` and `to`, citing the owner's words); the old one is kept as history. A replacement carries no commit, so an implementation whose proof was the replaced anchor goes back to candidate: add an `anchor` op with `commit` in the same batch to keep it active. A `symbol` that is a key or a value Sphica masks is refused: anchor a name, or the path alone |
 | `retract_evidence` / `retract_adoption` | Marks a link mistaken, citing the owner's words (`reason_source`, `reason_quote`). When the record cites the same source more than once, add `quote` to say which one. It is kept as history, and the record is judged again |
 | `resolve_conflict` | Ends an unresolved conflict between `unit` and `with`, citing the owner's words (`reason_source`, `reason_quote`). Until then neither record is shown on its own |
 | `withdraw` | Withdraws a record the owner says no longer holds, citing the owner's words |

package/skills/harvest/SKILL.md

@@ -53,7 +53,7 @@ and only by saying so: "we rejected yarn", "let's keep SQLite". check refuses th
 ## What to record
 
 - Options someone proposed and a maintainer declined, with the reason given: a `decision` whose rejected option carries its `why` and evidence
-- What the pull request implemented: an `implementation` citing the commit message or the body, with an `evidence` anchor when a path and symbol are named
+- What the pull request implemented: an `implementation` citing the commit message or the body, with an `evidence` anchor when a path and symbol are named (a `symbol` that is a key or a value Sphica masks is dropped, keeping the path)
 - The problem the closed issue describes, when it states a rule ("exports must never include private notes"): a `constraint` citing the issue body
 - Review findings that led to a change (`finding`), paths tried and abandoned (`dead_end`), questions left open (`question`)
 

package/skills/trace/SKILL.md

@@ -80,7 +80,7 @@ The `"..."` stands for the other language's words: in this example, `"データ
 | `evidence` | Required. `source` is a ref from context, `quote` is copied **exactly** from that message (a phrase is enough). `role`: `states`, `proposes`, `rejects`, `explains`, `implements`. When the owner reports what someone else said, add `reported_speaker` |
 | `options` | Options compared, with `outcome` `chosen` / `rejected` / `deferred` / `proposed` and the `why` given. Evidence is optional per option |
 | `adoption` | Decisions and constraints only: the owner's words that settle it. **Only owner messages adopt.** The AI proposing something and the owner not objecting is not adoption; leave it out and the record stays a candidate |
-| `anchors` | Only where the record has a code location: `path` relative to the repository root, `symbol` when there is one, `role` `applies_to` (where it applies) or `evidence` (code that shows it was done; add `commit` when known). When an adopted decision or constraint governs how one existing code location behaves (keeping it as it is included), give it `applies_to` there, even if this work did not change it: delivery shows it when that file is read or edited. Confirm the path in the repository; do not infer one from a broad topic, and leave it unanchored when several places are plausible. `no_code_surface` may say why there is none |
+| `anchors` | Only where the record has a code location: `path` relative to the repository root, `symbol` when there is one, `role` `applies_to` (where it applies) or `evidence` (code that shows it was done; add `commit` when known). When an adopted decision or constraint governs how one existing code location behaves (keeping it as it is included), give it `applies_to` there, even if this work did not change it: delivery shows it when that file is read or edited. Confirm the path in the repository; do not infer one from a broad topic, and leave it unanchored when several places are plausible. `no_code_surface` may say why there is none. A `symbol` must be a name in the code, never a key or a value Sphica masks: such a symbol is dropped and the anchor keeps only its path (save reports it) |
 | `aliases` | 8 to 12 short search words in **both Japanese and English** a later reader might type: synonyms, the other language's words, abbreviations. Search only; never evidence. Not broad words that match everything (`code`, `fix`, `update`) |
 | `supersedes` | The key of a live record this one replaces (context lists them). The old one is marked superseded, never deleted |
 | `conflicts` | Keys of live records this one contradicts without replacing them. Both are held back from automatic injection until resolved |