swarmdo 1.8.0 → 1.10.0

package/.claude/helpers/statusline.cjs

@@ -515,7 +515,7 @@ function getCostFromStdin() {
 // misses, the displayed version is meaningful (matches what the user
 // installed), not a stale hard-coded string.
 function getPkgVersion() {
-  let ver = '1.8.0';
+  let ver = '1.10.0';
   try {
     const home = os.homedir();
     const pkgPaths = [

package/README.md

@@ -2,7 +2,7 @@
 
 [![swarmdo](swarmdo/assets/swarmdo-banner.svg)](https://swarmdo.com)
 
-[![npm version (swarmdo)](https://img.shields.io/badge/npx%20swarmdo-v1.8.0-cb3837?style=for-the-badge&logo=npm&logoColor=white)](https://github.com/SwarmDo/swarmdo/releases)
+[![npm version (swarmdo)](https://img.shields.io/badge/npx%20swarmdo-v1.10.0-cb3837?style=for-the-badge&logo=npm&logoColor=white)](https://github.com/SwarmDo/swarmdo/releases)
 [![MIT License](https://img.shields.io/badge/License-MIT-yellow?style=for-the-badge)](https://github.com/SwarmDo/swarmdo/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/swarmdo.com-e2a33c?style=for-the-badge&logoColor=black)](https://swarmdo.com)
 [![Star on GitHub](https://img.shields.io/github/stars/SwarmDo/swarmdo?style=for-the-badge&logo=github&color=gold)](https://github.com/SwarmDo/swarmdo)
@@ -278,6 +278,8 @@ The recent release train added a full day-to-day operations layer around the swa
 | `swarmdo transcript` (alias `tx`) | **Export any Claude Code session** to clean markdown — system noise stripped, ready to share; `transcript search <query>` full-text-searches every session |
 | `swarmdo compact` | **Compress noisy command output** before it reaches an LLM — strip ANSI, collapse repeats, fold `node_modules` stack frames, window long logs. `npm test 2>&1 \| swarmdo compact` or `swarmdo compact -- npm test` (exit code propagates). Deterministic, zero tokens |
 | `swarmdo codegraph` (alias `cg`) | **Queryable symbol index** — `codegraph index` scans TS/JS for exported symbols; `query <name>` (with `--fuzzy`/`--kind`) and `file <path>` answer "where is X defined / what does this file export" from `.swarm/codegraph.json` instead of grep+read round-trips. 1,750 symbols across 289 files in <1s. Also exposed as MCP tools (`codegraph_query`/`file`/`index`/`stats`) so agents query the index in-session |
+| `swarmdo redact` | **Mask secrets before they reach an LLM/log/memory** — detect API keys, tokens, and private keys (gitleaks-style rule catalog + Shannon-entropy fallback) and redact them. Stdin filter (`cat deploy.log \| swarmdo redact`), command-wrap (`swarmdo redact -- npm run deploy`), or `--scan` to fail CI on any secret. Also MCP tools (`redact_text`/`redact_scan`). Deterministic, zero tokens |
+| `swarmdo pack` | **Bundle a repo into one AI-context blob** — walk the tree (respects `.gitignore` + glob `--include`/`--exclude`, skips binaries/node_modules), emit markdown/xml/json/plain with a directory tree and per-file + total token estimates. `swarmdo pack --tokens` for a budget breakdown; `--redact` masks secrets first. Deterministic |
 | `swarmdo integrations` (alias `integrate`) | **Use swarmdo from Codex CLI, GitHub Copilot CLI, and pi** — one command wires AGENTS.md + each CLI's MCP config (idempotent, dry-run first, never touches your Claude Code setup) |
 | OpenRouter model pool | **Let swarms pick from any models you configure** — declare tier-mapped OpenRouter models in `swarmdo.config.json`; the router Thompson-samples among them per task and the execution layer dispatches the winner |
 | `swarmdo changelog` (alias `notes`) | **Release notes from conventional commits** — `--out NOTES.md` feeds `gh release create --notes-file` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "swarmdo",
-  "version": "1.8.0",
+  "version": "1.10.0",
   "description": "Swarmdo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
   "main": "dist/index.js",
   "type": "module",

package/v3/@swarmdo/cli/dist/src/commands/index.js

@@ -22,6 +22,12 @@ const commandLoaders = {
     // Deterministic command-output compression (rtk/headroom demand) — a
     // zero-token stream filter, distinct from caveman `compress` for files.
     compact: () => import('./compact.js'),
+    // Secret detection + redaction on the agent data path (gitleaks/trufflehog
+    // demand) — mask API keys/tokens before they reach an LLM/log/memory.
+    redact: () => import('./redact.js'),
+    // Repo→AI-context bundle (repomix demand) — one promptable blob with tree +
+    // token counts; swarmdo's context-assembly primitive.
+    pack: () => import('./pack.js'),
     // Queryable exported-symbol index (codegraph demand) — where things are
     // defined without grep+read round-trips.
     codegraph: () => import('./codegraph.js'),
@@ -255,7 +261,7 @@ export async function getCommandsByCategory() {
     // three slots from 'statusline' onward (completionsCmd received the
     // statusline module, analyzeCmd received completions, …), scrambling the
     // categorized help. Every load now has a named slot.
-    const [daemonCmd, doctorCmd, embeddingsCmd, neuralCmd, performanceCmd, securityCmd, swarmvectorCmd, hiveMindCmd, configCmd, statuslineCmd, compressCmd, efficiencyCmd, completionsCmd, migrateCmd, workflowCmd, analyzeCmd, routeCmd, progressCmd, providersCmd, pluginsCmd, deploymentCmd, claimsCmd, issuesCmd, updateCmd, processCmd, guidanceCmd, applianceCmd, cleanupCmd, autopilotCmd, demoCmd, usageCmd, repairCmd, hudCmd, compactCmd, codegraphCmd,] = await Promise.all([
+    const [daemonCmd, doctorCmd, embeddingsCmd, neuralCmd, performanceCmd, securityCmd, swarmvectorCmd, hiveMindCmd, configCmd, statuslineCmd, compressCmd, efficiencyCmd, completionsCmd, migrateCmd, workflowCmd, analyzeCmd, routeCmd, progressCmd, providersCmd, pluginsCmd, deploymentCmd, claimsCmd, issuesCmd, updateCmd, processCmd, guidanceCmd, applianceCmd, cleanupCmd, autopilotCmd, demoCmd, usageCmd, repairCmd, hudCmd, compactCmd, codegraphCmd, redactCmd, packCmd,] = await Promise.all([
         loadCommand('daemon'), loadCommand('doctor'), loadCommand('embeddings'), loadCommand('neural'),
         loadCommand('performance'), loadCommand('security'), loadCommand('swarmvector'), loadCommand('hive-mind'),
         loadCommand('config'), loadCommand('statusline'), loadCommand('compress'), loadCommand('efficiency'),
@@ -263,7 +269,7 @@ export async function getCommandsByCategory() {
         loadCommand('analyze'), loadCommand('route'), loadCommand('progress'), loadCommand('providers'),
         loadCommand('plugins'), loadCommand('deployment'), loadCommand('claims'), loadCommand('issues'),
         loadCommand('update'), loadCommand('process'), loadCommand('guidance'), loadCommand('appliance'),
-        loadCommand('cleanup'), loadCommand('autopilot'), loadCommand('demo'), loadCommand('usage'), loadCommand('repair'), loadCommand('hud'), loadCommand('compact'), loadCommand('codegraph'),
+        loadCommand('cleanup'), loadCommand('autopilot'), loadCommand('demo'), loadCommand('usage'), loadCommand('repair'), loadCommand('hud'), loadCommand('compact'), loadCommand('codegraph'), loadCommand('redact'), loadCommand('pack'),
     ]);
     return {
         primary: [
@@ -279,7 +285,7 @@ export async function getCommandsByCategory() {
         utility: [
             configCmd, doctorCmd, daemonCmd, completionsCmd,
             migrateCmd, workflowCmd, demoCmd,
-            statuslineCmd, compressCmd, compactCmd, efficiencyCmd,
+            statuslineCmd, compressCmd, compactCmd, redactCmd, packCmd, efficiencyCmd,
         ].filter(Boolean),
         analysis: [
             analyzeCmd, routeCmd, progressCmd, usageCmd, hudCmd, codegraphCmd,

package/v3/@swarmdo/cli/dist/src/commands/pack.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `swarmdo pack` — bundle a repo (or subset) into one AI-friendly context blob.
+ *
+ *   swarmdo pack                         # markdown bundle of the repo → stdout
+ *   swarmdo pack src --format xml -o ctx.xml
+ *   swarmdo pack --include '*.ts' --exclude '*.test.ts'
+ *   swarmdo pack --tokens                # just per-file + total token counts
+ *   swarmdo pack --redact                # mask secrets in each file first
+ *
+ * The fs walk lives here (default skips + .gitignore + glob include/exclude +
+ * binary/size guards); the pure engine (../pack/pack.ts) does formatting +
+ * token accounting. --redact composes the ../redact engine so secrets never
+ * land in the bundle.
+ */
+import type { Command } from '../types.js';
+export declare const packCommand: Command;
+export default packCommand;
+//# sourceMappingURL=pack.d.ts.map

package/v3/@swarmdo/cli/dist/src/commands/pack.js

@@ -0,0 +1,184 @@
+/**
+ * `swarmdo pack` — bundle a repo (or subset) into one AI-friendly context blob.
+ *
+ *   swarmdo pack                         # markdown bundle of the repo → stdout
+ *   swarmdo pack src --format xml -o ctx.xml
+ *   swarmdo pack --include '*.ts' --exclude '*.test.ts'
+ *   swarmdo pack --tokens                # just per-file + total token counts
+ *   swarmdo pack --redact                # mask secrets in each file first
+ *
+ * The fs walk lives here (default skips + .gitignore + glob include/exclude +
+ * binary/size guards); the pure engine (../pack/pack.ts) does formatting +
+ * token accounting. --redact composes the ../redact engine so secrets never
+ * land in the bundle.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { output } from '../output.js';
+import { packFiles, makeIgnoreMatcher } from '../pack/pack.js';
+import { redactText } from '../redact/redact.js';
+const SKIP_DIRS = new Set([
+    'node_modules', '.git', '.swarm', 'dist', 'dist-standalone', 'build',
+    'coverage', '.next', '.turbo', 'out', 'vendor', '.cache',
+]);
+const BINARY_EXT = new Set([
+    'png', 'jpg', 'jpeg', 'gif', 'webp', 'ico', 'pdf', 'zip', 'gz', 'tar', 'tgz',
+    'woff', 'woff2', 'ttf', 'eot', 'mp4', 'mov', 'mp3', 'wav', 'wasm', 'so', 'dylib',
+    'dll', 'exe', 'bin', 'node', 'lock', 'jpeg',
+]);
+/** Looks binary if it has a NUL in the first 8 KiB. */
+function looksBinary(buf) {
+    const n = Math.min(buf.length, 8192);
+    for (let i = 0; i < n; i++)
+        if (buf[i] === 0)
+            return true;
+    return false;
+}
+function walk(o) {
+    const files = [];
+    const stack = [o.root];
+    while (stack.length) {
+        const dir = stack.pop();
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const e of entries) {
+            const full = path.join(dir, e.name);
+            const rel = path.relative(o.root, full).split(path.sep).join('/');
+            if (e.isDirectory()) {
+                if (SKIP_DIRS.has(e.name))
+                    continue;
+                if (o.gitignore?.(rel + '/'))
+                    continue;
+                stack.push(full);
+            }
+            else if (e.isFile()) {
+                if (o.gitignore?.(rel))
+                    continue;
+                if (o.exclude?.(rel))
+                    continue;
+                if (o.include && !o.include(rel))
+                    continue;
+                if (BINARY_EXT.has(e.name.slice(e.name.lastIndexOf('.') + 1).toLowerCase()))
+                    continue;
+                let stat;
+                try {
+                    stat = fs.statSync(full);
+                }
+                catch {
+                    continue;
+                }
+                if (stat.size > o.maxBytes)
+                    continue;
+                let buf;
+                try {
+                    buf = fs.readFileSync(full);
+                }
+                catch {
+                    continue;
+                }
+                if (looksBinary(buf))
+                    continue;
+                files.push({ path: rel, content: buf.toString('utf8') });
+            }
+        }
+    }
+    return files;
+}
+function csv(v) {
+    if (typeof v !== 'string' || !v)
+        return undefined;
+    return v.split(',').map((s) => s.trim()).filter(Boolean);
+}
+async function run(ctx) {
+    const repoRoot = ctx.cwd || process.cwd();
+    const scanRoot = ctx.args[0] ? path.resolve(repoRoot, ctx.args[0]) : repoRoot;
+    // NB: use --style, not --format — `format` is a global flag (text/json/table,
+    // default 'text') that would shadow ours (#1425 removed its short alias).
+    const format = (typeof ctx.flags.style === 'string' ? ctx.flags.style : 'md');
+    if (!['md', 'xml', 'json', 'plain'].includes(format)) {
+        output.printError(`unknown --style '${format}' (use md|xml|json|plain)`);
+        return { success: false, exitCode: 1 };
+    }
+    const maxKb = typeof ctx.flags['max-file-size'] === 'string' ? parseInt(ctx.flags['max-file-size'], 10) : 512;
+    const maxBytes = (Number.isFinite(maxKb) ? maxKb : 512) * 1024;
+    const includePats = csv(ctx.flags.include);
+    const excludePats = csv(ctx.flags.exclude);
+    let gitignore;
+    if (ctx.flags['no-gitignore'] !== true) {
+        try {
+            const gi = fs.readFileSync(path.join(scanRoot, '.gitignore'), 'utf8').split('\n');
+            gitignore = makeIgnoreMatcher(gi);
+        }
+        catch { /* no .gitignore */ }
+    }
+    const files = walk({
+        root: scanRoot,
+        include: includePats ? makeIgnoreMatcher(includePats) : undefined,
+        exclude: excludePats ? makeIgnoreMatcher(excludePats) : undefined,
+        gitignore,
+        maxBytes,
+    });
+    if (files.length === 0) {
+        output.printError('no files matched — check the path, --include/--exclude, or .gitignore');
+        return { success: false, exitCode: 1 };
+    }
+    const opts = { format, tree: ctx.flags['no-tree'] !== true };
+    if (ctx.flags.redact === true) {
+        opts.transform = (content) => redactText(content).output;
+    }
+    const { output: bundle, stats } = packFiles(files, opts);
+    // --tokens: report accounting only, no bundle.
+    if (ctx.flags.tokens === true) {
+        if (ctx.flags.json === true) {
+            output.printJson(stats);
+        }
+        else {
+            for (const f of [...stats.perFile].sort((a, b) => b.tokens - a.tokens)) {
+                output.writeln(`${String(f.tokens).padStart(8)}  ${f.path}`);
+            }
+            output.writeln(output.bold(`${String(stats.tokens).padStart(8)}  TOTAL (${stats.files} files, ${(stats.bytes / 1024).toFixed(1)} KiB)`));
+        }
+        return { success: true, exitCode: 0 };
+    }
+    const outFile = (typeof ctx.flags.output === 'string' && ctx.flags.output) || (typeof ctx.flags.o === 'string' && ctx.flags.o);
+    if (outFile) {
+        fs.writeFileSync(path.resolve(repoRoot, outFile), bundle);
+        output.printSuccess(`packed ${stats.files} files (~${stats.tokens} tokens) → ${outFile}`);
+    }
+    else {
+        process.stdout.write(bundle);
+        if (!process.stdout.isTTY) { /* piped: keep stdout clean */ }
+        process.stderr.write(output.dim(`packed ${stats.files} files (~${stats.tokens} tokens)\n`));
+    }
+    return { success: true, exitCode: 0 };
+}
+export const packCommand = {
+    name: 'pack',
+    description: 'Bundle a repo (or subset) into one AI-friendly context blob (md/xml/json/plain) with a tree + token counts — deterministic',
+    options: [
+        { name: 'style', description: 'output format: md (default), xml, json, plain', type: 'string' },
+        { name: 'include', description: 'comma-separated globs; keep only matching files (e.g. "*.ts,*.md")', type: 'string' },
+        { name: 'exclude', description: 'comma-separated globs to skip (e.g. "*.test.ts")', type: 'string' },
+        { name: 'output', short: 'o', description: 'write the bundle to a file instead of stdout', type: 'string' },
+        { name: 'no-tree', description: 'omit the directory tree header', type: 'boolean' },
+        { name: 'no-gitignore', description: "don't apply the repo's .gitignore", type: 'boolean' },
+        { name: 'max-file-size', description: 'skip files larger than N KiB (default 512)', type: 'string' },
+        { name: 'redact', description: 'mask secrets in each file before bundling (uses `swarmdo redact`)', type: 'boolean' },
+        { name: 'tokens', description: 'print per-file + total token estimates only, no bundle', type: 'boolean' },
+        { name: 'json', description: 'with --tokens, emit the stats as JSON', type: 'boolean' },
+    ],
+    examples: [
+        { command: 'swarmdo pack src -o context.md', description: 'Bundle src/ to a markdown file' },
+        { command: "swarmdo pack --include '*.ts' --exclude '*.test.ts'", description: 'Only non-test TypeScript' },
+        { command: 'swarmdo pack --tokens', description: 'Token budget breakdown, largest first' },
+        { command: 'swarmdo pack --redact --style xml', description: 'Secret-safe XML bundle' },
+    ],
+    action: run,
+};
+export default packCommand;
+//# sourceMappingURL=pack.js.map

package/v3/@swarmdo/cli/dist/src/commands/redact.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `swarmdo redact` — strip secrets from a stream before it reaches an LLM, a
+ * log, or memory. Sibling of `compact`: same stdin-filter / command-wrap shape,
+ * but instead of de-noising it detects API keys / tokens / private keys (rule
+ * catalog + entropy fallback) and masks them. Deterministic, zero tokens.
+ *
+ *   cat deploy.log | swarmdo redact          # stdin filter → redacted stdout
+ *   swarmdo redact -- npm run deploy          # wrap a command (stdout+stderr)
+ *   swarmdo redact --scan -- terraform apply  # scan only; exit 1 if secrets found (CI gate)
+ *
+ * Redacted text → stdout (pipeable); a one-line summary → stderr unless --quiet.
+ * In --scan mode nothing is rewritten and the process exits non-zero when any
+ * secret is present, so it gates CI. See ../redact/redact.ts.
+ */
+import type { Command } from '../types.js';
+export declare const redactCommand: Command;
+export default redactCommand;
+//# sourceMappingURL=redact.d.ts.map

package/v3/@swarmdo/cli/dist/src/commands/redact.js

@@ -0,0 +1,128 @@
+/**
+ * `swarmdo redact` — strip secrets from a stream before it reaches an LLM, a
+ * log, or memory. Sibling of `compact`: same stdin-filter / command-wrap shape,
+ * but instead of de-noising it detects API keys / tokens / private keys (rule
+ * catalog + entropy fallback) and masks them. Deterministic, zero tokens.
+ *
+ *   cat deploy.log | swarmdo redact          # stdin filter → redacted stdout
+ *   swarmdo redact -- npm run deploy          # wrap a command (stdout+stderr)
+ *   swarmdo redact --scan -- terraform apply  # scan only; exit 1 if secrets found (CI gate)
+ *
+ * Redacted text → stdout (pipeable); a one-line summary → stderr unless --quiet.
+ * In --scan mode nothing is rewritten and the process exits non-zero when any
+ * secret is present, so it gates CI. See ../redact/redact.ts.
+ */
+import { spawnSync } from 'node:child_process';
+import { output } from '../output.js';
+import { redactText, scanText, formatFindingsSummary } from '../redact/redact.js';
+function readStdin() {
+    return new Promise((resolve) => {
+        const chunks = [];
+        process.stdin.on('data', (c) => chunks.push(Buffer.from(c)));
+        process.stdin.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+        process.stdin.on('error', () => resolve(Buffer.concat(chunks).toString('utf8')));
+    });
+}
+function optsFromFlags(ctx) {
+    const opts = { entropy: ctx.flags['no-entropy'] !== true };
+    const keep = ctx.flags.keep;
+    if (typeof keep === 'number')
+        opts.keepPrefix = keep;
+    else if (typeof keep === 'string')
+        opts.keepPrefix = parseInt(keep, 10) || 0;
+    if (typeof ctx.flags.token === 'string')
+        opts.token = ctx.flags.token;
+    if (typeof ctx.flags.threshold === 'string')
+        opts.entropyThreshold = parseFloat(ctx.flags.threshold);
+    const allow = ctx.flags.allow;
+    if (typeof allow === 'string' && allow)
+        opts.allowlist = allow.split(',').map((s) => s.trim()).filter(Boolean);
+    return opts;
+}
+async function run(ctx) {
+    const opts = optsFromFlags(ctx);
+    const quiet = ctx.flags.quiet === true;
+    const scanMode = ctx.flags.scan === true;
+    const asJson = ctx.flags.json === true;
+    // Gather input: either the wrapped command's combined output, or stdin.
+    let input;
+    let wrappedCode = 0;
+    const wrapping = ctx.args.length > 0;
+    if (wrapping) {
+        const [cmd, ...cmdArgs] = ctx.args;
+        const r = spawnSync(cmd, cmdArgs, {
+            cwd: ctx.cwd,
+            encoding: 'utf8',
+            maxBuffer: 256 * 1024 * 1024,
+            stdio: ['inherit', 'pipe', 'pipe'],
+        });
+        if (r.error) {
+            output.printError(`failed to run ${cmd}: ${r.error.message}`);
+            return { success: false, exitCode: 127 };
+        }
+        input = (r.stdout || '') + (r.stderr || '');
+        wrappedCode = r.status ?? (r.signal ? 1 : 0);
+    }
+    else {
+        if (process.stdin.isTTY) {
+            output.writeln(output.error('Usage: swarmdo redact [--scan] -- <command>   OR   <command> | swarmdo redact'));
+            return { success: false, exitCode: 1 };
+        }
+        input = await readStdin();
+    }
+    // Scan mode: report findings, never rewrite; exit non-zero if any secret.
+    if (scanMode) {
+        const findings = scanText(input, opts);
+        if (asJson) {
+            process.stdout.write(JSON.stringify({ count: findings.length, findings }, null, 2) + '\n');
+        }
+        else if (findings.length === 0) {
+            if (!quiet)
+                process.stderr.write('redact: no secrets found\n');
+        }
+        else {
+            for (const f of findings) {
+                process.stderr.write(`${f.line}:${f.column}  ${f.ruleId}  ${f.description}\n`);
+            }
+            if (!quiet)
+                process.stderr.write(formatFindingsSummary(findings) + '\n');
+        }
+        // A wrapped command that itself failed should still surface its failure.
+        const code = findings.length > 0 ? 1 : wrappedCode;
+        return { success: code === 0, exitCode: code };
+    }
+    // Redact mode: rewrite and emit.
+    const { output: redacted, findings } = redactText(input, opts);
+    process.stdout.write(redacted);
+    if (asJson) {
+        process.stderr.write(JSON.stringify({ count: findings.length, findings }, null, 2) + '\n');
+    }
+    else if (!quiet) {
+        process.stderr.write(formatFindingsSummary(findings) + '\n');
+    }
+    // In wrap mode propagate the command's exit code; in filter mode success.
+    return { success: wrappedCode === 0, exitCode: wrapping ? wrappedCode : 0 };
+}
+export const redactCommand = {
+    name: 'redact',
+    description: 'Detect & mask secrets (API keys, tokens, private keys) in a stream before it reaches an LLM/log/memory — deterministic, zero tokens',
+    options: [
+        { name: 'scan', description: 'scan only: report findings and exit 1 if any secret is present (CI gate), never rewrite', type: 'boolean' },
+        { name: 'json', description: 'emit findings as JSON', type: 'boolean' },
+        { name: 'keep', description: 'keep this many leading chars of each secret (default 3; 0 = full mask)', type: 'string' },
+        { name: 'token', description: 'replacement token after the kept prefix (default [REDACTED])', type: 'string' },
+        { name: 'no-entropy', description: 'disable the high-entropy keyword=value fallback', type: 'boolean' },
+        { name: 'threshold', description: 'entropy threshold in bits/char for the fallback (default 3.5)', type: 'string' },
+        { name: 'allow', description: 'comma-separated allowlist substrings; matching secrets are left untouched', type: 'string' },
+        { name: 'quiet', description: 'suppress the summary on stderr', type: 'boolean' },
+    ],
+    examples: [
+        { command: 'cat deploy.log | swarmdo redact', description: 'Mask secrets in a log on stdin' },
+        { command: 'swarmdo redact -- npm run deploy', description: 'Wrap a command; redact its output, exit code propagates' },
+        { command: 'swarmdo redact --scan -- terraform apply', description: 'Fail CI if the output contains secrets' },
+        { command: 'swarmdo redact --keep 0 --json', description: 'Full-mask and emit JSON findings' },
+    ],
+    action: run,
+};
+export default redactCommand;
+//# sourceMappingURL=redact.js.map

package/v3/@swarmdo/cli/dist/src/mcp-client.js

@@ -20,6 +20,7 @@ import { hiveMindTools } from './mcp-tools/hive-mind-tools.js';
 import { workflowTools } from './mcp-tools/workflow-tools.js';
 import { analyzeTools } from './mcp-tools/analyze-tools.js';
 import { codegraphTools } from './mcp-tools/codegraph-tools.js';
+import { redactTools } from './mcp-tools/redact-tools.js';
 import { progressTools } from './mcp-tools/progress-tools.js';
 import { embeddingsTools } from './mcp-tools/embeddings-tools.js';
 import { claimsTools } from './mcp-tools/claims-tools.js';
@@ -104,6 +105,7 @@ const TOOL_GROUPS = {
     workflow: () => workflowTools,
     analyze: () => analyzeTools,
     codegraph: () => codegraphTools,
+    redact: () => redactTools,
     progress: () => progressTools,
     embeddings: () => embeddingsTools,
     claims: () => claimsTools,

package/v3/@swarmdo/cli/dist/src/mcp-tools/index.d.ts

@@ -16,6 +16,7 @@ export { workflowTools } from './workflow-tools.js';
 export { coverageRouterTools } from '../swarmvector/coverage-tools.js';
 export { analyzeTools } from './analyze-tools.js';
 export { codegraphTools } from './codegraph-tools.js';
+export { redactTools } from './redact-tools.js';
 export { progressTools } from './progress-tools.js';
 export { transferTools } from './transfer-tools.js';
 export { securityTools } from './security-tools.js';

package/v3/@swarmdo/cli/dist/src/mcp-tools/index.js

@@ -15,6 +15,7 @@ export { workflowTools } from './workflow-tools.js';
 export { coverageRouterTools } from '../swarmvector/coverage-tools.js';
 export { analyzeTools } from './analyze-tools.js';
 export { codegraphTools } from './codegraph-tools.js';
+export { redactTools } from './redact-tools.js';
 export { progressTools } from './progress-tools.js';
 export { transferTools } from './transfer-tools.js';
 export { securityTools } from './security-tools.js';

package/v3/@swarmdo/cli/dist/src/mcp-tools/profiles.js

@@ -23,6 +23,7 @@ const LEAN_GROUPS = [
     'agentdb', // agentdb pattern store/search
     'embeddings', // embeddings_generate / search / compare
     'codegraph', // codegraph_query / file / index — "where is X defined?"
+    'redact', // redact_text / redact_scan — secret guard on the data path
 ];
 /** Balanced = lean + orchestration/session/system the average user reaches for. */
 const BALANCED_EXTRA = [

package/v3/@swarmdo/cli/dist/src/mcp-tools/redact-tools.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Redact MCP Tools
+ *
+ * Give agents a secret guard on the data path: before writing tool output or
+ * context into memory / a message / a file, an agent can mask secrets
+ * (redact_text) or check for their presence (redact_scan). Deterministic —
+ * shares the pure engine in ../redact/redact.ts with the CLI command.
+ */
+import type { MCPTool } from './types.js';
+export declare const redactTools: MCPTool[];
+//# sourceMappingURL=redact-tools.d.ts.map

package/v3/@swarmdo/cli/dist/src/mcp-tools/redact-tools.js

@@ -0,0 +1,69 @@
+/**
+ * Redact MCP Tools
+ *
+ * Give agents a secret guard on the data path: before writing tool output or
+ * context into memory / a message / a file, an agent can mask secrets
+ * (redact_text) or check for their presence (redact_scan). Deterministic —
+ * shares the pure engine in ../redact/redact.ts with the CLI command.
+ */
+import { redactText, scanText } from '../redact/redact.js';
+function optsOf(params) {
+    const opts = { entropy: params.entropy !== false };
+    if (typeof params.keepPrefix === 'number')
+        opts.keepPrefix = params.keepPrefix;
+    if (typeof params.token === 'string')
+        opts.token = params.token;
+    if (typeof params.entropyThreshold === 'number')
+        opts.entropyThreshold = params.entropyThreshold;
+    if (Array.isArray(params.allowlist))
+        opts.allowlist = params.allowlist.filter((a) => typeof a === 'string');
+    return opts;
+}
+const redactTextTool = {
+    name: 'redact_text',
+    description: 'Mask secrets (API keys, tokens, private keys) in a string before you store it in memory, put it in a message, or write it to a file. Returns the redacted text plus what was found. Deterministic; run this on any untrusted or command-derived content you are about to persist or forward.',
+    category: 'redact',
+    tags: ['security', 'secrets', 'redaction', 'safety'],
+    inputSchema: {
+        type: 'object',
+        properties: {
+            text: { type: 'string', description: 'The content to redact' },
+            keepPrefix: { type: 'number', description: 'Keep this many leading chars of each secret (default 3; 0 = full mask)' },
+            token: { type: 'string', description: 'Replacement token after the kept prefix (default [REDACTED])' },
+            entropy: { type: 'boolean', description: 'Enable the high-entropy keyword=value fallback (default true)' },
+            entropyThreshold: { type: 'number', description: 'Entropy threshold in bits/char for the fallback (default 3.5)' },
+            allowlist: { type: 'array', items: { type: 'string' }, description: 'Substrings; matching secrets are left untouched' },
+        },
+        required: ['text'],
+    },
+    handler: async (params) => {
+        if (typeof params.text !== 'string')
+            return { error: true, message: 'text is required' };
+        const { output, findings } = redactText(params.text, optsOf(params));
+        return { redacted: output, count: findings.length, findings };
+    },
+};
+const redactScanTool = {
+    name: 'redact_scan',
+    description: 'Check a string for secrets WITHOUT rewriting it — returns the list of findings (rule, line, column, description). Use to decide whether content is safe to store/forward, or to gate on it. Pair with redact_text when you actually need the masked output.',
+    category: 'redact',
+    tags: ['security', 'secrets', 'scan', 'safety'],
+    inputSchema: {
+        type: 'object',
+        properties: {
+            text: { type: 'string', description: 'The content to scan' },
+            entropy: { type: 'boolean', description: 'Enable the high-entropy keyword=value fallback (default true)' },
+            entropyThreshold: { type: 'number', description: 'Entropy threshold in bits/char for the fallback (default 3.5)' },
+            allowlist: { type: 'array', items: { type: 'string' }, description: 'Substrings to ignore' },
+        },
+        required: ['text'],
+    },
+    handler: async (params) => {
+        if (typeof params.text !== 'string')
+            return { error: true, message: 'text is required' };
+        const findings = scanText(params.text, optsOf(params));
+        return { clean: findings.length === 0, count: findings.length, findings };
+    },
+};
+export const redactTools = [redactTextTool, redactScanTool];
+//# sourceMappingURL=redact-tools.js.map

package/v3/@swarmdo/cli/dist/src/pack/pack.d.ts

@@ -0,0 +1,59 @@
+/**
+ * pack.ts — bundle a repo (or a subset) into one AI-friendly context blob.
+ *
+ * swarmdo has no context-assembly primitive: `codegraph` indexes symbols for
+ * *querying* and `compact` de-noises a *stream*, but neither emits promptable
+ * source for *feeding a model*. `pack` walks the tree (respecting default skips
+ * + a minimal .gitignore + glob include/exclude), and writes a bundle in
+ * markdown / xml / json / plain with a directory tree and per-file + total
+ * token estimates. Deterministic — same inputs, byte-identical output.
+ *
+ * Pure engine: the fs walk is injected as a file list + reader by the caller
+ * (../commands/pack.ts), so this module has no fs dependency and is trivially
+ * testable. Optional secret redaction reuses ../redact/redact.ts.
+ */
+export type PackFormat = 'md' | 'xml' | 'json' | 'plain';
+export interface PackFile {
+    /** repo-relative path, POSIX separators */
+    path: string;
+    content: string;
+}
+export interface PackOptions {
+    format?: PackFormat;
+    /** include a directory tree at the top (default true) */
+    tree?: boolean;
+    /** optional per-file transform (e.g. secret redaction) applied before bundling */
+    transform?: (content: string, path: string) => string;
+}
+export interface PackFileStat {
+    path: string;
+    bytes: number;
+    tokens: number;
+}
+export interface PackResult {
+    output: string;
+    stats: {
+        files: number;
+        bytes: number;
+        tokens: number;
+        perFile: PackFileStat[];
+    };
+}
+/**
+ * Cheap, deterministic token estimate (~4 chars/token, the widely-used rule of
+ * thumb for English + code). Not a real BPE tokenizer — good enough for budget
+ * warnings, and dependency-free.
+ */
+export declare function estimateTokens(text: string): number;
+/** Build an ASCII directory tree from a sorted file list. */
+export declare function buildTree(paths: string[]): string;
+/** Bundle files into a single context blob per `format`. */
+export declare function packFiles(input: PackFile[], opts?: PackOptions): PackResult;
+/**
+ * Minimal .gitignore-style matcher. Handles the common cases — plain names,
+ * `dir/`, `*.ext` globs, leading `/` anchors, and `!` negation — not the full
+ * spec (no `**` depth semantics beyond substring, no nested ignore files).
+ * Good enough to keep obvious noise out; full semantics is a follow-up.
+ */
+export declare function makeIgnoreMatcher(patterns: string[]): (relPath: string) => boolean;
+//# sourceMappingURL=pack.d.ts.map

package/v3/@swarmdo/cli/dist/src/pack/pack.js

@@ -0,0 +1,178 @@
+/**
+ * pack.ts — bundle a repo (or a subset) into one AI-friendly context blob.
+ *
+ * swarmdo has no context-assembly primitive: `codegraph` indexes symbols for
+ * *querying* and `compact` de-noises a *stream*, but neither emits promptable
+ * source for *feeding a model*. `pack` walks the tree (respecting default skips
+ * + a minimal .gitignore + glob include/exclude), and writes a bundle in
+ * markdown / xml / json / plain with a directory tree and per-file + total
+ * token estimates. Deterministic — same inputs, byte-identical output.
+ *
+ * Pure engine: the fs walk is injected as a file list + reader by the caller
+ * (../commands/pack.ts), so this module has no fs dependency and is trivially
+ * testable. Optional secret redaction reuses ../redact/redact.ts.
+ */
+/**
+ * Cheap, deterministic token estimate (~4 chars/token, the widely-used rule of
+ * thumb for English + code). Not a real BPE tokenizer — good enough for budget
+ * warnings, and dependency-free.
+ */
+export function estimateTokens(text) {
+    if (!text)
+        return 0;
+    return Math.ceil(text.length / 4);
+}
+/** Build an ASCII directory tree from a sorted file list. */
+export function buildTree(paths) {
+    const root = {};
+    for (const p of [...paths].sort()) {
+        const parts = p.split('/');
+        let node = root;
+        for (let i = 0; i < parts.length; i++) {
+            const part = parts[i];
+            const isFile = i === parts.length - 1;
+            if (isFile) {
+                if (!node['\0files'])
+                    node['\0files'] = [];
+                node['\0files'].push(part);
+            }
+            else {
+                node[part] = node[part] ?? {};
+                node = node[part];
+            }
+        }
+    }
+    const lines = [];
+    const walk = (node, prefix) => {
+        const dirs = Object.keys(node).filter((k) => k !== '\0files').sort();
+        const files = (node['\0files'] ?? []).sort();
+        const entries = [...dirs.map((d) => ['dir', d]), ...files.map((f) => ['file', f])];
+        entries.forEach(([kind, name], i) => {
+            const last = i === entries.length - 1;
+            lines.push(`${prefix}${last ? '└── ' : '├── '}${name}${kind === 'dir' ? '/' : ''}`);
+            if (kind === 'dir')
+                walk(node[name], prefix + (last ? '    ' : '│   '));
+        });
+    };
+    walk(root, '');
+    return lines.join('\n');
+}
+/** Pick a fenced-code language hint from a file extension. */
+function langOf(path) {
+    const ext = path.slice(path.lastIndexOf('.') + 1).toLowerCase();
+    const map = {
+        ts: 'typescript', tsx: 'tsx', js: 'javascript', jsx: 'jsx', mjs: 'javascript', cjs: 'javascript',
+        json: 'json', md: 'markdown', py: 'python', rs: 'rust', go: 'go', sh: 'bash', yml: 'yaml', yaml: 'yaml',
+        html: 'html', css: 'css', sql: 'sql', toml: 'toml',
+    };
+    return map[ext] ?? '';
+}
+function renderMarkdown(files, opts) {
+    const parts = ['# Repository context', ''];
+    if (opts.tree !== false) {
+        parts.push('## Files', '', '```', buildTree(files.map((f) => f.path)), '```', '');
+    }
+    parts.push('## Contents', '');
+    for (const f of files) {
+        const lang = langOf(f.path);
+        parts.push(`### ${f.path}`, '', '```' + lang, f.content.replace(/\n$/, ''), '```', '');
+    }
+    return parts.join('\n');
+}
+function escapeXml(s) {
+    return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+function renderXml(files, opts) {
+    const parts = ['<repository>'];
+    if (opts.tree !== false) {
+        parts.push('  <tree>', escapeXml(buildTree(files.map((f) => f.path))), '  </tree>');
+    }
+    parts.push('  <files>');
+    for (const f of files) {
+        parts.push(`    <file path="${escapeXml(f.path)}">`, escapeXml(f.content.replace(/\n$/, '')), '    </file>');
+    }
+    parts.push('  </files>', '</repository>');
+    return parts.join('\n');
+}
+function renderJson(files) {
+    return JSON.stringify({ files: files.map((f) => ({ path: f.path, content: f.content })) }, null, 2);
+}
+function renderPlain(files) {
+    const parts = [];
+    for (const f of files) {
+        parts.push('='.repeat(8) + ' ' + f.path + ' ' + '='.repeat(8), f.content.replace(/\n$/, ''), '');
+    }
+    return parts.join('\n');
+}
+/** Bundle files into a single context blob per `format`. */
+export function packFiles(input, opts = {}) {
+    const files = input
+        .map((f) => ({ path: f.path, content: opts.transform ? opts.transform(f.content, f.path) : f.content }))
+        .sort((a, b) => a.path.localeCompare(b.path));
+    const format = opts.format ?? 'md';
+    let output;
+    switch (format) {
+        case 'xml':
+            output = renderXml(files, opts);
+            break;
+        case 'json':
+            output = renderJson(files);
+            break;
+        case 'plain':
+            output = renderPlain(files);
+            break;
+        default: output = renderMarkdown(files, opts);
+    }
+    const perFile = files.map((f) => ({
+        path: f.path,
+        bytes: Buffer.byteLength(f.content, 'utf8'),
+        tokens: estimateTokens(f.content),
+    }));
+    return {
+        output,
+        stats: {
+            files: files.length,
+            bytes: perFile.reduce((n, f) => n + f.bytes, 0),
+            tokens: estimateTokens(output),
+            perFile,
+        },
+    };
+}
+/**
+ * Minimal .gitignore-style matcher. Handles the common cases — plain names,
+ * `dir/`, `*.ext` globs, leading `/` anchors, and `!` negation — not the full
+ * spec (no `**` depth semantics beyond substring, no nested ignore files).
+ * Good enough to keep obvious noise out; full semantics is a follow-up.
+ */
+export function makeIgnoreMatcher(patterns) {
+    const rules = patterns
+        .map((p) => p.trim())
+        .filter((p) => p && !p.startsWith('#'))
+        .map((p) => {
+        const negate = p.startsWith('!');
+        let body = negate ? p.slice(1) : p;
+        const dirOnly = body.endsWith('/');
+        if (dirOnly)
+            body = body.slice(0, -1);
+        const anchored = body.startsWith('/');
+        if (anchored)
+            body = body.slice(1);
+        const re = new RegExp('^' +
+            body
+                .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+                .replace(/\*/g, '[^/]*')
+                .replace(/\?/g, '[^/]') +
+            (dirOnly ? '(/|$)' : '($|/)'));
+        return { negate, anchored, re };
+    });
+    return (relPath) => {
+        let ignored = false;
+        for (const r of rules) {
+            const candidates = r.anchored ? [relPath] : [relPath, ...relPath.split('/').map((_, i, a) => a.slice(i).join('/'))];
+            if (candidates.some((c) => r.re.test(c)))
+                ignored = !r.negate;
+        }
+        return ignored;
+    };
+}
+//# sourceMappingURL=pack.js.map

package/v3/@swarmdo/cli/dist/src/redact/redact.d.ts

@@ -0,0 +1,68 @@
+/**
+ * redact.ts — deterministic secret detection + redaction for the agent data
+ * path. swarmdo pipes tool output, memory, and context into LLMs constantly;
+ * `compact` de-noises that stream but never redacts, and `security scan` is
+ * CVE-oriented, not a content filter. This engine is the missing guard: it
+ * catches API keys / tokens / private keys via a high-confidence rule catalog
+ * plus a Shannon-entropy fallback for keyword-prefixed assignments, and masks
+ * them before content reaches a model, a log, or memory.
+ *
+ * Pure + LLM-free by design — known-secret fixtures in, deterministic masked
+ * bytes out. The CLI wrapper (../commands/redact.ts) and an MCP tool share it.
+ */
+export interface RedactRule {
+    /** stable slug, e.g. 'aws-access-key' */
+    id: string;
+    /** human description for --scan output */
+    description: string;
+    /** global regex; the whole match (or capture group `group`) is the secret */
+    regex: RegExp;
+    /** if set, redact this capture group rather than the whole match */
+    group?: number;
+}
+export interface Finding {
+    ruleId: string;
+    description: string;
+    /** 1-based line number */
+    line: number;
+    /** 1-based column of the secret within the line */
+    column: number;
+    /** the raw secret text that matched */
+    match: string;
+    /** what it was replaced with */
+    redacted: string;
+}
+export interface RedactOptions {
+    /** keep this many leading chars of a secret, mask the rest (default 3) */
+    keepPrefix?: number;
+    /** the replacement token appended after the kept prefix (default '[REDACTED]') */
+    token?: string;
+    /** enable the entropy fallback for keyword=value assignments (default true) */
+    entropy?: boolean;
+    /** Shannon-entropy threshold (bits/char) above which a keyworded value is a secret (default 3.5) */
+    entropyThreshold?: number;
+    /** substrings/regexes; any secret whose match includes one is left untouched */
+    allowlist?: Array<string | RegExp>;
+}
+export interface RedactResult {
+    output: string;
+    findings: Finding[];
+}
+/**
+ * High-confidence catalog. Ordered — more specific rules (e.g. Anthropic
+ * `sk-ant-`) come before broader ones (`sk-` OpenAI) so the specific rule wins
+ * and we don't double-count. Patterns are conservative to keep false positives
+ * low; the entropy fallback covers the long tail of custom secrets.
+ */
+export declare const RULES: RedactRule[];
+/** Shannon entropy in bits/char. Pure; used by the assignment fallback. */
+export declare function shannonEntropy(s: string): number;
+/** Mask a secret: keep `keepPrefix` leading chars, then the token. */
+export declare function maskSecret(secret: string, opts?: RedactOptions): string;
+/** Scan without rewriting — returns findings only (for --scan / CI gating). */
+export declare function scanText(text: string, opts?: RedactOptions): Finding[];
+/** Redact secrets in `text`, returning the rewritten output + findings. */
+export declare function redactText(text: string, opts?: RedactOptions): RedactResult;
+/** One-line human summary for stderr. */
+export declare function formatFindingsSummary(findings: Finding[]): string;
+//# sourceMappingURL=redact.d.ts.map

package/v3/@swarmdo/cli/dist/src/redact/redact.js

@@ -0,0 +1,153 @@
+/**
+ * redact.ts — deterministic secret detection + redaction for the agent data
+ * path. swarmdo pipes tool output, memory, and context into LLMs constantly;
+ * `compact` de-noises that stream but never redacts, and `security scan` is
+ * CVE-oriented, not a content filter. This engine is the missing guard: it
+ * catches API keys / tokens / private keys via a high-confidence rule catalog
+ * plus a Shannon-entropy fallback for keyword-prefixed assignments, and masks
+ * them before content reaches a model, a log, or memory.
+ *
+ * Pure + LLM-free by design — known-secret fixtures in, deterministic masked
+ * bytes out. The CLI wrapper (../commands/redact.ts) and an MCP tool share it.
+ */
+/**
+ * High-confidence catalog. Ordered — more specific rules (e.g. Anthropic
+ * `sk-ant-`) come before broader ones (`sk-` OpenAI) so the specific rule wins
+ * and we don't double-count. Patterns are conservative to keep false positives
+ * low; the entropy fallback covers the long tail of custom secrets.
+ */
+export const RULES = [
+    { id: 'private-key', description: 'Private key block header', regex: /-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY-----/g },
+    { id: 'aws-access-key', description: 'AWS access key ID', regex: /\b(?:AKIA|ASIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASCA)[0-9A-Z]{16}\b/g },
+    { id: 'github-pat', description: 'GitHub personal access token', regex: /\bghp_[0-9A-Za-z]{36}\b/g },
+    { id: 'github-oauth', description: 'GitHub OAuth/app token', regex: /\b(?:gho|ghu|ghs|ghr)_[0-9A-Za-z]{36}\b/g },
+    { id: 'github-fine-pat', description: 'GitHub fine-grained PAT', regex: /\bgithub_pat_[0-9A-Za-z_]{82}\b/g },
+    { id: 'gitlab-pat', description: 'GitLab personal access token', regex: /\bglpat-[0-9A-Za-z_-]{20}\b/g },
+    { id: 'anthropic-key', description: 'Anthropic API key', regex: /\bsk-ant-[0-9A-Za-z-]{16,}\b/g },
+    { id: 'openai-key', description: 'OpenAI API key', regex: /\bsk-(?:proj-)?[0-9A-Za-z]{20,}\b/g },
+    { id: 'google-api-key', description: 'Google API key', regex: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+    { id: 'slack-token', description: 'Slack token', regex: /\bxox[baprs]-[0-9A-Za-z-]{10,}\b/g },
+    { id: 'slack-webhook', description: 'Slack incoming webhook', regex: /https:\/\/hooks\.slack\.com\/services\/T[0-9A-Za-z_]+\/B[0-9A-Za-z_]+\/[0-9A-Za-z_]+/g },
+    { id: 'stripe-key', description: 'Stripe secret/restricted key', regex: /\b(?:sk|rk)_live_[0-9A-Za-z]{24,}\b/g },
+    { id: 'sendgrid-key', description: 'SendGrid API key', regex: /\bSG\.[0-9A-Za-z_-]{22}\.[0-9A-Za-z_-]{43}\b/g },
+    { id: 'twilio-key', description: 'Twilio API key SID', regex: /\bSK[0-9a-fA-F]{32}\b/g },
+    { id: 'npm-token', description: 'npm access token', regex: /\bnpm_[0-9A-Za-z]{36}\b/g },
+    { id: 'jwt', description: 'JSON Web Token', regex: /\beyJ[0-9A-Za-z_-]{10,}\.eyJ[0-9A-Za-z_-]{10,}\.[0-9A-Za-z_-]{10,}\b/g },
+];
+/** Keyword-prefixed assignment, e.g. `api_key = "..."` — the value is group 1. */
+const ASSIGNMENT_RE = /(?:pass(?:word|wd)?|pwd|secret|token|api[_-]?key|apikey|access[_-]?key|auth[_-]?token|client[_-]?secret)["']?\s*[:=]\s*["']?([^\s"'`,;]{8,})/gi;
+/** Shannon entropy in bits/char. Pure; used by the assignment fallback. */
+export function shannonEntropy(s) {
+    if (!s)
+        return 0;
+    const freq = new Map();
+    for (const ch of s)
+        freq.set(ch, (freq.get(ch) ?? 0) + 1);
+    let bits = 0;
+    for (const n of freq.values()) {
+        const p = n / s.length;
+        bits -= p * Math.log2(p);
+    }
+    return bits;
+}
+/** Mask a secret: keep `keepPrefix` leading chars, then the token. */
+export function maskSecret(secret, opts = {}) {
+    const keep = Math.max(0, Math.min(opts.keepPrefix ?? 3, secret.length));
+    const token = opts.token ?? '[REDACTED]';
+    return secret.slice(0, keep) + token;
+}
+function isAllowlisted(match, allowlist) {
+    if (!allowlist || allowlist.length === 0)
+        return false;
+    return allowlist.some((a) => (typeof a === 'string' ? match.includes(a) : a.test(match)));
+}
+/** Collect all rule + entropy hits across the text, deduped by offset. */
+function collectHits(text, opts) {
+    const hits = [];
+    const claimed = []; // [start,end) ranges already taken
+    const overlaps = (start, end) => claimed.some(([s, e]) => start < e && end > s);
+    for (const rule of RULES) {
+        rule.regex.lastIndex = 0;
+        let m;
+        while ((m = rule.regex.exec(text)) !== null) {
+            const secret = rule.group != null ? m[rule.group] : m[0];
+            if (secret == null)
+                continue;
+            const start = rule.group != null ? m.index + m[0].indexOf(secret) : m.index;
+            const end = start + secret.length;
+            if (overlaps(start, end))
+                continue;
+            if (isAllowlisted(secret, opts.allowlist))
+                continue;
+            claimed.push([start, end]);
+            hits.push({ ruleId: rule.id, description: rule.description, index: start, match: secret });
+            if (m.index === rule.regex.lastIndex)
+                rule.regex.lastIndex++; // guard zero-width
+        }
+    }
+    if (opts.entropy !== false) {
+        const threshold = opts.entropyThreshold ?? 3.5;
+        ASSIGNMENT_RE.lastIndex = 0;
+        let m;
+        while ((m = ASSIGNMENT_RE.exec(text)) !== null) {
+            const value = m[1];
+            const start = m.index + m[0].indexOf(value);
+            const end = start + value.length;
+            if (overlaps(start, end))
+                continue;
+            if (isAllowlisted(value, opts.allowlist))
+                continue;
+            if (shannonEntropy(value) < threshold)
+                continue;
+            claimed.push([start, end]);
+            hits.push({ ruleId: 'high-entropy-assignment', description: 'High-entropy secret assignment', index: start, match: value });
+        }
+    }
+    return hits.sort((a, b) => a.index - b.index);
+}
+/** Map an absolute offset to 1-based {line, column}. */
+function lineColOf(text, index) {
+    let line = 1;
+    let last = -1;
+    for (let i = 0; i < index; i++) {
+        if (text[i] === '\n') {
+            line++;
+            last = i;
+        }
+    }
+    return { line, column: index - last };
+}
+/** Scan without rewriting — returns findings only (for --scan / CI gating). */
+export function scanText(text, opts = {}) {
+    return collectHits(text, opts).map((h) => {
+        const { line, column } = lineColOf(text, h.index);
+        return { ruleId: h.ruleId, description: h.description, line, column, match: h.match, redacted: maskSecret(h.match, opts) };
+    });
+}
+/** Redact secrets in `text`, returning the rewritten output + findings. */
+export function redactText(text, opts = {}) {
+    const hits = collectHits(text, opts);
+    const findings = [];
+    let out = '';
+    let cursor = 0;
+    for (const h of hits) {
+        const { line, column } = lineColOf(text, h.index);
+        const redacted = maskSecret(h.match, opts);
+        out += text.slice(cursor, h.index) + redacted;
+        cursor = h.index + h.match.length;
+        findings.push({ ruleId: h.ruleId, description: h.description, line, column, match: h.match, redacted });
+    }
+    out += text.slice(cursor);
+    return { output: out, findings };
+}
+/** One-line human summary for stderr. */
+export function formatFindingsSummary(findings) {
+    if (findings.length === 0)
+        return 'redact: no secrets found';
+    const byRule = new Map();
+    for (const f of findings)
+        byRule.set(f.ruleId, (byRule.get(f.ruleId) ?? 0) + 1);
+    const parts = [...byRule.entries()].sort((a, b) => b[1] - a[1]).map(([r, n]) => `${r}:${n}`);
+    return `redact: ${findings.length} secret${findings.length === 1 ? '' : 's'} redacted (${parts.join(', ')})`;
+}
+//# sourceMappingURL=redact.js.map

package/v3/@swarmdo/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swarmdo/cli",
-  "version": "1.8.0",
+  "version": "1.10.0",
   "type": "module",
   "description": "Swarmdo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",