ticketlens 0.38.43 → 0.38.44

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/skills/jtb/scripts/lib/secret-scanner.mjs +14 -4
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "ticketlens",
3
- "version": "0.38.43",
3
+ "version": "0.38.44",
4
4
  "description": "Jira CLI for developers — fetch ticket context, triage your queue, and stop tab-switching. Zero dependencies, all local.",
5
5
  "type": "module",
6
6
  "bin": {
package/skills/jtb/scripts/lib/secret-scanner.mjs CHANGED
@@ -32,9 +32,11 @@ const MAX_JOINED_CHUNKS = 4;
32
32
  const MAX_COMPOUND_SEGMENT_LENGTH = 15;
33
33
  const HYPHENATED_COMPOUND_RE = /^[A-Za-z]+(-[A-Za-z]+)+$/;
34
34
 
35
- // A candidate containing an unstripped '(', ')', '[', or ']' reads as code
36
- // syntax (an array/list literal element, or a function-call argument — e.g.
37
- // "['compliance', '--help']" or "matches(x)") rather than a secret fragment.
35
+ // A candidate containing an unstripped '(', ')', '[', ']', '<', or '>' reads
36
+ // as code/document syntax (an array/list literal element, a function-call
37
+ // argument, or a markup/dictionary delimiter — e.g. "['compliance', '--help']",
38
+ // "matches(x)", or a PDF object's "<</Type/Font>>") rather than a secret
39
+ // fragment.
38
40
  // Consulted ONLY from looksLikeCodeSyntax below, which downgrades a matching
39
41
  // high-entropy candidate to a warning — deliberately NOT wired into
40
42
  // isLabelWord (backlog #14 residual, code review caught this on the first
@@ -54,7 +56,15 @@ const HYPHENATED_COMPOUND_RE = /^[A-Za-z]+(-[A-Za-z]+)+$/;
54
56
  // character too, looksLikeCodeSyntax downgrades it to a WARNING rather than
55
57
  // silently exempting it, unlike the fully-silent gap the hard-wall version
56
58
  // would have reopened.
57
- const CODE_SYNTAX_RE = /[()[\]]/;
59
+ //
60
+ // Angle brackets added 2026-08-17 (backlog #19 follow-up, ported from
61
+ // RecallSecretScanner.php): Recall attachment content-based classification
62
+ // means a simple/uncompressed PDF's own object syntax
63
+ // ("obj<</Type/Font/Subtype/Type1/BaseFont/Helvetica>>endobj") is now a
64
+ // realistic scan candidate — same "structured, not random" shape ()[]
65
+ // already cover, still downgrade-only, still never consulted by
66
+ // HARD_REJECT_PATTERNS.
67
+ const CODE_SYNTAX_RE = /[()[\]<>]/;
58
68
 
59
69
  // U+200B (ZERO WIDTH SPACE) is added explicitly: despite the name, it does
60
70
  // NOT carry the Unicode White_Space property (General_Category=Cf, not Zs),