token-goat 2.9.1 → 2.9.2

package/SECURITY.md

@@ -49,7 +49,7 @@ The following are not treated as security issues unless paired with a working pr
 | an install without optional packages | `npm install --omit=optional token-goat` then `npm audit --omit=dev --omit=optional` | clean, 2 packages |
 | a default install | `npm install token-goat` then `npm audit --omit=dev` | clean, 70 packages |
 
-The repository carries an `overrides` block in [`package.json`](package.json) that pins six transitive packages to patched versions, and **npm applies `overrides` only in the root project**, so those pins do not travel to anyone who installs Token-Goat as a dependency. That distinction used to matter a great deal, because a clean repository scan was standing in for an install that was not clean. It decides one thing now, and the section on the embedding runtime below says which. Otherwise the packages those pins were protecting against are not in a consumer's tree at all, whether or not the pins travel; the block stays because the development tree still resolves them.
+The repository carries an `overrides` block in [`package.json`](package.json) that pins six packages to patched versions, and **npm applies `overrides` only in the root project**, so those pins do not travel to anyone who installs Token-Goat as a dependency. That distinction used to matter a great deal, because a clean repository scan was standing in for an install that was not clean. It decides one thing now, and the section on the embedding runtime below says which. Otherwise the packages those pins were protecting against are not in a consumer's tree at all, whether or not the pins travel; the block stays because the development tree still resolves them.
 
 There is no table of reaching advisories here any more, and the last entry in it is worth recording rather than deleting. `@xenova/transformers` was an optional dependency, which in npm means everyone got it unless they asked not to, and it carried [`protobufjs`](https://github.com/advisories/GHSA-xq3m-2v4x-88gg) through `onnx-proto` and `onnxruntime-web` -- one critical advisory and four more -- plus its own nested, older `sharp` carrying [four inherited libvips CVEs](https://github.com/advisories/GHSA-f88m-g3jw-g9cj). None of the six was fixable from here: every one sits in a transitive package with no patched version, and the pins that would have solved it do not travel to consumers.
 

package/dist/{token-goat-chunk-LHMC5ENL.mjs → token-goat-chunk-CGWACYYZ.mjs}

@@ -2,7 +2,7 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   detectHarness
-} from "./token-goat-chunk-4ZDRTNGV.mjs";
+} from "./token-goat-chunk-UZ2NFOOZ.mjs";
 
 // src/delivery_cap.ts
 var CLAUDE_CODE_BASH_OUTPUT_CAP_BYTES = 2e4;

package/dist/{token-goat-chunk-SXSWQMNP.mjs → token-goat-chunk-FXAPKVRG.mjs}

@@ -43,6 +43,7 @@ import {
   mergeNearbyHits,
   ocrImage,
   ocrIntegrityFailed,
+  parseIpv6Groups,
   parseWhereSpecs,
   pathEqClause,
   probeImageMeta,
@@ -67,7 +68,7 @@ import {
   walkProject,
   yamlLineClosesQuote,
   yamlOpenQuoteAfter
-} from "./token-goat-chunk-FDXINYK4.mjs";
+} from "./token-goat-chunk-LJ3CHCTT.mjs";
 import {
   Database,
   PER_FILE_COUNTERFACTUAL_CEILING,
@@ -121,7 +122,7 @@ import {
   unsupportedLanguageName,
   windowsCmdQuoteArg,
   withExtension
-} from "./token-goat-chunk-4ZDRTNGV.mjs";
+} from "./token-goat-chunk-UZ2NFOOZ.mjs";
 import {
   registerReset
 } from "./token-goat-chunk-AO2QD2AG.mjs";
@@ -2347,24 +2348,32 @@ function collectionTagName(state, event, defaultTagName) {
 function isMappingTag(tag) {
   return tag.nodeKind === "mapping";
 }
+function chargeMergeWork(state) {
+  state.totalMergeKeys++;
+  if (state.maxTotalMergeKeys !== -1 && state.totalMergeKeys > state.maxTotalMergeKeys) throwError$1(state, `merge keys exceeded maxTotalMergeKeys (${state.maxTotalMergeKeys})`);
+}
 function mergeKeys(state, frame, source, sourceTag) {
+  chargeMergeWork(state);
   for (const sourceKey of sourceTag.keys(source)) {
-    if (state.maxTotalMergeKeys !== -1 && ++state.totalMergeKeys > state.maxTotalMergeKeys) throwError$1(state, `merge keys exceeded maxTotalMergeKeys (${state.maxTotalMergeKeys})`);
+    chargeMergeWork(state);
     if (frame.tag.has(frame.value, sourceKey)) continue;
     const err = frame.tag.addPair(frame.value, sourceKey, sourceTag.get(source, sourceKey));
     if (err) throwError$1(state, err);
-    (frame.overridable ??= /* @__PURE__ */ new Set()).add(sourceKey);
+    frame.overridable ??= /* @__PURE__ */ new Set();
+    frame.overridable.add(sourceKey);
   }
 }
 function mergeSource(state, frame, source, sourceTag) {
   state.position = frame.keyPosition;
   if (isMappingTag(sourceTag)) mergeKeys(state, frame, source, sourceTag);
-  else if (sourceTag.nodeKind === "sequence" && Array.isArray(source)) for (const element of source) {
-    const elementTag = state.nodeTags.get(element);
-    if (!elementTag) throwError$1(state, "cannot merge mappings; the provided source object is unacceptable");
-    mergeKeys(state, frame, element, elementTag);
-  }
-  else throwError$1(state, "cannot merge mappings; the provided source object is unacceptable");
+  else if (sourceTag.nodeKind === "sequence" && Array.isArray(source)) {
+    if (source.length > 100) throwError$1(state, "abnormal merge sequence size");
+    for (const element of source) {
+      const elementTag = state.nodeTags.get(element);
+      if (!elementTag) throwError$1(state, "cannot merge mappings; the provided source object is unacceptable");
+      mergeKeys(state, frame, element, elementTag);
+    }
+  } else throwError$1(state, "cannot merge mappings; the provided source object is unacceptable");
 }
 function addMappingValue(state, frame, key, value, tag) {
   state.position = frame.keyPosition;
@@ -2707,6 +2716,24 @@ function testDocumentSeparator(state, position = state.position) {
   }
   return false;
 }
+function skipByteOrderMark(state) {
+  if (state.position === state.lineStart && state.input.charCodeAt(state.position) === 65279) {
+    state.position++;
+    state.lineStart = state.position;
+  }
+}
+function testDocumentBoundary(state) {
+  if (state.position !== state.lineStart) return false;
+  if (testDocumentSeparator(state)) return true;
+  if (state.input.charCodeAt(state.position) !== 65279) return false;
+  const snapshot = snapshotState(state);
+  skipByteOrderMark(state);
+  skipSeparationSpace(state, true);
+  const ch = state.input.charCodeAt(state.position);
+  const result = state.position === state.lineStart && (ch === 37 || ch === 45 && testDocumentSeparator(state));
+  restoreState(state, snapshot);
+  return result;
+}
 function skipUntilLineEnd(state) {
   let ch = state.input.charCodeAt(state.position);
   while (ch !== 0 && !isEol(ch)) ch = state.input.charCodeAt(++state.position);
@@ -2890,7 +2917,7 @@ function readBlockScalar(state, parentIndent, props) {
       } else if (column > 0) valueEnd = linePosition + column;
       break;
     }
-    if (linePosition === state.lineStart && testDocumentSeparator(state, linePosition)) break;
+    if (testDocumentBoundary(state)) break;
     if (!detectedIndent && contentIndent === -1 && isEol(first)) maxLeadingIndent = Math.max(maxLeadingIndent, column);
     if (!detectedIndent && contentIndent === -1 && !isEol(first)) {
       if (first === 9 && column < parentIndent) {
@@ -2943,7 +2970,7 @@ function readPlainScalar(state, nodeIndent, nodeContext, props) {
   const inFlow = nodeContext === CONTEXT_FLOW_IN;
   let multiline = false;
   while (ch !== 0) {
-    if (state.position === state.lineStart && testDocumentSeparator(state)) break;
+    if (testDocumentBoundary(state)) break;
     if (ch === 58) {
       const following = state.input.charCodeAt(state.position + 1);
       if (isWsOrEolOrEnd(following) || inFlow && isFlowIndicator(following)) break;
@@ -3300,7 +3327,7 @@ function readDocument(state) {
   const documentEvent = state.events[documentEventIndex];
   if (documentEvent?.type === EVENT_ID.DOCUMENT) documentEvent.explicitEnd = explicitEnd;
   addPopEvent(state);
-  if (!explicitEnd && state.position < state.length && !(state.position === state.lineStart && testDocumentSeparator(state))) throwError(state, "end of the stream or a document separator is expected");
+  if (!explicitEnd && state.position < state.length && !testDocumentBoundary(state)) throwError(state, "end of the stream or a document separator is expected");
 }
 function parseEvents(input, options) {
   const length = input.length;
@@ -3321,8 +3348,8 @@ function parseEvents(input, options) {
   };
   const nullpos = input.indexOf("\0");
   if (nullpos !== -1) YAMLException.throwAt(input, nullpos, "null byte is not allowed in input", state.filename);
-  if (state.input.charCodeAt(state.position) === 65279) state.position++;
   while (state.position < state.length) {
+    skipByteOrderMark(state);
     skipSeparationSpace(state, true);
     if (state.position >= state.length) break;
     const documentStart = state.position;
@@ -3363,27 +3390,108 @@ function load(input, options) {
   if (documents.length === 1) return documents[0];
   throw new YAMLException("expected a single document in the stream, but found more");
 }
-var ESCAPE_SEQUENCES = {};
-ESCAPE_SEQUENCES[0] = "\\0";
-ESCAPE_SEQUENCES[7] = "\\a";
-ESCAPE_SEQUENCES[8] = "\\b";
-ESCAPE_SEQUENCES[9] = "\\t";
-ESCAPE_SEQUENCES[10] = "\\n";
-ESCAPE_SEQUENCES[11] = "\\v";
-ESCAPE_SEQUENCES[12] = "\\f";
-ESCAPE_SEQUENCES[13] = "\\r";
-ESCAPE_SEQUENCES[27] = "\\e";
-ESCAPE_SEQUENCES[34] = '\\"';
-ESCAPE_SEQUENCES[92] = "\\\\";
-ESCAPE_SEQUENCES[133] = "\\N";
-ESCAPE_SEQUENCES[160] = "\\_";
-ESCAPE_SEQUENCES[8232] = "\\L";
-ESCAPE_SEQUENCES[8233] = "\\P";
+function hasBit(mask, bit) {
+  return (mask & 1 << bit) !== 0;
+}
+var DEFAULT_SCALAR_STYLE_RULES = {
+  applyQuoteFlowKeysOption,
+  doubleQuoteForInvisibles,
+  doubleQuoteWhitespaceOnly,
+  applyForceQuotesOption,
+  tryLongOrMultilineAsBlock,
+  quoteInvalidPlain,
+  fallbackToDoubleQuoted
+};
+function _preferredQuotedStyle(layout) {
+  if (layout.presenterOptions.quoteStyle === "single" && hasBit(layout.allowedStylesMask, SCALAR_STYLE.SINGLE_QUOTED)) return SCALAR_STYLE.SINGLE_QUOTED;
+  return SCALAR_STYLE.DOUBLE_QUOTED;
+}
+function applyQuoteFlowKeysOption(layout) {
+  if (!layout.presenterOptions.quoteFlowKeys) return;
+  if (!layout.isKey || !layout.flowOnly || layout.style !== SCALAR_STYLE.PLAIN) return;
+  layout.style = SCALAR_STYLE.DOUBLE_QUOTED;
+}
+function doubleQuoteForInvisibles(layout) {
+  if (layout.style === SCALAR_STYLE.PLAIN && /[\t\x7F-\xA0\u2028\u2029\uFEFF\uFFFE\uFFFF]/.test(layout.node.value)) layout.style = SCALAR_STYLE.DOUBLE_QUOTED;
+}
+function doubleQuoteWhitespaceOnly(layout) {
+  if (layout.style === SCALAR_STYLE.PLAIN && /^\s+$/.test(layout.node.value)) layout.style = SCALAR_STYLE.DOUBLE_QUOTED;
+}
+function applyForceQuotesOption(layout) {
+  if (!layout.presenterOptions.forceQuotes) return;
+  if (layout.isKey || layout.style !== SCALAR_STYLE.PLAIN) return;
+  layout.style = layout.node.value.includes("\n") ? SCALAR_STYLE.DOUBLE_QUOTED : _preferredQuotedStyle(layout);
+}
+function tryLongOrMultilineAsBlock(layout) {
+  if (layout.style !== SCALAR_STYLE.PLAIN || layout.isKey) return;
+  const value = layout.node.value;
+  const multiline = value.indexOf("\n") !== -1;
+  if (!hasBit(layout.allowedStylesMask, SCALAR_STYLE.LITERAL_BLOCK)) {
+    if (multiline) layout.style = SCALAR_STYLE.DOUBLE_QUOTED;
+    return;
+  }
+  const w = layout.presenterOptions.lineWidth;
+  if (w === -1) {
+    if (multiline) layout.style = SCALAR_STYLE.LITERAL_BLOCK;
+    return;
+  }
+  const availableWidth = Math.max(Math.min(w, 40), w - layout.shiftOfContent);
+  let position = 0;
+  let shouldFold = false;
+  while (position <= value.length) {
+    let lineEnd = value.length;
+    const nextLineBreak = value.indexOf("\n", position);
+    if (nextLineBreak !== -1) lineEnd = nextLineBreak;
+    const line = value.slice(position, lineEnd);
+    if (line.length > availableWidth && line[0] !== " " && / [^ \t]/.test(line)) shouldFold = true;
+    if (nextLineBreak === -1) break;
+    position = nextLineBreak + 1;
+  }
+  if (shouldFold) layout.style = SCALAR_STYLE.FOLDED_BLOCK;
+  else if (multiline) layout.style = SCALAR_STYLE.LITERAL_BLOCK;
+}
+function quoteInvalidPlain(layout) {
+  if (layout.style === SCALAR_STYLE.PLAIN && !hasBit(layout.allowedStylesMask, SCALAR_STYLE.PLAIN)) layout.style = _preferredQuotedStyle(layout);
+}
+function fallbackToDoubleQuoted(layout) {
+  if (!hasBit(layout.allowedStylesMask, layout.style)) layout.style = SCALAR_STYLE.DOUBLE_QUOTED;
+}
+var SRC_C_PRINTABLE = "[\\x09\\x0A\\x0D\\x20-\\x7E\\x85\\xA0-\\uD7FF\\uE000-\\uFFFD\\u{10000}-\\u{10FFFF}]";
+var SRC_B_CHAR = "[\\n\\r]";
+var SRC_C_BYTE_ORDER_MARK = "\\uFEFF";
+var SRC_S_WHITE = "[ \\t]";
+var SRC_NB_CHAR = `(?:(?!(?:${SRC_B_CHAR}|${SRC_C_BYTE_ORDER_MARK}))${SRC_C_PRINTABLE})`;
+var SRC_NS_CHAR = `(?:(?!${SRC_S_WHITE})${SRC_NB_CHAR})`;
+var SRC_NB_JSON = "[\\x09\\x20-\\uD7FF\\uE000-\\uFFFF\\u{10000}-\\u{10FFFF}]";
+var SRC_C_INDICATOR = "[-?:,\\[\\]{}#&*!|>'\"%@`]";
+var SRC_C_FLOW_INDICATOR = "[,\\[\\]{}]";
+var SRC_NS_PLAIN_SAFE_FLOW_OUT = SRC_NS_CHAR;
+var SRC_NS_PLAIN_SAFE_FLOW_IN = `(?:(?!${SRC_C_FLOW_INDICATOR})${SRC_NS_CHAR})`;
+var SRC_NS_PLAIN_FIRST_FLOW_OUT = `(?:(?:(?!${SRC_C_INDICATOR})${SRC_NS_CHAR})|[?:-](?=${SRC_NS_PLAIN_SAFE_FLOW_OUT}))`;
+var SRC_NS_PLAIN_FIRST_FLOW_IN = `(?:(?:(?!${SRC_C_INDICATOR})${SRC_NS_CHAR})|[?:-](?=${SRC_NS_PLAIN_SAFE_FLOW_IN}))`;
+var SRC_NS_PLAIN_CHAR_FLOW_OUT = `(?:(?:(?![:#])${SRC_NS_PLAIN_SAFE_FLOW_OUT})|:(?=${SRC_NS_PLAIN_SAFE_FLOW_OUT}))#*`;
+var SRC_NS_PLAIN_CHAR_FLOW_IN = `(?:(?:(?![:#])${SRC_NS_PLAIN_SAFE_FLOW_IN})|:(?=${SRC_NS_PLAIN_SAFE_FLOW_IN}))#*`;
+var SRC_NB_NS_PLAIN_IN_LINE_FLOW_OUT = `(?:${SRC_S_WHITE}*${SRC_NS_PLAIN_CHAR_FLOW_OUT})*`;
+var SRC_NB_NS_PLAIN_IN_LINE_FLOW_IN = `(?:${SRC_S_WHITE}*${SRC_NS_PLAIN_CHAR_FLOW_IN})*`;
+var SRC_NS_PLAIN_ONE_LINE_FLOW_OUT = `${SRC_NS_PLAIN_FIRST_FLOW_OUT}#*${SRC_NB_NS_PLAIN_IN_LINE_FLOW_OUT}`;
+var SRC_NS_PLAIN_ONE_LINE_FLOW_IN = `${SRC_NS_PLAIN_FIRST_FLOW_IN}#*${SRC_NB_NS_PLAIN_IN_LINE_FLOW_IN}`;
+var SRC_NS_PLAIN_ONE_LINE_BLOCK_KEY = SRC_NS_PLAIN_ONE_LINE_FLOW_OUT;
+var SRC_NS_PLAIN_ONE_LINE_FLOW_KEY = SRC_NS_PLAIN_ONE_LINE_FLOW_IN;
+var SRC_S_NS_PLAIN_NEXT_LINE_FLOW_OUT = `\\n+${SRC_NS_PLAIN_CHAR_FLOW_OUT}${SRC_NB_NS_PLAIN_IN_LINE_FLOW_OUT}`;
+var SRC_S_NS_PLAIN_NEXT_LINE_FLOW_IN = `\\n+${SRC_NS_PLAIN_CHAR_FLOW_IN}${SRC_NB_NS_PLAIN_IN_LINE_FLOW_IN}`;
+var SRC_NS_PLAIN_MULTI_LINE_FLOW_OUT = `${SRC_NS_PLAIN_ONE_LINE_FLOW_OUT}(?:${SRC_S_NS_PLAIN_NEXT_LINE_FLOW_OUT})*`;
+var SRC_NS_PLAIN_MULTI_LINE_FLOW_IN = `${SRC_NS_PLAIN_ONE_LINE_FLOW_IN}(?:${SRC_S_NS_PLAIN_NEXT_LINE_FLOW_IN})*`;
+var NS_PLAIN_FLOW_OUT = new RegExp(`^(?:${SRC_NS_PLAIN_MULTI_LINE_FLOW_OUT})$`, "u");
+var NS_PLAIN_FLOW_IN = new RegExp(`^(?:${SRC_NS_PLAIN_MULTI_LINE_FLOW_IN})$`, "u");
+var NS_PLAIN_BLOCK_KEY = new RegExp(`^(?:${SRC_NS_PLAIN_ONE_LINE_BLOCK_KEY})$`, "u");
+var NS_PLAIN_FLOW_KEY = new RegExp(`^(?:${SRC_NS_PLAIN_ONE_LINE_FLOW_KEY})$`, "u");
+var NB_SINGLE_ONE_LINE = new RegExp(`^(?:${SRC_NB_JSON})*$`, "u");
+var NB_SINGLE_MULTI_LINE = new RegExp(`^(?:${SRC_NB_JSON}|\\n)*$`, "u");
+var BLOCK_SCALAR_CONTENT = new RegExp(`^(?:${SRC_NB_CHAR}|\\n)*$`, "u");
 var DEFAULT_PRESENTER_OPTIONS = {
   indent: 2,
   seqNoIndent: false,
   seqInlineFirst: true,
-  sortKeys: false,
   lineWidth: 80,
   flowBracketPadding: false,
   flowSkipCommaSpace: false,
@@ -3391,6 +3499,7 @@ var DEFAULT_PRESENTER_OPTIONS = {
   quoteFlowKeys: false,
   quoteStyle: "single",
   forceQuotes: false,
+  scalarStyleRules: Object.keys(DEFAULT_SCALAR_STYLE_RULES).map((name) => Reflect.get(DEFAULT_SCALAR_STYLE_RULES, name)),
   tagBeforeAnchor: false
 };
 var DEFAULT_DUMP_OPTIONS = {
@@ -3399,6 +3508,7 @@ var DEFAULT_DUMP_OPTIONS = {
   skipInvalid: false,
   noRefs: false,
   flowLevel: -1,
+  sortKeys: false,
   transform: () => {
   }
 };
@@ -4574,43 +4684,6 @@ function isBlockedIpv4Octets(a, b) {
   if (a === 0) return true;
   return false;
 }
-function parseIpv6Groups(text) {
-  let rest = text;
-  const zoneAt = rest.indexOf("%");
-  if (zoneAt !== -1) rest = rest.slice(0, zoneAt);
-  if (!/^[0-9a-f:.]+$/i.test(rest) || !rest.includes(":")) return null;
-  const lastColon = rest.lastIndexOf(":");
-  const tail = rest.slice(lastColon + 1);
-  if (tail.includes(".")) {
-    const quad = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(tail);
-    if (!quad) return null;
-    const octets = [Number(quad[1]), Number(quad[2]), Number(quad[3]), Number(quad[4])];
-    if (octets.some((n) => n > 255)) return null;
-    const hi = octets[0] << 8 | octets[1];
-    const lo = octets[2] << 8 | octets[3];
-    rest = `${rest.slice(0, lastColon + 1)}${hi.toString(16)}:${lo.toString(16)}`;
-  }
-  const parseGroup = (g) => /^[0-9a-f]{1,4}$/i.test(g) ? parseInt(g, 16) : null;
-  const halves = rest.split("::");
-  if (halves.length > 2) return null;
-  let parts;
-  if (halves.length === 2) {
-    const left = halves[0].length > 0 ? halves[0].split(":") : [];
-    const right = halves[1].length > 0 ? halves[1].split(":") : [];
-    if (left.length + right.length > 7) return null;
-    parts = [...left, ...Array(8 - left.length - right.length).fill("0"), ...right];
-  } else {
-    parts = rest.split(":");
-    if (parts.length !== 8) return null;
-  }
-  const groups = [];
-  for (const part of parts) {
-    const value = parseGroup(part);
-    if (value === null) return null;
-    groups.push(value);
-  }
-  return groups;
-}
 function isBlockedIpv6(groups) {
   if (groups.every((g) => g === 0)) return true;
   if (groups.slice(0, 7).every((g) => g === 0) && groups[7] === 1) return true;
@@ -10906,5 +10979,5 @@ export {
 /*! Bundled license information:
 
 js-yaml/dist/js-yaml.mjs:
-  (*! js-yaml 5.3.0 https://github.com/nodeca/js-yaml @license MIT *)
+  (*! js-yaml 5.4.1 https://github.com/nodeca/js-yaml @license MIT *)
 */

package/dist/{token-goat-chunk-V5T3YNYR.mjs → token-goat-chunk-JMUBXBG7.mjs}

@@ -7,11 +7,11 @@ import {
   expandGlobs,
   leftoverIntegrations,
   run
-} from "./token-goat-chunk-SQSB5P5P.mjs";
-import "./token-goat-chunk-SXSWQMNP.mjs";
-import "./token-goat-chunk-MR7MNSDR.mjs";
-import "./token-goat-chunk-FDXINYK4.mjs";
-import "./token-goat-chunk-4ZDRTNGV.mjs";
+} from "./token-goat-chunk-KKIB7O3Z.mjs";
+import "./token-goat-chunk-FXAPKVRG.mjs";
+import "./token-goat-chunk-VCNW7BGU.mjs";
+import "./token-goat-chunk-LJ3CHCTT.mjs";
+import "./token-goat-chunk-UZ2NFOOZ.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 export {

package/dist/{token-goat-chunk-SQSB5P5P.mjs → token-goat-chunk-KKIB7O3Z.mjs}

@@ -86,7 +86,7 @@ import {
   runZipRead,
   symbolNamesInFile,
   upsertNote
-} from "./token-goat-chunk-SXSWQMNP.mjs";
+} from "./token-goat-chunk-FXAPKVRG.mjs";
 import {
   DEFAULT_RECONCILE_BUDGET_MS,
   GEMINI_TOOL_NAME_MAP,
@@ -108,7 +108,7 @@ import {
   runReconcile,
   storeWebOutput,
   summarizeResidentContext
-} from "./token-goat-chunk-MR7MNSDR.mjs";
+} from "./token-goat-chunk-VCNW7BGU.mjs";
 import {
   AGENT_SALT_MARKER,
   BASH_OUTPUT_SUBDIR,
@@ -238,7 +238,7 @@ import {
   visionTokensSavedByText,
   walkProject,
   writeCompact
-} from "./token-goat-chunk-FDXINYK4.mjs";
+} from "./token-goat-chunk-LJ3CHCTT.mjs";
 import {
   C,
   CONFIG_KEY_ENV_OVERRIDES,
@@ -246,6 +246,8 @@ import {
   FILTERS,
   LOCK_WAIT_MS_HARDENED,
   MATERIALIZE_SHRUNK_IMAGE_JS,
+  PROJECT_LOCKED_KEYS,
+  PROJECT_LOCKED_SECTIONS,
   RESET,
   VERSION,
   _useRichStats,
@@ -255,6 +257,7 @@ import {
   canonicalize,
   cappedSourceBytesSaved,
   colorStdout,
+  compileCustomPatterns,
   configPath,
   copilotCliConfigPath,
   copilotCliMcpToolsDir,
@@ -269,6 +272,7 @@ import {
   encodeSource,
   ensureDirSync,
   ensureNewline,
+  envBool,
   escapeRegExp,
   extractErrorMessage,
   fg,
@@ -354,7 +358,7 @@ import {
   withFileLock,
   withRetryOnLock,
   writeJsonSettings
-} from "./token-goat-chunk-4ZDRTNGV.mjs";
+} from "./token-goat-chunk-UZ2NFOOZ.mjs";
 import {
   __export
 } from "./token-goat-chunk-AEX54RUZ.mjs";
@@ -4317,7 +4321,7 @@ function materializeShrunkImage(context: string | undefined): string | undefined
   try {
     pruneMaterializedShrinks();
     const buf = Buffer.from(match[2], "base64");
-    const name = \`token-goat-shrink-\${process.pid}-\${Date.now()}-\${Math.random().toString(36).slice(2)}.\${match[1]}\`;
+    const name = \`token-goat-shrink-\${process.pid}-\${Date.now()}-\${globalThis.crypto.randomUUID()}.\${match[1]}\`;
     const file = path.join(os.tmpdir(), name);
     fs.writeFileSync(file, buf);
     return file;
@@ -6402,6 +6406,40 @@ function checkStrayClaudeMdBlocks(searchRoot) {
     message: `${strays.length} stray cop${strays.length === 1 ? "y" : "ies"} outside CLAUDE.md (never refreshed by install, never removed by uninstall, will go stale): ${strays.join(", ")}`
   };
 }
+var LOCKED_BOOLEAN_SAFE_VALUE = {
+  "gdrive.enabled": false,
+  "injection.enabled": true,
+  "redaction.strict": true,
+  "mcp.confine_reads_to_project_root": true,
+  "screenshot.block_private_targets": true,
+  "network.offline": true,
+  "indexing.cross_project_symbols": false,
+  "webfetch.compress_bodies": true
+};
+function lockedEnvOverridableKeys() {
+  const out2 = [];
+  for (const key of Object.keys(CONFIG_KEY_ENV_OVERRIDES)) {
+    const section = key.split(".")[0] ?? "";
+    const locked = PROJECT_LOCKED_SECTIONS.includes(section) || PROJECT_LOCKED_KEYS.includes(key);
+    if (locked && (CONFIG_KEY_ENV_OVERRIDES[key] ?? []).length > 0) out2.push(key);
+  }
+  return out2.sort();
+}
+function envOverriddenSecuritySettings() {
+  const out2 = [];
+  for (const setting of lockedEnvOverridableKeys()) {
+    const safe = LOCKED_BOOLEAN_SAFE_VALUE[setting];
+    for (const envVar of CONFIG_KEY_ENV_OVERRIDES[setting] ?? []) {
+      if (safe === void 0) {
+        const raw = process.env[envVar];
+        if (raw !== void 0 && raw.trim() !== "") out2.push({ setting, envVar, kind: "replaced" });
+      } else if (envBool(envVar, safe) !== safe) {
+        out2.push({ setting, envVar, kind: "weakened" });
+      }
+    }
+  }
+  return out2;
+}
 function checkSecurityPosture(cfg, dataDirPath) {
   const results = [];
   results.push({
@@ -6424,6 +6462,19 @@ function checkSecurityPosture(cfg, dataDirPath) {
     status: "ok",
     message: allow > 0 ? `${allow} allowed host pattern${allow === 1 ? "" : "s"}, ${deny} denied: nothing outside the allow list is fetched` : `no allow list, ${deny} denied pattern${deny === 1 ? "" : "s"}: any host not denied can be fetched`
   });
+  const custom = compileCustomPatterns(cfg.redaction.custom_patterns);
+  const strictNote = cfg.redaction.strict ? "strict mode on" : "strict mode off (redaction.strict)";
+  const patternNote = custom.patterns.length === 0 ? "built-in patterns only" : `${custom.patterns.length} custom pattern${custom.patterns.length === 1 ? "" : "s"} plus the built-in ones`;
+  results.push(
+    custom.problems.length > 0 ? {
+      name: "Security redaction",
+      // A pattern the operator believes is redacting, but which never compiled, is the one
+      // failure here that is invisible from the output itself -- so it warns rather than
+      // being reported as a healthy count that happens to be short.
+      status: "warn",
+      message: `${custom.problems.length} custom redaction pattern${custom.problems.length === 1 ? "" : "s"} could not be used and ${custom.problems.length === 1 ? "is" : "are"} not redacting anything: ` + custom.problems.map((p) => `${p.pattern} (${p.reason})`).join("; ")
+    } : { name: "Security redaction", status: "ok", message: `${patternNote}, ${strictNote}` }
+  );
   const extraRoots = cfg.mcp.allowed_roots.length;
   results.push(
     cfg.mcp.confine_reads_to_project_root ? {
@@ -6432,6 +6483,27 @@ function checkSecurityPosture(cfg, dataDirPath) {
       message: extraRoots === 0 ? "reads are confined to the project root" : `reads are confined to the project root plus ${extraRoots} configured root${extraRoots === 1 ? "" : "s"}`
     } : { name: "Security mcp roots", status: "warn", message: "confinement is off (mcp.confine_reads_to_project_root): a read can leave the project" }
   );
+  const overridden = envOverriddenSecuritySettings();
+  const weakened = overridden.filter((o) => o.kind === "weakened");
+  const replaced = overridden.filter((o) => o.kind === "replaced");
+  const describe = (o) => `${o.setting} (${o.envVar})`;
+  const parts = [];
+  if (weakened.length > 0) parts.push(`held open: ${weakened.map(describe).join(", ")}`);
+  if (replaced.length > 0) parts.push(`set from the environment: ${replaced.map(describe).join(", ")}`);
+  results.push(
+    overridden.length === 0 ? {
+      name: "Security config overrides",
+      status: "ok",
+      // Naming the count keeps this from reading as a guarantee about settings it never looked
+      // at, which is what the first version of this line did while nine locked keys went
+      // unchecked behind it.
+      message: `no environment variable is overriding any of the ${lockedEnvOverridableKeys().length} project-locked settings`
+    } : {
+      name: "Security config overrides",
+      status: "warn",
+      message: `the environment, not the config file, is deciding ${overridden.length === 1 ? "a" : "these"} project-locked setting${overridden.length === 1 ? "" : "s"}. ${parts.join("; ")}. A project config cannot change these; an environment variable can, and one can be set by a file in a cloned repository.`
+    }
+  );
   results.push(dataDirPermissionResult(dataDirPath));
   return results;
 }
@@ -6616,6 +6688,90 @@ async function runDoctorAndExit(opts) {
   return results.some((r) => r.status === "fail") ? 1 : 0;
 }
 
+// src/capabilities.ts
+function collectCapabilities(config = loadConfig()) {
+  const online = !config.network.offline;
+  return [
+    {
+      id: "network.http_fetch",
+      kind: "egress",
+      what: "Fetches a URL when a command asks for one, including page text and remote images.",
+      enabled: online,
+      controlledBy: "network.offline",
+      enforcedAt: "src/webfetch.ts::performHttpFetch"
+    },
+    {
+      id: "network.google_drive",
+      kind: "egress",
+      what: "Exports a Google Doc so a section of it can be read.",
+      // Two independent gates, so this reports the conjunction: turning either one off is enough.
+      enabled: online && config.gdrive.enabled,
+      controlledBy: "gdrive.enabled, network.offline",
+      enforcedAt: "src/gdrive.ts::fetchDoc (network gate in src/webfetch.ts::performHttpFetch)"
+    },
+    {
+      id: "network.embedding_model_download",
+      kind: "egress",
+      what: "Downloads the local embedding model once, so semantic search can run without a server.",
+      enabled: online,
+      controlledBy: "network.offline",
+      enforcedAt: "src/embed_model.ts"
+    },
+    {
+      id: "network.ocr_data_download",
+      kind: "egress",
+      what: "Downloads OCR language data once, so text can be read out of an image.",
+      enabled: online,
+      controlledBy: "network.offline",
+      enforcedAt: "src/image_ocr.ts"
+    },
+    {
+      id: "network.screenshot",
+      kind: "egress",
+      what: "Loads a page in a browser to capture it.",
+      enabled: online,
+      controlledBy: "network.offline",
+      enforcedAt: "src/screenshot.ts"
+    },
+    {
+      id: "at_rest.symbol_index",
+      kind: "at-rest",
+      what: "Stores the text of indexed source files in a local database, so a symbol can be returned without re-reading the file.",
+      // Always on: it is the product. Reported anyway, because a reviewer deciding about data at
+      // rest needs the always-on items more than the optional ones.
+      enabled: true,
+      controlledBy: "always on (this is what the tool does)",
+      enforcedAt: "src/db.ts"
+    },
+    {
+      id: "at_rest.command_output_cache",
+      kind: "at-rest",
+      what: "Keeps recent command and web output on disk so it can be recalled instead of re-run. Expires after 24 hours.",
+      enabled: true,
+      controlledBy: "always on, 24-hour expiry",
+      enforcedAt: "src/disk_cache.ts"
+    }
+  ];
+}
+function renderCapabilities(caps) {
+  const lines = [];
+  for (const kind of ["egress", "at-rest"]) {
+    const group = caps.filter((c) => c.kind === kind);
+    if (group.length === 0) continue;
+    lines.push(kind === "egress" ? "Can send data off this machine:" : "Leaves data on this machine:");
+    for (const c of group) {
+      lines.push(`  [${c.enabled ? "ON " : "OFF"}] ${c.id}`);
+      lines.push(`         ${c.what}`);
+      lines.push(`         controlled by: ${c.controlledBy}`);
+      lines.push(`         enforced at:   ${c.enforcedAt}`);
+    }
+    lines.push("");
+  }
+  lines.push("Verify rather than trust: `token-goat capabilities --json` reports the state of the");
+  lines.push('binary you have installed, and each "enforced at" names the code that decides it.');
+  return lines.join("\n");
+}
+
 // src/webfetch.ts
 import { existsSync as existsSync7, readdirSync as readdirSync5, statSync as statSync4, unlinkSync as unlinkSync2 } from "fs";
 import * as http from "http";
@@ -15208,7 +15364,7 @@ async function cmdMcpServe() {
   let StdioServerTransport;
   try {
     ;
-    ({ createMcpServer } = await import("./token-goat-chunk-CD6U5OD6.mjs"));
+    ({ createMcpServer } = await import("./token-goat-chunk-LEBYARO3.mjs"));
     ({ StdioServerTransport } = await import("./token-goat-chunk-324QOJYZ.mjs"));
   } catch (err2) {
     process.stderr.write(
@@ -15233,7 +15389,7 @@ async function cmdHook(event, opts) {
   if (typeof opts.harness === "string" && opts.harness.length > 0) {
     process.env[ENV_KEYS.HARNESS_OVERRIDE] = opts.harness;
   }
-  const { relay } = await import("./token-goat-chunk-AUM22UQ2.mjs");
+  const { relay } = await import("./token-goat-chunk-ZVN5WHTO.mjs");
   await relay(event);
 }
 async function cmdInstall(opts) {
@@ -16167,7 +16323,7 @@ function emitExtraFileArgsNote(command, first, extras, opts = {}) {
 }
 async function cmdCompress(opts) {
   try {
-    const bashRunner = await import("./token-goat-chunk-4KD2N46D.mjs");
+    const bashRunner = await import("./token-goat-chunk-NY4HYRSK.mjs");
     if (opts.compress === false) {
       process.exitCode = bashRunner.runRaw(opts.cmd, parseTimeout(opts.timeout, bashRunner.DEFAULT_TIMEOUT_SECONDS));
       return;
@@ -17289,7 +17445,8 @@ function generateCompactHelp() {
     "  compress",
     "",
     "Config & Integration: install, uninstall, mcp-serve, mcp-status, hook,",
-    "  bridges-status, worker, statusline, version, config, config-get, help",
+    "  bridges-status, worker, statusline, version, config, config-get,",
+    "  capabilities, help",
     "",
     "Data: note, note-add, note-get, note-list, sqlite-query, sqlite-schema,",
     "  csv-profile, csv-query",
@@ -17493,6 +17650,12 @@ function buildProgram() {
       })
     )
   );
+  program2.command("capabilities").description("report every capability that can send data off this machine, and its current state").option("-j, --json", "emit as JSON, for asserting on in a pipeline").action(
+    guard((opts) => {
+      const caps = collectCapabilities();
+      console.log(opts.json ? JSON.stringify({ version: VERSION, capabilities: caps }, null, 2) : renderCapabilities(caps));
+    })
+  );
   program2.command("doctor").description("diagnose token-goat health").option("--context", "include context footprint analysis").option("--json", "emit check results as JSON instead of text").action(guard(cmdDoctor));
   program2.command("context-stats").description("show context statistics").option("--project <path>", "project root to analyze").option("-j, --json", "output as JSON").option("--fix", "apply automatic fixes (confirm-gated; shows a diff before writing)").option("-y, --yes", "with --fix, apply without prompting (non-interactive / scripted use)").action(guard(cmdContextStats));
   program2.command("bootstrap-audit").description("audit Claude Code startup-context contributors without reading prompt bodies").option("--project <path>", "project root to analyze").option("--home <path>", "home directory override (for CI/testing)").option("--follow-links", "follow external symlink/junction roots and direct children").option("-j, --json", "output as JSON").option("--top <n>", "largest metadata entries to show (default 10)", "10").option("--warn-tokens <n>", "warn when total estimated startup tokens exceed n").option("--fail-tokens <n>", "fail when total estimated startup tokens exceed n").option("--warn-bytes <n>", "warn when agent/skill metadata bytes exceed n").option("--fail-bytes <n>", "fail when agent/skill metadata bytes exceed n").action(guard(cmdBootstrapAudit));