token-goat 2.9.1 → 2.9.2

package/dist/{token-goat-chunk-4ZDRTNGV.mjs → token-goat-chunk-UZ2NFOOZ.mjs}

@@ -8,7 +8,7 @@ import {
 import { createRequire } from "node:module";
 function resolveVersion() {
   if (true) {
-    return "2.9.1";
+    return "2.9.2";
   }
   const require2 = createRequire(import.meta.url);
   const pkg = require2("../package.json");
@@ -2300,6 +2300,10 @@ var CONFIG_DEFAULTS = {
   gdrive: {
     enabled: true
   },
+  redaction: {
+    custom_patterns: [],
+    strict: false
+  },
   network: {
     offline: false
   },
@@ -2343,6 +2347,7 @@ function defaultConfig() {
     context: getDefaultConfig("context"),
     injection: getDefaultConfig("injection"),
     gdrive: getDefaultConfig("gdrive"),
+    redaction: getDefaultConfig("redaction"),
     network: getDefaultConfig("network"),
     mcp: getDefaultConfig("mcp"),
     hint_stats: getDefaultConfig("hint_stats"),
@@ -2567,6 +2572,7 @@ var PROJECT_LOCKED_SECTIONS = [
   "injection",
   "webfetch",
   "gdrive",
+  "redaction",
   "mcp",
   "network",
   "screenshot"
@@ -3075,6 +3081,12 @@ function _buildConfig(raw, projectRaw = {}) {
   const gd = getDefaultConfig("gdrive");
   gd.enabled = validatedBool(gd_raw["enabled"], gd.enabled);
   gd.enabled = envBool("TOKEN_GOAT_GDRIVE_ENABLED", gd.enabled);
+  const red_raw = section(raw, "redaction");
+  const red = getDefaultConfig("redaction");
+  red.custom_patterns = validatedStrList(red_raw["custom_patterns"], red.custom_patterns);
+  red.custom_patterns = envStrList("TOKEN_GOAT_REDACTION_CUSTOM_PATTERNS", red.custom_patterns, "\n");
+  red.strict = validatedBool(red_raw["strict"], red.strict);
+  red.strict = envBool("TOKEN_GOAT_REDACTION_STRICT", red.strict);
   const net_raw = section(raw, "network");
   const net = getDefaultConfig("network");
   net.offline = validatedBool(net_raw["offline"], net.offline);
@@ -3116,6 +3128,7 @@ function _buildConfig(raw, projectRaw = {}) {
     context: ctx,
     injection: inj,
     gdrive: gd,
+    redaction: red,
     network: net,
     mcp,
     hint_stats: hs,
@@ -3187,6 +3200,8 @@ var CONFIG_KEY_ENV_OVERRIDES = {
   "indexing.cross_project_symbols": ["TOKEN_GOAT_CROSS_PROJECT_SYMBOLS"],
   "injection.enabled": ["TOKEN_GOAT_INJECTION_ENABLED"],
   "gdrive.enabled": ["TOKEN_GOAT_GDRIVE_ENABLED"],
+  "redaction.custom_patterns": ["TOKEN_GOAT_REDACTION_CUSTOM_PATTERNS"],
+  "redaction.strict": ["TOKEN_GOAT_REDACTION_STRICT"],
   "network.offline": ["TOKEN_GOAT_OFFLINE"],
   "mcp.confine_reads_to_project_root": ["TOKEN_GOAT_MCP_CONFINE_READS"],
   "mcp.allowed_roots": ["TOKEN_GOAT_MCP_ALLOWED_ROOTS"],
@@ -3355,6 +3370,10 @@ function saveConfig(config) {
     gdrive: {
       enabled: config.gdrive.enabled
     },
+    redaction: {
+      custom_patterns: config.redaction.custom_patterns,
+      strict: config.redaction.strict
+    },
     network: {
       offline: config.network.offline
     },
@@ -6947,7 +6966,110 @@ var SECRET_PATTERNS = [
 function countRedactionPlaceholders(text) {
   return text.match(/\[REDACTED:[a-z0-9_]+\]/g)?.length ?? 0;
 }
-function redactSecrets(text) {
+var MAX_CUSTOM_PATTERNS = 64;
+var MAX_CUSTOM_PATTERN_LENGTH = 512;
+var customCache = null;
+var GROUP_PREFIX = String.raw`\((?:\?(?::|<?[=!]|<\w+>|[a-z]*(?:-[a-z]*)?:))?`;
+var NESTED_QUANTIFIER = new RegExp(
+  // a quantified group whose body itself repeats: (a+)+, (?:a*)*, (?<x>\d{2,})+
+  GROUP_PREFIX + String.raw`[^()*+]*(?:[*+]|\{\d+,\d*\})[^()]*\)\s*(?:[*+]|\{\d+,\d*\})`
+);
+var PROBE_ALPHABETS = ["a", "0", "a0"];
+var PROBE_SHORT = 14;
+var PROBE_LONG = 20;
+var PROBE_GROWTH_FACTOR = 12;
+var PROBE_BUDGET_MS = 25;
+function timeMatch(re, input) {
+  const probe = new RegExp(re.source, re.flags.replace("g", ""));
+  const started = performance.now();
+  probe.test(input);
+  return performance.now() - started;
+}
+function growsExponentially(re) {
+  for (const alphabet of PROBE_ALPHABETS) {
+    const fill = (n) => alphabet.repeat(Math.ceil(n / alphabet.length)).slice(0, n) + "!";
+    const short = timeMatch(re, fill(PROBE_SHORT));
+    const long = timeMatch(re, fill(PROBE_LONG));
+    if (long > PROBE_BUDGET_MS) return true;
+    if (long > 1 && long > short * PROBE_GROWTH_FACTOR) return true;
+  }
+  return false;
+}
+function compileCustomPatterns(sources) {
+  const key = JSON.stringify(sources);
+  if (customCache !== null && customCache.key === key) {
+    return { patterns: customCache.patterns, problems: customCache.problems };
+  }
+  const patterns = [];
+  const problems = [];
+  const written = sources.map((raw) => raw.trim()).filter((source) => source.length > 0);
+  for (const source of written.slice(0, MAX_CUSTOM_PATTERNS)) {
+    if (source.length > MAX_CUSTOM_PATTERN_LENGTH) {
+      problems.push({ pattern: source.slice(0, 60), reason: `longer than ${MAX_CUSTOM_PATTERN_LENGTH} characters` });
+      continue;
+    }
+    if (NESTED_QUANTIFIER.test(source)) {
+      problems.push({
+        pattern: source,
+        reason: "repeats a group that already repeats, which can take exponential time to match"
+      });
+      continue;
+    }
+    let compiled;
+    try {
+      compiled = new RegExp(source, "g");
+    } catch (e) {
+      problems.push({ pattern: source, reason: e instanceof Error ? e.message : "is not a valid regular expression" });
+      continue;
+    }
+    if (new RegExp(source).test("")) {
+      problems.push({
+        pattern: source,
+        reason: "matches the empty string, so it would replace every position in the text"
+      });
+      continue;
+    }
+    if (growsExponentially(compiled)) {
+      problems.push({
+        pattern: source,
+        reason: "its running time doubles as the text grows, which can stall the process on a short input"
+      });
+      continue;
+    }
+    patterns.push(compiled);
+  }
+  if (written.length > MAX_CUSTOM_PATTERNS) {
+    problems.push({
+      pattern: `(${written.length} entries)`,
+      reason: `only the first ${MAX_CUSTOM_PATTERNS} custom patterns are used`
+    });
+  }
+  customCache = { key, patterns, problems };
+  return { patterns, problems };
+}
+var STRICT_CANDIDATE = /[A-Za-z0-9+/_-]{24,}={0,2}/g;
+function entropyBitsPerChar(s) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const ch of s) counts.set(ch, (counts.get(ch) ?? 0) + 1);
+  let bits = 0;
+  for (const n of counts.values()) {
+    const p = n / s.length;
+    bits -= p * Math.log2(p);
+  }
+  return bits;
+}
+function characterClasses(s) {
+  let n = 0;
+  if (/[a-z]/.test(s)) n++;
+  if (/[A-Z]/.test(s)) n++;
+  if (/[0-9]/.test(s)) n++;
+  if (/[+/=_-]/.test(s)) n++;
+  return n;
+}
+function looksLikeCredential(s) {
+  return characterClasses(s) >= 3 && entropyBitsPerChar(s) >= 3.5;
+}
+function redactSecrets(text, config = loadConfig()) {
   let count = 0;
   let out = text;
   for (const [kind, pattern] of SECRET_PATTERNS) {
@@ -6956,6 +7078,19 @@ function redactSecrets(text) {
       return `[REDACTED:${kind}]`;
     });
   }
+  for (const pattern of compileCustomPatterns(config.redaction.custom_patterns).patterns) {
+    out = out.replace(pattern, () => {
+      count++;
+      return "[REDACTED:custom]";
+    });
+  }
+  if (config.redaction.strict) {
+    out = out.replace(STRICT_CANDIDATE, (candidate) => {
+      if (!looksLikeCredential(candidate)) return candidate;
+      count++;
+      return "[REDACTED:high_entropy]";
+    });
+  }
   return { text: out, count };
 }
 
@@ -7057,7 +7192,8 @@ function passOutput() {
   return { hookType: "pass" };
 }
 function denyOutput(message) {
-  return { hookType: "deny", message };
+  const prefixed = message.startsWith("[tg]") ? message : `[tg] ${message}`;
+  return { hookType: "deny", message: prefixed };
 }
 function contextOutput(context) {
   return { hookType: "context", context };
@@ -8166,7 +8302,7 @@ function materializeShrunkImage(context) {
   try {
     pruneMaterializedShrinks()
     const buf = Buffer.from(match[2], "base64")
-    const name = \`token-goat-shrink-\${process.pid}-\${Date.now()}-\${Math.random().toString(36).slice(2)}.\${match[1]}\`
+    const name = \`token-goat-shrink-\${process.pid}-\${Date.now()}-\${globalThis.crypto.randomUUID()}.\${match[1]}\`
     const file = path.join(os.tmpdir(), name)
     fs.writeFileSync(file, buf)
     return file
@@ -11082,10 +11218,10 @@ function makeLanguageFilter(cfg) {
 }
 
 // src/tool_filters/ai_clis.ts
-var _GH_COPILOT_SPINNER_RE = /^\s*(?:Asking GitHub Copilot|Generating|Thinking|Fetching)\s*\.{0,3}\s*$/i;
+var _GH_COPILOT_SPINNER_RE = /^\s*(?:Asking GitHub Copilot|Generating|Thinking|Fetching)\s*(?:\.{1,3}\s*)?$/i;
 var _GH_COPILOT_BANNER_RE = /^\s*(?:Welcome to GitHub Copilot|Using GitHub Copilot|Authenticated as|GitHub Copilot\s+v\d+)/i;
 var _GH_COPILOT_DISCLAIMER_RE = /^\s*(?:Disclaimer:|This response was|GitHub Copilot|The commands?\s+(?:above|below)|Please review|Always review|Remember to|Note:|Tip:)/i;
-var _AIDER_APPLYING_RE = /^\s*(?:Applying\s+edits?(?:\s+to\s+\S+)?|Applied\s+edit\s+to\s+\S+)\s*(?:\.{1,3})?\s*$/i;
+var _AIDER_APPLYING_RE = /^\s*(?:Applying\s+edits?(?:\s+to\s+\S+)?|Applied\s+edit\s+to\s+\S+)\s*(?:\.{1,3}\s*)?$/i;
 var _AIDER_TOKENS_RE = /^\s*Tokens:\s+\d[\d,]*\s+sent,\s+\d[\d,]*\s+received/i;
 var _AIDER_COST_RE = /^\s*Cost:\s+\$[\d.]+\s+message,\s+\$[\d.]+\s+session/i;
 var _AIDER_REPOMAP_RE = /^\s*(?:Repo-map:|Added\s+\S+\s+to\s+the\s+chat|Removed\s+\S+\s+from\s+the\s+chat|Loading\s+repo\s+map|Updating\s+repo\s+map|Scanning\s+repo\s+contents|Using\s+\d+\s+tokens\s+of\s+repo\s+map)/i;
@@ -11098,24 +11234,24 @@ var _GEMINI_BANNER_RE = /^\s*Gemini\s+CLI\s+v\d+/i;
 var _GEMINI_TOKEN_METER_RE = /^\s*(?:Token\s+usage|Context|Tokens):\s+[\d,]+\s*\/\s*[\d,]+/i;
 var _GEMINI_TOOL_SPINNER_RE = /^\s*[⠋⠙⠹⠸⠼⠴⠦⠧⠇⠏✓✗►✦]\s+(?:Call(?:ing|ed)|Execut(?:ing|ed)|Running)\s+\S+/;
 var _GEMINI_FOOTER_RE = /^\s*(?:Type\s+\/help|Press\s+Ctrl|Use\s+Ctrl|Tip:|Note:)/i;
-var _GEMINI_THINKING_RE = /^\s*(?:Thinking|Generating|Processing)\s*\.{0,3}\s*$/i;
+var _GEMINI_THINKING_RE = /^\s*(?:Thinking|Generating|Processing)\s*(?:\.{1,3}\s*)?$/i;
 var _CLAUDE_CLI_MODEL_HDR_RE = /^\s*[◆◇►✦]\s+claude-/i;
-var _CLAUDE_CLI_STATS_RE = /^\s*[↑↓⇑⇓]\s*\d[\d,]*\s*[↑↓⇑⇓]?\s*\d[\d,]*\s*tokens/i;
+var _CLAUDE_CLI_STATS_RE = /^\s*[↑↓⇑⇓]\s*\d[\d,]*(?:(?:\s*[↑↓⇑⇓]\s*|\s+)\d[\d,]*)?\s*tokens/i;
 var _CLAUDE_CLI_CONTEXT_RE = /^\s*(?:Context(?:\s+window)?|Token\s+limit):\s+[\d,]+\s*\/\s*[\d,]+/i;
 var _CLAUDE_CLI_FOOTER_RE = /^\s*(?:Press\s+Ctrl|Enter\s+\/|Type\s+\/|Use\s+Ctrl|Tip:|Note:)/i;
-var _CLAUDE_CLI_SPINNER_RE = /^\s*[◎⠋⠙⠹⠸⠼⠴⠦⠧⠇⠏]\s+(?:Thinking|Generating|Processing|Running)\s*\.{0,3}\s*$/;
+var _CLAUDE_CLI_SPINNER_RE = /^\s*[◎⠋⠙⠹⠸⠼⠴⠦⠧⠇⠏]\s+(?:Thinking|Generating|Processing|Running)\s*(?:\.{1,3}\s*)?$/;
 var _CLAUDE_CLI_TOOL_LOG_RE = /^\s*(?:>\s+Using\s+tool:|✓\s+Tool\s+result:|◎\s+Tool:)/i;
 var _CLAUDE_CLI_SKIP_SUBCMDS = /* @__PURE__ */ new Set(["install", "update", "doctor", "config", "login", "logout"]);
-var _CURSOR_STARTUP_RE = /^\s*(?:Extension\s+host\s+(?:started|starting)|Extension\s+'cursor[^']*'\s+activated|Starting\s+debug\s+adapter|Opening\s+folder\s*\.*\s*$|Restoring\s+(?:windows?|session)|Reusing\s+existing\s+extension\s+host|Connection\s+(?:established|to\s+remote)|Tunnel\s+(?:connected|connecting|status))/i;
+var _CURSOR_STARTUP_RE = /^\s*(?:Extension\s+host\s+(?:started|starting)|Extension\s+'cursor[^']*'\s+activated|Starting\s+debug\s+adapter|Opening\s+folder\s*(?:\.+\s*)?$|Restoring\s+(?:windows?|session)|Reusing\s+existing\s+extension\s+host|Connection\s+(?:established|to\s+remote)|Tunnel\s+(?:connected|connecting|status))/i;
 var _CURSOR_TELEMETRY_RE = /^\s*(?:Telemetry\s+is\s+(?:disabled|enabled)|Crash\s+reporter|Sending\s+telemetry|Analytics:)/i;
 var _CURSOR_BANNER_RE = /^\s*Cursor\s+v?\d+\.\d+/i;
-var _WINDSURF_STARTUP_RE = /^\s*(?:Extension\s+host\s+(?:started|starting)|Extension\s+'\S+'\s+activated|Starting\s+debug\s+adapter|Opening\s+folder\s*\.*\s*$|Restoring\s+(?:windows?|session)|Reusing\s+existing\s+extension\s+host)/i;
+var _WINDSURF_STARTUP_RE = /^\s*(?:Extension\s+host\s+(?:started|starting)|Extension\s+'\S+'\s+activated|Starting\s+debug\s+adapter|Opening\s+folder\s*(?:\.+\s*)?$|Restoring\s+(?:windows?|session)|Reusing\s+existing\s+extension\s+host)/i;
 var _WINDSURF_CODEIUM_NOISE_RE = /^\s*(?:Codeium\s*(?::\s*)?(?:Activating|Activated|index(?:ing)?:?\s*loading|index\s+(?:loaded|ready)|Extension\s+loaded)|Connecting\s+to\s+Codeium\s+server|Authentication\s+status\s*:|Model\s+status\s*:|Codeium\s+(?:ready|connected|disconnected))/i;
 var _WINDSURF_BANNER_RE = /^\s*Windsurf\s+v?\d+\.\d+/i;
 var _WINDSURF_TELEMETRY_RE = /^\s*(?:Telemetry\s+is\s+(?:disabled|enabled)|Crash\s+reporter)/i;
 var _WINDSURF_CASCADE_STATUS_RE = /^\s*(?:Cascade\s*(?::\s*)?(?:connected|disconnected|ready|connecting|starting|model\s+loaded|indexing\s+workspace|context\s+limit|[a-z]+\.{3})|Cascade\s+v?\d+|AI\s+assistant\s+(?:ready|loaded|connecting))/i;
 var _WINDSURF_CASCADE_TOOL_RE = /^\s*Cascade\s+(?:is\s+)?(?:reading|writing|running|executed|modified|created|deleted)\s+/i;
-var _WINDSURF_CASCADE_SPINNER_RE = /^\s*(?:Thinking|Generating|Cascade\s+is\s+thinking|Processing\s+request)\s*\.{0,3}\s*$/i;
+var _WINDSURF_CASCADE_SPINNER_RE = /^\s*(?:Thinking|Generating|Cascade\s+is\s+thinking|Processing\s+request)\s*(?:\.{1,3}\s*)?$/i;
 var _WINDSURF_CONTEXT_RE = /^\s*(?:Context(?:\s+window)?|Token\s+(?:usage|count))\s*:\s*[\d,]+\s*\/\s*[\d,]+/i;
 var _WINDSURF_WORKSPACE_RE = /^\s*(?:Loading\s+workspace|Indexing\s+workspace|Workspace\s+(?:indexed|ready|loading)|Scanning\s+files|File\s+watcher)/i;
 var _OPENCODE_BANNER_RE = /^\s*(?:Open[Cc]ode|opencode)\s+v?\d+\.\d+/i;
@@ -11136,10 +11272,10 @@ var _CLINE_BANNER_RE = /^\s*(?:Cline|claude-dev)\s+v\d+\.\d+/i;
 var _CLINE_TOKENS_RE = /^\s*Tokens\s*:\s*[\d,]+\s*\(/i;
 var _CLINE_COST_RE = /^\s*API\s+Cost\s*:\s*\$[\d.]+/i;
 var _CLINE_CONTEXT_RE = /^\s*Context\s+Window\s*:\s*[\d,]+\s*\/\s*[\d,]+\s+tokens/i;
-var _CLINE_SPINNER_RE = /^\s*(?:Thinking|Processing|Streaming\s+response)\s*\.{0,3}\s*$/i;
-var _CLINE_STARTUP_RE = /^\s*(?:Loading\s+workspace|Initializing\s+Cline|Starting\s+Cline)\s*\.{0,3}\s*$/i;
+var _CLINE_SPINNER_RE = /^\s*(?:Thinking|Processing|Streaming\s+response)\s*(?:\.{1,3}\s*)?$/i;
+var _CLINE_STARTUP_RE = /^\s*(?:Loading\s+workspace|Initializing\s+Cline|Starting\s+Cline)\s*(?:\.{1,3}\s*)?$/i;
 var _CLINE_MCP_STATUS_RE = /^\s*MCP\s+Server\s+['"]?\w/i;
-var _CLINE_FILE_READ_RE = /^\s*Reading\s+file\s*:\s*\S+\s*\.{0,3}\s*$/i;
+var _CLINE_FILE_READ_RE = /^\s*Reading\s+file\s*:\s*\S+\s*(?:\.{1,3}\s*)?$/i;
 var _CLINE_WANTS_EXECUTE_RE = /^\s*Cline\s+wants\s+to\s+(?:execute|run|write|read|create|delete|use)\s*:/i;
 var _CODEX_SEPARATOR_RE = /^-{4,}$/;
 var _CODEX_MODEL_RE = /^model\s*:\s*(?<model>\S+)/i;
@@ -17212,7 +17348,7 @@ var erlangFilter = makeLanguageFilter({
   ]
 });
 var CRYSTAL_COMPILING_RE = /^\s*(?:Compiling\s+\S+|Linking\s+crystal\s+spec|crystal\s+spec\s+\S+\.cr\b)/i;
-var CRYSTAL_SPEC_PASS_RE = /^\s*(?:\.\s*)+$|^\s*✓\s+.+\(\d+/i;
+var CRYSTAL_SPEC_PASS_RE = /^\s*(?:\.\s*)+$|^\s*✓\s+\S.*\(\d+/i;
 var CRYSTAL_DOT_PROGRESS_RE = /^\s*[.]+\s*$/;
 var CRYSTAL_SUMMARY_RE = /^\s*(?:Finished\s+in\s+[\d.]+\s+(?:second|millisecond)|\d+\s+example[s]?[,\s]|Pending:\s+\d+|\d+\s+failure[s]?|(?:All\s+)?\d+\s+spec[s]?\s+(?:passed|failed))/i;
 var CRYSTAL_FAILURE_HEADER_RE = /^\s*(?:Failures:|Errors:|\d+\)\s+\S)/i;
@@ -17255,7 +17391,7 @@ var crystalFilter = makeLanguageFilter({
   ]
 });
 var HASKELL_RESOLVING_RE = /^\s*(?:Resolving\s+dependencies|Downloading\s+\S+\s+from\s+Hackage|Downloading\s+\S+\s+\.\.\.|Fetching\s+package|Configuring\s+\S+\.\.\.|Preprocessing\s+\S+\s+for|Starting\s+to\s+install)/i;
-var HASKELL_COMPILING_RE = /^\s*(?:\[\s*\d+\s+of\s+\d+\]\s+Compiling\s+\S+|Compiling\s+\S+(?:\s+\(\s*\S+,\s*\S+\))?\.\.\.?)/;
+var HASKELL_COMPILING_RE = /^\s*(?:\[\s*\d+\s+of\s+\d+\]\s+Compiling\s+\S+|Compiling\s+\S+(?:\s+\(\s*[^,\s]+,\s*\S+\))?\.\.\.?)/;
 var HASKELL_LINKING_RE = /^\s*(?:Linking\s+\S+|Building\s+all\s+executables|Building\s+library\s+for\s+|Building\s+executable|Installed\s+\S+(?:\s+\d+\.\d+)?)/i;
 var HASKELL_INSTALLING_RE = /^\s*(?:Installing\s+(?:library|executable)\s+in|Registering\s+library|Updating\s+package\s+list|Reading\s+available\s+packages)/i;
 var HASKELL_SUCCESS_RE = /^\s*(?:Completed\s+\d+\s+action|Build\s+completed|Finished\s+building\s+package|All\s+\d+\s+tests\s+passed|Test\s+suite\s+\S+:\s+PASS|\d+\s+out\s+of\s+\d+\s+test\s+suites\s+\(|Tests\s+complete\b)/i;
@@ -17307,7 +17443,7 @@ var ELM_DOT_PROGRESS_RE = /^\s*[.]+\s*$/;
 var ELM_DEPS_PROGRESS_RE = /^\s*(?:Building dependencies|Verifying\s+(?:dependencies|packages)|Updating\s+package\s+catalog|Solving\s+dependencies)/i;
 var ELM_COMPILING_RE = /^\s*(?:Compiling\s+\S+\.elm|Starting\s+compilation)/i;
 var ELM_SUCCESS_RE = /^\s*(?:Success!|Successfully\s+generated|Compilation\s+complete|Done!\s+Compiled\s+\d+)/i;
-var ELM_ERROR_HEADER_RE = /^\s*--\s+[A-Z][A-Z0-9 _]+[A-Z0-9]\s*(?:-+|in\s+\S+)?\s*$/;
+var ELM_ERROR_HEADER_RE = /^\s*--\s+[A-Z][A-Z0-9 _]+[A-Z0-9]\s*(?:(?:-+|in\s+\S+)\s*)?$/;
 var ELM_ERROR_SUMMARY_RE = /^\s*(?:Detected\s+\d+\s+error|I\s+ran\s+into\s+\d+\s+problem|\d+\s+error[s]?\s+found)/i;
 var elmFilter = makeLanguageFilter({
   name: "elm",
@@ -17340,24 +17476,24 @@ var elmFilter = makeLanguageFilter({
 });
 var JULIA_PKG_RESOLVING_RE = (
   // eslint-disable-next-line no-control-regex
-  /^\s*(?:\x1b\[[0-9;]*m)?\s*(?:Resolving|Updating|Fetching|Precompiling|Downgrading|Upgrading|Cloning|Archiving)\s+/i
+  /^\s*(?:\x1b\[[0-9;]*m\s*)?(?:Resolving|Updating|Fetching|Precompiling|Downgrading|Upgrading|Cloning|Archiving)\s+/i
 );
 var JULIA_PKG_DEP_LINE_RE = (
   // eslint-disable-next-line no-control-regex
-  /^\s*(?:\x1b\[[0-9;]*m)?\s*\[[0-9a-f]{8}\]\s+(?:[+\-↑↓~→⇒✓]|\w)/
+  /^\s*(?:\x1b\[[0-9;]*m\s*)?\[[0-9a-f]{8}\]\s+(?:[+\-↑↓~→⇒✓]|\w)/
 );
-var JULIA_PKG_INSTALLED_RE = /^\s*(?:\x1b\[[0-9;]*m)?\s*Installed\s+\S+\s+/i;
+var JULIA_PKG_INSTALLED_RE = /^\s*(?:\x1b\[[0-9;]*m\s*)?Installed\s+\S+\s+/i;
 var JULIA_PKG_BUILDING_RE = (
   // eslint-disable-next-line no-control-regex
-  /^\s*(?:\x1b\[[0-9;]*m)?\s*Building\s+\S+\s*(?:→|->|─+)?\s*/i
+  /^\s*(?:\x1b\[[0-9;]*m\s*)?Building\s+\S+\s*(?:→|->|─+)?\s*/i
 );
-var JULIA_PKG_STATUS_RE = /^\s*(?:\x1b\[[0-9;]*m)?\s*Status\s+`/i;
+var JULIA_PKG_STATUS_RE = /^\s*(?:\x1b\[[0-9;]*m\s*)?Status\s+`/i;
 var JULIA_TEST_SUMMARY_RE = /^\s*(?:Test\s+Summary:|Tests\s+run:|\d+\s+test[s]?\s+(?:passed|failed)|ALL_TESTS_PASS|Testing\s+\S+\s+done|No\s+tests\s+failed)/i;
 var JULIA_TEST_PASS_RE = /^\s*(?:✓|PASS:|Test\s+Passed)\s+/i;
-var JULIA_TESTING_HEADER_RE = /^\s*(?:\x1b\[[0-9;]*m)?\s*Testing\s+\S+/i;
+var JULIA_TESTING_HEADER_RE = /^\s*(?:\x1b\[[0-9;]*m\s*)?Testing\s+\S+/i;
 var JULIA_PRECOMPILE_RE = (
   // eslint-disable-next-line no-control-regex
-  /^\s*(?:\x1b\[[0-9;]*m)?\s*\d+\s+(?:package[s]?\s+being\s+precompiled|dependency\s+precompil)/i
+  /^\s*(?:\x1b\[[0-9;]*m\s*)?\d+\s+(?:package[s]?\s+being\s+precompiled|dependency\s+precompil)/i
 );
 var juliaFilter = makeLanguageFilter({
   name: "julia",
@@ -23259,7 +23395,7 @@ var vitestFilter = makeNodeTestRunnerFilter({
   name: "vitest",
   binaries: ["vitest"],
   // File-level pass header carries a duration: `✓ src/x.test.ts (12ms)`.
-  passFileRe: /^\s*✓\s+\S.*\([\d.]+\s*\w+\)/,
+  passFileRe: /^\s*✓\s+\S.*\([\d.]+\s*[a-zA-Z]\w*\)/,
   failFileRe: /^\s*(?:×|FAIL|✗|✘)\s+\S/,
   summaryRe: /^(Test Files|Tests|Modules|Duration|Start at)[\s:]+\d/,
   // Per-test tick is indented ≥2 spaces: `  ✓ should pass`.
@@ -23471,6 +23607,8 @@ export {
   validateEnumField,
   getLastConfigParseError,
   getLastProjectConfigParseError,
+  PROJECT_LOCKED_SECTIONS,
+  PROJECT_LOCKED_KEYS,
   lastProjectConfigLockedKeys,
   getProjectConfigInfo,
   resolveConfigKeyLayer,
@@ -23529,6 +23667,7 @@ export {
   _useRichStats,
   renderShortStats,
   renderStats2 as renderStats,
+  compileCustomPatterns,
   redactSecrets,
   getToolName,
   getToolInput,

package/dist/{token-goat-chunk-MR7MNSDR.mjs → token-goat-chunk-VCNW7BGU.mjs}

@@ -9,7 +9,7 @@ import {
   isBlobStale,
   loadBlob,
   storeBlob
-} from "./token-goat-chunk-FDXINYK4.mjs";
+} from "./token-goat-chunk-LJ3CHCTT.mjs";
 import {
   SYMBOL_BODY_CHAR_CAP,
   copilotCliMcpToolsDir,
@@ -24,7 +24,7 @@ import {
   resolveIndexPath,
   shortFingerprint,
   toDisplayPath
-} from "./token-goat-chunk-4ZDRTNGV.mjs";
+} from "./token-goat-chunk-UZ2NFOOZ.mjs";
 import {
   registerReset
 } from "./token-goat-chunk-AO2QD2AG.mjs";

package/dist/{token-goat-chunk-AUM22UQ2.mjs → token-goat-chunk-ZVN5WHTO.mjs}

@@ -4,14 +4,14 @@ import {
   buildEvent,
   relay,
   relayInProcess
-} from "./token-goat-chunk-RRNRPCLX.mjs";
+} from "./token-goat-chunk-Q4LOQY44.mjs";
 import {
   MAX_STDIN_BYTES,
   readStdinJson
-} from "./token-goat-chunk-MR7MNSDR.mjs";
-import "./token-goat-chunk-FDXINYK4.mjs";
-import "./token-goat-chunk-LHMC5ENL.mjs";
-import "./token-goat-chunk-4ZDRTNGV.mjs";
+} from "./token-goat-chunk-VCNW7BGU.mjs";
+import "./token-goat-chunk-LJ3CHCTT.mjs";
+import "./token-goat-chunk-CGWACYYZ.mjs";
+import "./token-goat-chunk-UZ2NFOOZ.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 export {

package/dist/token-goat-hook.mjs

@@ -2,11 +2,11 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   relayInProcess
-} from "./token-goat-chunk-RRNRPCLX.mjs";
-import "./token-goat-chunk-MR7MNSDR.mjs";
-import "./token-goat-chunk-FDXINYK4.mjs";
-import "./token-goat-chunk-LHMC5ENL.mjs";
-import "./token-goat-chunk-4ZDRTNGV.mjs";
+} from "./token-goat-chunk-Q4LOQY44.mjs";
+import "./token-goat-chunk-VCNW7BGU.mjs";
+import "./token-goat-chunk-LJ3CHCTT.mjs";
+import "./token-goat-chunk-CGWACYYZ.mjs";
+import "./token-goat-chunk-UZ2NFOOZ.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 export {

package/dist/token-goat.core.mjs

@@ -2,13 +2,13 @@ import { createRequire as __cjsRequire } from 'node:module';
 const require = __cjsRequire(import.meta.url);
 import {
   run
-} from "./token-goat-chunk-SQSB5P5P.mjs";
-import "./token-goat-chunk-SXSWQMNP.mjs";
-import "./token-goat-chunk-MR7MNSDR.mjs";
-import "./token-goat-chunk-FDXINYK4.mjs";
+} from "./token-goat-chunk-KKIB7O3Z.mjs";
+import "./token-goat-chunk-FXAPKVRG.mjs";
+import "./token-goat-chunk-VCNW7BGU.mjs";
+import "./token-goat-chunk-LJ3CHCTT.mjs";
 import {
   installEpipeGuard
-} from "./token-goat-chunk-4ZDRTNGV.mjs";
+} from "./token-goat-chunk-UZ2NFOOZ.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";