qcoder 0.5.0a5__tar.gz → 0.5.0a6__tar.gz

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/CHANGELOG.md

@@ -1,6 +1,18 @@
 # Changelog
 
 
+## 0.5.0a6
+
+- Add share-safe / redacted artifact mode for artifacts intended for ChatGPT, Cursor, email, GitHub issues, or support threads.
+- Add `--share-safe` / `--redact` to OSS artifact commands and Explorer evidence file output.
+- Emit share-safety metadata in JSON artifacts: `share_safe`, `redactions_applied`, `raw_qasm_included`, `local_paths_included`, and `tokens_included`.
+- Add a visible share-safe note to Markdown artifacts.
+- Fix Windows free-text path redaction, including `C:\Users\...` paths, Windows forward-slash paths, UNC paths, home-relative paths, Linux home paths, and WSL-mounted Windows paths.
+- Preserve normal rich local artifacts by default; share-safe mode is opt-in.
+- Share-safe mode is designed for safer sharing and users should still review artifacts before sharing. It is not a privacy guarantee.
+- Remaining P1 hardening: forward-slash UNC variants, broader Linux root patterns, independent post-scan hardening, and expanded docs wording.
+
+
 ## 0.5.0a5
 
 - Add `qcoder explorer evidence` as the primary Explorer Beta guided-evidence surface.

{qcoder-0.5.0a5/src/qcoder.egg-info → qcoder-0.5.0a6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: qcoder
-Version: 0.5.0a5
+Version: 0.5.0a6
 Summary: Quantum circuit analysis and structured feature extraction tools.
 Author-email: Quantum Ready Solutions <support@qcoder.ai>
 Maintainer-email: Quantum Ready Solutions <support@qcoder.ai>
@@ -77,6 +77,16 @@ qcoder context path/to/circuit.qasm --out-json preflight.context.json --out-md p
 qcoder review --counts-json counts.json --format qiskit_counts --preflight-json preflight.context.json --out-json execution.review.json --out-md execution.review.md
 ```
 
+For artifacts you intend to paste into ChatGPT, Cursor, email, GitHub issues, or support threads, add `--share-safe`:
+
+```bash
+qcoder analyze path/to/circuit.qasm --json --share-safe
+qcoder context path/to/circuit.qasm --out-json preflight.context.json --out-md preflight.context.md --share-safe
+qcoder review --counts-json counts.json --format qiskit_counts --preflight-json preflight.context.json --out-json execution.review.json --out-md execution.review.md --share-safe
+```
+
+Share-safe mode is designed for safer sharing: it redacts local paths and token/header-like strings, adds `share_safe=true`, and marks raw QASM/local paths/tokens as not included. Review artifacts before sharing; this is not a guarantee that all sensitive project content has been removed.
+
 Explorer Beta compatibility checks and archived Pro bootstrap:
 
 ```bash
@@ -85,6 +95,7 @@ qcoder explorer demo
 qcoder explorer evidence
 qcoder explorer evidence --qasm path/to/circuit.qasm
 qcoder explorer evidence --context-json preflight.context.json
+qcoder explorer evidence --qasm path/to/circuit.qasm --out-json explorer.json --out-md explorer.md --share-safe
 qcoder pro --help
 ```
 

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/README.md

@@ -47,6 +47,16 @@ qcoder context path/to/circuit.qasm --out-json preflight.context.json --out-md p
 qcoder review --counts-json counts.json --format qiskit_counts --preflight-json preflight.context.json --out-json execution.review.json --out-md execution.review.md
 ```
 
+For artifacts you intend to paste into ChatGPT, Cursor, email, GitHub issues, or support threads, add `--share-safe`:
+
+```bash
+qcoder analyze path/to/circuit.qasm --json --share-safe
+qcoder context path/to/circuit.qasm --out-json preflight.context.json --out-md preflight.context.md --share-safe
+qcoder review --counts-json counts.json --format qiskit_counts --preflight-json preflight.context.json --out-json execution.review.json --out-md execution.review.md --share-safe
+```
+
+Share-safe mode is designed for safer sharing: it redacts local paths and token/header-like strings, adds `share_safe=true`, and marks raw QASM/local paths/tokens as not included. Review artifacts before sharing; this is not a guarantee that all sensitive project content has been removed.
+
 Explorer Beta compatibility checks and archived Pro bootstrap:
 
 ```bash
@@ -55,6 +65,7 @@ qcoder explorer demo
 qcoder explorer evidence
 qcoder explorer evidence --qasm path/to/circuit.qasm
 qcoder explorer evidence --context-json preflight.context.json
+qcoder explorer evidence --qasm path/to/circuit.qasm --out-json explorer.json --out-md explorer.md --share-safe
 qcoder pro --help
 ```
 

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "qcoder"
-version = "0.5.0a5"
+version = "0.5.0a6"
 description = "Quantum circuit analysis and structured feature extraction tools."
 readme = "README.md"
 requires-python = ">=3.11"

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder/__init__.py

@@ -1,3 +1,3 @@
 __all__ = []
-__version__ = "0.5.0a5"
+__version__ = "0.5.0a6"
 file = __file__

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder/cli.py

@@ -8,6 +8,11 @@ from pathlib import Path
 from qcoder.pipelines.analyze import analyze_qasm
 from qcoder.pipelines.context import write_preflight_context
 from qcoder.pipelines.review import write_execution_review
+from qcoder.core.share_safe import (
+    make_share_safe_payload,
+    render_share_safe_note,
+    render_share_safe_provenance,
+)
 from qcoder.explorer.derived_evidence import (
     ExplorerDerivedEvidenceRequestError,
     build_derived_evidence_request_from_context_json,
@@ -100,6 +105,13 @@ def _cmd_analyze(argv: list[str]) -> int:
         help="Include derived feature_profiles in JSON output (requires --json for analyze)",
     )
     p.add_argument("--json", action="store_true", help="Emit machine-readable JSON")
+    p.add_argument(
+        "--share-safe",
+        "--redact",
+        dest="share_safe",
+        action="store_true",
+        help="Redact local paths and sensitive runtime details in JSON output intended for sharing.",
+    )
     args = p.parse_args(argv)
 
     if args.profiles and not args.json:
@@ -120,9 +132,12 @@ def _cmd_analyze(argv: list[str]) -> int:
     )
 
     if args.json:
+        payload = report.to_json_dict(include_guidance=args.guidance, include_profiles=args.profiles)
+        if args.share_safe:
+            payload = make_share_safe_payload(payload)
         print(
             json.dumps(
-                report.to_json_dict(include_guidance=args.guidance, include_profiles=args.profiles),
+                payload,
                 indent=2,
                 sort_keys=True,
             )
@@ -131,7 +146,9 @@ def _cmd_analyze(argv: list[str]) -> int:
 
     ex = report.example
     rc = report.run_config
-    print(f"file: {ex.qasm_path}")
+    print(f"file: {'<redacted-local-path>' if args.share_safe else ex.qasm_path}")
+    if args.share_safe:
+        print("share_safe: true")
     print(f"format: {ex.ir.source_format}")
     if ex.name:
         print(f"name: {ex.name}")
@@ -218,6 +235,13 @@ def _cmd_context(argv: list[str]) -> int:
         action="store_true",
         help="Include full feature glossary/appendix in context artifacts (default: selected structural features only)",
     )
+    p.add_argument(
+        "--share-safe",
+        "--redact",
+        dest="share_safe",
+        action="store_true",
+        help="Write artifacts designed for safer sharing by redacting local paths and sensitive runtime details.",
+    )
     args = p.parse_args(argv)
 
     write_preflight_context(
@@ -229,9 +253,12 @@ def _cmd_context(argv: list[str]) -> int:
         include_full_features=args.full_features,
         circuit_id=args.circuit_id,
         circuit_name=args.circuit_name,
+        share_safe=args.share_safe,
     )
-    print(f"Wrote preflight context JSON to {args.out_json}", file=sys.stderr)
-    print(f"Wrote preflight context Markdown to {args.out_md}", file=sys.stderr)
+    json_label = "<redacted-local-path>" if args.share_safe else args.out_json
+    md_label = "<redacted-local-path>" if args.share_safe else args.out_md
+    print(f"Wrote preflight context JSON to {json_label}", file=sys.stderr)
+    print(f"Wrote preflight context Markdown to {md_label}", file=sys.stderr)
     return 0
 
 
@@ -248,6 +275,13 @@ def _cmd_review(argv: list[str]) -> int:
     p.add_argument("--preflight-json", default=None, help="Optional preflight context JSON path for linkage/checks")
     p.add_argument("--out-json", required=True, help="Output execution review JSON path")
     p.add_argument("--out-md", required=True, help="Output execution review Markdown path")
+    p.add_argument(
+        "--share-safe",
+        "--redact",
+        dest="share_safe",
+        action="store_true",
+        help="Write artifacts designed for safer sharing by redacting local paths and sensitive runtime details.",
+    )
     args = p.parse_args(argv)
 
     write_execution_review(
@@ -256,9 +290,12 @@ def _cmd_review(argv: list[str]) -> int:
         preflight_json=args.preflight_json,
         out_json=args.out_json,
         out_md=args.out_md,
+        share_safe=args.share_safe,
     )
-    print(f"Wrote execution review JSON to {args.out_json}", file=sys.stderr)
-    print(f"Wrote execution review Markdown to {args.out_md}", file=sys.stderr)
+    json_label = "<redacted-local-path>" if args.share_safe else args.out_json
+    md_label = "<redacted-local-path>" if args.share_safe else args.out_md
+    print(f"Wrote execution review JSON to {json_label}", file=sys.stderr)
+    print(f"Wrote execution review Markdown to {md_label}", file=sys.stderr)
     return 0
 
 
@@ -318,14 +355,20 @@ def _format_summary_value(value: str | int | float | bool) -> str:
     return str(value)
 
 
-def _print_raw_payload_json(payload: dict[str, object] | None) -> None:
-    print(json.dumps(payload or {}, indent=2, sort_keys=True))
+def _print_raw_payload_json(payload: dict[str, object] | None, *, share_safe: bool = False) -> None:
+    out = payload or {}
+    if share_safe:
+        out = make_share_safe_payload(out)
+    print(json.dumps(out, indent=2, sort_keys=True))
 
 
-def _write_json_payload(path: str, payload: dict[str, object] | None) -> None:
+def _write_json_payload(path: str, payload: dict[str, object] | None, *, share_safe: bool = False) -> None:
+    out = payload or {}
+    if share_safe:
+        out = make_share_safe_payload(out)
     out_path = Path(path)
     out_path.parent.mkdir(parents=True, exist_ok=True)
-    out_path.write_text(json.dumps(payload or {}, indent=2, sort_keys=True), encoding="utf-8")
+    out_path.write_text(json.dumps(out, indent=2, sort_keys=True), encoding="utf-8")
 
 
 def _is_scalar(value: object) -> bool:
@@ -468,6 +511,11 @@ def _render_student_evidence_markdown(payload: dict[str, object] | None) -> str:
         "# qCoder Explorer Beta Guided Evidence",
         "",
     ]
+    if payload and payload.get("share_safe") is True:
+        lines.append(render_share_safe_note().strip())
+        lines.append("")
+        lines.append(render_share_safe_provenance(payload).strip())
+        lines.append("")
     for line in _summarize_student_evidence_payload(payload):
         lines.append(f"- {line}")
     if payload:
@@ -490,10 +538,13 @@ def _render_student_evidence_markdown(payload: dict[str, object] | None) -> str:
     return "\n".join(lines)
 
 
-def _write_markdown_payload(path: str, payload: dict[str, object] | None) -> None:
+def _write_markdown_payload(path: str, payload: dict[str, object] | None, *, share_safe: bool = False) -> None:
+    out = payload or {}
+    if share_safe:
+        out = make_share_safe_payload(out)
     out_path = Path(path)
     out_path.parent.mkdir(parents=True, exist_ok=True)
-    out_path.write_text(_render_student_evidence_markdown(payload), encoding="utf-8")
+    out_path.write_text(_render_student_evidence_markdown(out), encoding="utf-8")
 
 
 def _run_student_builtin_review_check(
@@ -577,6 +628,7 @@ def _run_student_evidence_check(
     context_json_path: str | None = None,
     out_json: str | None = None,
     out_md: str | None = None,
+    share_safe: bool = False,
 ) -> int:
     request_payload: dict[str, object] | None = None
     if qasm_path and context_json_path:
@@ -618,11 +670,11 @@ def _run_student_evidence_check(
         return 2
 
     if json_output:
-        _print_raw_payload_json(response.payload)
+        _print_raw_payload_json(response.payload, share_safe=share_safe)
         if out_json:
-            _write_json_payload(out_json, response.payload)
+            _write_json_payload(out_json, response.payload, share_safe=share_safe)
         if out_md:
-            _write_markdown_payload(out_md, response.payload)
+            _write_markdown_payload(out_md, response.payload, share_safe=share_safe)
         return 0 if response.status_code == 200 else 1 if response.status_code in {401, 403} else 2
 
     if response.status_code == 200:
@@ -637,11 +689,11 @@ def _run_student_evidence_check(
         for line in _summarize_student_evidence_payload(response.payload):
             print(f"  {line}")
         if out_json:
-            _write_json_payload(out_json, response.payload)
-            print(f"  wrote_json: {out_json}")
+            _write_json_payload(out_json, response.payload, share_safe=share_safe)
+            print(f"  wrote_json: {'<redacted-local-path>' if share_safe else out_json}")
         if out_md:
-            _write_markdown_payload(out_md, response.payload)
-            print(f"  wrote_md: {out_md}")
+            _write_markdown_payload(out_md, response.payload, share_safe=share_safe)
+            print(f"  wrote_md: {'<redacted-local-path>' if share_safe else out_md}")
         return 0
     if response.status_code == 401:
         print(
@@ -724,6 +776,13 @@ def _cmd_explorer(argv: list[str], *, compatibility_alias: bool = False) -> int:
     )
     p_evidence.add_argument("--out-json", default=None, help="Write Explorer evidence response JSON.")
     p_evidence.add_argument("--out-md", default=None, help="Write Explorer evidence response Markdown.")
+    p_evidence.add_argument(
+        "--share-safe",
+        "--redact",
+        dest="share_safe",
+        action="store_true",
+        help="Write output artifacts with explicit share-safe metadata and local-sensitive details redacted.",
+    )
     p_evidence.set_defaults(explorer_command="evidence")
 
     args = p.parse_args(argv)
@@ -749,6 +808,7 @@ def _cmd_explorer(argv: list[str], *, compatibility_alias: bool = False) -> int:
             context_json_path=args.context_json,
             out_json=args.out_json,
             out_md=args.out_md,
+            share_safe=args.share_safe,
         )
 
     p.print_help()

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder/core/run_config.py

@@ -60,9 +60,15 @@ class RunConfig:
         )
 
     def to_dict(self) -> dict:
+        analysis_backend = "local_gpu" if self.backend == "GPU" else "local_cpu"
         return {
             "processor": self.processor,
             "backend": self.backend,
+            "analysis_backend": analysis_backend,
+            "local_analysis_backend": analysis_backend,
+            "backend_meaning": (
+                "local analysis backend; not a simulator, QPU, or hardware execution backend"
+            ),
             "precision": self.precision,
             "threshold": self.threshold,
         }

qcoder-0.5.0a6/src/qcoder/core/share_safe.py

@@ -0,0 +1,278 @@
+from __future__ import annotations
+
+import copy
+import re
+from pathlib import PurePath
+from typing import Any
+
+
+SHARE_SAFE_NOTE = (
+    "Share-safe means local paths, raw circuit text, and token-like values are "
+    "omitted or redacted where detected. It is designed for safer sharing, not "
+    "a privacy guarantee, and it does not hide circuit structure."
+)
+SCHEMA_VERSION_NOTE = (
+    "qCoder package versions and artifact/schema versions are versioned separately."
+)
+SUPPORTED_CLAIMS = (
+    "deterministic structural features",
+    "pre-execution circuit shape",
+    "local artifact review context",
+)
+UNSUPPORTED_CLAIMS = (
+    "runtime prediction",
+    "fidelity or backend ranking",
+    "correctness proof",
+    "quantum advantage",
+    "raw hosted QASM",
+)
+
+_REDACTED_LOCAL_PATH = "<redacted-local-path>"
+_REDACTED_SENSITIVE_VALUE = "<redacted-sensitive-value>"
+
+_PATH_TERMINATOR_CHARS = r"\s`'\"<>|"
+_LOCAL_PATH_RE = re.compile(
+    r"(?P<path>"
+    r"(?:[A-Za-z]:[\\/][^" + _PATH_TERMINATOR_CHARS + r"]+)"
+    r"|(?:\\\\[^\\/" + _PATH_TERMINATOR_CHARS + r"]+[\\/][^" + _PATH_TERMINATOR_CHARS + r"]+)"
+    r"|(?:~[\\/][^" + _PATH_TERMINATOR_CHARS + r"]+)"
+    r"|(?:/(?:home|Users|mnt|private|var|tmp|workspace|workspaces)/[^" + _PATH_TERMINATOR_CHARS + r"]+)"
+    r")"
+)
+_TOKEN_LIKE_RE = re.compile(
+    r"(?i)(bearer\s+)[A-Za-z0-9._~+/=-]{8,}|"
+    r"(authorization\s*[:=]\s*)(?:bearer\s+)?[^\n,;]+|"
+    r"(cookie\s*[:=]\s*)[^\n,;]+|"
+    r"(session\s*[:=]\s*)[^\n,;]+|"
+    r"(identity[-_ ]?token\s*[:=]\s*)[^\n,;]+|"
+    r"(QCODER_[A-Z_]*TOKEN\s*=\s*)[^\s]+|"
+    r"(pypi-)[A-Za-z0-9._-]{8,}"
+)
+_FORBIDDEN_TEXT_MARKERS = (
+    "OPENQASM 2.0",
+    "OPENQASM 3.0",
+    "qreg ",
+    "creg ",
+    "Secret Manager",
+    "Postmark",
+)
+_PATH_KEYS = {
+    "qasm_path",
+    "preflight_context_path",
+    "counts_json",
+    "source_path",
+    "local_path",
+    "path",
+}
+_RAW_KEYS = {
+    "raw_qasm",
+    "qasm_text",
+    "source_text",
+    "raw_source_text",
+    "prompt",
+    "notebook",
+    "auth_header",
+    "authorization",
+    "cookie",
+    "session",
+    "token",
+}
+
+
+def make_share_safe_payload(payload: dict[str, Any]) -> dict[str, Any]:
+    redactions: set[str] = set()
+    sanitized = _sanitize(copy.deepcopy(payload), redactions=redactions, key_path=())
+    if not isinstance(sanitized, dict):
+        sanitized = {"value": sanitized}
+    _add_artifact_identity(sanitized)
+    _clarify_run_config(sanitized)
+    sanitized["share_safe"] = True
+    sanitized["redactions_applied"] = sorted(redactions)
+    serialized = _stable_string(sanitized)
+    sanitized["raw_qasm_included"] = contains_raw_qasm_marker(serialized)
+    sanitized["local_paths_included"] = contains_local_path(serialized)
+    token_like_secrets_included = contains_token_or_header(serialized)
+    sanitized["token_like_secrets_included"] = token_like_secrets_included
+    sanitized["tokens_included"] = token_like_secrets_included
+    sanitized["tokens_included_meaning"] = (
+        "authentication tokens or token-like secrets, not LLM token counts"
+    )
+    sanitized["share_safe_note"] = SHARE_SAFE_NOTE
+    sanitized["schema_version_note"] = SCHEMA_VERSION_NOTE
+    sanitized["supported_claims"] = list(SUPPORTED_CLAIMS)
+    sanitized["unsupported_claims"] = list(UNSUPPORTED_CLAIMS)
+    return sanitized
+
+
+def render_share_safe_note() -> str:
+    return f"> **{SHARE_SAFE_NOTE}**\n\n"
+
+
+def render_share_safe_provenance(payload: dict[str, Any]) -> str:
+    """Render compact share-safe provenance for Markdown artifacts."""
+    lines = ["## Share-safe provenance", ""]
+    for label, value in _provenance_items(payload):
+        lines.append(f"- {label}: `{value}`")
+    redactions = payload.get("redactions_applied")
+    if isinstance(redactions, list):
+        redaction_text = ", ".join(str(item) for item in redactions) if redactions else "none"
+        lines.append(f"- redactions_applied: `{redaction_text}`")
+    lines.append("")
+    lines.append(SCHEMA_VERSION_NOTE)
+    lines.append("")
+    lines.append("## Supported by this artifact")
+    for item in SUPPORTED_CLAIMS:
+        lines.append(f"- {item}")
+    lines.append("")
+    lines.append("## Not supported by this artifact")
+    for item in UNSUPPORTED_CLAIMS:
+        lines.append(f"- {item}")
+    lines.append("")
+    return "\n".join(lines)
+
+
+def _provenance_items(payload: dict[str, Any]) -> list[tuple[str, Any]]:
+    schema = (
+        payload.get("schema_id")
+        or payload.get("context_bundle_schema_version")
+        or payload.get("review_bundle_schema_version")
+        or payload.get("artifact_type")
+        or "unknown"
+    )
+    fingerprint = None
+    hashes = payload.get("hashes")
+    if isinstance(hashes, dict):
+        fingerprint = hashes.get("qasm_sha256") or hashes.get("analysis_fingerprint")
+    if fingerprint is None:
+        linkage = payload.get("linkage")
+        if isinstance(linkage, dict):
+            fingerprint = linkage.get("qasm_sha256") or linkage.get("analysis_fingerprint")
+    return [
+        ("qcoder_version", payload.get("qcoder_version", "unknown")),
+        ("artifact_schema", schema),
+        ("qcoder_product_path", payload.get("qcoder_product_path", "unknown")),
+        ("artifact_role", payload.get("artifact_role", "unknown")),
+        ("share_safe", payload.get("share_safe", "unknown")),
+        ("raw_qasm_included", payload.get("raw_qasm_included", "unknown")),
+        ("local_paths_included", payload.get("local_paths_included", "unknown")),
+        (
+            "token_like_secrets_included",
+            payload.get("token_like_secrets_included", payload.get("tokens_included", "unknown")),
+        ),
+        ("qasm_sha256_or_analysis_fingerprint", fingerprint or "not_available"),
+    ]
+
+
+def _add_artifact_identity(payload: dict[str, Any]) -> None:
+    if payload.get("qcoder_product_path") and payload.get("artifact_role"):
+        return
+    schema_id = str(payload.get("schema_id") or "")
+    mode = str(payload.get("mode") or "")
+    artifact_type = str(payload.get("artifact_type") or "")
+    if schema_id.startswith("qcoder.explorer.") or mode == "explorer-custom-guided-evidence":
+        payload.setdefault("qcoder_product_path", "explorer_beta")
+        payload.setdefault("artifact_role", "derived_context_guided_evidence")
+    elif payload.get("context_bundle_schema_version") or artifact_type == "qcoder.preflight_context":
+        payload.setdefault("qcoder_product_path", "oss")
+        payload.setdefault("artifact_role", "local_preflight_context")
+    elif payload.get("review_bundle_schema_version") or artifact_type == "qcoder.execution_review":
+        payload.setdefault("qcoder_product_path", "oss")
+        payload.setdefault("artifact_role", "local_execution_review")
+    elif "feature_map" in payload and "features" in payload:
+        payload.setdefault("qcoder_product_path", "oss")
+        payload.setdefault("artifact_role", "local_analysis_report")
+
+
+def _clarify_run_config(payload: dict[str, Any]) -> None:
+    run_config = payload.get("run_config")
+    if not isinstance(run_config, dict):
+        return
+    backend = str(run_config.get("backend") or "").strip().lower()
+    if backend == "gpu":
+        local_backend = "local_gpu"
+    else:
+        local_backend = "local_cpu"
+    run_config.setdefault("analysis_backend", local_backend)
+    run_config.setdefault("local_analysis_backend", local_backend)
+    run_config.setdefault(
+        "backend_meaning",
+        "local analysis backend; not a simulator, QPU, or hardware execution backend",
+    )
+
+
+def _sanitize(value: Any, *, redactions: set[str], key_path: tuple[str, ...]) -> Any:
+    key = key_path[-1] if key_path else ""
+    key_lower = key.lower()
+    if isinstance(value, dict):
+        out: dict[str, Any] = {}
+        for child_key, child_value in value.items():
+            child_key_str = str(child_key)
+            if child_key_str.lower() in _RAW_KEYS:
+                out[child_key_str] = _REDACTED_SENSITIVE_VALUE
+                redactions.add(f"field:{child_key_str}")
+                continue
+            out[child_key_str] = _sanitize(
+                child_value,
+                redactions=redactions,
+                key_path=key_path + (child_key_str,),
+            )
+        return out
+    if isinstance(value, list):
+        return [_sanitize(item, redactions=redactions, key_path=key_path) for item in value]
+    if isinstance(value, tuple):
+        return [_sanitize(item, redactions=redactions, key_path=key_path) for item in value]
+    if isinstance(value, str):
+        if key_lower in _PATH_KEYS:
+            redactions.add(f"field:{key}")
+            return _REDACTED_LOCAL_PATH
+        return _sanitize_text(value, redactions=redactions)
+    return value
+
+
+def _sanitize_text(text: str, *, redactions: set[str]) -> str:
+    out = text
+    for marker in _FORBIDDEN_TEXT_MARKERS:
+        if marker in out:
+            out = out.replace(marker, _REDACTED_SENSITIVE_VALUE)
+            redactions.add("raw_or_sensitive_text")
+
+    def _path_repl(match: re.Match[str]) -> str:
+        redactions.add("absolute_path")
+        return _REDACTED_LOCAL_PATH
+
+    out = _LOCAL_PATH_RE.sub(_path_repl, out)
+
+    def _token_repl(match: re.Match[str]) -> str:
+        redactions.add("token_or_header_like_text")
+        return _REDACTED_SENSITIVE_VALUE
+
+    out = _TOKEN_LIKE_RE.sub(_token_repl, out)
+    return out
+
+
+def _stable_string(value: Any) -> str:
+    try:
+        import json
+
+        return json.dumps(value, sort_keys=True, ensure_ascii=False)
+    except Exception:
+        return str(value)
+
+
+def contains_local_path(text: str) -> bool:
+    return bool(_LOCAL_PATH_RE.search(text))
+
+
+def contains_token_or_header(text: str) -> bool:
+    return bool(_TOKEN_LIKE_RE.search(text))
+
+
+def contains_raw_qasm_marker(text: str) -> bool:
+    return any(marker in text for marker in ("OPENQASM 2.0", "OPENQASM 3.0", "qreg ", "creg "))
+
+
+def is_probable_absolute_path(value: str) -> bool:
+    try:
+        return PurePath(value).is_absolute() or contains_local_path(value)
+    except Exception:
+        return False

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder/engines/context/bundle.py

@@ -88,6 +88,8 @@ def build_context_bundle(
     return {
         "context_bundle_schema_version": "0.1",
         "artifact_type": "qcoder.preflight_context",
+        "qcoder_product_path": "oss",
+        "artifact_role": "local_preflight_context",
         "basis": context_bundle_basis(analysis),
         "generated_utc": generated_utc or utc_now_iso(),
         "qcoder_version": qcoder_version,
@@ -106,4 +108,3 @@ def build_context_bundle(
             "limits": llm_limits,
         },
     }
-

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder/engines/context/markdown.py

@@ -2,6 +2,8 @@ from __future__ import annotations
 
 from typing import Any
 
+from qcoder.core.share_safe import render_share_safe_note, render_share_safe_provenance
+
 
 def _fmt_num(value: Any) -> str:
     if isinstance(value, float) and value.is_integer():
@@ -24,6 +26,11 @@ def render_context_markdown(bundle: dict[str, Any]) -> str:
 
     lines.append("# qCoder Preflight Context")
     lines.append("")
+    if bundle.get("share_safe") is True:
+        lines.append(render_share_safe_note().strip())
+        lines.append("")
+        lines.append(render_share_safe_provenance(bundle).strip())
+        lines.append("")
     lines.append("## Purpose")
     lines.append("Deterministic pre-execution context artifact for planning and review.")
     lines.append("")
@@ -121,4 +128,3 @@ def render_context_markdown(bundle: dict[str, Any]) -> str:
     lines.append(bundle.get("llm_use", {}).get("intended_use", ""))
     lines.append("")
     return "\n".join(lines)
-

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder/engines/review/bundle.py

@@ -50,6 +50,7 @@ def build_review_bundle(
     counts_v0: dict[str, Any],
     preflight_context: dict[str, Any] | None = None,
     preflight_context_path: str | None = None,
+    qcoder_version: str | None = None,
     generated_utc: str | None = None,
 ) -> dict[str, Any]:
     counts = counts_v0.get("counts", {})
@@ -193,6 +194,9 @@ def build_review_bundle(
     return {
         "review_bundle_schema_version": "0.1",
         "artifact_type": "qcoder.execution_review",
+        "qcoder_product_path": "oss",
+        "artifact_role": "local_execution_review",
+        "qcoder_version": qcoder_version,
         "basis": "deterministic_counts_review",
         "generated_utc": generated_utc or utc_now_iso(),
         "inputs": {
@@ -228,4 +232,3 @@ def build_review_bundle(
             ],
         },
     }
-

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder/engines/review/markdown.py

@@ -2,6 +2,8 @@ from __future__ import annotations
 
 from typing import Any
 
+from qcoder.core.share_safe import render_share_safe_note, render_share_safe_provenance
+
 
 def render_review_markdown(bundle: dict[str, Any]) -> str:
     lines: list[str] = []
@@ -14,6 +16,11 @@ def render_review_markdown(bundle: dict[str, Any]) -> str:
 
     lines.append("# qCoder Execution Review")
     lines.append("")
+    if bundle.get("share_safe") is True:
+        lines.append(render_share_safe_note().strip())
+        lines.append("")
+        lines.append(render_share_safe_provenance(bundle).strip())
+        lines.append("")
     lines.append("## Purpose")
     lines.append("Deterministic post-execution review artifact from provided counts.")
     lines.append("Counts are user-provided; qCoder did not execute the circuit.")
@@ -107,4 +114,3 @@ def render_review_markdown(bundle: dict[str, Any]) -> str:
     lines.append(bundle.get("llm_use", {}).get("intended_use", ""))
     lines.append("")
     return "\n".join(lines)
-

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder/pipelines/analyze.py

@@ -2,12 +2,20 @@ from __future__ import annotations
 
 import hashlib
 from dataclasses import dataclass
+from importlib.metadata import PackageNotFoundError, version
 from pathlib import Path
 
 from qcoder.core.run_config import RunConfig
 from qcoder.engines.feature_extraction.extractor import CircuitExample, extract_example
 
 
+def _qcoder_version() -> str:
+    try:
+        return version("qcoder")
+    except PackageNotFoundError:
+        return "0+unknown"
+
+
 @dataclass(frozen=True)
 class AnalyzeReport:
     example: CircuitExample
@@ -19,6 +27,9 @@ class AnalyzeReport:
         fv = ex.global_features
         feature_map = dict(zip(fv.feature_names, fv.features))
         out = {
+            "qcoder_product_path": "oss",
+            "artifact_role": "local_analysis_report",
+            "qcoder_version": _qcoder_version(),
             "circuit_id": ex.id,
             "circuit_name": ex.name,
             "function_hint": ex.function_hint,

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder/pipelines/context.py

@@ -8,6 +8,7 @@ from typing import Any
 from qcoder.engines.context.bundle import build_context_bundle
 from qcoder.engines.context.markdown import render_context_markdown
 from qcoder.pipelines.analyze import analyze_qasm
+from qcoder.core.share_safe import make_share_safe_payload
 
 
 def _qcoder_version() -> str:
@@ -49,6 +50,7 @@ def write_preflight_context(
     include_full_features: bool = False,
     circuit_id: str | None = None,
     circuit_name: str | None = None,
+    share_safe: bool = False,
 ) -> dict[str, Any]:
     bundle = build_preflight_context(
         qasm_path,
@@ -58,6 +60,8 @@ def write_preflight_context(
         circuit_id=circuit_id,
         circuit_name=circuit_name,
     )
+    if share_safe:
+        bundle = make_share_safe_payload(bundle)
     out_json_path = Path(out_json)
     out_md_path = Path(out_md)
     out_json_path.parent.mkdir(parents=True, exist_ok=True)
@@ -65,4 +69,3 @@ def write_preflight_context(
     out_json_path.write_text(json.dumps(bundle, indent=2, sort_keys=True), encoding="utf-8")
     out_md_path.write_text(render_context_markdown(bundle), encoding="utf-8")
     return bundle
-

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder/pipelines/review.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import json
+from importlib.metadata import PackageNotFoundError, version
 from pathlib import Path
 from typing import Any
 
@@ -8,6 +9,14 @@ from qcoder.engines.review.bundle import build_review_bundle
 from qcoder.engines.review.counts_v0 import normalize_counts_v0
 from qcoder.engines.review.markdown import render_review_markdown
 from qcoder.engines.review.qiskit_counts import normalize_qiskit_counts_payload
+from qcoder.core.share_safe import make_share_safe_payload
+
+
+def _qcoder_version() -> str:
+    try:
+        return version("qcoder")
+    except PackageNotFoundError:
+        return "0+unknown"
 
 
 def _load_json(path: str) -> dict[str, Any]:
@@ -37,6 +46,7 @@ def build_execution_review(
         counts_v0=counts_v0,
         preflight_context=preflight,
         preflight_context_path=preflight_json,
+        qcoder_version=_qcoder_version(),
     )
 
 
@@ -47,12 +57,15 @@ def write_execution_review(
     out_json: str,
     out_md: str,
     preflight_json: str | None = None,
+    share_safe: bool = False,
 ) -> dict[str, Any]:
     bundle = build_execution_review(
         counts_json=counts_json,
         counts_format=counts_format,
         preflight_json=preflight_json,
     )
+    if share_safe:
+        bundle = make_share_safe_payload(bundle)
     out_json_path = Path(out_json)
     out_md_path = Path(out_md)
     out_json_path.parent.mkdir(parents=True, exist_ok=True)
@@ -60,4 +73,3 @@ def write_execution_review(
     out_json_path.write_text(json.dumps(bundle, indent=2, sort_keys=True), encoding="utf-8")
     out_md_path.write_text(render_review_markdown(bundle), encoding="utf-8")
     return bundle
-

{qcoder-0.5.0a5 → qcoder-0.5.0a6/src/qcoder.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: qcoder
-Version: 0.5.0a5
+Version: 0.5.0a6
 Summary: Quantum circuit analysis and structured feature extraction tools.
 Author-email: Quantum Ready Solutions <support@qcoder.ai>
 Maintainer-email: Quantum Ready Solutions <support@qcoder.ai>
@@ -77,6 +77,16 @@ qcoder context path/to/circuit.qasm --out-json preflight.context.json --out-md p
 qcoder review --counts-json counts.json --format qiskit_counts --preflight-json preflight.context.json --out-json execution.review.json --out-md execution.review.md
 ```
 
+For artifacts you intend to paste into ChatGPT, Cursor, email, GitHub issues, or support threads, add `--share-safe`:
+
+```bash
+qcoder analyze path/to/circuit.qasm --json --share-safe
+qcoder context path/to/circuit.qasm --out-json preflight.context.json --out-md preflight.context.md --share-safe
+qcoder review --counts-json counts.json --format qiskit_counts --preflight-json preflight.context.json --out-json execution.review.json --out-md execution.review.md --share-safe
+```
+
+Share-safe mode is designed for safer sharing: it redacts local paths and token/header-like strings, adds `share_safe=true`, and marks raw QASM/local paths/tokens as not included. Review artifacts before sharing; this is not a guarantee that all sensitive project content has been removed.
+
 Explorer Beta compatibility checks and archived Pro bootstrap:
 
 ```bash
@@ -85,6 +95,7 @@ qcoder explorer demo
 qcoder explorer evidence
 qcoder explorer evidence --qasm path/to/circuit.qasm
 qcoder explorer evidence --context-json preflight.context.json
+qcoder explorer evidence --qasm path/to/circuit.qasm --out-json explorer.json --out-md explorer.md --share-safe
 qcoder pro --help
 ```
 

{qcoder-0.5.0a5 → qcoder-0.5.0a6}/src/qcoder.egg-info/SOURCES.txt

@@ -17,6 +17,7 @@ src/qcoder/core/__init__.py
 src/qcoder/core/context.py
 src/qcoder/core/run_config.py
 src/qcoder/core/schema.py
+src/qcoder/core/share_safe.py
 src/qcoder/core/qasm2/__init__.py
 src/qcoder/core/qasm2/adjoint_eligibility.py
 src/qcoder/core/qasm2/mirror_build.py