fix(signals): redact windows home paths in public PR packets

[JSONbored]

Motivation

• Public-safe PR packet text and the CLI safety gate were not rejecting Windows home-directory paths that use normal backslashes (e.g. C:\Users\alice\...), which could leak local workspace paths in copy-paste PR text.

Description

• Strengthen the server-side public-safety check by updating isPublicSafeText to detect Windows home paths with either \ or / separators (in src/signals/local-branch.ts).
• Apply the same Windows-path handling to the MCP CLI final safety gate by updating isUnsafePublicPacketText (in packages/gittensory-mcp/bin/gittensory-mcp.js).
• Add regression tests that verify Windows home paths are removed/rejected from packet titles and validation lines (in test/unit/local-branch.test.ts) and that server-provided packet markdown containing a normal C:\Users\... path is refused by the CLI test (in test/unit/mcp-cli.test.ts).

Testing

• Ran unit tests: npm test -- --run test/unit/local-branch.test.ts test/unit/mcp-cli.test.ts, and all targeted tests passed.
• Ran type checking: npm run typecheck (tsc --noEmit) with no errors.
• Ran repository checks: git diff --check produced no issues.

---

Codex Task

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	gittensory-ui	c671033	Commit Preview URL Branch Preview URL	Jun 10 2026, 08:37 AM

[ghost]

Note

Gittensory Gate skipped

PR closed before full evaluation. No late first comment was created.

Signal	Result	Evidence	Action
Gate result	⚠️ Skipped	#514 is no longer open.	No action.

---

Checked by Gittensory, a quiet PR intelligence layer for OSS maintainers.

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.