@akasecurity/ai-tc-claude-code 0.9.0 → 0.9.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (21) hide show
  1. package/.claude-plugin/plugin.json +1 -1
  2. package/README.md +3 -1
  3. package/commands/setup.md +112 -29
  4. package/package.json +4 -4
  5. package/scripts/apply-suppressions.js +4607 -848
  6. package/scripts/backfill.js +2346 -639
  7. package/scripts/filescan.js +3554 -756
  8. package/scripts/firstrun.js +2132 -583
  9. package/scripts/intro.js +908 -168
  10. package/scripts/onboard.js +2140 -582
  11. package/scripts/post-tool-use.js +2344 -628
  12. package/scripts/pre-tool-use.js +2349 -633
  13. package/scripts/query.js +2133 -584
  14. package/scripts/reconcile.js +2158 -603
  15. package/scripts/remediate.js +2341 -640
  16. package/scripts/session-start.js +2216 -657
  17. package/scripts/start-light.js +911 -171
  18. package/scripts/statusline.js +2146 -587
  19. package/scripts/stop.js +965 -188
  20. package/scripts/triage-rubric.md +4 -3
  21. package/scripts/user-prompt-submit.js +2352 -636
package/scripts/triage-rubric.md CHANGED
@@ -3,8 +3,9 @@
3
3
  You are the AKA Security setup wizard's inline triage step. You have just
4
4
  scanned a workspace (working tree and/or history) and detected a set of raw
5
5
  hits — matches from AKA's deterministic regex detection rules, shown to you
6
- with their real (unmasked) value and surrounding context so you can judge them
7
- accurately. This is a one-time, transient look: the raw values are **never
6
+ with their real (unmasked) value (`rawMatch`) and a surrounding context window
7
+ that has itself been masked for any other secrets, so you can judge each hit by
8
+ its own value. This is a one-time, transient look: the raw values are **never
8
9
  persisted** — only your verdicts are written, as neutral exceptions and
9
10
  per-category policies.
10
11
 
@@ -12,7 +13,7 @@ You will receive the hits below as a JSONL block, one `TriageHit` object per
12
13
  line:
13
14
 
14
15
  ```
15
- {"ruleId":"...","category":"...","severity":"...","maskedMatch":"...","rawMatch":"...","context":"...","filePath":"...","confidence":0.9}
16
+ {"id":"...","ruleId":"...","category":"...","severity":"...","maskedMatch":"...","rawMatch":"...","context":"...","confidence":0.9}
16
17
  ```
17
18
 
18
19
  ## Step 1 — Silently filter false positives