@darrenjcoxon/codeguard 1.0.0

package/dist/ai-summary.js

@@ -0,0 +1,267 @@
+/**
+ * AI Summary Generator
+ *
+ * Uses Claude to generate intelligent summaries and recommendations
+ */
+import Anthropic from '@anthropic-ai/sdk';
+export class AISummaryGenerator {
+    client = null;
+    model;
+    maxTokens;
+    constructor(config = {}) {
+        const apiKey = config.apiKey || process.env.ANTHROPIC_API_KEY;
+        if (apiKey) {
+            this.client = new Anthropic({ apiKey });
+        }
+        this.model = config.model || 'claude-sonnet-4-20250514';
+        this.maxTokens = config.maxTokens || 1024;
+    }
+    /**
+     * Check if AI summarization is available
+     */
+    isAvailable() {
+        return this.client !== null;
+    }
+    /**
+     * Generate an AI summary of the scan report
+     */
+    async generateSummary(report) {
+        if (!this.client) {
+            return 'AI summary unavailable (no API key configured)';
+        }
+        const prompt = this.buildSummaryPrompt(report);
+        try {
+            const response = await this.client.messages.create({
+                model: this.model,
+                max_tokens: this.maxTokens,
+                messages: [
+                    {
+                        role: 'user',
+                        content: prompt
+                    }
+                ]
+            });
+            const textContent = response.content.find(c => c.type === 'text');
+            return textContent?.text || 'Unable to generate summary';
+        }
+        catch (error) {
+            console.error('AI summary generation failed:', error);
+            return 'AI summary generation failed';
+        }
+    }
+    /**
+     * Generate AI recommendations for fixing issues
+     */
+    async generateRecommendations(report) {
+        if (!this.client) {
+            return [];
+        }
+        const prompt = this.buildRecommendationsPrompt(report);
+        try {
+            const response = await this.client.messages.create({
+                model: this.model,
+                max_tokens: this.maxTokens,
+                messages: [
+                    {
+                        role: 'user',
+                        content: prompt
+                    }
+                ]
+            });
+            const textContent = response.content.find(c => c.type === 'text');
+            if (!textContent?.text)
+                return [];
+            // Parse numbered recommendations
+            const lines = textContent.text.split('\n');
+            return lines
+                .filter(line => /^\d+\./.test(line.trim()))
+                .map(line => line.replace(/^\d+\.\s*/, '').trim());
+        }
+        catch (error) {
+            console.error('AI recommendations generation failed:', error);
+            return [];
+        }
+    }
+    /**
+     * Generate a PR comment summary
+     */
+    async generatePRComment(report) {
+        if (!this.client) {
+            return this.generateFallbackPRComment(report);
+        }
+        const prompt = this.buildPRCommentPrompt(report);
+        try {
+            const response = await this.client.messages.create({
+                model: this.model,
+                max_tokens: 800,
+                messages: [
+                    {
+                        role: 'user',
+                        content: prompt
+                    }
+                ]
+            });
+            const textContent = response.content.find(c => c.type === 'text');
+            return textContent?.text || this.generateFallbackPRComment(report);
+        }
+        catch (error) {
+            return this.generateFallbackPRComment(report);
+        }
+    }
+    /**
+     * Build the summary prompt
+     */
+    buildSummaryPrompt(report) {
+        const findingsSummary = this.summarizeFindings(report.findings);
+        return `You are a security and code quality expert. Analyze this code scan report and provide a concise executive summary.
+
+## Scan Results
+
+**Total Findings:** ${report.summary.totalFindings}
+
+**By Severity:**
+${Object.entries(report.summary.bySeverity)
+            .map(([sev, count]) => `- ${sev}: ${count}`)
+            .join('\n')}
+
+**By Category:**
+${Object.entries(report.summary.byCategory)
+            .map(([cat, count]) => `- ${cat}: ${count}`)
+            .join('\n')}
+
+**Quality Gate:** ${report.summary.passesQualityGate ? 'PASSED' : 'FAILED'}
+
+## Top Findings
+
+${findingsSummary}
+
+## Instructions
+
+Provide a 2-3 paragraph executive summary that:
+1. Highlights the most critical issues that need immediate attention
+2. Identifies patterns or systemic issues in the codebase
+3. Gives an overall assessment of the code's security and quality posture
+
+Be direct and actionable. Focus on business impact.`;
+    }
+    /**
+     * Build the recommendations prompt
+     */
+    buildRecommendationsPrompt(report) {
+        const findingsSummary = this.summarizeFindings(report.findings.slice(0, 20));
+        return `You are a security and code quality expert. Based on this scan report, provide prioritized recommendations.
+
+## Findings
+
+${findingsSummary}
+
+## Instructions
+
+Provide exactly 5 prioritized recommendations in this format:
+1. [Priority 1 recommendation - most critical]
+2. [Priority 2 recommendation]
+3. [Priority 3 recommendation]
+4. [Priority 4 recommendation]
+5. [Priority 5 recommendation]
+
+Each recommendation should be:
+- Specific and actionable
+- Include the expected impact
+- Be achievable within a sprint
+
+Focus on high-impact fixes first, then patterns that would prevent future issues.`;
+    }
+    /**
+     * Build the PR comment prompt
+     */
+    buildPRCommentPrompt(report) {
+        const critical = report.findings.filter(f => f.severity === 'critical');
+        const high = report.findings.filter(f => f.severity === 'high');
+        return `Generate a GitHub/GitLab PR comment summarizing this security scan. Use markdown formatting.
+
+**Results:**
+- Total findings: ${report.summary.totalFindings}
+- Critical: ${critical.length}
+- High: ${high.length}
+- Quality Gate: ${report.summary.passesQualityGate ? '✅ Passed' : '❌ Failed'}
+
+**Critical Issues:**
+${critical.slice(0, 3).map(f => `- ${f.title} in ${f.file}`).join('\n') || 'None'}
+
+**High Priority Issues:**
+${high.slice(0, 3).map(f => `- ${f.title} in ${f.file}`).join('\n') || 'None'}
+
+Create a concise, developer-friendly PR comment (max 300 words) that:
+1. Shows the quality gate status prominently
+2. Lists blocking issues (if any)
+3. Provides a brief action summary
+4. Uses appropriate emojis for readability
+
+Do not include any preamble, just output the markdown comment.`;
+    }
+    /**
+     * Summarize findings for prompts
+     */
+    summarizeFindings(findings) {
+        return findings
+            .slice(0, 15)
+            .map(f => `- [${f.severity.toUpperCase()}] ${f.category}: ${f.title}
+  File: ${f.file}${f.line ? `:${f.line}` : ''}
+  ${f.description.slice(0, 200)}${f.description.length > 200 ? '...' : ''}`)
+            .join('\n\n');
+    }
+    /**
+     * Generate a fallback PR comment without AI
+     */
+    generateFallbackPRComment(report) {
+        const { summary, findings } = report;
+        const critical = findings.filter(f => f.severity === 'critical');
+        const high = findings.filter(f => f.severity === 'high');
+        const secrets = findings.filter(f => f.category === 'secret');
+        const gateEmoji = summary.passesQualityGate ? '✅' : '❌';
+        const gateText = summary.passesQualityGate ? 'Passed' : 'Failed';
+        let comment = `## 🔍 CodeGuard Security Scan
+
+### ${gateEmoji} Quality Gate: **${gateText}**
+
+| Severity | Count |
+|----------|-------|
+| 🔴 Critical | ${summary.bySeverity['critical'] || 0} |
+| 🟠 High | ${summary.bySeverity['high'] || 0} |
+| 🟡 Medium | ${summary.bySeverity['medium'] || 0} |
+| 🔵 Low | ${summary.bySeverity['low'] || 0} |
+
+**Total Findings:** ${summary.totalFindings}
+`;
+        if (critical.length > 0) {
+            comment += `
+### 🚨 Critical Issues (Blocking)
+
+${critical.slice(0, 5).map(f => `- **${f.title}** in \`${f.file}\`${f.line ? `:${f.line}` : ''}`).join('\n')}
+`;
+        }
+        if (secrets.length > 0) {
+            comment += `
+### 🔑 Exposed Secrets (Blocking)
+
+${secrets.slice(0, 5).map(f => `- **${f.title}** in \`${f.file}\``).join('\n')}
+
+⚠️ **Action Required:** Rotate these credentials immediately!
+`;
+        }
+        if (high.length > 0 && critical.length === 0 && secrets.length === 0) {
+            comment += `
+### ⚠️ High Priority Issues
+
+${high.slice(0, 5).map(f => `- **${f.title}** in \`${f.file}\`${f.line ? `:${f.line}` : ''}`).join('\n')}
+`;
+        }
+        comment += `
+---
+*Generated by CodeGuard • [View Full Report](#)*
+`;
+        return comment;
+    }
+}
+export default AISummaryGenerator;
+//# sourceMappingURL=ai-summary.js.map

package/dist/ai-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-summary.js","sourceRoot":"","sources":["../src/ai-summary.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAS1C,MAAM,OAAO,kBAAkB;IACrB,MAAM,GAAqB,IAAI,CAAC;IAChC,KAAK,CAAS;IACd,SAAS,CAAS;IAE1B,YAAY,SAA0B,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAE9D,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,0BAA0B,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,MAAkB;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,gDAAgD,CAAC;QAC1D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACjD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,MAAM;qBAChB;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;YAClE,OAAO,WAAW,EAAE,IAAI,IAAI,4BAA4B,CAAC;QAE3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACtD,OAAO,8BAA8B,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB,CAAC,MAAkB;QAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACjD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,MAAM;qBAChB;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;YAClE,IAAI,CAAC,WAAW,EAAE,IAAI;gBAAE,OAAO,EAAE,CAAC;YAElC,iCAAiC;YACjC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,KAAK;iBACT,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;iBAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAEvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAAkB;QACxC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACjD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,MAAM;qBAChB;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;YAClE,OAAO,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAErE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAAkB;QAC3C,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEhE,OAAO;;;;sBAIW,MAAM,CAAC,OAAO,CAAC,aAAa;;;EAGhD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,KAAK,EAAE,CAAC;aAC3C,IAAI,CAAC,IAAI,CAAC;;;EAGX,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,KAAK,EAAE,CAAC;aAC3C,IAAI,CAAC,IAAI,CAAC;;oBAEO,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;;;;EAIxE,eAAe;;;;;;;;;oDASmC,CAAC;IACnD,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,MAAkB;QACnD,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAE7E,OAAO;;;;EAIT,eAAe;;;;;;;;;;;;;;;;kFAgBiE,CAAC;IACjF,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,MAAkB;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAEhE,OAAO;;;oBAGS,MAAM,CAAC,OAAO,CAAC,aAAa;cAClC,QAAQ,CAAC,MAAM;UACnB,IAAI,CAAC,MAAM;kBACH,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;;;EAG1E,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;;;EAG/E,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;;;;;;;;+DAQd,CAAC;IAC9D,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAmB;QAC3C,OAAO,QAAQ;aACZ,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK;UAC/D,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;IACzC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;aACrE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,MAAkB;QAClD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAEjE,IAAI,OAAO,GAAG;;MAEZ,SAAS,oBAAoB,QAAQ;;;;kBAIzB,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;cACvC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;gBAC7B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;aACpC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;;sBAErB,OAAO,CAAC,aAAa;CAC1C,CAAC;QAEE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI;;;EAGf,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;CAC3G,CAAC;QACE,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI;;;EAGf,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;CAG7E,CAAC;QACE,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI;;;EAGf,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;CACvG,CAAC;QACE,CAAC;QAED,OAAO,IAAI;;;CAGd,CAAC;QAEE,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,eAAe,kBAAkB,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+/**
+ * CodeGuard CLI
+ *
+ * Dead simple: just run `codeguard` in your project directory
+ * Get a FIXES.md file to give to your AI coding agent
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;;GAKG"}

package/dist/cli.js

@@ -0,0 +1,199 @@
+#!/usr/bin/env node
+/**
+ * CodeGuard CLI
+ *
+ * Dead simple: just run `codeguard` in your project directory
+ * Get a FIXES.md file to give to your AI coding agent
+ */
+import { Command } from 'commander';
+import chalk from 'chalk';
+import { resolve } from 'path';
+import { existsSync, writeFileSync } from 'fs';
+import { Orchestrator } from './orchestrator.js';
+import { AgentReportGenerator } from './agent-report.js';
+import { SCANNER_COVERAGE } from './scanners/index.js';
+const program = new Command();
+program
+    .name('codeguard')
+    .description(`
+  🛡️  CodeGuard - Security Scanner for AI Agents
+  
+  Scans your code and generates FIXES.md that you can 
+  give to Claude Code, Cursor, or any AI coding agent.
+  
+  Just run: codeguard
+  `)
+    .version('1.0.0');
+// Default action - just scan current directory
+program
+    .argument('[path]', 'Path to scan (default: current directory)', '.')
+    .option('-o, --output <file>', 'Also save full report to file')
+    .option('-f, --format <format>', 'Report format: json, markdown, sarif', 'json')
+    .option('--no-fixes', 'Skip generating FIXES.md')
+    .option('--json', 'Output JSON only (no FIXES.md)')
+    .option('--ci', 'CI mode: fail on high/critical issues')
+    .option('-q, --quiet', 'Minimal output')
+    .action(async (path, options) => {
+    await runScan(path, options);
+});
+// Check command - verify tools are installed
+program
+    .command('check')
+    .description('Check which scanning tools are installed')
+    .action(async () => {
+    console.log(chalk.bold('\n🔍 Checking available scanners...\n'));
+    const orchestrator = new Orchestrator();
+    const available = await orchestrator.checkScanners();
+    for (const [name, isAvailable] of Object.entries(available)) {
+        const status = isAvailable
+            ? chalk.green('✓ installed')
+            : chalk.yellow('○ not found');
+        console.log(`  ${name}: ${status}`);
+    }
+    console.log(chalk.gray('\nInstall missing tools:'));
+    console.log(chalk.gray('  semgrep:  pip install semgrep'));
+    console.log(chalk.gray('  gitleaks: brew install gitleaks'));
+    console.log();
+});
+// List scanners
+program
+    .command('info')
+    .description('Show what CodeGuard scans for')
+    .action(() => {
+    console.log(chalk.bold('\n🛡️  CodeGuard Scanners\n'));
+    for (const [name, info] of Object.entries(SCANNER_COVERAGE)) {
+        console.log(chalk.cyan.bold(`  ${name}`));
+        console.log(chalk.white(`    ${info.description}`));
+        console.log(chalk.gray(`    Finds: ${info.categories.join(', ')}`));
+        console.log();
+    }
+});
+// The scan logic
+async function runScan(path, options) {
+    const targetPath = resolve(path);
+    const quiet = options.quiet || options.json;
+    if (!existsSync(targetPath)) {
+        console.error(chalk.red(`Error: Path not found: ${targetPath}`));
+        process.exit(1);
+    }
+    if (!quiet) {
+        console.log(chalk.bold('\n🛡️  CodeGuard Security Scan\n'));
+        console.log(chalk.gray(`   Scanning: ${targetPath}\n`));
+    }
+    const orchestrator = new Orchestrator({
+        parallel: true,
+        verbose: !quiet
+    });
+    try {
+        const report = await orchestrator.scan({ path: targetPath });
+        // Summary
+        const critical = report.summary.bySeverity['critical'] || 0;
+        const high = report.summary.bySeverity['high'] || 0;
+        const medium = report.summary.bySeverity['medium'] || 0;
+        const low = report.summary.bySeverity['low'] || 0;
+        if (!quiet) {
+            console.log(chalk.bold('\n📊 Results\n'));
+            if (critical > 0)
+                console.log(chalk.red(`   🔴 Critical: ${critical}`));
+            if (high > 0)
+                console.log(chalk.yellow(`   🟠 High: ${high}`));
+            if (medium > 0)
+                console.log(chalk.blue(`   🟡 Medium: ${medium}`));
+            if (low > 0)
+                console.log(chalk.gray(`   🔵 Low: ${low}`));
+            if (report.findings.length === 0) {
+                console.log(chalk.green('   ✨ No issues found!'));
+            }
+        }
+        // Generate FIXES.md (unless disabled)
+        if (options.fixes !== false && !options.json && report.findings.length > 0) {
+            const fixesPath = resolve(targetPath, 'FIXES.md');
+            const agentGenerator = new AgentReportGenerator();
+            agentGenerator.generateAndSave(report, fixesPath, {
+                includeSnippets: true,
+                groupByFile: true
+            });
+            if (!quiet) {
+                console.log(chalk.green(`\n✅ Created: FIXES.md`));
+                console.log(chalk.cyan(`   Give this file to Claude Code or Cursor to fix the issues\n`));
+            }
+        }
+        // Save full report if requested
+        if (options.output) {
+            const outputPath = resolve(options.output);
+            if (options.format === 'markdown') {
+                writeFileSync(outputPath, generateMarkdown(report));
+            }
+            else if (options.format === 'sarif') {
+                writeFileSync(outputPath, JSON.stringify(generateSarif(report), null, 2));
+            }
+            else {
+                writeFileSync(outputPath, JSON.stringify(report, null, 2));
+            }
+            if (!quiet) {
+                console.log(chalk.gray(`   Report saved: ${outputPath}`));
+            }
+        }
+        // JSON only mode
+        if (options.json) {
+            console.log(JSON.stringify(report, null, 2));
+        }
+        // CI mode - exit with error if issues found
+        if (options.ci && (critical > 0 || high > 0)) {
+            process.exit(1);
+        }
+    }
+    catch (error) {
+        console.error(chalk.red('\n❌ Scan failed:'), error);
+        process.exit(1);
+    }
+}
+// Simple markdown report
+function generateMarkdown(report) {
+    let md = `# CodeGuard Security Report\n\n`;
+    md += `**Scanned:** ${report.target.path}\n`;
+    md += `**Date:** ${new Date(report.timestamp).toLocaleString()}\n\n`;
+    md += `## Summary\n\n`;
+    md += `- Critical: ${report.summary.bySeverity['critical'] || 0}\n`;
+    md += `- High: ${report.summary.bySeverity['high'] || 0}\n`;
+    md += `- Medium: ${report.summary.bySeverity['medium'] || 0}\n`;
+    md += `- Low: ${report.summary.bySeverity['low'] || 0}\n\n`;
+    if (report.findings.length > 0) {
+        md += `## Findings\n\n`;
+        for (const f of report.findings) {
+            md += `### ${f.severity.toUpperCase()}: ${f.title}\n`;
+            md += `- File: \`${f.file}:${f.line || ''}\`\n`;
+            md += `- ${f.description}\n\n`;
+        }
+    }
+    return md;
+}
+// SARIF format for GitHub
+function generateSarif(report) {
+    return {
+        $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
+        version: "2.1.0",
+        runs: [{
+                tool: {
+                    driver: {
+                        name: "CodeGuard",
+                        version: "1.0.0",
+                        informationUri: "https://github.com/darrenjcoxon/codeguard"
+                    }
+                },
+                results: report.findings.map(f => ({
+                    ruleId: f.ruleId || f.title,
+                    level: f.severity === 'critical' || f.severity === 'high' ? 'error' : 'warning',
+                    message: { text: f.description },
+                    locations: [{
+                            physicalLocation: {
+                                artifactLocation: { uri: f.file },
+                                region: { startLine: f.line || 1 }
+                            }
+                        }]
+                }))
+            }]
+    };
+}
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC;;;;;;;GAOZ,CAAC;KACD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,+CAA+C;AAC/C,OAAO;KACJ,QAAQ,CAAC,QAAQ,EAAE,2CAA2C,EAAE,GAAG,CAAC;KACpE,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;KAC9D,MAAM,CAAC,uBAAuB,EAAE,sCAAsC,EAAE,MAAM,CAAC;KAC/E,MAAM,CAAC,YAAY,EAAE,0BAA0B,CAAC;KAChD,MAAM,CAAC,QAAQ,EAAE,gCAAgC,CAAC;KAClD,MAAM,CAAC,MAAM,EAAE,uCAAuC,CAAC;KACvD,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC;KACvC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEL,6CAA6C;AAC7C,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAEjE,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,aAAa,EAAE,CAAC;IAErD,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,WAAW;YACxB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;YAC5B,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEL,gBAAgB;AAChB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,+BAA+B,CAAC;KAC5C,MAAM,CAAC,GAAG,EAAE;IACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAEvD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,iBAAiB;AACjB,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,OAAY;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAE5C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,UAAU,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC;QACpC,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,CAAC,KAAK;KAChB,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAE7D,UAAU;QACV,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAE1C,IAAI,QAAQ,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC,CAAC;YACxE,IAAI,IAAI,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC,CAAC;YACnE,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC,CAAC;YAE1D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAClD,MAAM,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;YAClD,cAAc,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE;gBAChD,eAAe,EAAE,IAAI;gBACrB,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAE3C,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAClC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;YACtD,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACtC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;YAED,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,iBAAiB;QACjB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,4CAA4C;QAC5C,IAAI,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IAEH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,KAAK,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,yBAAyB;AACzB,SAAS,gBAAgB,CAAC,MAAkB;IAC1C,IAAI,EAAE,GAAG,iCAAiC,CAAC;IAC3C,EAAE,IAAI,gBAAgB,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAC7C,EAAE,IAAI,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC;IAErE,EAAE,IAAI,gBAAgB,CAAC;IACvB,EAAE,IAAI,eAAe,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;IACpE,EAAE,IAAI,WAAW,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5D,EAAE,IAAI,aAAa,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;IAChE,EAAE,IAAI,UAAU,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;IAE5D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,EAAE,IAAI,iBAAiB,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,EAAE,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC;YACtD,EAAE,IAAI,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,MAAM,CAAC;YAChD,EAAE,IAAI,KAAK,CAAC,CAAC,WAAW,MAAM,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,0BAA0B;AAC1B,SAAS,aAAa,CAAC,MAAkB;IACvC,OAAO;QACL,OAAO,EAAE,gGAAgG;QACzG,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,CAAC;gBACL,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,OAAO;wBAChB,cAAc,EAAE,2CAA2C;qBAC5D;iBACF;gBACD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACjC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK;oBAC3B,KAAK,EAAE,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBAC/E,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;oBAChC,SAAS,EAAE,CAAC;4BACV,gBAAgB,EAAE;gCAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE;gCACjC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE;6BACnC;yBACF,CAAC;iBACH,CAAC,CAAC;aACJ,CAAC;KACH,CAAC;AACJ,CAAC;AAED,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * CodeGuard - AI-Powered Code Security & Quality Scanner
+ *
+ * A pluggable orchestrator that combines multiple security and quality
+ * scanning tools with AI-powered analysis.
+ *
+ * @example
+ * ```typescript
+ * import { Orchestrator, ScanTarget } from 'codeguard';
+ *
+ * const orchestrator = new Orchestrator();
+ * const target: ScanTarget = { path: './my-project' };
+ * const report = await orchestrator.scan(target);
+ * ```
+ */
+export { Orchestrator, type OrchestratorConfig } from './orchestrator.js';
+export { AISummaryGenerator, type AISummaryConfig } from './ai-summary.js';
+export { AgentReportGenerator, type AgentReportOptions } from './agent-report.js';
+export { type Finding, type ScanTarget, type ScanReport, type ScannerResult, type ScannerConfig, type Scanner, type Reporter, type QualityGate, type SeverityLevel, type FindingCategory, DEFAULT_QUALITY_GATE, generateFingerprint, severityWeight } from './types.js';
+export { SemgrepScanner, GitleaksScanner, NpmAuditScanner, ESLintScanner, ComplexityScanner, getAllScanners, getScannersByCategory, SCANNER_COVERAGE } from './scanners/index.js';
+import { Orchestrator } from './orchestrator.js';
+export default Orchestrator;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAGlF,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,cAAc,EACd,eAAe,EACf,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,eAAe,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,27 @@
+/**
+ * CodeGuard - AI-Powered Code Security & Quality Scanner
+ *
+ * A pluggable orchestrator that combines multiple security and quality
+ * scanning tools with AI-powered analysis.
+ *
+ * @example
+ * ```typescript
+ * import { Orchestrator, ScanTarget } from 'codeguard';
+ *
+ * const orchestrator = new Orchestrator();
+ * const target: ScanTarget = { path: './my-project' };
+ * const report = await orchestrator.scan(target);
+ * ```
+ */
+// Core exports
+export { Orchestrator } from './orchestrator.js';
+export { AISummaryGenerator } from './ai-summary.js';
+export { AgentReportGenerator } from './agent-report.js';
+// Types
+export { DEFAULT_QUALITY_GATE, generateFingerprint, severityWeight } from './types.js';
+// Scanners
+export { SemgrepScanner, GitleaksScanner, NpmAuditScanner, ESLintScanner, ComplexityScanner, getAllScanners, getScannersByCategory, SCANNER_COVERAGE } from './scanners/index.js';
+// Default export for convenience
+import { Orchestrator } from './orchestrator.js';
+export default Orchestrator;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAe;AACf,OAAO,EAAE,YAAY,EAA2B,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAwB,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAA2B,MAAM,mBAAmB,CAAC;AAElF,QAAQ;AACR,OAAO,EAWL,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,WAAW;AACX,OAAO,EACL,cAAc,EACd,eAAe,EACf,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAE7B,iCAAiC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,eAAe,YAAY,CAAC"}

package/dist/orchestrator.d.ts

@@ -0,0 +1,63 @@
+/**
+ * CodeGuard Orchestrator
+ *
+ * Coordinates multiple scanners, aggregates results, and generates reports
+ */
+import { Scanner, ScanTarget, ScanReport, QualityGate } from './types.js';
+export interface OrchestratorConfig {
+    scanners?: Scanner[];
+    qualityGate?: QualityGate;
+    parallel?: boolean;
+    verbose?: boolean;
+    categories?: string[];
+    maxFindings?: number;
+}
+export declare class Orchestrator {
+    private scanners;
+    private qualityGate;
+    private parallel;
+    private verbose;
+    constructor(config?: OrchestratorConfig);
+    /**
+     * Check which scanners are available (for CLI check command)
+     */
+    checkScanners(): Promise<Record<string, boolean>>;
+    /**
+     * Run all scanners against the target
+     */
+    scan(target: ScanTarget): Promise<ScanReport>;
+    /**
+     * Check which scanners are available
+     */
+    private checkScannerAvailability;
+    /**
+     * Run scanners in parallel
+     */
+    private runScannersParallel;
+    /**
+     * Run scanners sequentially
+     */
+    private runScannersSequential;
+    /**
+     * Aggregate findings from all scanners and deduplicate
+     */
+    private aggregateFindings;
+    /**
+     * Evaluate quality gate rules
+     */
+    private evaluateQualityGate;
+    /**
+     * Create summary statistics
+     */
+    private createSummary;
+    /**
+     * Print summary to console
+     */
+    private printSummary;
+    /**
+     * Create an empty report (when no scanners available)
+     */
+    private createEmptyReport;
+}
+export default Orchestrator;
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EACL,OAAO,EACP,UAAU,EAEV,UAAU,EAEV,WAAW,EAIZ,MAAM,YAAY,CAAC;AAGpB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAY;IAC5B,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,QAAQ,CAAU;IAC1B,OAAO,CAAC,OAAO,CAAU;gBAEb,MAAM,GAAE,kBAAuB;IAc3C;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAQvD;;OAEG;IACG,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IA8CnD;;OAEG;YACW,wBAAwB;IA0BtC;;OAEG;YACW,mBAAmB;IAyCjC;;OAEG;YACW,qBAAqB;IAwCnC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA2BzB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAsC3B;;OAEG;IACH,OAAO,CAAC,aAAa;IAwBrB;;OAEG;IACH,OAAO,CAAC,YAAY;IAwDpB;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAqB1B;AAED,eAAe,YAAY,CAAC"}