@delegance/claude-autopilot 1.7.0 → 1.7.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@delegance/claude-autopilot",
-  "version": "1.7.0",
+  "version": "1.7.2",
   "type": "module",
   "description": "Claude Code automation pipeline: spec → plan → implement → validate → PR",
   "keywords": [

package/src/cli/run.ts

@@ -96,17 +96,24 @@ export async function runCommand(options: RunCommandOptions = {}): Promise<numbe
     return 1;
   }
 
-  // Fill in missing config fields from auto-detection
+  // Fill in missing config fields from auto-detection (track what was auto-detected for logging)
+  const autoDetected: string[] = [];
+
   if (!config.stack) {
     const detected = detectStack(cwd);
-    if (detected) config = { ...config, stack: detected };
+    if (detected) { config = { ...config, stack: detected }; autoDetected.push(`stack: ${detected}`); }
   }
   if (!config.protectedPaths || config.protectedPaths.length === 0) {
     const detected = detectProtectedPaths(cwd);
-    if (detected.length > 0) config = { ...config, protectedPaths: detected };
+    if (detected.length > 0) {
+      config = { ...config, protectedPaths: detected };
+      autoDetected.push(`protected: ${detected.slice(0, 3).join(', ')}${detected.length > 3 ? ` +${detected.length - 3} more` : ''}`);
+    }
   }
   if (config.testCommand === undefined) {
-    config = { ...config, testCommand: detectProject(cwd).testCommand };
+    const detected = detectProject(cwd).testCommand;
+    config = { ...config, testCommand: detected };
+    autoDetected.push(`test: ${detected}`);
   }
   const gitCtx = detectGitContext(cwd);
 
@@ -120,6 +127,12 @@ export async function runCommand(options: RunCommandOptions = {}): Promise<numbe
 
   console.log(`\n${fmt('bold', '[autopilot run]')} ${fmt('dim', configPath)}`);
   console.log(`${fmt('dim', `  ${touchedFiles.length} changed file(s):`)} ${touchedFiles.slice(0, 5).join(', ')}${touchedFiles.length > 5 ? ` … +${touchedFiles.length - 5} more` : ''}`);
+  if (gitCtx.summary) {
+    console.log(fmt('dim', `  ${gitCtx.summary}`));
+  }
+  if (autoDetected.length > 0) {
+    console.log(fmt('dim', `  auto-detected: ${autoDetected.join(' | ')}`));
+  }
 
   if (options.dryRun) {
     console.log(fmt('yellow', '\n[run] Dry run — skipping pipeline execution.\n'));

package/src/core/static-rules/rules/hardcoded-secrets.ts

@@ -4,7 +4,7 @@ import type { Finding } from '../../findings/types.ts';
 
 const SECRET_PATTERNS: { regex: RegExp; label: string }[] = [
   { regex: /\bAKIA[0-9A-Z]{16}\b/, label: 'AWS Access Key ID' },
-  { regex: /(?:password|passwd|pwd)\s*[:=]\s*['"][^'"]{6,}['"]/, label: 'Hardcoded password' },
+  { regex: /(?:^|[^a-z])(?:password|passwd|pwd)\s*[:=]\s*['"](?!\/)[^'"]{6,}['"]/, label: 'Hardcoded password' },
   { regex: /(?:api_key|apikey|api-key)\s*[:=]\s*['"][^'"]{8,}['"]/, label: 'Hardcoded API key' },
   { regex: /(?:secret|secret_key|secretkey)\s*[:=]\s*['"][^'"]{8,}['"]/, label: 'Hardcoded secret' },
   { regex: /(?:access_token|accesstoken)\s*[:=]\s*['"][^'"]{8,}['"]/, label: 'Hardcoded access token' },