@guardbee/mcp-secret-scanner 0.1.0

package/dist/__tests__/scanner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scanner.test.d.ts.map

package/dist/__tests__/scanner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/scanner.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/scanner.test.js

@@ -0,0 +1,78 @@
+import { describe, it, expect } from "vitest";
+import { scanText } from "../scanner.js";
+describe("scanText", () => {
+    it("detects AWS access key", () => {
+        const findings = scanText("export AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE");
+        expect(findings.some((f) => f.patternId === "aws_access_key")).toBe(true);
+    });
+    it("detects GitHub PAT", () => {
+        const findings = scanText("token: ghp_abcdefghijklmnopqrstuvwxyz0123456789");
+        expect(findings.some((f) => f.patternId === "github_pat")).toBe(true);
+    });
+    it("detects Stripe secret key", () => {
+        // split to avoid GitHub push protection on test fixtures
+        const key = ["sk", "_live_", "abc123xyz456def789ghi012"].join("");
+        const findings = scanText(`const stripe = require("stripe")("${key}")`);
+        expect(findings.some((f) => f.patternId === "stripe_secret")).toBe(true);
+    });
+    it("detects OpenAI API key", () => {
+        const key = ["sk-abcdefghijklmnopqrst", "T3BlbkFJ", "abcdefghijklmnopqrst"].join("");
+        const findings = scanText(`OPENAI_API_KEY=${key}`);
+        expect(findings.some((f) => f.patternId === "openai_key")).toBe(true);
+    });
+    it("detects Anthropic API key", () => {
+        const key = ["sk-ant-", "api03-abcdefghijklmnopqrstuvwxyz0123456789ABCD"].join("");
+        const findings = scanText(`key = '${key}'`);
+        expect(findings.some((f) => f.patternId === "anthropic_key")).toBe(true);
+    });
+    it("detects Slack token", () => {
+        const token = ["xoxb-", "123456789012-123456789012-abcdefghijklmnopqrstuvwx"].join("");
+        const findings = scanText(`SLACK_TOKEN=${token}`);
+        expect(findings.some((f) => f.patternId === "slack_token")).toBe(true);
+    });
+    it("detects PostgreSQL URL with credentials", () => {
+        const findings = scanText("DATABASE_URL=postgresql://admin:s3cr3tpass@prod.db.example.com:5432/mydb");
+        expect(findings.some((f) => f.patternId === "db_url_postgres")).toBe(true);
+    });
+    it("does not flag localhost postgres URL", () => {
+        const findings = scanText("DATABASE_URL=postgresql://user:pass@localhost:5432/mydb");
+        expect(findings.filter((f) => f.patternId === "db_url_postgres")).toHaveLength(0);
+    });
+    it("detects RSA private key header", () => {
+        const findings = scanText("-----BEGIN RSA PRIVATE KEY-----\nMIIEowIBAAK...");
+        expect(findings.some((f) => f.patternId === "private_key_rsa")).toBe(true);
+    });
+    it("detects JWT token", () => {
+        const jwt = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c";
+        const findings = scanText(`Authorization: Bearer ${jwt}`);
+        expect(findings.some((f) => f.patternId === "jwt")).toBe(true);
+    });
+    it("detects hardcoded password assignment", () => {
+        const findings = scanText('const password = "MyS3cr3tP@ssword!"');
+        expect(findings.some((f) => f.patternId === "generic_secret_assignment")).toBe(true);
+    });
+    it("ignores process.env references", () => {
+        const findings = scanText("const apiKey = process.env.API_KEY");
+        expect(findings.filter((f) => f.patternId === "generic_secret_assignment")).toHaveLength(0);
+    });
+    it("ignores placeholder values", () => {
+        const findings = scanText('password = "your-password-here"');
+        expect(findings.filter((f) => f.patternId === "generic_secret_assignment")).toHaveLength(0);
+    });
+    it("redacts the match value", () => {
+        const findings = scanText("token: ghp_abcdefghijklmnopqrstuvwxyz0123456789");
+        const f = findings.find((f) => f.patternId === "github_pat");
+        expect(f?.match).not.toContain("abcdefghijklmnopqrstuvwxyz");
+        expect(f?.match).toContain("*");
+    });
+    it("returns correct line number", () => {
+        const text = "line1\nline2\ntoken: ghp_abcdefghijklmnopqrstuvwxyz0123456789\nline4";
+        const findings = scanText(text);
+        const f = findings.find((f) => f.patternId === "github_pat");
+        expect(f?.line).toBe(3);
+    });
+    it("returns no findings for clean text", () => {
+        expect(scanText("const x = 1; console.log('hello world');")).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=scanner.test.js.map

package/dist/__tests__/scanner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.test.js","sourceRoot":"","sources":["../../src/__tests__/scanner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QAC3E,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,iDAAiD,CAAC,CAAC;QAC7E,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,yDAAyD;QACzD,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,qCAAqC,GAAG,IAAI,CAAC,CAAC;QACxE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,GAAG,GAAG,CAAC,yBAAyB,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,QAAQ,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,gDAAgD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,oDAAoD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,0EAA0E,CAAC,CAAC;QACtG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,yDAAyD,CAAC,CAAC;QACrF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,iDAAiD,CAAC,CAAC;QAC7E,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,GAAG,GAAG,8GAA8G,CAAC;QAC3H,MAAM,QAAQ,GAAG,QAAQ,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QAClE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,oCAAoC,CAAC,CAAC;QAChE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,2BAA2B,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,2BAA2B,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,iDAAiD,CAAC,CAAC;QAC7E,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,IAAI,GAAG,sEAAsE,CAAC;QACpF,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,6 @@
+import { startServer } from "./server.js";
+startServer().catch((err) => {
+    process.stderr.write(`[guardbee-secret-scanner] Fatal error: ${err instanceof Error ? err.message : String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC/F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { scanText, scanFile, scanDirectory } from "./scanner.js";
+export { SECRET_PATTERNS } from "./patterns.js";
+export type { Finding, ScanResult } from "./scanner.js";
+export type { SecretPattern } from "./patterns.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACxD,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { scanText, scanFile, scanDirectory } from "./scanner.js";
+export { SECRET_PATTERNS } from "./patterns.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/dist/patterns.d.ts

@@ -0,0 +1,9 @@
+export interface SecretPattern {
+    id: string;
+    name: string;
+    pattern: RegExp;
+    severity: "critical" | "high" | "medium" | "low";
+    allowlist?: RegExp[];
+}
+export declare const SECRET_PATTERNS: SecretPattern[];
+//# sourceMappingURL=patterns.d.ts.map

package/dist/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,eAAO,MAAM,eAAe,EAAE,aAAa,EA6P1C,CAAC"}

package/dist/patterns.js

@@ -0,0 +1,245 @@
+export const SECRET_PATTERNS = [
+    // ── Cloud providers ────────────────────────────────────────────────────────
+    {
+        id: "aws_access_key",
+        name: "AWS Access Key ID",
+        pattern: /\b(AKIA|ABIA|ACCA|AIPA|AKIA|ANPA|ANVA|APKA)[0-9A-Z]{16}\b/g,
+        severity: "critical",
+    },
+    {
+        id: "aws_secret_key",
+        name: "AWS Secret Access Key",
+        pattern: /(?<![A-Za-z0-9/+])([A-Za-z0-9/+]{40})(?![A-Za-z0-9/+])/g,
+        severity: "critical",
+        allowlist: [/^[A-Za-z0-9+/]{40}={0,2}$/], // base64 payloads
+    },
+    {
+        id: "google_api_key",
+        name: "Google API Key",
+        pattern: /AIza[0-9A-Za-z\-_]{35}/g,
+        severity: "critical",
+    },
+    {
+        id: "google_oauth",
+        name: "Google OAuth Client Secret",
+        pattern: /GOCSPX-[0-9A-Za-z\-_]{28}/g,
+        severity: "critical",
+    },
+    // ── Version control & CI ───────────────────────────────────────────────────
+    {
+        id: "github_pat",
+        name: "GitHub Personal Access Token",
+        pattern: /ghp_[0-9A-Za-z]{36}/g,
+        severity: "critical",
+    },
+    {
+        id: "github_oauth",
+        name: "GitHub OAuth Token",
+        pattern: /gho_[0-9A-Za-z]{36}/g,
+        severity: "critical",
+    },
+    {
+        id: "github_app_token",
+        name: "GitHub App Token",
+        pattern: /ghs_[0-9A-Za-z]{36}/g,
+        severity: "critical",
+    },
+    {
+        id: "github_refresh_token",
+        name: "GitHub Refresh Token",
+        pattern: /ghr_[0-9A-Za-z]{36}/g,
+        severity: "high",
+    },
+    {
+        id: "gitlab_pat",
+        name: "GitLab Personal Access Token",
+        pattern: /glpat-[0-9A-Za-z\-_]{20}/g,
+        severity: "critical",
+    },
+    // ── Payment ────────────────────────────────────────────────────────────────
+    {
+        id: "stripe_secret",
+        name: "Stripe Secret Key",
+        pattern: /sk_(live|test)_[0-9A-Za-z]{24,}/g,
+        severity: "critical",
+    },
+    {
+        id: "stripe_publishable",
+        name: "Stripe Publishable Key",
+        pattern: /pk_(live|test)_[0-9A-Za-z]{24,}/g,
+        severity: "medium",
+    },
+    {
+        id: "stripe_restricted",
+        name: "Stripe Restricted Key",
+        pattern: /rk_(live|test)_[0-9A-Za-z]{24,}/g,
+        severity: "critical",
+    },
+    // ── AI / ML ────────────────────────────────────────────────────────────────
+    {
+        id: "openai_key",
+        name: "OpenAI API Key",
+        pattern: /sk-[A-Za-z0-9]{20}T3BlbkFJ[A-Za-z0-9]{20}/g,
+        severity: "critical",
+    },
+    {
+        id: "openai_key_v2",
+        name: "OpenAI API Key (v2)",
+        pattern: /sk-proj-[A-Za-z0-9\-_]{50,}/g,
+        severity: "critical",
+    },
+    {
+        id: "anthropic_key",
+        name: "Anthropic API Key",
+        pattern: /sk-ant-[A-Za-z0-9\-_]{32,}/g,
+        severity: "critical",
+    },
+    {
+        id: "huggingface_token",
+        name: "HuggingFace Token",
+        pattern: /hf_[A-Za-z0-9]{34}/g,
+        severity: "high",
+    },
+    // ── Communication ──────────────────────────────────────────────────────────
+    {
+        id: "slack_token",
+        name: "Slack Token",
+        pattern: /xox[baprs]-([0-9a-zA-Z]{10,48})/g,
+        severity: "critical",
+    },
+    {
+        id: "slack_webhook",
+        name: "Slack Webhook URL",
+        pattern: /https:\/\/hooks\.slack\.com\/services\/T[0-9A-Z]{8}\/B[0-9A-Z]{8}\/[0-9a-zA-Z]{24}/g,
+        severity: "high",
+    },
+    {
+        id: "twilio_account_sid",
+        name: "Twilio Account SID",
+        pattern: /AC[0-9a-f]{32}/g,
+        severity: "high",
+    },
+    {
+        id: "twilio_auth_token",
+        name: "Twilio Auth Token",
+        pattern: /(?i:twilio).{0,20}[0-9a-f]{32}/g,
+        severity: "critical",
+    },
+    {
+        id: "sendgrid_key",
+        name: "SendGrid API Key",
+        pattern: /SG\.[0-9A-Za-z\-_]{22}\.[0-9A-Za-z\-_]{43}/g,
+        severity: "critical",
+    },
+    // ── Database URLs ──────────────────────────────────────────────────────────
+    {
+        id: "db_url_postgres",
+        name: "PostgreSQL Connection String with credentials",
+        pattern: /postgres(?:ql)?:\/\/[^:]+:[^@\s]+@[^\s"']+/gi,
+        severity: "critical",
+        allowlist: [/localhost/, /127\.0\.0\.1/, /\$\{/, /<[A-Z_]+>/],
+    },
+    {
+        id: "db_url_mysql",
+        name: "MySQL Connection String with credentials",
+        pattern: /mysql:\/\/[^:]+:[^@\s]+@[^\s"']+/gi,
+        severity: "critical",
+        allowlist: [/localhost/, /127\.0\.0\.1/, /\$\{/, /<[A-Z_]+>/],
+    },
+    {
+        id: "db_url_mongodb",
+        name: "MongoDB Connection String with credentials",
+        pattern: /mongodb(?:\+srv)?:\/\/[^:]+:[^@\s]+@[^\s"']+/gi,
+        severity: "critical",
+        allowlist: [/localhost/, /127\.0\.0\.1/, /\$\{/, /<[A-Z_]+>/],
+    },
+    {
+        id: "db_url_redis",
+        name: "Redis Connection String with credentials",
+        pattern: /redis:\/\/[^:]+:[^@\s]+@[^\s"']+/gi,
+        severity: "high",
+        allowlist: [/localhost/, /127\.0\.0\.1/, /\$\{/],
+    },
+    // ── Private keys ───────────────────────────────────────────────────────────
+    {
+        id: "private_key_rsa",
+        name: "RSA Private Key",
+        pattern: /-----BEGIN RSA PRIVATE KEY-----/g,
+        severity: "critical",
+    },
+    {
+        id: "private_key_ec",
+        name: "EC Private Key",
+        pattern: /-----BEGIN EC PRIVATE KEY-----/g,
+        severity: "critical",
+    },
+    {
+        id: "private_key_openssh",
+        name: "OpenSSH Private Key",
+        pattern: /-----BEGIN OPENSSH PRIVATE KEY-----/g,
+        severity: "critical",
+    },
+    {
+        id: "private_key_generic",
+        name: "Generic Private Key",
+        pattern: /-----BEGIN PRIVATE KEY-----/g,
+        severity: "critical",
+    },
+    {
+        id: "pgp_private_key",
+        name: "PGP Private Key Block",
+        pattern: /-----BEGIN PGP PRIVATE KEY BLOCK-----/g,
+        severity: "critical",
+    },
+    // ── Auth tokens & JWTs ─────────────────────────────────────────────────────
+    {
+        id: "jwt",
+        name: "JSON Web Token",
+        pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g,
+        severity: "high",
+    },
+    {
+        id: "bearer_token",
+        name: "Bearer Token in code",
+        pattern: /['"](Bearer\s+[A-Za-z0-9\-._~+/]+=*)['"]/gi,
+        severity: "high",
+    },
+    // ── DevOps & infra ─────────────────────────────────────────────────────────
+    {
+        id: "npm_token",
+        name: "npm Access Token",
+        pattern: /npm_[A-Za-z0-9]{36}/g,
+        severity: "critical",
+    },
+    {
+        id: "docker_pat",
+        name: "Docker Hub Personal Access Token",
+        pattern: /dckr_pat_[A-Za-z0-9\-_]{27}/g,
+        severity: "high",
+    },
+    {
+        id: "vercel_token",
+        name: "Vercel API Token",
+        pattern: /vercel(?:[._-])?(?:token|api)['":\s=]+([A-Za-z0-9]{24})/gi,
+        severity: "high",
+    },
+    // ── Generic patterns ───────────────────────────────────────────────────────
+    {
+        id: "generic_secret_assignment",
+        name: "Hardcoded secret assignment",
+        pattern: /(?:password|passwd|secret|api[_-]?key|auth[_-]?token|access[_-]?token|private[_-]?key)\s*[:=]\s*['"][^'"]{8,}['"]/gi,
+        severity: "medium",
+        allowlist: [
+            /process\.env/,
+            /\$\{/,
+            /os\.environ/,
+            /getenv/,
+            /placeholder/i,
+            /example/i,
+            /your[-_]?/i,
+            /<[A-Z_]+>/,
+            /\*{3,}/,
+        ],
+    },
+];
+//# sourceMappingURL=patterns.js.map

package/dist/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,8EAA8E;IAC9E;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4DAA4D;QACrE,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,yDAAyD;QAClE,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,CAAC,2BAA2B,CAAC,EAAE,kBAAkB;KAC7D;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,UAAU;KACrB;IAED,8EAA8E;IAC9E;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,UAAU;KACrB;IAED,8EAA8E;IAC9E;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,UAAU;KACrB;IAED,8EAA8E;IAC9E;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,MAAM;KACjB;IAED,8EAA8E;IAC9E;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,qFAAqF;QAC9F,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,iBAAiB;QAC1B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,6CAA6C;QACtD,QAAQ,EAAE,UAAU;KACrB;IAED,8EAA8E;IAC9E;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,+CAA+C;QACrD,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC;KAC9D;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,0CAA0C;QAChD,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC;KAC9D;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,4CAA4C;QAClD,OAAO,EAAE,gDAAgD;QACzD,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC;KAC9D;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,0CAA0C;QAChD,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC;KACjD;IAED,8EAA8E;IAC9E;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,UAAU;KACrB;IAED,8EAA8E;IAC9E;QACE,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,wDAAwD;QACjE,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,MAAM;KACjB;IAED,8EAA8E;IAC9E;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,2DAA2D;QACpE,QAAQ,EAAE,MAAM;KACjB;IAED,8EAA8E;IAC9E;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,6BAA6B;QACnC,OAAO,EACL,qHAAqH;QACvH,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE;YACT,cAAc;YACd,MAAM;YACN,aAAa;YACb,QAAQ;YACR,cAAc;YACd,UAAU;YACV,YAAY;YACZ,WAAW;YACX,QAAQ;SACT;KACF;CACF,CAAC"}

package/dist/scanner.d.ts

@@ -0,0 +1,29 @@
+import { type SecretPattern } from "./patterns.js";
+export interface Finding {
+    patternId: string;
+    patternName: string;
+    severity: SecretPattern["severity"];
+    file?: string;
+    line: number;
+    column: number;
+    match: string;
+    context: string;
+}
+export interface ScanResult {
+    scannedFiles: number;
+    skippedFiles: number;
+    totalFindings: number;
+    findings: Finding[];
+    durationMs: number;
+}
+export declare function scanText(text: string, filePath?: string): Finding[];
+export declare function scanFile(filePath: string): {
+    findings: Finding[];
+    skipped: boolean;
+};
+export declare function scanDirectory(dirPath: string, options?: {
+    maxFiles?: number;
+    include?: string[];
+    exclude?: string[];
+}): ScanResult;
+//# sourceMappingURL=scanner.d.ts.map

package/dist/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAEpE,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AA6BD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,CAkCnE;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAqBpF;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAC1E,UAAU,CAuDZ"}

package/dist/scanner.js

@@ -0,0 +1,136 @@
+import { readFileSync, statSync, readdirSync } from "fs";
+import { join, relative, extname } from "path";
+import { SECRET_PATTERNS } from "./patterns.js";
+const SKIP_EXTENSIONS = new Set([
+    ".png", ".jpg", ".jpeg", ".gif", ".svg", ".ico", ".webp", ".bmp",
+    ".pdf", ".zip", ".tar", ".gz", ".bz2", ".rar", ".7z",
+    ".exe", ".dll", ".so", ".dylib", ".bin", ".wasm",
+    ".mp3", ".mp4", ".avi", ".mov", ".wav",
+    ".ttf", ".woff", ".woff2", ".eot",
+    ".lock", // package-lock, yarn.lock — too noisy
+]);
+const SKIP_DIRS = new Set([
+    "node_modules", ".git", ".svn", "dist", "build", ".next",
+    "__pycache__", ".mypy_cache", ".pytest_cache", "venv", ".venv",
+    "coverage", ".nyc_output",
+]);
+const MAX_FILE_SIZE = 1 * 1024 * 1024; // 1 MB
+function redact(match) {
+    if (match.length <= 8)
+        return "***";
+    return match.slice(0, 4) + "*".repeat(Math.min(match.length - 8, 20)) + match.slice(-4);
+}
+function isAllowlisted(match, pattern) {
+    if (!pattern.allowlist)
+        return false;
+    return pattern.allowlist.some((allow) => allow.test(match));
+}
+export function scanText(text, filePath) {
+    const findings = [];
+    const lines = text.split("\n");
+    for (const sp of SECRET_PATTERNS) {
+        const re = new RegExp(sp.pattern.source, sp.pattern.flags);
+        let m;
+        while ((m = re.exec(text)) !== null) {
+            const matchStr = m[0];
+            if (isAllowlisted(matchStr, sp))
+                continue;
+            // Find line/column
+            const before = text.slice(0, m.index);
+            const line = before.split("\n").length;
+            const lastNl = before.lastIndexOf("\n");
+            const column = m.index - (lastNl === -1 ? 0 : lastNl + 1) + 1;
+            const contextLine = lines[line - 1] ?? "";
+            const redactedContext = contextLine.replace(matchStr, redact(matchStr));
+            findings.push({
+                patternId: sp.id,
+                patternName: sp.name,
+                severity: sp.severity,
+                file: filePath,
+                line,
+                column,
+                match: redact(matchStr),
+                context: redactedContext.trim().slice(0, 200),
+            });
+        }
+    }
+    return findings;
+}
+export function scanFile(filePath) {
+    const ext = extname(filePath).toLowerCase();
+    if (SKIP_EXTENSIONS.has(ext))
+        return { findings: [], skipped: true };
+    let stat;
+    try {
+        stat = statSync(filePath);
+    }
+    catch {
+        return { findings: [], skipped: true };
+    }
+    if (!stat.isFile() || stat.size > MAX_FILE_SIZE)
+        return { findings: [], skipped: true };
+    let content;
+    try {
+        content = readFileSync(filePath, "utf8");
+    }
+    catch {
+        return { findings: [], skipped: true };
+    }
+    return { findings: scanText(content, filePath), skipped: false };
+}
+export function scanDirectory(dirPath, options = {}) {
+    const start = Date.now();
+    const { maxFiles = 5000, include, exclude } = options;
+    const allFindings = [];
+    let scannedFiles = 0;
+    let skippedFiles = 0;
+    function walk(dir) {
+        if (scannedFiles + skippedFiles >= maxFiles)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const fullPath = join(dir, entry.name);
+            if (entry.isDirectory()) {
+                if (SKIP_DIRS.has(entry.name) || entry.name.startsWith("."))
+                    continue;
+                if (exclude?.some((ex) => entry.name === ex || fullPath.includes(ex)))
+                    continue;
+                walk(fullPath);
+            }
+            else if (entry.isFile()) {
+                const relPath = relative(dirPath, fullPath);
+                if (exclude?.some((ex) => relPath.includes(ex))) {
+                    skippedFiles++;
+                    continue;
+                }
+                if (include && !include.some((inc) => relPath.includes(inc))) {
+                    skippedFiles++;
+                    continue;
+                }
+                const { findings, skipped } = scanFile(fullPath);
+                if (skipped) {
+                    skippedFiles++;
+                }
+                else {
+                    scannedFiles++;
+                    allFindings.push(...findings);
+                }
+            }
+        }
+    }
+    walk(dirPath);
+    return {
+        scannedFiles,
+        skippedFiles,
+        totalFindings: allFindings.length,
+        findings: allFindings,
+        durationMs: Date.now() - start,
+    };
+}
+//# sourceMappingURL=scanner.js.map

package/dist/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAsB,MAAM,eAAe,CAAC;AAqBpE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAChE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;IACpD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;IAChD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACtC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;IACjC,OAAO,EAAE,sCAAsC;CAChD,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;IACxD,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO;IAC9D,UAAU,EAAE,aAAa;CAC1B,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAE9C,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,OAAsB;IAC1D,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAiB;IACtD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE/B,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAAE,SAAS;YAE1C,mBAAmB;YACnB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAE9D,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAExE,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,EAAE,CAAC,EAAE;gBAChB,WAAW,EAAE,EAAE,CAAC,IAAI;gBACpB,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,MAAM;gBACN,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACvB,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAErE,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAExF,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,UAAyE,EAAE;IAE3E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACtD,MAAM,WAAW,GAAc,EAAE,CAAC;IAClC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,SAAS,IAAI,CAAC,GAAW;QACvB,IAAI,YAAY,GAAG,YAAY,IAAI,QAAQ;YAAE,OAAO;QAEpD,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACtE,IAAI,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAAE,SAAS;gBAChF,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC5C,IAAI,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBAChD,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC7D,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjD,IAAI,OAAO,EAAE,CAAC;oBACZ,YAAY,EAAE,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,YAAY,EAAE,CAAC;oBACf,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,CAAC;IAEd,OAAO;QACL,YAAY;QACZ,YAAY;QACZ,aAAa,EAAE,WAAW,CAAC,MAAM;QACjC,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,2 @@
+export declare function startServer(): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAgCA,wBAAsB,WAAW,kBA0HhC"}

package/dist/server.js

@@ -0,0 +1,121 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { scanText, scanFile, scanDirectory } from "./scanner.js";
+import { SECRET_PATTERNS } from "./patterns.js";
+function formatFindings(result) {
+    if (result.totalFindings === 0) {
+        return `✅ No secrets found. Scanned ${result.scannedFiles} files in ${result.durationMs}ms.`;
+    }
+    const bySeverity = { critical: 0, high: 0, medium: 0, low: 0 };
+    for (const f of result.findings)
+        bySeverity[f.severity]++;
+    const lines = [
+        `⚠️  Found ${result.totalFindings} potential secret(s) in ${result.scannedFiles} files (${result.durationMs}ms)`,
+        `   Critical: ${bySeverity.critical}  High: ${bySeverity.high}  Medium: ${bySeverity.medium}  Low: ${bySeverity.low}`,
+        "",
+    ];
+    for (const f of result.findings) {
+        const loc = f.file ? `${f.file}:${f.line}:${f.column}` : `line ${f.line}:${f.column}`;
+        lines.push(`[${f.severity.toUpperCase()}] ${f.patternName}`);
+        lines.push(`  Location : ${loc}`);
+        lines.push(`  Match    : ${f.match}`);
+        lines.push(`  Context  : ${f.context}`);
+        lines.push("");
+    }
+    return lines.join("\n");
+}
+export async function startServer() {
+    const server = new McpServer({
+        name: "guardbee-secret-scanner",
+        version: "0.1.0",
+    });
+    server.tool("scan_text", "Scan a text string or code snippet for exposed secrets and API keys", {
+        content: z.string().describe("The text content to scan"),
+        label: z.string().optional().describe("Optional label shown in findings (e.g. filename)"),
+    }, async ({ content, label }) => {
+        const findings = scanText(content, label);
+        if (findings.length === 0) {
+            return {
+                content: [{ type: "text", text: "✅ No secrets found in the provided text." }],
+            };
+        }
+        const bySeverity = { critical: 0, high: 0, medium: 0, low: 0 };
+        for (const f of findings)
+            bySeverity[f.severity]++;
+        const lines = [
+            `⚠️  Found ${findings.length} potential secret(s)`,
+            `   Critical: ${bySeverity.critical}  High: ${bySeverity.high}  Medium: ${bySeverity.medium}  Low: ${bySeverity.low}`,
+            "",
+        ];
+        for (const f of findings) {
+            const loc = label ? `${label}:${f.line}:${f.column}` : `line ${f.line}:${f.column}`;
+            lines.push(`[${f.severity.toUpperCase()}] ${f.patternName}`);
+            lines.push(`  Location : ${loc}`);
+            lines.push(`  Match    : ${f.match}`);
+            lines.push(`  Context  : ${f.context}`);
+            lines.push("");
+        }
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+    });
+    server.tool("scan_file", "Scan a single file for exposed secrets and API keys", {
+        path: z.string().describe("Absolute or relative path to the file to scan"),
+    }, async ({ path: filePath }) => {
+        const { findings, skipped } = scanFile(filePath);
+        if (skipped) {
+            return {
+                content: [{ type: "text", text: `⏭️  File skipped (binary, too large, or unreadable): ${filePath}` }],
+            };
+        }
+        if (findings.length === 0) {
+            return {
+                content: [{ type: "text", text: `✅ No secrets found in ${filePath}` }],
+            };
+        }
+        const result = {
+            scannedFiles: 1,
+            skippedFiles: 0,
+            totalFindings: findings.length,
+            findings,
+            durationMs: 0,
+        };
+        return { content: [{ type: "text", text: formatFindings(result) }] };
+    });
+    server.tool("scan_directory", "Recursively scan a directory for exposed secrets and API keys. Automatically skips node_modules, .git, dist, and binary files.", {
+        path: z.string().describe("Absolute or relative path to the directory to scan"),
+        maxFiles: z.number().optional().describe("Maximum number of files to scan (default: 5000)"),
+        include: z
+            .array(z.string())
+            .optional()
+            .describe("Only scan files whose path contains one of these strings (e.g. [\".env\", \".ts\"])"),
+        exclude: z
+            .array(z.string())
+            .optional()
+            .describe("Skip files/dirs whose path contains one of these strings"),
+    }, async ({ path: dirPath, maxFiles, include, exclude }) => {
+        const result = scanDirectory(dirPath, { maxFiles, include, exclude });
+        return { content: [{ type: "text", text: formatFindings(result) }] };
+    });
+    server.tool("list_patterns", "List all secret patterns that the scanner can detect", {}, async () => {
+        const lines = ["Supported secret patterns:\n"];
+        const bySeverity = new Map();
+        for (const p of SECRET_PATTERNS) {
+            const list = bySeverity.get(p.severity) ?? [];
+            list.push(p);
+            bySeverity.set(p.severity, list);
+        }
+        for (const sev of ["critical", "high", "medium", "low"]) {
+            const patterns = bySeverity.get(sev) ?? [];
+            if (patterns.length === 0)
+                continue;
+            lines.push(`[${sev.toUpperCase()}]`);
+            for (const p of patterns)
+                lines.push(`  • ${p.name} (${p.id})`);
+            lines.push("");
+        }
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,SAAS,cAAc,CAAC,MAAwC;IAC9D,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,+BAA+B,MAAM,CAAC,YAAY,aAAa,MAAM,CAAC,UAAU,KAAK,CAAC;IAC/F,CAAC;IAED,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;QAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IAE1D,MAAM,KAAK,GAAa;QACtB,aAAa,MAAM,CAAC,aAAa,2BAA2B,MAAM,CAAC,YAAY,WAAW,MAAM,CAAC,UAAU,KAAK;QAChH,gBAAgB,UAAU,CAAC,QAAQ,WAAW,UAAU,CAAC,IAAI,aAAa,UAAU,CAAC,MAAM,UAAU,UAAU,CAAC,GAAG,EAAE;QACrH,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CACT,WAAW,EACX,qEAAqE,EACrE;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;KAC1F,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE1C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0CAA0C,EAAE,CAAC;aAC9E,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAEnD,MAAM,KAAK,GAAG;YACZ,aAAa,QAAQ,CAAC,MAAM,sBAAsB;YAClD,gBAAgB,UAAU,CAAC,QAAQ,WAAW,UAAU,CAAC,IAAI,aAAa,UAAU,CAAC,MAAM,UAAU,UAAU,CAAC,GAAG,EAAE;YACrH,EAAE;SACH,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACpF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,WAAW,EACX,qDAAqD,EACrD;QACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;KAC3E,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC3B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wDAAwD,QAAQ,EAAE,EAAE,CAAC;aACtG,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,QAAQ,EAAE,EAAE,CAAC;aACvE,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG;YACb,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,QAAQ;YACR,UAAU,EAAE,CAAC;SACd,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IACvE,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,gIAAgI,EAChI;QACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;QAC/E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;QAC3F,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,qFAAqF,CAAC;QAClG,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;KACxE,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IACvE,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,sDAAsD,EACtD,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkC,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACpC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC,CACF,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@guardbee/mcp-secret-scanner",
+  "version": "0.1.0",
+  "description": "MCP server that scans files and directories for exposed secrets, API keys, and credentials",
+  "type": "module",
+  "bin": {
+    "guardbee-secret-scanner": "./dist/cli.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "start": "node dist/cli.js",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^26.5.0",
+    "typescript": "^5.0.0",
+    "vitest": "^2.0.0"
+  },
+  "keywords": [
+    "mcp",
+    "security",
+    "secret-scanning",
+    "guardbee",
+    "devtools"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/GuardBee/guardbee-mcp-secret-scanner"
+  }
+}