@kevinrabun/judges 3.112.0 → 3.114.0

package/dist/commands/scaffold-plugin.js

@@ -1,271 +0,0 @@
-/**
- * `judges scaffold-plugin` — Generate a starter custom plugin project.
- *
- * Creates a directory structure with:
- *   - package.json (with @kevinrabun/judges as peer dependency)
- *   - tsconfig.json
- *   - src/index.ts (plugin entry-point with example rule & judge)
- *   - src/rules/example-rule.ts
- *   - README.md
- *
- * Usage:
- *   judges scaffold-plugin my-org-rules
- *   judges scaffold-plugin my-org-rules --dir ./plugins
- */
-import { existsSync, mkdirSync, writeFileSync } from "fs";
-import { join, resolve } from "path";
-// ─── Templates ───────────────────────────────────────────────────────────────
-function packageJsonTemplate(name) {
-    return JSON.stringify({
-        name,
-        version: "0.1.0",
-        description: `Custom Judges Panel plugin: ${name}`,
-        type: "module",
-        main: "dist/index.js",
-        types: "dist/index.d.ts",
-        scripts: {
-            build: "tsc",
-            watch: "tsc --watch",
-            test: "node --test dist/**/*.test.js",
-        },
-        peerDependencies: {
-            "@anthropic-ai/sdk": ">=0.39.0",
-            "@kevinrabun/judges": "*",
-        },
-        devDependencies: {
-            typescript: "^5.7.0",
-        },
-        keywords: ["judges-plugin", "code-review", "static-analysis"],
-        license: "MIT",
-    }, null, 2);
-}
-function tsconfigTemplate() {
-    return JSON.stringify({
-        compilerOptions: {
-            target: "ES2022",
-            module: "Node16",
-            moduleResolution: "Node16",
-            declaration: true,
-            outDir: "dist",
-            rootDir: "src",
-            strict: true,
-            esModuleInterop: true,
-            skipLibCheck: true,
-        },
-        include: ["src"],
-    }, null, 2);
-}
-function indexTemplate(name) {
-    return `/**
- * ${name} — Custom Judges Panel Plugin
- *
- * Register this plugin in your .judgesrc or via the API:
- *
- *   import { registerPlugin } from "@kevinrabun/judges/api";
- *   import plugin from "${name}";
- *   registerPlugin(plugin);
- */
-
-import type { JudgesPlugin, CustomRule } from "@kevinrabun/judges/api";
-import { exampleNoTodoRule } from "./rules/example-rule.js";
-
-const plugin: JudgesPlugin = {
-  name: "${name}",
-  version: "0.1.0",
-  description: "Custom rules and judges for ${name}",
-
-  // Register custom rules
-  rules: [exampleNoTodoRule],
-
-  // Optionally add custom judges (uncomment to use):
-  // judges: [],
-
-  // Hook: post-process findings (e.g., add org metadata)
-  // afterEvaluate: (findings) => {
-  //   return findings.map((f) => ({
-  //     ...f,
-  //     tags: [...(f.tags || []), "${name}"],
-  //   }));
-  // },
-};
-
-export default plugin;
-`;
-}
-function exampleRuleTemplate() {
-    return `/**
- * Example custom rule: no-todo-comments
- *
- * Flags TODO / FIXME / HACK comments as findings.
- * This is a pattern-based rule — the simplest form.
- */
-
-import type { CustomRule } from "@kevinrabun/judges/api";
-
-export const exampleNoTodoRule: CustomRule = {
-  id: "CUSTOM-001",
-  title: "TODO/FIXME comment detected",
-  severity: "info",
-  judgeId: "code-structure",
-  description: "Flags TODO, FIXME, and HACK comments that should be tracked in an issue tracker.",
-  languages: [], // empty = all languages
-  pattern: /\\b(TODO|FIXME|HACK|XXX)\\b/i,
-  suggestedFix: "Convert this comment into a tracked issue and reference the issue ID.",
-  tags: ["tech-debt", "comments"],
-};
-
-/**
- * For more complex rules, use the \`analyze\` function instead of \`pattern\`:
- *
- * export const complexRule: CustomRule = {
- *   id: "CUSTOM-002",
- *   title: "Complex custom check",
- *   severity: "medium",
- *   judgeId: "cybersecurity",
- *   description: "Example of a custom rule with analyze function.",
- *   analyze: (code, language) => {
- *     const findings: Finding[] = [];
- *     // Your custom analysis logic here
- *     return findings;
- *   },
- * };
- */
-`;
-}
-function readmeTemplate(name) {
-    return `# ${name}
-
-A custom plugin for [Judges Panel](https://github.com/KevinRabun/judges).
-
-## Quick Start
-
-\`\`\`bash
-npm install
-npm run build
-\`\`\`
-
-## Usage
-
-### Via API
-
-\`\`\`ts
-import { registerPlugin } from "@kevinrabun/judges/api";
-import plugin from "${name}";
-
-registerPlugin(plugin);
-\`\`\`
-
-### Via .judgesrc
-
-\`\`\`json
-{
-  "plugins": ["${name}"]
-}
-\`\`\`
-
-## Adding Rules
-
-Create a new file in \`src/rules/\` and add it to the plugin's \`rules\` array in \`src/index.ts\`.
-
-### Pattern-Based Rule
-
-\`\`\`ts
-import type { CustomRule } from "@kevinrabun/judges/api";
-
-export const myRule: CustomRule = {
-  id: "MYORG-001",
-  title: "My custom rule",
-  severity: "medium",
-  judgeId: "cybersecurity",
-  description: "What this rule checks.",
-  pattern: /dangerousFunction\\(/,
-  suggestedFix: "Use safeFunction() instead.",
-};
-\`\`\`
-
-### Function-Based Rule
-
-\`\`\`ts
-import type { CustomRule, Finding } from "@kevinrabun/judges/api";
-
-export const myAdvancedRule: CustomRule = {
-  id: "MYORG-002",
-  title: "Advanced custom check",
-  severity: "high",
-  judgeId: "cybersecurity",
-  description: "Complex analysis with custom logic.",
-  analyze: (code: string, language: string): Finding[] => {
-    const findings: Finding[] = [];
-    // Your analysis logic here
-    return findings;
-  },
-};
-\`\`\`
-
-## License
-
-MIT
-`;
-}
-function parseScaffoldArgs(argv) {
-    const args = { name: undefined, dir: "." };
-    for (let i = 3; i < argv.length; i++) {
-        const arg = argv[i];
-        if (arg === "--dir" || arg === "-d") {
-            args.dir = argv[++i];
-        }
-        else if (!arg.startsWith("-") && !args.name) {
-            args.name = arg;
-        }
-    }
-    return args;
-}
-export function runScaffoldPlugin(argv) {
-    const args = parseScaffoldArgs(argv);
-    if (!args.name) {
-        console.error("Error: Plugin name required.");
-        console.error("Usage: judges scaffold-plugin <name> [--dir <path>]");
-        process.exit(1);
-    }
-    const name = args.name;
-    const root = resolve(args.dir, name);
-    if (existsSync(root)) {
-        console.error(`Error: Directory already exists: ${root}`);
-        process.exit(1);
-    }
-    // Create directory structure
-    mkdirSync(join(root, "src", "rules"), { recursive: true });
-    // Write files
-    const files = [
-        ["package.json", packageJsonTemplate(name)],
-        ["tsconfig.json", tsconfigTemplate()],
-        ["README.md", readmeTemplate(name)],
-        [join("src", "index.ts"), indexTemplate(name)],
-        [join("src", "rules", "example-rule.ts"), exampleRuleTemplate()],
-    ];
-    for (const [rel, content] of files) {
-        writeFileSync(join(root, rel), content, "utf-8");
-    }
-    console.log("");
-    console.log("╔══════════════════════════════════════════════════════════════╗");
-    console.log("║           Judges Panel — Plugin Scaffolded                  ║");
-    console.log("╚══════════════════════════════════════════════════════════════╝");
-    console.log("");
-    console.log(`  Created: ${root}`);
-    console.log("");
-    console.log("  Files:");
-    for (const [rel] of files) {
-        console.log(`    ${rel}`);
-    }
-    console.log("");
-    console.log("  Next steps:");
-    console.log(`    cd ${name}`);
-    console.log("    npm install");
-    console.log("    npm run build");
-    console.log("");
-    console.log("  Then register in your project:");
-    console.log(`    import plugin from "${name}";`);
-    console.log("    registerPlugin(plugin);");
-    console.log("");
-}
-//# sourceMappingURL=scaffold-plugin.js.map

package/dist/commands/scaffold-plugin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scaffold-plugin.js","sourceRoot":"","sources":["../../src/commands/scaffold-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAErC,gFAAgF;AAEhF,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,IAAI;QACJ,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,+BAA+B,IAAI,EAAE;QAClD,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE;YACP,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,+BAA+B;SACtC;QACD,gBAAgB,EAAE;YAChB,mBAAmB,EAAE,UAAU;YAC/B,oBAAoB,EAAE,GAAG;SAC1B;QACD,eAAe,EAAE;YACf,UAAU,EAAE,QAAQ;SACrB;QACD,QAAQ,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,iBAAiB,CAAC;QAC7D,OAAO,EAAE,KAAK;KACf,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,QAAQ;YAC1B,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;SACnB;QACD,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO;KACJ,IAAI;;;;;2BAKkB,IAAI;;;;;;;;WAQpB,IAAI;;8CAE+B,IAAI;;;;;;;;;;;;sCAYZ,IAAI;;;;;;CAMzC,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCR,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,KAAK,IAAI;;;;;;;;;;;;;;;;;sBAiBI,IAAI;;;;;;;;;iBAST,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8CpB,CAAC;AACF,CAAC;AASD,SAAS,iBAAiB,CAAC,IAAc;IACvC,MAAM,IAAI,GAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAErC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,6BAA6B;IAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3D,cAAc;IACd,MAAM,KAAK,GAA4B;QACrC,CAAC,cAAc,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,eAAe,EAAE,gBAAgB,EAAE,CAAC;QACrC,CAAC,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACjE,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACnC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/commands/secret-age.d.ts

@@ -1,6 +0,0 @@
-/**
- * Secret age — detect credentials with no rotation policy, hardcoded expiry,
- * missing vault references, and shared service-account credentials.
- */
-export declare function runSecretAge(argv: string[]): void;
-//# sourceMappingURL=secret-age.d.ts.map

package/dist/commands/secret-age.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secret-age.d.ts","sourceRoot":"","sources":["../../src/commands/secret-age.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAkLH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAiEjD"}

package/dist/commands/secret-age.js

@@ -1,215 +0,0 @@
-/**
- * Secret age — detect credentials with no rotation policy, hardcoded expiry,
- * missing vault references, and shared service-account credentials.
- */
-import { readFileSync, readdirSync, statSync } from "fs";
-import { join, extname } from "path";
-// ─── File Collection ────────────────────────────────────────────────────────
-const SCAN_EXTS = new Set([
-    ".ts",
-    ".tsx",
-    ".js",
-    ".jsx",
-    ".py",
-    ".java",
-    ".go",
-    ".rs",
-    ".yaml",
-    ".yml",
-    ".json",
-    ".env",
-    ".toml",
-    ".cfg",
-    ".ini",
-    ".xml",
-]);
-function collectFiles(dir, max = 400) {
-    const files = [];
-    function walk(d) {
-        if (files.length >= max)
-            return;
-        let entries;
-        try {
-            entries = readdirSync(d);
-        }
-        catch {
-            return;
-        }
-        for (const e of entries) {
-            if (files.length >= max)
-                return;
-            if (e.startsWith(".") || e === "node_modules" || e === "dist" || e === "build")
-                continue;
-            const full = join(d, e);
-            try {
-                if (statSync(full).isDirectory())
-                    walk(full);
-                else if (SCAN_EXTS.has(extname(full)))
-                    files.push(full);
-            }
-            catch {
-                /* skip */
-            }
-        }
-    }
-    walk(dir);
-    return files;
-}
-// ─── Patterns ───────────────────────────────────────────────────────────────
-const SECRET_PATTERNS = [
-    {
-        pattern: /(?:api[_-]?key|apikey)\s*[:=]\s*['"][A-Za-z0-9]{16,}['"]/i,
-        finding: "Hardcoded API key",
-        severity: "critical",
-        recommendation: "Move to vault or environment variable",
-    },
-    {
-        pattern: /(?:password|passwd|pwd)\s*[:=]\s*['"][^'"]{4,}['"]/i,
-        finding: "Hardcoded password",
-        severity: "critical",
-        recommendation: "Use a secrets manager",
-    },
-    {
-        pattern: /(?:secret|token)\s*[:=]\s*['"][A-Za-z0-9+/=]{16,}['"]/i,
-        finding: "Hardcoded secret/token",
-        severity: "critical",
-        recommendation: "Store in vault (AWS SSM, Azure Key Vault, HashiCorp Vault)",
-    },
-    {
-        pattern: /(?:private[_-]?key|privateKey)\s*[:=]\s*['"`]-----BEGIN/i,
-        finding: "Embedded private key",
-        severity: "critical",
-        recommendation: "Store private keys in a secure key store",
-    },
-    {
-        pattern: /(?:connection[_-]?string|connStr)\s*[:=]\s*['"][^'"]{20,}['"]/i,
-        finding: "Hardcoded connection string",
-        severity: "high",
-        recommendation: "Reference from vault; use managed identity where possible",
-    },
-    {
-        pattern: /expires?\s*[:=]\s*['"]?\d{4}[-/]\d{2}[-/]\d{2}/i,
-        finding: "Hardcoded expiry date",
-        severity: "medium",
-        recommendation: "Implement dynamic rotation; avoid static expiry",
-    },
-    {
-        pattern: /rotation|rotate.*(?:never|disabled|false)/i,
-        finding: "Rotation disabled",
-        severity: "high",
-        recommendation: "Enable automatic credential rotation",
-    },
-    {
-        pattern: /(?:aws_access_key_id|aws_secret_access_key)\s*[:=]\s*['"][A-Z0-9]{16,}['"]/i,
-        finding: "AWS credentials in source",
-        severity: "critical",
-        recommendation: "Use IAM roles or environment credentials",
-    },
-    {
-        pattern: /(?:GOOGLE_APPLICATION_CREDENTIALS|gcp_credentials)\s*[:=]\s*['"][^'"]+['"]/i,
-        finding: "GCP credentials in source",
-        severity: "high",
-        recommendation: "Use workload identity or service account key file outside repo",
-    },
-    {
-        pattern: /(?:shared|common)[_-]?(?:service)?[_-]?(?:account|credential|key)/i,
-        finding: "Shared service credentials",
-        severity: "high",
-        recommendation: "Use per-environment, per-service credentials",
-    },
-];
-function analyzeFile(filepath) {
-    const findings = [];
-    let content;
-    try {
-        content = readFileSync(filepath, "utf-8");
-    }
-    catch {
-        return findings;
-    }
-    const lines = content.split("\n");
-    for (let i = 0; i < lines.length; i++) {
-        const line = lines[i];
-        // Skip comments
-        if (/^\s*(?:\/\/|#|\/\*|\*)/.test(line))
-            continue;
-        for (const sp of SECRET_PATTERNS) {
-            if (sp.pattern.test(line)) {
-                findings.push({
-                    file: filepath,
-                    line: i + 1,
-                    finding: sp.finding,
-                    severity: sp.severity,
-                    recommendation: sp.recommendation,
-                });
-            }
-        }
-    }
-    // Check for vault integration
-    const hasVaultRef = /vault|keyVault|ssm|secretsmanager|VAULT_ADDR|SecretClient/i.test(content);
-    const hasSecrets = findings.length > 0;
-    if (hasSecrets && !hasVaultRef) {
-        findings.push({
-            file: filepath,
-            line: 1,
-            finding: "No vault integration detected",
-            severity: "medium",
-            recommendation: "Add a secrets manager reference for credential lifecycle management",
-        });
-    }
-    return findings;
-}
-// ─── CLI ────────────────────────────────────────────────────────────────────
-export function runSecretAge(argv) {
-    if (argv.includes("--help") || argv.includes("-h")) {
-        console.log(`
-judges secret-age — Credential lifecycle and rotation analysis
-
-Usage:
-  judges secret-age [dir]
-  judges secret-age src/ --format json
-
-Options:
-  [dir]                 Directory to scan (default: .)
-  --format json         JSON output
-  --help, -h            Show this help
-
-Detects: hardcoded API keys, passwords, tokens, private keys, connection strings,
-disabled rotation, hardcoded expiry, shared credentials, missing vault integration.
-`);
-        return;
-    }
-    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
-    const dir = argv.find((a) => !a.startsWith("-") && argv.indexOf(a) > 0) || ".";
-    const files = collectFiles(dir);
-    const allFindings = [];
-    for (const f of files)
-        allFindings.push(...analyzeFile(f));
-    const critCount = allFindings.filter((f) => f.severity === "critical").length;
-    const highCount = allFindings.filter((f) => f.severity === "high").length;
-    const score = allFindings.length === 0 ? 100 : Math.max(0, 100 - critCount * 20 - highCount * 10);
-    if (format === "json") {
-        console.log(JSON.stringify({
-            findings: allFindings,
-            score,
-            summary: { critical: critCount, high: highCount, total: allFindings.length },
-            timestamp: new Date().toISOString(),
-        }, null, 2));
-    }
-    else {
-        const badge = critCount > 0 ? "🚫 EXPOSED" : highCount > 0 ? "⚠️  AT RISK" : allFindings.length > 0 ? "🟡 REVIEW" : "✅ CLEAN";
-        console.log(`\n  Secret Age Analysis: ${badge} (${score}/100)\n  ─────────────────────────────`);
-        if (allFindings.length === 0) {
-            console.log("    No credential lifecycle issues detected.\n");
-            return;
-        }
-        for (const f of allFindings) {
-            const icon = f.severity === "critical" ? "🚫" : f.severity === "high" ? "🔴" : "🟡";
-            console.log(`    ${icon} [${f.severity.toUpperCase()}] ${f.finding}`);
-            console.log(`        ${f.file}:${f.line}`);
-            console.log(`        → ${f.recommendation}`);
-        }
-        console.log(`\n    Total: ${allFindings.length} | Critical: ${critCount} | High: ${highCount} | Score: ${score}/100\n`);
-    }
-}
-//# sourceMappingURL=secret-age.js.map

package/dist/commands/secret-age.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secret-age.js","sourceRoot":"","sources":["../../src/commands/secret-age.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAYrC,+EAA+E;AAE/E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,KAAK;IACL,KAAK;IACL,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,GAAW,EAAE,GAAG,GAAG,GAAG;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,SAAS,IAAI,CAAC,CAAS;QACrB,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO;QAChC,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,CAAC,CAAwB,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;gBAAE,OAAO;YAChC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO;gBAAE,SAAS;YACzF,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC;gBACH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;qBACxC,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAE/E,MAAM,eAAe,GAKf;IACJ;QACE,OAAO,EAAE,2DAA2D;QACpE,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,uCAAuC;KACxD;IACD;QACE,OAAO,EAAE,qDAAqD;QAC9D,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,uBAAuB;KACxC;IACD;QACE,OAAO,EAAE,wDAAwD;QACjE,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,4DAA4D;KAC7E;IACD;QACE,OAAO,EAAE,0DAA0D;QACnE,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,0CAA0C;KAC3D;IACD;QACE,OAAO,EAAE,gEAAgE;QACzE,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,2DAA2D;KAC5E;IACD;QACE,OAAO,EAAE,iDAAiD;QAC1D,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,QAAQ;QAClB,cAAc,EAAE,iDAAiD;KAClE;IACD;QACE,OAAO,EAAE,4CAA4C;QACrD,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,sCAAsC;KACvD;IACD;QACE,OAAO,EAAE,6EAA6E;QACtF,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,0CAA0C;KAC3D;IACD;QACE,OAAO,EAAE,6EAA6E;QACtF,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,gEAAgE;KACjF;IACD;QACE,OAAO,EAAE,oEAAoE;QAC7E,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,8CAA8C;KAC/D;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,gBAAgB;QAChB,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAElD,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;YACjC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,OAAO,EAAE,EAAE,CAAC,OAAO;oBACnB,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,cAAc,EAAE,EAAE,CAAC,cAAc;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,WAAW,GAAG,4DAA4D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACvC,IAAI,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,+BAA+B;YACxC,QAAQ,EAAE,QAAQ;YAClB,cAAc,EAAE,qEAAqE;SACtF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;CAcf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;IAE/E,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,WAAW,GAAoB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3D,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC9E,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,SAAS,GAAG,EAAE,GAAG,SAAS,GAAG,EAAE,CAAC,CAAC;IAElG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,QAAQ,EAAE,WAAW;YACrB,KAAK;YACL,OAAO,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE;YAC5E,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GACT,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAClH,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,KAAK,KAAK,wCAAwC,CAAC,CAAC;QAEjG,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,CAAC,GAAG,CACT,gBAAgB,WAAW,CAAC,MAAM,gBAAgB,SAAS,YAAY,SAAS,aAAa,KAAK,QAAQ,CAC3G,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/commands/secret-scan.d.ts

@@ -1,8 +0,0 @@
-/**
- * Secret scan — entropy-based and regex-based secret detection
- * in source files. Optimized for CI gates and pre-commit hooks.
- *
- * All analysis local — no external services.
- */
-export declare function runSecretScan(argv: string[]): void;
-//# sourceMappingURL=secret-scan.d.ts.map

package/dist/commands/secret-scan.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secret-scan.d.ts","sourceRoot":"","sources":["../../src/commands/secret-scan.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsMH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAmFlD"}