@nikhil_telkar/codeshield 0.0.0-stage → 0.1.0

package/dist/engine/fileWalker.js

@@ -0,0 +1,170 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { BINARY_EXTENSIONS, MAX_FILE_BYTES, MAX_FILE_COUNT, SKIP_DIRS, TEXT_EXTENSIONS, } from '../utils/constants.js';
+export function walkFiles(root, options = {}) {
+    const resolvedRoot = path.resolve(root);
+    let canonicalRoot;
+    try {
+        canonicalRoot = fs.realpathSync(resolvedRoot);
+    }
+    catch {
+        canonicalRoot = resolvedRoot;
+    }
+    const maxFiles = options.maxFiles ?? MAX_FILE_COUNT;
+    const maxBytes = options.maxBytes ?? MAX_FILE_BYTES;
+    const onSkip = options.onSkip;
+    const files = [];
+    let filesVisited = 0;
+    let filesSkipped = 0;
+    let truncated = false;
+    let rootStat;
+    try {
+        rootStat = fs.statSync(resolvedRoot);
+    }
+    catch {
+        return { files: [], filesVisited: 0, filesSkipped: 1, truncated: false };
+    }
+    if (rootStat.isFile()) {
+        const ext = path.extname(resolvedRoot).toLowerCase();
+        const fileName = path.basename(resolvedRoot);
+        const isKnownDotfile = fileName === '.gitignore' || fileName === '.env' || fileName.startsWith('.env.');
+        if (BINARY_EXTENSIONS.has(ext)) {
+            onSkip?.(resolvedRoot, 'binary extension');
+            return { files: [], filesVisited: 0, filesSkipped: 1, truncated: false };
+        }
+        if (!isKnownDotfile && ext !== '' && !TEXT_EXTENSIONS.has(ext)) {
+            onSkip?.(resolvedRoot, `unknown extension (${ext})`);
+            return { files: [], filesVisited: 0, filesSkipped: 1, truncated: false };
+        }
+        if (rootStat.size > maxBytes) {
+            onSkip?.(resolvedRoot, 'file too large');
+            return { files: [], filesVisited: 0, filesSkipped: 1, truncated: false };
+        }
+        try {
+            const content = fs.readFileSync(resolvedRoot, 'utf8');
+            const lines = content.split(/\r?\n/);
+            return {
+                files: [{ path: resolvedRoot, relativePath: path.basename(resolvedRoot), content, lines }],
+                filesVisited: 1,
+                filesSkipped: 0,
+                truncated: false,
+            };
+        }
+        catch {
+            return { files: [], filesVisited: 0, filesSkipped: 1, truncated: false };
+        }
+    }
+    function recurse(dir) {
+        if (truncated)
+            return;
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            onSkip?.(dir, 'unreadable directory');
+            filesSkipped++;
+            return;
+        }
+        for (const entry of entries) {
+            if (truncated)
+                return;
+            const fullPath = path.join(dir, entry.name);
+            if (entry.isSymbolicLink()) {
+                let realTarget;
+                try {
+                    realTarget = fs.realpathSync(fullPath);
+                }
+                catch {
+                    onSkip?.(fullPath, 'broken symlink');
+                    filesSkipped++;
+                    continue;
+                }
+                const escapes = (!realTarget.startsWith(resolvedRoot + path.sep) && realTarget !== resolvedRoot) &&
+                    (!realTarget.startsWith(canonicalRoot + path.sep) && realTarget !== canonicalRoot);
+                if (escapes) {
+                    onSkip?.(fullPath, 'symlink escapes scan root');
+                    filesSkipped++;
+                    continue;
+                }
+                let targetStat;
+                try {
+                    targetStat = fs.statSync(realTarget);
+                }
+                catch {
+                    filesSkipped++;
+                    continue;
+                }
+                if (targetStat.isDirectory()) {
+                    onSkip?.(fullPath, 'symlink to directory (skipped to avoid cycle)');
+                    filesSkipped++;
+                    continue;
+                }
+            }
+            if (entry.isDirectory()) {
+                if (SKIP_DIRS.has(entry.name)) {
+                    onSkip?.(fullPath, `skipped directory (${entry.name})`);
+                    filesSkipped++;
+                    continue;
+                }
+                recurse(fullPath);
+                continue;
+            }
+            if (!entry.isFile() && !entry.isSymbolicLink()) {
+                onSkip?.(fullPath, 'non-regular file');
+                filesSkipped++;
+                continue;
+            }
+            const ext = path.extname(entry.name).toLowerCase();
+            if (BINARY_EXTENSIONS.has(ext)) {
+                onSkip?.(fullPath, 'binary extension');
+                filesSkipped++;
+                continue;
+            }
+            const isKnownDotfile = entry.name === '.gitignore' || entry.name === '.env' || entry.name.startsWith('.env.');
+            if (!isKnownDotfile && ext !== '' && !TEXT_EXTENSIONS.has(ext)) {
+                onSkip?.(fullPath, `unknown extension (${ext})`);
+                filesSkipped++;
+                continue;
+            }
+            let stat;
+            try {
+                stat = fs.statSync(fullPath);
+            }
+            catch {
+                onSkip?.(fullPath, 'stat failed');
+                filesSkipped++;
+                continue;
+            }
+            if (stat.size > maxBytes) {
+                onSkip?.(fullPath, `file exceeds size limit (${stat.size} bytes)`);
+                filesSkipped++;
+                continue;
+            }
+            if (filesVisited >= maxFiles) {
+                truncated = true;
+                return;
+            }
+            let content;
+            try {
+                content = fs.readFileSync(fullPath, 'utf8');
+            }
+            catch {
+                onSkip?.(fullPath, 'read error');
+                filesSkipped++;
+                continue;
+            }
+            filesVisited++;
+            const relativePath = path.relative(resolvedRoot, fullPath);
+            files.push({
+                path: fullPath,
+                relativePath,
+                content,
+                lines: content.split(/\r?\n/),
+            });
+        }
+    }
+    recurse(resolvedRoot);
+    return { files, filesVisited, filesSkipped, truncated };
+}
+//# sourceMappingURL=fileWalker.js.map

package/dist/engine/fileWalker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileWalker.js","sourceRoot":"","sources":["../../src/engine/fileWalker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,SAAS,EACT,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAgB/B,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,UAAsC,EAAE;IAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,YAAY,CAAC;IAC/B,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE9B,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACxG,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,EAAE,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;YAC3C,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,cAAc,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,EAAE,CAAC,YAAY,EAAE,sBAAsB,GAAG,GAAG,CAAC,CAAC;YACrD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC3E,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;YACzC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,OAAO;gBACL,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBAC1F,YAAY,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,SAAS,OAAO,CAAC,GAAW;QAC1B,IAAI,SAAS;YAAE,OAAO;QAEtB,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,EAAE,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;YACtC,YAAY,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,SAAS;gBAAE,OAAO;YAEtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE5C,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,IAAI,UAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;oBACrC,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBAED,MAAM,OAAO,GACX,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,YAAY,CAAC;oBAChF,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,aAAa,CAAC,CAAC;gBACrF,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,EAAE,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;oBAChD,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBAED,IAAI,UAAoB,CAAC;gBACzB,IAAI,CAAC;oBACH,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACvC,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBAED,IAAI,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC7B,MAAM,EAAE,CAAC,QAAQ,EAAE,+CAA+C,CAAC,CAAC;oBACpE,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,MAAM,EAAE,CAAC,QAAQ,EAAE,sBAAsB,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;oBACxD,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBACD,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC/C,MAAM,EAAE,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;gBACvC,YAAY,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAEnD,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,EAAE,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;gBACvC,YAAY,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9G,IAAI,CAAC,cAAc,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/D,MAAM,EAAE,CAAC,QAAQ,EAAE,sBAAsB,GAAG,GAAG,CAAC,CAAC;gBACjD,YAAY,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,IAAI,IAAc,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;gBAClC,YAAY,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACzB,MAAM,EAAE,CAAC,QAAQ,EAAE,4BAA4B,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;gBACnE,YAAY,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;gBAC7B,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACjC,YAAY,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,YAAY,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,QAAQ;gBACd,YAAY;gBACZ,OAAO;gBACP,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,CAAC,YAAY,CAAC,CAAC;IACtB,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AAC1D,CAAC"}

package/dist/engine/index.d.ts

@@ -0,0 +1,4 @@
+export * from './fileWalker.js';
+export * from './projectDetector.js';
+export * from './runner.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/engine/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/engine/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC"}

package/dist/engine/index.js

@@ -0,0 +1,4 @@
+export * from './fileWalker.js';
+export * from './projectDetector.js';
+export * from './runner.js';
+//# sourceMappingURL=index.js.map

package/dist/engine/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/engine/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC"}

package/dist/engine/projectDetector.d.ts

@@ -0,0 +1,10 @@
+import { ProjectType } from '../types.js';
+interface PackageJsonStructure {
+    dependencies?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+    scripts?: Record<string, string>;
+}
+export declare function readPackageJson(root: string): PackageJsonStructure | null;
+export declare function detectProjectType(root: string, existingFilePaths?: string[]): ProjectType;
+export {};
+//# sourceMappingURL=projectDetector.d.ts.map

package/dist/engine/projectDetector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectDetector.d.ts","sourceRoot":"","sources":["../../src/engine/projectDetector.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,UAAU,oBAAoB;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CASzE;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,WAAW,CAiCzF"}

package/dist/engine/projectDetector.js

@@ -0,0 +1,44 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+export function readPackageJson(root) {
+    const pkgPath = path.join(root, 'package.json');
+    try {
+        if (!fs.existsSync(pkgPath))
+            return null;
+        const raw = fs.readFileSync(pkgPath, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export function detectProjectType(root, existingFilePaths) {
+    const resolvedRoot = path.resolve(root);
+    const pkg = readPackageJson(resolvedRoot);
+    const deps = pkg?.dependencies ?? {};
+    const devDeps = pkg?.devDependencies ?? {};
+    const allDeps = { ...deps, ...devDeps };
+    if ('next' in allDeps)
+        return 'nextjs';
+    const nextConfigExists = ['next.config.js', 'next.config.mjs', 'next.config.ts'].some(cfg => fs.existsSync(path.join(resolvedRoot, cfg)));
+    if (nextConfigExists)
+        return 'nextjs';
+    const hasVite = 'vite' in allDeps ||
+        fs.existsSync(path.join(resolvedRoot, 'vite.config.js')) ||
+        fs.existsSync(path.join(resolvedRoot, 'vite.config.ts')) ||
+        fs.existsSync(path.join(resolvedRoot, 'vite.config.mjs'));
+    const hasReact = 'react' in allDeps;
+    if (hasVite && hasReact)
+        return 'vite-react';
+    if ('express' in deps)
+        return 'express';
+    const indexHtmlRoot = fs.existsSync(path.join(resolvedRoot, 'index.html'));
+    const indexHtmlPublic = fs.existsSync(path.join(resolvedRoot, 'public', 'index.html'));
+    if (indexHtmlRoot || indexHtmlPublic) {
+        const hasFrameworkDeps = ['vue', 'angular', 'svelte', '@angular/core'].some(d => d in allDeps);
+        if (!hasFrameworkDeps && !hasVite)
+            return 'plain-html';
+    }
+    return 'unknown';
+}
+//# sourceMappingURL=projectDetector.js.map

package/dist/engine/projectDetector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectDetector.js","sourceRoot":"","sources":["../../src/engine/projectDetector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AASlC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,iBAA4B;IAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAE1C,MAAM,IAAI,GAAG,GAAG,EAAE,YAAY,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,GAAG,EAAE,eAAe,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;IAExC,IAAI,MAAM,IAAI,OAAO;QAAE,OAAO,QAAQ,CAAC;IAEvC,MAAM,gBAAgB,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC1F,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAC5C,CAAC;IACF,IAAI,gBAAgB;QAAE,OAAO,QAAQ,CAAC;IAEtC,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO;QAC/B,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACxD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACxD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,CAAC;IAEpC,IAAI,OAAO,IAAI,QAAQ;QAAE,OAAO,YAAY,CAAC;IAE7C,IAAI,SAAS,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAExC,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IACvF,IAAI,aAAa,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;QAC/F,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO;YAAE,OAAO,YAAY,CAAC;IACzD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/engine/runner.d.ts

@@ -0,0 +1,8 @@
+import { RunnerOptions, ScanResult } from '../types.js';
+import { type DepScanOptions } from '../scanners/dependencies.js';
+export interface AsyncRunnerOptions extends RunnerOptions {
+    depOptions?: DepScanOptions;
+}
+export declare function runScan(options: RunnerOptions): ScanResult;
+export declare function runScanAsync(options: AsyncRunnerOptions): Promise<ScanResult>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/engine/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/engine/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,aAAa,EAAe,UAAU,EAAY,MAAM,aAAa,CAAC;AAIxF,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAEpF,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAgCD,wBAAgB,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,UAAU,CA2B1D;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAmCnF"}

package/dist/engine/runner.js

@@ -0,0 +1,87 @@
+import { SEVERITY_RANK } from '../utils/constants.js';
+import { walkFiles } from './fileWalker.js';
+import { detectProjectType } from './projectDetector.js';
+import { scanDependencies } from '../scanners/dependencies.js';
+function finalizeFindings(findings, minRank) {
+    const filtered = findings.filter((f) => (SEVERITY_RANK[f.severity] ?? 0) >= minRank);
+    filtered.sort((a, b) => {
+        const rankDiff = (SEVERITY_RANK[b.severity] ?? 0) - (SEVERITY_RANK[a.severity] ?? 0);
+        if (rankDiff !== 0)
+            return rankDiff;
+        const fileDiff = a.file.localeCompare(b.file);
+        if (fileDiff !== 0)
+            return fileDiff;
+        return a.line - b.line;
+    });
+    return filtered;
+}
+function buildContext(options) {
+    const projectType = detectProjectType(options.root);
+    const walkResult = walkFiles(options.root);
+    const context = {
+        root: options.root,
+        projectType,
+        files: walkResult.files,
+    };
+    return { context, walkResult };
+}
+export function runScan(options) {
+    const startTime = Date.now();
+    const minSeverity = options.minSeverity ?? 'info';
+    const minRank = SEVERITY_RANK[minSeverity] ?? 0;
+    const { context, walkResult } = buildContext(options);
+    const findings = [];
+    for (const scanner of options.scanners ?? []) {
+        try {
+            const scannerFindings = scanner.scan(context);
+            if (Array.isArray(scannerFindings)) {
+                findings.push(...scannerFindings);
+            }
+        }
+        catch {
+            // scanner error handled gracefully
+        }
+    }
+    return {
+        projectType: context.projectType,
+        findings: finalizeFindings(findings, minRank),
+        filesScanned: walkResult.filesVisited,
+        filesSkipped: walkResult.filesSkipped,
+        truncated: walkResult.truncated,
+        durationMs: Date.now() - startTime,
+    };
+}
+export async function runScanAsync(options) {
+    const startTime = Date.now();
+    const minSeverity = options.minSeverity ?? 'info';
+    const minRank = SEVERITY_RANK[minSeverity] ?? 0;
+    const { context, walkResult } = buildContext(options);
+    const findings = [];
+    for (const scanner of options.scanners ?? []) {
+        try {
+            const scannerFindings = scanner.scan(context);
+            if (Array.isArray(scannerFindings)) {
+                findings.push(...scannerFindings);
+            }
+        }
+        catch {
+            // scanner error handled gracefully
+        }
+    }
+    try {
+        const depFindings = await scanDependencies(context, options.depOptions ?? {});
+        findings.push(...depFindings);
+    }
+    catch {
+        // dependency scanner failure must never crash the tool
+    }
+    return {
+        projectType: context.projectType,
+        findings: finalizeFindings(findings, minRank),
+        filesScanned: walkResult.filesVisited,
+        filesSkipped: walkResult.filesSkipped,
+        truncated: walkResult.truncated,
+        durationMs: Date.now() - startTime,
+    };
+}
+//# sourceMappingURL=runner.js.map

package/dist/engine/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/engine/runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAuB,MAAM,6BAA6B,CAAC;AAMpF,SAAS,gBAAgB,CAAC,QAAmB,EAAE,OAAe;IAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,CACnD,CAAC;IAEF,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,IAAI,QAAQ,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QACpC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QACpC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,OAAsB;IAI1C,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW;QACX,KAAK,EAAE,UAAU,CAAC,KAAK;KACxB,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAsB;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAa,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC;IAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAEhD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC7C,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA2B;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAa,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC;IAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAEhD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAC9E,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC7C,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC;AACJ,CAAC"}

package/dist/fix/fixer.d.ts

@@ -0,0 +1,17 @@
+export interface PlannedFix {
+    id: string;
+    title: string;
+    filePath: string;
+    relativePath: string;
+    isCreation: boolean;
+    backupPath?: string;
+    diffLines: string[];
+    apply: () => void;
+}
+export declare function resolveSafePath(root: string, relativePath: string): string;
+export declare function generateEnvExampleContent(envContent: string): string;
+export declare function planFixes(root: string): PlannedFix[];
+export declare function formatFixDiff(fixes: PlannedFix[]): string;
+export declare function promptConfirmation(question: string): Promise<boolean>;
+export declare function runFix(root: string, autoConfirm?: boolean): Promise<number>;
+//# sourceMappingURL=fixer.d.ts.map

package/dist/fix/fixer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixer.d.ts","sourceRoot":"","sources":["../../src/fix/fixer.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAW1E;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAmCpE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,CAuFpD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CAsBzD;AAED,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAa3E;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CA0C/E"}

package/dist/fix/fixer.js

@@ -0,0 +1,190 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as readline from 'node:readline';
+import { isEnvIgnoredByGitignore } from '../scanners/env.js';
+import { sanitize } from '../utils/sanitize.js';
+export function resolveSafePath(root, relativePath) {
+    const resolvedRoot = path.resolve(root);
+    const resolvedTarget = path.resolve(resolvedRoot, relativePath);
+    if (resolvedTarget !== resolvedRoot && !resolvedTarget.startsWith(resolvedRoot + path.sep)) {
+        throw new Error(`Path traversal attempt rejected: "${sanitize(relativePath)}" is outside the scan root "${sanitize(root)}"`);
+    }
+    return resolvedTarget;
+}
+export function generateEnvExampleContent(envContent) {
+    const lines = envContent.split('\n');
+    const result = [
+        '# .env.example — generated by CodeShield',
+        '# Replace with your actual credentials in .env (never commit .env)',
+        '',
+    ];
+    const SENSITIVE_KEY_RE = /(?:key|secret|token|password|passwd|pwd|auth|credential|salt|nonce|hash|private|jwt|database_url|db_url)/i;
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (trimmed.length === 0 || trimmed.startsWith('#')) {
+            result.push(line);
+            continue;
+        }
+        const eqIdx = line.indexOf('=');
+        if (eqIdx === -1) {
+            result.push(line);
+            continue;
+        }
+        const key = line.slice(0, eqIdx).trim();
+        const rawVal = line.slice(eqIdx + 1).trim();
+        if (SENSITIVE_KEY_RE.test(key) || rawVal.length > 20) {
+            const placeholder = `your_${key.toLowerCase()}_here`;
+            result.push(`${key}=${placeholder}`);
+        }
+        else {
+            result.push(line);
+        }
+    }
+    return result.join('\n') + '\n';
+}
+export function planFixes(root) {
+    const safeRoot = path.resolve(root);
+    const fixes = [];
+    const envPath = resolveSafePath(safeRoot, '.env');
+    const envExists = fs.existsSync(envPath);
+    const gitignorePath = resolveSafePath(safeRoot, '.gitignore');
+    const gitignoreExists = fs.existsSync(gitignorePath);
+    let gitignoreNeedsEnv = false;
+    let gitignoreNeedsCodeshield = false;
+    if (gitignoreExists) {
+        const gitignoreContent = fs.readFileSync(gitignorePath, 'utf8');
+        gitignoreNeedsEnv = envExists && !isEnvIgnoredByGitignore('.env', gitignoreContent);
+        gitignoreNeedsCodeshield = !gitignoreContent.includes('.codeshield');
+    }
+    else if (envExists) {
+        gitignoreNeedsEnv = true;
+        gitignoreNeedsCodeshield = true;
+    }
+    if (gitignoreNeedsEnv || gitignoreNeedsCodeshield) {
+        const linesToAdd = [];
+        if (gitignoreNeedsEnv) {
+            linesToAdd.push('# CodeShield: Ignore local environment credentials', '.env', '.env.local', '.env.*.local');
+        }
+        if (gitignoreNeedsCodeshield) {
+            linesToAdd.push('# CodeShield: Ignore local scan history cache', '.codeshield/');
+        }
+        const diffLines = linesToAdd.map(l => `+ ${l}`);
+        const backupPath = gitignoreExists ? `${gitignorePath}.codeshield.bak` : undefined;
+        fixes.push({
+            id: 'FIX-GITIGNORE',
+            title: gitignoreExists
+                ? 'Add .env and .codeshield/ to .gitignore'
+                : 'Create .gitignore with .env and .codeshield/',
+            filePath: gitignorePath,
+            relativePath: '.gitignore',
+            isCreation: !gitignoreExists,
+            ...(backupPath ? { backupPath } : {}),
+            diffLines,
+            apply: () => {
+                if (gitignoreExists) {
+                    fs.copyFileSync(gitignorePath, backupPath);
+                    const current = fs.readFileSync(gitignorePath, 'utf8');
+                    const prefix = current.endsWith('\n') || current.length === 0 ? '' : '\n';
+                    fs.appendFileSync(gitignorePath, prefix + linesToAdd.join('\n') + '\n', 'utf8');
+                }
+                else {
+                    fs.writeFileSync(gitignorePath, linesToAdd.join('\n') + '\n', 'utf8');
+                }
+            },
+        });
+    }
+    const envExamplePath = resolveSafePath(safeRoot, '.env.example');
+    const envExampleExists = fs.existsSync(envExamplePath);
+    if (envExists && !envExampleExists) {
+        const envContent = fs.readFileSync(envPath, 'utf8');
+        const exampleContent = generateEnvExampleContent(envContent);
+        const diffLines = exampleContent.trim().split('\n').map(l => `+ ${l}`);
+        fixes.push({
+            id: 'FIX-ENV-EXAMPLE',
+            title: 'Create .env.example template from .env',
+            filePath: envExamplePath,
+            relativePath: '.env.example',
+            isCreation: true,
+            diffLines,
+            apply: () => {
+                fs.writeFileSync(envExamplePath, exampleContent, 'utf8');
+            },
+        });
+    }
+    return fixes;
+}
+export function formatFixDiff(fixes) {
+    const lines = [
+        '\nCodeShield Fix Plan:',
+        '────────────────────────────────────────────────────────────',
+    ];
+    for (let i = 0; i < fixes.length; i++) {
+        const fix = fixes[i];
+        lines.push(`[${i + 1}] ${fix.title}`);
+        lines.push(`    Target : ${fix.relativePath}`);
+        if (fix.backupPath) {
+            lines.push(`    Backup : ${path.basename(fix.backupPath)}`);
+        }
+        lines.push('    Changes:');
+        for (const d of fix.diffLines) {
+            lines.push(`      ${d}`);
+        }
+        lines.push('');
+    }
+    lines.push('────────────────────────────────────────────────────────────');
+    return lines.join('\n');
+}
+export async function promptConfirmation(question) {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    return new Promise((resolve) => {
+        rl.question(question, (answer) => {
+            rl.close();
+            const trimmed = answer.trim().toLowerCase();
+            resolve(trimmed === 'y' || trimmed === 'yes');
+        });
+    });
+}
+export async function runFix(root, autoConfirm = false) {
+    const safeRoot = path.resolve(root);
+    let fixes;
+    try {
+        fixes = planFixes(safeRoot);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`Error planning fixes: ${sanitize(msg)}`);
+        return 2;
+    }
+    if (fixes.length === 0) {
+        console.log('\n✅ No automatic fixes needed. Codebase looks clean!');
+        return 0;
+    }
+    console.log(formatFixDiff(fixes));
+    if (!autoConfirm) {
+        const confirmed = await promptConfirmation('Apply these changes? [y/N]: ');
+        if (!confirmed) {
+            console.log('\nOperation cancelled. No files were modified.');
+            return 0;
+        }
+    }
+    try {
+        for (const fix of fixes) {
+            fix.apply();
+            console.log(`✅ Applied: ${fix.title}`);
+            if (fix.backupPath) {
+                console.log(`   (Backup created at ${path.basename(fix.backupPath)})`);
+            }
+        }
+        console.log(`\n🎉 Successfully applied ${fixes.length} fix${fixes.length === 1 ? '' : 'es'}.\n`);
+        return 0;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`Error applying fixes: ${sanitize(msg)}`);
+        return 2;
+    }
+}
+//# sourceMappingURL=fixer.js.map

package/dist/fix/fixer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixer.js","sourceRoot":"","sources":["../../src/fix/fixer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAE1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAahD,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,YAAoB;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAEhE,IAAI,cAAc,KAAK,YAAY,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CACb,qCAAqC,QAAQ,CAAC,YAAY,CAAC,+BAA+B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAC5G,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAkB;IAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAa;QACvB,0CAA0C;QAC1C,oEAAoE;QACpE,EAAE;KACH,CAAC;IAEF,MAAM,gBAAgB,GAAG,2GAA2G,CAAC;IAErI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5C,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACrD,MAAM,WAAW,GAAG,QAAQ,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAEzC,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAErD,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,wBAAwB,GAAG,KAAK,CAAC;IAErC,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAChE,iBAAiB,GAAG,SAAS,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACpF,wBAAwB,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,iBAAiB,GAAG,IAAI,CAAC;QACzB,wBAAwB,GAAG,IAAI,CAAC;IAClC,CAAC;IAED,IAAI,iBAAiB,IAAI,wBAAwB,EAAE,CAAC;QAClD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,iBAAiB,EAAE,CAAC;YACtB,UAAU,CAAC,IAAI,CACb,oDAAoD,EACpD,MAAM,EACN,YAAY,EACZ,cAAc,CACf,CAAC;QACJ,CAAC;QACD,IAAI,wBAAwB,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CACb,+CAA+C,EAC/C,cAAc,CACf,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,aAAa,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;QAEnF,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,eAAe;gBACpB,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,8CAA8C;YAClD,QAAQ,EAAE,aAAa;YACvB,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,CAAC,eAAe;YAC5B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,SAAS;YACT,KAAK,EAAE,GAAG,EAAE;gBACV,IAAI,eAAe,EAAE,CAAC;oBACpB,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,UAAW,CAAC,CAAC;oBAC5C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;oBACvD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC1E,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;gBAClF,CAAC;qBAAM,CAAC;oBACN,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,eAAe,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEvD,IAAI,SAAS,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,cAAc,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEvE,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,iBAAiB;YACrB,KAAK,EAAE,wCAAwC;YAC/C,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,cAAc;YAC5B,UAAU,EAAE,IAAI;YAChB,SAAS;YACT,KAAK,EAAE,GAAG,EAAE;gBACV,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;YAC3D,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,MAAM,KAAK,GAAa;QACtB,wBAAwB;QACxB,8DAA8D;KAC/D,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5C,OAAO,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,WAAW,GAAG,KAAK;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpC,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,yBAAyB,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAElC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YACvC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;QACjG,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,yBAAyB,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/fix/history.d.ts

@@ -0,0 +1,23 @@
+import { Finding } from '../types.js';
+export interface ScanSnapshot {
+    timestamp: number;
+    score: number;
+    grade: string;
+    findingsCount: number;
+    findingFingerprints: string[];
+}
+export interface HistoryComparison {
+    previousScore: number;
+    currentScore: number;
+    scoreDiff: number;
+    fixedCount: number;
+    newCount: number;
+    summaryText: string;
+}
+export declare function getFindingFingerprint(f: Finding): string;
+export declare function getHistoryFilePath(root: string): string;
+export declare function readLastScan(root: string): ScanSnapshot | null;
+export declare function saveLastScan(root: string, score: number, grade: string, findings: readonly Finding[]): void;
+export declare function ensureCodeshieldInGitignore(root: string): void;
+export declare function compareWithLastScan(previous: ScanSnapshot, currentScore: number, currentFindings: readonly Finding[]): HistoryComparison;
+//# sourceMappingURL=history.d.ts.map

package/dist/fix/history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../src/fix/history.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAExD;AAKD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAa9D;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,IAAI,CAsBN;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAgB9D;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,EACtB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,SAAS,OAAO,EAAE,GAClC,iBAAiB,CA4CnB"}