@nikhil_telkar/codeshield 0.0.0-stage → 0.1.1

package/dist/fix/history.js

@@ -0,0 +1,107 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+export function getFindingFingerprint(f) {
+    return `${f.ruleId}:${f.file}:${f.line}`;
+}
+const HISTORY_DIR = '.codeshield';
+const HISTORY_FILE = 'last-scan.json';
+export function getHistoryFilePath(root) {
+    return path.join(path.resolve(root), HISTORY_DIR, HISTORY_FILE);
+}
+export function readLastScan(root) {
+    try {
+        const filePath = getHistoryFilePath(root);
+        if (!fs.existsSync(filePath))
+            return null;
+        const content = fs.readFileSync(filePath, 'utf8');
+        const parsed = JSON.parse(content);
+        if (typeof parsed.score === 'number' && Array.isArray(parsed.findingFingerprints)) {
+            return parsed;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+export function saveLastScan(root, score, grade, findings) {
+    try {
+        const dirPath = path.join(path.resolve(root), HISTORY_DIR);
+        if (!fs.existsSync(dirPath)) {
+            fs.mkdirSync(dirPath, { recursive: true });
+        }
+        const snapshot = {
+            timestamp: Date.now(),
+            score,
+            grade,
+            findingsCount: findings.length,
+            findingFingerprints: findings.map(getFindingFingerprint),
+        };
+        const filePath = path.join(dirPath, HISTORY_FILE);
+        fs.writeFileSync(filePath, JSON.stringify(snapshot, null, 2), 'utf8');
+        ensureCodeshieldInGitignore(root);
+    }
+    catch {
+        // fail silently — history recording should never crash the scan
+    }
+}
+export function ensureCodeshieldInGitignore(root) {
+    try {
+        const gitignorePath = path.join(path.resolve(root), '.gitignore');
+        if (!fs.existsSync(gitignorePath))
+            return;
+        const content = fs.readFileSync(gitignorePath, 'utf8');
+        if (content.includes('.codeshield'))
+            return;
+        const addition = content.endsWith('\n') || content.length === 0
+            ? '.codeshield/\n'
+            : '\n.codeshield/\n';
+        fs.appendFileSync(gitignorePath, addition, 'utf8');
+    }
+    catch {
+        // fail silently
+    }
+}
+export function compareWithLastScan(previous, currentScore, currentFindings) {
+    const currentFingerprints = new Set(currentFindings.map(getFindingFingerprint));
+    const previousFingerprints = new Set(previous.findingFingerprints);
+    let fixedCount = 0;
+    for (const fp of previousFingerprints) {
+        if (!currentFingerprints.has(fp)) {
+            fixedCount++;
+        }
+    }
+    let newCount = 0;
+    for (const fp of currentFingerprints) {
+        if (!previousFingerprints.has(fp)) {
+            newCount++;
+        }
+    }
+    const scoreDiff = currentScore - previous.score;
+    let summaryText = '';
+    const fixedLabel = `${fixedCount} issue${fixedCount === 1 ? '' : 's'} fixed`;
+    const newLabel = `${newCount} new issue${newCount === 1 ? '' : 's'}`;
+    if (scoreDiff > 0) {
+        summaryText = `Score improved ${previous.score} -> ${currentScore}, ${fixedLabel}${newCount > 0 ? `, ${newLabel}` : ''}.`;
+    }
+    else if (scoreDiff < 0) {
+        summaryText = `Score dropped ${previous.score} -> ${currentScore}, ${newLabel}${fixedCount > 0 ? `, ${fixedLabel}` : ''}.`;
+    }
+    else {
+        if (fixedCount > 0 || newCount > 0) {
+            summaryText = `Score unchanged at ${currentScore}, ${fixedLabel}, ${newLabel}.`;
+        }
+        else {
+            summaryText = `Score unchanged at ${currentScore}.`;
+        }
+    }
+    return {
+        previousScore: previous.score,
+        currentScore,
+        scoreDiff,
+        fixedCount,
+        newCount,
+        summaryText,
+    };
+}
+//# sourceMappingURL=history.js.map

package/dist/fix/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/fix/history.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAoBlC,MAAM,UAAU,qBAAqB,CAAC,CAAU;IAC9C,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAEtC,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC;QACnD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAClF,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,KAAa,EACb,KAAa,EACb,QAA4B;IAE5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,QAAQ,GAAiB;YAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK;YACL,KAAK;YACL,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC;SACzD,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAClD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEtE,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,OAAO;QAE1C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,OAAO;QAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAC7D,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,kBAAkB,CAAC;QAEvB,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAsB,EACtB,YAAoB,EACpB,eAAmC;IAEnC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAChF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAEnE,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;QACtC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC;QACrC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAClC,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChD,IAAI,WAAW,GAAG,EAAE,CAAC;IAErB,MAAM,UAAU,GAAG,GAAG,UAAU,SAAS,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;IAC7E,MAAM,QAAQ,GAAG,GAAG,QAAQ,aAAa,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAErE,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,WAAW,GAAG,kBAAkB,QAAQ,CAAC,KAAK,OAAO,YAAY,KAAK,UAAU,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IAC5H,CAAC;SAAM,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACzB,WAAW,GAAG,iBAAiB,QAAQ,CAAC,KAAK,OAAO,YAAY,KAAK,QAAQ,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IAC7H,CAAC;SAAM,CAAC;QACN,IAAI,UAAU,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACnC,WAAW,GAAG,sBAAsB,YAAY,KAAK,UAAU,KAAK,QAAQ,GAAG,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,sBAAsB,YAAY,GAAG,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,KAAK;QAC7B,YAAY;QACZ,SAAS;QACT,UAAU;QACV,QAAQ;QACR,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/fix/index.d.ts

@@ -0,0 +1,3 @@
+export * from './fixer.js';
+export * from './history.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/fix/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fix/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC"}

package/dist/fix/index.js

@@ -0,0 +1,3 @@
+export * from './fixer.js';
+export * from './history.js';
+//# sourceMappingURL=index.js.map

package/dist/fix/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fix/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export * from './types.js';
+export * from './utils/constants.js';
+export * from './utils/sanitize.js';
+export * from './engine/index.js';
+export * from './report/index.js';
+export * from './scanners/index.js';
+export * from './fix/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export * from './types.js';
+export * from './utils/constants.js';
+export * from './utils/sanitize.js';
+export * from './engine/index.js';
+export * from './report/index.js';
+export * from './scanners/index.js';
+export * from './fix/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC"}

package/dist/report/colors.d.ts

@@ -0,0 +1,21 @@
+import { Severity } from '../types.js';
+export interface ColorOptions {
+    enabled?: boolean;
+}
+export declare function areColorsEnabled(options?: ColorOptions): boolean;
+export declare class Colorizer {
+    private readonly enabled;
+    constructor(options?: ColorOptions);
+    private style;
+    bold(text: string): string;
+    dim(text: string): string;
+    red(text: string): string;
+    green(text: string): string;
+    yellow(text: string): string;
+    cyan(text: string): string;
+    blue(text: string): string;
+    magenta(text: string): string;
+    severityBadge(sev: Severity): string;
+    scoreBadge(score: number, grade: string): string;
+}
+//# sourceMappingURL=colors.d.ts.map

package/dist/report/colors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.d.ts","sourceRoot":"","sources":["../../src/report/colors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAQhE;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;gBAEtB,OAAO,CAAC,EAAE,YAAY;IAIlC,OAAO,CAAC,KAAK;IAIb,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI1B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIzB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIzB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI1B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI1B,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI7B,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM;IAepC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;CAQjD"}

package/dist/report/colors.js

@@ -0,0 +1,70 @@
+import { styleText } from 'node:util';
+export function areColorsEnabled(options) {
+    if (options?.enabled !== undefined) {
+        return options.enabled;
+    }
+    if (process.env['NO_COLOR'] !== undefined && process.env['NO_COLOR'] !== '') {
+        return false;
+    }
+    return Boolean(process.stdout && process.stdout.isTTY);
+}
+export class Colorizer {
+    enabled;
+    constructor(options) {
+        this.enabled = areColorsEnabled(options);
+    }
+    style(format, text) {
+        return this.enabled ? styleText(format, text, { validateStream: false }) : text;
+    }
+    bold(text) {
+        return this.style('bold', text);
+    }
+    dim(text) {
+        return this.style('dim', text);
+    }
+    red(text) {
+        return this.style('red', text);
+    }
+    green(text) {
+        return this.style('green', text);
+    }
+    yellow(text) {
+        return this.style('yellow', text);
+    }
+    cyan(text) {
+        return this.style('cyan', text);
+    }
+    blue(text) {
+        return this.style('blue', text);
+    }
+    magenta(text) {
+        return this.style('magenta', text);
+    }
+    severityBadge(sev) {
+        switch (sev) {
+            case 'critical':
+                return this.bold(this.red('🔴 CRITICAL'));
+            case 'high':
+                return this.bold(this.yellow('🟠 HIGH'));
+            case 'medium':
+                return this.yellow('🟡 MEDIUM');
+            case 'low':
+                return this.blue('🔵 LOW');
+            case 'info':
+                return this.dim('⚪ INFO');
+        }
+    }
+    scoreBadge(score, grade) {
+        const label = `${score}/100 [Grade ${grade}]`;
+        if (score >= 90)
+            return this.bold(this.green(label));
+        if (score >= 75)
+            return this.bold(this.cyan(label));
+        if (score >= 60)
+            return this.bold(this.yellow(label));
+        if (score >= 40)
+            return this.bold(this.red(label));
+        return this.bold(this.red(`⚠️  ${label}`));
+    }
+}
+//# sourceMappingURL=colors.js.map

package/dist/report/colors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.js","sourceRoot":"","sources":["../../src/report/colors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAOtC,MAAM,UAAU,gBAAgB,CAAC,OAAsB;IACrD,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,OAAO,SAAS;IACH,OAAO,CAAU;IAElC,YAAY,OAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,MAAuC,EAAE,IAAY;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAED,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAY;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,aAAa,CAAC,GAAa;QACzB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;YAC5C,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3C,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClC,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,KAAa;QACrC,MAAM,KAAK,GAAG,GAAG,KAAK,eAAe,KAAK,GAAG,CAAC;QAC9C,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/report/index.d.ts

@@ -0,0 +1,15 @@
+import { ScanResult } from '../types.js';
+import { ScoreDetails } from './score.js';
+import { TerminalReportOptions } from './terminal.js';
+export * from './score.js';
+export * from './colors.js';
+export * from './terminal.js';
+export * from './sarif.js';
+export type ReportMode = 'simple' | 'detailed' | 'json' | 'sarif';
+export interface ReportOptions extends TerminalReportOptions {
+    mode?: ReportMode;
+    version?: string;
+}
+export declare function formatJsonReport(result: ScanResult, scoreDetails?: ScoreDetails): string;
+export declare function renderReport(result: ScanResult, options?: ReportOptions): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/report/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/report/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAkB,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAA4C,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGhG,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAE3B,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;AAElE,MAAM,WAAW,aAAc,SAAQ,qBAAqB;IAC1D,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,YAAY,GAAG,MAAM,CAexF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,aAAkB,GAAG,MAAM,CAepF"}

package/dist/report/index.js

@@ -0,0 +1,39 @@
+import { calculateScore } from './score.js';
+import { formatSimpleReport, formatDetailedReport } from './terminal.js';
+import { formatSarifReport } from './sarif.js';
+export * from './score.js';
+export * from './colors.js';
+export * from './terminal.js';
+export * from './sarif.js';
+export function formatJsonReport(result, scoreDetails) {
+    const details = scoreDetails ?? calculateScore(result.findings);
+    const payload = {
+        score: details.score,
+        grade: details.grade,
+        gradeLabel: details.gradeLabel,
+        projectType: result.projectType,
+        filesScanned: result.filesScanned,
+        filesSkipped: result.filesSkipped,
+        truncated: result.truncated,
+        durationMs: result.durationMs,
+        summary: details.countsBySeverity,
+        findings: result.findings,
+    };
+    return JSON.stringify(payload, null, 2);
+}
+export function renderReport(result, options = {}) {
+    const mode = options.mode ?? 'simple';
+    const scoreDetails = calculateScore(result.findings);
+    switch (mode) {
+        case 'json':
+            return formatJsonReport(result, scoreDetails);
+        case 'sarif':
+            return formatSarifReport(result, options.version ?? '0.1.0');
+        case 'detailed':
+            return formatDetailedReport(result, scoreDetails, options);
+        case 'simple':
+        default:
+            return formatSimpleReport(result, scoreDetails, options);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/report/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/report/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAgB,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAyB,MAAM,eAAe,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAS3B,MAAM,UAAU,gBAAgB,CAAC,MAAkB,EAAE,YAA2B;IAC9E,MAAM,OAAO,GAAG,YAAY,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,OAAO,CAAC,gBAAgB;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,UAAyB,EAAE;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;IACtC,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAErD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,OAAO,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAChD,KAAK,OAAO;YACV,OAAO,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;QAC/D,KAAK,UAAU;YACb,OAAO,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAC7D,KAAK,QAAQ,CAAC;QACd;YACE,OAAO,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/report/sarif.d.ts

@@ -0,0 +1,44 @@
+import { ScanResult } from '../types.js';
+export interface SarifOutput {
+    $schema: string;
+    version: string;
+    runs: Array<{
+        tool: {
+            driver: {
+                name: string;
+                version: string;
+                informationUri: string;
+                rules: Array<{
+                    id: string;
+                    name: string;
+                    shortDescription: {
+                        text: string;
+                    };
+                    help: {
+                        text: string;
+                    };
+                    properties?: Record<string, unknown>;
+                }>;
+            };
+        };
+        results: Array<{
+            ruleId: string;
+            level: 'error' | 'warning' | 'note' | 'none';
+            message: {
+                text: string;
+            };
+            locations: Array<{
+                physicalLocation: {
+                    artifactLocation: {
+                        uri: string;
+                    };
+                    region: {
+                        startLine: number;
+                    };
+                };
+            }>;
+        }>;
+    }>;
+}
+export declare function formatSarifReport(result: ScanResult, version?: string): string;
+//# sourceMappingURL=sarif.d.ts.map

package/dist/report/sarif.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.d.ts","sourceRoot":"","sources":["../../src/report/sarif.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,UAAU,EAAY,MAAM,aAAa,CAAC;AAG5D,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,KAAK,CAAC;QACV,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC;gBACb,OAAO,EAAE,MAAM,CAAC;gBAChB,cAAc,EAAE,MAAM,CAAC;gBACvB,KAAK,EAAE,KAAK,CAAC;oBACX,EAAE,EAAE,MAAM,CAAC;oBACX,IAAI,EAAE,MAAM,CAAC;oBACb,gBAAgB,EAAE;wBAAE,IAAI,EAAE,MAAM,CAAA;qBAAE,CAAC;oBACnC,IAAI,EAAE;wBAAE,IAAI,EAAE,MAAM,CAAA;qBAAE,CAAC;oBACvB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;iBACtC,CAAC,CAAC;aACJ,CAAC;SACH,CAAC;QACF,OAAO,EAAE,KAAK,CAAC;YACb,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;YAC7C,OAAO,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC;YAC1B,SAAS,EAAE,KAAK,CAAC;gBACf,gBAAgB,EAAE;oBAChB,gBAAgB,EAAE;wBAAE,GAAG,EAAE,MAAM,CAAA;qBAAE,CAAC;oBAClC,MAAM,EAAE;wBAAE,SAAS,EAAE,MAAM,CAAA;qBAAE,CAAC;iBAC/B,CAAC;aACH,CAAC,CAAC;SACJ,CAAC,CAAC;KACJ,CAAC,CAAC;CACJ;AAgBD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,SAAU,GAAG,MAAM,CA0D/E"}

package/dist/report/sarif.js

@@ -0,0 +1,69 @@
+import { sanitize } from '../utils/sanitize.js';
+function severityToSarifLevel(sev) {
+    switch (sev) {
+        case 'critical':
+        case 'high':
+            return 'error';
+        case 'medium':
+            return 'warning';
+        case 'low':
+            return 'note';
+        case 'info':
+            return 'none';
+    }
+}
+export function formatSarifReport(result, version = '0.1.0') {
+    const rulesMap = new Map();
+    for (const f of result.findings) {
+        if (!rulesMap.has(f.ruleId)) {
+            rulesMap.set(f.ruleId, {
+                id: f.ruleId,
+                name: sanitize(f.title),
+                description: sanitize(f.plainExplanation),
+                fix: sanitize(f.fix),
+                ...(f.cwe ? { cwe: f.cwe } : {}),
+            });
+        }
+    }
+    const sarifRules = Array.from(rulesMap.values()).map(r => ({
+        id: r.id,
+        name: r.name,
+        shortDescription: { text: r.name },
+        help: { text: `${r.description}\n\nFix: ${r.fix}` },
+        properties: {
+            tags: ['security', ...(r.cwe ? [r.cwe] : [])],
+        },
+    }));
+    const sarifResults = result.findings.map(f => ({
+        ruleId: f.ruleId,
+        level: severityToSarifLevel(f.severity),
+        message: { text: `${sanitize(f.title)}: ${sanitize(f.plainExplanation)}` },
+        locations: [
+            {
+                physicalLocation: {
+                    artifactLocation: { uri: f.file },
+                    region: { startLine: Math.max(1, f.line) },
+                },
+            },
+        ],
+    }));
+    const sarif = {
+        $schema: 'https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json',
+        version: '2.1.0',
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: 'CodeShield',
+                        version,
+                        informationUri: 'https://github.com/nikhiltelkar2005-glitch/codeshield_npm_package',
+                        rules: sarifRules,
+                    },
+                },
+                results: sarifResults,
+            },
+        ],
+    };
+    return JSON.stringify(sarif, null, 2);
+}
+//# sourceMappingURL=sarif.js.map

package/dist/report/sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/report/sarif.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAkChD,SAAS,oBAAoB,CAAC,GAAa;IACzC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,UAAU,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC;QACnB,KAAK,KAAK;YACR,OAAO,MAAM,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAkB,EAAE,OAAO,GAAG,OAAO;IACrE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwF,CAAC;IAEjH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE;gBACrB,EAAE,EAAE,CAAC,CAAC,MAAM;gBACZ,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;gBACvB,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBACzC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;gBACpB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzD,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAClC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE;QACnD,UAAU,EAAE;YACV,IAAI,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC9C;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE;QAC1E,SAAS,EAAE;YACT;gBACE,gBAAgB,EAAE;oBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE;oBACjC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE;iBAC3C;aACF;SACF;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,KAAK,GAAgB;QACzB,OAAO,EAAE,gGAAgG;QACzG,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,YAAY;wBAClB,OAAO;wBACP,cAAc,EAAE,mEAAmE;wBACnF,KAAK,EAAE,UAAU;qBAClB;iBACF;gBACD,OAAO,EAAE,YAAY;aACtB;SACF;KACF,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/report/score.d.ts

@@ -0,0 +1,14 @@
+import { Finding, Severity } from '../types.js';
+export declare const SEVERITY_WEIGHTS: Record<Severity, number>;
+export declare const MAX_DEDUCTION_PER_RULE = 35;
+export type LetterGrade = 'A' | 'B' | 'C' | 'D' | 'F';
+export interface ScoreDetails {
+    score: number;
+    grade: LetterGrade;
+    gradeLabel: string;
+    totalFindings: number;
+    deductionsByRule: Record<string, number>;
+    countsBySeverity: Record<Severity, number>;
+}
+export declare function calculateScore(findings: readonly Finding[]): ScoreDetails;
+//# sourceMappingURL=score.d.ts.map

package/dist/report/score.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.d.ts","sourceRoot":"","sources":["../../src/report/score.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEhD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAMrD,CAAC;AAEF,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,MAAM,MAAM,WAAW,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AAEtD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,WAAW,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,YAAY,CAsDzE"}

package/dist/report/score.js

@@ -0,0 +1,62 @@
+export const SEVERITY_WEIGHTS = {
+    critical: 25,
+    high: 15,
+    medium: 8,
+    low: 3,
+    info: 0,
+};
+export const MAX_DEDUCTION_PER_RULE = 35;
+export function calculateScore(findings) {
+    const deductionsByRule = {};
+    const countsBySeverity = {
+        critical: 0,
+        high: 0,
+        medium: 0,
+        low: 0,
+        info: 0,
+    };
+    for (const f of findings) {
+        countsBySeverity[f.severity] = (countsBySeverity[f.severity] ?? 0) + 1;
+        const penalty = SEVERITY_WEIGHTS[f.severity] ?? 0;
+        deductionsByRule[f.ruleId] = (deductionsByRule[f.ruleId] ?? 0) + penalty;
+    }
+    let totalDeductions = 0;
+    for (const ruleId of Object.keys(deductionsByRule)) {
+        const rawPenalty = deductionsByRule[ruleId] ?? 0;
+        const cappedPenalty = Math.min(rawPenalty, MAX_DEDUCTION_PER_RULE);
+        deductionsByRule[ruleId] = cappedPenalty;
+        totalDeductions += cappedPenalty;
+    }
+    const score = Math.max(0, Math.min(100, Math.round(100 - totalDeductions)));
+    let grade;
+    let gradeLabel;
+    if (score >= 90) {
+        grade = 'A';
+        gradeLabel = 'Excellent';
+    }
+    else if (score >= 75) {
+        grade = 'B';
+        gradeLabel = 'Good';
+    }
+    else if (score >= 60) {
+        grade = 'C';
+        gradeLabel = 'Needs Improvement';
+    }
+    else if (score >= 40) {
+        grade = 'D';
+        gradeLabel = 'Poor';
+    }
+    else {
+        grade = 'F';
+        gradeLabel = 'Critical Attention Required';
+    }
+    return {
+        score,
+        grade,
+        gradeLabel,
+        totalFindings: findings.length,
+        deductionsByRule,
+        countsBySeverity,
+    };
+}
+//# sourceMappingURL=score.js.map

package/dist/report/score.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.js","sourceRoot":"","sources":["../../src/report/score.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gBAAgB,GAA6B;IACxD,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAazC,MAAM,UAAU,cAAc,CAAC,QAA4B;IACzD,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IACpD,MAAM,gBAAgB,GAA6B;QACjD,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClD,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC;IAC3E,CAAC;IAED,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QACnE,gBAAgB,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC;QACzC,eAAe,IAAI,aAAa,CAAC;IACnC,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IAE5E,IAAI,KAAkB,CAAC;IACvB,IAAI,UAAkB,CAAC;IAEvB,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,KAAK,GAAG,GAAG,CAAC;QACZ,UAAU,GAAG,WAAW,CAAC;IAC3B,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,KAAK,GAAG,GAAG,CAAC;QACZ,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,KAAK,GAAG,GAAG,CAAC;QACZ,UAAU,GAAG,mBAAmB,CAAC;IACnC,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,KAAK,GAAG,GAAG,CAAC;QACZ,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,GAAG,CAAC;QACZ,UAAU,GAAG,6BAA6B,CAAC;IAC7C,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK;QACL,UAAU;QACV,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,gBAAgB;QAChB,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/report/terminal.d.ts

@@ -0,0 +1,10 @@
+import { ScanResult } from '../types.js';
+import { ColorOptions } from './colors.js';
+import { ScoreDetails } from './score.js';
+export interface TerminalReportOptions extends ColorOptions {
+    detailed?: boolean;
+    historyText?: string;
+}
+export declare function formatSimpleReport(result: ScanResult, scoreDetails: ScoreDetails, options?: TerminalReportOptions): string;
+export declare function formatDetailedReport(result: ScanResult, scoreDetails: ScoreDetails, options?: TerminalReportOptions): string;
+//# sourceMappingURL=terminal.d.ts.map

package/dist/report/terminal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.d.ts","sourceRoot":"","sources":["../../src/report/terminal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,UAAU,EAAY,MAAM,aAAa,CAAC;AAG5D,OAAO,EAAa,YAAY,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,WAAW,qBAAsB,SAAQ,YAAY;IACzD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA4DD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,UAAU,EAClB,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE,qBAAqB,GAC9B,MAAM,CA6BR;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,UAAU,EAClB,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE,qBAAqB,GAC9B,MAAM,CAmBR"}

package/dist/report/terminal.js

@@ -0,0 +1,77 @@
+import { SEVERITIES } from '../utils/constants.js';
+import { sanitize } from '../utils/sanitize.js';
+import { Colorizer } from './colors.js';
+function formatSummaryLine(result, scoreDetails, c, options) {
+    const parts = [];
+    for (const sev of SEVERITIES) {
+        const count = scoreDetails.countsBySeverity[sev] ?? 0;
+        if (count > 0) {
+            parts.push(`${count} ${sev}`);
+        }
+    }
+    const findingsText = parts.length > 0 ? parts.join(', ') : '0 findings';
+    const duration = `${result.durationMs}ms`;
+    const scanned = `${result.filesScanned} file${result.filesScanned === 1 ? '' : 's'}${result.truncated ? ' (truncated)' : ''}`;
+    const lines = [
+        `\n${c.dim('────────────────────────────────────────────────────────────')}`,
+        `${c.bold('Security Score')} : ${c.scoreBadge(scoreDetails.score, scoreDetails.grade)} (${scoreDetails.gradeLabel})`,
+    ];
+    if (options?.historyText) {
+        lines.push(`${c.bold('Progress      ')} : ${c.cyan(options.historyText)}`);
+    }
+    lines.push(`${c.bold('Files Scanned ')} : ${scanned}`, `${c.bold('Findings      ')} : ${scoreDetails.totalFindings} [${findingsText}]`, `${c.bold('Duration      ')} : ${duration}`, c.dim('────────────────────────────────────────────────────────────'));
+    return lines.join('\n');
+}
+function formatFindingBlock(f, c, isDetailed = false) {
+    const lines = [
+        `\n${c.severityBadge(f.severity)} [${c.bold(f.ruleId)}] ${c.bold(sanitize(f.title))}`,
+        `  ${c.dim('File     ')} : ${c.cyan(sanitize(f.file))}:${c.cyan(String(f.line))}`,
+    ];
+    if (f.snippet) {
+        lines.push(`  ${c.dim('Line     ')} : ${c.dim(sanitize(f.snippet))}`);
+    }
+    if (isDetailed && f.cwe) {
+        lines.push(`  ${c.dim('CWE      ')} : ${sanitize(f.cwe)}`);
+    }
+    lines.push(`  ${c.dim('Issue    ')} : ${sanitize(f.plainExplanation)}`);
+    lines.push(`  ${c.dim('Fix      ')} : ${c.green(sanitize(f.fix))}`);
+    lines.push(`  ${c.dim('AI Prompt')} : ${c.bold(sanitize(f.aiPrompt))}`);
+    return lines.join('\n');
+}
+export function formatSimpleReport(result, scoreDetails, options) {
+    const c = new Colorizer(options);
+    const out = [];
+    out.push(formatSummaryLine(result, scoreDetails, c, options));
+    if (result.findings.length === 0) {
+        out.push(`\n${c.bold(c.green('✅ No security issues found. Codebase looks clean!'))}\n`);
+        return out.join('\n');
+    }
+    const topCount = Math.min(5, Math.max(3, Math.min(5, result.findings.length)));
+    const topFindings = result.findings.slice(0, topCount);
+    out.push(`\n${c.bold('🎯 Fix These First (Top Priorities):')}`);
+    for (const f of topFindings) {
+        out.push(formatFindingBlock(f, c, false));
+    }
+    if (result.findings.length > topCount) {
+        const remaining = result.findings.length - topCount;
+        out.push(`\n${c.dim(`... and ${remaining} more finding${remaining === 1 ? '' : 's'}. Run with --detailed to view all findings.`)}`);
+    }
+    out.push('');
+    return out.join('\n');
+}
+export function formatDetailedReport(result, scoreDetails, options) {
+    const c = new Colorizer(options);
+    const out = [];
+    out.push(formatSummaryLine(result, scoreDetails, c, options));
+    if (result.findings.length === 0) {
+        out.push(`\n${c.bold(c.green('✅ No security issues found. Codebase looks clean!'))}\n`);
+        return out.join('\n');
+    }
+    out.push(`\n${c.bold(`📋 All Findings (${result.findings.length}):`)}`);
+    for (const f of result.findings) {
+        out.push(formatFindingBlock(f, c, true));
+    }
+    out.push('');
+    return out.join('\n');
+}
+//# sourceMappingURL=terminal.js.map