@prism-d1/cli 1.1.2 → 1.3.0

package/dist/src/commands/git/commit-trailers.js.map

@@ -1 +1 @@
-{"version":3,"file":"commit-trailers.js","sourceRoot":"","sources":["../../../../src/commands/git/commit-trailers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,cAAc,EAAuB,MAAM,gCAAgC,CAAC;AAYrF,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAE5E,SAAS,OAAO,CAAC,QAAiB;IAChC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,CAAC;IAE5C,cAAc;IACd,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAClD,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,aAAa,CAAC;QACrB,KAAK,GAAG,GAAG,CAAC,eAAe,IAAI,oBAAoB,CAAC;IACtD,CAAC;IAED,kGAAkG;IAClG,IACE,GAAG,CAAC,eAAe;QACnB,GAAG,CAAC,YAAY;QAChB,GAAG,CAAC,YAAY,KAAK,MAAM;QAC3B,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpD,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EACxC,CAAC;QACD,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,MAAM,CAAC;QACd,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,qBAAqB;IACrB,IAAI,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC5B,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,aAAa,CAAC;IACvB,CAAC;IAED,4EAA4E;IAC5E,+EAA+E;IAC/E,2EAA2E;IAC3E,8EAA8E;IAC9E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,uBAAuB,IAAI,EAAE,IAAI,GAAG,CAAC,uBAAuB,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IACzI,IAAI,GAAG,CAAC,YAAY,KAAK,GAAG,IAAI,GAAG,CAAC,eAAe,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,QAAQ,CAAC;QAChB,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,gGAAgG;AAChG,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAW;IAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;IAEzC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;sDAGsD;AACtD,SAAS,WAAW,CAAC,aAAqB,EAAE,QAAiB;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,cAAc,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAK;QACb,CAAC,CAAC,SAAS,CAAC,0BAA0B,WAAW,cAAc,aAAa,iBAAiB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACjI,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAmB,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC/E,CAAC;AAED,iGAAiG;AACjG,SAAS,cAAc,CAAC,GAA0B;IAChD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,eAAuB,EAAE,aAAqB;IACtF,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,8EAA8E;QAC9E,4EAA4E;QAC5E,qEAAqE;QACrE,IAAI,GAAG,GAA0B,IAAI,CAAC;QACtC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAChC,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC5E,2EAA2E;QAC3E,6EAA6E;QAC7E,GAAG,GAAG,WAAW,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,GAAG,GAAG,WAAW,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,GAAG,GAAG,WAAW,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,GAAG,GAAG,WAAW,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QACvE,OAAO,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,CAAC;IACD,IAAI,GAAG,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;IAC7D,OAAO,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,CAAiB,EAAE,GAAmC;IACvE,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,gGAAgG;AAChG,SAAS,OAAO,CAAC,CAAiB;IAChC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAE,CAAS,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnF,2FAA2F;IAC3F,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,SAAS,GAAG,SAAS,EAAE,OAAO,GAAG,GAAG,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;gBAAE,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,+FAA+F;AAC/F,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,eAAe;IACb,WAAW,EAAE,mGAAmG;IAChH,OAAO,EAAE;QACP,EAAE,KAAK,EAAE,0BAA0B,EAAE,WAAW,EAAE,uFAAuF,EAAE;QAC3I,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,uEAAuE,EAAE;QACpH,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,6DAA6D,EAAE;KACvG;IACD,KAAK,CAAC,MAAM,CAAC,IAAgE;QAC3E,4BAA4B;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QAEhE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC;gBAAC,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxF,CAAC;QACD,4BAA4B;QAC5B,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO;QAE7C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAErD,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEtE,qEAAqE;QACrE,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,IAAI,GAAkB,IAAI,CAAC;QAE/B,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;YACxE,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;gBACpD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;gBAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAE/B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;gBAChE,gFAAgF;gBAChF,wEAAwE;gBACxE,0EAA0E;gBAC1E,iEAAiE;gBACjE,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,eAAe,IAAI,WAAW,OAAO,CAAC,CAAC;gBAElF,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAa,CAAC;wBACvE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC3D,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC9D,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;oBACjD,CAAC;oBAAC,MAAM,CAAC;wBACP,WAAW,GAAG,CAAC,CAAC;wBAAC,YAAY,GAAG,CAAC,CAAC;wBAAC,IAAI,GAAG,CAAC,CAAC;oBAC9C,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,wDAAwD;oBACxD,WAAW,GAAG,CAAC,CAAC;oBAAC,YAAY,GAAG,CAAC,CAAC;oBAAC,IAAI,GAAG,CAAC,CAAC;gBAC9C,CAAC;gBAED,uDAAuD;gBACvD,IAAI,CAAC;oBACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3C,MAAM,IAAI,GAAa,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBACnF,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,WAAW,KAAK,IAAI;YAAE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,YAAY,KAAK,IAAI;YAAE,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC5E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,OAAO;YAAE,IAAI,GAAG,OAAO,CAAC;QAGpD,sBAAsB;QACtB,MAAM,KAAK,GAAa,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;QAC5C,IAAI,WAAW,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAC;QACxE,IAAI,YAAY,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,YAAY,EAAE,CAAC,CAAC;QAC3E,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,mEAAmE;YACnE,IAAI,GAAG,GAAG,WAAW,CAAC;YACtB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;YAC3D,GAAG,IAAI,KAAK,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"commit-trailers.js","sourceRoot":"","sources":["../../../../src/commands/git/commit-trailers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,cAAc,EAAuB,MAAM,gCAAgC,CAAC;AAYrF,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAE5E,SAAS,OAAO,CAAC,QAAiB;IAChC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,CAAC;IAE5C,cAAc;IACd,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAClD,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,aAAa,CAAC;QACrB,KAAK,GAAG,GAAG,CAAC,eAAe,IAAI,oBAAoB,CAAC;IACtD,CAAC;IAED,kGAAkG;IAClG,IACE,GAAG,CAAC,eAAe;QACnB,GAAG,CAAC,YAAY;QAChB,GAAG,CAAC,YAAY,KAAK,MAAM;QAC3B,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpD,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EACxC,CAAC;QACD,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,MAAM,CAAC;QACd,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,qBAAqB;IACrB,IAAI,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC5B,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,aAAa,CAAC;IACvB,CAAC;IAED,4EAA4E;IAC5E,+EAA+E;IAC/E,2EAA2E;IAC3E,8EAA8E;IAC9E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,uBAAuB,IAAI,EAAE,IAAI,GAAG,CAAC,uBAAuB,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IACzI,IAAI,GAAG,CAAC,YAAY,KAAK,GAAG,IAAI,GAAG,CAAC,eAAe,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,GAAG,cAAc,CAAC;QACxB,IAAI,GAAG,QAAQ,CAAC;QAChB,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,gGAAgG;AAChG,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAW;IAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;IAEzC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;sDAGsD;AACtD,SAAS,WAAW,CAAC,aAAqB,EAAE,QAAiB;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,cAAc,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAK;QACb,CAAC,CAAC,SAAS,CAAC,0BAA0B,WAAW,cAAc,aAAa,iBAAiB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACjI,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAmB,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC/E,CAAC;AAED,iGAAiG;AACjG,SAAS,cAAc,CAAC,GAA0B;IAChD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,eAAuB,EAAE,aAAqB;IACtF,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,8EAA8E;QAC9E,4EAA4E;QAC5E,qEAAqE;QACrE,IAAI,GAAG,GAA0B,IAAI,CAAC;QACtC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAChC,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC5E,2EAA2E;QAC3E,6EAA6E;QAC7E,GAAG,GAAG,WAAW,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,GAAG,GAAG,WAAW,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,GAAG,GAAG,WAAW,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,GAAG,GAAG,WAAW,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QACvE,OAAO,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,CAAC;IACD,IAAI,GAAG,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;IAC7D,OAAO,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,CAAiB,EAAE,GAAmC;IACvE,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,gGAAgG;AAChG,SAAS,OAAO,CAAC,CAAiB;IAChC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAE,CAAS,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnF,2FAA2F;IAC3F,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,SAAS,GAAG,SAAS,EAAE,OAAO,GAAG,GAAG,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;gBAAE,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,+FAA+F;AAC/F,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,eAAe;IACb,WAAW,EAAE,oIAAoI;IACjJ,OAAO,EAAE;QACP,EAAE,KAAK,EAAE,0BAA0B,EAAE,WAAW,EAAE,uFAAuF,EAAE;QAC3I,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,uEAAuE,EAAE;QACpH,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,6DAA6D,EAAE;KACvG;IACD,KAAK,CAAC,MAAM,CAAC,IAAgE;QAC3E,4BAA4B;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QAEhE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC;gBAAC,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxF,CAAC;QACD,4BAA4B;QAC5B,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO;QAE7C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAErD,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEtE,qEAAqE;QACrE,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,IAAI,GAAkB,IAAI,CAAC;QAE/B,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;YACxE,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;gBACpD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;gBAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAE/B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;gBAChE,gFAAgF;gBAChF,wEAAwE;gBACxE,0EAA0E;gBAC1E,iEAAiE;gBACjE,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,eAAe,IAAI,WAAW,OAAO,CAAC,CAAC;gBAElF,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAa,CAAC;wBACvE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC3D,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC9D,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;oBACjD,CAAC;oBAAC,MAAM,CAAC;wBACP,WAAW,GAAG,CAAC,CAAC;wBAAC,YAAY,GAAG,CAAC,CAAC;wBAAC,IAAI,GAAG,CAAC,CAAC;oBAC9C,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,wDAAwD;oBACxD,WAAW,GAAG,CAAC,CAAC;oBAAC,YAAY,GAAG,CAAC,CAAC;oBAAC,IAAI,GAAG,CAAC,CAAC;gBAC9C,CAAC;gBAED,uDAAuD;gBACvD,IAAI,CAAC;oBACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3C,MAAM,IAAI,GAAa,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBACnF,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,WAAW,KAAK,IAAI;YAAE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,YAAY,KAAK,IAAI;YAAE,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC5E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,OAAO;YAAE,IAAI,GAAG,OAAO,CAAC;QAGpD,sBAAsB;QACtB,MAAM,KAAK,GAAa,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;QAC5C,IAAI,WAAW,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAC;QACxE,IAAI,YAAY,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,YAAY,EAAE,CAAC,CAAC;QAC3E,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,mEAAmE;YACnE,IAAI,GAAG,GAAG,WAAW,CAAC;YACtB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;YAC3D,GAAG,IAAI,KAAK,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/src/commands/security/code-review.d.ts

@@ -0,0 +1,22 @@
+import { type RunHooks } from '../enable/security.js';
+import { type CodeReviewOptions, type ReviewDeps } from '../../security/review.js';
+import type { SecurityOptions } from '../../security/setup.js';
+/** The real runtime: enable security's runners plus a timer, Ctrl-C and the ticker. */
+export declare function reviewDeps(opts: SecurityOptions): ReviewDeps;
+export declare const REVIEW_TARGET_OPTIONS: {
+    flags: string;
+    description: string;
+}[];
+export interface ReviewHooks extends RunHooks {
+    reviewDeps?: (opts: SecurityOptions) => ReviewDeps;
+}
+declare const _default: {
+    description: string;
+    options: {
+        flags: string;
+        description: string;
+    }[];
+    action(opts: CodeReviewOptions, hooks?: ReviewHooks): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=code-review.d.ts.map

package/dist/src/commands/security/code-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-review.d.ts","sourceRoot":"","sources":["../../../../src/commands/security/code-review.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAsC,KAAK,iBAAiB,EAAE,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACvH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,uFAAuF;AACvF,wBAAgB,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,UAAU,CAc5D;AAED,eAAO,MAAM,qBAAqB;;;GAKjC,CAAC;AAEF,MAAM,WAAW,WAAY,SAAQ,QAAQ;IAAG,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,UAAU,CAAA;CAAE;;;;;;;iBAY/E,iBAAiB,UAAS,WAAW;;AAV1D,wBAgBE"}

package/dist/src/commands/security/code-review.js

@@ -0,0 +1,43 @@
+import { defaultDeps, runGuarded } from '../enable/security.js';
+import { FAIL_ON_LEVELS, securityCodeReview } from '../../security/review.js';
+/** The real runtime: enable security's runners plus a timer, Ctrl-C and the ticker. */
+export function reviewDeps(opts) {
+    return {
+        ...defaultDeps(opts),
+        sleep: (ms, signal) => new Promise((done) => {
+            if (signal.aborted)
+                return done();
+            const t = setTimeout(done, ms);
+            signal.addEventListener('abort', () => { clearTimeout(t); done(); }, { once: true });
+        }),
+        onInterrupt: (handler) => { process.once('SIGINT', handler); return () => { process.removeListener('SIGINT', handler); }; },
+        ticker: (line) => { process.stderr.write(`\r\u001b[2K${line}`); },
+        err: (line = '') => console.error(line),
+        out: (text) => { process.stdout.write(text); },
+        cwd: () => process.cwd(),
+    };
+}
+export const REVIEW_TARGET_OPTIONS = [
+    { flags: '--profile <name>', description: 'AWS CLI profile (default: none; the standard credential chain)' },
+    { flags: '--region <region>', description: 'AWS region (default: AWS_REGION, AWS_DEFAULT_REGION, else the profile\'s configured region)' },
+    { flags: '--path <dir>', description: 'The repository top level to work on (default: the current directory, which must be the top level)' },
+    { flags: '--repo <host/owner/name>', description: 'Repo id (not a path) for the code review, as the CI gate names it (default: from the origin remote)' },
+];
+export default {
+    description: 'Run an AWS Security Agent code review of this branch (or --full repo) now, wait for it and print the findings',
+    options: [
+        ...REVIEW_TARGET_OPTIONS,
+        { flags: '--full', description: 'Review the whole repo at HEAD instead of the branch diff' },
+        { flags: '--timeout <minutes>', description: 'How long to wait for the job (default: 30)' },
+        { flags: '--fail-on <level>', description: `Exit 1 when any finding is at or above this level: ${FAIL_ON_LEVELS.join(' | ')}` },
+        { flags: '--json', description: 'Print only the final result JSON (progress goes to stderr)' },
+        { flags: '--no-wait', description: 'Start the job, print its id and exit' },
+    ],
+    async action(opts, hooks = {}) {
+        await runGuarded(() => {
+            const o = { ...opts, profile: opts.profile || undefined, region: opts.region || undefined };
+            return securityCodeReview(o, (hooks.reviewDeps ?? reviewDeps)(o));
+        }, hooks);
+    },
+};
+//# sourceMappingURL=code-review.js.map

package/dist/src/commands/security/code-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-review.js","sourceRoot":"","sources":["../../../../src/commands/security/code-review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAiB,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAA2C,MAAM,0BAA0B,CAAC;AAGvH,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,IAAqB;IAC9C,OAAO;QACL,GAAG,WAAW,CAAC,IAAI,CAAC;QACpB,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE;YAChD,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,IAAI,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC,CAAC;QACF,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3H,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,GAAG,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QACvC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,gEAAgE,EAAE;IAC5G,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,6FAA6F,EAAE;IAC1I,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,mGAAmG,EAAE;IAC3I,EAAE,KAAK,EAAE,0BAA0B,EAAE,WAAW,EAAE,qGAAqG,EAAE;CAC1J,CAAC;AAIF,eAAe;IACb,WAAW,EAAE,+GAA+G;IAC5H,OAAO,EAAE;QACP,GAAG,qBAAqB;QACxB,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,0DAA0D,EAAE;QAC5F,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,4CAA4C,EAAE;QAC3F,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,sDAAsD,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;QAC/H,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,4DAA4D,EAAE;QAC9F,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,sCAAsC,EAAE;KAC5E;IACD,KAAK,CAAC,MAAM,CAAC,IAAuB,EAAE,QAAqB,EAAE;QAC3D,MAAM,UAAU,CAAC,GAAG,EAAE;YACpB,MAAM,CAAC,GAAsB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/G,OAAO,kBAAkB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;CACF,CAAC"}

package/dist/src/commands/security/findings.d.ts

@@ -0,0 +1,15 @@
+import { type FindingsOptions } from '../../security/review.js';
+import { type ReviewHooks } from './code-review.js';
+declare const _default: {
+    description: string;
+    options: {
+        flags: string;
+        description: string;
+    }[];
+    action(opts: FindingsOptions & {
+        pentest?: boolean | string;
+        includeFalsePositives?: boolean;
+    }, hooks?: ReviewHooks): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=findings.d.ts.map

package/dist/src/commands/security/findings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.d.ts","sourceRoot":"","sources":["../../../../src/commands/security/findings.ts"],"names":[],"mappings":"AACA,OAAO,EAAoC,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAElG,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;;;;;;;iBAelE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;QAAC,qBAAqB,CAAC,EAAE,OAAO,CAAA;KAAE,UAAS,WAAW;;AAb1H,wBAyBE"}

package/dist/src/commands/security/findings.js

@@ -0,0 +1,31 @@
+import { runGuarded } from '../enable/security.js';
+import { FAIL_ON_LEVELS, securityFindings } from '../../security/review.js';
+import { securityPentestFindings } from '../../security/pentest.js';
+import { REVIEW_TARGET_OPTIONS, reviewDeps } from './code-review.js';
+export default {
+    description: 'List the findings of this repo\'s latest AWS Security Agent code review (or, with --pentest, its penetration test) and cache them for the dashboard (read-only)',
+    options: [
+        ...REVIEW_TARGET_OPTIONS,
+        { flags: '--job <id>', description: 'A specific code review job (default: the latest for this repo)' },
+        { flags: '--latest', description: 'The latest job for this repo (the default)' },
+        { flags: '--severity <level>', description: `Show only findings at or above: ${FAIL_ON_LEVELS.join(' | ')}` },
+        { flags: '--pentest [job]', description: 'Read the latest (or given) penetration-test job instead of a code review' },
+        { flags: '--include-false-positives', description: 'With --pentest: show findings the agent rated FALSE_POSITIVE confidence' },
+        { flags: '--wait', description: 'If the job is still running, wait for it' },
+        { flags: '--timeout <minutes>', description: 'How long --wait waits (code review: 30; pentest: 360)' },
+        { flags: '--json', description: 'Print only the result JSON' },
+    ],
+    async action(opts, hooks = {}) {
+        await runGuarded(() => {
+            const deps = (hooks.reviewDeps ?? reviewDeps)(opts);
+            if (opts.pentest !== undefined && opts.pentest !== false) {
+                const job = typeof opts.pentest === 'string' ? opts.pentest : opts.job;
+                const o = { ...opts, profile: opts.profile || undefined, region: opts.region || undefined, job };
+                return securityPentestFindings(o, deps);
+            }
+            const o = { ...opts, profile: opts.profile || undefined, region: opts.region || undefined };
+            return securityFindings(o, deps);
+        }, hooks);
+    },
+};
+//# sourceMappingURL=findings.js.map

package/dist/src/commands/security/findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.js","sourceRoot":"","sources":["../../../../src/commands/security/findings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAwB,MAAM,0BAA0B,CAAC;AAClG,OAAO,EAAE,uBAAuB,EAAuB,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEvF,eAAe;IACb,WAAW,EAAE,iKAAiK;IAC9K,OAAO,EAAE;QACP,GAAG,qBAAqB;QACxB,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,gEAAgE,EAAE;QACtG,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,4CAA4C,EAAE;QAChF,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,mCAAmC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;QAC7G,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,0EAA0E,EAAE;QACrH,EAAE,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,yEAAyE,EAAE;QAC9H,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;QAC5E,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,uDAAuD,EAAE;QACtG,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;KAC/D;IACD,KAAK,CAAC,MAAM,CAAC,IAAuF,EAAE,QAAqB,EAAE;QAC3H,MAAM,UAAU,CAAC,GAAG,EAAE;YACpB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBACzD,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACvE,MAAM,CAAC,GAAmB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,GAAG,EAAE,CAAC;gBACjH,OAAO,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,CAAC,GAAoB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC7G,OAAO,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;CACF,CAAC"}

package/dist/src/commands/security/pentest.d.ts

@@ -0,0 +1,18 @@
+import { type RunHooks } from '../enable/security.js';
+import { type PentestApp, type PentestOptions } from '../../security/pentest.js';
+import type { ReviewDeps } from '../../security/review.js';
+export interface PentestHooks extends RunHooks {
+    reviewDeps?: (opts: PentestOptions) => ReviewDeps;
+    /** Test seam: inject a fake adapter so the orchestration runs with no cdk/docker. */
+    app?: (opts: PentestOptions) => PentestApp;
+}
+declare const _default: {
+    description: string;
+    options: {
+        flags: string;
+        description: string;
+    }[];
+    action(opts: PentestOptions, hooks?: PentestHooks): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=pentest.d.ts.map

package/dist/src/commands/security/pentest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pentest.d.ts","sourceRoot":"","sources":["../../../../src/commands/security/pentest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EAAmC,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAElH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAE3D,MAAM,WAAW,YAAa,SAAQ,QAAQ;IAC5C,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,UAAU,CAAC;IAClD,qFAAqF;IACrF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,UAAU,CAAC;CAC5C;;;;;;;iBAqBoB,cAAc,UAAS,YAAY;;AAnBxD,wBA0BE"}

package/dist/src/commands/security/pentest.js

@@ -0,0 +1,32 @@
+import { runGuarded } from '../enable/security.js';
+import { reviewDeps } from './code-review.js';
+import { FAIL_ON_LEVELS, securityPentest } from '../../security/pentest.js';
+import { dockerfileApp } from '../../security/pentest-dockerfile.js';
+export default {
+    description: 'Deploy this repo\'s app into a temporary private VPC and run an AWS Security Agent penetration test against it',
+    options: [
+        { flags: '--app-type <type>', description: 'How to build and deploy the app (default: dockerfile; v1 ships only dockerfile)' },
+        { flags: '--path <dir>', description: 'The repository top level (default: the current directory)' },
+        { flags: '--app-dir <dir>', description: 'Docker build context, relative to the repo root (default: "path" in .prism/pentest.json, else .)' },
+        { flags: '--dockerfile <file>', description: 'Dockerfile, relative to the repo root (default: "dockerfile" in .prism/pentest.json, else <app-dir>/Dockerfile)' },
+        { flags: '--wait', description: 'Wait for the job and print findings (default: do not wait — a run takes hours)' },
+        { flags: '--timeout <minutes>', description: 'How long --wait waits (default: 360)' },
+        { flags: '--keep', description: 'Do not tear the environment down after the job (remove it later with --cleanup)' },
+        { flags: '--status', description: 'Refresh and print the latest pentest job; tear down once it has finished. No deploy' },
+        { flags: '--cleanup', description: 'Tear down a prior run\'s environment now and exit. No deploy' },
+        { flags: '--dry-run', description: 'Show the plan, target and cost; deploy and start nothing' },
+        { flags: '--yes', description: 'Approve the deploy and the pentest without a prompt (CI and other non-interactive use)' },
+        { flags: '--include-false-positives', description: 'Show findings the agent rated FALSE_POSITIVE confidence (hidden by default)' },
+        { flags: '--fail-on <level>', description: `Exit 1 on a non-false-positive finding at or above this level: ${FAIL_ON_LEVELS.join(' | ')}` },
+        { flags: '--profile <name>', description: 'AWS CLI profile (default: none; the standard credential chain)' },
+        { flags: '--region <region>', description: 'AWS region (default: AWS_REGION, AWS_DEFAULT_REGION, else the profile\'s configured region)' },
+    ],
+    async action(opts, hooks = {}) {
+        await runGuarded(() => {
+            const o = { ...opts, profile: opts.profile || undefined, region: opts.region || undefined };
+            const app = (hooks.app ?? ((x) => dockerfileApp({ profile: x.profile })))(o);
+            return securityPentest(o, (hooks.reviewDeps ?? reviewDeps)(o), app);
+        }, hooks);
+    },
+};
+//# sourceMappingURL=pentest.js.map

package/dist/src/commands/security/pentest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pentest.js","sourceRoot":"","sources":["../../../../src/commands/security/pentest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAiB,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAwC,MAAM,2BAA2B,CAAC;AAClH,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AASrE,eAAe;IACb,WAAW,EAAE,gHAAgH;IAC7H,OAAO,EAAE;QACP,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,iFAAiF,EAAE;QAC9H,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,2DAA2D,EAAE;QACnG,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,kGAAkG,EAAE;QAC7I,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,iHAAiH,EAAE;QAChK,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,gFAAgF,EAAE;QAClH,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,sCAAsC,EAAE;QACrF,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,iFAAiF,EAAE;QACnH,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,qFAAqF,EAAE;QACzH,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,8DAA8D,EAAE;QACnG,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,0DAA0D,EAAE;QAC/F,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,wFAAwF,EAAE;QACzH,EAAE,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,6EAA6E,EAAE;QAClI,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,kEAAkE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;QAC3I,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,gEAAgE,EAAE;QAC5G,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,6FAA6F,EAAE;KAC3I;IACD,KAAK,CAAC,MAAM,CAAC,IAAoB,EAAE,QAAsB,EAAE;QACzD,MAAM,UAAU,CAAC,GAAG,EAAE;YACpB,MAAM,CAAC,GAAmB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC5G,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;CACF,CAAC"}

package/dist/src/commands/security/threat-model.d.ts

@@ -0,0 +1,16 @@
+import { type ThreatModelOptions } from '../../security/threat-model.js';
+import { type ReviewHooks } from './code-review.js';
+declare const _default: {
+    description: string;
+    options: ({
+        flags: string;
+        description: string;
+    } | {
+        flags: string;
+        description: string;
+        parser: (v: string, prev?: string[]) => string[];
+    })[];
+    action(opts: ThreatModelOptions, hooks?: ReviewHooks): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=threat-model.d.ts.map

package/dist/src/commands/security/threat-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-model.d.ts","sourceRoot":"","sources":["../../../../src/commands/security/threat-model.ts"],"names":[],"mappings":"AAEA,OAAO,EAA+C,KAAK,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACtH,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;;;;;;;;;oBAEnE,MAAM,SAAQ,MAAM,EAAE;;iBAarB,kBAAkB,UAAS,WAAW;;AAX3D,wBAiBE"}

package/dist/src/commands/security/threat-model.js

@@ -0,0 +1,24 @@
+import { runGuarded } from '../enable/security.js';
+import { FAIL_ON_LEVELS } from '../../security/review.js';
+import { DEFAULT_TM_TIMEOUT_MIN, securityThreatModel } from '../../security/threat-model.js';
+import { REVIEW_TARGET_OPTIONS, reviewDeps } from './code-review.js';
+const collect = (v, prev = []) => [...prev, v];
+export default {
+    description: 'Run an AWS Security Agent threat model of this repo at HEAD, focused by design docs, wait for it and print the threats',
+    options: [
+        ...REVIEW_TARGET_OPTIONS,
+        { flags: '--doc <path>', description: 'A design doc (scope doc) committed in HEAD, repeatable (default: .kiro/specs/*/design.md and requirements.md)', parser: collect },
+        { flags: '--no-docs', description: 'Model the source alone, with no scope docs' },
+        { flags: '--timeout <minutes>', description: `How long to wait for the job (default: ${DEFAULT_TM_TIMEOUT_MIN})` },
+        { flags: '--fail-on <level>', description: `Exit 1 when any threat is at or above this level: ${FAIL_ON_LEVELS.join(' | ')}` },
+        { flags: '--json', description: 'Print only the final result JSON (progress goes to stderr)' },
+        { flags: '--no-wait', description: 'Start the job, print its id and exit' },
+    ],
+    async action(opts, hooks = {}) {
+        await runGuarded(() => {
+            const o = { ...opts, profile: opts.profile || undefined, region: opts.region || undefined };
+            return securityThreatModel(o, (hooks.reviewDeps ?? reviewDeps)(o));
+        }, hooks);
+    },
+};
+//# sourceMappingURL=threat-model.js.map

package/dist/src/commands/security/threat-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threat-model.js","sourceRoot":"","sources":["../../../../src/commands/security/threat-model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAA2B,MAAM,gCAAgC,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEvF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,OAAiB,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;AAEjE,eAAe;IACb,WAAW,EAAE,wHAAwH;IACrI,OAAO,EAAE;QACP,GAAG,qBAAqB;QACxB,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,+GAA+G,EAAE,MAAM,EAAE,OAAO,EAAE;QACxK,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,4CAA4C,EAAE;QACjF,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,0CAA0C,sBAAsB,GAAG,EAAE;QAClH,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,qDAAqD,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;QAC9H,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,4DAA4D,EAAE;QAC9F,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,sCAAsC,EAAE;KAC5E;IACD,KAAK,CAAC,MAAM,CAAC,IAAwB,EAAE,QAAqB,EAAE;QAC5D,MAAM,UAAU,CAAC,GAAG,EAAE;YACpB,MAAM,CAAC,GAAuB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAChH,OAAO,mBAAmB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;CACF,CAAC"}

package/dist/src/commands/security/threats.d.ts

@@ -0,0 +1,12 @@
+import { type ThreatsOptions } from '../../security/threat-model.js';
+import { type ReviewHooks } from './code-review.js';
+declare const _default: {
+    description: string;
+    options: {
+        flags: string;
+        description: string;
+    }[];
+    action(opts: ThreatsOptions, hooks?: ReviewHooks): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=threats.d.ts.map

package/dist/src/commands/security/threats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threats.d.ts","sourceRoot":"","sources":["../../../../src/commands/security/threats.ts"],"names":[],"mappings":"AAEA,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAC9G,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;;;;;;;iBAalE,cAAc,UAAS,WAAW;;AAXvD,wBAiBE"}

package/dist/src/commands/security/threats.js

@@ -0,0 +1,23 @@
+import { runGuarded } from '../enable/security.js';
+import { FAIL_ON_LEVELS } from '../../security/review.js';
+import { DEFAULT_TM_TIMEOUT_MIN, securityThreats } from '../../security/threat-model.js';
+import { REVIEW_TARGET_OPTIONS, reviewDeps } from './code-review.js';
+export default {
+    description: 'List the threats of this repo\'s pending or latest (or --job) AWS Security Agent threat model and cache them for the dashboard (read-only)',
+    options: [
+        ...REVIEW_TARGET_OPTIONS,
+        { flags: '--job <id>', description: 'A specific threat model job (default: the pending one, else the latest for this repo)' },
+        { flags: '--latest', description: 'The latest job for this repo (the default)' },
+        { flags: '--severity <level>', description: `Show only threats at or above: ${FAIL_ON_LEVELS.join(' | ')}` },
+        { flags: '--wait', description: 'If the job is still running, wait for it' },
+        { flags: '--timeout <minutes>', description: `How long --wait waits (default: ${DEFAULT_TM_TIMEOUT_MIN})` },
+        { flags: '--json', description: 'Print only the result JSON' },
+    ],
+    async action(opts, hooks = {}) {
+        await runGuarded(() => {
+            const o = { ...opts, profile: opts.profile || undefined, region: opts.region || undefined };
+            return securityThreats(o, (hooks.reviewDeps ?? reviewDeps)(o));
+        }, hooks);
+    },
+};
+//# sourceMappingURL=threats.js.map

package/dist/src/commands/security/threats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threats.js","sourceRoot":"","sources":["../../../../src/commands/security/threats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAuB,MAAM,gCAAgC,CAAC;AAC9G,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEvF,eAAe;IACb,WAAW,EAAE,4IAA4I;IACzJ,OAAO,EAAE;QACP,GAAG,qBAAqB;QACxB,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,uFAAuF,EAAE;QAC7H,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,4CAA4C,EAAE;QAChF,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,kCAAkC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;QAC5G,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;QAC5E,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,mCAAmC,sBAAsB,GAAG,EAAE;QAC3G,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;KAC/D;IACD,KAAK,CAAC,MAAM,CAAC,IAAoB,EAAE,QAAqB,EAAE;QACxD,MAAM,UAAU,CAAC,GAAG,EAAE;YACpB,MAAM,CAAC,GAAmB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC5G,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;CACF,CAAC"}

package/dist/src/commands/securityagent/setup.d.ts

@@ -1,14 +1,28 @@
+import { type RunHooks } from '../enable/security.js';
+import type { SecurityOptions } from '../../security/setup.js';
+/**
+ * DEPRECATED alias for `prism-cli enable security`.
+ *
+ * The old command ran `cdk deploy --all --require-approval never`, always
+ * re-attached the application role, and wrote the code review id to an SSM
+ * parameter the CI eval gate never read. `enable security` replaces it: it
+ * deploys only the Security Agent stack after a diff and a confirmation, is
+ * idempotent, and writes the per-repo parameter the gate uses. The command is
+ * kept so existing scripts and docs keep working; it takes the same flags as
+ * `enable security`, so a script that relied on the old unattended run needs
+ * --yes now.
+ */
+export declare const DEPRECATION: string[];
 declare const _default: {
     description: string;
     options: {
         flags: string;
         description: string;
-        default: string;
+        default?: string;
+        parser?: (v: string, prev?: string[]) => string[];
     }[];
-    action(options: {
-        profile: string;
-        region: string;
-    }): void;
+    /** Errors are handled once, in runEnableSecurity, for this alias too. `hooks` is for tests. */
+    action(opts: SecurityOptions, hooks?: RunHooks): Promise<void>;
 };
 export default _default;
 //# sourceMappingURL=setup.d.ts.map

package/dist/src/commands/securityagent/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../../src/commands/securityagent/setup.ts"],"names":[],"mappings":";;;;;;;oBAsCkB;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;;AANrD,wBA+KE"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../../src/commands/securityagent/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,KAAK,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW,UAGvB,CAAC;;;;;;;iCAYinG,CAAC;;IAPlnG,+FAA+F;iBAC5E,eAAe,UAAU,QAAQ;;AAJtD,wBASE"}

package/dist/src/commands/securityagent/setup.js

@@ -1,193 +1,29 @@
-import { execSync } from 'node:child_process';
-import { existsSync } from 'node:fs';
-import { resolve, dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { getAssetPath } from '../../utils/root.js';
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const INFRA_DIR = getAssetPath(import.meta.url, 'infra');
-function runCapture(cmd) {
-    try {
-        return { ok: true, stdout: execSync(cmd, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'], env: { ...process.env, AWS_PAGER: '' } }).trim() };
-    }
-    catch (err) {
-        return { ok: false, stdout: (err.stdout || err.stderr || err.message || '').trim() };
-    }
-}
-function cleanEnv() {
-    const env = { ...process.env };
-    Object.keys(env).filter(k => k.startsWith('npm_')).forEach(k => delete env[k]);
-    return env;
-}
-function run(cmd, opts = {}) {
-    try {
-        execSync(cmd, { encoding: 'utf8', stdio: 'inherit', cwd: INFRA_DIR, env: cleanEnv(), ...opts });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
+import { runEnableSecurity, SECURITY_OPTIONS } from '../enable/security.js';
+/**
+ * DEPRECATED alias for `prism-cli enable security`.
+ *
+ * The old command ran `cdk deploy --all --require-approval never`, always
+ * re-attached the application role, and wrote the code review id to an SSM
+ * parameter the CI eval gate never read. `enable security` replaces it: it
+ * deploys only the Security Agent stack after a diff and a confirmation, is
+ * idempotent, and writes the per-repo parameter the gate uses. The command is
+ * kept so existing scripts and docs keep working; it takes the same flags as
+ * `enable security`, so a script that relied on the old unattended run needs
+ * --yes now.
+ */
+export const DEPRECATION = [
+    '⚠  "prism-cli securityagent setup" is deprecated; use "prism-cli enable security".',
+    '   It now shows a diff and asks before deploying (pass --yes to approve without a prompt).',
+];
 export default {
-    description: 'Deploy Security Agent infrastructure and create web console application',
-    options: [
-        { flags: '--profile <name>', description: 'AWS CLI profile', default: process.env.AWS_PROFILE || '' },
-        { flags: '--region <region>', description: 'AWS region', default: 'us-west-2' },
-    ],
-    action(options) {
-        const { profile, region } = options;
-        const env = `${profile ? `--profile ${profile} ` : ''}--region ${region}`;
-        // Deploy CDK with security agent enabled
-        console.log('🚀 Deploying Security Agent infrastructure...');
-        if (!existsSync(resolve(INFRA_DIR, 'node_modules'))) {
-            console.log('   Installing CDK dependencies...');
-            if (!run('npm install')) {
-                console.error('npm install failed.');
-                process.exit(1);
-            }
-        }
-        const cdkBin = resolve(INFRA_DIR, 'node_modules/.bin/cdk');
-        const account = runCapture(`aws sts get-caller-identity ${profile ? `--profile ${profile} ` : ''}--query Account --output text`);
-        if (!account.ok) {
-            console.error('Failed to get account ID. Check your AWS credentials.');
-            process.exit(1);
-        }
-        const cdkEnv = {
-            ...cleanEnv(),
-            CDK_DEFAULT_ACCOUNT: account.stdout,
-            CDK_DEFAULT_REGION: region,
-            AWS_DEFAULT_REGION: region,
-        };
-        if (!run(`${cdkBin} deploy --all --require-approval never --context enableSecurityAgent=true`, { env: cdkEnv })) {
-            console.error('CDK deploy failed.');
-            process.exit(1);
-        }
-        console.log('   ✅ Infrastructure deployed\n');
-        // Get agent space ID
-        console.log('🔍 Looking up agent space...');
-        const spaces = runCapture(`aws securityagent list-agent-spaces ${env} --output json`);
-        if (!spaces.ok) {
-            console.error(`Failed to list agent spaces: ${spaces.stdout}`);
-            process.exit(1);
-        }
-        const spaceList = JSON.parse(spaces.stdout).agentSpaceSummaries || [];
-        if (spaceList.length === 0) {
-            console.error('No agent spaces found. Run deploy-infra first.');
-            process.exit(1);
-        }
-        const agentSpaceId = spaceList[0].agentSpaceId;
-        console.log(`   Agent Space: ${agentSpaceId}`);
-        // Check if application already exists
-        console.log('🔍 Checking for existing application...');
-        const apps = runCapture(`aws securityagent list-applications ${env} --output json`);
-        let applicationId;
-        if (apps.ok && JSON.parse(apps.stdout).applicationSummaries?.length > 0) {
-            applicationId = JSON.parse(apps.stdout).applicationSummaries[0].applicationId;
-            console.log(`   Application already exists: ${applicationId}`);
-        }
-        else {
-            // Create application
-            console.log('📦 Creating application...');
-            const create = runCapture(`aws securityagent create-application ${env} --output json`);
-            if (!create.ok) {
-                console.error(`Failed to create application: ${create.stdout}`);
-                process.exit(1);
-            }
-            applicationId = JSON.parse(create.stdout).applicationId;
-            console.log(`   ✅ Created application: ${applicationId}`);
-        }
-        // Get service role ARN
-        const roleArn = `arn:aws:iam::${account.stdout}:role/prism-d1-security-agent-prism-d1-security`;
-        // Update application with role
-        console.log('🔧 Configuring application role...');
-        const update = runCapture(`aws securityagent update-application --application-id ${applicationId} --role-arn ${roleArn} ${env} --output json`);
-        if (!update.ok) {
-            console.error(`Failed to update application: ${update.stdout}`);
-            process.exit(1);
-        }
-        console.log(`   ✅ Role attached: ${roleArn}`);
-        console.log('\n✅ Setup complete!');
-        console.log(`   Application: ${applicationId}`);
-        console.log(`   Web console: https://${region}.console.aws.amazon.com/securityagent/home?region=${region}`);
-        console.log('   Click "Admin access" to open the web app.');
-        // -------------------------------------------------------
-        // Create Code Review for CI diff scans
-        // Requires: repo ZIP uploaded to scan bucket first
-        // -------------------------------------------------------
-        console.log('\n📦 Setting up Code Review for CI/CD diff scans...');
-        // Get scan bucket from SSM (created by CDK)
-        const bucketParam = runCapture(`aws ssm get-parameter --name /prism/continuum/scan-bucket ${env} --query Parameter.Value --output text`);
-        if (!bucketParam.ok || !bucketParam.stdout) {
-            console.log('   ⚠️  Scan bucket SSM param not found. Deploy with --context enableSecurityAgent=true first.');
-            console.log('   Skipping Code Review creation.');
-            return;
-        }
-        const scanBucket = bucketParam.stdout;
-        console.log(`   Scan bucket: ${scanBucket}`);
-        // Zip the repo and upload
-        console.log('   Archiving repo...');
-        const repoRoot = process.cwd();
-        const zipResult = runCapture(`cd ${repoRoot} && git archive HEAD --format=zip -o /tmp/prism-repo.zip`);
-        if (!zipResult.ok) {
-            console.log(`   ⚠️  git archive failed (not a git repo?): ${zipResult.stdout}`);
-            console.log('   Skipping Code Review creation. Run from a git repo root.');
-            return;
-        }
-        const upload = runCapture(`aws s3 cp /tmp/prism-repo.zip s3://${scanBucket}/repo/latest.zip ${env}`);
-        if (!upload.ok) {
-            console.error(`   Failed to upload repo ZIP: ${upload.stdout}`);
-            return;
-        }
-        console.log('   ✅ Repo ZIP uploaded');
-        // Create Code Review (or find existing)
-        const codeReviewTitle = 'prism-d1-security-ci-diff-scan';
-        const createCr = runCapture(`aws securityagent create-code-review ` +
-            `--agent-space-id ${agentSpaceId} ` +
-            `--title ${codeReviewTitle} ` +
-            `--service-role ${roleArn} ` +
-            `--assets '{"sourceCode":[{"s3Location":"s3://${scanBucket}/repo/latest.zip"}]}' ` +
-            `${env} --output json`);
-        let codeReviewId;
-        if (createCr.ok) {
-            codeReviewId = JSON.parse(createCr.stdout).codeReviewId;
-            console.log(`   ✅ Code Review created: ${codeReviewId}`);
-        }
-        else if (createCr.stdout.includes('Conflict') || createCr.stdout.includes('already exists')) {
-            // Already exists — find it
-            const listCr = runCapture(`aws securityagent list-code-reviews --agent-space-id ${agentSpaceId} ${env} --output json`);
-            if (listCr.ok) {
-                const reviews = JSON.parse(listCr.stdout).codeReviews || [];
-                const existing = reviews.find((r) => r.title === codeReviewTitle);
-                if (existing) {
-                    codeReviewId = existing.codeReviewId;
-                    console.log(`   ✅ Code Review already exists: ${codeReviewId}`);
-                }
-                else {
-                    console.error('   ❌ Could not find existing Code Review');
-                    return;
-                }
-            }
-            else {
-                console.error(`   ❌ Failed to list code reviews: ${listCr.stdout}`);
-                return;
-            }
-        }
-        else {
-            console.error(`   ❌ Failed to create Code Review: ${createCr.stdout}`);
-            console.log('   The CI workflow will skip Continuum scanning until this is resolved.');
-            return;
-        }
-        // Write code-review-id to SSM
-        const ssmWrite = runCapture(`aws ssm put-parameter --name /prism/continuum/code-review-id ` +
-            `--value "${codeReviewId}" --type String --overwrite ${env}`);
-        if (ssmWrite.ok) {
-            console.log('   ✅ Code Review ID written to SSM: /prism/continuum/code-review-id');
-        }
-        else {
-            console.log(`   ⚠️  Failed to write SSM param: ${ssmWrite.stdout}`);
-            console.log(`   Manually run: aws ssm put-parameter --name /prism/continuum/code-review-id --value "${codeReviewId}" --type String --overwrite ${env}`);
-        }
-        console.log('\n🎉 Continuum CI scanning ready!');
-        console.log('   The eval gate workflow will now run diff scans on every PR.');
+    description: '[deprecated] Alias for "prism-cli enable security"',
+    options: SECURITY_OPTIONS,
+    /** Errors are handled once, in runEnableSecurity, for this alias too. `hooks` is for tests. */
+    async action(opts, hooks) {
+        for (const l of DEPRECATION)
+            console.warn(l);
+        console.warn('');
+        await runEnableSecurity(opts, hooks);
     },
 };
 //# sourceMappingURL=setup.js.map