@saferun/cli 0.5.26 → 0.5.28

package/dist/commands/doctor.d.ts

@@ -0,0 +1,18 @@
+/**
+ * SafeRun Doctor Command
+ * Health check for all SafeRun components
+ */
+export declare class DoctorCommand {
+    private checks;
+    run(): Promise<void>;
+    private checkApiKey;
+    private checkApiServer;
+    private checkSlack;
+    private checkGitHubApp;
+    private checkGitHooks;
+    private checkShellWrapper;
+    private checkGitignore;
+    private checkFilePermissions;
+    private printResults;
+    private fetchWithTimeout;
+}

package/dist/commands/doctor.js

@@ -0,0 +1,439 @@
+"use strict";
+/**
+ * SafeRun Doctor Command
+ * Health check for all SafeRun components
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DoctorCommand = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+const git_1 = require("../utils/git");
+const installer_1 = require("../hooks/installer");
+const credentials_1 = require("../utils/credentials");
+const gitignore_1 = require("../utils/gitignore");
+const SAFERUN_API_URL = 'https://saferun-api.up.railway.app';
+class DoctorCommand {
+    constructor() {
+        this.checks = [];
+    }
+    async run() {
+        console.log(chalk_1.default.cyan('\n🩺 SafeRun Health Check\n'));
+        // Run all checks
+        await this.checkApiKey();
+        await this.checkApiServer();
+        await this.checkSlack();
+        await this.checkGitHubApp();
+        await this.checkGitHooks();
+        await this.checkShellWrapper();
+        await this.checkGitignore();
+        await this.checkFilePermissions();
+        // Print results
+        this.printResults();
+    }
+    async checkApiKey() {
+        const apiKey = await (0, credentials_1.resolveApiKey)();
+        if (!apiKey) {
+            this.checks.push({
+                name: 'API Key',
+                status: 'error',
+                message: 'Not configured',
+                detail: 'Run "saferun setup" to configure',
+            });
+            return;
+        }
+        // Check where it came from
+        const globalCreds = await (0, credentials_1.loadGlobalCredentials)();
+        const source = process.env.SAFERUN_API_KEY
+            ? 'environment variable'
+            : globalCreds.api_key
+                ? 'global config (~/.saferun/credentials)'
+                : 'local config';
+        this.checks.push({
+            name: 'API Key',
+            status: 'ok',
+            message: `Configured (${(0, credentials_1.maskApiKey)(apiKey)})`,
+            detail: `Source: ${source}`,
+        });
+    }
+    async checkApiServer() {
+        const apiKey = await (0, credentials_1.resolveApiKey)();
+        try {
+            const response = await this.fetchWithTimeout(`${SAFERUN_API_URL}/health`, 5000);
+            const data = await response.json();
+            this.checks.push({
+                name: 'API Server',
+                status: 'ok',
+                message: `Reachable (v${data.version || 'unknown'})`,
+                detail: SAFERUN_API_URL,
+            });
+        }
+        catch (err) {
+            this.checks.push({
+                name: 'API Server',
+                status: 'error',
+                message: 'Unreachable',
+                detail: `${SAFERUN_API_URL} - ${err}`,
+            });
+        }
+    }
+    async checkSlack() {
+        const apiKey = await (0, credentials_1.resolveApiKey)();
+        if (!apiKey) {
+            this.checks.push({
+                name: 'Slack',
+                status: 'skip',
+                message: 'Skipped (no API key)',
+            });
+            return;
+        }
+        try {
+            const response = await fetch(`${SAFERUN_API_URL}/v1/settings/notifications`, {
+                headers: { 'X-API-Key': apiKey },
+            });
+            if (response.ok) {
+                const data = await response.json();
+                if (data.slack_enabled) {
+                    this.checks.push({
+                        name: 'Slack',
+                        status: 'ok',
+                        message: `Connected (${data.slack_channel || 'webhook'})`,
+                    });
+                }
+                else {
+                    this.checks.push({
+                        name: 'Slack',
+                        status: 'warn',
+                        message: 'Not configured',
+                        detail: 'Run "saferun config slack" to configure',
+                    });
+                }
+            }
+            else if (response.status === 404) {
+                this.checks.push({
+                    name: 'Slack',
+                    status: 'warn',
+                    message: 'Not configured',
+                    detail: 'Run "saferun config slack" to configure',
+                });
+            }
+            else {
+                this.checks.push({
+                    name: 'Slack',
+                    status: 'error',
+                    message: `API error (${response.status})`,
+                });
+            }
+        }
+        catch {
+            this.checks.push({
+                name: 'Slack',
+                status: 'error',
+                message: 'Could not check status',
+            });
+        }
+    }
+    async checkGitHubApp() {
+        const apiKey = await (0, credentials_1.resolveApiKey)();
+        if (!apiKey) {
+            this.checks.push({
+                name: 'GitHub App',
+                status: 'skip',
+                message: 'Skipped (no API key)',
+            });
+            return;
+        }
+        // We can't directly check if GitHub App is installed without repo context
+        // For now, just indicate it needs manual verification
+        const isRepo = await (0, git_1.isGitRepository)();
+        if (!isRepo) {
+            this.checks.push({
+                name: 'GitHub App',
+                status: 'skip',
+                message: 'Not in a git repository',
+            });
+            return;
+        }
+        const gitInfo = await (0, git_1.getGitInfo)();
+        if (!(gitInfo === null || gitInfo === void 0 ? void 0 : gitInfo.repoSlug)) {
+            this.checks.push({
+                name: 'GitHub App',
+                status: 'warn',
+                message: 'Could not determine repository',
+            });
+            return;
+        }
+        // Try to check via API if we have webhook configured for this repo
+        try {
+            const response = await fetch(`${SAFERUN_API_URL}/v1/settings`, {
+                headers: { 'X-API-Key': apiKey },
+            });
+            if (response.ok) {
+                const data = await response.json();
+                // Check if this repo has webhooks
+                if (data.github_app_installed || data.webhooks_enabled) {
+                    this.checks.push({
+                        name: 'GitHub App',
+                        status: 'ok',
+                        message: `Installed on ${gitInfo.repoSlug}`,
+                    });
+                }
+                else {
+                    this.checks.push({
+                        name: 'GitHub App',
+                        status: 'warn',
+                        message: 'Not detected',
+                        detail: 'Install at github.com/apps/saferun-ai',
+                    });
+                }
+            }
+            else {
+                this.checks.push({
+                    name: 'GitHub App',
+                    status: 'warn',
+                    message: 'Could not verify',
+                    detail: 'Check github.com/apps/saferun-ai',
+                });
+            }
+        }
+        catch {
+            this.checks.push({
+                name: 'GitHub App',
+                status: 'warn',
+                message: 'Could not verify',
+                detail: 'Check github.com/apps/saferun-ai',
+            });
+        }
+    }
+    async checkGitHooks() {
+        var _a;
+        const isRepo = await (0, git_1.isGitRepository)();
+        if (!isRepo) {
+            this.checks.push({
+                name: 'Git Hooks',
+                status: 'skip',
+                message: 'Not in a git repository',
+            });
+            return;
+        }
+        const gitInfo = await (0, git_1.getGitInfo)();
+        if (!gitInfo) {
+            this.checks.push({
+                name: 'Git Hooks',
+                status: 'error',
+                message: 'Could not get git info',
+            });
+            return;
+        }
+        const manifest = await (0, installer_1.loadManifest)(gitInfo.repoRoot);
+        const hooks = await (0, git_1.listHooks)(gitInfo.gitDir);
+        if ((_a = manifest === null || manifest === void 0 ? void 0 : manifest.hooks) === null || _a === void 0 ? void 0 : _a.length) {
+            const saferunHooks = hooks.filter(h => manifest.hooks.some((m) => m.name === h));
+            this.checks.push({
+                name: 'Git Hooks',
+                status: 'ok',
+                message: `${saferunHooks.length} SafeRun hooks installed`,
+                detail: saferunHooks.join(', '),
+            });
+        }
+        else if (hooks.length > 0) {
+            this.checks.push({
+                name: 'Git Hooks',
+                status: 'warn',
+                message: 'Hooks exist but SafeRun not initialized',
+                detail: 'Run "saferun init" to install protection',
+            });
+        }
+        else {
+            this.checks.push({
+                name: 'Git Hooks',
+                status: 'error',
+                message: 'No hooks installed',
+                detail: 'Run "saferun init" to install protection',
+            });
+        }
+    }
+    async checkShellWrapper() {
+        // Check if shell wrapper is in ~/.zshrc or ~/.bashrc
+        const home = os_1.default.homedir();
+        const shellFiles = [
+            path_1.default.join(home, '.zshrc'),
+            path_1.default.join(home, '.bashrc'),
+            path_1.default.join(home, '.bash_profile'),
+        ];
+        let found = false;
+        let shellFile = '';
+        for (const file of shellFiles) {
+            if (fs_1.default.existsSync(file)) {
+                try {
+                    const content = await fs_1.default.promises.readFile(file, 'utf-8');
+                    if (content.includes('saferun_git_wrapper') || content.includes('# SafeRun shell')) {
+                        found = true;
+                        shellFile = path_1.default.basename(file);
+                        break;
+                    }
+                }
+                catch {
+                    // Ignore read errors
+                }
+            }
+        }
+        if (found) {
+            this.checks.push({
+                name: 'Shell Wrapper',
+                status: 'ok',
+                message: `Active (${shellFile})`,
+                detail: 'Intercepts git commands in protected repos',
+            });
+        }
+        else {
+            this.checks.push({
+                name: 'Shell Wrapper',
+                status: 'warn',
+                message: 'Not configured',
+                detail: 'Run "saferun shell-init --auto" for extra protection',
+            });
+        }
+    }
+    async checkGitignore() {
+        const isRepo = await (0, git_1.isGitRepository)();
+        if (!isRepo) {
+            this.checks.push({
+                name: '.gitignore',
+                status: 'skip',
+                message: 'Not in a git repository',
+            });
+            return;
+        }
+        const gitInfo = await (0, git_1.getGitInfo)();
+        if (!gitInfo) {
+            this.checks.push({
+                name: '.gitignore',
+                status: 'skip',
+                message: 'Could not get git info',
+            });
+            return;
+        }
+        const result = await (0, gitignore_1.checkGitignore)(gitInfo.repoRoot);
+        if (result.hasSaferunEntries) {
+            this.checks.push({
+                name: '.gitignore',
+                status: 'ok',
+                message: 'Credentials excluded',
+            });
+        }
+        else if (result.exists) {
+            this.checks.push({
+                name: '.gitignore',
+                status: 'warn',
+                message: 'Missing SafeRun entries',
+                detail: 'Run "saferun setup" to add entries',
+            });
+        }
+        else {
+            this.checks.push({
+                name: '.gitignore',
+                status: 'warn',
+                message: 'No .gitignore file',
+                detail: 'Run "saferun setup" to create',
+            });
+        }
+    }
+    async checkFilePermissions() {
+        const credentialsPath = (0, credentials_1.getCredentialsPath)();
+        if (!fs_1.default.existsSync(credentialsPath)) {
+            // Not an error - might use env var
+            return;
+        }
+        try {
+            const stats = await fs_1.default.promises.stat(credentialsPath);
+            const mode = (stats.mode & 0o777).toString(8);
+            if (mode === '600') {
+                this.checks.push({
+                    name: 'File Permissions',
+                    status: 'ok',
+                    message: 'Credentials secured (600)',
+                    detail: credentialsPath,
+                });
+            }
+            else {
+                this.checks.push({
+                    name: 'File Permissions',
+                    status: 'warn',
+                    message: `Credentials file has mode ${mode}`,
+                    detail: `Expected 600, got ${mode}. Run: chmod 600 ${credentialsPath}`,
+                });
+            }
+        }
+        catch {
+            // Ignore errors
+        }
+    }
+    printResults() {
+        let hasErrors = false;
+        let hasWarnings = false;
+        for (const check of this.checks) {
+            let statusIcon;
+            let statusColor;
+            switch (check.status) {
+                case 'ok':
+                    statusIcon = '✓';
+                    statusColor = chalk_1.default.green;
+                    break;
+                case 'warn':
+                    statusIcon = '⚠';
+                    statusColor = chalk_1.default.yellow;
+                    hasWarnings = true;
+                    break;
+                case 'error':
+                    statusIcon = '✗';
+                    statusColor = chalk_1.default.red;
+                    hasErrors = true;
+                    break;
+                case 'skip':
+                    statusIcon = '○';
+                    statusColor = chalk_1.default.gray;
+                    break;
+                default:
+                    statusIcon = '?';
+                    statusColor = chalk_1.default.white;
+            }
+            console.log(`${statusColor(statusIcon)} ${chalk_1.default.bold(check.name)}`);
+            console.log(`  ${check.message}`);
+            if (check.detail) {
+                console.log(chalk_1.default.gray(`  ${check.detail}`));
+            }
+            console.log('');
+        }
+        console.log(chalk_1.default.gray('─'.repeat(50)));
+        if (hasErrors) {
+            console.log(chalk_1.default.red('\n❌ Some checks failed. Run "saferun setup" to fix.\n'));
+            process.exitCode = 1;
+        }
+        else if (hasWarnings) {
+            console.log(chalk_1.default.yellow('\n⚠️  Some warnings. Protection may be incomplete.\n'));
+        }
+        else {
+            console.log(chalk_1.default.green('\n✅ All systems operational!\n'));
+        }
+    }
+    async fetchWithTimeout(url, timeout) {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), timeout);
+        try {
+            const response = await fetch(url, { signal: controller.signal });
+            clearTimeout(timeoutId);
+            return response;
+        }
+        catch (err) {
+            clearTimeout(timeoutId);
+            throw err;
+        }
+    }
+}
+exports.DoctorCommand = DoctorCommand;
+//# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;AAEH,kDAA0B;AAE1B,4CAAoB;AACpB,gDAAwB;AACxB,4CAAoB;AAEpB,sCAAsE;AAEtE,kDAAkD;AAClD,sDAM8B;AAC9B,kDAAoD;AAEpD,MAAM,eAAe,GAAG,oCAAoC,CAAC;AAS7D,MAAa,aAAa;IAA1B;QACU,WAAM,GAAkB,EAAE,CAAC;IA6brC,CAAC;IA3bC,KAAK,CAAC,GAAG;QACP,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;QAEvD,iBAAiB;QACjB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAElC,gBAAgB;QAChB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAa,GAAE,CAAC;QAErC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,gBAAgB;gBACzB,MAAM,EAAE,kCAAkC;aAC3C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,MAAM,WAAW,GAAG,MAAM,IAAA,mCAAqB,GAAE,CAAC;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe;YACxC,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,WAAW,CAAC,OAAO;gBACnB,CAAC,CAAC,wCAAwC;gBAC1C,CAAC,CAAC,cAAc,CAAC;QAErB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,eAAe,IAAA,wBAAU,EAAC,MAAM,CAAC,GAAG;YAC7C,MAAM,EAAE,WAAW,MAAM,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAa,GAAE,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,eAAe,SAAS,EAAE,IAAI,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,eAAe,IAAI,CAAC,OAAO,IAAI,SAAS,GAAG;gBACpD,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,aAAa;gBACtB,MAAM,EAAE,GAAG,eAAe,MAAM,GAAG,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAa,GAAE,CAAC;QAErC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,sBAAsB;aAChC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,eAAe,4BAA4B,EAAE;gBAC3E,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;aACjC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAEnC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,cAAc,IAAI,CAAC,aAAa,IAAI,SAAS,GAAG;qBAC1D,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,gBAAgB;wBACzB,MAAM,EAAE,yCAAyC;qBAClD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,gBAAgB;oBACzB,MAAM,EAAE,yCAAyC;iBAClD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,cAAc,QAAQ,CAAC,MAAM,GAAG;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAa,GAAE,CAAC;QAErC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,sBAAsB;aAChC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,sDAAsD;QACtD,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;QAEvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,yBAAyB;aACnC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,gBAAU,GAAE,CAAC;QACnC,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ,CAAA,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,eAAe,cAAc,EAAE;gBAC7D,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;aACjC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,kCAAkC;gBAClC,IAAI,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,YAAY;wBAClB,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,gBAAgB,OAAO,CAAC,QAAQ,EAAE;qBAC5C,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,YAAY;wBAClB,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,cAAc;wBACvB,MAAM,EAAE,uCAAuC;qBAChD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,kBAAkB;oBAC3B,MAAM,EAAE,kCAAkC;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,kBAAkB;gBAC3B,MAAM,EAAE,kCAAkC;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;;QACzB,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;QAEvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,yBAAyB;aACnC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,gBAAU,GAAE,CAAC;QACnC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAA,wBAAY,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,IAAA,eAAS,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE9C,IAAI,MAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,KAAK,0CAAE,MAAM,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACpC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAC9C,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,GAAG,YAAY,CAAC,MAAM,0BAA0B;gBACzD,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,yCAAyC;gBAClD,MAAM,EAAE,0CAA0C;aACnD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,oBAAoB;gBAC7B,MAAM,EAAE,0CAA0C;aACnD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,qDAAqD;QACrD,MAAM,IAAI,GAAG,YAAE,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG;YACjB,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YACzB,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;YAC1B,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;SACjC,CAAC;QAEF,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,SAAS,GAAG,EAAE,CAAC;QAEnB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,YAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC1D,IAAI,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;wBACnF,KAAK,GAAG,IAAI,CAAC;wBACb,SAAS,GAAG,cAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;wBAChC,MAAM;oBACR,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,WAAW,SAAS,GAAG;gBAChC,MAAM,EAAE,4CAA4C;aACrD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,gBAAgB;gBACzB,MAAM,EAAE,sDAAsD;aAC/D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;QAEvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,yBAAyB;aACnC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,gBAAU,GAAE,CAAC;QACnC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAc,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEtD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,sBAAsB;aAChC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,yBAAyB;gBAClC,MAAM,EAAE,oCAAoC;aAC7C,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,oBAAoB;gBAC7B,MAAM,EAAE,+BAA+B;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,eAAe,GAAG,IAAA,gCAAkB,GAAE,CAAC;QAE7C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACpC,mCAAmC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE9C,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,2BAA2B;oBACpC,MAAM,EAAE,eAAe;iBACxB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,6BAA6B,IAAI,EAAE;oBAC5C,MAAM,EAAE,qBAAqB,IAAI,oBAAoB,eAAe,EAAE;iBACvE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB;QAClB,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,WAAW,GAAG,KAAK,CAAC;QAExB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,UAAkB,CAAC;YACvB,IAAI,WAAkC,CAAC;YAEvC,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;gBACrB,KAAK,IAAI;oBACP,UAAU,GAAG,GAAG,CAAC;oBACjB,WAAW,GAAG,eAAK,CAAC,KAAK,CAAC;oBAC1B,MAAM;gBACR,KAAK,MAAM;oBACT,UAAU,GAAG,GAAG,CAAC;oBACjB,WAAW,GAAG,eAAK,CAAC,MAAM,CAAC;oBAC3B,WAAW,GAAG,IAAI,CAAC;oBACnB,MAAM;gBACR,KAAK,OAAO;oBACV,UAAU,GAAG,GAAG,CAAC;oBACjB,WAAW,GAAG,eAAK,CAAC,GAAG,CAAC;oBACxB,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM;gBACR,KAAK,MAAM;oBACT,UAAU,GAAG,GAAG,CAAC;oBACjB,WAAW,GAAG,eAAK,CAAC,IAAI,CAAC;oBACzB,MAAM;gBACR;oBACE,UAAU,GAAG,GAAG,CAAC;oBACjB,WAAW,GAAG,eAAK,CAAC,KAAK,CAAC;YAC9B,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAExC,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC,CAAC;YAChF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,sDAAsD,CAAC,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,GAAW,EAAE,OAAe;QACzD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QAEhE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AA9bD,sCA8bC"}

package/dist/commands/setup.d.ts

@@ -0,0 +1,47 @@
+/**
+ * SafeRun Setup Wizard
+ * Complete onboarding in one command: API Key → Slack → GitHub App → Repo Setup
+ */
+interface SetupOptions {
+    skipSlack?: boolean;
+    skipGithub?: boolean;
+    apiKey?: string;
+}
+export declare class SetupCommand {
+    private apiKey?;
+    private slackConfigured;
+    private githubAppInstalled;
+    private repoInitialized;
+    private protectionMode;
+    run(options?: SetupOptions): Promise<void>;
+    /**
+     * Step 1: Configure API Key
+     */
+    private stepApiKey;
+    /**
+     * Step 2: Configure Slack notifications
+     */
+    private stepSlack;
+    /**
+     * Step 3: Install GitHub App
+     */
+    private stepGitHubApp;
+    /**
+     * Step 4: Initialize repository
+     */
+    private stepRepoSetup;
+    /**
+     * Step 5: Select Protection Mode
+     */
+    private stepProtectionMode;
+    /**
+     * Print setup summary
+     */
+    private printSummary;
+    private openBrowser;
+    private validateApiKey;
+    private checkSlackStatus;
+    private configureSlack;
+    private sendTestSlack;
+}
+export {};