@shipsafe/cli 0.1.0

package/README.md

@@ -0,0 +1,167 @@
+# ShipSafe
+
+Full-lifecycle security and reliability platform for vibe coders. Scan for vulnerabilities, auto-fix secrets, monitor production errors, and get AI-powered security insights — all from your terminal or IDE.
+
+## Features
+
+- **Security scanning** — wraps Semgrep, Gitleaks, and Trivy into a single `shipsafe scan` command
+- **Knowledge graph engine** — builds a call graph with Tree-sitter + KuzuDB to find attack paths, missing auth, and tainted data flows
+- **Auto-fix** — moves hardcoded secrets to `.env` files automatically with `--fix`
+- **MCP server** — 7 tools for Claude, Cursor, and other AI coding assistants
+- **Production monitoring** — lightweight `@shipsafe/monitor` snippet captures errors and performance data
+- **Git hooks** — pre-commit scanning to catch issues before they land
+- **GitHub App** — PR checks and automated security reviews
+- **License tiers** — FREE (scan), PRO (+ autofix, graph, monitoring, MCP), TEAM/AGENCY (+ sourcemaps, GitHub App)
+
+## Install
+
+```bash
+npm install -g shipsafe
+```
+
+## Quick start
+
+```bash
+# Initialize ShipSafe in your project
+shipsafe init
+
+# Scan for vulnerabilities (staged files by default)
+shipsafe scan
+
+# Scan all files
+shipsafe scan --scope all
+
+# Auto-fix hardcoded secrets
+shipsafe scan --fix
+
+# Activate a license
+shipsafe activate SS-PRO-yourkeyhere
+
+# Start the MCP server (for AI assistants)
+shipsafe mcp-server
+```
+
+## Configuration
+
+ShipSafe uses two config files merged together (project overrides global):
+
+- **Global**: `~/.shipsafe/config.json`
+- **Project**: `shipsafe.config.json`
+
+```bash
+# View current config
+shipsafe config list
+
+# Set a value
+shipsafe config set apiEndpoint https://api.shipsafe.org
+shipsafe config set scan.severity_threshold medium
+
+# Set globally
+shipsafe config set licenseKey SS-PRO-abc123 --global
+```
+
+### Environment variables
+
+| Variable | Description | Default |
+|----------|-------------|---------|
+| `SHIPSAFE_API_URL` | API endpoint override | `http://localhost:3747` |
+| `SHIPSAFE_DB_PATH` | SQLite database path (API) | `~/.shipsafe/shipsafe.db` |
+
+## MCP Server
+
+ShipSafe exposes an MCP server with 7 tools for AI coding assistants:
+
+- `scan` — run security scan
+- `status` — project security status
+- `check_package` — check npm packages for vulnerabilities
+- `production_errors` — fetch production errors
+- `verify_resolution` — verify if an error is resolved
+- `blast_radius` — analyze impact of changing a function
+- `explain_finding` — get detailed explanation of a finding
+
+Add to your Claude/Cursor MCP config:
+
+```json
+{
+  "mcpServers": {
+    "shipsafe": {
+      "command": "shipsafe",
+      "args": ["mcp-server"]
+    }
+  }
+}
+```
+
+## Monitor snippet
+
+Capture production errors with `@shipsafe/monitor`:
+
+```bash
+npm install @shipsafe/monitor
+```
+
+```typescript
+import { init } from '@shipsafe/monitor';
+
+const monitor = init({
+  projectId: 'your-project-id',
+  endpoint: 'https://api.shipsafe.org/v1/events', // optional
+});
+```
+
+Features: automatic error capture, PII scrubbing, sampling, batching with retries, auto-disable on repeated failures.
+
+## Cloud API
+
+The ShipSafe API handles monitoring ingest, error processing, source map resolution, and license validation.
+
+```bash
+cd packages/api
+
+# Development
+npm run dev
+
+# Production (Docker)
+docker compose up -d
+```
+
+Runs on port 3747 by default.
+
+## Architecture
+
+```
+bin/shipsafe.ts          CLI entry point (Commander.js)
+src/
+  engines/
+    pattern/             Semgrep, Gitleaks, Trivy wrappers
+    graph/               Tree-sitter + KuzuDB knowledge graph
+  cli/                   CLI commands (scan, init, activate, config, etc.)
+  mcp/                   MCP server + tools
+  autofix/               Auto-fix engine (secrets, scaffolding, PR generation)
+  github/                GitHub App (webhooks, PR scanner, checks)
+  hooks/                 Git hook installer
+  config/                Config manager
+packages/
+  api/                   Hono cloud API with SQLite
+  monitor/               @shipsafe/monitor client snippet
+```
+
+## Development
+
+```bash
+# Run tests
+npm test
+
+# Build
+npm run build
+
+# Run CLI locally
+npm run dev -- scan
+npm run dev -- init
+```
+
+## License
+
+UNLICENSED — proprietary software by Connect Holdings LLC.
+
+`@shipsafe/monitor` is MIT licensed.

package/dist/bin/shipsafe.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=shipsafe.d.ts.map

package/dist/bin/shipsafe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipsafe.d.ts","sourceRoot":"","sources":["../../bin/shipsafe.ts"],"names":[],"mappings":""}

package/dist/bin/shipsafe.js

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import { VERSION } from '../src/constants.js';
+import { registerScanCommand } from '../src/cli/scan.js';
+import { registerStatusCommand } from '../src/cli/status.js';
+import { registerActivateCommand } from '../src/cli/activate.js';
+import { registerSetupCommand } from '../src/cli/setup.js';
+import { registerConnectCommand } from '../src/cli/connect.js';
+import { registerUploadSourcemapsCommand } from '../src/cli/upload-sourcemaps.js';
+import { registerConfigCommand } from '../src/cli/config.js';
+import { registerInitCommand } from '../src/cli/init.js';
+const program = new Command();
+program
+    .name('shipsafe')
+    .description('Full-lifecycle security and reliability for vibe coders')
+    .version(VERSION);
+registerScanCommand(program);
+registerStatusCommand(program);
+registerActivateCommand(program);
+registerSetupCommand(program);
+registerConnectCommand(program);
+registerUploadSourcemapsCommand(program);
+registerConfigCommand(program);
+registerInitCommand(program);
+program
+    .command('mcp-server')
+    .description('Start ShipSafe MCP server (stdio transport)')
+    .action(async () => {
+    const { startMcpServer } = await import('../src/mcp/server.js');
+    await startMcpServer();
+});
+program.parse();
+//# sourceMappingURL=shipsafe.js.map

package/dist/bin/shipsafe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipsafe.js","sourceRoot":"","sources":["../../bin/shipsafe.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,yDAAyD,CAAC;KACtE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,+BAA+B,CAAC,OAAO,CAAC,CAAC;AACzC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAE7B,OAAO;KACJ,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,6CAA6C,CAAC;KAC1D,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAChE,MAAM,cAAc,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/src/autofix/pr-generator.d.ts

@@ -0,0 +1,48 @@
+/**
+ * A production error enriched by the cloud API pipeline.
+ */
+export interface ProcessedError {
+    id: string;
+    message: string;
+    severity: string;
+    stack_trace?: string;
+    root_cause?: string;
+    suggested_fix?: string;
+    file?: string;
+    line?: number;
+}
+export interface AutoFixPrOptions {
+    error: ProcessedError;
+    repoFullName: string;
+    installationId: number;
+    baseBranch?: string;
+}
+export interface AutoFixResult {
+    status: 'pr_created' | 'fix_suggested' | 'cannot_fix';
+    prUrl?: string;
+    branchName?: string;
+    description: string;
+    filesModified: string[];
+}
+export interface FixPatch {
+    filePath: string;
+    original: string;
+    fixed: string;
+    description: string;
+}
+/**
+ * Analyze an error and generate a code fix (without creating a PR).
+ */
+export declare function generateFix(error: ProcessedError, fileContent: string): FixPatch | null;
+/**
+ * Parse a stack trace to extract file and line number.
+ */
+export declare function parseStackTrace(stackTrace: string): {
+    file: string;
+    line: number;
+} | null;
+/**
+ * Generate a fix based on error analysis and create a PR via GitHub API.
+ */
+export declare function generateAutoFixPr(options: AutoFixPrOptions): Promise<AutoFixResult>;
+//# sourceMappingURL=pr-generator.d.ts.map

package/dist/src/autofix/pr-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-generator.d.ts","sourceRoot":"","sources":["../../../src/autofix/pr-generator.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,GAAG,eAAe,GAAG,YAAY,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAmND;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CA0BvF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKzF;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAiIzF"}

package/dist/src/autofix/pr-generator.js

@@ -0,0 +1,359 @@
+import { getInstallationToken, githubApi } from '../github/api.js';
+/**
+ * Extract the property name from a TypeError message like
+ * "Cannot read property 'foo' of null" or "Cannot read properties of undefined (reading 'bar')"
+ */
+function extractPropertyName(message) {
+    // "Cannot read property 'X' of null/undefined"
+    const match1 = message.match(/Cannot read propert(?:y|ies) (?:of \w+ \(reading )?'(\w+)'/);
+    if (match1)
+        return match1[1];
+    // "Cannot read properties of undefined (reading 'X')"
+    const match2 = message.match(/reading '(\w+)'/);
+    if (match2)
+        return match2[1];
+    return null;
+}
+const FIX_PATTERNS = [
+    // 6. Missing await — ".then is not a function" means result is not a Promise
+    {
+        test: (msg) => /\.then is not a function/i.test(msg) || /is not a function.*promise/i.test(msg),
+        apply: (line) => {
+            // Find a function call pattern and prepend await
+            const match = line.match(/^(\s*(?:const|let|var)\s+\w+\s*=\s*)(\w+\()/);
+            if (match) {
+                return line.replace(match[2], `await ${match[2]}`);
+            }
+            // Try bare call: `  someFunc(...)`
+            const bareMatch = line.match(/^(\s*)(\w+\()/);
+            if (bareMatch) {
+                return `${bareMatch[1]}await ${line.trimStart()}`;
+            }
+            return null;
+        },
+        describe: () => 'Add missing await before Promise-returning function call to prevent .then TypeError',
+    },
+    // 7. Missing import — "Cannot find module 'X'"
+    {
+        test: (msg) => /Cannot find module '(.+)'/i.test(msg),
+        apply: (line, message) => {
+            const match = message.match(/Cannot find module '([^']+)'/i);
+            if (!match)
+                return null;
+            const moduleName = match[1];
+            const trimmed = line.trimStart();
+            const indent = line.slice(0, line.length - trimmed.length);
+            return `${indent}import {} from '${moduleName}'; // TODO: specify named imports\n${line}`;
+        },
+        describe: (msg) => {
+            const match = msg.match(/Cannot find module '([^']+)'/i);
+            return `Add missing import statement for module '${match?.[1] ?? 'unknown'}'`;
+        },
+    },
+    // 8. Array index out of bounds — "Cannot read properties of undefined (reading '0')"
+    //    More specific: only when the reading key is a digit (array index)
+    {
+        test: (msg) => /Cannot read propert(?:y|ies).*of undefined/i.test(msg) &&
+            /reading '(\d+)'/.test(msg),
+        apply: (line) => {
+            const trimmed = line.trimStart();
+            const indent = line.slice(0, line.length - trimmed.length);
+            // Detect the array variable (e.g. `items[0]` → `items`)
+            const arrayMatch = trimmed.match(/(\w+)\[\d+\]/);
+            const arrName = arrayMatch ? arrayMatch[1] : 'arr';
+            return `${indent}if (${arrName} && ${arrName}.length > 0) { ${trimmed} }`;
+        },
+        describe: () => 'Add array bounds check to prevent undefined index access',
+    },
+    // 9. Missing null coalescing — "Cannot read properties of null (reading 'X')"
+    //    Must come BEFORE pattern 1 so we handle null specifically here.
+    {
+        test: (msg) => /Cannot read propert(?:y|ies)/.test(msg) && /\bnull\b/.test(msg) && !/undefined/.test(msg),
+        apply: (line, message) => {
+            const prop = extractPropertyName(message);
+            if (!prop)
+                return null;
+            const pattern = new RegExp(`(?<!\\?)\\.(${prop})\\b`);
+            if (!pattern.test(line))
+                return null;
+            // Replace `.prop` with `?.prop ?? undefined`
+            return line.replace(pattern, `?.${prop} ?? undefined`);
+        },
+        describe: (msg) => {
+            const prop = extractPropertyName(msg);
+            return `Add optional chaining and nullish coalescing for null property '${prop ?? 'unknown'}' access`;
+        },
+    },
+    // 10. JSON parse error — "Unexpected token X in JSON"
+    {
+        test: (msg) => /Unexpected token.+JSON/i.test(msg) || /SyntaxError.*JSON/i.test(msg),
+        apply: (line) => {
+            if (!/JSON\.parse/.test(line))
+                return null;
+            const trimmed = line.trimStart();
+            const indent = line.slice(0, line.length - trimmed.length);
+            return [
+                `${indent}try {`,
+                `${indent}  ${trimmed}`,
+                `${indent}} catch {`,
+                `${indent}  /* handle JSON parse error */`,
+                `${indent}}`,
+            ].join('\n');
+        },
+        describe: () => 'Wrap JSON.parse in try/catch to handle malformed JSON input',
+    },
+    // 1. TypeError: Cannot read property 'X' of null/undefined → optional chaining
+    {
+        test: (msg) => /Cannot read propert(?:y|ies)/.test(msg) &&
+            /(?:null|undefined)/.test(msg),
+        apply: (line, message) => {
+            const prop = extractPropertyName(message);
+            if (!prop)
+                return null;
+            // Replace `.prop` with `?.prop` if not already optional-chained
+            const pattern = new RegExp(`(?<!\\?)\\.(${prop})\\b`);
+            if (!pattern.test(line))
+                return null;
+            return line.replace(pattern, `?.${prop}`);
+        },
+        describe: (msg) => {
+            const prop = extractPropertyName(msg);
+            return `Add optional chaining for property '${prop ?? 'unknown'}' to prevent TypeError on null/undefined`;
+        },
+    },
+    // 2. TypeError: X is not a function → guard with typeof check
+    {
+        test: (msg) => /is not a function/.test(msg),
+        apply: (line, message) => {
+            const match = message.match(/(\w+) is not a function/);
+            if (!match)
+                return null;
+            const fnName = match[1];
+            // Add typeof guard: `if (typeof fn === 'function') { fn(...) }`
+            const callPattern = new RegExp(`(${fnName})\\s*\\(`);
+            if (!callPattern.test(line))
+                return null;
+            const trimmed = line.trimStart();
+            const indent = line.slice(0, line.length - trimmed.length);
+            return `${indent}if (typeof ${fnName} === 'function') { ${trimmed} }`;
+        },
+        describe: (msg) => {
+            const match = msg.match(/(\w+) is not a function/);
+            return `Add typeof guard before calling '${match?.[1] ?? 'unknown'}' to prevent TypeError`;
+        },
+    },
+    // 3. ReferenceError: X is not defined → declare as undefined
+    {
+        test: (msg) => /is not defined/.test(msg) && msg.includes('ReferenceError'),
+        apply: (line, message) => {
+            const match = message.match(/(\w+) is not defined/);
+            if (!match)
+                return null;
+            const varName = match[1];
+            const trimmed = line.trimStart();
+            const indent = line.slice(0, line.length - trimmed.length);
+            return `${indent}const ${varName} = undefined; // TODO: provide correct value\n${line}`;
+        },
+        describe: (msg) => {
+            const match = msg.match(/(\w+) is not defined/);
+            return `Declare missing variable '${match?.[1] ?? 'unknown'}' — requires manual review`;
+        },
+    },
+    // 4. Unhandled promise rejection → wrap in try/catch
+    {
+        test: (msg) => /[Uu]nhandled.*(?:promise|rejection)/i.test(msg) ||
+            /UnhandledPromiseRejection/i.test(msg),
+        apply: (line) => {
+            const trimmed = line.trimStart();
+            const indent = line.slice(0, line.length - trimmed.length);
+            // Wrap the line in a try/catch
+            return [
+                `${indent}try {`,
+                `${indent}  ${trimmed}`,
+                `${indent}} catch (err) {`,
+                `${indent}  console.error('Caught previously unhandled rejection:', err);`,
+                `${indent}}`,
+            ].join('\n');
+        },
+        describe: () => 'Wrap unhandled async call in try/catch block',
+    },
+    // 5. SQL injection → parameterize
+    {
+        test: (msg) => /sql.*injection/i.test(msg),
+        apply: (line) => {
+            // Match template literal or string concatenation in SQL-like context
+            const templateMatch = line.match(/`([^`]*\$\{(\w+)\}[^`]*)`/);
+            if (templateMatch) {
+                const param = templateMatch[2];
+                const trimmed = line.trimStart();
+                const indent = line.slice(0, line.length - trimmed.length);
+                // Replace template literal with parameterized query
+                const safeSql = templateMatch[1].replace(`\${${param}}`, '?');
+                return `${indent}// FIXED: parameterized query to prevent SQL injection\n${indent}${line.replace(templateMatch[0], `'${safeSql}', [${param}]`)}`;
+            }
+            return null;
+        },
+        describe: () => 'Parameterize SQL query to prevent SQL injection',
+    },
+];
+/**
+ * Analyze an error and generate a code fix (without creating a PR).
+ */
+export function generateFix(error, fileContent) {
+    if (!error.file || !error.line)
+        return null;
+    const lines = fileContent.split('\n');
+    const lineIndex = error.line - 1;
+    if (lineIndex < 0 || lineIndex >= lines.length)
+        return null;
+    const targetLine = lines[lineIndex];
+    for (const pattern of FIX_PATTERNS) {
+        if (pattern.test(error.message)) {
+            const fixedLine = pattern.apply(targetLine, error.message);
+            if (fixedLine !== null && fixedLine !== targetLine) {
+                const fixedLines = [...lines];
+                fixedLines[lineIndex] = fixedLine;
+                return {
+                    filePath: error.file,
+                    original: fileContent,
+                    fixed: fixedLines.join('\n'),
+                    description: pattern.describe(error.message),
+                };
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Parse a stack trace to extract file and line number.
+ */
+export function parseStackTrace(stackTrace) {
+    // Match patterns like "at handler (/src/api/route.ts:42:10)" or "at /src/api/route.ts:42"
+    const match = stackTrace.match(/at\s+(?:\S+\s+)?(?:\()?([^:]+):(\d+)/);
+    if (!match)
+        return null;
+    return { file: match[1], line: parseInt(match[2], 10) };
+}
+/**
+ * Generate a fix based on error analysis and create a PR via GitHub API.
+ */
+export async function generateAutoFixPr(options) {
+    const { error, repoFullName, installationId, baseBranch = 'main' } = options;
+    // 1. Determine the file and line from the error or its stack trace
+    let file = error.file;
+    let line = error.line;
+    if (!file && error.stack_trace) {
+        const parsed = parseStackTrace(error.stack_trace);
+        if (parsed) {
+            file = parsed.file;
+            line = parsed.line;
+        }
+    }
+    if (!file || !line) {
+        return {
+            status: 'cannot_fix',
+            description: 'Cannot determine the source file from this error. No stack trace or file info available.',
+            filesModified: [],
+        };
+    }
+    // Normalize file path (remove leading /)
+    const filePath = file.startsWith('/') ? file.slice(1) : file;
+    try {
+        // 2. Get an installation token
+        const token = await getInstallationToken(installationId);
+        // 3. Fetch file content from GitHub
+        const fileResponse = (await githubApi(`/repos/${repoFullName}/contents/${filePath}`, {
+            token,
+            method: 'GET',
+        }));
+        if (!fileResponse.content) {
+            return {
+                status: 'cannot_fix',
+                description: `File ${filePath} not found in repository.`,
+                filesModified: [],
+            };
+        }
+        const fileContent = Buffer.from(fileResponse.content, 'base64').toString('utf-8');
+        // 4. Generate the fix
+        const patch = generateFix({ ...error, file: filePath, line }, fileContent);
+        if (!patch) {
+            return {
+                status: 'fix_suggested',
+                description: error.suggested_fix ?? `Unable to auto-fix: ${error.message}`,
+                filesModified: [],
+            };
+        }
+        // 5. Create a new branch
+        const branchName = `shipsafe/fix-${error.id}`;
+        // Get the base branch SHA
+        const baseBranchRef = (await githubApi(`/repos/${repoFullName}/git/ref/heads/${baseBranch}`, {
+            token,
+        }));
+        const baseSha = baseBranchRef.object.sha;
+        // Create the new branch
+        await githubApi(`/repos/${repoFullName}/git/refs`, {
+            method: 'POST',
+            token,
+            body: {
+                ref: `refs/heads/${branchName}`,
+                sha: baseSha,
+            },
+        });
+        // 6. Commit the fix
+        await githubApi(`/repos/${repoFullName}/contents/${filePath}`, {
+            method: 'PUT',
+            token,
+            body: {
+                message: `fix: ${patch.description}`,
+                content: Buffer.from(patch.fixed).toString('base64'),
+                sha: fileResponse.sha,
+                branch: branchName,
+            },
+        });
+        // 7. Create the PR
+        const pr = (await githubApi(`/repos/${repoFullName}/pulls`, {
+            method: 'POST',
+            token,
+            body: {
+                title: `fix: ${truncate(error.message, 60)}`,
+                head: branchName,
+                base: baseBranch,
+                body: [
+                    '## Auto-Fix by ShipSafe',
+                    '',
+                    `**Error:** ${error.message}`,
+                    '',
+                    `**Root cause:** ${error.root_cause ?? 'See error details'}`,
+                    '',
+                    `**Fix applied:** ${patch.description}`,
+                    '',
+                    `**File:** \`${filePath}\` (line ${line})`,
+                    '',
+                    '---',
+                    '_This PR was automatically generated by ShipSafe. Please review before merging._',
+                ].join('\n'),
+            },
+        }));
+        return {
+            status: 'pr_created',
+            prUrl: pr.html_url,
+            branchName,
+            description: patch.description,
+            filesModified: [filePath],
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            status: 'cannot_fix',
+            description: `Auto-fix PR failed: ${message}`,
+            filesModified: [],
+        };
+    }
+}
+function truncate(str, maxLen) {
+    if (str.length <= maxLen)
+        return str;
+    return str.slice(0, maxLen - 3) + '...';
+}
+//# sourceMappingURL=pr-generator.js.map

package/dist/src/autofix/pr-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-generator.js","sourceRoot":"","sources":["../../../src/autofix/pr-generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AA8CnE;;;GAGG;AACH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,+CAA+C;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC3F,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,sDAAsD;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,YAAY,GAAiB;IACjC,6EAA6E;IAC7E;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/F,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,iDAAiD;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACxE,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,mCAAmC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC9C,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACpD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,qFAAqF;KACtG;IAED,+CAA+C;IAC/C;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;QACrD,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC7D,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,OAAO,GAAG,MAAM,mBAAmB,UAAU,sCAAsC,IAAI,EAAE,CAAC;QAC5F,CAAC;QACD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACzD,OAAO,4CAA4C,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,GAAG,CAAC;QAChF,CAAC;KACF;IAED,qFAAqF;IACrF,uEAAuE;IACvE;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CACZ,6CAA6C,CAAC,IAAI,CAAC,GAAG,CAAC;YACvD,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,wDAAwD;YACxD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACnD,OAAO,GAAG,MAAM,OAAO,OAAO,OAAO,OAAO,kBAAkB,OAAO,IAAI,CAAC;QAC5E,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,0DAA0D;KAC3E;IAED,8EAA8E;IAC9E,qEAAqE;IACrE;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CACZ,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5F,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,6CAA6C;YAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,eAAe,CAAC,CAAC;QACzD,CAAC;QACD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACtC,OAAO,mEAAmE,IAAI,IAAI,SAAS,UAAU,CAAC;QACxG,CAAC;KACF;IAED,sDAAsD;IACtD;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QACpF,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,OAAO;gBACL,GAAG,MAAM,OAAO;gBAChB,GAAG,MAAM,KAAK,OAAO,EAAE;gBACvB,GAAG,MAAM,WAAW;gBACpB,GAAG,MAAM,iCAAiC;gBAC1C,GAAG,MAAM,GAAG;aACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,6DAA6D;KAC9E;IAED,+EAA+E;IAC/E;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CACZ,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC;YACxC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAChC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,gEAAgE;YAChE,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACtC,OAAO,uCAAuC,IAAI,IAAI,SAAS,0CAA0C,CAAC;QAC5G,CAAC;KACF;IAED,8DAA8D;IAC9D;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5C,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACvD,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,gEAAgE;YAChE,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,UAAU,CAAC,CAAC;YACrD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,OAAO,GAAG,MAAM,cAAc,MAAM,sBAAsB,OAAO,IAAI,CAAC;QACxE,CAAC;QACD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACnD,OAAO,oCAAoC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,wBAAwB,CAAC;QAC7F,CAAC;KACF;IAED,6DAA6D;IAC7D;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC3E,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,OAAO,GAAG,MAAM,SAAS,OAAO,iDAAiD,IAAI,EAAE,CAAC;QAC1F,CAAC;QACD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAChD,OAAO,6BAA6B,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,4BAA4B,CAAC;QAC1F,CAAC;KACF;IAED,qDAAqD;IACrD;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CACZ,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC;YAChD,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;QACxC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,+BAA+B;YAC/B,OAAO;gBACL,GAAG,MAAM,OAAO;gBAChB,GAAG,MAAM,KAAK,OAAO,EAAE;gBACvB,GAAG,MAAM,iBAAiB;gBAC1B,GAAG,MAAM,iEAAiE;gBAC1E,GAAG,MAAM,GAAG;aACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,8CAA8C;KAC/D;IAED,kCAAkC;IAClC;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1C,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,qEAAqE;YACrE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC9D,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC3D,oDAAoD;gBACpD,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO,GAAG,MAAM,2DAA2D,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;YACnJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,iDAAiD;KAClE;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAqB,EAAE,WAAmB;IACpE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IACjC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAE5D,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAEpC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gBACnD,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;gBAC9B,UAAU,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;gBAClC,OAAO;oBACL,QAAQ,EAAE,KAAK,CAAC,IAAI;oBACpB,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC5B,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;iBAC7C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,0FAA0F;IAC1F,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAyB;IAC/D,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;IAE7E,mEAAmE;IACnE,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACtB,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAEtB,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACnB,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,0FAA0F;YACvG,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7D,IAAI,CAAC;QACH,+BAA+B;QAC/B,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAEzD,oCAAoC;QACpC,MAAM,YAAY,GAAG,CAAC,MAAM,SAAS,CAAC,UAAU,YAAY,aAAa,QAAQ,EAAE,EAAE;YACnF,KAAK;YACL,MAAM,EAAE,KAAK;SACd,CAAC,CAAuD,CAAC;QAE1D,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,WAAW,EAAE,QAAQ,QAAQ,2BAA2B;gBACxD,aAAa,EAAE,EAAE;aAClB,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAElF,sBAAsB;QACtB,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;QAE3E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,MAAM,EAAE,eAAe;gBACvB,WAAW,EAAE,KAAK,CAAC,aAAa,IAAI,uBAAuB,KAAK,CAAC,OAAO,EAAE;gBAC1E,aAAa,EAAE,EAAE;aAClB,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,MAAM,UAAU,GAAG,gBAAgB,KAAK,CAAC,EAAE,EAAE,CAAC;QAE9C,0BAA0B;QAC1B,MAAM,aAAa,GAAG,CAAC,MAAM,SAAS,CAAC,UAAU,YAAY,kBAAkB,UAAU,EAAE,EAAE;YAC3F,KAAK;SACN,CAAC,CAAgC,CAAC;QAEnC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;QAEzC,wBAAwB;QACxB,MAAM,SAAS,CAAC,UAAU,YAAY,WAAW,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,KAAK;YACL,IAAI,EAAE;gBACJ,GAAG,EAAE,cAAc,UAAU,EAAE;gBAC/B,GAAG,EAAE,OAAO;aACb;SACF,CAAC,CAAC;QAEH,oBAAoB;QACpB,MAAM,SAAS,CAAC,UAAU,YAAY,aAAa,QAAQ,EAAE,EAAE;YAC7D,MAAM,EAAE,KAAK;YACb,KAAK;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,QAAQ,KAAK,CAAC,WAAW,EAAE;gBACpC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACpD,GAAG,EAAE,YAAY,CAAC,GAAG;gBACrB,MAAM,EAAE,UAAU;aACnB;SACF,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,EAAE,GAAG,CAAC,MAAM,SAAS,CAAC,UAAU,YAAY,QAAQ,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,KAAK;YACL,IAAI,EAAE;gBACJ,KAAK,EAAE,QAAQ,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE;gBAC5C,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE;oBACJ,yBAAyB;oBACzB,EAAE;oBACF,cAAc,KAAK,CAAC,OAAO,EAAE;oBAC7B,EAAE;oBACF,mBAAmB,KAAK,CAAC,UAAU,IAAI,mBAAmB,EAAE;oBAC5D,EAAE;oBACF,oBAAoB,KAAK,CAAC,WAAW,EAAE;oBACvC,EAAE;oBACF,eAAe,QAAQ,YAAY,IAAI,GAAG;oBAC1C,EAAE;oBACF,KAAK;oBACL,kFAAkF;iBACnF,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF,CAAC,CAAyB,CAAC;QAE5B,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,EAAE,CAAC,QAAQ;YAClB,UAAU;YACV,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,CAAC,QAAQ,CAAC;SAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,uBAAuB,OAAO,EAAE;YAC7C,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,MAAc;IAC3C,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,GAAG,CAAC;IACrC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AAC1C,CAAC"}

package/dist/src/autofix/scaffolding.d.ts

@@ -0,0 +1,26 @@
+export interface ProjectTemplate {
+    framework: string;
+    recommendations: SecurityRecommendation[];
+}
+export interface SecurityRecommendation {
+    type: 'missing_helmet' | 'missing_cors' | 'missing_rate_limit' | 'missing_csp' | 'missing_env_config' | 'insecure_cookie';
+    description: string;
+    fix: string;
+    file: string;
+    priority: 'high' | 'medium' | 'low';
+}
+interface PackageJson {
+    dependencies?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+}
+/**
+ * Detect the framework from package.json dependencies.
+ */
+export declare function detectFramework(packageJson: PackageJson): string | null;
+/**
+ * Detect the project framework and generate security recommendations.
+ * Returns null if the framework cannot be detected.
+ */
+export declare function detectAndRecommend(projectDir?: string): Promise<ProjectTemplate | null>;
+export {};
+//# sourceMappingURL=scaffolding.d.ts.map