@shipsafe/cli 0.1.0

package/dist/src/cli/scan.js

@@ -0,0 +1,75 @@
+import chalk from 'chalk';
+import { runPatternEngine } from '../engines/pattern/index.js';
+import { fixHardcodedSecret } from '../autofix/secret-fixer.js';
+import { gateFeature } from './license-gate.js';
+const SEVERITY_COLORS = {
+    critical: chalk.red,
+    high: chalk.red,
+    medium: chalk.yellow,
+    low: chalk.blue,
+    info: chalk.gray,
+};
+function formatDuration(ms) {
+    return `${(ms / 1000).toFixed(1)}s`;
+}
+function formatResults(result) {
+    console.log(chalk.bold('\nShipSafe Scan Results'));
+    console.log(chalk.bold('─'.repeat(40)));
+    const duration = formatDuration(result.scan_duration_ms);
+    const scoreLine = `Score: ${result.score} | ${result.findings.length} findings | ${duration}`;
+    console.log(scoreLine);
+    if (result.findings.length > 0) {
+        console.log('');
+        for (const finding of result.findings) {
+            const colorFn = SEVERITY_COLORS[finding.severity];
+            const severityLabel = colorFn(finding.severity.toUpperCase());
+            console.log(`${severityLabel}  ${finding.file}:${finding.line}`);
+            console.log(`  ${finding.description}`);
+            console.log(`  Fix: ${finding.fix_suggestion}`);
+        }
+    }
+    console.log('');
+}
+export async function handleScanAction(options) {
+    const scope = options.scope;
+    const result = await runPatternEngine({
+        targetPath: process.cwd(),
+        scope,
+    });
+    if (options.fix) {
+        const gate = await gateFeature('autofix');
+        if (!gate.allowed) {
+            console.log(chalk.yellow(`\n${gate.reason}`));
+        }
+        else {
+            for (const finding of result.findings) {
+                if (finding.type === 'hardcoded_secret' && finding.auto_fixable) {
+                    const fix = await fixHardcodedSecret(finding);
+                    console.log(chalk.green(`Fixed: moved ${fix.envVarName} to .env in ${finding.file}:${finding.line}`));
+                }
+            }
+        }
+    }
+    if (options.json) {
+        console.log(JSON.stringify(result, null, 2));
+    }
+    else {
+        formatResults(result);
+    }
+    const hasCriticalOrHigh = result.findings.some((f) => f.severity === 'critical' || f.severity === 'high');
+    if (hasCriticalOrHigh) {
+        process.exit(1);
+    }
+}
+export function registerScanCommand(program) {
+    program
+        .command('scan')
+        .description('Scan project for security vulnerabilities')
+        .option('--scope <scope>', 'Scan scope: staged, all, or file:<path>', 'staged')
+        .option('--fix', 'Attempt to auto-fix findings', false)
+        .option('--json', 'Output results as JSON', false)
+        .action(async (options) => {
+        await handleScanAction(options);
+    });
+}
+//# sourceMappingURL=scan.js.map

package/dist/src/cli/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../src/cli/scan.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,MAAM,eAAe,GAA+C;IAClE,QAAQ,EAAE,KAAK,CAAC,GAAG;IACnB,IAAI,EAAE,KAAK,CAAC,GAAG;IACf,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,GAAG,EAAE,KAAK,CAAC,IAAI;IACf,IAAI,EAAE,KAAK,CAAC,IAAI;CACjB,CAAC;AAEF,SAAS,cAAc,CAAC,EAAU;IAChC,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,MAAkB;IACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,UAAU,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,eAAe,QAAQ,EAAE,CAAC;IAC9F,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEvB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,aAAa,KAAK,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAoB;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAkB,CAAC;IAEzC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;QACpC,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE;QACzB,KAAK;KACN,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACtC,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;oBAChE,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;oBAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,GAAG,CAAC,UAAU,eAAe,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACxG,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC1D,CAAC;IAEF,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,2CAA2C,CAAC;SACxD,MAAM,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,QAAQ,CAAC;SAC9E,MAAM,CAAC,OAAO,EAAE,8BAA8B,EAAE,KAAK,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,wBAAwB,EAAE,KAAK,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,OAAoB,EAAE,EAAE;QACrC,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/cli/setup.d.ts

@@ -0,0 +1,27 @@
+import { Command } from 'commander';
+export interface SetupOptions {
+    skipHooks?: boolean;
+    skipMcp?: boolean;
+    skipClaudeMd?: boolean;
+}
+/**
+ * Registers the ShipSafe MCP server in Claude Code's global config.
+ * Merges into existing config if present; creates new config otherwise.
+ */
+export declare function registerMcpClaudeCode(): Promise<void>;
+/**
+ * Registers the ShipSafe MCP server in Cursor's project-level config.
+ * Merges into existing config if present; creates new config otherwise.
+ */
+export declare function registerMcpCursor(projectDir: string): Promise<void>;
+/**
+ * Registers the ShipSafe MCP server in all known editor configs.
+ */
+export declare function registerMcpServers(projectDir: string): Promise<void>;
+/**
+ * Main setup action — orchestrates hooks, MCP, and CLAUDE.md.
+ * Each step is independent; failures are warned but don't block other steps.
+ */
+export declare function handleSetupAction(options: SetupOptions): Promise<void>;
+export declare function registerSetupCommand(program: Command): void;
+//# sourceMappingURL=setup.d.ts.map

package/dist/src/cli/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../src/cli/setup.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AA2BD;;;GAGG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAe3D;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAezE;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1E;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC5E;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAc3D"}

package/dist/src/cli/setup.js

@@ -0,0 +1,134 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { homedir } from 'node:os';
+import chalk from 'chalk';
+import { installHooks } from '../hooks/installer.js';
+import { injectClaudeMd } from '../claude-md/manager.js';
+const MCP_SERVER_ENTRY = {
+    command: 'npx',
+    args: ['-y', 'shipsafe', 'mcp-server'],
+};
+/**
+ * Reads a JSON file, returning null if it doesn't exist or is invalid.
+ */
+async function readJsonFile(filePath) {
+    try {
+        const raw = await fs.readFile(filePath, 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Writes a JSON file, creating parent directories as needed.
+ */
+async function writeJsonFile(filePath, data) {
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    await fs.writeFile(filePath, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+}
+/**
+ * Registers the ShipSafe MCP server in Claude Code's global config.
+ * Merges into existing config if present; creates new config otherwise.
+ */
+export async function registerMcpClaudeCode() {
+    const configPath = path.join(homedir(), '.claude', 'claude_desktop_config.json');
+    const existing = await readJsonFile(configPath);
+    if (existing) {
+        existing.mcpServers = existing.mcpServers ?? {};
+        existing.mcpServers.shipsafe = MCP_SERVER_ENTRY;
+        await writeJsonFile(configPath, existing);
+    }
+    else {
+        await writeJsonFile(configPath, {
+            mcpServers: {
+                shipsafe: MCP_SERVER_ENTRY,
+            },
+        });
+    }
+}
+/**
+ * Registers the ShipSafe MCP server in Cursor's project-level config.
+ * Merges into existing config if present; creates new config otherwise.
+ */
+export async function registerMcpCursor(projectDir) {
+    const configPath = path.join(projectDir, '.cursor', 'mcp.json');
+    const existing = await readJsonFile(configPath);
+    if (existing) {
+        existing.mcpServers = existing.mcpServers ?? {};
+        existing.mcpServers.shipsafe = MCP_SERVER_ENTRY;
+        await writeJsonFile(configPath, existing);
+    }
+    else {
+        await writeJsonFile(configPath, {
+            mcpServers: {
+                shipsafe: MCP_SERVER_ENTRY,
+            },
+        });
+    }
+}
+/**
+ * Registers the ShipSafe MCP server in all known editor configs.
+ */
+export async function registerMcpServers(projectDir) {
+    await registerMcpClaudeCode();
+    await registerMcpCursor(projectDir);
+}
+/**
+ * Main setup action — orchestrates hooks, MCP, and CLAUDE.md.
+ * Each step is independent; failures are warned but don't block other steps.
+ */
+export async function handleSetupAction(options) {
+    const projectDir = process.cwd();
+    console.log('Setting up ShipSafe...');
+    // Step 1: Install git hooks
+    if (!options.skipHooks) {
+        try {
+            await installHooks(projectDir);
+            console.log(chalk.green('✓') + ' Git hooks installed');
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.warn(chalk.yellow('⚠') + ` Git hooks: ${msg}`);
+        }
+    }
+    // Step 2: Register MCP servers
+    if (!options.skipMcp) {
+        try {
+            await registerMcpServers(projectDir);
+            console.log(chalk.green('✓') + ' MCP server registered');
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.warn(chalk.yellow('⚠') + ` MCP registration: ${msg}`);
+        }
+    }
+    // Step 3: Inject CLAUDE.md
+    if (!options.skipClaudeMd) {
+        try {
+            await injectClaudeMd(projectDir);
+            console.log(chalk.green('✓') + ' CLAUDE.md updated');
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.warn(chalk.yellow('⚠') + ` CLAUDE.md: ${msg}`);
+        }
+    }
+    console.log(`\nShipSafe is ready! Run 'shipsafe scan' to run your first scan.`);
+}
+export function registerSetupCommand(program) {
+    program
+        .command('setup')
+        .description('Set up ShipSafe for current project (hooks, MCP, CLAUDE.md)')
+        .option('--skip-hooks', 'Skip git hook installation')
+        .option('--skip-mcp', 'Skip MCP server registration')
+        .option('--skip-claude-md', 'Skip CLAUDE.md injection')
+        .action(async (options) => {
+        await handleSetupAction({
+            skipHooks: options.skipHooks,
+            skipMcp: options.skipMcp,
+            skipClaudeMd: options.skipClaudeMd,
+        });
+    });
+}
+//# sourceMappingURL=setup.js.map

package/dist/src/cli/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../src/cli/setup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAQzD,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC;CACvC,CAAC;AAEF;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,IAAyB;IACtE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;QAChD,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,gBAAgB,CAAC;QAChD,MAAM,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,CAAC,UAAU,EAAE;YAC9B,UAAU,EAAE;gBACV,QAAQ,EAAE,gBAAgB;aAC3B;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;QAChD,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,gBAAgB,CAAC;QAChD,MAAM,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,CAAC,UAAU,EAAE;YAC9B,UAAU,EAAE;gBACV,QAAQ,EAAE,gBAAgB;aAC3B;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB;IACzD,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAqB;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEjC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAEtC,4BAA4B;IAC5B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,sBAAsB,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,wBAAwB,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,sBAAsB,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,6DAA6D,CAAC;SAC1E,MAAM,CAAC,cAAc,EAAE,4BAA4B,CAAC;SACpD,MAAM,CAAC,YAAY,EAAE,8BAA8B,CAAC;SACpD,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,iBAAiB,CAAC;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/cli/status.d.ts

@@ -0,0 +1,4 @@
+import { Command } from 'commander';
+export declare function handleStatusAction(): Promise<void>;
+export declare function registerStatusCommand(program: Command): void;
+//# sourceMappingURL=status.d.ts.map

package/dist/src/cli/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/cli/status.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAwBxD;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAO5D"}

package/dist/src/cli/status.js

@@ -0,0 +1,52 @@
+import { existsSync, readFileSync } from 'node:fs';
+import * as path from 'node:path';
+import chalk from 'chalk';
+import { loadConfig, getProjectName } from '../config/manager.js';
+import { getAvailableScanners } from '../engines/pattern/index.js';
+import { HOOK_MARKER } from '../constants.js';
+/**
+ * Checks whether the ShipSafe pre-commit hook is installed in the
+ * current project's .git/hooks directory.
+ */
+function checkHooksInstalled(projectDir) {
+    const hookPath = path.join(projectDir, '.git', 'hooks', 'pre-commit');
+    try {
+        if (!existsSync(hookPath))
+            return false;
+        const contents = readFileSync(hookPath, 'utf-8');
+        return contents.includes(HOOK_MARKER);
+    }
+    catch {
+        return false;
+    }
+}
+export async function handleStatusAction() {
+    const projectDir = process.cwd();
+    const config = await loadConfig(projectDir);
+    const projectName = getProjectName(projectDir);
+    const hooksInstalled = checkHooksInstalled(projectDir);
+    const scanners = await getAvailableScanners();
+    const check = chalk.green('\u2713');
+    const cross = chalk.red('\u2717');
+    const semgrepLabel = `semgrep ${scanners.semgrep ? check : cross}`;
+    const gitleaksLabel = `gitleaks ${scanners.gitleaks ? check : cross}`;
+    const trivyLabel = `trivy ${scanners.trivy ? check : cross}`;
+    const license = config.licenseKey ? 'Pro' : 'Free tier';
+    console.log(chalk.bold('\nShipSafe Status'));
+    console.log(chalk.bold('\u2500'.repeat(40)));
+    console.log(`Project:        ${projectName}`);
+    console.log(`Security Score: ${chalk.dim("\u2014 (run 'shipsafe scan' first)")}`);
+    console.log(`Hooks Installed: ${hooksInstalled ? chalk.green('Yes') : chalk.red('No')}`);
+    console.log(`Scanners:       ${semgrepLabel}  ${gitleaksLabel}  ${trivyLabel}`);
+    console.log(`License:        ${license}`);
+    console.log('');
+}
+export function registerStatusCommand(program) {
+    program
+        .command('status')
+        .description('Show ShipSafe status for current project')
+        .action(async () => {
+        await handleStatusAction();
+    });
+}
+//# sourceMappingURL=status.js.map

package/dist/src/cli/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/cli/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;GAGG;AACH,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAEtE,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAE9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAElC,MAAM,YAAY,GAAG,WAAW,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IACnE,MAAM,aAAa,GAAG,YAAY,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG,SAAS,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAE7D,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;IAExD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,mBAAmB,YAAY,KAAK,aAAa,KAAK,UAAU,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/cli/upload-sourcemaps.d.ts

@@ -0,0 +1,13 @@
+import { Command } from 'commander';
+/**
+ * Upload source maps action — finds .map files and uploads them to the ShipSafe API.
+ */
+export declare function handleUploadSourcemaps(options: {
+    dir: string;
+    release?: string;
+}): Promise<void>;
+/**
+ * Register the 'upload-sourcemaps' command with the CLI program.
+ */
+export declare function registerUploadSourcemapsCommand(program: Command): void;
+//# sourceMappingURL=upload-sourcemaps.d.ts.map

package/dist/src/cli/upload-sourcemaps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-sourcemaps.d.ts","sourceRoot":"","sources":["../../../src/cli/upload-sourcemaps.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwDpC;;GAEG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsGhB;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAWtE"}

package/dist/src/cli/upload-sourcemaps.js

@@ -0,0 +1,157 @@
+import * as fs from 'node:fs/promises';
+import { readFileSync, existsSync } from 'node:fs';
+import * as path from 'node:path';
+import chalk from 'chalk';
+import { loadConfig, getApiEndpoint } from '../config/manager.js';
+import { gateFeature } from './license-gate.js';
+/**
+ * Recursively find all .map files in a directory.
+ */
+async function findSourceMaps(dir) {
+    const results = [];
+    let names;
+    try {
+        names = await fs.readdir(dir);
+    }
+    catch {
+        return results;
+    }
+    for (const name of names) {
+        const fullPath = path.join(dir, name);
+        try {
+            const stat = await fs.stat(fullPath);
+            if (stat.isDirectory()) {
+                // Skip node_modules
+                if (name === 'node_modules')
+                    continue;
+                const nested = await findSourceMaps(fullPath);
+                results.push(...nested);
+            }
+            else if (name.endsWith('.map')) {
+                results.push(fullPath);
+            }
+        }
+        catch {
+            // Skip files we can't stat
+        }
+    }
+    return results;
+}
+/**
+ * Reads the version field from package.json in the current working directory.
+ * Returns undefined if package.json is absent or has no version field.
+ */
+function readVersionFromPackageJson() {
+    const pkgPath = path.join(process.cwd(), 'package.json');
+    try {
+        if (existsSync(pkgPath)) {
+            const raw = readFileSync(pkgPath, 'utf-8');
+            const pkg = JSON.parse(raw);
+            return pkg.version ?? undefined;
+        }
+    }
+    catch {
+        // ignore
+    }
+    return undefined;
+}
+/**
+ * Upload source maps action — finds .map files and uploads them to the ShipSafe API.
+ */
+export async function handleUploadSourcemaps(options) {
+    const gate = await gateFeature('upload_sourcemaps');
+    if (!gate.allowed) {
+        console.log(chalk.yellow(`\n${gate.reason}`));
+        return;
+    }
+    const targetDir = path.resolve(process.cwd(), options.dir);
+    // Verify directory exists
+    try {
+        const stat = await fs.stat(targetDir);
+        if (!stat.isDirectory()) {
+            console.error(chalk.red(`Error: ${options.dir} is not a directory`));
+            return;
+        }
+    }
+    catch {
+        console.error(chalk.red(`Error: Directory ${options.dir} does not exist`));
+        console.log(`Run your build first, then try again.`);
+        return;
+    }
+    console.log(chalk.bold(`Scanning ${options.dir} for source maps...\n`));
+    const mapFiles = await findSourceMaps(targetDir);
+    if (mapFiles.length === 0) {
+        console.log(chalk.yellow('No source map files (.map) found.'));
+        console.log(`Ensure your build is configured to emit source maps.`);
+        return;
+    }
+    // List found files
+    for (const file of mapFiles) {
+        const relative = path.relative(process.cwd(), file);
+        console.log(`  ${chalk.cyan(relative)}`);
+    }
+    console.log('');
+    // Load config
+    const config = await loadConfig();
+    if (!config.projectId) {
+        console.log(chalk.yellow('Warning: No project ID configured. Run `shipsafe setup` to connect.'));
+        return;
+    }
+    const apiEndpoint = getApiEndpoint(config);
+    // Determine release version
+    const release = options.release ?? readVersionFromPackageJson() ?? 'unknown';
+    // Read all .map file contents
+    const sourceMaps = [];
+    for (const file of mapFiles) {
+        const relativePath = path.relative(process.cwd(), file);
+        const content = await fs.readFile(file, 'utf-8');
+        sourceMaps.push({ file_path: relativePath, source_map: content });
+    }
+    // Build request headers
+    const headers = {
+        'Content-Type': 'application/json',
+    };
+    if (config.licenseKey) {
+        headers['Authorization'] = `Bearer ${config.licenseKey}`;
+    }
+    // POST to API
+    const url = `${apiEndpoint}/v1/sourcemaps/batch`;
+    let response;
+    try {
+        response = await fetch(url, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({
+                project_id: config.projectId,
+                release,
+                source_maps: sourceMaps,
+            }),
+        });
+    }
+    catch (err) {
+        console.error(chalk.red(`Upload failed: ${err.message}`));
+        return;
+    }
+    if (!response.ok) {
+        const text = await response.text();
+        console.error(chalk.red(`Upload failed (${response.status}): ${text}`));
+        return;
+    }
+    console.log(chalk.green(`Found ${mapFiles.length} source map${mapFiles.length === 1 ? '' : 's'}, uploaded to ShipSafe.`));
+}
+/**
+ * Register the 'upload-sourcemaps' command with the CLI program.
+ */
+export function registerUploadSourcemapsCommand(program) {
+    program
+        .command('upload-sourcemaps')
+        .description('Upload source maps for production stack trace resolution')
+        .option('--dir <dir>', 'Directory containing source maps', './dist')
+        .option('--release <version>', 'Release version tag for the source maps')
+        .action(async (options) => {
+        // Default release to package.json version if not specified
+        const release = options.release ?? readVersionFromPackageJson() ?? 'unknown';
+        await handleUploadSourcemaps({ dir: options.dir, release });
+    });
+}
+//# sourceMappingURL=upload-sourcemaps.js.map

package/dist/src/cli/upload-sourcemaps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-sourcemaps.js","sourceRoot":"","sources":["../../../src/cli/upload-sourcemaps.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;GAEG;AACH,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,oBAAoB;gBACpB,IAAI,IAAI,KAAK,cAAc;oBAAE,SAAS;gBACtC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;YAC1B,CAAC;iBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;YACpD,OAAO,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAG5C;IACC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAE3D,0BAA0B;IAC1B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC;IAExE,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAEjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,mBAAmB;IACnB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,cAAc;IACd,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAElC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,qEAAqE,CACtE,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAE3C,4BAA4B;IAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,0BAA0B,EAAE,IAAI,SAAS,CAAC;IAE7E,8BAA8B;IAC9B,MAAM,UAAU,GAAqD,EAAE,CAAC;IACxE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,wBAAwB;IACxB,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,UAAU,EAAE,CAAC;IAC3D,CAAC;IAED,cAAc;IACd,MAAM,GAAG,GAAG,GAAG,WAAW,sBAAsB,CAAC;IACjD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,OAAO;gBACP,WAAW,EAAE,UAAU;aACxB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,SAAS,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAChG,CACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAAgB;IAC9D,OAAO;SACJ,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,aAAa,EAAE,kCAAkC,EAAE,QAAQ,CAAC;SACnE,MAAM,CAAC,qBAAqB,EAAE,yCAAyC,CAAC;SACxE,MAAM,CAAC,KAAK,EAAE,OAA0C,EAAE,EAAE;QAC3D,2DAA2D;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,0BAA0B,EAAE,IAAI,SAAS,CAAC;QAC7E,MAAM,sBAAsB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/config/manager.d.ts

@@ -0,0 +1,37 @@
+import type { ShipSafeConfig } from '../types.js';
+/**
+ * Returns the path to the global ShipSafe config directory (~/.shipsafe).
+ */
+export declare function getGlobalConfigDir(): string;
+/**
+ * Reads the global config from ~/.shipsafe/config.json.
+ * Returns defaults if the file is missing.
+ */
+export declare function loadGlobalConfig(): Promise<ShipSafeConfig>;
+/**
+ * Reads the project config from <projectDir>/shipsafe.config.json.
+ * Returns defaults if the file is missing.
+ */
+export declare function loadProjectConfig(projectDir?: string): Promise<ShipSafeConfig>;
+/**
+ * Merges global and project configs. Project config overrides global config.
+ * Merge order: defaults < global < project.
+ */
+export declare function loadConfig(projectDir?: string): Promise<ShipSafeConfig>;
+/**
+ * Returns the API endpoint. Priority: SHIPSAFE_API_URL env var > config value > default.
+ */
+export declare function getApiEndpoint(config?: Pick<ShipSafeConfig, 'apiEndpoint'>): string;
+/**
+ * Writes config to ~/.shipsafe/config.json, creating the directory if needed.
+ */
+export declare function saveGlobalConfig(config: Partial<ShipSafeConfig>): Promise<void>;
+/**
+ * Writes config to <projectDir>/shipsafe.config.json.
+ */
+export declare function saveProjectConfig(config: Partial<ShipSafeConfig>, projectDir?: string): Promise<void>;
+/**
+ * Derives project name from package.json name field or falls back to directory name.
+ */
+export declare function getProjectName(projectDir?: string): string;
+//# sourceMappingURL=manager.d.ts.map

package/dist/src/config/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/config/manager.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAuClD;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAeD;;;GAGG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,cAAc,CAAC,CAOhE;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAQpF;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAiB7E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,GAAG,MAAM,CAKnF;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAKrF;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,EAC/B,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAiB1D"}