@vaultcompass/vault-guard 1.0.0

package/dist/utils/scan-utils.js

@@ -0,0 +1,333 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatJson = formatJson;
+exports.formatSarif = formatSarif;
+exports.scanFileListAsync = scanFileListAsync;
+exports.isBinaryFile = isBinaryFile;
+exports.scanFilesAsync = scanFilesAsync;
+exports.scanFiles = scanFiles;
+exports.displayScanResults = displayScanResults;
+const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
+const vault_guard_core_1 = require("@vaultcompass/vault-guard-core");
+const chalk_1 = __importDefault(require("chalk"));
+function formatJson(results, opts = {}) {
+    return (0, vault_guard_core_1.formatJson)(results, {
+        cwd: process.cwd(),
+        diagnostics: opts.diagnostics,
+        run: opts.run,
+    });
+}
+function formatSarif(results, opts = {}) {
+    return (0, vault_guard_core_1.formatSarif)(results, {
+        cwd: process.cwd(),
+        diagnostics: opts.diagnostics,
+        run: opts.run,
+    });
+}
+const MAX_FILE_SIZE = 10 * 1024 * 1024; // 10MB
+const BINARY_EXTENSIONS = [
+    '.png', '.jpg', '.jpeg', '.gif', '.ico', '.pdf', '.zip',
+    '.tar', '.gz', '.exe', '.dll', '.so', '.dylib', '.bin'
+];
+/**
+ * Scan an explicit list of files (e.g. paths from \`git diff --cached\`).
+ * Skips missing paths and non-files silently.
+ */
+async function scanFileListAsync(files, scanner, options = {}) {
+    const { verbose = false, maxSize = MAX_FILE_SIZE, skipBinary = true, progress = false, concurrency = 10, configIgnorePatterns = [], } = options;
+    // Apply config ignore patterns to the explicit file list (e.g. staged files).
+    // buildConfigIgnoreFilter matches relative to cwd so patterns like
+    // `packages/**/__tests__/**` work identically for staged and directory scans.
+    const configIgnoreTester = configIgnorePatterns.length > 0
+        ? (0, vault_guard_core_1.buildConfigIgnoreFilter)(configIgnorePatterns, process.cwd())
+        : null;
+    const filteredFiles = configIgnoreTester
+        ? files.filter(f => !configIgnoreTester(f))
+        : files;
+    const results = [];
+    const scanFile = async (file) => {
+        try {
+            if (!fs_1.default.existsSync(file))
+                return;
+            const st = await fs_1.default.promises.stat(file);
+            if (!st.isFile())
+                return;
+            if (skipBinary && isBinaryFile(file))
+                return;
+            if (st.size > maxSize && verbose) {
+                console.warn(chalk_1.default.yellow(`⚠️  Large file (streaming line-by-line):`), chalk_1.default.white(path_1.default.relative(process.cwd(), file)), chalk_1.default.gray(`(${(st.size / 1024 / 1024).toFixed(2)}MB)`));
+            }
+            if (options.stats) {
+                options.stats.filesScanned += 1;
+                options.stats.bytesScanned += st.size;
+            }
+            const matches = st.size > maxSize
+                ? await (0, vault_guard_core_1.scanTextFileAsync)(scanner, file, { maxFileBytes: maxSize, bus: options.bus })
+                : scanner.scan(file);
+            if (matches.length > 0) {
+                results.push({ file, matches });
+            }
+        }
+        catch (error) {
+            if (options.bus) {
+                options.bus.add({
+                    code: 'file.read_error',
+                    severity: 'error',
+                    ctx: { file: path_1.default.relative(process.cwd(), file), detail: String(error) },
+                });
+            }
+            if (verbose) {
+                console.error(chalk_1.default.red('❌ Error scanning file:'), chalk_1.default.white(path_1.default.relative(process.cwd(), file)));
+                console.error(chalk_1.default.gray(String(error)));
+            }
+        }
+    };
+    for (let i = 0; i < filteredFiles.length; i += concurrency) {
+        const batch = filteredFiles.slice(i, i + concurrency);
+        await Promise.all(batch.map(scanFile));
+        if (progress && filteredFiles.length > 10) {
+            const percent = Math.round(((i + batch.length) / filteredFiles.length) * 100);
+            process.stderr.write(`\r${chalk_1.default.gray(`Scanning... ${percent}%`)}`);
+        }
+    }
+    if (progress && filteredFiles.length > 10) {
+        process.stderr.write('\r');
+    }
+    return results;
+}
+/**
+ * Check if a file is binary based on extension
+ */
+function isBinaryFile(filePath) {
+    const ext = path_1.default.extname(filePath).toLowerCase();
+    return BINARY_EXTENSIONS.includes(ext);
+}
+/**
+ * Scan files with proper filtering and error handling (async version)
+ * This is the shared scanning logic used by both scan and check commands
+ */
+async function scanFilesAsync(targetPaths, scanner, options = {}) {
+    const { verbose = false, maxSize = MAX_FILE_SIZE, skipBinary = true, progress = false, concurrency = 10 // Scan 10 files at a time by default
+     } = options;
+    const results = [];
+    for (const targetPath of targetPaths) {
+        try {
+            await fs_1.default.promises.access(targetPath);
+        }
+        catch {
+            if (verbose) {
+                console.error(chalk_1.default.red('❌ Error:'), chalk_1.default.white(`Path not found: ${targetPath}`));
+            }
+            continue;
+        }
+        const stat = await fs_1.default.promises.stat(targetPath);
+        let filesToScan;
+        if (stat.isFile()) {
+            filesToScan = [targetPath];
+        }
+        else if (stat.isDirectory()) {
+            filesToScan = await (0, vault_guard_core_1.getFilesToScanAsync)(targetPath, verbose, options.bus, options.configIgnorePatterns ?? []);
+        }
+        else {
+            if (verbose) {
+                console.error(chalk_1.default.red('❌ Error:'), chalk_1.default.white(`Invalid path: ${targetPath}`));
+            }
+            continue;
+        }
+        // Scan each file with proper safeguards (parallel with concurrency limit)
+        const scanFile = async (file) => {
+            try {
+                // Skip binary files
+                if (skipBinary && isBinaryFile(file)) {
+                    return;
+                }
+                // Check file size
+                const fileStat = await fs_1.default.promises.stat(file);
+                if (fileStat.size > maxSize && verbose) {
+                    console.warn(chalk_1.default.yellow(`⚠️  Large file (streaming line-by-line):`), chalk_1.default.white(path_1.default.relative(process.cwd(), file)), chalk_1.default.gray(`(${(fileStat.size / 1024 / 1024).toFixed(2)}MB)`));
+                }
+                if (options.stats) {
+                    options.stats.filesScanned += 1;
+                    options.stats.bytesScanned += fileStat.size;
+                }
+                const matches = fileStat.size > maxSize
+                    ? await (0, vault_guard_core_1.scanTextFileAsync)(scanner, file, { maxFileBytes: maxSize, bus: options.bus })
+                    : scanner.scan(file);
+                if (matches.length > 0) {
+                    results.push({ file, matches });
+                }
+            }
+            catch (error) {
+                if (options.bus) {
+                    options.bus.add({
+                        code: 'file.read_error',
+                        severity: 'error',
+                        ctx: { file: path_1.default.relative(process.cwd(), file), detail: String(error) },
+                    });
+                }
+                if (verbose) {
+                    console.error(chalk_1.default.red('❌ Error scanning file:'), chalk_1.default.white(path_1.default.relative(process.cwd(), file)));
+                    console.error(chalk_1.default.gray(String(error)));
+                }
+                // Continue scanning other files
+            }
+        };
+        // Process files in batches for parallel scanning
+        for (let i = 0; i < filesToScan.length; i += concurrency) {
+            const batch = filesToScan.slice(i, i + concurrency);
+            await Promise.all(batch.map(scanFile));
+            // Show progress for large scans
+            if (progress && filesToScan.length > 10) {
+                const percent = Math.round(((i + batch.length) / filesToScan.length) * 100);
+                process.stderr.write(`\r${chalk_1.default.gray(`Scanning... ${percent}%`)}`);
+            }
+        }
+        // Clear progress line if used
+        if (progress && filesToScan.length > 10) {
+            process.stderr.write('\r');
+        }
+    }
+    return results;
+}
+/**
+ * Scan files with proper filtering and error handling (sync version for backwards compatibility)
+ * This is the shared scanning logic used by both scan and check commands
+ */
+function scanFiles(targetPaths, scanner, options = {}) {
+    const { verbose = false, maxSize = MAX_FILE_SIZE, skipBinary = true } = options;
+    const results = [];
+    for (const targetPath of targetPaths) {
+        if (!fs_1.default.existsSync(targetPath)) {
+            if (verbose) {
+                console.error(chalk_1.default.red('❌ Error:'), chalk_1.default.white(`Path not found: ${targetPath}`));
+            }
+            continue;
+        }
+        const stat = fs_1.default.statSync(targetPath);
+        let filesToScan;
+        if (stat.isFile()) {
+            filesToScan = [targetPath];
+        }
+        else if (stat.isDirectory()) {
+            filesToScan = (0, vault_guard_core_1.getFilesToScan)(targetPath, verbose, options.bus, options.configIgnorePatterns ?? []);
+        }
+        else {
+            if (verbose) {
+                console.error(chalk_1.default.red('❌ Error:'), chalk_1.default.white(`Invalid path: ${targetPath}`));
+            }
+            continue;
+        }
+        // Scan each file with proper safeguards
+        for (const file of filesToScan) {
+            try {
+                // Skip binary files
+                if (skipBinary && isBinaryFile(file)) {
+                    continue;
+                }
+                // Check file size
+                const fileStat = fs_1.default.statSync(file);
+                if (fileStat.size > maxSize && verbose) {
+                    console.warn(chalk_1.default.yellow(`⚠️  Large file (sync read only ≤ ${(maxSize / 1024 / 1024).toFixed(0)} MB; use async scan):`), chalk_1.default.white(path_1.default.relative(process.cwd(), file)), chalk_1.default.gray(`(${(fileStat.size / 1024 / 1024).toFixed(2)}MB)`));
+                }
+                if (options.stats) {
+                    options.stats.filesScanned += 1;
+                    options.stats.bytesScanned += fileStat.size;
+                }
+                const matches = (0, vault_guard_core_1.scanTextFileSync)(scanner, file, { maxFileBytes: maxSize, bus: options.bus });
+                if (matches.length > 0) {
+                    results.push({ file, matches });
+                }
+            }
+            catch (error) {
+                if (options.bus) {
+                    options.bus.add({
+                        code: 'file.read_error',
+                        severity: 'error',
+                        ctx: { file: path_1.default.relative(process.cwd(), file), detail: String(error) },
+                    });
+                }
+                if (verbose) {
+                    console.error(chalk_1.default.red('❌ Error scanning file:'), chalk_1.default.white(path_1.default.relative(process.cwd(), file)));
+                    console.error(chalk_1.default.gray(String(error)));
+                }
+                // Continue scanning other files
+            }
+        }
+    }
+    return results;
+}
+/**
+ * Display scan results with proper formatting.
+ *
+ * Output format: `<path>:<line>:<col>  <severity>  <type>  <redacted>`
+ *
+ * Why this layout:
+ *   - Most modern terminals (iTerm2, Windows Terminal, VS Code, JetBrains)
+ *     auto-link `path:line:col` so users can cmd/ctrl-click directly to the
+ *     source — no copy-paste, no greppable secret value needed.
+ *   - Paths are cwd-relative for the same reason JSON/SARIF are: avoids
+ *     leaking the developer's home dir / username when output is shared.
+ *   - The redacted match value (`sk-a…(37c)`) is shown last and intentionally
+ *     low-information.
+ */
+function displayScanResults(results) {
+    if (results.length === 0) {
+        console.log(chalk_1.default.green.bold('✅ SUCCESS:'), chalk_1.default.white('No secrets found\n'));
+        return;
+    }
+    const totalSecrets = results.reduce((sum, r) => sum + r.matches.length, 0);
+    console.log(chalk_1.default.red.bold('🚨 BLOCKED:'), chalk_1.default.white(`Found ${totalSecrets} secret${totalSecrets > 1 ? 's' : ''}\n`));
+    for (const { file, matches } of results) {
+        const relativePath = relativeForDisplay(file);
+        for (const match of matches) {
+            const severityColor = getSeverityColor(match.severity);
+            const emoji = getSeverityEmoji(match.severity);
+            const location = `${relativePath}:${match.line}:${match.column + 1}`;
+            console.log(`  ${emoji} ${chalk_1.default.cyan(location)}  ${severityColor(match.severity)}  ${chalk_1.default.white(match.type)}  ${chalk_1.default.gray(match.value)}`);
+        }
+    }
+    console.log('');
+    console.log(chalk_1.default.red.bold('❌ BLOCKED:'), chalk_1.default.white('Commit blocked — remove secrets before pushing\n'));
+}
+/** cwd-relative when inside cwd, absolute otherwise. Matches scan-output behaviour. */
+function relativeForDisplay(file) {
+    if (!path_1.default.isAbsolute(file))
+        return file;
+    const rel = path_1.default.relative(process.cwd(), file);
+    if (rel.startsWith('..') || path_1.default.isAbsolute(rel))
+        return file;
+    return rel || '.';
+}
+function getSeverityColor(severity) {
+    switch (severity) {
+        case 'critical':
+            return chalk_1.default.red.bold;
+        case 'high':
+            return chalk_1.default.yellow;
+        case 'medium':
+            return chalk_1.default.blue;
+        case 'low':
+            return chalk_1.default.gray;
+        default:
+            return chalk_1.default.white;
+    }
+}
+function getSeverityEmoji(severity) {
+    switch (severity) {
+        case 'critical':
+            return '🔴';
+        case 'high':
+            return '⚠️';
+        case 'medium':
+            return 'ℹ️';
+        case 'low':
+            return '✅';
+        default:
+            return '•';
+    }
+}
+//# sourceMappingURL=scan-utils.js.map

package/dist/utils/scan-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-utils.js","sourceRoot":"","sources":["../../src/utils/scan-utils.ts"],"names":[],"mappings":";;;;;AAyBA,gCAMC;AACD,kCAMC;AAsCD,8CAqFC;AAKD,oCAGC;AAMD,wCAgHC;AAMD,8BAwFC;AAgBD,gDAyBC;AAtaD,gDAAwB;AACxB,4CAAoB;AACpB,qEAcwC;AACxC,kDAA0B;AAQ1B,SAAgB,UAAU,CAAC,OAAqB,EAAE,OAA0B,EAAE;IAC5E,OAAO,IAAA,6BAAiB,EAAC,OAAO,EAAE;QAChC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;AACL,CAAC;AACD,SAAgB,WAAW,CAAC,OAAqB,EAAE,OAA0B,EAAE;IAC7E,OAAO,IAAA,8BAAkB,EAAC,OAAO,EAAE;QACjC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;AACL,CAAC;AAED,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAE/C,MAAM,iBAAiB,GAAG;IACxB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACvD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM;CACvD,CAAC;AA2BF;;;GAGG;AACI,KAAK,UAAU,iBAAiB,CACrC,KAAe,EACf,OAAsB,EACtB,UAAuB,EAAE;IAEzB,MAAM,EACJ,OAAO,GAAG,KAAK,EACf,OAAO,GAAG,aAAa,EACvB,UAAU,GAAG,IAAI,EACjB,QAAQ,GAAG,KAAK,EAChB,WAAW,GAAG,EAAE,EAChB,oBAAoB,GAAG,EAAE,GAC1B,GAAG,OAAO,CAAC;IAEZ,8EAA8E;IAC9E,mEAAmE;IACnE,8EAA8E;IAC9E,MAAM,kBAAkB,GACtB,oBAAoB,CAAC,MAAM,GAAG,CAAC;QAC7B,CAAC,CAAC,IAAA,0CAAuB,EAAC,oBAAoB,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9D,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,aAAa,GAAG,kBAAkB;QACtC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,KAAK,CAAC;IAEV,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QACrD,IAAI,CAAC;YACH,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YACjC,MAAM,EAAE,GAAG,MAAM,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;gBAAE,OAAO;YAEzB,IAAI,UAAU,IAAI,YAAY,CAAC,IAAI,CAAC;gBAAE,OAAO;YAE7C,IAAI,EAAE,CAAC,IAAI,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CACV,eAAK,CAAC,MAAM,CAAC,0CAA0C,CAAC,EACxD,eAAK,CAAC,KAAK,CAAC,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,EAC/C,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CACxD,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;gBAChC,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,IAAI,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GACX,EAAE,CAAC,IAAI,GAAG,OAAO;gBACf,CAAC,CAAC,MAAM,IAAA,oCAAiB,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;gBACrF,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;oBACd,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,OAAO;oBACjB,GAAG,EAAE,EAAE,IAAI,EAAE,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;iBACzE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,eAAK,CAAC,KAAK,CAAC,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpG,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;QACtD,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEvC,IAAI,QAAQ,IAAI,aAAa,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;YAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,eAAK,CAAC,IAAI,CAAC,eAAe,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,IAAI,aAAa,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,cAAc,CAClC,WAAqB,EACrB,OAAsB,EACtB,UAAuB,EAAE;IAEzB,MAAM,EACJ,OAAO,GAAG,KAAK,EACf,OAAO,GAAG,aAAa,EACvB,UAAU,GAAG,IAAI,EACjB,QAAQ,GAAG,KAAK,EAChB,WAAW,GAAG,EAAE,CAAC,qCAAqC;MACvD,GAAG,OAAO,CAAC;IAEZ,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,YAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,eAAK,CAAC,KAAK,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,WAAqB,CAAC;QAE1B,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAClB,WAAW,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9B,WAAW,GAAG,MAAM,IAAA,sCAAmB,EACrC,UAAU,EACV,OAAO,EACP,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,oBAAoB,IAAI,EAAE,CACnC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,eAAK,CAAC,KAAK,CAAC,iBAAiB,UAAU,EAAE,CAAC,CAAC,CAAC;YACnF,CAAC;YACD,SAAS;QACX,CAAC;QAED,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;YACrD,IAAI,CAAC;gBACH,oBAAoB;gBACpB,IAAI,UAAU,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,OAAO;gBACT,CAAC;gBAED,kBAAkB;gBAClB,MAAM,QAAQ,GAAG,MAAM,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9C,IAAI,QAAQ,CAAC,IAAI,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;oBACvC,OAAO,CAAC,IAAI,CACV,eAAK,CAAC,MAAM,CAAC,0CAA0C,CAAC,EACxD,eAAK,CAAC,KAAK,CAAC,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,EAC/C,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAC9D,CAAC;gBACJ,CAAC;gBAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBAClB,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;oBAChC,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC;gBAC9C,CAAC;gBAED,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,GAAG,OAAO;oBACrB,CAAC,CAAC,MAAM,IAAA,oCAAiB,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;oBACrF,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;wBACd,IAAI,EAAE,iBAAiB;wBACvB,QAAQ,EAAE,OAAO;wBACjB,GAAG,EAAE,EAAE,IAAI,EAAE,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;qBACzE,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,EACnC,eAAK,CAAC,KAAK,CAAC,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAChD,CAAC;oBACF,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC;gBACD,gCAAgC;YAClC,CAAC;QACH,CAAC,CAAC;QAEF,iDAAiD;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;YACpD,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAEvC,gCAAgC;YAChC,IAAI,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,eAAK,CAAC,IAAI,CAAC,eAAe,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAgB,SAAS,CACvB,WAAqB,EACrB,OAAsB,EACtB,UAAuB,EAAE;IAEzB,MAAM,EACJ,OAAO,GAAG,KAAK,EACf,OAAO,GAAG,aAAa,EACvB,UAAU,GAAG,IAAI,EAClB,GAAG,OAAO,CAAC;IAEZ,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,eAAK,CAAC,KAAK,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,YAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,WAAqB,CAAC;QAE1B,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAClB,WAAW,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9B,WAAW,GAAG,IAAA,iCAAc,EAC1B,UAAU,EACV,OAAO,EACP,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,oBAAoB,IAAI,EAAE,CACnC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,eAAK,CAAC,KAAK,CAAC,iBAAiB,UAAU,EAAE,CAAC,CAAC,CAAC;YACnF,CAAC;YACD,SAAS;QACX,CAAC;QAED,wCAAwC;QACxC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,oBAAoB;gBACpB,IAAI,UAAU,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,SAAS;gBACX,CAAC;gBAED,kBAAkB;gBAClB,MAAM,QAAQ,GAAG,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACnC,IAAI,QAAQ,CAAC,IAAI,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;oBACvC,OAAO,CAAC,IAAI,CACV,eAAK,CAAC,MAAM,CAAC,oCAAoC,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,EAC3G,eAAK,CAAC,KAAK,CAAC,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,EAC/C,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAC9D,CAAC;gBACJ,CAAC;gBAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBAClB,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;oBAChC,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC;gBAC9C,CAAC;gBAED,MAAM,OAAO,GAAG,IAAA,mCAAgB,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC7F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;wBACd,IAAI,EAAE,iBAAiB;wBACvB,QAAQ,EAAE,OAAO;wBACjB,GAAG,EAAE,EAAE,IAAI,EAAE,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;qBACzE,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,EACnC,eAAK,CAAC,KAAK,CAAC,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAChD,CAAC;oBACF,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC;gBACD,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,kBAAkB,CAAC,OAAqB;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,eAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,eAAK,CAAC,KAAK,CAAC,SAAS,YAAY,UAAU,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAExH,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAE9C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,GAAG,YAAY,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAErE,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,IAAI,eAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,eAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAC/H,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,eAAK,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,uFAAuF;AACvF,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,CAAC,cAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,GAAG,IAAI,GAAG,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,eAAK,CAAC,MAAM,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,eAAK,CAAC,IAAI,CAAC;QACpB,KAAK,KAAK;YACR,OAAO,eAAK,CAAC,IAAI,CAAC;QACpB;YACE,OAAO,eAAK,CAAC,KAAK,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC;QACd,KAAK,KAAK;YACR,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@vaultcompass/vault-guard",
+  "version": "1.0.0",
+  "description": "Security and optimization layer for AI-native coding",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/vaultcompasshq/vault-guard.git",
+    "directory": "packages/cli"
+  },
+  "bugs": {
+    "url": "https://github.com/vaultcompasshq/vault-guard/issues"
+  },
+  "homepage": "https://github.com/vaultcompasshq/vault-guard#readme",
+  "engines": {
+    "node": ">=22.0.0",
+    "npm": ">=9.0.0",
+    "pnpm": ">=9.0.0"
+  },
+  "bin": {
+    "vault-guard": "./dist/cli-entry.js"
+  },
+  "keywords": [
+    "cli",
+    "security",
+    "secret-scanner",
+    "pre-commit-hook"
+  ],
+  "dependencies": {
+    "chalk": "^4.1.2",
+    "commander": "^12.0.0",
+    "@vaultcompass/vault-guard-telemetry": "1.0.0",
+    "@vaultcompass/vault-guard-core": "1.0.0"
+  },
+  "devDependencies": {
+    "@types/jest": "^30.0.0",
+    "@types/node": "^25.9.1",
+    "jest": "^30.4.2",
+    "ts-jest": "^29.4.11",
+    "typescript": "^5.3.3"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "jest",
+    "test:watch": "jest --watch",
+    "test:coverage": "jest --coverage",
+    "start": "node dist/cli.js"
+  }
+}