@vibecheckai/cli 2.5.1

package/dist/commands/quality/utils.js

@@ -0,0 +1,158 @@
+"use strict";
+/**
+ * Shared utilities for quality commands (tidy, setup-quality, check)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectPackageManager = detectPackageManager;
+exports.loadPackageJson = loadPackageJson;
+exports.getProjectInfo = getProjectInfo;
+exports.fileExists = fileExists;
+exports.dirExists = dirExists;
+exports.getFileSize = getFileSize;
+exports.readFile = readFile;
+exports.hasDependency = hasDependency;
+exports.getScripts = getScripts;
+exports.hasScript = hasScript;
+exports.findFiles = findFiles;
+exports.getRelativePath = getRelativePath;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const detect_framework_1 = require("../../init/detect-framework");
+/**
+ * Detect package manager from lockfiles
+ */
+function detectPackageManager(projectPath) {
+    if ((0, fs_1.existsSync)((0, path_1.join)(projectPath, 'pnpm-lock.yaml'))) {
+        return { manager: 'pnpm', lockfile: 'pnpm-lock.yaml' };
+    }
+    if ((0, fs_1.existsSync)((0, path_1.join)(projectPath, 'yarn.lock'))) {
+        return { manager: 'yarn', lockfile: 'yarn.lock' };
+    }
+    if ((0, fs_1.existsSync)((0, path_1.join)(projectPath, 'package-lock.json'))) {
+        return { manager: 'npm', lockfile: 'package-lock.json' };
+    }
+    return { manager: null, lockfile: null };
+}
+/**
+ * Load package.json if it exists
+ */
+function loadPackageJson(projectPath) {
+    const packageJsonPath = (0, path_1.join)(projectPath, 'package.json');
+    if (!(0, fs_1.existsSync)(packageJsonPath)) {
+        return null;
+    }
+    try {
+        return JSON.parse((0, fs_1.readFileSync)(packageJsonPath, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Get comprehensive project info
+ */
+function getProjectInfo(projectPath) {
+    const pkg = loadPackageJson(projectPath);
+    const pm = detectPackageManager(projectPath);
+    const frameworkInfo = (0, detect_framework_1.detectFramework)(projectPath);
+    return {
+        path: projectPath,
+        hasPackageJson: pkg !== null,
+        hasPyprojectToml: (0, fs_1.existsSync)((0, path_1.join)(projectPath, 'pyproject.toml')),
+        hasTsconfig: (0, fs_1.existsSync)((0, path_1.join)(projectPath, 'tsconfig.json')) ||
+            (0, fs_1.existsSync)((0, path_1.join)(projectPath, 'tsconfig.base.json')),
+        packageJson: pkg || undefined,
+        framework: frameworkInfo.framework,
+        packageManager: pm.manager || undefined,
+        hasLockfile: pm.lockfile !== null,
+        lockfileType: pm.lockfile,
+    };
+}
+/**
+ * Check if file exists
+ */
+function fileExists(filePath) {
+    return (0, fs_1.existsSync)(filePath);
+}
+/**
+ * Check if directory exists
+ */
+function dirExists(dirPath) {
+    try {
+        return (0, fs_1.existsSync)(dirPath) && (0, fs_1.statSync)(dirPath).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Get file size in bytes
+ */
+function getFileSize(filePath) {
+    try {
+        return (0, fs_1.statSync)(filePath).size;
+    }
+    catch {
+        return 0;
+    }
+}
+/**
+ * Read file content safely
+ */
+function readFile(filePath) {
+    try {
+        return (0, fs_1.readFileSync)(filePath, 'utf-8');
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Check if a dependency exists in package.json
+ */
+function hasDependency(pkg, depName) {
+    if (!pkg)
+        return false;
+    return Boolean(pkg.dependencies?.[depName] || pkg.devDependencies?.[depName]);
+}
+/**
+ * Get scripts from package.json
+ */
+function getScripts(pkg) {
+    if (!pkg || !pkg.scripts)
+        return [];
+    return Object.keys(pkg.scripts);
+}
+/**
+ * Check if a script exists
+ */
+function hasScript(pkg, scriptName) {
+    if (!pkg || !pkg.scripts)
+        return false;
+    return scriptName in pkg.scripts;
+}
+/**
+ * Find files matching pattern (simple, non-recursive in root)
+ */
+function findFiles(projectPath, patterns) {
+    const files = [];
+    try {
+        const entries = (0, fs_1.readdirSync)(projectPath);
+        for (const pattern of patterns) {
+            if (entries.includes(pattern)) {
+                files.push((0, path_1.join)(projectPath, pattern));
+            }
+        }
+    }
+    catch {
+        // Ignore errors
+    }
+    return files;
+}
+/**
+ * Get relative path from project root
+ */
+function getRelativePath(projectPath, filePath) {
+    return (0, path_1.relative)(projectPath, filePath);
+}
+//# sourceMappingURL=utils.js.map

package/dist/commands/quality/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/commands/quality/utils.ts"],"names":[],"mappings":";AAAA;;GAEG;;AA4BH,oDAcC;AAKD,0CAUC;AAKD,wCAkBC;AAKD,gCAEC;AAKD,8BAMC;AAKD,kCAMC;AAKD,4BAMC;AAKD,sCAQC;AAKD,gCAGC;AAKD,8BAGC;AAKD,8BAaC;AAKD,0CAEC;AA5KD,2BAAqE;AACrE,+BAA+C;AAC/C,kEAAsF;AAqBtF;;GAEG;AACH,SAAgB,oBAAoB,CAAC,WAAmB;IAItD,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,WAAmB;IACjD,MAAM,eAAe,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAA,eAAU,EAAC,eAAe,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,WAAmB;IAChD,MAAM,GAAG,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,IAAA,kCAAe,EAAC,WAAW,CAAC,CAAC;IAEnD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,cAAc,EAAE,GAAG,KAAK,IAAI;QAC5B,gBAAgB,EAAE,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QACjE,WAAW,EACT,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAC9C,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;QACrD,WAAW,EAAE,GAAG,IAAI,SAAS;QAC7B,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,cAAc,EAAE,EAAE,CAAC,OAAO,IAAI,SAAS;QACvC,WAAW,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI;QACjC,YAAY,EAAE,EAAE,CAAC,QAAe;KACjC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,QAAgB;IACzC,OAAO,IAAA,eAAU,EAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAgB,SAAS,CAAC,OAAe;IACvC,IAAI,CAAC;QACH,OAAO,IAAA,eAAU,EAAC,OAAO,CAAC,IAAI,IAAA,aAAQ,EAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,QAAgB;IAC1C,IAAI,CAAC;QACH,OAAO,IAAA,aAAQ,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,QAAQ,CAAC,QAAgB;IACvC,IAAI,CAAC;QACH,OAAO,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAC3B,GAAuB,EACvB,OAAe;IAEf,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,OAAO,CACZ,GAAG,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,GAAuB;IAChD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAgB,SAAS,CAAC,GAAuB,EAAE,UAAkB;IACnE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,SAAgB,SAAS,CAAC,WAAmB,EAAE,QAAkB;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,gBAAW,EAAC,WAAW,CAAC,CAAC;QACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,WAAmB,EAAE,QAAgB;IACnE,OAAO,IAAA,eAAQ,EAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC"}

package/dist/commands/replay.d.ts

@@ -0,0 +1,8 @@
+/**
+ * guardrail replay
+ *
+ * Re-run the exact failing proofs from a previous scan
+ */
+import { Command } from 'commander';
+export declare function registerReplayCommand(program: Command): void;
+//# sourceMappingURL=replay.d.ts.map

package/dist/commands/replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/commands/replay.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgD5D"}

package/dist/commands/replay.js

@@ -0,0 +1,52 @@
+"use strict";
+/**
+ * guardrail replay
+ *
+ * Re-run the exact failing proofs from a previous scan
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerReplayCommand = registerReplayCommand;
+const path_1 = require("path");
+const fs_1 = require("fs");
+const ui_1 = require("../ui");
+const ui_2 = require("../ui");
+function registerReplayCommand(program) {
+    program
+        .command('replay')
+        .description('Re-run exact failing proofs from previous scan')
+        .argument('<scan-id>', 'Scan ID or timestamp')
+        .option('-p, --path <path>', 'Project path', '.')
+        .action(async (scanId, options) => {
+        (0, ui_1.printLogo)();
+        const projectPath = (0, path_1.resolve)(options.path);
+        const scanFile = (0, path_1.join)(projectPath, '.guardrail', 'scan.json');
+        const proofFile = (0, path_1.join)(projectPath, '.guardrail', 'proof.json');
+        if (!(0, fs_1.existsSync)(scanFile)) {
+            console.error(`\n  ${ui_2.styles.brightRed}${ui_2.icons.error}${ui_2.styles.reset} No scan results found`);
+            console.log(`  ${ui_2.styles.dim}Run ${ui_2.styles.bold}guardrail scan${ui_2.styles.reset}${ui_2.styles.dim} first${ui_2.styles.reset}\n`);
+            process.exit(2);
+        }
+        const scanResult = JSON.parse((0, fs_1.readFileSync)(scanFile, 'utf-8'));
+        const proofGraph = (0, fs_1.existsSync)(proofFile)
+            ? JSON.parse((0, fs_1.readFileSync)(proofFile, 'utf-8'))
+            : null;
+        console.log(`\n${ui_2.styles.brightCyan}${ui_2.styles.bold}${ui_2.icons.info} REPLAYING SCAN${ui_2.styles.reset}\n`);
+        console.log(`  ${ui_2.styles.dim}Scan ID:${ui_2.styles.reset} ${scanId}\n`);
+        // Find failing findings
+        const failingFindings = scanResult.findings?.filter((f) => f.verdict === 'FAIL') || [];
+        if (failingFindings.length === 0) {
+            console.log(`  ${ui_2.styles.brightGreen}${ui_2.icons.success}${ui_2.styles.reset} No failing proofs to replay\n`);
+            return;
+        }
+        console.log(`  ${ui_2.styles.bold}Replaying ${failingFindings.length} failing proof(s)...${ui_2.styles.reset}\n`);
+        // TODO: Actually replay proofs
+        // This would re-run the exact verification steps that failed
+        for (const finding of failingFindings) {
+            console.log(`  ${ui_2.styles.cyan}${ui_2.icons.bullet}${ui_2.styles.reset} ${finding.id}: ${finding.type}`);
+            console.log(`     ${ui_2.styles.dim}${finding.file}:${finding.line}${ui_2.styles.reset}`);
+        }
+        console.log('');
+        console.log(`  ${ui_2.styles.bold}Next:${ui_2.styles.reset} Review proof bundle in .guardrail/artifacts/\n`);
+    });
+}
+//# sourceMappingURL=replay.js.map

package/dist/commands/replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../src/commands/replay.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAQH,sDAgDC;AArDD,+BAAqC;AACrC,2BAA8C;AAC9C,8BAAkC;AAClC,8BAAsC;AAEtC,SAAgB,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;SAC7C,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAChC,IAAA,cAAS,GAAE,CAAC;QAEZ,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAEhE,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,WAAM,CAAC,SAAS,GAAG,UAAK,CAAC,KAAK,GAAG,WAAM,CAAC,KAAK,wBAAwB,CAAC,CAAC;YAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,GAAG,OAAO,WAAM,CAAC,IAAI,iBAAiB,WAAM,CAAC,KAAK,GAAG,WAAM,CAAC,GAAG,SAAS,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YAClH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAA,eAAU,EAAC,SAAS,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC;QAET,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,UAAU,GAAG,WAAM,CAAC,IAAI,GAAG,UAAK,CAAC,IAAI,kBAAkB,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACjG,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,GAAG,WAAW,WAAM,CAAC,KAAK,IAAI,MAAM,IAAI,CAAC,CAAC;QAElE,wBAAwB;QACxB,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAE5F,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,WAAW,GAAG,UAAK,CAAC,OAAO,GAAG,WAAM,CAAC,KAAK,gCAAgC,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,aAAa,eAAe,CAAC,MAAM,uBAAuB,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAExG,+BAA+B;QAC/B,6DAA6D;QAE7D,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,GAAG,UAAK,CAAC,MAAM,GAAG,WAAM,CAAC,KAAK,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7F,OAAO,CAAC,GAAG,CAAC,QAAQ,WAAM,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,GAAG,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,QAAQ,WAAM,CAAC,KAAK,iDAAiD,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/scan-consolidated.d.ts

@@ -0,0 +1,61 @@
+/**
+ * guardrail scan
+ *
+ * Fast "Reality Sniff + Proof" on the local repo.
+ * Consolidates all scanning capabilities into one command.
+ */
+import { Command } from 'commander';
+export interface ScanResult {
+    version: string;
+    timestamp: string;
+    projectPath: string;
+    verdict: 'PASS' | 'FAIL' | 'WARN';
+    summary: {
+        totalFindings: number;
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+        totalScore: number;
+    };
+    topBlockers: Array<{
+        id: string;
+        type: string;
+        file: string;
+        line: number;
+        severity: string;
+        score: number;
+        verdict: 'PASS' | 'FAIL' | 'WARN';
+    }>;
+    proofGraph: {
+        nodes: number;
+        edges: number;
+        evidenceStrength: number;
+    };
+    findings: Array<{
+        id: string;
+        type: string;
+        file: string;
+        line: number;
+        severity: string;
+        score: number;
+        verdict: 'PASS' | 'FAIL' | 'WARN';
+        confidence: number;
+        evidence: Array<{
+            level: string;
+            strength: number;
+        }>;
+    }>;
+    hotspots: Array<{
+        file: string;
+        score: number;
+        findings: number;
+    }>;
+    nextActions: string[];
+}
+export declare function registerScanCommand(program: Command): void;
+declare function getNextActions(verdict: 'PASS' | 'FAIL' | 'WARN', findings: any[]): string[];
+declare function outputHumanReadable(result: ScanResult, details?: boolean): void;
+declare function generateHotspotsMarkdown(result: ScanResult): string;
+export { getNextActions, outputHumanReadable, generateHotspotsMarkdown };
+//# sourceMappingURL=scan-consolidated.d.ts.map

package/dist/commands/scan-consolidated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-consolidated.d.ts","sourceRoot":"","sources":["../../src/commands/scan-consolidated.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,OAAO,EAAE;QACP,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,WAAW,EAAE,KAAK,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;KACnC,CAAC,CAAC;IACH,UAAU,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,KAAK,CAAC;YACd,KAAK,EAAE,MAAM,CAAC;YACd,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAoK1D;AAED,iBAAS,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAcpF;AAED,iBAAS,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,OAAe,GAAG,IAAI,CA+B/E;AA4BD,iBAAS,wBAAwB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAY5D;AAGD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,CAAC"}

package/dist/commands/scan-consolidated.js

@@ -0,0 +1,243 @@
+"use strict";
+/**
+ * guardrail scan
+ *
+ * Fast "Reality Sniff + Proof" on the local repo.
+ * Consolidates all scanning capabilities into one command.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerScanCommand = registerScanCommand;
+exports.getNextActions = getNextActions;
+exports.outputHumanReadable = outputHumanReadable;
+exports.generateHotspotsMarkdown = generateHotspotsMarkdown;
+const path_1 = require("path");
+const fs_1 = require("fs");
+const reality_sniff_1 = require("../scan/reality-sniff");
+const verification_engine_1 = require("../scan/verification-engine");
+const proof_graph_1 = require("../scan/proof-graph");
+const ui_1 = require("../ui");
+const ui_2 = require("../ui");
+function registerScanCommand(program) {
+    program
+        .command('scan')
+        .description('Fast Reality Sniff + Proof on local repo')
+        .option('-p, --path <path>', 'Project path', '.')
+        .option('--json', 'Output as JSON')
+        .option('--plain', 'No color/unicode output')
+        .option('--details', 'Show detailed output')
+        .option('--strict', 'Treat top WARN as FAIL')
+        .option('--runtime', 'Enable runtime witness probes/playwright')
+        .option('--since <ref>', 'Change-aware scan (uses git diff + dep closure)')
+        .option('-o, --output <file>', 'Output file path')
+        .action(async (options) => {
+        if (!options.json) {
+            (0, ui_1.printLogo)();
+        }
+        const projectPath = (0, path_1.resolve)(options.path);
+        const outputPath = options.output || (0, path_1.join)(projectPath, '.guardrail', 'scan.json');
+        // Ensure output directory exists
+        const outputDir = (0, path_1.join)(outputPath, '..');
+        if (!(0, fs_1.existsSync)(outputDir)) {
+            (0, fs_1.mkdirSync)(outputDir, { recursive: true });
+        }
+        if (!options.json) {
+            console.log(`\n${ui_2.styles.brightCyan}${ui_2.styles.bold}${ui_2.icons.scan} REALITY SCAN${ui_2.styles.reset}\n`);
+            console.log(`  ${ui_2.styles.dim}Scanning:${ui_2.styles.reset} ${projectPath}\n`);
+        }
+        // Step 1: Reality Sniff
+        const scanner = new reality_sniff_1.RealitySniffScanner();
+        const sniffResult = await scanner.scan(projectPath, {
+            exclude: ['node_modules', '.git', 'dist', 'build', '.next'],
+            includeTests: false,
+        });
+        // Step 2: Verification Engine
+        const verifier = new verification_engine_1.VerificationEngine();
+        const verifiedFindings = await Promise.all(sniffResult.findings.map(finding => verifier.verify(finding, {
+            enableStructural: true,
+            enableRuntime: options.runtime,
+        })));
+        // Step 3: Build Proof Graph
+        const graphBuilder = new proof_graph_1.ProofGraphBuilder();
+        // Add nodes for findings
+        verifiedFindings.forEach((vf, index) => {
+            graphBuilder.addNode({
+                id: `finding-${vf.finding.id}`,
+                type: 'handler',
+                name: vf.finding.type,
+                file: vf.finding.file,
+                line: vf.finding.line,
+            });
+        });
+        // Determine overall verdict
+        const hasFail = verifiedFindings.some(vf => vf.verdict === 'FAIL');
+        const hasWarn = verifiedFindings.some(vf => vf.verdict === 'WARN');
+        let verdict = 'PASS';
+        if (hasFail) {
+            verdict = 'FAIL';
+        }
+        else if (hasWarn) {
+            if (options.strict) {
+                verdict = 'FAIL';
+            }
+            else {
+                verdict = 'WARN';
+            }
+        }
+        const proofGraph = graphBuilder.build(verdict, verifiedFindings.length > 0
+            ? verifiedFindings.reduce((sum, vf) => sum + vf.confidence, 0) / verifiedFindings.length
+            : 1.0, verifiedFindings.map(vf => vf.finding.id));
+        // Build result
+        const result = {
+            version: '1.0.0',
+            timestamp: new Date().toISOString(),
+            projectPath,
+            verdict,
+            summary: {
+                totalFindings: verifiedFindings.length,
+                critical: verifiedFindings.filter(vf => vf.finding.severity === 'critical').length,
+                high: verifiedFindings.filter(vf => vf.finding.severity === 'high').length,
+                medium: verifiedFindings.filter(vf => vf.finding.severity === 'medium').length,
+                low: verifiedFindings.filter(vf => vf.finding.severity === 'low').length,
+                totalScore: sniffResult.summary.totalScore,
+            },
+            topBlockers: verifiedFindings
+                .filter(vf => vf.verdict === 'FAIL' || (options.strict && vf.verdict === 'WARN'))
+                .slice(0, 10)
+                .map(vf => ({
+                id: vf.finding.id,
+                type: vf.finding.type,
+                file: vf.finding.file,
+                line: vf.finding.line,
+                severity: vf.finding.severity,
+                score: vf.finding.score,
+                verdict: vf.verdict,
+            })),
+            proofGraph: {
+                nodes: proofGraph.nodes.length,
+                edges: proofGraph.edges.length,
+                evidenceStrength: proofGraph.evidenceStrength,
+            },
+            findings: verifiedFindings.map(vf => ({
+                id: vf.finding.id,
+                type: vf.finding.type,
+                file: vf.finding.file,
+                line: vf.finding.line,
+                severity: vf.finding.severity,
+                score: vf.finding.score,
+                verdict: vf.verdict,
+                confidence: vf.confidence,
+                evidence: vf.evidence.map(e => ({
+                    level: e.level,
+                    strength: e.strength,
+                })),
+            })),
+            hotspots: sniffResult.hotspots,
+            nextActions: getNextActions(verdict, verifiedFindings),
+        };
+        // Output
+        if (options.json) {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else if (options.plain) {
+            outputPlain(result);
+        }
+        else {
+            outputHumanReadable(result, options.details);
+        }
+        // Write output file
+        (0, fs_1.writeFileSync)(outputPath, JSON.stringify(result, null, 2));
+        // Write proof graph
+        const proofPath = (0, path_1.join)(outputDir, 'proof.json');
+        (0, fs_1.writeFileSync)(proofPath, JSON.stringify(proofGraph, null, 2));
+        // Write hotspots markdown
+        const hotspotsPath = (0, path_1.join)(outputDir, 'hotspots.md');
+        (0, fs_1.writeFileSync)(hotspotsPath, generateHotspotsMarkdown(result));
+        // Exit code
+        if (verdict === 'FAIL') {
+            process.exit(1);
+        }
+        else if (verdict === 'WARN') {
+            process.exit(0); // WARN doesn't fail unless --strict
+        }
+        else {
+            process.exit(0);
+        }
+    });
+}
+function getNextActions(verdict, findings) {
+    const actions = [];
+    if (verdict === 'FAIL') {
+        actions.push('guardrail fix --id <finding-id>');
+        actions.push('guardrail explain <finding-id>');
+    }
+    else if (verdict === 'WARN') {
+        actions.push('guardrail ship (to run full checks)');
+        actions.push('guardrail explain <finding-id>');
+    }
+    else {
+        actions.push('guardrail ship (to run deployment gate)');
+    }
+    return actions;
+}
+function outputHumanReadable(result, details = false) {
+    console.log(`  ${ui_2.styles.bold}Verdict:${ui_2.styles.reset} ${getVerdictColor(result.verdict)}${result.verdict}${ui_2.styles.reset}\n`);
+    if (result.summary.totalFindings > 0) {
+        console.log(`  ${ui_2.styles.bold}Summary:${ui_2.styles.reset}`);
+        console.log(`    Total:    ${ui_2.styles.bold}${result.summary.totalFindings}${ui_2.styles.reset}`);
+        console.log(`    Critical: ${ui_2.styles.brightRed}${result.summary.critical}${ui_2.styles.reset}`);
+        console.log(`    High:     ${ui_2.styles.brightYellow}${result.summary.high}${ui_2.styles.reset}`);
+        console.log(`    Medium:   ${ui_2.styles.brightBlue}${result.summary.medium}${ui_2.styles.reset}`);
+        console.log(`    Low:      ${ui_2.styles.dim}${result.summary.low}${ui_2.styles.reset}`);
+        console.log('');
+    }
+    if (result.topBlockers.length > 0) {
+        console.log(`  ${ui_2.styles.bold}Top Blockers:${ui_2.styles.reset}`);
+        result.topBlockers.slice(0, 5).forEach((blocker, i) => {
+            console.log(`    ${i + 1}. ${ui_2.styles.bold}${blocker.id}${ui_2.styles.reset} - ${blocker.type}`);
+            console.log(`       ${ui_2.styles.dim}${blocker.file}:${blocker.line}${ui_2.styles.reset}`);
+        });
+        console.log('');
+    }
+    console.log(`  ${ui_2.styles.bold}Next best action:${ui_2.styles.reset} ${ui_2.styles.bold}${result.nextActions[0] || 'guardrail ship'}${ui_2.styles.reset}`);
+    if (details && result.nextActions.length > 1) {
+        console.log(`\n  ${ui_2.styles.bold}All actions:${ui_2.styles.reset}`);
+        result.nextActions.forEach(action => {
+            console.log(`    ${ui_2.styles.cyan}${ui_2.icons.bullet}${ui_2.styles.reset} ${ui_2.styles.bold}${action}${ui_2.styles.reset}`);
+        });
+    }
+    console.log('');
+}
+function outputPlain(result) {
+    console.log(`Verdict: ${result.verdict}`);
+    console.log(`Total Findings: ${result.summary.totalFindings}`);
+    console.log(`Critical: ${result.summary.critical}, High: ${result.summary.high}, Medium: ${result.summary.medium}, Low: ${result.summary.low}`);
+    if (result.topBlockers.length > 0) {
+        console.log('\nTop Blockers:');
+        result.topBlockers.forEach(blocker => {
+            console.log(`  ${blocker.id}: ${blocker.type} - ${blocker.file}:${blocker.line}`);
+        });
+    }
+    console.log(`\nNext best action: ${result.nextActions[0] || 'guardrail ship'}`);
+}
+function getVerdictColor(verdict) {
+    switch (verdict) {
+        case 'PASS':
+            return ui_2.styles.brightGreen;
+        case 'FAIL':
+            return ui_2.styles.brightRed;
+        case 'WARN':
+            return ui_2.styles.brightYellow;
+    }
+}
+function generateHotspotsMarkdown(result) {
+    let md = '# Guardrail Hotspots\n\n';
+    md += `Generated: ${result.timestamp}\n\n`;
+    md += `## Top Risk Files\n\n`;
+    result.hotspots.forEach((hotspot, i) => {
+        md += `${i + 1}. **${hotspot.file}**\n`;
+        md += `   - Score: ${hotspot.score}\n`;
+        md += `   - Findings: ${hotspot.findings}\n\n`;
+    });
+    return md;
+}
+//# sourceMappingURL=scan-consolidated.js.map

package/dist/commands/scan-consolidated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-consolidated.js","sourceRoot":"","sources":["../../src/commands/scan-consolidated.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AA4DH,kDAoKC;AA4FQ,wCAAc;AAAE,kDAAmB;AAAE,4DAAwB;AAzTtE,+BAAqC;AACrC,2BAA0D;AAC1D,yDAA4D;AAC5D,qEAAiE;AACjE,qDAAwD;AACxD,8BAAkC;AAClC,8BAAsC;AAmDtC,SAAgB,mBAAmB,CAAC,OAAgB;IAClD,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,SAAS,EAAE,yBAAyB,CAAC;SAC5C,MAAM,CAAC,WAAW,EAAE,sBAAsB,CAAC;SAC3C,MAAM,CAAC,UAAU,EAAE,wBAAwB,CAAC;SAC5C,MAAM,CAAC,WAAW,EAAE,0CAA0C,CAAC;SAC/D,MAAM,CAAC,eAAe,EAAE,iDAAiD,CAAC;SAC1E,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,IAAA,cAAS,GAAE,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,IAAI,IAAA,WAAI,EAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAElF,iCAAiC;QACjC,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,IAAA,cAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,UAAU,GAAG,WAAM,CAAC,IAAI,GAAG,UAAK,CAAC,IAAI,gBAAgB,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YAC/F,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,GAAG,YAAY,WAAM,CAAC,KAAK,IAAI,WAAW,IAAI,CAAC,CAAC;QAC1E,CAAC;QAED,wBAAwB;QACxB,MAAM,OAAO,GAAG,IAAI,mCAAmB,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;YAClD,OAAO,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;YAC3D,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QAEH,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,IAAI,wCAAkB,EAAE,CAAC;QAC1C,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CACxC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CACjC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;YACvB,gBAAgB,EAAE,IAAI;YACtB,aAAa,EAAE,OAAO,CAAC,OAAO;SAC/B,CAAC,CACH,CACF,CAAC;QAEF,4BAA4B;QAC5B,MAAM,YAAY,GAAG,IAAI,+BAAiB,EAAE,CAAC;QAE7C,yBAAyB;QACzB,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE;YACrC,YAAY,CAAC,OAAO,CAAC;gBACnB,EAAE,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC9B,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;gBACrB,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;gBACrB,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;QACnE,IAAI,OAAO,GAA6B,MAAM,CAAC;QAE/C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,GAAG,MAAM,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,MAAM,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CACnC,OAAO,EACP,gBAAgB,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM;YACxF,CAAC,CAAC,GAAG,EACP,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAC1C,CAAC;QAEF,eAAe;QACf,MAAM,MAAM,GAAe;YACzB,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,OAAO;YACP,OAAO,EAAE;gBACP,aAAa,EAAE,gBAAgB,CAAC,MAAM;gBACtC,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;gBAClF,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;gBAC1E,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;gBAC9E,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;gBACxE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU;aAC3C;YACD,WAAW,EAAE,gBAAgB;iBAC1B,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;iBAChF,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBACZ,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACV,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE;gBACjB,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;gBACrB,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;gBACrB,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;gBACrB,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ;gBAC7B,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK;gBACvB,OAAO,EAAE,EAAE,CAAC,OAAO;aACpB,CAAC,CAAC;YACL,UAAU,EAAE;gBACV,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM;gBAC9B,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM;gBAC9B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;aAC9C;YACD,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACpC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE;gBACjB,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;gBACrB,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;gBACrB,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;gBACrB,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ;gBAC7B,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK;gBACvB,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC9B,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;iBACrB,CAAC,CAAC;aACJ,CAAC,CAAC;YACH,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,WAAW,EAAE,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC;SACvD,CAAC;QAEF,SAAS;QACT,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACzB,WAAW,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QAED,oBAAoB;QACpB,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAE3D,oBAAoB;QACpB,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAChD,IAAA,kBAAa,EAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAE9D,0BAA0B;QAC1B,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACpD,IAAA,kBAAa,EAAC,YAAY,EAAE,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;QAE9D,YAAY;QACZ,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,oCAAoC;QACvD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,cAAc,CAAC,OAAiC,EAAE,QAAe;IACxE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAkB,EAAE,UAAmB,KAAK;IACvE,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,WAAW,WAAM,CAAC,KAAK,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,GAAG,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IAE5H,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,WAAW,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAM,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,GAAG,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAM,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAM,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAM,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAM,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,gBAAgB,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;YACpD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,GAAG,OAAO,CAAC,EAAE,GAAG,WAAM,CAAC,KAAK,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1F,OAAO,CAAC,GAAG,CAAC,UAAU,WAAM,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,GAAG,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,oBAAoB,WAAM,CAAC,KAAK,IAAI,WAAM,CAAC,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,gBAAgB,GAAG,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAE1I,IAAI,OAAO,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,WAAM,CAAC,IAAI,eAAe,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YAClC,OAAO,CAAC,GAAG,CAAC,OAAO,WAAM,CAAC,IAAI,GAAG,UAAK,CAAC,MAAM,GAAG,WAAM,CAAC,KAAK,IAAI,WAAM,CAAC,IAAI,GAAG,MAAM,GAAG,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzG,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB;IACrC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,QAAQ,WAAW,MAAM,CAAC,OAAO,CAAC,IAAI,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,UAAU,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEhJ,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACnC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,eAAe,CAAC,OAAiC;IACxD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,WAAM,CAAC,WAAW,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,WAAM,CAAC,SAAS,CAAC;QAC1B,KAAK,MAAM;YACT,OAAO,WAAM,CAAC,YAAY,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAkB;IAClD,IAAI,EAAE,GAAG,0BAA0B,CAAC;IACpC,EAAE,IAAI,cAAc,MAAM,CAAC,SAAS,MAAM,CAAC;IAC3C,EAAE,IAAI,uBAAuB,CAAC;IAE9B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;QACrC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,MAAM,CAAC;QACxC,EAAE,IAAI,eAAe,OAAO,CAAC,KAAK,IAAI,CAAC;QACvC,EAAE,IAAI,kBAAkB,OAAO,CAAC,QAAQ,MAAM,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/commands/scan-secrets.d.ts

@@ -0,0 +1,47 @@
+/**
+ * scan:secrets command
+ * Enterprise-grade secret detection with SecretsGuardian
+ */
+import { Command } from 'commander';
+export interface ScanSecretsOptions {
+    path: string;
+    format: 'table' | 'json' | 'sarif';
+    output?: string;
+    excludeTests: boolean;
+    minConfidence?: number;
+    failOnDetection: boolean;
+    evidence: boolean;
+    history?: boolean;
+    historyDepth?: number;
+    noCustomPatterns?: boolean;
+    noAllowlist?: boolean;
+    noContextualRisk?: boolean;
+}
+export interface SecretFinding {
+    type: string;
+    file: string;
+    line: number;
+    risk: string;
+    confidence: number;
+    entropy: number;
+    match: string;
+    isTest: boolean;
+    recommendation: any;
+}
+export interface ScanSecretsResult {
+    projectPath: string;
+    scanType: string;
+    filesScanned: number;
+    patterns: string[];
+    findings: SecretFinding[];
+    summary: {
+        total: number;
+        highEntropy: number;
+        lowEntropy: number;
+        byRisk: Record<string, number>;
+    };
+}
+export declare function scanSecrets(projectPath: string, options: ScanSecretsOptions): Promise<ScanSecretsResult>;
+export declare function outputSecretsResults(results: ScanSecretsResult, options: ScanSecretsOptions): void;
+export declare function registerScanSecretsCommand(program: Command, requireAuth: () => any, printLogo: () => void): void;
+//# sourceMappingURL=scan-secrets.d.ts.map

package/dist/commands/scan-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-secrets.d.ts","sourceRoot":"","sources":["../../src/commands/scan-secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoBpC,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,GAAG,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAChC,CAAC;CACH;AAED,wBAAsB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAyG9G;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAsClG;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,IAAI,CAgFhH"}