@vibecheckai/cli 2.5.1

package/dist/init/ci-generator.js

@@ -0,0 +1,317 @@
+"use strict";
+/**
+ * CI Workflow Generator
+ * Generates working GitHub Actions workflows with SARIF upload support
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateCIWorkflow = generateCIWorkflow;
+exports.getCIProviderFromProject = getCIProviderFromProject;
+const fs_1 = require("fs");
+const path_1 = require("path");
+function generateGitHubActionsWorkflow(config) {
+    const useSarif = config.output.format === 'sarif' || config.output.sarifUpload;
+    const runCompliance = config.scans.compliance.enabled;
+    const runSbom = config.scans.sbom?.enabled;
+    const workflow = `name: Guardrail Security Scan
+
+on:
+  push:
+    branches: [main, master, develop]
+  pull_request:
+    branches: [main, master, develop]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  security-events: write
+  actions: read
+
+jobs:
+  guardrail-scan:
+    name: Security Scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci --ignore-scripts
+        timeout-minutes: 10
+        retry-on-error: true
+
+      - name: Install Guardrail CLI
+        run: npm install -g guardrail-cli
+        timeout-minutes: 5
+        retry-on-error: true
+
+      - name: Run Secrets Scan
+        id: secrets
+        run: |
+          set -e
+          MAX_RETRIES=3
+          RETRY_COUNT=0
+          while [ $RETRY_COUNT -lt $MAX_RETRIES ]; do
+            if guardrail scan:secrets \\
+              --path . \\
+              --format ${useSarif ? 'sarif' : 'json'} \\
+              ${useSarif ? '--output secrets-results.sarif' : '--output secrets-results.json'} \\
+              --exit-code; then
+              exit 0
+            fi
+            RETRY_COUNT=$((RETRY_COUNT + 1))
+            if [ $RETRY_COUNT -lt $MAX_RETRIES ]; then
+              echo "Scan failed, retrying in 5 seconds... (attempt $RETRY_COUNT/$MAX_RETRIES)"
+              sleep 5
+            fi
+          done
+          echo "Secrets scan failed after $MAX_RETRIES attempts"
+          exit 1
+        env:
+          GUARDRAIL_API_KEY: \${{ secrets.GUARDRAIL_API_KEY }}
+        timeout-minutes: 10
+        # Note: Removed continue-on-error - failures should be visible
+
+      - name: Run Vulnerability Scan
+        id: vulns
+        run: |
+          set -e
+          MAX_RETRIES=3
+          RETRY_COUNT=0
+          while [ $RETRY_COUNT -lt $MAX_RETRIES ]; do
+            if guardrail scan:vulnerabilities \\
+              --path . \\
+              --format ${useSarif ? 'sarif' : 'json'} \\
+              ${useSarif ? '--output vuln-results.sarif' : '--output vuln-results.json'} \\
+              --exit-code; then
+              exit 0
+            fi
+            RETRY_COUNT=$((RETRY_COUNT + 1))
+            if [ $RETRY_COUNT -lt $MAX_RETRIES ]; then
+              echo "Scan failed, retrying in 5 seconds... (attempt $RETRY_COUNT/$MAX_RETRIES)"
+              sleep 5
+            fi
+          done
+          echo "Vulnerability scan failed after $MAX_RETRIES attempts"
+          exit 1
+        env:
+          GUARDRAIL_API_KEY: \${{ secrets.GUARDRAIL_API_KEY }}
+        timeout-minutes: 15
+        # Note: Removed continue-on-error - failures should be visible
+${runCompliance ? `
+      - name: Run Compliance Scan
+        id: compliance
+        run: |
+          guardrail scan:compliance\\
+            --path . \\
+            --framework ${config.scans.compliance.frameworks?.[0] || 'soc2'} \\
+            --format json \\
+            --output compliance-results.json \\
+            --exit-code
+        env:
+          GUARDRAIL_API_KEY: \${{ secrets.GUARDRAIL_API_KEY }}
+        continue-on-error: true
+` : ''}${runSbom ? `
+      - name: Generate SBOM
+        id: sbom
+        run: |
+          guardrail sbom:generate \\
+            --path . \\
+            --format cyclonedx \\
+            --output sbom.json
+        env:
+          GUARDRAIL_API_KEY: \${{ secrets.GUARDRAIL_API_KEY }}
+        # Note: Optional scan - continue-on-error acceptable
+        continue-on-error: true
+` : ''}${runSbom ? `
+      - name: Generate SBOM
+        id: sbom
+        run: |
+          guardrail sbom:generate \\
+            --path . \\
+            --format cyclonedx \\
+            --output sbom.json
+        env:
+          GUARDRAIL_API_KEY: \${{ secrets.GUARDRAIL_API_KEY }}
+        # Note: Optional scan - continue-on-error acceptable
+        continue-on-error: true
+` : ''}
+      - name: Run Ship Check
+        id: ship
+        run: |
+          set -e
+          MAX_RETRIES=2
+          RETRY_COUNT=0
+          while [ $RETRY_COUNT -lt $MAX_RETRIES ]; do
+            if guardrail ship \\
+              --path . \\
+              --format json \\
+              --output ship-results.json; then
+              exit 0
+            fi
+            RETRY_COUNT=$((RETRY_COUNT + 1))
+            if [ $RETRY_COUNT -lt $MAX_RETRIES ]; then
+              echo "Ship check failed, retrying in 5 seconds... (attempt $RETRY_COUNT/$MAX_RETRIES)"
+              sleep 5
+            fi
+          done
+          echo "Ship check failed after $MAX_RETRIES attempts"
+          exit 1
+        env:
+          GUARDRAIL_API_KEY: \${{ secrets.GUARDRAIL_API_KEY }}
+        timeout-minutes: 20
+        # Note: Removed continue-on-error - ship check failures should be visible
+${useSarif ? `
+      - name: Upload Secrets SARIF to GitHub Security
+        uses: github/codeql-action/upload-sarif@v3
+        if: always() && hashFiles('secrets-results.sarif') != ''
+        with:
+          sarif_file: secrets-results.sarif
+          category: guardrail-secrets
+        continue-on-error: true
+        timeout-minutes: 5
+
+      - name: Upload Vulnerability SARIF to GitHub Security
+        uses: github/codeql-action/upload-sarif@v3
+        if: always() && hashFiles('vuln-results.sarif') != ''
+        with:
+          sarif_file: vuln-results.sarif
+          category: guardrail-vulnerabilities
+        continue-on-error: true
+        timeout-minutes: 5
+` : ''}
+      - name: Upload Scan Artifacts
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: guardrail-results
+          path: |
+            *-results.json
+            *-results.sarif
+            sbom.json
+          retention-days: 30
+
+      - name: Check Scan Results
+        run: |
+          echo "=== Guardrail Security Scan Summary ==="
+          
+          if [ -f ship-results.json ]; then
+            VERDICT=$(cat ship-results.json | jq -r '.verdict // "unknown"')
+            SCORE=$(cat ship-results.json | jq -r '.score // "N/A"')
+            echo "Ship Status: $VERDICT (Score: $SCORE)"
+          fi
+          
+          # Fail the workflow if critical issues were found
+          FAILED=false
+          
+          if [ "\${{ steps.secrets.outcome }}" == "failure" ]; then
+            echo "❌ Secrets scan found issues"
+            FAILED=true
+          else
+            echo "✅ Secrets scan passed"
+          fi
+          
+          if [ "\${{ steps.vulns.outcome }}" == "failure" ]; then
+            echo "❌ Vulnerability scan found issues"
+            FAILED=true
+          else
+            echo "✅ Vulnerability scan passed"
+          fi
+          
+          if [ "$FAILED" == "true" ]; then
+            echo ""
+            echo "Security issues detected. Please review the scan results."
+            exit 1
+          fi
+          
+          echo ""
+          echo "All security checks passed! ✅"
+`;
+    return workflow;
+}
+function generateGitLabCI(config) {
+    const runCompliance = config.scans.compliance.enabled;
+    return `stages:
+  - security
+
+guardrail-scan:
+  stage: security
+  image: node:20-alpine
+  before_script:
+    - npm ci --ignore-scripts
+    - npm install -g guardrail-cli
+  script:
+    - guardrail scan:secrets --path . --format json --output secrets-results.json --exit-code || true
+    - guardrail scan:vulnerabilities --path . --format json --output vuln-results.json --exit-code || true
+${runCompliance ? `    - guardrail scan:compliance --path . --framework ${config.scans.compliance.frameworks?.[0] || 'soc2'} --format json --output compliance-results.json || true` : ''}
+    - guardrail ship --path . --format json --output ship-results.json
+  artifacts:
+    paths:
+      - "*-results.json"
+    reports:
+      sast: secrets-results.json
+    expire_in: 30 days
+  variables:
+    GUARDRAIL_API_KEY: $GUARDRAIL_API_KEY
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+`;
+}
+function generateCIWorkflow(options) {
+    const { projectPath, config, provider = 'github' } = options;
+    let workflowContent;
+    let workflowPath;
+    switch (provider) {
+        case 'github': {
+            workflowContent = generateGitHubActionsWorkflow(config);
+            const workflowDir = (0, path_1.join)(projectPath, '.github', 'workflows');
+            if (!(0, fs_1.existsSync)(workflowDir)) {
+                (0, fs_1.mkdirSync)(workflowDir, { recursive: true });
+            }
+            workflowPath = (0, path_1.join)(workflowDir, 'guardrail.yml');
+            break;
+        }
+        case 'gitlab': {
+            workflowContent = generateGitLabCI(config);
+            workflowPath = (0, path_1.join)(projectPath, '.gitlab-ci.yml');
+            break;
+        }
+        default:
+            workflowContent = generateGitHubActionsWorkflow(config);
+            const defaultDir = (0, path_1.join)(projectPath, '.github', 'workflows');
+            if (!(0, fs_1.existsSync)(defaultDir)) {
+                (0, fs_1.mkdirSync)(defaultDir, { recursive: true });
+            }
+            workflowPath = (0, path_1.join)(defaultDir, 'guardrail.yml');
+    }
+    (0, fs_1.writeFileSync)(workflowPath, workflowContent, 'utf-8');
+    return {
+        success: true,
+        workflowPath,
+        provider,
+    };
+}
+function getCIProviderFromProject(projectPath) {
+    if ((0, fs_1.existsSync)((0, path_1.join)(projectPath, '.github'))) {
+        return 'github';
+    }
+    if ((0, fs_1.existsSync)((0, path_1.join)(projectPath, '.gitlab-ci.yml'))) {
+        return 'gitlab';
+    }
+    if ((0, fs_1.existsSync)((0, path_1.join)(projectPath, 'azure-pipelines.yml'))) {
+        return 'azure';
+    }
+    if ((0, fs_1.existsSync)((0, path_1.join)(projectPath, 'bitbucket-pipelines.yml'))) {
+        return 'bitbucket';
+    }
+    return null;
+}
+//# sourceMappingURL=ci-generator.js.map

package/dist/init/ci-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-generator.js","sourceRoot":"","sources":["../../src/init/ci-generator.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAyRH,gDAqCC;AAED,4DAcC;AA5UD,2BAA0D;AAC1D,+BAA4B;AAgB5B,SAAS,6BAA6B,CAAC,MAAuB;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;IAC/E,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;IAE3C,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAiDM,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBACpC,QAAQ,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;yBA0BpE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBACpC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,4BAA4B;;;;;;;;;;;;;;;;EAgBrF,aAAa,CAAC,CAAC,CAAC;;;;;;0BAMQ,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM;;;;;;;CAO1E,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;;;;;;;;;;;;CAYlB,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;;;;;;;;;;;;CAYlB,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BJ,QAAQ,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;CAkBZ,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CL,CAAC;IAEA,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAuB;IAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;IAEtD,OAAO;;;;;;;;;;;;EAYP,aAAa,CAAC,CAAC,CAAC,wDAAwD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,yDAAyD,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;CAaxL,CAAC;AACF,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAA2B;IAC5D,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;IAE7D,IAAI,eAAuB,CAAC;IAC5B,IAAI,YAAoB,CAAC;IAEzB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,eAAe,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAA,eAAU,EAAC,WAAW,CAAC,EAAE,CAAC;gBAC7B,IAAA,cAAS,EAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;YACD,YAAY,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAClD,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,eAAe,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC3C,YAAY,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;YACnD,MAAM;QACR,CAAC;QACD;YACE,eAAe,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,IAAA,cAAS,EAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,YAAY,GAAG,IAAA,WAAI,EAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACrD,CAAC;IAED,IAAA,kBAAa,EAAC,YAAY,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAEtD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,YAAY;QACZ,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAgB,wBAAwB,CAAC,WAAmB;IAC1D,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/init/detect-framework.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Framework Detection Module
+ * Detects project type by inspecting package.json and file structure
+ */
+export type DetectedFramework = 'nextjs' | 'express' | 'nestjs' | 'fastify' | 'remix' | 'vite-react' | 'unknown';
+export interface FrameworkDetectionResult {
+    framework: DetectedFramework;
+    confidence: 'high' | 'medium' | 'low';
+    signals: string[];
+    recommendedScans: string[];
+    scanDescription: string;
+}
+export declare function detectFramework(projectPath: string): FrameworkDetectionResult;
+export declare function formatFrameworkName(framework: DetectedFramework): string;
+//# sourceMappingURL=detect-framework.d.ts.map

package/dist/init/detect-framework.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-framework.d.ts","sourceRoot":"","sources":["../../src/init/detect-framework.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,SAAS,GACT,OAAO,GACP,YAAY,GACZ,SAAS,CAAC;AAEd,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAiRD,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,wBAAwB,CAsC7E;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,iBAAiB,GAAG,MAAM,CAWxE"}

package/dist/init/detect-framework.js

@@ -0,0 +1,301 @@
+"use strict";
+/**
+ * Framework Detection Module
+ * Detects project type by inspecting package.json and file structure
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectFramework = detectFramework;
+exports.formatFrameworkName = formatFrameworkName;
+const fs_1 = require("fs");
+const path_1 = require("path");
+function loadPackageJson(projectPath) {
+    const packageJsonPath = (0, path_1.join)(projectPath, 'package.json');
+    if (!(0, fs_1.existsSync)(packageJsonPath)) {
+        return null;
+    }
+    try {
+        return JSON.parse((0, fs_1.readFileSync)(packageJsonPath, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+function hasDependency(pkg, depName) {
+    if (!pkg)
+        return false;
+    return Boolean(pkg.dependencies?.[depName] || pkg.devDependencies?.[depName]);
+}
+function hasFile(projectPath, ...patterns) {
+    for (const pattern of patterns) {
+        if (pattern.includes('*')) {
+            const dir = (0, path_1.join)(projectPath, pattern.split('/')[0] || '.');
+            const filePattern = pattern.split('/').pop()?.replace('*', '') || '';
+            try {
+                const files = (0, fs_1.readdirSync)(dir);
+                if (files.some(f => f.includes(filePattern.replace('*', '')))) {
+                    return true;
+                }
+            }
+            catch {
+                continue;
+            }
+        }
+        else {
+            if ((0, fs_1.existsSync)((0, path_1.join)(projectPath, pattern))) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+function hasDirectory(projectPath, dirName) {
+    const dirPath = (0, path_1.join)(projectPath, dirName);
+    try {
+        return (0, fs_1.existsSync)(dirPath) && (0, fs_1.statSync)(dirPath).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+function hasFilePattern(projectPath, dir, pattern) {
+    const dirPath = (0, path_1.join)(projectPath, dir);
+    if (!(0, fs_1.existsSync)(dirPath))
+        return false;
+    try {
+        const files = (0, fs_1.readdirSync)(dirPath);
+        return files.some(f => pattern.test(f));
+    }
+    catch {
+        return false;
+    }
+}
+function detectNextJS(projectPath, pkg) {
+    const signals = [];
+    let confidence = 'low';
+    if (hasDependency(pkg, 'next')) {
+        signals.push('next dependency found in package.json');
+        confidence = 'high';
+    }
+    if (hasFile(projectPath, 'next.config.js', 'next.config.mjs', 'next.config.ts')) {
+        signals.push('next.config.* file found');
+        confidence = 'high';
+    }
+    if (hasDirectory(projectPath, 'app') && hasFile(projectPath, 'app/layout.tsx', 'app/layout.js', 'app/page.tsx', 'app/page.js')) {
+        signals.push('Next.js app directory structure detected');
+        if (confidence !== 'high')
+            confidence = 'medium';
+    }
+    if (hasDirectory(projectPath, 'pages')) {
+        const pagesPath = (0, path_1.join)(projectPath, 'pages');
+        try {
+            const files = (0, fs_1.readdirSync)(pagesPath);
+            if (files.some(f => f.endsWith('.tsx') || f.endsWith('.jsx') || f === '_app.js' || f === '_app.tsx')) {
+                signals.push('Next.js pages directory structure detected');
+                if (confidence !== 'high')
+                    confidence = 'medium';
+            }
+        }
+        catch (error) {
+            // Failed to detect framework - continue with default setup
+        }
+    }
+    if (signals.length === 0)
+        return null;
+    return {
+        framework: 'nextjs',
+        confidence,
+        signals,
+        recommendedScans: ['secrets', 'vuln', 'ship', 'reality'],
+        scanDescription: 'Full-stack scanning: secrets detection, dependency vulnerabilities, ship readiness, and reality mode for auth/dashboard flows',
+    };
+}
+function detectExpress(projectPath, pkg) {
+    const signals = [];
+    let confidence = 'low';
+    if (hasDependency(pkg, 'express')) {
+        signals.push('express dependency found in package.json');
+        confidence = 'high';
+    }
+    if (hasFilePattern(projectPath, 'src', /^(server|app|index)\.(ts|js)$/)) {
+        signals.push('src/server.* or src/app.* pattern detected');
+        if (confidence !== 'high')
+            confidence = 'medium';
+    }
+    if (hasFilePattern(projectPath, '.', /^(server|app)\.(ts|js)$/)) {
+        signals.push('Root server.* or app.* file detected');
+        if (confidence !== 'high')
+            confidence = 'medium';
+    }
+    if (hasDirectory(projectPath, 'routes') || hasDirectory(projectPath, 'src/routes')) {
+        signals.push('routes directory detected');
+        if (confidence !== 'high')
+            confidence = 'low';
+    }
+    if (signals.length === 0)
+        return null;
+    return {
+        framework: 'express',
+        confidence,
+        signals,
+        recommendedScans: ['secrets', 'vuln', 'ship', 'compliance'],
+        scanDescription: 'API-focused scanning: secrets detection, dependency vulnerabilities, ship readiness, and compliance checks for logging/rate limits',
+    };
+}
+function detectNestJS(projectPath, pkg) {
+    const signals = [];
+    let confidence = 'low';
+    if (hasDependency(pkg, '@nestjs/core')) {
+        signals.push('@nestjs/core dependency found');
+        confidence = 'high';
+    }
+    if (hasDependency(pkg, '@nestjs/common')) {
+        signals.push('@nestjs/common dependency found');
+        if (confidence !== 'high')
+            confidence = 'medium';
+    }
+    if (hasFile(projectPath, 'nest-cli.json')) {
+        signals.push('nest-cli.json configuration found');
+        confidence = 'high';
+    }
+    if (hasFilePattern(projectPath, 'src', /\.module\.ts$/)) {
+        signals.push('NestJS module files detected');
+        if (confidence !== 'high')
+            confidence = 'medium';
+    }
+    if (signals.length === 0)
+        return null;
+    return {
+        framework: 'nestjs',
+        confidence,
+        signals,
+        recommendedScans: ['secrets', 'vuln', 'ship', 'compliance'],
+        scanDescription: 'Enterprise API scanning: secrets detection, dependency vulnerabilities, ship readiness, and compliance checks for decorators/guards',
+    };
+}
+function detectFastify(projectPath, pkg) {
+    const signals = [];
+    let confidence = 'low';
+    if (hasDependency(pkg, 'fastify')) {
+        signals.push('fastify dependency found in package.json');
+        confidence = 'high';
+    }
+    if (hasDependency(pkg, '@fastify/autoload') || hasDependency(pkg, 'fastify-plugin')) {
+        signals.push('Fastify ecosystem packages detected');
+        if (confidence !== 'high')
+            confidence = 'medium';
+    }
+    if (signals.length === 0)
+        return null;
+    return {
+        framework: 'fastify',
+        confidence,
+        signals,
+        recommendedScans: ['secrets', 'vuln', 'ship', 'compliance'],
+        scanDescription: 'High-performance API scanning: secrets detection, dependency vulnerabilities, ship readiness, and compliance checks',
+    };
+}
+function detectRemix(projectPath, pkg) {
+    const signals = [];
+    let confidence = 'low';
+    if (hasDependency(pkg, '@remix-run/node') || hasDependency(pkg, '@remix-run/react')) {
+        signals.push('@remix-run packages found in package.json');
+        confidence = 'high';
+    }
+    if (hasFile(projectPath, 'remix.config.js', 'remix.config.ts')) {
+        signals.push('remix.config.* file found');
+        confidence = 'high';
+    }
+    if (hasDirectory(projectPath, 'app/routes')) {
+        signals.push('Remix app/routes directory structure detected');
+        if (confidence !== 'high')
+            confidence = 'medium';
+    }
+    if (signals.length === 0)
+        return null;
+    return {
+        framework: 'remix',
+        confidence,
+        signals,
+        recommendedScans: ['secrets', 'vuln', 'ship', 'reality'],
+        scanDescription: 'Full-stack scanning: secrets detection, dependency vulnerabilities, ship readiness, and reality mode for form/loader flows',
+    };
+}
+function detectViteReact(projectPath, pkg) {
+    const signals = [];
+    let confidence = 'low';
+    const hasVite = hasDependency(pkg, 'vite');
+    const hasReact = hasDependency(pkg, 'react') || hasDependency(pkg, 'react-dom');
+    if (hasVite && hasReact) {
+        signals.push('vite + react dependencies found');
+        confidence = 'high';
+    }
+    if (hasFile(projectPath, 'vite.config.ts', 'vite.config.js', 'vite.config.mjs')) {
+        signals.push('vite.config.* file found');
+        if (hasReact) {
+            confidence = 'high';
+        }
+        else if (confidence !== 'high') {
+            confidence = 'medium';
+        }
+    }
+    if (hasDependency(pkg, '@vitejs/plugin-react') || hasDependency(pkg, '@vitejs/plugin-react-swc')) {
+        signals.push('Vite React plugin detected');
+        confidence = 'high';
+    }
+    if (signals.length === 0)
+        return null;
+    return {
+        framework: 'vite-react',
+        confidence,
+        signals,
+        recommendedScans: ['secrets', 'vuln', 'ship'],
+        scanDescription: 'Frontend scanning: secrets detection in client code, dependency vulnerabilities, and ship readiness checks',
+    };
+}
+function detectFramework(projectPath) {
+    const pkg = loadPackageJson(projectPath);
+    const detectors = [
+        detectNextJS,
+        detectNestJS,
+        detectRemix,
+        detectFastify,
+        detectExpress,
+        detectViteReact,
+    ];
+    let bestMatch = null;
+    const confidenceOrder = { high: 3, medium: 2, low: 1 };
+    for (const detector of detectors) {
+        const result = detector(projectPath, pkg);
+        if (result) {
+            if (!bestMatch || confidenceOrder[result.confidence] > confidenceOrder[bestMatch.confidence]) {
+                bestMatch = result;
+            }
+            if (result.confidence === 'high') {
+                break;
+            }
+        }
+    }
+    if (bestMatch) {
+        return bestMatch;
+    }
+    return {
+        framework: 'unknown',
+        confidence: 'low',
+        signals: ['No specific framework detected'],
+        recommendedScans: ['secrets', 'vuln'],
+        scanDescription: 'Basic scanning: secrets detection and dependency vulnerability checks',
+    };
+}
+function formatFrameworkName(framework) {
+    const names = {
+        nextjs: 'Next.js',
+        express: 'Express.js',
+        nestjs: 'NestJS',
+        fastify: 'Fastify',
+        remix: 'Remix',
+        'vite-react': 'Vite + React',
+        unknown: 'Unknown',
+    };
+    return names[framework];
+}
+//# sourceMappingURL=detect-framework.js.map

package/dist/init/detect-framework.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-framework.js","sourceRoot":"","sources":["../../src/init/detect-framework.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAqSH,0CAsCC;AAED,kDAWC;AAtVD,2BAAqE;AACrE,+BAA4B;AA0B5B,SAAS,eAAe,CAAC,WAAmB;IAC1C,MAAM,eAAe,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAA,eAAU,EAAC,eAAe,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAuB,EAAE,OAAe;IAC7D,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,OAAO,CAAC,WAAmB,EAAE,GAAG,QAAkB;IACzD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAA,gBAAW,EAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC3C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,OAAe;IACxD,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,IAAA,eAAU,EAAC,OAAO,CAAC,IAAI,IAAA,aAAQ,EAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB,EAAE,GAAW,EAAE,OAAe;IACvE,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,IAAA,eAAU,EAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAA,gBAAW,EAAC,OAAO,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,GAAuB;IAChE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,GAA8B,KAAK,CAAC;IAElD,IAAI,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACtD,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzC,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,CAAC;QAC/H,OAAO,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACzD,IAAI,UAAU,KAAK,MAAM;YAAE,UAAU,GAAG,QAAQ,CAAC;IACnD,CAAC;IAED,IAAI,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAA,gBAAW,EAAC,SAAS,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU,CAAC,EAAE,CAAC;gBACrG,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;gBAC3D,IAAI,UAAU,KAAK,MAAM;oBAAE,UAAU,GAAG,QAAQ,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,2DAA2D;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,UAAU;QACV,OAAO;QACP,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;QACxD,eAAe,EAAE,+HAA+H;KACjJ,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,GAAuB;IACjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,GAA8B,KAAK,CAAC;IAElD,IAAI,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACzD,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,cAAc,CAAC,WAAW,EAAE,KAAK,EAAE,+BAA+B,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC3D,IAAI,UAAU,KAAK,MAAM;YAAE,UAAU,GAAG,QAAQ,CAAC;IACnD,CAAC;IAED,IAAI,cAAc,CAAC,WAAW,EAAE,GAAG,EAAE,yBAAyB,CAAC,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACrD,IAAI,UAAU,KAAK,MAAM;YAAE,UAAU,GAAG,QAAQ,CAAC;IACnD,CAAC;IAED,IAAI,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1C,IAAI,UAAU,KAAK,MAAM;YAAE,UAAU,GAAG,KAAK,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,UAAU;QACV,OAAO;QACP,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC;QAC3D,eAAe,EAAE,oIAAoI;KACtJ,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,GAAuB;IAChE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,GAA8B,KAAK,CAAC;IAElD,IAAI,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC9C,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAChD,IAAI,UAAU,KAAK,MAAM;YAAE,UAAU,GAAG,QAAQ,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAClD,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,cAAc,CAAC,WAAW,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC7C,IAAI,UAAU,KAAK,MAAM;YAAE,UAAU,GAAG,QAAQ,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,UAAU;QACV,OAAO;QACP,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC;QAC3D,eAAe,EAAE,qIAAqI;KACvJ,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,GAAuB;IACjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,GAA8B,KAAK,CAAC;IAElD,IAAI,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACzD,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC,IAAI,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACpD,IAAI,UAAU,KAAK,MAAM;YAAE,UAAU,GAAG,QAAQ,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,UAAU;QACV,OAAO;QACP,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC;QAC3D,eAAe,EAAE,qHAAqH;KACvI,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,WAAmB,EAAE,GAAuB;IAC/D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,GAA8B,KAAK,CAAC;IAElD,IAAI,aAAa,CAAC,GAAG,EAAE,iBAAiB,CAAC,IAAI,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC1D,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1C,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC9D,IAAI,UAAU,KAAK,MAAM;YAAE,UAAU,GAAG,QAAQ,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO;QACL,SAAS,EAAE,OAAO;QAClB,UAAU;QACV,OAAO;QACP,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;QACxD,eAAe,EAAE,4HAA4H;KAC9I,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,WAAmB,EAAE,GAAuB;IACnE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,GAA8B,KAAK,CAAC;IAElD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,aAAa,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEhF,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAChD,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,UAAU,GAAG,MAAM,CAAC;QACtB,CAAC;aAAM,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YACjC,UAAU,GAAG,QAAQ,CAAC;QACxB,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,GAAG,EAAE,sBAAsB,CAAC,IAAI,aAAa,CAAC,GAAG,EAAE,0BAA0B,CAAC,EAAE,CAAC;QACjG,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC3C,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO;QACL,SAAS,EAAE,YAAY;QACvB,UAAU;QACV,OAAO;QACP,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;QAC7C,eAAe,EAAE,4GAA4G;KAC9H,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,WAAmB;IACjD,MAAM,GAAG,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG;QAChB,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,aAAa;QACb,aAAa;QACb,eAAe;KAChB,CAAC;IAEF,IAAI,SAAS,GAAoC,IAAI,CAAC;IACtD,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAEvD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7F,SAAS,GAAG,MAAM,CAAC;YACrB,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;gBACjC,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,CAAC,gCAAgC,CAAC;QAC3C,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;QACrC,eAAe,EAAE,uEAAuE;KACzF,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CAAC,SAA4B;IAC9D,MAAM,KAAK,GAAsC;QAC/C,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,cAAc;QAC5B,OAAO,EAAE,SAAS;KACnB,CAAC;IACF,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;AAC1B,CAAC"}

package/dist/init/hooks-installer.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Git Hooks Installer
+ * Installs and configures husky or lefthook for pre-commit/pre-push hooks
+ */
+import type { GuardrailConfig } from './templates';
+export type HookRunner = 'husky' | 'lefthook';
+export interface HooksInstallerOptions {
+    projectPath: string;
+    config: GuardrailConfig;
+    runner?: HookRunner;
+    preCommit?: boolean;
+    prePush?: boolean;
+}
+export interface HooksInstallerResult {
+    success: boolean;
+    runner: HookRunner;
+    installedHooks: string[];
+    error?: string;
+}
+export declare function installHooks(options: HooksInstallerOptions): HooksInstallerResult;
+export declare function getRecommendedRunner(projectPath: string): HookRunner;
+//# sourceMappingURL=hooks-installer.d.ts.map