@westbayberry/dg 1.0.20 → 1.0.23

package/dist/index.mjs

@@ -1874,14 +1874,14 @@ var require_templates = __commonJS({
       }
       return results;
     }
-    function buildStyle(chalk9, styles8) {
+    function buildStyle(chalk8, styles8) {
       const enabled = {};
       for (const layer of styles8) {
         for (const style of layer.styles) {
           enabled[style[0]] = layer.inverse ? null : style.slice(1);
         }
       }
-      let current = chalk9;
+      let current = chalk8;
       for (const [styleName, styles9] of Object.entries(enabled)) {
         if (!Array.isArray(styles9)) {
           continue;
@@ -1893,7 +1893,7 @@ var require_templates = __commonJS({
       }
       return current;
     }
-    module.exports = (chalk9, temporary) => {
+    module.exports = (chalk8, temporary) => {
       const styles8 = [];
       const chunks = [];
       let chunk = [];
@@ -1903,13 +1903,13 @@ var require_templates = __commonJS({
         } else if (style) {
           const string = chunk.join("");
           chunk = [];
-          chunks.push(styles8.length === 0 ? string : buildStyle(chalk9, styles8)(string));
+          chunks.push(styles8.length === 0 ? string : buildStyle(chalk8, styles8)(string));
           styles8.push({ inverse, styles: parseStyle(style) });
         } else if (close) {
           if (styles8.length === 0) {
             throw new Error("Found extraneous } in Chalk template literal");
           }
-          chunks.push(buildStyle(chalk9, styles8)(chunk.join("")));
+          chunks.push(buildStyle(chalk8, styles8)(chunk.join("")));
           chunk = [];
           styles8.pop();
         } else {
@@ -1957,16 +1957,16 @@ var require_source = __commonJS({
       }
     };
     var chalkFactory2 = (options) => {
-      const chalk10 = {};
-      applyOptions2(chalk10, options);
-      chalk10.template = (...arguments_) => chalkTag(chalk10.template, ...arguments_);
-      Object.setPrototypeOf(chalk10, Chalk.prototype);
-      Object.setPrototypeOf(chalk10.template, chalk10);
-      chalk10.template.constructor = () => {
+      const chalk9 = {};
+      applyOptions2(chalk9, options);
+      chalk9.template = (...arguments_) => chalkTag(chalk9.template, ...arguments_);
+      Object.setPrototypeOf(chalk9, Chalk.prototype);
+      Object.setPrototypeOf(chalk9.template, chalk9);
+      chalk9.template.constructor = () => {
         throw new Error("`chalk.constructor()` is deprecated. Use `new chalk.Instance()` instead.");
       };
-      chalk10.template.Instance = ChalkClass;
-      return chalk10.template;
+      chalk9.template.Instance = ChalkClass;
+      return chalk9.template;
     };
     function Chalk(options) {
       return chalkFactory2(options);
@@ -2077,7 +2077,7 @@ var require_source = __commonJS({
       return openAll + string + closeAll;
     };
     var template;
-    var chalkTag = (chalk10, ...strings) => {
+    var chalkTag = (chalk9, ...strings) => {
       const [firstString] = strings;
       if (!isArray(firstString) || !isArray(firstString.raw)) {
         return strings.join(" ");
@@ -2093,14 +2093,14 @@ var require_source = __commonJS({
       if (template === void 0) {
         template = require_templates();
       }
-      return template(chalk10, parts.join(""));
+      return template(chalk9, parts.join(""));
     };
     Object.defineProperties(Chalk.prototype, styles8);
-    var chalk9 = Chalk();
-    chalk9.supportsColor = stdoutColor2;
-    chalk9.stderr = Chalk({ level: stderrColor2 ? stderrColor2.level : 0 });
-    chalk9.stderr.supportsColor = stderrColor2;
-    module.exports = chalk9;
+    var chalk8 = Chalk();
+    chalk8.supportsColor = stdoutColor2;
+    chalk8.stderr = Chalk({ level: stderrColor2 ? stderrColor2.level : 0 });
+    chalk8.stderr.supportsColor = stderrColor2;
+    module.exports = chalk8;
   }
 });
 
@@ -33012,10 +33012,10 @@ var init_source = __esm({
       object.level = options.level === void 0 ? colorLevel : options.level;
     };
     chalkFactory = (options) => {
-      const chalk9 = (...strings) => strings.join(" ");
-      applyOptions(chalk9, options);
-      Object.setPrototypeOf(chalk9, createChalk.prototype);
-      return chalk9;
+      const chalk8 = (...strings) => strings.join(" ");
+      applyOptions(chalk8, options);
+      Object.setPrototypeOf(chalk8, createChalk.prototype);
+      return chalk8;
     };
     Object.setPrototypeOf(createChalk.prototype, Function.prototype);
     for (const [styleName, style] of Object.entries(ansi_styles_default3)) {
@@ -38943,15 +38943,16 @@ async function handleTrialExhausted(response) {
   }
 }
 async function callAnalyzeAPI(packages, config, onProgress) {
-  if (packages.length <= BATCH_SIZE) {
+  const batchSize = config.apiKey ? BATCH_SIZE : ANON_BATCH_SIZE;
+  if (packages.length <= batchSize) {
     if (onProgress) onProgress(0, packages.length, packages.map((p) => p.name));
     const result = await callBatchWithRetry(packages, config);
     if (onProgress) onProgress(packages.length, packages.length, packages.map((p) => p.name));
     return result;
   }
   const batches = [];
-  for (let i = 0; i < packages.length; i += BATCH_SIZE) {
-    batches.push(packages.slice(i, i + BATCH_SIZE));
+  for (let i = 0; i < packages.length; i += batchSize) {
+    batches.push(packages.slice(i, i + batchSize));
   }
   const results = [];
   let completed = 0;
@@ -39062,12 +39063,13 @@ async function callAnalyzeBatch(packages, config) {
   return await response.json();
 }
 async function callPyPIAnalyzeAPI(packages, config, onProgress) {
-  if (packages.length <= BATCH_SIZE) {
+  const batchSize = config.apiKey ? BATCH_SIZE : ANON_BATCH_SIZE;
+  if (packages.length <= batchSize) {
     return callPyPIBatch(packages, config);
   }
   const batches = [];
-  for (let i = 0; i < packages.length; i += BATCH_SIZE) {
-    batches.push(packages.slice(i, i + BATCH_SIZE));
+  for (let i = 0; i < packages.length; i += batchSize) {
+    batches.push(packages.slice(i, i + batchSize));
   }
   const results = [];
   let completed = 0;
@@ -39134,7 +39136,7 @@ async function callPyPIBatch(packages, config) {
   }
   return await response.json();
 }
-var APIError, TrialExhaustedError, BATCH_SIZE, MAX_RETRIES, RETRY_DELAY_MS;
+var APIError, TrialExhaustedError, BATCH_SIZE, ANON_BATCH_SIZE, MAX_RETRIES, RETRY_DELAY_MS;
 var init_api = __esm({
   "src/api.ts"() {
     "use strict";
@@ -39155,6 +39157,7 @@ var init_api = __esm({
       }
     };
     BATCH_SIZE = 75;
+    ANON_BATCH_SIZE = 50;
     MAX_RETRIES = 2;
     RETRY_DELAY_MS = 5e3;
   }
@@ -41069,7 +41072,7 @@ function reducer3(_state, action) {
     case "SCAN_PROGRESS":
       return { phase: "scanning", done: action.done, total: action.total, currentBatch: action.currentBatch };
     case "SCAN_COMPLETE":
-      return { phase: "results", result: action.result, durationMs: action.durationMs, skippedCount: action.skippedCount };
+      return { phase: "results", result: action.result, durationMs: action.durationMs, skippedCount: action.skippedCount, discoveredTotal: action.discoveredTotal };
     case "ERROR":
       return { phase: "error", error: action.error };
     case "TRIAL_EXHAUSTED":
@@ -41143,23 +41146,44 @@ async function scanProjects(projects, config, dispatch) {
   try {
     const npmProjects = projects.filter((p) => p.ecosystem === "npm");
     const pypiProjects = projects.filter((p) => p.ecosystem === "pypi");
+    const fullScanConfig = { ...config, scanAll: true };
     const npmPackages = [];
     const pypiPackages = [];
+    const seenNpm = /* @__PURE__ */ new Set();
+    const seenPypi = /* @__PURE__ */ new Set();
     for (const proj of npmProjects) {
       try {
-        const discovery = discoverChanges(proj.path, config);
+        const discovery = discoverChanges(proj.path, fullScanConfig);
         for (const pkg of discovery.packages) {
-          if (!config.allowlist.includes(pkg.name)) npmPackages.push(pkg);
+          const key = `${pkg.name}@${pkg.version}`;
+          if (!config.allowlist.includes(pkg.name) && !seenNpm.has(key)) {
+            seenNpm.add(key);
+            npmPackages.push(pkg);
+          }
         }
       } catch {
       }
     }
     for (const proj of pypiProjects) {
-      const packages = parsePythonDepFile(proj.path, proj.depFile);
-      for (const pkg of packages) {
-        if (!config.allowlist.includes(pkg.name)) pypiPackages.push(pkg);
+      try {
+        const packages = parsePythonDepFile(proj.path, proj.depFile);
+        for (const pkg of packages) {
+          const key = `${pkg.name}@${pkg.version}`;
+          if (!config.allowlist.includes(pkg.name) && !seenPypi.has(key)) {
+            seenPypi.add(key);
+            pypiPackages.push(pkg);
+          }
+        }
+      } catch {
       }
     }
+    const discoveredTotal = npmPackages.length + pypiPackages.length;
+    if (!config.apiKey) {
+      const anonLimit = 50;
+      if (npmPackages.length > anonLimit) npmPackages.length = anonLimit;
+      const pypiSlots = Math.max(0, anonLimit - npmPackages.length);
+      if (pypiPackages.length > pypiSlots) pypiPackages.length = pypiSlots;
+    }
     const totalPackages = npmPackages.length + pypiPackages.length;
     if (totalPackages === 0) {
       dispatch({ type: "DISCOVERY_EMPTY", message: "No packages to scan." });
@@ -41204,7 +41228,7 @@ async function scanProjects(projects, config, dispatch) {
       safeVersions,
       durationMs: Date.now() - startMs
     };
-    dispatch({ type: "SCAN_COMPLETE", result: merged, durationMs: merged.durationMs, skippedCount: 0 });
+    dispatch({ type: "SCAN_COMPLETE", result: merged, durationMs: merged.durationMs, skippedCount: 0, discoveredTotal });
   } catch (error) {
     if (error instanceof TrialExhaustedError) {
       dispatch({ type: "TRIAL_EXHAUSTED", scansUsed: error.scansUsed, maxScans: error.maxScans });
@@ -41226,12 +41250,12 @@ var init_useScan = __esm({
 });
 
 // src/ui/components/ProgressBar.tsx
-var import_chalk9, import_jsx_runtime9, ProgressBar;
+var import_jsx_runtime9, ProgressBar;
 var init_ProgressBar = __esm({
   async "src/ui/components/ProgressBar.tsx"() {
     "use strict";
     await init_build2();
-    import_chalk9 = __toESM(require_source());
+    await init_build3();
     import_jsx_runtime9 = __toESM(require_jsx_runtime());
     ProgressBar = ({
       value,
@@ -41239,21 +41263,33 @@ var init_ProgressBar = __esm({
       label
     }) => {
       const termWidth = process.stdout.columns || 80;
-      const counter = `${value}/${total}`;
-      const barWidth = Math.max(10, termWidth - 20);
+      const percent = total > 0 ? Math.round(value / total * 100) : 0;
+      const counter = `${value}/${total} (${percent}%)`;
+      const barWidth = Math.max(10, termWidth - counter.length - 8);
       const fraction = total > 0 ? Math.min(1, value / total) : 0;
       const filled = Math.round(fraction * barWidth);
       const empty = barWidth - filled;
-      const bar = "\u2588".repeat(filled) + "\u2591".repeat(empty);
-      return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Box_default, { children: /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
-        import_chalk9.default.cyan("["),
-        import_chalk9.default.green(bar.slice(0, filled)),
-        import_chalk9.default.gray(bar.slice(filled)),
-        import_chalk9.default.cyan("]"),
-        " ",
-        counter,
-        label ? `  ${label}` : ""
-      ] }) });
+      const filledBar = "\u2501".repeat(filled);
+      const emptyBar = "\u2501".repeat(empty);
+      return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 2, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(build_default, { type: "dots" }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { children: " Scanning packages..." })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { children: "  " }),
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "green", children: filledBar }),
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { dimColor: true, children: emptyBar }),
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
+            "  ",
+            counter
+          ] })
+        ] }),
+        label && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Box_default, { children: /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { dimColor: true, children: [
+          "  ",
+          label
+        ] }) })
+      ] });
     };
   }
 });
@@ -41342,7 +41378,7 @@ var init_useTerminalSize = __esm({
 function groupPackages3(packages) {
   const map = /* @__PURE__ */ new Map();
   for (const pkg of packages) {
-    const fingerprint = pkg.findings.length === 0 ? `__clean_${pkg.score}` : pkg.findings.map((f) => `${f.id}:${f.severity}`).sort().join("|") + `|score:${pkg.score}`;
+    const fingerprint = pkg.findings.length === 0 ? `__clean_${pkg.score}` : pkg.findings.map((f) => `${f.id ?? f.category ?? "unknown"}:${f.severity}`).sort().join("|") + `|score:${pkg.score}`;
     const group = map.get(fingerprint) ?? [];
     group.push(pkg);
     map.set(fingerprint, group);
@@ -41351,10 +41387,10 @@ function groupPackages3(packages) {
 }
 function actionBadge4(score, config) {
   if (score >= config.blockThreshold)
-    return { label: "BLOCK", color: import_chalk10.default.red };
+    return { label: "BLOCK", color: import_chalk9.default.red };
   if (score >= config.warnThreshold)
-    return { label: "WARN", color: import_chalk10.default.yellow };
-  return { label: "pass", color: import_chalk10.default.green };
+    return { label: "WARN", color: import_chalk9.default.yellow };
+  return { label: "pass", color: import_chalk9.default.green };
 }
 function truncate3(s, max) {
   return s.length <= max ? s : s.slice(0, max - 1) + "\u2026";
@@ -41364,7 +41400,12 @@ function pad3(s, len) {
 }
 function findingsSummaryHeight(group) {
   const rep = group.packages[0];
-  let h = rep.findings.filter((f) => f.severity > 1 || f.critical).length;
+  const visibleFindings = rep.findings.filter((f) => f.severity > 1 || f.critical);
+  let h = visibleFindings.length;
+  if (visibleFindings.length === 0 && rep.score > 0) {
+    h += (rep.reasons ?? []).length;
+    h += 1;
+  }
   if (group.packages.length > 3) h += 1;
   return h;
 }
@@ -41373,12 +41414,20 @@ function findingsDetailHeight(group, safeVersions) {
   const visibleFindings = rep.findings.filter((f) => f.severity > 1 || f.critical).sort((a, b) => b.severity - a.severity);
   let h = 0;
   if (group.packages.length > 3) h += 1;
+  if (visibleFindings.length === 0 && rep.score > 0) {
+    h += (rep.reasons ?? []).length;
+    h += 1;
+  }
+  const hasEvidence = visibleFindings.some((f) => f.evidence && f.evidence.length > 0);
   for (const finding of visibleFindings) {
     h += 1;
     h += 1;
-    h += Math.min(finding.evidence.length, EVIDENCE_LIMIT2);
-    if (finding.evidence.length > EVIDENCE_LIMIT2) h += 1;
+    const evidence = finding.evidence ?? [];
+    h += Math.min(evidence.length, EVIDENCE_LIMIT2);
+    if (evidence.length > EVIDENCE_LIMIT2) h += 1;
   }
+  if (visibleFindings.length > 0 && !hasEvidence) h += 1;
+  if (rep.recommendation) h += 1;
   if (safeVersions[rep.name]) h += 1;
   return h;
 }
@@ -41408,13 +41457,13 @@ function viewReducer(_state, action) {
       return { cursor: action.cursor, expandedIndex: action.expandedIndex, expandLevel: action.expandLevel, viewport: action.viewport };
   }
 }
-var import_react30, import_chalk10, import_jsx_runtime10, SEVERITY_LABELS3, SEVERITY_COLORS, EVIDENCE_LIMIT2, FIXED_CHROME, InteractiveResultsView, T, FindingsSummary, FindingsDetail;
+var import_react30, import_chalk9, import_jsx_runtime10, SEVERITY_LABELS3, SEVERITY_COLORS, EVIDENCE_LIMIT2, FIXED_CHROME, InteractiveResultsView, T, FindingsSummary, FindingsDetail;
 var init_InteractiveResultsView = __esm({
   async "src/ui/components/InteractiveResultsView.tsx"() {
     "use strict";
     import_react30 = __toESM(require_react());
     await init_build2();
-    import_chalk10 = __toESM(require_source());
+    import_chalk9 = __toESM(require_source());
     await init_ScoreHeader();
     init_useExpandAnimation();
     await init_useTerminalSize();
@@ -41427,11 +41476,11 @@ var init_InteractiveResultsView = __esm({
       1: "INFO"
     };
     SEVERITY_COLORS = {
-      5: (s) => import_chalk10.default.red.bold(s),
-      4: (s) => import_chalk10.default.redBright(s),
-      3: (s) => import_chalk10.default.yellow(s),
-      2: (s) => import_chalk10.default.cyan(s),
-      1: (s) => import_chalk10.default.gray(s)
+      5: (s) => import_chalk9.default.red.bold(s),
+      4: (s) => import_chalk9.default.redBright(s),
+      3: (s) => import_chalk9.default.yellow(s),
+      2: (s) => import_chalk9.default.cyan(s),
+      1: (s) => import_chalk9.default.gray(s)
     };
     EVIDENCE_LIMIT2 = 2;
     FIXED_CHROME = 16;
@@ -41440,7 +41489,8 @@ var init_InteractiveResultsView = __esm({
       config,
       durationMs,
       onExit,
-      onBack
+      onBack,
+      discoveredTotal
     }) => {
       const flagged = (0, import_react30.useMemo)(
         () => result.packages.filter((p) => p.score > 0),
@@ -41595,7 +41645,7 @@ var init_InteractiveResultsView = __esm({
                 ] })
               ] }),
               aboveCount > 0 && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
-                import_chalk10.default.cyan(" \u2191"),
+                import_chalk9.default.cyan(" \u2191"),
                 " ",
                 aboveCount,
                 " more above"
@@ -41610,8 +41660,8 @@ var init_InteractiveResultsView = __esm({
                 const chevron = level !== null ? "\u25BE" : "\u25B8";
                 const rowContent = ` ${chevron} ` + pad3(label, 7) + pad3(truncate3(names, nameCol - 2), nameCol) + `score ${rep.score}`;
                 return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Box_default, { flexDirection: "column", children: [
-                  isCursor ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { children: import_chalk10.default.bgGray.white.bold(rowContent) }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
-                    import_chalk10.default.dim(` ${chevron} `),
+                  isCursor ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { children: import_chalk9.default.bgGray.white.bold(rowContent) }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
+                    import_chalk9.default.dim(` ${chevron} `),
                     color(pad3(label, 7)),
                     pad3(truncate3(names, nameCol - 2), nameCol),
                     color(`score ${rep.score}`)
@@ -41636,7 +41686,7 @@ var init_InteractiveResultsView = __esm({
                 ] }, group.key);
               }),
               belowCount > 0 && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
-                import_chalk10.default.cyan(" \u2193"),
+                import_chalk9.default.cyan(" \u2193"),
                 " ",
                 belowCount,
                 " more below"
@@ -41655,17 +41705,32 @@ var init_InteractiveResultsView = __esm({
             width: "100%",
             children: [
               clean.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
-                import_chalk10.default.green("\u2713"),
+                import_chalk9.default.green("\u2713"),
                 " ",
                 clean.length,
                 " package",
                 clean.length !== 1 ? "s" : "",
                 " passed with score 0"
               ] }),
+              discoveredTotal !== void 0 && discoveredTotal > total && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
+                "Scanned ",
+                total,
+                " of ",
+                discoveredTotal,
+                " packages ",
+                import_chalk9.default.dim("\u2014 dg login for full scans")
+              ] }),
               /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
                 "Completed in ",
                 (durationMs / 1e3).toFixed(1),
-                "s"
+                "s",
+                result.trialScansRemaining !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
+                  import_chalk9.default.dim(" \u2502 "),
+                  result.trialScansRemaining,
+                  " free scan",
+                  result.trialScansRemaining !== 1 ? "s" : "",
+                  " remaining"
+                ] })
               ] })
             ]
           }
@@ -41673,36 +41738,36 @@ var init_InteractiveResultsView = __esm({
         /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
           " ",
           groups.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
-            import_chalk10.default.cyan("\u2191\u2193"),
+            import_chalk9.default.cyan("\u2191\u2193"),
             " navigate",
             "  ",
-            import_chalk10.default.cyan("\u23CE"),
+            import_chalk9.default.cyan("\u23CE"),
             " toggle",
             "  ",
-            import_chalk10.default.cyan("e"),
+            import_chalk9.default.cyan("e"),
             " expand/collapse",
             "  ",
             onBack && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
-              import_chalk10.default.cyan("b"),
+              import_chalk9.default.cyan("b"),
               " back",
               "  "
             ] }),
-            import_chalk10.default.cyan("q"),
+            import_chalk9.default.cyan("q"),
             " quit"
           ] }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
             "Press ",
-            import_chalk10.default.cyan("q"),
+            import_chalk9.default.cyan("q"),
             " or ",
-            import_chalk10.default.cyan("Enter"),
+            import_chalk9.default.cyan("Enter"),
             " to exit"
           ] })
         ] })
       ] });
     };
     T = {
-      branch: import_chalk10.default.dim("\u251C\u2500\u2500"),
-      last: import_chalk10.default.dim("\u2514\u2500\u2500"),
-      pipe: import_chalk10.default.dim("\u2502"),
+      branch: import_chalk9.default.dim("\u251C\u2500\u2500"),
+      last: import_chalk9.default.dim("\u2514\u2500\u2500"),
+      pipe: import_chalk9.default.dim("\u2502"),
       blank: " "
     };
     FindingsSummary = ({ group, maxWidth, maxLines }) => {
@@ -41710,6 +41775,27 @@ var init_InteractiveResultsView = __esm({
       const visibleFindings = rep.findings.filter((f) => f.severity > 1 || f.critical).sort((a, b) => b.severity - a.severity);
       const hasAffects = group.packages.length > 3;
       const allLines = [];
+      if (visibleFindings.length === 0 && rep.score > 0) {
+        const reasons = rep.reasons ?? [];
+        for (let i = 0; i < reasons.length; i++) {
+          allLines.push(
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
+              i < reasons.length - 1 || hasAffects ? T.branch : T.branch,
+              " ",
+              truncate3(reasons[i], maxWidth - 8)
+            ] }, `reason-${i}`)
+          );
+        }
+        allLines.push(
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
+            hasAffects ? T.branch : T.last,
+            " ",
+            import_chalk9.default.yellow("Upgrade to Pro"),
+            " to see finding details ",
+            import_chalk9.default.dim("\u2014 dg login")
+          ] }, "upgrade")
+        );
+      }
       for (let idx = 0; idx < visibleFindings.length; idx++) {
         const f = visibleFindings[idx];
         const isLast = !hasAffects && idx === visibleFindings.length - 1;
@@ -41722,8 +41808,8 @@ var init_InteractiveResultsView = __esm({
             " ",
             sevColor(pad3(sevLabel, 4)),
             " ",
-            import_chalk10.default.dim(f.id)
-          ] }, `${f.id}-${idx}`)
+            import_chalk9.default.dim(f.id ?? f.category ?? "")
+          ] }, `${f.id ?? f.category}-${idx}`)
         );
       }
       if (hasAffects) {
@@ -41746,40 +41832,65 @@ var init_InteractiveResultsView = __esm({
       const trailingItems = (hasAffects ? 1 : 0) + (hasSafe ? 1 : 0);
       const evidenceWidth = Math.max(30, maxWidth - 12);
       const allLines = [];
+      const hasRecommendation = !!rep.recommendation;
+      if (visibleFindings.length === 0 && rep.score > 0) {
+        const reasons = rep.reasons ?? [];
+        for (let i = 0; i < reasons.length; i++) {
+          allLines.push(
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
+              T.branch,
+              " ",
+              truncate3(reasons[i], maxWidth - 8)
+            ] }, `reason-${i}`)
+          );
+        }
+        allLines.push(
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
+            hasSafe || hasAffects || hasRecommendation ? T.branch : T.last,
+            " ",
+            import_chalk9.default.yellow("Upgrade to Pro"),
+            " to see finding details ",
+            import_chalk9.default.dim("\u2014 dg login")
+          ] }, "upgrade")
+        );
+      }
+      const hasEvidence = visibleFindings.some((f) => f.evidence && f.evidence.length > 0);
       for (let idx = 0; idx < visibleFindings.length; idx++) {
         const finding = visibleFindings[idx];
         const isLastFinding = idx === visibleFindings.length - 1 && trailingItems === 0;
-        const connector = isLastFinding ? T.last : T.branch;
-        const continuation = isLastFinding ? `${T.blank}  ` : `${T.pipe}  `;
+        const connector = isLastFinding && !(!hasEvidence && visibleFindings.length > 0) ? T.last : T.branch;
+        const continuation = isLastFinding && !(!hasEvidence && visibleFindings.length > 0) ? `${T.blank}  ` : `${T.pipe}  `;
         const sevLabel = SEVERITY_LABELS3[finding.severity] ?? "INFO";
         const sevColor = SEVERITY_COLORS[finding.severity] ?? SEVERITY_COLORS[1];
-        const evidenceSlice = finding.evidence.slice(0, EVIDENCE_LIMIT2);
-        const overflow = finding.evidence.length - EVIDENCE_LIMIT2;
+        const evidence = finding.evidence ?? [];
+        const evidenceSlice = evidence.slice(0, EVIDENCE_LIMIT2);
+        const overflow = evidence.length - EVIDENCE_LIMIT2;
+        const findingId = finding.id ?? finding.category ?? "";
         allLines.push(
           /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
             connector,
             " ",
             sevColor(pad3(sevLabel, 4)),
             " ",
-            import_chalk10.default.bold(finding.id)
-          ] }, `${finding.id}-${idx}-badge`)
+            import_chalk9.default.bold(findingId)
+          ] }, `${findingId}-${idx}-badge`)
         );
         allLines.push(
           /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
             continuation,
             " ",
             finding.title
-          ] }, `${finding.id}-${idx}-title`)
+          ] }, `${findingId}-${idx}-title`)
         );
         for (let i = 0; i < evidenceSlice.length; i++) {
           allLines.push(
             /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
               continuation,
               " ",
-              import_chalk10.default.dim("\u203A"),
+              import_chalk9.default.dim("\u203A"),
               " ",
               truncate3(evidenceSlice[i], evidenceWidth)
-            ] }, `${finding.id}-${idx}-ev-${i}`)
+            ] }, `${findingId}-${idx}-ev-${i}`)
           );
         }
         if (overflow > 0) {
@@ -41787,26 +41898,45 @@ var init_InteractiveResultsView = __esm({
             /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
               continuation,
               " ",
-              import_chalk10.default.dim(`+${overflow} more`)
-            ] }, `${finding.id}-${idx}-overflow`)
+              import_chalk9.default.dim(`+${overflow} more`)
+            ] }, `${findingId}-${idx}-overflow`)
           );
         }
       }
+      if (visibleFindings.length > 0 && !hasEvidence) {
+        allLines.push(
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
+            hasSafe || hasAffects ? T.branch : T.last,
+            " ",
+            import_chalk9.default.yellow("Upgrade to Team"),
+            " to see evidence and file locations"
+          ] }, "upgrade-evidence")
+        );
+      }
       if (hasAffects) {
         allLines.push(
           /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
-            hasSafe ? T.branch : T.last,
+            hasSafe || hasRecommendation ? T.branch : T.last,
             " ",
             truncate3(affectsLine(group), maxWidth - 8)
           ] }, "affects")
         );
       }
+      if (hasRecommendation) {
+        allLines.push(
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
+            hasSafe ? T.branch : T.last,
+            " ",
+            import_chalk9.default.cyan(truncate3(rep.recommendation, maxWidth - 8))
+          ] }, "recommendation")
+        );
+      }
       if (hasSafe) {
         allLines.push(
           /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
             T.last,
             " ",
-            import_chalk10.default.green(`Safe: ${rep.name}@${safeVersion}`)
+            import_chalk9.default.green(`Safe: ${rep.name}@${safeVersion}`)
           ] }, "safe")
         );
       }
@@ -41899,12 +42029,17 @@ var init_App2 = __esm({
       const { exit } = use_app_default();
       const { rows: termRows } = useTerminalSize();
       const prevPhaseRef = (0, import_react32.useRef)(state.phase);
+      const altScreenActiveRef = (0, import_react32.useRef)(false);
       (0, import_react32.useEffect)(() => {
         if (!process.stdout.isTTY) return;
         process.stdout.write("\x1B[?1049h");
         process.stdout.write("\x1B[2J\x1B[H");
+        altScreenActiveRef.current = true;
         return () => {
-          process.stdout.write("\x1B[?1049l");
+          if (altScreenActiveRef.current) {
+            process.stdout.write("\x1B[?1049l");
+            altScreenActiveRef.current = false;
+          }
           process.stdout.write("\x1B[?25h");
         };
       }, []);
@@ -41927,23 +42062,35 @@ var init_App2 = __esm({
         }
         exit();
       }, [state, config, exit]);
+      const exitWithMessage = (0, import_react32.useCallback)((message, exitCode) => {
+        process.exitCode = exitCode;
+        if (altScreenActiveRef.current && process.stdout.isTTY) {
+          process.stdout.write("\x1B[?1049l");
+          altScreenActiveRef.current = false;
+        }
+        process.stdout.write("\x1B[?25h");
+        process.stderr.write(message);
+        return setTimeout(() => exit(), 0);
+      }, [exit]);
       (0, import_react32.useEffect)(() => {
         if (state.phase === "empty") {
-          process.exitCode = 0;
-          const timer = setTimeout(() => exit(), 0);
+          const timer = exitWithMessage(`${state.message}
+`, 0);
           return () => clearTimeout(timer);
         }
         if (state.phase === "error") {
-          process.exitCode = 3;
-          const timer = setTimeout(() => exit(), 0);
+          const timer = exitWithMessage(`Error: ${state.error.message}
+`, 3);
           return () => clearTimeout(timer);
         }
         if (state.phase === "trial_exhausted") {
-          process.exitCode = 1;
-          const timer = setTimeout(() => exit(), 0);
+          const timer = exitWithMessage(
+            "Free trial scans used up. Run `dg login` to create a free account and continue scanning.\n",
+            1
+          );
           return () => clearTimeout(timer);
         }
-      }, [state, config, exit]);
+      }, [state, exitWithMessage]);
       const content = (() => {
         switch (state.phase) {
           case "discovering":
@@ -41961,23 +42108,14 @@ var init_App2 = __esm({
               }
             );
           case "scanning":
-            return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Box_default, { flexDirection: "column", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-                ProgressBar,
-                {
-                  value: state.done,
-                  total: state.total,
-                  label: state.currentBatch.length > 0 ? state.currentBatch[state.currentBatch.length - 1] : void 0
-                }
-              ),
-              /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Text, { dimColor: true, children: [
-                "Scanning ",
-                state.done,
-                "/",
-                state.total,
-                " packages..."
-              ] })
-            ] });
+            return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+              ProgressBar,
+              {
+                value: state.done,
+                total: state.total,
+                label: state.currentBatch.length > 0 ? state.currentBatch[state.currentBatch.length - 1] : void 0
+              }
+            );
           case "results":
             return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
               InteractiveResultsView,
@@ -41986,7 +42124,8 @@ var init_App2 = __esm({
                 config,
                 durationMs: state.durationMs,
                 onExit: handleResultsExit,
-                onBack: restartSelection ?? void 0
+                onBack: restartSelection ?? void 0,
+                discoveredTotal: state.discoveredTotal
               }
             );
           case "empty":
@@ -42099,33 +42238,33 @@ async function checkForUpdate(currentVersion) {
   return null;
 }
 async function runUpdate(currentVersion) {
-  const chalk9 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
-  process.stderr.write(chalk9.dim("  Checking for updates...\n"));
+  const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+  process.stderr.write(chalk8.dim("  Checking for updates...\n"));
   const latest = await fetchLatestVersion();
   if (!latest) {
-    process.stderr.write(chalk9.red("  Could not reach npm registry.\n"));
+    process.stderr.write(chalk8.red("  Could not reach npm registry.\n"));
     process.exit(1);
   }
   if (!isNewer(latest, currentVersion)) {
     process.stderr.write(
-      chalk9.green(`  Already on latest version (${currentVersion}).
+      chalk8.green(`  Already on latest version (${currentVersion}).
 `)
     );
     return;
   }
-  process.stderr.write(chalk9.dim(`  Installing ${PKG_NAME}@${latest}...
+  process.stderr.write(chalk8.dim(`  Installing ${PKG_NAME}@${latest}...
 `));
   try {
     execSync(`npm install -g ${PKG_NAME}@${latest}`, { stdio: "inherit" });
     writeCache({ latest, checkedAt: Date.now() });
     process.stderr.write(
-      chalk9.green(`
+      chalk8.green(`
   Updated ${currentVersion} \u2192 ${latest}
 `)
     );
   } catch {
     process.stderr.write(
-      chalk9.red(`
+      chalk8.red(`
   Update failed. Try manually: npm i -g ${PKG_NAME}@${latest}
 `)
     );
@@ -42177,8 +42316,8 @@ async function main() {
   if (rawCommand === "logout") {
     const { clearCredentials: clearCredentials2 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
     clearCredentials2();
-    const chalk9 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
-    process.stderr.write(chalk9.green("  Logged out.\n"));
+    const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+    process.stderr.write(chalk8.green("  Logged out.\n"));
     return;
   }
   const config = parseConfig(process.argv);
@@ -42193,8 +42332,8 @@ async function main() {
     }
     const updateMsg2 = await updatePromise;
     if (updateMsg2) {
-      const chalk9 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
-      process.stderr.write(chalk9.dim(updateMsg2));
+      const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+      process.stderr.write(chalk8.dim(updateMsg2));
     }
     return;
   }
@@ -42208,8 +42347,8 @@ async function main() {
     await waitUntilExit();
   } else {
     if (config.mode === "off") {
-      const chalk9 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
-      process.stderr.write(chalk9.dim("  Dependency Guardian: mode is off \u2014 skipping.\n"));
+      const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+      process.stderr.write(chalk8.dim("  Dependency Guardian: mode is off \u2014 skipping.\n"));
       process.exit(0);
     }
     const { App: App3 } = await init_App2().then(() => App_exports);
@@ -42220,15 +42359,15 @@ async function main() {
   }
   const updateMsg = await updatePromise;
   if (updateMsg) {
-    const chalk9 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
-    process.stderr.write(chalk9.dim(updateMsg));
+    const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+    process.stderr.write(chalk8.dim(updateMsg));
   }
 }
 main().catch((err) => {
   try {
-    const chalk9 = require_source();
+    const chalk8 = require_source();
     process.stderr.write(`
-  ${chalk9.bold.red("Error:")} ${err.message}
+  ${chalk8.bold.red("Error:")} ${err.message}
 
 `);
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@westbayberry/dg",
-  "version": "1.0.20",
+  "version": "1.0.23",
   "description": "Supply chain security scanner for npm and Python dependencies — detects malicious packages, typosquatting, dependency confusion, and 26+ attack patterns",
   "bin": {
     "dependency-guardian": "dist/index.mjs",