@westbayberry/dg 2.1.0 → 2.2.0

package/dist/agents/registry.js

@@ -0,0 +1,127 @@
+import { realpathSync } from "node:fs";
+import { homedir } from "node:os";
+import { resolveDgPaths } from "../state/index.js";
+import { claudeCodeIntegration } from "./claude-code.js";
+import { codexIntegration } from "./codex.js";
+import { copilotCliIntegration } from "./copilot-cli.js";
+import { cursorIntegration } from "./cursor.js";
+import { geminiIntegration } from "./gemini.js";
+import { LEGACY_AGENT_HOOK_SENTINEL } from "./persistence.js";
+import { windsurfIntegration } from "./windsurf.js";
+export const AGENTS = {
+    "claude-code": claudeCodeIntegration,
+    codex: codexIntegration,
+    cursor: cursorIntegration,
+    "copilot-cli": copilotCliIntegration,
+    gemini: geminiIntegration,
+    windsurf: windsurfIntegration,
+};
+export const AGENT_IDS = Object.keys(AGENTS);
+export function isAgentId(value) {
+    return value in AGENTS;
+}
+export function getAgent(id) {
+    return AGENTS[id];
+}
+export function agentLabel(id) {
+    return isAgentId(id) ? AGENTS[id].label : id;
+}
+export function agentHookSignature(agent) {
+    return `hook-exec ${agent}`;
+}
+export function defaultDgCommand(agent) {
+    let bin = process.argv[1] ?? "dg";
+    try {
+        bin = realpathSync(bin);
+    }
+    catch {
+        // keep argv[1]; the hook still resolves via PATH as a fallback
+    }
+    // Absolute node + script path so the agent's non-interactive subprocess
+    // can't lose it to a PATH change (the whole point of the hook).
+    return `${process.execPath} ${bin} ${agentHookSignature(agent)}`;
+}
+export function resolveAgentHookContext(agent, options = {}) {
+    const env = options.env ?? process.env;
+    const home = options.home ?? env.HOME ?? homedir();
+    return {
+        agent,
+        settingsPath: AGENTS[agent].configPath(home),
+        dgCommand: options.dgCommand ?? defaultDgCommand(agent),
+        paths: resolveDgPaths(env),
+    };
+}
+export function applyAgentHook(ctx) {
+    return AGENTS[ctx.agent].apply(ctx);
+}
+export function removeAgentHookForAgent(ctx) {
+    return AGENTS[ctx.agent].remove(ctx);
+}
+export function verifyAgentHook(ctx) {
+    return AGENTS[ctx.agent].verify(ctx);
+}
+function agentFromSentinel(sentinel) {
+    if (!sentinel || sentinel === LEGACY_AGENT_HOOK_SENTINEL) {
+        return "claude-code";
+    }
+    if (!sentinel.startsWith(`${LEGACY_AGENT_HOOK_SENTINEL}:`)) {
+        return null;
+    }
+    const id = sentinel.slice(LEGACY_AGENT_HOOK_SENTINEL.length + 1);
+    return isAgentId(id) ? id : null;
+}
+export function reverseAgentHookEntry(entry, removed, missing, warnings) {
+    const agent = agentFromSentinel(entry.sentinel);
+    if (!agent) {
+        warnings.push(`${entry.path}: unrecognized agent hook entry (${entry.sentinel ?? "no sentinel"}); left untouched`);
+        return;
+    }
+    AGENTS[agent].reverseEntry(entry, removed, missing, warnings);
+}
+export function collectAgentSkips(options) {
+    const skips = [];
+    const env = options?.env ?? process.env;
+    const home = options?.home ?? env.HOME ?? homedir();
+    for (const agent of AGENT_IDS) {
+        try {
+            const integration = AGENTS[agent];
+            if (!integration.detect(home)) {
+                continue;
+            }
+            const probe = integration.probeHookSupport(home);
+            if (!probe.supported) {
+                skips.push({ agent, label: integration.label, detail: probe.detail });
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    return skips;
+}
+export function collectAgentOffers(options) {
+    const offers = [];
+    const env = options?.env ?? process.env;
+    const home = options?.home ?? env.HOME ?? homedir();
+    for (const agent of AGENT_IDS) {
+        try {
+            const integration = AGENTS[agent];
+            if (!integration.detect(home)) {
+                continue;
+            }
+            const probe = integration.probeHookSupport(home);
+            if (!probe.supported) {
+                continue;
+            }
+            const ctx = resolveAgentHookContext(agent, options ?? {});
+            const hooked = integration.verify(ctx).find((check) => check.name === integration.isInstalledCheckName)?.ok ?? false;
+            if (!hooked) {
+                offers.push({ agent, label: integration.label, ctx, probe });
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    return offers;
+}

package/dist/agents/types.js

@@ -0,0 +1 @@
+export {};

package/dist/agents/windsurf.js

@@ -0,0 +1,93 @@
+import { join } from "node:path";
+import { dirExists, mergedJsonHook } from "./persistence.js";
+const SIGNATURE = "hook-exec windsurf";
+function configPath(home) {
+    return join(home, ".codeium", "windsurf", "hooks.json");
+}
+function isDgEntry(entry) {
+    return (typeof entry === "object" &&
+        entry !== null &&
+        typeof entry.command === "string" &&
+        entry.command.includes(SIGNATURE));
+}
+function insertHook(settings, dgCommand) {
+    const next = { ...settings };
+    const hooks = typeof next.hooks === "object" && next.hooks !== null ? { ...next.hooks } : {};
+    const list = Array.isArray(hooks.pre_run_command) ? hooks.pre_run_command : [];
+    hooks.pre_run_command = [...list.filter((entry) => !isDgEntry(entry)), { command: dgCommand }];
+    next.hooks = hooks;
+    return next;
+}
+function removeHook(settings) {
+    const next = { ...settings };
+    if (typeof next.hooks !== "object" || next.hooks === null) {
+        return { settings: next, changed: false, empty: Object.keys(next).length === 0 };
+    }
+    const hooks = { ...next.hooks };
+    const list = Array.isArray(hooks.pre_run_command) ? hooks.pre_run_command : [];
+    const withoutDg = list.filter((entry) => !isDgEntry(entry));
+    const changed = withoutDg.length !== list.length;
+    if (withoutDg.length > 0) {
+        hooks.pre_run_command = withoutDg;
+    }
+    else {
+        delete hooks.pre_run_command;
+    }
+    if (Object.keys(hooks).length > 0) {
+        next.hooks = hooks;
+    }
+    else {
+        delete next.hooks;
+    }
+    return { settings: next, changed, empty: Object.keys(next).length === 0 };
+}
+function hasDgHook(settings) {
+    const hooks = settings.hooks?.pre_run_command;
+    return Array.isArray(hooks) && hooks.some((entry) => isDgEntry(entry));
+}
+function parseInput(stdin) {
+    try {
+        const obj = JSON.parse(stdin);
+        const command = obj.tool_info?.command_line;
+        if (typeof command !== "string") {
+            return null;
+        }
+        const cwd = obj.tool_info?.cwd;
+        return typeof cwd === "string" ? { command, cwd } : { command };
+    }
+    catch {
+        return null;
+    }
+}
+function emitDecision(verdict) {
+    if (verdict.decision === "allow") {
+        return { stdout: "", exitCode: 0 };
+    }
+    const reason = verdict.reason ?? "Dependency Guardian firewall";
+    const suffix = verdict.decision === "ask" ? " (flagged for review — run the install in a terminal to decide)" : "";
+    return { stdout: `${reason}${suffix}\n`, exitCode: 2 };
+}
+function probeHookSupport(home) {
+    if (!dirExists(join(home, ".codeium", "windsurf"))) {
+        return { supported: false, detail: "~/.codeium/windsurf not found (is Windsurf installed?)" };
+    }
+    return { supported: true, detail: "Windsurf config directory found; dg cannot read the app version from disk" };
+}
+export const windsurfIntegration = {
+    id: "windsurf",
+    label: "Windsurf",
+    kind: "merged-json",
+    maturity: "unverified",
+    minVersion: null,
+    configPath,
+    detect: (home) => dirExists(join(home, ".codeium", "windsurf")),
+    probeHookSupport,
+    parseInput,
+    emitDecision,
+    ...mergedJsonHook({
+        checkName: "dg pre_run_command hook",
+        insert: insertHook,
+        remove: removeHook,
+        isInstalled: hasDgHook,
+    }),
+};

package/dist/api/analyze.js

@@ -328,7 +328,7 @@ function normalizeAction(action) {
     if (action === "block" || action === "warn" || action === "analysis_incomplete" || action === "pass") {
         return action;
     }
-    return "pass";
+    return "analysis_incomplete";
 }
 export function mergeAnalyzeResponses(responses) {
     const first = responses[0];

package/dist/audit/detectors.js

@@ -133,17 +133,6 @@ function contentChecks(file, push) {
 }
 function structuralProjectChecks(context, push) {
     if (context.ecosystem === "npm" && context.packageJson) {
-        if (context.packageJson.private === true) {
-            push({
-                id: "publishing-private",
-                category: "structural",
-                severity: 4,
-                title: "Package is marked private but is being audited for publish",
-                recommendation: "A private package being published is almost always a mistake — remove \"private\" or do not publish.",
-                location: "package.json",
-                evidence: "\"private\": true"
-            });
-        }
         if (!context.hasFilesAllowlist) {
             push({
                 id: "no-files-allowlist",

package/dist/audit/events.js

@@ -1,33 +1,17 @@
 import { appendFileSync, mkdirSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { authStatus } from "../auth/store.js";
-import { loadUserConfig } from "../config/settings.js";
 import { resolveDgPaths } from "../state/index.js";
 export function auditLogPath(paths) {
     return join(paths.stateDir, "audit.jsonl");
 }
-export function webhookOutboxPath(paths) {
-    return join(paths.stateDir, "webhooks.jsonl");
-}
 export function recordAuditEvent(event, env = process.env) {
-    const paths = resolveDgPaths(env);
-    appendJsonLine(auditLogPath(paths), event);
-}
-export function emitWebhookEvent(event, env = process.env) {
-    const config = loadUserConfig(env);
-    const status = authStatus(env);
-    if (!config.webhooks.enabled || !status.authenticated) {
+    try {
+        appendJsonLine(auditLogPath(resolveDgPaths(env)), event);
+        return true;
+    }
+    catch {
         return false;
     }
-    const paths = resolveDgPaths(env);
-    appendJsonLine(webhookOutboxPath(paths), {
-        ...event,
-        auth: {
-            source: status.source,
-            token: status.tokenPreview
-        }
-    });
-    return true;
 }
 function appendJsonLine(path, value) {
     mkdirSync(dirname(path), {

package/dist/audit-ui/AuditApp.js

@@ -3,8 +3,10 @@ import { useCallback, useEffect, useState } from "react";
 import { Box, useApp } from "ink";
 import { combineAction, auditExitCode, displayTarget } from "../commands/audit.js";
 import { AuditResultsView } from "./components/AuditResultsView.js";
+import { useResizeRepaint } from "../scan-ui/hooks/useResizeRepaint.js";
 export const AuditApp = ({ gathered, initialDeep, deepPromise, onExitCode }) => {
     const { exit } = useApp();
+    useResizeRepaint();
     const [deep, setDeep] = useState(initialDeep);
     useEffect(() => {
         if (!deepPromise)

package/dist/audit-ui/components/AuditResultsView.js

@@ -1,9 +1,7 @@
-import { jsxs as _jsxs, jsx as _jsx, Fragment as _Fragment } from "react/jsx-runtime";
-import { useMemo, useRef, useState } from "react";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useEffect, useMemo, useRef, useState } from "react";
 import { Box, Text, useInput } from "ink";
 import chalk from "chalk";
-import { writeFileSync } from "node:fs";
-import { resolve as resolvePath } from "node:path";
 import { findingLocation } from "../../audit/detectors.js";
 import { isLoggedIn } from "../../scan-ui/shims.js";
 import { clearScreen } from "../../scan-ui/alt-screen.js";
@@ -12,7 +10,10 @@ import { pad, truncate } from "../../scan-ui/format-helpers.js";
 import { AuditHeader } from "./AuditHeader.js";
 import { DeepStatusRow } from "./DeepStatusRow.js";
 import { countSummary, severityGlyph, severityRole } from "../format.js";
-import { buildExport, exportFilename } from "../export.js";
+import { buildExport } from "../export.js";
+import { ExportDialog, loginRequiredToast } from "../../export-ui/ExportDialog.js";
+import { resolvePresentation } from "../../presentation/mode.js";
+import { createTheme } from "../../presentation/theme.js";
 const ROLE_PAINT = {
     block: chalk.red,
     warn: chalk.yellow,
@@ -23,6 +24,11 @@ function glyphPaint(severity) {
 }
 const FIXED_CHROME = 12;
 const EXPAND_CHROME = 10;
+const EXPORT_FORMATS = [
+    { format: "json", label: "JSON" },
+    { format: "md", label: "Markdown" },
+    { format: "txt", label: "Plain text" }
+];
 export const AuditResultsView = ({ findings, action, artifact, ecosystem, target, fileCount, publishSetSource, deep, onExit }) => {
     const { rows: termRows, cols: termCols } = useTerminalSize();
     const [cursor, setCursor] = useState(0);
@@ -36,17 +42,22 @@ export const AuditResultsView = ({ findings, action, artifact, ecosystem, target
     const [showHelp, setShowHelp] = useState(false);
     const showHelpRef = useRef(showHelp);
     showHelpRef.current = showHelp;
-    const [exportMenu, setExportMenu] = useState(null);
-    const exportMenuRef = useRef(exportMenu);
-    exportMenuRef.current = exportMenu;
+    const [exportDialog, setExportDialog] = useState(null);
+    const exportDialogRef = useRef(exportDialog);
+    exportDialogRef.current = exportDialog;
+    const theme = useMemo(() => createTheme(resolvePresentation().color), []);
     const [exportMsg, setExportMsg] = useState(null);
     const exportTimer = useRef(null);
-    const showExportMsg = (message) => {
-        setExportMsg(message);
+    const showExportMsg = (text, tone = "ok") => {
+        setExportMsg({ text, tone });
         if (exportTimer.current)
             clearTimeout(exportTimer.current);
         exportTimer.current = setTimeout(() => setExportMsg(null), 4000);
     };
+    useEffect(() => () => {
+        if (exportTimer.current)
+            clearTimeout(exportTimer.current);
+    }, []);
     const filtered = useMemo(() => {
         if (!searchQuery)
             return findings;
@@ -88,70 +99,40 @@ export const AuditResultsView = ({ findings, action, artifact, ecosystem, target
             setViewport(clamped - listRows + 1);
         }
     };
-    const runExport = (format) => {
+    const openExport = () => {
         if (!isLoggedIn()) {
-            showExportMsg("Export requires `dg login` (free account)");
+            showExportMsg(loginRequiredToast(), "nudge");
             return;
         }
-        try {
-            const input = {
-                target,
-                artifact,
-                ecosystem,
-                action,
-                fileCount,
-                publishSetSource,
-                findings,
-                deep: deep ?? { ran: false, reason: "deep behavioral scan did not run" }
-            };
-            const { body, ext } = buildExport(input, format);
-            const filename = exportFilename(ext);
-            writeFileSync(resolvePath(process.cwd(), filename), body, "utf-8");
-            showExportMsg(`✓ Exported to ${filename}`);
-        }
-        catch (error) {
-            showExportMsg(`Export failed: ${error.message}`);
-        }
+        const input = {
+            target,
+            artifact,
+            ecosystem,
+            action,
+            fileCount,
+            publishSetSource,
+            findings,
+            deep: deep ?? { ran: false, reason: "deep behavioral scan did not run" }
+        };
+        setExportDialog(EXPORT_FORMATS.map(({ format, label }) => ({
+            label,
+            defaultName: `dg-audit.${format}`,
+            render: () => buildExport(input, format).body
+        })));
+    };
+    const handleExportDone = (result) => {
+        setExportDialog(null);
+        clearScreen();
+        if (result === null)
+            return;
+        if ("path" in result)
+            showExportMsg(`✓ Exported to ${result.path}`);
+        else
+            showExportMsg(`Export failed: ${result.error}`, "error");
     };
     useInput((input, key) => {
-        if (exportMenuRef.current) {
-            const menu = exportMenuRef.current;
-            const FORMATS = ["json", "md", "txt"];
-            const move = (cur, dir) => {
-                const i = FORMATS.indexOf(cur);
-                return FORMATS[Math.max(0, Math.min(FORMATS.length - 1, i + dir))] ?? cur;
-            };
-            if (key.escape) {
-                setExportMenu(null);
-                return;
-            }
-            if (input === "q") {
-                setExportMenu(null);
-                return;
-            }
-            if (key.return) {
-                const format = menu.format;
-                setExportMenu(null);
-                clearScreen();
-                runExport(format);
-                return;
-            }
-            if (key.tab || key.leftArrow || key.rightArrow) {
-                setExportMenu({ ...menu, activeRow: menu.activeRow === "scope" ? "format" : "scope" });
-                return;
-            }
-            if (key.upArrow || input === "k") {
-                if (menu.activeRow === "format")
-                    setExportMenu({ ...menu, format: move(menu.format, -1) });
-                return;
-            }
-            if (key.downArrow || input === "j") {
-                if (menu.activeRow === "format")
-                    setExportMenu({ ...menu, format: move(menu.format, 1) });
-                return;
-            }
+        if (exportDialogRef.current)
             return;
-        }
         if (showHelpRef.current) {
             if (input === "?" || key.escape)
                 setShowHelp(false);
@@ -219,11 +200,7 @@ export const AuditResultsView = ({ findings, action, artifact, ecosystem, target
                 return;
             }
             if (input === "e") {
-                if (!isLoggedIn()) {
-                    showExportMsg("Export requires `dg login` (free account)");
-                    return;
-                }
-                setExportMenu({ format: "json", activeRow: "scope" });
+                openExport();
                 return;
             }
             return;
@@ -233,11 +210,7 @@ export const AuditResultsView = ({ findings, action, artifact, ecosystem, target
             return;
         }
         if (input === "e") {
-            if (!isLoggedIn()) {
-                showExportMsg("Export requires `dg login` (free account)");
-                return;
-            }
-            setExportMenu({ format: "json", activeRow: "scope" });
+            openExport();
             return;
         }
         if (input === "q") {
@@ -269,19 +242,9 @@ export const AuditResultsView = ({ findings, action, artifact, ecosystem, target
         }
         else if (input === "/")
             setSearchMode(true);
-    });
-    if (exportMenu) {
-        const FORMATS_RENDER = [
-            { value: "json", label: "JSON" },
-            { value: "md", label: "Markdown" },
-            { value: "txt", label: "Plain text" }
-        ];
-        const renderColumn = (title, isActive, rows) => (_jsxs(Box, { flexDirection: "column", marginRight: 4, children: [_jsxs(Text, { children: [isActive ? chalk.cyan("▌ ") : "  ", isActive ? chalk.bold(title) : chalk.dim(title)] }), rows] }));
-        return (_jsxs(Box, { flexDirection: "column", children: [_jsx(AuditHeader, { action: action, artifact: artifact, ecosystem: ecosystem, countSummary: countSummary(findings), fileCount: fileCount, fallback: publishSetSource === "fallback" }), _jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: "cyan", paddingLeft: 2, paddingRight: 2, children: [_jsx(Text, { bold: true, children: "Export" }), _jsx(Text, { children: "" }), _jsxs(Box, { flexDirection: "row", children: [renderColumn("What", exportMenu.activeRow === "scope", (_jsxs(Box, { children: [_jsx(Box, { width: 5, flexShrink: 0, children: _jsxs(Text, { children: ["   ", exportMenu.activeRow === "scope" ? chalk.cyan("●") : chalk.green("●")] }) }), _jsx(Text, { children: chalk.bold("Findings") })] }))), renderColumn("Format", exportMenu.activeRow === "format", (_jsx(_Fragment, { children: FORMATS_RENDER.map((r) => {
-                                        const selected = r.value === exportMenu.format;
-                                        const bullet = selected ? (exportMenu.activeRow === "format" ? chalk.cyan("●") : chalk.green("●")) : chalk.dim("○");
-                                        return (_jsxs(Box, { children: [_jsx(Box, { width: 5, flexShrink: 0, children: _jsxs(Text, { children: ["   ", bullet] }) }), _jsx(Text, { children: selected ? chalk.bold(r.label) : r.label })] }, r.value));
-                                    }) })))] })] }), _jsx(Text, { dimColor: true, children: chalk.dim("─".repeat(Math.max(20, termCols - 4))) }), _jsxs(Text, { children: [" ", chalk.bold.cyan("↑↓"), " ", chalk.dim("scroll"), "   ", chalk.bold.cyan("←→/Tab"), " ", chalk.dim("switch row"), "   ", chalk.bold.cyan("⏎"), " ", chalk.dim("export"), "   ", chalk.bold.cyan("Esc"), " ", chalk.dim("cancel")] })] }));
+    }, { isActive: exportDialog === null });
+    if (exportDialog) {
+        return (_jsxs(Box, { flexDirection: "column", children: [_jsx(AuditHeader, { action: action, artifact: artifact, ecosystem: ecosystem, countSummary: countSummary(findings), fileCount: fileCount, fallback: publishSetSource === "fallback" }), _jsx(ExportDialog, { options: exportDialog, theme: theme, cwd: process.cwd(), onDone: handleExportDone })] }));
     }
     if (showHelp) {
         return (_jsxs(Box, { flexDirection: "column", children: [_jsx(AuditHeader, { action: action, artifact: artifact, ecosystem: ecosystem, countSummary: countSummary(findings), fileCount: fileCount, fallback: publishSetSource === "fallback" }), _jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: "cyan", paddingLeft: 2, paddingRight: 2, width: "100%", children: [_jsx(Text, { bold: true, children: "Keyboard Shortcuts" }), _jsx(Text, { children: "" }), _jsx(Text, { bold: true, children: " Navigation" }), _jsxs(Text, { children: ["   ", chalk.cyan("↑ k"), "     ", chalk.dim("Move up")] }), _jsxs(Text, { children: ["   ", chalk.cyan("↓ j"), "     ", chalk.dim("Move down")] }), _jsxs(Text, { children: ["   ", chalk.cyan("g"), "       ", chalk.dim("Jump to top")] }), _jsxs(Text, { children: ["   ", chalk.cyan("G"), "       ", chalk.dim("Jump to bottom")] }), _jsxs(Text, { children: ["   ", chalk.cyan("PgUp"), "    ", chalk.dim("Page up")] }), _jsxs(Text, { children: ["   ", chalk.cyan("PgDn"), "    ", chalk.dim("Page down")] }), _jsx(Text, { children: "" }), _jsx(Text, { bold: true, children: " Actions" }), _jsxs(Text, { children: ["   ", chalk.cyan("⏎"), "       ", chalk.dim("Expand / collapse finding (evidence + recommendation)")] }), _jsxs(Text, { children: ["   ", chalk.cyan("/"), "       ", chalk.dim("Search findings")] }), _jsxs(Text, { children: ["   ", chalk.cyan("e"), "       ", chalk.dim("Export menu — Findings as JSON / Markdown / text")] }), _jsxs(Text, { children: ["   ", chalk.cyan("q"), "       ", chalk.dim("Quit")] }), _jsx(Text, { children: "" }), _jsxs(Text, { dimColor: true, children: [" Press ", chalk.bold.cyan("?"), " or ", chalk.bold.cyan("Esc"), " to close"] })] })] }));
@@ -303,5 +266,5 @@ export const AuditResultsView = ({ findings, action, artifact, ecosystem, target
                             return (_jsxs(Text, { backgroundColor: "#1a1a2e", children: [chalk.cyan("▌"), " ", paint(glyph), " ", chalk.bold(loc), chalk.dim(title)] }, `${finding.id}|${finding.location}`));
                         }
                         return (_jsxs(Text, { children: ["  ", paint(glyph), " ", loc, chalk.dim(title)] }, `${finding.id}|${finding.location}`));
-                    }), belowCount > 0 && _jsxs(Text, { dimColor: true, children: [chalk.cyan(" ↓"), " ", belowCount, " more below"] }), expanded && focused && (_jsxs(Box, { flexDirection: "column", marginTop: 1, marginLeft: 4, children: [_jsxs(Text, { bold: true, children: [findingLocation(focused), chalk.dim(" — "), focused.title] }), expandLines.slice(expandScroll, expandScroll + expandViewportRows).map((line, i) => (_jsx(Text, { children: line }, i))), expandLines.length > expandViewportRows && (_jsx(Text, { dimColor: true, children: `  ${expandScroll + 1}-${Math.min(expandScroll + expandViewportRows, expandLines.length)} / ${expandLines.length}  (Esc collapse)` }))] }))] }), _jsx(Text, { dimColor: true, children: chalk.dim("─".repeat(Math.max(20, termCols - 4))) }), _jsx(DeepStatusRow, { deep: deep }), _jsx(Text, { dimColor: true, children: chalk.dim("─".repeat(Math.max(20, termCols - 4))) }), searchMode ? (_jsxs(Text, { children: [" ", chalk.bold.cyan("/"), " ", searchQuery, chalk.cyan("█"), "   ", chalk.dim("Esc clear · Enter confirm")] })) : (_jsxs(Text, { children: [" ", filtered.length > 0 && (_jsxs(_Fragment, { children: [chalk.bold.cyan("↑↓"), " ", chalk.dim("navigate"), "   ", chalk.bold.cyan("⏎"), " ", chalk.dim(expanded ? "collapse" : "expand"), "   ", chalk.bold.cyan("/"), " ", chalk.dim("search"), "   "] })), chalk.bold.cyan("e"), " ", chalk.dim("export"), "   ", chalk.bold.cyan("?"), " ", chalk.dim("help"), "   ", chalk.bold.cyan("q"), " ", chalk.dim("quit"), exportMsg && _jsxs(_Fragment, { children: ["   ", chalk.green(exportMsg)] })] }))] }));
+                    }), belowCount > 0 && _jsxs(Text, { dimColor: true, children: [chalk.cyan(" ↓"), " ", belowCount, " more below"] }), expanded && focused && (_jsxs(Box, { flexDirection: "column", marginTop: 1, marginLeft: 4, children: [_jsxs(Text, { bold: true, children: [findingLocation(focused), chalk.dim(" — "), focused.title] }), expandLines.slice(expandScroll, expandScroll + expandViewportRows).map((line, i) => (_jsx(Text, { children: line }, i))), expandLines.length > expandViewportRows && (_jsx(Text, { dimColor: true, children: `  ${expandScroll + 1}-${Math.min(expandScroll + expandViewportRows, expandLines.length)} / ${expandLines.length}  (Esc collapse)` }))] }))] }), _jsx(Text, { dimColor: true, children: chalk.dim("─".repeat(Math.max(20, termCols - 4))) }), _jsx(DeepStatusRow, { deep: deep }), _jsx(Text, { dimColor: true, children: chalk.dim("─".repeat(Math.max(20, termCols - 4))) }), searchMode ? (_jsxs(Text, { children: [" ", chalk.bold.cyan("/"), " ", searchQuery, chalk.cyan("█"), "   ", chalk.dim("Esc clear · Enter confirm")] })) : (_jsxs(Text, { children: [" ", filtered.length > 0 && (_jsxs(_Fragment, { children: [chalk.bold.cyan("↑↓"), " ", chalk.dim("navigate"), "   ", chalk.bold.cyan("⏎"), " ", chalk.dim(expanded ? "collapse" : "expand"), "   ", chalk.bold.cyan("/"), " ", chalk.dim("search"), "   "] })), chalk.bold.cyan("e"), " ", chalk.dim("export"), "   ", chalk.bold.cyan("?"), " ", chalk.dim("help"), "   ", chalk.bold.cyan("q"), " ", chalk.dim("quit"), exportMsg && _jsxs(_Fragment, { children: ["   ", exportMsg.tone === "nudge" ? exportMsg.text : (exportMsg.tone === "error" ? chalk.red : chalk.green)(exportMsg.text)] })] }))] }));
 };

package/dist/audit-ui/export.js

@@ -78,7 +78,3 @@ export function buildExport(input, format) {
         return { body: buildMd(input), ext: "md" };
     return { body: buildTxt(input), ext: "txt" };
 }
-export function exportFilename(format, now = new Date()) {
-    const ts = now.toISOString().replace(/[:T]/g, "-").replace(/\..*$/, "");
-    return `dg-audit-${ts}-findings.${format}`;
-}

package/dist/audit-ui/format.js

@@ -17,9 +17,6 @@ export function severityRole(severity) {
 export function verdictGlyph(action) {
     return action === "block" ? "✘" : action === "warn" ? WARN_GLYPH : "✓";
 }
-export function verdictRole(action) {
-    return action;
-}
 export function countSummary(findings) {
     const blocking = findings.filter((finding) => finding.severity >= 4).length;
     const warnings = findings.filter((finding) => finding.severity === 3).length;

package/dist/audit-ui/launch.js

@@ -3,11 +3,18 @@ export function shouldLaunchAuditTui(options) {
     if (options.format !== "text" || options.outputPath) {
         return false;
     }
+    if (process.env.TERM === "dumb") {
+        return false;
+    }
+    if (!process.stdin.isTTY) {
+        return false;
+    }
     return resolvePresentation().mode === "rich";
 }
 export async function launchAuditTui(props) {
     const ci = process.env.CI;
-    if (ci === "" || ci === "0" || ci === "false") {
+    const ciCleared = ci === "" || ci === "0" || ci === "false";
+    if (ciCleared) {
         delete process.env.CI;
     }
     const [{ render }, react, app, altScreen] = await Promise.all([
@@ -28,6 +35,8 @@ export async function launchAuditTui(props) {
         await instance.waitUntilExit();
     }
     finally {
+        if (ciCleared)
+            process.env.CI = ci;
         altScreen.leaveTui();
     }
     return exitCode;

package/dist/auth/device-login.js

@@ -191,6 +191,7 @@ export async function fetchAccountStatus(token, env, fetchImpl, timeoutMs = 5_00
         const body = (await response.json());
         return {
             tier: typeof body.tier === "string" && body.tier.length > 0 ? body.tier.toLowerCase() : null,
+            name: typeof body.name === "string" && body.name.trim().length > 0 ? body.name.trim() : null,
             scansUsed: typeof body.scansUsed === "number" && Number.isFinite(body.scansUsed) ? body.scansUsed : null,
             scansLimit: typeof body.scansLimit === "number" && Number.isFinite(body.scansLimit) ? body.scansLimit : null
         };
@@ -202,9 +203,6 @@ export async function fetchAccountStatus(token, env, fetchImpl, timeoutMs = 5_00
         clearTimeout(timer);
     }
 }
-export async function fetchAccountTier(token, env, fetchImpl) {
-    return (await fetchAccountStatus(token, env, fetchImpl))?.tier ?? null;
-}
 export async function runDeviceLogin(io = {}) {
     const env = io.env ?? process.env;
     const fetchImpl = io.fetchImpl ?? fetch;
@@ -236,8 +234,9 @@ export async function runDeviceLogin(io = {}) {
     for (;;) {
         const result = await pollAuthSession(webBase, session.sessionId, fetchImpl);
         if (result.status === "complete" && result.apiKey) {
-            const tier = await fetchAccountTier(result.apiKey, env, fetchImpl);
-            writeAuthState({ token: result.apiKey, email: result.email, tier: tier ?? undefined });
+            const account = await fetchAccountStatus(result.apiKey, env, fetchImpl);
+            const tier = account?.tier ?? null;
+            writeAuthState({ token: result.apiKey, email: result.email, tier: tier ?? undefined, name: account?.name ?? undefined });
             const who = result.email ? ` as ${result.email}` : "";
             return {
                 exitCode: 0,

package/dist/auth/login-app.js

@@ -3,10 +3,10 @@ import { useEffect, useRef, useState } from "react";
 import { Box, Text, useApp, useInput } from "ink";
 import { Spinner } from "../scan-ui/components/Spinner.js";
 import { displayTier, writeAuthState } from "./store.js";
-import { POLL_INTERVAL_MS, POLL_TIMEOUT_MS, createAuthSession, fetchAccountTier, openBrowser, pollAuthSession, resolveWebBase } from "./device-login.js";
+import { POLL_INTERVAL_MS, POLL_TIMEOUT_MS, createAuthSession, fetchAccountStatus, openBrowser, pollAuthSession, resolveWebBase } from "./device-login.js";
 const SUCCESS_MIN_MS = 600;
 const SUCCESS_MAX_MS = 2500;
-function useLogin(webBase, env) {
+export function useLogin(webBase, env) {
     const [state, setState] = useState({ phase: "creating", verifyUrl: "", email: "", plan: "", message: "" });
     const sessionId = useRef("");
     const started = useRef(false);
@@ -58,12 +58,12 @@ function useLogin(webBase, env) {
                     const email = result.email ?? "";
                     writeAuthState({ token: apiKey, email: result.email });
                     setState((prev) => ({ ...prev, phase: "success", email }));
-                    void fetchAccountTier(apiKey, env, fetch)
-                        .then((tier) => {
-                        if (tier) {
-                            writeAuthState({ token: apiKey, email: result.email, tier });
+                    void fetchAccountStatus(apiKey, env, fetch)
+                        .then((account) => {
+                        if (account?.tier) {
+                            writeAuthState({ token: apiKey, email: result.email, tier: account.tier, name: account.name ?? undefined });
                             if (!cancelled.current) {
-                                setState((prev) => ({ ...prev, plan: tier }));
+                                setState((prev) => ({ ...prev, plan: account.tier ?? "" }));
                             }
                         }
                     })