@xrift/cli 0.11.1 → 0.12.0

package/dist/commands/check.d.ts

@@ -0,0 +1,4 @@
+import { Command } from 'commander';
+export declare const checkCommand: Command;
+export default checkCommand;
+//# sourceMappingURL=check.d.ts.map

package/dist/commands/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,eAAO,MAAM,YAAY,SACM,CAAC;AAiBhC,eAAe,YAAY,CAAC"}

package/dist/commands/check.js

@@ -0,0 +1,20 @@
+import { Command } from 'commander';
+import { checkWorld } from '../lib/check.js';
+export const checkCommand = new Command('check')
+    .description('セキュリティチェックを実行');
+checkCommand
+    .command('world')
+    .description('ワールドのビルド成果物をセキュリティチェック')
+    .option('--build', 'チェック前にビルドコマンドを実行')
+    .option('--ignore-warnings', '警告を無視しREJECTのみで失敗')
+    .option('--json', '結果をJSON形式で出力')
+    .action(async (options) => {
+    const exitCode = await checkWorld({
+        build: options.build,
+        ignoreWarnings: options.ignoreWarnings,
+        json: options.json,
+    });
+    process.exit(exitCode);
+});
+export default checkCommand;
+//# sourceMappingURL=check.js.map

package/dist/commands/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,eAAe,CAAC,CAAC;AAEhC,YAAY;KACT,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wBAAwB,CAAC;KACrC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC;KACrC,MAAM,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;KAChD,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC;KAChC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,eAAe,YAAY,CAAC"}

package/dist/index.js

@@ -8,6 +8,7 @@ import { loginCommand } from './commands/login.js';
 import { logoutCommand } from './commands/logout.js';
 import { whoamiCommand } from './commands/whoami.js';
 import { uploadCommand } from './commands/upload.js';
+import { checkCommand } from './commands/check.js';
 import { checkForUpdates } from './lib/version-check.js';
 import { setVerbose } from './lib/logger.js';
 // package.json からバージョンを読み込む
@@ -31,6 +32,7 @@ program.addCommand(loginCommand);
 program.addCommand(logoutCommand);
 program.addCommand(whoamiCommand);
 program.addCommand(uploadCommand);
+program.addCommand(checkCommand);
 // バージョンチェックを実行（非同期、エラーは無視）
 // キャッシュがある場合は即座に通知、ない場合はバックグラウンドで取得
 checkForUpdates(packageJson.version).catch(() => {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,4BAA4B;AAC5B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAC5B,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC,CAC1D,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,gDAAgD,CAAC;KAC7D,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC;KACzD,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC;KAClC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AAElC,qBAAqB;AACrB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IACvC,UAAU,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,oBAAoB;AACpB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAElC,2BAA2B;AAC3B,oCAAoC;AACpC,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;IAC9C,SAAS;AACX,CAAC,CAAC,CAAC;AAEH,gBAAgB;AAChB,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,4BAA4B;AAC5B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAC5B,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC,CAC1D,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,gDAAgD,CAAC;KAC7D,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC;KACzD,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC;KAClC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AAElC,qBAAqB;AACrB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IACvC,UAAU,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,oBAAoB;AACpB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAEjC,2BAA2B;AAC3B,oCAAoC;AACpC,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;IAC9C,SAAS;AACX,CAAC,CAAC,CAAC;AAEH,gBAAgB;AAChB,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/lib/__tests__/check.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=check.test.d.ts.map

package/dist/lib/__tests__/check.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.test.d.ts","sourceRoot":"","sources":["../../../src/lib/__tests__/check.test.ts"],"names":[],"mappings":""}

package/dist/lib/__tests__/check.test.js

@@ -0,0 +1,131 @@
+import { describe, it, expect, beforeEach, afterEach } from '@jest/globals';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import os from 'node:os';
+// chalk / ora は ESM 専用モジュールのため、check.ts を直接 import すると
+// Jest のトランスフォームで問題が起きる。runSecurityCheck のみを個別テストする。
+// check.ts 全体の mock ではなく、依存関係を直接使ってテストする。
+import { CodeSecurityService, determineFileContext, getSecurityVerdict, } from '@xrift/code-security';
+describe('check - セキュリティチェックのコアロジック', () => {
+    let testDir;
+    let distDir;
+    beforeEach(async () => {
+        testDir = path.join(os.tmpdir(), `xrift-check-test-${Date.now()}`);
+        distDir = path.join(testDir, 'dist');
+        await fs.mkdir(distDir, { recursive: true });
+    });
+    afterEach(async () => {
+        try {
+            await fs.rm(testDir, { recursive: true, force: true });
+        }
+        catch {
+            // 削除失敗は無視
+        }
+    });
+    describe('CodeSecurityService.validate', () => {
+        it('安全なコードは低スコアを返す', () => {
+            const service = new CodeSecurityService();
+            const result = service.validate({
+                code: 'const x = 1 + 2;\nconsole.log(x);',
+                packageJson: { dependencies: {} },
+            });
+            expect(result.securityScore).toBeLessThan(50);
+            expect(result.violations.critical).toHaveLength(0);
+        });
+        it('eval()を含むコードはcritical違反を検出する', () => {
+            const service = new CodeSecurityService();
+            const result = service.validate({
+                code: 'const code = "alert(1)";\neval(code);',
+                packageJson: { dependencies: {} },
+            });
+            expect(result.securityScore).toBeGreaterThan(0);
+            const evalViolation = result.violations.critical.find((v) => v.rule === 'no-eval');
+            expect(evalViolation).toBeDefined();
+        });
+        it('fileContextを指定してチェックできる', () => {
+            const service = new CodeSecurityService();
+            const fileContext = determineFileContext('__federation_expose_World.js');
+            const result = service.validate({
+                code: 'const x = 1;',
+                packageJson: { dependencies: {} },
+                fileContext,
+            });
+            expect(result).toHaveProperty('securityScore');
+            expect(result).toHaveProperty('violations');
+        });
+    });
+    describe('getSecurityVerdict', () => {
+        it('スコア70以上はREJECT', () => {
+            expect(getSecurityVerdict(70)).toBe('REJECT');
+            expect(getSecurityVerdict(100)).toBe('REJECT');
+        });
+        it('スコア50-69はREVIEW', () => {
+            expect(getSecurityVerdict(50)).toBe('REVIEW');
+            expect(getSecurityVerdict(69)).toBe('REVIEW');
+        });
+        it('スコア50未満はAPPROVE', () => {
+            expect(getSecurityVerdict(0)).toBe('APPROVE');
+            expect(getSecurityVerdict(49)).toBe('APPROVE');
+        });
+    });
+    describe('determineFileContext', () => {
+        it('__federation_expose_World-xxx はユーザーコードと判定', () => {
+            const ctx = determineFileContext('__federation_expose_World-abc123.js');
+            expect(ctx.isUserCode).toBe(true);
+        });
+        it('__federation_shared_ は共有ライブラリと判定', () => {
+            const ctx = determineFileContext('__federation_shared_react.js');
+            expect(ctx.isSharedLibrary).toBe(true);
+        });
+        it('通常のファイルはバンドル依存と判定', () => {
+            const ctx = determineFileContext('vendor.js');
+            expect(ctx.isBundledDependency).toBe(true);
+        });
+    });
+    describe('runSecurityCheck 相当のインテグレーションテスト', () => {
+        it('複数ファイルをチェックして結果を集約できる', async () => {
+            // ファイルを準備
+            const safeFile = path.join(distDir, 'safe.js');
+            const dangerousFile = path.join(distDir, 'dangerous.js');
+            await fs.writeFile(safeFile, 'const x = 1;');
+            await fs.writeFile(dangerousFile, 'const code = "alert(1)";\neval(code);');
+            const service = new CodeSecurityService();
+            const files = [safeFile, dangerousFile];
+            const results = [];
+            for (const filePath of files) {
+                const code = await fs.readFile(filePath, 'utf-8');
+                const relativePath = path.relative(distDir, filePath);
+                const fileContext = determineFileContext(relativePath);
+                const response = service.validate({
+                    code,
+                    packageJson: { dependencies: {} },
+                    fileContext,
+                });
+                const verdict = getSecurityVerdict(response.securityScore);
+                results.push({
+                    file: relativePath,
+                    score: response.securityScore,
+                    verdict,
+                    violations: response.violations,
+                });
+            }
+            expect(results).toHaveLength(2);
+            const safeResult = results.find((r) => r.file === 'safe.js');
+            expect(safeResult?.verdict).toBe('APPROVE');
+            const dangerousResult = results.find((r) => r.file === 'dangerous.js');
+            expect(dangerousResult?.score).toBeGreaterThan(0);
+        });
+        it('.mjs ファイルもチェックできる', async () => {
+            const mjsFile = path.join(distDir, 'module.mjs');
+            await fs.writeFile(mjsFile, 'export const value = 42;');
+            const code = await fs.readFile(mjsFile, 'utf-8');
+            const service = new CodeSecurityService();
+            const result = service.validate({
+                code,
+                packageJson: { dependencies: {} },
+            });
+            expect(result.securityScore).toBeLessThan(50);
+        });
+    });
+});
+//# sourceMappingURL=check.test.js.map

package/dist/lib/__tests__/check.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/check.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,uDAAuD;AACvD,qDAAqD;AACrD,0CAA0C;AAE1C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAG9B,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAI,OAAe,CAAC;IACpB,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnE,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;YACxB,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAC9B,IAAI,EAAE,mCAAmC;gBACzC,WAAW,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;aAClC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAC9B,IAAI,EAAE,uCAAuC;gBAC7C,WAAW,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;aAClC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CACnD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAC5B,CAAC;YACF,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,WAAW,GAAG,oBAAoB,CAAC,8BAA8B,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAC9B,IAAI,EAAE,cAAc;gBACpB,WAAW,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;gBACjC,WAAW;aACZ,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;YACxB,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;YACzB,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;YACzB,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,GAAG,GAAG,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,GAAG,GAAG,oBAAoB,CAAC,8BAA8B,CAAC,CAAC;YACjE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;YAC3B,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;YAC9C,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;YACrC,UAAU;YACV,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACzD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC7C,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;YAE3E,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,EAAE,CAAC;YAEnB,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACtD,MAAM,WAAW,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAyB,OAAO,CAAC,QAAQ,CAAC;oBACtD,IAAI;oBACJ,WAAW,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;oBACjC,WAAW;iBACZ,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,QAAQ,CAAC,aAAa;oBAC7B,OAAO;oBACP,UAAU,EAAE,QAAQ,CAAC,UAAU;iBAChC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAEhC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YAC7D,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE5C,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YACvE,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACjD,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;YAExD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAC9B,IAAI;gBACJ,WAAW,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;aAClC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/check.d.ts

@@ -0,0 +1,30 @@
+import type { Violation } from '@xrift/code-security';
+export interface CheckWorldOptions {
+    build?: boolean;
+    ignoreWarnings?: boolean;
+    json?: boolean;
+}
+export interface FileCheckResult {
+    file: string;
+    score: number;
+    verdict: 'APPROVE' | 'REVIEW' | 'REJECT';
+    violations: {
+        critical: Violation[];
+        warnings: Violation[];
+    };
+}
+export interface SecurityCheckResult {
+    results: FileCheckResult[];
+    hasReject: boolean;
+    hasReview: boolean;
+}
+/**
+ * 独立コマンド用: セキュリティチェックを実行し結果を表示
+ * @returns 終了コード (0: 成功, 1: 失敗)
+ */
+export declare function checkWorld(options?: CheckWorldOptions, cwd?: string): Promise<number>;
+/**
+ * upload 連携用: セキュリティチェックを実行し結果オブジェクトのみ返す
+ */
+export declare function runSecurityCheck(files: string[], distDir: string): Promise<SecurityCheckResult>;
+//# sourceMappingURL=check.d.ts.map

package/dist/lib/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/lib/check.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAwB,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAO5E,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,UAAU,EAAE;QACV,QAAQ,EAAE,SAAS,EAAE,CAAC;QACtB,QAAQ,EAAE,SAAS,EAAE,CAAC;KACvB,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,OAAO,GAAE,iBAAsB,EAC/B,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAoEjB;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,mBAAmB,CAAC,CAyC9B"}

package/dist/lib/check.js

@@ -0,0 +1,161 @@
+import path from 'node:path';
+import fs from 'node:fs/promises';
+import chalk from 'chalk';
+import ora from 'ora';
+import { CodeSecurityService, determineFileContext, getSecurityVerdict, } from '@xrift/code-security';
+import { loadProjectConfig, validateDistDir, scanDirectory, } from './project-config.js';
+/**
+ * 独立コマンド用: セキュリティチェックを実行し結果を表示
+ * @returns 終了コード (0: 成功, 1: 失敗)
+ */
+export async function checkWorld(options = {}, cwd = process.cwd()) {
+    if (!options.json) {
+        console.log(chalk.blue('🔒 セキュリティチェックを開始します\n'));
+    }
+    try {
+        // 1. 設定読み込み
+        const spinner = !options.json ? ora('設定を読み込み中...').start() : null;
+        const config = await loadProjectConfig(cwd);
+        const distDir = path.resolve(cwd, config.world.distDir);
+        spinner?.succeed(chalk.green(`設定を読み込みました: distDir=${config.world.distDir}`));
+        // 2. ビルドコマンド実行
+        if (options.build && config.world.buildCommand) {
+            if (!options.json) {
+                console.log(chalk.blue(`\n🔨 ビルドコマンドを実行: ${config.world.buildCommand}\n`));
+            }
+            const { execSync } = await import('node:child_process');
+            execSync(config.world.buildCommand, { cwd, stdio: options.json ? 'ignore' : 'inherit' });
+            if (!options.json) {
+                console.log(chalk.green('\n✓ ビルドが完了しました\n'));
+            }
+        }
+        // 3. distディレクトリ検証
+        await validateDistDir(distDir);
+        // 4. JSファイルをスキャン
+        const scanSpinner = !options.json ? ora('ファイルをスキャン中...').start() : null;
+        const allFiles = await scanDirectory(distDir, config.world.ignore);
+        const jsFiles = allFiles.filter((f) => /\.(js|mjs)$/.test(f));
+        if (jsFiles.length === 0) {
+            scanSpinner?.succeed(chalk.yellow('チェック対象のJSファイルがありません'));
+            if (options.json) {
+                console.log(JSON.stringify({ results: [], hasReject: false, hasReview: false }));
+            }
+            return 0;
+        }
+        scanSpinner?.succeed(chalk.green(`${jsFiles.length}個のJSファイルを検出しました`));
+        // 5. セキュリティチェック実行
+        const checkResult = await runSecurityCheck(jsFiles, distDir);
+        // 6. 結果表示
+        if (options.json) {
+            console.log(JSON.stringify(checkResult, null, 2));
+        }
+        else {
+            printResults(checkResult);
+        }
+        // 7. 終了コード判定
+        if (checkResult.hasReject) {
+            return 1;
+        }
+        if (checkResult.hasReview && !options.ignoreWarnings) {
+            return 0;
+        }
+        return 0;
+    }
+    catch (error) {
+        if (options.json) {
+            console.log(JSON.stringify({ error: error instanceof Error ? error.message : String(error) }));
+        }
+        else if (error instanceof Error) {
+            console.error(chalk.red(`\n❌ ${error.message}`));
+        }
+        return 1;
+    }
+}
+/**
+ * upload 連携用: セキュリティチェックを実行し結果オブジェクトのみ返す
+ */
+export async function runSecurityCheck(files, distDir) {
+    const service = new CodeSecurityService();
+    const results = [];
+    // package.json を読み込み（存在しない場合は空の dependencies を使用）
+    let packageJsonDeps = {};
+    try {
+        const pkgPath = path.join(distDir, '..', 'package.json');
+        const pkgContent = await fs.readFile(pkgPath, 'utf-8');
+        const pkg = JSON.parse(pkgContent);
+        packageJsonDeps = pkg.dependencies || {};
+    }
+    catch {
+        // package.json がない場合は空で続行
+    }
+    for (const filePath of files) {
+        const code = await fs.readFile(filePath, 'utf-8');
+        const relativePath = path.relative(distDir, filePath);
+        const fileContext = determineFileContext(relativePath);
+        const response = service.validate({
+            code,
+            packageJson: { dependencies: packageJsonDeps },
+            fileContext,
+        });
+        const verdict = getSecurityVerdict(response.securityScore);
+        results.push({
+            file: relativePath,
+            score: response.securityScore,
+            verdict,
+            violations: response.violations,
+        });
+    }
+    return {
+        results,
+        hasReject: results.some((r) => r.verdict === 'REJECT'),
+        hasReview: results.some((r) => r.verdict === 'REVIEW'),
+    };
+}
+/**
+ * 結果をコンソールに表示
+ */
+function printResults(checkResult) {
+    console.log('');
+    for (const result of checkResult.results) {
+        const verdictColor = result.verdict === 'APPROVE'
+            ? chalk.green
+            : result.verdict === 'REVIEW'
+                ? chalk.yellow
+                : chalk.red;
+        console.log(chalk.gray(`━━━ ${result.file} ${'━'.repeat(Math.max(0, 40 - result.file.length))}`));
+        console.log(`  スコア: ${result.score}  判定: ${verdictColor(result.verdict)}`);
+        for (const v of result.violations.critical) {
+            const loc = v.location ? ` (line ${v.location.line})` : '';
+            console.log(chalk.red(`  ✗ ${v.message}${loc}`));
+        }
+        for (const v of result.violations.warnings) {
+            const loc = v.location ? ` (line ${v.location.line})` : '';
+            console.log(chalk.yellow(`  ⚠ ${v.message}${loc}`));
+        }
+        console.log('');
+    }
+    // サマリー
+    const total = checkResult.results.length;
+    const approveCount = checkResult.results.filter((r) => r.verdict === 'APPROVE').length;
+    const reviewCount = checkResult.results.filter((r) => r.verdict === 'REVIEW').length;
+    const rejectCount = checkResult.results.filter((r) => r.verdict === 'REJECT').length;
+    console.log(chalk.gray('━'.repeat(40)));
+    let summary = `結果: ${total}ファイル`;
+    if (approveCount > 0)
+        summary += `  ${chalk.green(`APPROVE: ${approveCount}`)}`;
+    if (reviewCount > 0)
+        summary += `  ${chalk.yellow(`REVIEW: ${reviewCount}`)}`;
+    if (rejectCount > 0)
+        summary += `  ${chalk.red(`REJECT: ${rejectCount}`)}`;
+    console.log(summary);
+    if (checkResult.hasReject) {
+        console.log(chalk.red('\n❌ セキュリティチェックに失敗しました'));
+    }
+    else if (checkResult.hasReview) {
+        console.log(chalk.yellow('\n⚠ レビューが必要な項目があります'));
+    }
+    else {
+        console.log(chalk.green('\n✅ セキュリティチェックに合格しました'));
+    }
+}
+//# sourceMappingURL=check.js.map

package/dist/lib/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/lib/check.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,aAAa,GACd,MAAM,qBAAqB,CAAC;AAwB7B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAA6B,EAAE,EAC/B,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC;QACH,YAAY;QACZ,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAE7E,eAAe;QACf,IAAI,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACxD,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAE/B,iBAAiB;QACjB,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC1D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC;QAEtE,kBAAkB;QAClB,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE7D,UAAU;QACV,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,WAAW,CAAC,CAAC;QAC5B,CAAC;QAED,aAAa;QACb,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,WAAW,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACrD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACjG,CAAC;aAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAe,EACf,OAAe;IAEf,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,kDAAkD;IAClD,IAAI,eAAe,GAA2B,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnC,eAAe,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAEvD,MAAM,QAAQ,GAAyB,OAAO,CAAC,QAAQ,CAAC;YACtD,IAAI;YACJ,WAAW,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE;YAC9C,WAAW;SACZ,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAE3D,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,QAAQ,CAAC,aAAa;YAC7B,OAAO;YACP,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC;QACtD,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC;KACvD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,WAAgC;IACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,YAAY,GAChB,MAAM,CAAC,OAAO,KAAK,SAAS;YAC1B,CAAC,CAAC,KAAK,CAAC,KAAK;YACb,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAC3B,CAAC,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAElB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,KAAK,SAAS,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE3E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO;IACP,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;IACzC,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACvF,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACrF,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IAErF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,OAAO,GAAG,OAAO,KAAK,MAAM,CAAC;IACjC,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY,YAAY,EAAE,CAAC,EAAE,CAAC;IAChF,IAAI,WAAW,GAAG,CAAC;QAAE,OAAO,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,WAAW,WAAW,EAAE,CAAC,EAAE,CAAC;IAC9E,IAAI,WAAW,GAAG,CAAC;QAAE,OAAO,IAAI,KAAK,KAAK,CAAC,GAAG,CAAC,WAAW,WAAW,EAAE,CAAC,EAAE,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAErB,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xrift/cli",
-  "version": "0.11.1",
+  "version": "0.12.0",
   "description": "XRift CLI tool for world and avatar uploads",
   "type": "module",
   "main": "dist/index.js",
@@ -43,6 +43,7 @@
     "LICENSE"
   ],
   "dependencies": {
+    "@xrift/code-security": "^0.1.0",
     "axios": "^1.7.9",
     "chalk": "^5.3.0",
     "cli-progress": "^3.12.0",