agentsafe 0.1.0

package/.gitattributes

@@ -0,0 +1,5 @@
+* text=auto eol=lf
+
+*.bat text eol=crlf
+*.cmd text eol=crlf
+*.ps1 text eol=crlf

package/.github/workflows/ci.yml

@@ -0,0 +1,34 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run tests
+        run: npm test
+
+      - name: Run typecheck
+        run: npm run typecheck
+
+      - name: Build
+        run: npm run build

package/CHANGELOG.md

@@ -0,0 +1,13 @@
+# Changelog
+
+All notable changes to AgentSafe will be documented in this file.
+
+## [0.1.0] - 2026-07-13
+
+### Added
+
+- Initial AI Rules Scanner.
+- Static scanning for Cursor `.mdc` rules with YAML frontmatter.
+- Scanning for `AGENTS.md`, `CLAUDE.md`, `GEMINI.md`, and `.cursorrules`.
+- Redaction of possible secret values from reports.
+- JSON, Markdown, and text report formats.

package/CONTRIBUTING.md

@@ -0,0 +1,23 @@
+# Contributing
+
+Thank you for helping improve AgentSafe.
+
+## Development Checks
+
+Before opening a pull request, run:
+
+```shell
+npm test
+npm run typecheck
+npm run build
+```
+
+## Project Principles
+
+Contributions must preserve AgentSafe's offline-first, privacy-first design:
+
+- do not add telemetry;
+- do not add network calls or external API dependencies;
+- do not execute scanned files or workspace code;
+- do not execute MCP commands or start subprocesses from scan results;
+- keep changes focused, small, and covered by tests where appropriate.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 mewsyy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,128 @@
+# AgentSafe
+
+[![CI](https://github.com/mewsyy/agentsafe/actions/workflows/ci.yml/badge.svg)](https://github.com/mewsyy/agentsafe/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![Node.js 20+](https://img.shields.io/badge/Node.js-20%2B-43853d.svg)](https://nodejs.org/)
+
+**Find risky, vague, or secret-bearing AI coding rules before an agent reads them.**
+
+AgentSafe is an offline-first, privacy-first safety and hygiene toolkit for AI coding workspaces. It uses static analysis to inspect AI instruction files without running their contents.
+
+> **Warning:** AgentSafe never executes scanned files, MCP commands, subprocesses, or workspace code.
+
+## Quick Start
+
+Requires Node.js 20 or newer.
+
+```shell
+git clone https://github.com/mewsyy/agentsafe.git
+cd agentsafe
+npm ci
+npm run build
+node dist/index.js rules scan .
+```
+
+Use `--json` or `--markdown` to select a report format:
+
+```shell
+node dist/index.js rules scan . --markdown
+```
+
+## Example Output
+
+```text
+AgentSafe Rules Scan
+Files scanned: 2
+Findings: 2 (1 high, 1 warnings)
+
+[HIGH] CLAUDE.md:8 openai-key: Possible OpenAI API key detected; value omitted.
+[WARNING] .cursor/rules/general.mdc:1 vague-instruction: Rule contains a vague instruction without a concrete example.
+```
+
+Secret values and source lines are omitted from reports.
+
+## Privacy Guarantees
+
+- Static analysis only.
+- No scanned files or workspace code are executed.
+- No MCP commands or subprocesses are executed.
+- No external APIs or network calls are used while scanning.
+- No files or findings are uploaded.
+- No telemetry is collected.
+- No scan data is stored in a database.
+
+## v0.1: AI Rules Scanner
+
+Version 0.1 scans these workspace files when present:
+
+- `.cursor/rules/*.mdc`
+- `AGENTS.md`
+- `CLAUDE.md`
+- `GEMINI.md`
+- `.cursorrules`
+
+The scanner parses YAML frontmatter in Cursor `.mdc` files and validates `description`, `globs`, and `alwaysApply`. It reports:
+
+- missing or invalid frontmatter;
+- empty rule bodies;
+- very long rules that are always applied;
+- duplicate glob patterns;
+- too many always-applied rules;
+- vague instructions without concrete examples;
+- suspicious instructions involving secrets, environment data, exfiltration, or disabled safety;
+- possible OpenAI, Anthropic, GitHub, AWS, and generic API credentials.
+
+Possible secret values are never included in reports. Reports contain only the finding type, relative file path, line number, and a short explanation.
+
+## Usage
+
+```shell
+npm install
+npm run build
+```
+
+Scan the current directory:
+
+```shell
+agentsafe rules scan
+```
+
+Scan a specific workspace:
+
+```shell
+agentsafe rules scan path/to/workspace
+```
+
+Generate machine-readable JSON or a Markdown report:
+
+```shell
+agentsafe rules scan --json
+agentsafe rules scan --markdown
+```
+
+Findings do not cause a non-zero exit code. Invalid arguments and scan failures exit with code `1`.
+
+To inspect the included unsafe example without executing any of its contents:
+
+```shell
+npm run scan:example
+```
+
+## Development
+
+```shell
+npm test
+npm run typecheck
+npm run build
+```
+
+## Roadmap
+
+- **v0.1:** static scanning for Cursor and other AI rule files.
+- **v0.2:** static scanning for MCP configuration and command definitions.
+
+The v0.2 MCP scanner will remain static-only. It will inspect configuration as text and structured data without starting servers, executing commands, or using the network.
+
+## Limits
+
+AgentSafe uses conservative heuristics. A clean report does not prove that a workspace is safe, and a finding should be reviewed in context. All analysis remains on the local machine.

package/SECURITY.md

@@ -0,0 +1,22 @@
+# Security Policy
+
+## Security Model
+
+AgentSafe is a static-only, offline-first analysis tool. It reads supported rule files as text and structured data, then reports local findings.
+
+AgentSafe does not:
+
+- execute scanned files or workspace code;
+- execute MCP server commands;
+- start subprocesses from scan results;
+- upload user files or scan results;
+- call external APIs or require network access while scanning;
+- collect telemetry.
+
+Possible secret values are omitted from reports. Findings identify the secret type, relative file path, and line number without reproducing the detected value.
+
+## Reporting A Security Issue
+
+For now, report security issues through the [GitHub issue tracker](https://github.com/mewsyy/agentsafe/issues).
+
+GitHub issues are public. Do not include real credentials, private source code, personal data, or other sensitive information. Use redacted examples and provide the smallest reproduction needed to explain the issue.

package/dist/cli.d.ts

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+interface CliOutput {
+    stdout(value: string): void;
+    stderr(value: string): void;
+}
+export declare function runCli(args: string[], cwd?: string, output?: CliOutput): Promise<number>;
+export {};

package/dist/cli.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+import { pathToFileURL } from "node:url";
+import { resolve } from "node:path";
+import { formatJsonReport, formatMarkdownReport, formatTextReport, } from "./rules/report.js";
+import { scanRules } from "./rules/scan.js";
+const usage = `Usage:
+  agentsafe rules scan [directory] [--json | --markdown]
+
+Scans AI rule files using local, static analysis only.
+`;
+export async function runCli(args, cwd = process.cwd(), output = {
+    stdout: (value) => process.stdout.write(value),
+    stderr: (value) => process.stderr.write(value),
+}) {
+    if (args.includes("--help") || args.includes("-h")) {
+        output.stdout(usage);
+        return 0;
+    }
+    let options;
+    try {
+        options = parseArguments(args);
+    }
+    catch (error) {
+        output.stderr(`${getErrorMessage(error)}\n\n${usage}`);
+        return 1;
+    }
+    try {
+        const report = await scanRules(resolve(cwd, options.directory));
+        const formatted = options.format === "json"
+            ? formatJsonReport(report)
+            : options.format === "markdown"
+                ? formatMarkdownReport(report)
+                : formatTextReport(report);
+        output.stdout(formatted);
+        return 0;
+    }
+    catch (error) {
+        output.stderr(`AgentSafe scan failed: ${getErrorMessage(error)}\n`);
+        return 1;
+    }
+}
+function parseArguments(args) {
+    if (args[0] !== "rules" || args[1] !== "scan") {
+        throw new Error("Unknown command.");
+    }
+    let format = "text";
+    let directory = ".";
+    let hasDirectory = false;
+    for (const argument of args.slice(2)) {
+        if (argument === "--json" || argument === "--markdown") {
+            const requestedFormat = argument.slice(2);
+            if (format !== "text") {
+                throw new Error("Use only one report format flag.");
+            }
+            format = requestedFormat;
+        }
+        else if (argument.startsWith("-")) {
+            throw new Error(`Unknown option: ${argument}`);
+        }
+        else if (hasDirectory) {
+            throw new Error("Only one scan directory may be provided.");
+        }
+        else {
+            directory = argument;
+            hasDirectory = true;
+        }
+    }
+    return { directory, format };
+}
+function getErrorMessage(error) {
+    return error instanceof Error ? error.message : "Unknown error.";
+}
+const invokedPath = process.argv[1];
+if (invokedPath && pathToFileURL(invokedPath).href === import.meta.url) {
+    process.exitCode = await runCli(process.argv.slice(2));
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAc5C,MAAM,KAAK,GAAG;;;;CAIb,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAc,EACd,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EACnB,SAAoB;IAClB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;IAC9C,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;CAC/C;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAChE,MAAM,SAAS,GACb,OAAO,CAAC,MAAM,KAAK,MAAM;YACvB,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU;gBAC7B,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC;gBAC9B,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,0BAA0B,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,MAAM,GAAiB,MAAM,CAAC;IAClC,IAAI,SAAS,GAAG,GAAG,CAAC;IACpB,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YACvD,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAiB,CAAC;YAC1D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,GAAG,eAAe,CAAC;QAC3B,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,YAAY,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,QAAQ,CAAC;YACrB,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACnE,CAAC;AAED,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpC,IAAI,WAAW,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACvE,OAAO,CAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { runCli } from "./cli.js";
+process.exitCode = await runCli(process.argv.slice(2));
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,CAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/rules/report.d.ts

@@ -0,0 +1,4 @@
+import type { ScanReport } from "./types.js";
+export declare function formatJsonReport(report: ScanReport): string;
+export declare function formatMarkdownReport(report: ScanReport): string;
+export declare function formatTextReport(report: ScanReport): string;

package/dist/rules/report.js

@@ -0,0 +1,71 @@
+export function formatJsonReport(report) {
+    return `${JSON.stringify(report, null, 2)}\n`;
+}
+export function formatMarkdownReport(report) {
+    const lines = [
+        "# AgentSafe Rules Scan",
+        "",
+        `- Target: \`${report.target}\``,
+        `- Files scanned: ${report.summary.files}`,
+        `- High severity: ${report.summary.high}`,
+        `- Warnings: ${report.summary.warnings}`,
+        `- Total findings: ${report.summary.total}`,
+        "",
+        "## Findings",
+        "",
+    ];
+    if (report.findings.length === 0) {
+        lines.push("_No findings._");
+    }
+    else {
+        lines.push("| Severity | Rule | Location | Message |");
+        lines.push("| --- | --- | --- | --- |");
+        for (const finding of report.findings) {
+            lines.push(`| ${finding.severity.toUpperCase()} | \`${escapeMarkdown(finding.code)}\` | ${formatMarkdownLocation(finding)} | ${escapeMarkdown(finding.message)} |`);
+        }
+    }
+    lines.push("", "## Scanned Files", "");
+    if (report.files.length === 0) {
+        lines.push("_No supported rule files found._");
+    }
+    else {
+        for (const file of report.files) {
+            lines.push(`- \`${escapeMarkdown(file)}\``);
+        }
+    }
+    return `${lines.join("\n")}\n`;
+}
+export function formatTextReport(report) {
+    const lines = [
+        "AgentSafe Rules Scan",
+        `Files scanned: ${report.summary.files}`,
+        `Findings: ${report.summary.total} (${report.summary.high} high, ${report.summary.warnings} warnings)`,
+    ];
+    if (report.findings.length === 0) {
+        lines.push("", "No findings.");
+    }
+    else {
+        lines.push("");
+        for (const finding of report.findings) {
+            lines.push(`[${finding.severity.toUpperCase()}] ${formatTextLocation(finding)} ${finding.code}: ${finding.message}`);
+        }
+    }
+    return `${lines.join("\n")}\n`;
+}
+function formatMarkdownLocation(finding) {
+    if (!finding.path) {
+        return "project";
+    }
+    const location = finding.line ? `${finding.path}:${finding.line}` : finding.path;
+    return `\`${escapeMarkdown(location)}\``;
+}
+function formatTextLocation(finding) {
+    if (!finding.path) {
+        return "project";
+    }
+    return finding.line ? `${finding.path}:${finding.line}` : finding.path;
+}
+function escapeMarkdown(value) {
+    return value.replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/`/g, "\\`");
+}
+//# sourceMappingURL=report.js.map

package/dist/rules/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/rules/report.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAkB;IACrD,MAAM,KAAK,GAAG;QACZ,wBAAwB;QACxB,EAAE;QACF,eAAe,MAAM,CAAC,MAAM,IAAI;QAChC,oBAAoB,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;QAC1C,oBAAoB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;QACzC,eAAe,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE;QACxC,qBAAqB,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;QAC3C,EAAE;QACF,aAAa;QACb,EAAE;KACH,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CACR,KAAK,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,sBAAsB,CAAC,OAAO,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACxJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,MAAM,KAAK,GAAG;QACZ,sBAAsB;QACtB,kBAAkB,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;QACxC,aAAa,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,UAAU,MAAM,CAAC,OAAO,CAAC,QAAQ,YAAY;KACvG,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CACR,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,kBAAkB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgB;IAC9C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACjF,OAAO,KAAK,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjF,CAAC"}

package/dist/rules/scan.d.ts

@@ -0,0 +1,2 @@
+import type { ScanReport } from "./types.js";
+export declare function scanRules(rootInput: string): Promise<ScanReport>;