anchi-kit 1.2.0 → 1.2.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "anchi-kit",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "The Ultimate AI-Native Toolkit for Cursor & Gemini. Installs into any existing project. Includes commands, agents, skills, and architecture presets.",
   "main": "src/cli.js",
   "bin": {
@@ -39,23 +39,50 @@
     "bin/",
     "src/",
     "scripts/",
-    ".cursor/",
-    ".antigravity/",
+    ".cursor/commands/",
+    ".cursor/agents/",
+    ".cursor/skills/*/SKILL.md",
+    ".cursor/skills/*/references/",
+    ".cursor/workflows/",
+    ".cursor/agent-skill-index.yaml",
+    ".cursor/failure-modes.yaml",
+    ".cursor/orchestration.yaml",
+    ".cursor/team.yaml",
+    ".cursor/data-classification.yaml",
+    ".cursor/deploy-guard.yaml",
+    ".cursor/compliance/",
+    ".cursor/MODEL_COSTS.md",
+    ".cursor/UX_GUIDELINES.md",
+    ".antigravity/commands/",
+    ".antigravity/agents/",
+    ".antigravity/skills/*/SKILL.md",
+    ".antigravity/skills/*/references/",
+    ".antigravity/workflows/",
+    ".antigravity/agent-skill-index.yaml",
+    ".antigravity/failure-modes.yaml",
+    ".antigravity/orchestration.yaml",
+    ".antigravity/team.yaml",
+    ".antigravity/data-classification.yaml",
+    ".antigravity/deploy-guard.yaml",
+    ".antigravity/compliance/",
     "presets/",
     "docs/",
     ".cursorrules",
     "CURSOR.md",
+    "ANTIGRAVITY.md",
     "README.md",
     "CHANGELOG.md",
     "LICENSE"
   ],
   "dependencies": {
-    "better-sqlite3": "^9.2.2",
     "bottleneck": "^2.19.5",
     "chalk": "^4.1.2",
     "ora": "^5.4.1",
     "prompts": "^2.4.2"
   },
+  "optionalDependencies": {
+    "better-sqlite3": "^9.2.2"
+  },
   "devDependencies": {
     "@commitlint/cli": "^18.4.3",
     "@commitlint/config-conventional": "^18.4.3",
@@ -67,7 +94,6 @@
     "@semantic-release/npm": "^11.0.2",
     "@semantic-release/release-notes-generator": "^12.1.0",
     "@vercel/ncc": "^0.38.4",
-    "anchi-kit": "^1.2.0",
     "conventional-changelog-conventionalcommits": "^7.0.2",
     "husky": "^8.0.3",
     "semantic-release": "^22.0.12"

package/presets/memory-template/.ai-audit/README.md

@@ -0,0 +1,42 @@
+# AI Audit - Decision Logs
+
+This folder stores AI decision audit logs for transparency and debugging.
+
+## Structure
+
+```
+.ai-audit/
+├── README.md           # This file
+└── YYYY-MM-DD.jsonl    # Daily decision logs
+```
+
+## Log Format
+
+Each log entry contains:
+
+- **timestamp**: When the decision was made
+- **action**: What action was taken
+- **reasoning**: Why this action was chosen
+- **context**: Relevant context at decision time
+
+## Usage
+
+```bash
+# View recent audit logs
+npx anchi-kit brain audit
+
+# View specific date
+npx anchi-kit brain audit --date 2024-12-30
+
+# Clear old logs
+npx anchi-kit clean --audit
+```
+
+## Security
+
+⚠️ Audit logs may contain sensitive project details.  
+Add to `.gitignore` for public repositories:
+
+```gitignore
+.ai-audit/
+```

package/presets/memory-template/.ai-memory/README.md

@@ -0,0 +1,42 @@
+# AI Memory - Context Storage
+
+This folder stores AI context, session history, and project knowledge.
+
+## Structure
+
+```
+.ai-memory/
+├── context.json      # Current project context
+├── decisions.json    # Key decisions made
+├── graph/            # Knowledge graph data
+├── sessions/         # Chat session history
+└── vector/           # Vector embeddings (optional)
+```
+
+## Usage
+
+- **context.json**: Auto-managed by anchi-kit
+- **decisions.json**: Important decisions for future reference
+- **sessions/**: Preserves conversation context across sessions
+
+## Security
+
+⚠️ This folder may contain sensitive project information.  
+Add to `.gitignore` if working in a public repository:
+
+```gitignore
+.ai-memory/
+```
+
+## Commands
+
+```bash
+# View memory status
+npx anchi-kit brain memory
+
+# Clear memory
+npx anchi-kit clean --memory
+
+# Export context
+npx anchi-kit memory export
+```

package/presets/memory-template/.ai-memory/context.json

@@ -0,0 +1,11 @@
+{
+  "version": "1.0",
+  "project": "",
+  "description": "",
+  "createdAt": "",
+  "lastUpdated": "",
+  "tech_stack": [],
+  "architecture": "",
+  "conventions": [],
+  "history": []
+}

package/presets/memory-template/.ai-memory/decisions.json

@@ -0,0 +1 @@
+[]

package/presets/memory-template/.ai-memory/graph/.gitkeep

@@ -0,0 +1 @@
+# Graph data placeholder

package/presets/memory-template/.ai-memory/sessions/.gitkeep

@@ -0,0 +1 @@
+# Session history placeholder

package/presets/memory-template/.ai-memory/vector/.gitkeep

@@ -0,0 +1 @@
+# Vector embeddings placeholder

package/presets/professional/contract.json

@@ -1,7 +1,7 @@
 {
     "name": "professional",
     "displayName": "Professional",
-    "version": "1.2.0",
+    "version": "1.2.2",
     "architecture": {
         "type": "modular-monolith",
         "database": "PostgreSQL",

package/presets/rapid/contract.json

@@ -1,7 +1,7 @@
 {
     "name": "rapid",
     "displayName": "Rapid MVP",
-    "version": "1.2.0",
+    "version": "1.2.2",
     "architecture": {
         "type": "flat",
         "database": "SQLite",

package/scripts/pre-commit-secrets.ps1

@@ -0,0 +1,84 @@
+# =============================================================================
+# anchi-kit Pre-Commit Hook - Secret Scanner (PowerShell)
+# Prevents committing files containing API keys, passwords, tokens
+# =============================================================================
+
+Write-Host "🔒 anchi-kit: Scanning for secrets..." -ForegroundColor Green
+
+# Secret patterns to detect
+$patterns = @(
+    'sk-[a-zA-Z0-9]{20,}',                     # OpenAI
+    'AIza[a-zA-Z0-9_-]{35}',                    # Google API
+    'ghp_[a-zA-Z0-9]{36}',                      # GitHub PAT
+    'gho_[a-zA-Z0-9]{36}',                      # GitHub OAuth
+    'xox[baprs]-[a-zA-Z0-9-]+',                 # Slack
+    'AKIA[A-Z0-9]{16}',                         # AWS Access Key
+    'sk-ant-[a-zA-Z0-9_-]+',                    # Anthropic
+    'api[_-]?key\s*[=:]\s*[''"][^''"]{10,}[''"]', # Generic API key
+    'password\s*[=:]\s*[''"][^'']+[''"]'        # Hardcoded password
+)
+
+$foundSecrets = $false
+$stagedFiles = git diff --cached --name-only --diff-filter=ACMR 2>$null
+
+if (-not $stagedFiles) {
+    Write-Host "✅ No staged files to scan" -ForegroundColor Green
+    exit 0
+}
+
+foreach ($file in $stagedFiles) {
+    # Skip binary and media files
+    if ($file -match '\.(png|jpg|jpeg|gif|ico|woff|woff2|ttf|eot|pdf|zip|tar|gz)$') {
+        continue
+    }
+    
+    # Skip node_modules and .git
+    if ($file -match '^node_modules/' -or $file -match '^\.git/') {
+        continue
+    }
+    
+    # Skip .env.example files
+    if ($file -match '\.env\.example$') {
+        continue
+    }
+    
+    if (Test-Path $file) {
+        $content = Get-Content $file -Raw -ErrorAction SilentlyContinue
+        if ($content) {
+            $lineNum = 0
+            $lines = $content -split "`n"
+            
+            foreach ($pattern in $patterns) {
+                for ($i = 0; $i -lt $lines.Count; $i++) {
+                    if ($lines[$i] -match $pattern) {
+                        Write-Host ""
+                        Write-Host "🚨 POTENTIAL SECRET DETECTED" -ForegroundColor Red
+                        Write-Host "   File: $file" -ForegroundColor Yellow
+                        Write-Host "   Line $($i + 1): [REDACTED]" -ForegroundColor Red
+                        $foundSecrets = $true
+                    }
+                }
+            }
+        }
+    }
+}
+
+if ($foundSecrets) {
+    Write-Host ""
+    Write-Host "════════════════════════════════════════════════════════════" -ForegroundColor Red
+    Write-Host "   ⛔ COMMIT BLOCKED - Secrets detected in staged files" -ForegroundColor Red
+    Write-Host "════════════════════════════════════════════════════════════" -ForegroundColor Red
+    Write-Host ""
+    Write-Host "💡 How to fix:" -ForegroundColor Yellow
+    Write-Host "   1. Move secrets to .env file"
+    Write-Host "   2. Use process.env.YOUR_SECRET_NAME in code"
+    Write-Host "   3. Add .env to .gitignore"
+    Write-Host ""
+    Write-Host "💡 To bypass (NOT RECOMMENDED):" -ForegroundColor Yellow
+    Write-Host "   git commit --no-verify"
+    Write-Host ""
+    exit 1
+}
+
+Write-Host "✅ No secrets detected - commit allowed" -ForegroundColor Green
+exit 0

package/scripts/pre-commit-secrets.sh

@@ -0,0 +1,86 @@
+#!/bin/bash
+# =============================================================================
+# anchi-kit Pre-Commit Hook - Secret Scanner
+# Prevents committing files containing API keys, passwords, tokens
+# =============================================================================
+
+RED='\033[0;31m'
+YELLOW='\033[1;33m'
+GREEN='\033[0;32m'
+NC='\033[0m' # No Color
+
+echo -e "${GREEN}🔒 anchi-kit: Scanning for secrets...${NC}"
+
+# Secret patterns to detect
+PATTERNS=(
+    'sk-[a-zA-Z0-9]{20,}'                    # OpenAI
+    'AIza[a-zA-Z0-9_-]{35}'                   # Google API
+    'ghp_[a-zA-Z0-9]{36}'                     # GitHub PAT
+    'gho_[a-zA-Z0-9]{36}'                     # GitHub OAuth
+    'xox[baprs]-[a-zA-Z0-9-]+'                # Slack
+    'AKIA[A-Z0-9]{16}'                        # AWS Access Key
+    'sk-ant-[a-zA-Z0-9_-]+'                   # Anthropic
+    '[a-zA-Z0-9_-]*api[_-]?key[a-zA-Z0-9_-]*\s*[=:]\s*['\''"][^'\''"]{10,}['\''"]'  # Generic API key
+    'password\s*[=:]\s*['\''"][^'\''"]+['\''"]'  # Hardcoded password
+)
+
+FOUND_SECRETS=0
+STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACMR 2>/dev/null)
+
+if [ -z "$STAGED_FILES" ]; then
+    echo -e "${GREEN}✅ No staged files to scan${NC}"
+    exit 0
+fi
+
+for file in $STAGED_FILES; do
+    # Skip binary files and common non-code files
+    if [[ "$file" =~ \.(png|jpg|jpeg|gif|ico|woff|woff2|ttf|eot|pdf|zip|tar|gz)$ ]]; then
+        continue
+    fi
+    
+    # Skip node_modules and .git
+    if [[ "$file" =~ ^node_modules/ ]] || [[ "$file" =~ ^\.git/ ]]; then
+        continue
+    fi
+    
+    # Skip .env.example files (they should have placeholders)
+    if [[ "$file" =~ \.env\.example$ ]]; then
+        continue
+    fi
+    
+    if [ -f "$file" ]; then
+        for pattern in "${PATTERNS[@]}"; do
+            MATCHES=$(grep -nE "$pattern" "$file" 2>/dev/null | head -5)
+            if [ -n "$MATCHES" ]; then
+                echo ""
+                echo -e "${RED}🚨 POTENTIAL SECRET DETECTED${NC}"
+                echo -e "${YELLOW}   File: $file${NC}"
+                echo "$MATCHES" | while read -r line; do
+                    LINE_NUM=$(echo "$line" | cut -d: -f1)
+                    echo -e "   Line $LINE_NUM: ${RED}[REDACTED]${NC}"
+                done
+                FOUND_SECRETS=1
+            fi
+        done
+    fi
+done
+
+if [ $FOUND_SECRETS -eq 1 ]; then
+    echo ""
+    echo -e "${RED}════════════════════════════════════════════════════════════${NC}"
+    echo -e "${RED}   ⛔ COMMIT BLOCKED - Secrets detected in staged files${NC}"
+    echo -e "${RED}════════════════════════════════════════════════════════════${NC}"
+    echo ""
+    echo -e "${YELLOW}💡 How to fix:${NC}"
+    echo "   1. Move secrets to .env file"
+    echo "   2. Use process.env.YOUR_SECRET_NAME in code"
+    echo "   3. Add .env to .gitignore"
+    echo ""
+    echo -e "${YELLOW}💡 To bypass (NOT RECOMMENDED):${NC}"
+    echo "   git commit --no-verify"
+    echo ""
+    exit 1
+fi
+
+echo -e "${GREEN}✅ No secrets detected - commit allowed${NC}"
+exit 0

package/src/cli.js

@@ -13,10 +13,12 @@ const PACKAGE_VERSION = (() => {
     try {
         const pkgPath = path.join(__dirname, '..', 'package.json');
         if (fs.existsSync(pkgPath)) {
-            return JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version || '1.2.0';
+            return JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version || '1.2.2';
         }
-    } catch (e) {}
-    return '1.2.0';
+    } catch (e) {
+        // Fallback if package.json not found or malformed
+    }
+    return '1.2.2'; // Fallback if package.json not found
 })();
 
 // =============================================================================
@@ -287,16 +289,16 @@ async function installAntigravity(isForce = false) {
             fs.copyFileSync(configSource, configDest);
         }
     }
-    // 5. Create .ai-audit folder (for logging)
-    const auditSource = path.join(kitPath, '.ai-audit');
+    // 5. Create .ai-audit folder (for logging) - Use template
+    const auditSource = path.join(kitPath, 'presets/memory-template/.ai-audit');
     const auditDest = path.join(antigravityDest, '.ai-audit'); // Inside .antigravity
     if (fs.existsSync(auditSource)) {
         await copyWithConflictHandling(auditSource, auditDest, true, isForce);
         log.success('  ✅ .ai-audit/ - Decision logs');
     }
 
-    // 6. Create .ai-memory folder (for context)
-    const memorySource = path.join(kitPath, '.ai-memory');
+    // 6. Create .ai-memory folder (for context) - Use template
+    const memorySource = path.join(kitPath, 'presets/memory-template/.ai-memory');
     const memoryDest = path.join(antigravityDest, '.ai-memory'); // Inside .antigravity
     if (fs.existsSync(memorySource)) {
         await copyWithConflictHandling(memorySource, memoryDest, true, isForce);
@@ -435,6 +437,12 @@ if (flags.includes('--version') || flags.includes('-v')) {
     process.exit(0);
 }
 
+// Handle --help flag early
+if (flags.includes('--help') || flags.includes('-h')) {
+    showHelp();
+    process.exit(0);
+}
+
 async function main() {
     // Aliases
     switch (command) {
@@ -559,6 +567,17 @@ async function main() {
             await scout(args.slice(1));
             break;
 
+        case 'scan':
+            const { scan } = require('./commands/scan');
+            const scanExitCode = await scan(args[1]);
+            process.exitCode = scanExitCode;
+            break;
+
+        case 'security':
+        case 'sec':
+            const { security } = require('./commands/security');
+            await security(args[1], args[2]);
+            break;
 
         case 'help':
             showHelp();
@@ -590,8 +609,10 @@ function showHelp() {
     log.success('  npx anchi-kit clean        Cleanup Project');
     log.success('  npx anchi-kit dashboard    Web Dashboard (Port 4567)');
     log.success('  npx anchi-kit tui          Terminal UI (Interactive)');
-    log.success('  npx anchi-kit team         Team Management (New)');
+    log.success('  npx anchi-kit team         Team Management');
     log.success('  npx anchi-kit scout        Knowledge Graph Search & Ingest');
+    log.success('  npx anchi-kit scan         🔒 Scan for secrets in code');
+    log.success('  npx anchi-kit security     🔐 Security management');
     console.log('');
     
     console.log('Brain Commands (via "brain [...]"):');

package/src/commands/dashboard.js

@@ -1,5 +1,5 @@
 // =============================================================================
-// anchi-kit Dashboard Command v1.2.0 (Interactive Backend)
+// anchi-kit Dashboard Command v1.2.2 (Interactive Backend)
 // Launches a local web server with live API endpoints for Run, Logs, and Tasks
 // =============================================================================
 
@@ -29,7 +29,7 @@ function addLog(type, message) {
 async function dashboard(port = 4567, autoOpen = true) {
     const targetDir = process.cwd();
     
-    addLog('info', '📊 Starting anchi-kit Dashboard v1.2.0...');
+    addLog('info', '📊 Starting anchi-kit Dashboard v1.2.2...');
     
     // Helper: Read directory files
     const readDir = (dir) => {
@@ -407,34 +407,6 @@ async function dashboard(port = 4567, autoOpen = true) {
                 const result = cleanGlobalMemory();
                 res.end(JSON.stringify(result));
             }
-            else if (pathname === '/api/tasks' && req.method === 'GET') {
-                 const taskData = getTasks();
-                 res.end(JSON.stringify(taskData.error ? taskData : { tasks: taskData.tasks }));
-            }
-            else if (pathname === '/api/tasks' && req.method === 'POST') {
-                let body = '';
-                req.on('data', chunk => body += chunk);
-                req.on('end', () => {
-                    const { id, completed } = JSON.parse(body); // 'completed' here is essentially 'status'
-                    updateTask(id, completed); // Helper to update task.md
-                    res.end(JSON.stringify({ success: true }));
-                });
-            }
-             // Task Archive Endpoint
-            else if (pathname === '/api/archive' && req.method === 'POST') {
-                 const result = archiveTasks();
-                 res.end(JSON.stringify(result));
-            }
-            else if (pathname === '/api/run' && req.method === 'POST') {
-                let body = '';
-                req.on('data', chunk => body += chunk);
-                req.on('end', () => {
-                    const { command } = JSON.parse(body);
-                    // Mock run execution for safety in dashboard
-                    console.log('Command requested:', command);
-                    res.end(JSON.stringify({ output: `Executed: ${command}\n(Simulation Mode)` }));
-                });
-            }
             else {
                 res.writeHead(404);
                 res.end(JSON.stringify({ error: 'Not Found' }));
@@ -443,18 +415,20 @@ async function dashboard(port = 4567, autoOpen = true) {
 
         s.on('error', (e) => {
             if (e.code === 'EADDRINUSE') {
-                console.log(`   Port ${port} busy, trying ${port + 1}...`);
+                addLog('warn', `⚠️ Port ${port} is in use, trying ${port + 1}...`);
                 startServer(port + 1);
             } else {
-                console.error('Server error:', e);
+                addLog('error', `Server error: ${e.message}`);
             }
         });
 
         s.listen(port, 'localhost', () => {
-            console.log(`✅ Dashboard v1.2.0 running at: http://localhost:${port}`);
+            const url = `http://localhost:${port}`;
+            addLog('success', `✅ Dashboard v1.2.2 running at: ${url}`);
+            
             if (autoOpen) {
                 const startCommand = process.platform === 'win32' ? 'start' : process.platform === 'darwin' ? 'open' : 'xdg-open';
-                require('child_process').exec(`${startCommand} http://localhost:${port}`);
+                require('child_process').exec(`${startCommand} ${url}`);
             }
         });
     };

package/src/commands/init.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 // =============================================================================
-// anchi-kit Enhanced Init Command (v1.2.0)
+// anchi-kit Enhanced Init Command (v1.2.1)
 // Usage: npx anchi-kit init
 // =============================================================================
 
@@ -94,7 +94,7 @@ async function init() {
     // Step 0: Welcome Banner
     console.log('');
     log.header('╔═══════════════════════════════════════════════════════════╗');
-    log.header('║        🧠 Anchi-Kit Cognitive OS Setup (v1.2.0)           ║');
+    log.header('║        🧠 Anchi-Kit Cognitive OS Setup (v1.2.2)           ║');
     log.header('╚═══════════════════════════════════════════════════════════╝');
     console.log('');
 
@@ -182,7 +182,7 @@ async function init() {
 
     // Prepare Config Object
     const anchiConfig = {
-        version: '1.2.0',
+        version: '1.2.2',
         domain: selectedDomain,
         level: selectedLevel,
         installed_capabilities: selectedCaps,
@@ -231,6 +231,18 @@ async function init() {
         }
     }
 
+    // 1.5. Install Commands (AI Instructions)
+    log.info('   💻 Installing Commands...');
+    const destCommands = path.join(destFolder, 'commands');
+    if (!fs.existsSync(destCommands)) fs.mkdirSync(destCommands);
+    
+    // Copy Core Commands
+    const baseCommandsPath = path.join(kitPath, '.cursor/commands');
+    if (fs.existsSync(baseCommandsPath)) {
+        copyDirRecursive(baseCommandsPath, destCommands);
+        log.success('      + Core Commands (start, brain, etc.)');
+    }
+
     // 2. Install Skills (Packs)
     log.info('   📚 Installing Skill Packs...');
     const destSkills = path.join(destFolder, 'skills');

package/src/commands/scan.js

@@ -0,0 +1,103 @@
+/**
+ * anchi-kit Scan Command
+ * CLI interface for secret scanning
+ * @module commands/scan
+ */
+
+const path = require('path');
+const { scanDirectory, formatFindings, getSeverityStats } = require('../lib/secretScanner');
+
+// Colors
+const colors = {
+    reset: '\x1b[0m',
+    red: '\x1b[31m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    cyan: '\x1b[36m',
+    gray: '\x1b[90m',
+};
+
+const log = {
+    info: (msg) => console.log(`${colors.cyan}${msg}${colors.reset}`),
+    success: (msg) => console.log(`${colors.green}${msg}${colors.reset}`),
+    warn: (msg) => console.log(`${colors.yellow}${msg}${colors.reset}`),
+    error: (msg) => console.log(`${colors.red}${msg}${colors.reset}`),
+    gray: (msg) => console.log(`${colors.gray}${msg}${colors.reset}`),
+};
+
+/**
+ * Scan command - scan project for secrets
+ * @param {string} targetPath - Path to scan (defaults to cwd)
+ * @param {Object} options - Scan options
+ */
+async function scan(targetPath, options = {}) {
+    const scanPath = targetPath || process.cwd();
+    const startTime = Date.now();
+    
+    console.log('');
+    log.info('╔═══════════════════════════════════════════════════════════╗');
+    log.info('║            🔒 anchi-kit Secret Scanner                    ║');
+    log.info('╚═══════════════════════════════════════════════════════════╝');
+    console.log('');
+    
+    log.gray(`📁 Scanning: ${scanPath}`);
+    console.log('');
+    
+    // Run scan
+    const fs = require('fs');
+    let findings = [];
+    
+    try {
+        const stats = fs.statSync(scanPath);
+        if (stats.isFile()) {
+            const { scanFile } = require('../lib/secretScanner');
+            findings = scanFile(scanPath);
+        } else if (stats.isDirectory()) {
+            findings = scanDirectory(scanPath);
+        } else {
+            log.error(`❌ Invalid path: ${scanPath}`);
+            return 1;
+        }
+    } catch (err) {
+        log.error(`❌ Error scanning path: ${err.message}`);
+        return 1;
+    }
+    const duration = ((Date.now() - startTime) / 1000).toFixed(2);
+    
+    // Output results
+    console.log(formatFindings(findings));
+    
+    // Summary
+    const stats = getSeverityStats(findings);
+    
+    console.log('');
+    log.info('📊 Scan Summary');
+    console.log('─'.repeat(40));
+    
+    if (stats.critical > 0) {
+        log.error(`   🔴 Critical: ${stats.critical}`);
+    }
+    if (stats.high > 0) {
+        log.warn(`   🟠 High: ${stats.high}`);
+    }
+    if (stats.medium > 0) {
+        log.info(`   🟡 Medium: ${stats.medium}`);
+    }
+    
+    console.log(`   ⏱️  Duration: ${duration}s`);
+    console.log('');
+    
+    if (stats.total === 0) {
+        log.success('✅ No secrets detected - your code is clean!');
+    } else {
+        log.error(`⚠️  Found ${stats.total} potential secret(s)`);
+        log.warn('   Please review and move to .env file');
+    }
+    
+    console.log('');
+    
+    // Return exit code based on findings
+    return stats.total > 0 ? 1 : 0;
+}
+
+module.exports = { scan };