audit-tools 0.28.0

package/package.json

@@ -0,0 +1,104 @@
+{
+  "name": "audit-tools",
+  "version": "0.28.0",
+  "private": false,
+  "description": "Portable hybrid code auditing + remediation orchestrators for arbitrary repositories.",
+  "type": "module",
+  "bin": {
+    "audit-code": "audit-code.mjs",
+    "remediate-code": "remediate-code.mjs"
+  },
+  "exports": {
+    "./shared": {
+      "types": "./dist/shared/index.d.ts",
+      "default": "./dist/shared/index.js"
+    },
+    "./shared/*": {
+      "types": "./dist/shared/*.d.ts",
+      "default": "./dist/shared/*.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist/**",
+    "audit-code.mjs",
+    "audit-code-wrapper-*.mjs",
+    "remediate-code.mjs",
+    "dispatch/**",
+    "schemas/**",
+    "templates/**",
+    "skills/**",
+    "scripts/postinstall.mjs",
+    "scripts/audit/postinstall.mjs",
+    "scripts/remediate/postinstall.mjs",
+    "opencode.json",
+    "README.md",
+    "docs/audit-pkg/**"
+  ],
+  "scripts": {
+    "postinstall": "node scripts/postinstall.mjs",
+    "build": "tsc -p tsconfig.json",
+    "check": "tsc -p tsconfig.json --noEmit",
+    "test": "npm run build && npm run test:node && npm run test:remediate",
+    "test:node": "node --import tsx/esm --test tests/shared/*.test.mjs tests/audit/*.test.mjs",
+    "test:audit": "npm run build && node --import tsx/esm --test tests/audit/*.test.mjs",
+    "test:shared": "npm run build && node --import tsx/esm --test tests/shared/*.test.mjs",
+    "test:remediate": "vitest run",
+    "test:single": "npm run build && node --import tsx/esm --test",
+    "verify:release": "npm run check && npm test && npm run smoke:linked-audit-code && npm run smoke:packaged-audit-code && npm run smoke:linked-remediate-code && npm run smoke:packaged-remediate-code",
+    "smoke:linked-audit-code": "node scripts/audit/smoke-linked-audit-code.mjs",
+    "smoke:packaged-audit-code": "node scripts/audit/smoke-packaged-audit-code.mjs",
+    "smoke:linked-remediate-code": "node scripts/remediate/smoke-linked-remediate-code.mjs",
+    "smoke:packaged-remediate-code": "node scripts/remediate/smoke-packaged-remediate-code.mjs",
+    "update-languages": "node scripts/audit/update-languages.mjs",
+    "generate-schemas": "node scripts/audit/generate-schemas.mjs",
+    "fixtures:auditor-contract": "node scripts/remediate/generate-auditor-contract-fixture.mjs",
+    "release:patch:publish": "node scripts/release-and-publish.mjs patch",
+    "release:minor:publish": "node scripts/release-and-publish.mjs minor",
+    "release:major:publish": "node scripts/release-and-publish.mjs major",
+    "release:patch": "node scripts/release-and-publish.mjs patch --bump-only",
+    "release:minor": "node scripts/release-and-publish.mjs minor --bump-only",
+    "release:major": "node scripts/release-and-publish.mjs major --bump-only",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm run verify:release"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "commander": "^13.0.0",
+    "smol-toml": "^1.6.1",
+    "yaml": "^2.9.0",
+    "zod": "^3.25.76"
+  },
+  "devDependencies": {
+    "@types/node": "^24.3.0",
+    "linguist-languages": "^9.3.2",
+    "tree-sitter-wasms": "^0.1.13",
+    "tsx": "^4.19.0",
+    "typescript": "^5.9.2",
+    "vitest": "^3.0.0",
+    "web-tree-sitter": "^0.25.10",
+    "zod-to-json-schema": "^3.24.6"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/OhOkThisIsFine/audit-tools.git"
+  },
+  "homepage": "https://github.com/OhOkThisIsFine/audit-tools#readme",
+  "bugs": {
+    "url": "https://github.com/OhOkThisIsFine/audit-tools/issues"
+  },
+  "keywords": [
+    "audit",
+    "remediation",
+    "cli",
+    "code-audit",
+    "static-analysis",
+    "orchestration",
+    "agents"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/remediate-code.mjs

@@ -0,0 +1,116 @@
+#!/usr/bin/env node
+// Thin wrapper: locates the built dist and delegates to it.
+// Supports: run, install, ensure, validate
+
+import { fileURLToPath } from "url";
+import { pathToFileURL } from "url";
+import { dirname, join } from "path";
+import { existsSync, readdirSync, statSync } from "fs";
+import { spawnSync } from "child_process";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const distEntry = join(__dirname, "dist", "remediate", "index.js");
+const sourceRoot = join(__dirname, "src");
+const tsconfigPath = join(__dirname, "tsconfig.json");
+
+function newestMtimeMs(path) {
+  const stats = statSync(path);
+  if (!stats.isDirectory()) return stats.mtimeMs;
+  let newest = stats.mtimeMs;
+  for (const entry of readdirSync(path, { withFileTypes: true })) {
+    const child = join(path, entry.name);
+    if (entry.isDirectory()) {
+      newest = Math.max(newest, newestMtimeMs(child));
+    } else if (entry.isFile()) {
+      newest = Math.max(newest, statSync(child).mtimeMs);
+    }
+  }
+  return newest;
+}
+
+function shouldBuildDist() {
+  if (!existsSync(sourceRoot)) {
+    return false;
+  }
+  if (!existsSync(tsconfigPath)) {
+    return !existsSync(distEntry);
+  }
+  if (!existsSync(distEntry)) {
+    return true;
+  }
+  return statSync(distEntry).mtimeMs < Math.max(
+    newestMtimeMs(sourceRoot),
+    statSync(tsconfigPath).mtimeMs,
+  );
+}
+
+function ensureBuilt() {
+  if (!shouldBuildDist()) return;
+  const result =
+    process.platform === "win32"
+      ? spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", "npm run build"], {
+          cwd: __dirname,
+          encoding: "utf8",
+          stdio: ["ignore", "pipe", "pipe"],
+        })
+      : spawnSync("npm", ["run", "build"], {
+          cwd: __dirname,
+          encoding: "utf8",
+          stdio: ["ignore", "pipe", "pipe"],
+        });
+  if (result.stdout) process.stderr.write(result.stdout);
+  if (result.stderr) process.stderr.write(result.stderr);
+  if (result.error) {
+    console.error(`remediate-code: failed to auto-build dist (${result.error.message})`);
+  }
+  if (result.status !== 0 || result.signal) {
+    applyWrapperExitAction(getWrapperExitAction(result));
+  }
+}
+
+export function getWrapperExitAction(result, platform = process.platform) {
+  if (result.signal) {
+    return platform === "win32"
+      ? { type: "exit", code: 1 }
+      : { type: "signal", signal: result.signal };
+  }
+  return { type: "exit", code: result.status ?? 1 };
+}
+
+export function applyWrapperExitAction(
+  action,
+  {
+    kill = process.kill,
+    exit = process.exit,
+    setExitFallback = setTimeout,
+  } = {},
+) {
+  if (action.type === "signal") {
+    try {
+      kill(process.pid, action.signal);
+    } catch {
+      exit(1);
+      return;
+    }
+    setExitFallback(() => exit(1), 1000);
+    return;
+  }
+  exit(action.code);
+}
+
+export function main(argv = process.argv.slice(2)) {
+  ensureBuilt();
+  if (!existsSync(distEntry)) {
+    console.error("remediate-code: dist/remediate/index.js not found. Run: npm run build");
+    process.exit(1);
+  }
+
+  const result = spawnSync(process.execPath, ["--no-warnings", distEntry, ...argv], {
+    stdio: "inherit",
+  });
+  applyWrapperExitAction(getWrapperExitAction(result));
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
+  main();
+}