bilt-toolkit 1.0.0

package/dist/commands/fix.js

@@ -0,0 +1,273 @@
+// ─── Fix Command ─────────────────────────────────────────────────────────────
+// Scans for issues, generates fix actions, and applies them interactively.
+import path from "node:path";
+import chalk from "chalk";
+import Enquirer from "enquirer";
+import { promises as fs } from "node:fs";
+import { executeScan } from "./scan.js";
+import { loadConfig } from "../config/config.js";
+import { createSnapshot } from "../core/fix/snapshot.js";
+import { addToGitignore, generateEnvExample, addMissingEnvVars, } from "../core/fix/env-fix.js";
+import { requireTypedConfirmation, requireSimpleConfirmation, } from "../core/fix/confirm.js";
+import { reportFixPreview, reportFixComplete } from "../ui/reporter.js";
+import { parseEnvFile } from "../core/scan/env.js";
+import { SECRET_RULES } from "../core/rules/secret-rules.js";
+/**
+ * Execute the `bilt fix` command.
+ *
+ * 1. Run scan to find issues
+ * 2. Generate fix actions
+ * 3. Apply fixes (auto for --safe, preview for --dry-run, interactive otherwise)
+ * 4. Create snapshot before applying
+ * 5. Report results
+ */
+export async function executeFix(projectDir, options = {}) {
+    const rootDir = path.resolve(projectDir);
+    const config = await loadConfig(rootDir);
+    // ── Run scan ────────────────────────────────────────────────────────
+    const result = await executeScan(rootDir, {
+        quiet: true,
+    });
+    if (result.findings.length === 0) {
+        console.log("");
+        console.log(chalk.green.bold("  ✨ No issues found — nothing to fix!"));
+        console.log("");
+        return;
+    }
+    // ── Generate fix actions ────────────────────────────────────────────
+    const actions = await generateFixActions(rootDir, result.findings);
+    if (actions.length === 0) {
+        console.log("");
+        console.log(chalk.yellow("  ⚠ Issues found but no automated fixes available. Review manually."));
+        console.log("");
+        return;
+    }
+    // ── Dry-run: preview only ───────────────────────────────────────────
+    if (options.dryRun) {
+        reportFixPreview(actions);
+        console.log(chalk.dim("  (Dry run — no changes applied)"));
+        console.log("");
+        return;
+    }
+    // ── Create snapshot before modifying files ──────────────────────────
+    const affectedFiles = new Set();
+    for (const action of actions) {
+        // Extract file from finding ID heuristic
+        affectedFiles.add(".gitignore");
+        affectedFiles.add(".env");
+        affectedFiles.add(".env.example");
+    }
+    try {
+        await createSnapshot([...affectedFiles].map((f) => path.join(rootDir, f)), `Pre-fix snapshot (${actions.length} fixes)`, rootDir);
+    }
+    catch {
+        // Snapshot creation failure shouldn't block fixes
+    }
+    // ── Safe mode: auto-apply safe fixes only ───────────────────────────
+    if (options.safe) {
+        const safeActions = actions.filter((a) => a.type === "safe");
+        if (safeActions.length === 0) {
+            console.log("");
+            console.log(chalk.yellow("  ⚠ No safe fixes available. Run without --safe for interactive mode."));
+            console.log("");
+            return;
+        }
+        reportFixPreview(safeActions);
+        let applied = 0;
+        let skipped = 0;
+        for (const action of safeActions) {
+            try {
+                const success = await action.apply();
+                if (success) {
+                    applied++;
+                    if (options.verbose) {
+                        console.log(chalk.green(`    ✓ ${action.description}`));
+                    }
+                }
+                else {
+                    skipped++;
+                }
+            }
+            catch (error) {
+                skipped++;
+                if (options.verbose) {
+                    const msg = error instanceof Error ? error.message : String(error);
+                    console.log(chalk.red(`    ✗ Failed: ${action.description} (${msg})`));
+                }
+            }
+        }
+        reportFixComplete(applied, skipped);
+        return;
+    }
+    // ── Interactive mode ────────────────────────────────────────────────
+    reportFixPreview(actions);
+    let applied = 0;
+    let skipped = 0;
+    for (const action of actions) {
+        console.log("");
+        console.log(chalk.bold(`  ${action.description}`));
+        if (action.preview) {
+            console.log(chalk.dim(`  ${action.preview}`));
+        }
+        let shouldApply = false;
+        if (action.type === "safe") {
+            shouldApply = await requireSimpleConfirmation(action);
+        }
+        else if (action.type === "destructive") {
+            shouldApply = await requireSimpleConfirmation(action);
+        }
+        else {
+            // Irreversible — require typed confirmation
+            shouldApply = await requireTypedConfirmation(action, "confirm");
+        }
+        if (shouldApply) {
+            try {
+                const success = await action.apply();
+                if (success) {
+                    applied++;
+                    console.log(chalk.green("    ✓ Applied"));
+                }
+                else {
+                    skipped++;
+                    console.log(chalk.yellow("    ⏭  Skipped (failed to apply)"));
+                }
+            }
+            catch (error) {
+                skipped++;
+                const msg = error instanceof Error ? error.message : String(error);
+                console.log(chalk.red(`    ✗ Error: ${msg}`));
+            }
+        }
+        else {
+            skipped++;
+            console.log(chalk.dim("    ⏭  Skipped"));
+        }
+    }
+    reportFixComplete(applied, skipped);
+}
+// ─── Fix Action Generator ────────────────────────────────────────────────────
+/**
+ * Generate fix actions from scan findings.
+ */
+async function generateFixActions(rootDir, findings) {
+    const actions = [];
+    const addedTypes = new Set();
+    const config = await loadConfig(rootDir);
+    for (const finding of findings) {
+        switch (finding.category) {
+            case "gitignore-missing": {
+                if (!addedTypes.has("gitignore")) {
+                    addedTypes.add("gitignore");
+                    actions.push({
+                        id: `fix-gitignore-${Date.now()}`,
+                        description: "Add .env patterns to .gitignore",
+                        type: "safe",
+                        findingId: finding.id,
+                        preview: "Will append .env, .env.*, .env.local to .gitignore",
+                        apply: async () => {
+                            const gitignorePath = path.join(rootDir, ".gitignore");
+                            const newContent = await addToGitignore([".env", ".env.*", ".env.local", ".env.*.local", ".bilt/"], gitignorePath);
+                            await fs.writeFile(gitignorePath, newContent, "utf-8");
+                            return true;
+                        },
+                    });
+                }
+                break;
+            }
+            case "env-missing": {
+                const key = finding.message.match(/["']([^"']+)["']/)?.[1] ??
+                    finding.message.match(/`([^`]+)`/)?.[1] ??
+                    finding.message.match(/(\w+)/)?.[1];
+                if (key && !addedTypes.has(`env-missing-${key}`)) {
+                    addedTypes.add(`env-missing-${key}`);
+                    actions.push({
+                        id: `fix-env-missing-${key}-${Date.now()}`,
+                        description: `Add missing env var ${key} to ${finding.file}`,
+                        type: "safe",
+                        findingId: finding.id,
+                        preview: `Will append ${key}= to ${finding.file}`,
+                        apply: async () => {
+                            const envFilePath = path.join(rootDir, finding.file);
+                            let content = "";
+                            try {
+                                content = await fs.readFile(envFilePath, "utf-8");
+                            }
+                            catch { }
+                            const newContent = addMissingEnvVars(content, [key]);
+                            await fs.writeFile(envFilePath, newContent, "utf-8");
+                            return true;
+                        },
+                    });
+                }
+                break;
+            }
+            case "env-mismatch": {
+                if (!addedTypes.has("env-example")) {
+                    addedTypes.add("env-example");
+                    actions.push({
+                        id: `fix-env-example-${Date.now()}`,
+                        description: "Generate .env.example with all required keys",
+                        type: "safe",
+                        findingId: finding.id,
+                        preview: "Will create .env.example with placeholder values",
+                        apply: async () => {
+                            const envFilePath = path.join(rootDir, ".env");
+                            let content = "";
+                            try {
+                                content = await fs.readFile(envFilePath, "utf-8");
+                            }
+                            catch {
+                                return false;
+                            }
+                            const parsed = parseEnvFile(content, envFilePath);
+                            const exampleContent = generateEnvExample(parsed, SECRET_RULES, config.entropyThreshold);
+                            await fs.writeFile(path.join(rootDir, ".env.example"), exampleContent, "utf-8");
+                            return true;
+                        },
+                    });
+                }
+                break;
+            }
+            case "secret-detected": {
+                // Secrets can't be auto-fixed — provide guidance
+                actions.push({
+                    id: `fix-secret-${finding.id}`,
+                    description: `Remove secret from ${finding.file}${finding.line ? `:${finding.line}` : ""}`,
+                    type: "destructive",
+                    findingId: finding.id,
+                    preview: finding.suggestion ??
+                        "Move secret to env var and add to .gitignore",
+                    apply: async () => {
+                        // We can't auto-remove secrets safely — this needs manual review
+                        // But we can offer to add the file to .gitignore
+                        console.log(chalk.yellow(`    ℹ  Please manually remove the secret from ${finding.file}`));
+                        console.log(chalk.dim(`    Move the value to a .env file and reference it via an environment variable.`));
+                        return true;
+                    },
+                });
+                break;
+            }
+            case "framework-warning":
+            case "env-exposed": {
+                actions.push({
+                    id: `fix-exposed-${finding.id}`,
+                    description: `Review client-exposed secret in ${finding.file}`,
+                    type: "destructive",
+                    findingId: finding.id,
+                    preview: finding.suggestion ??
+                        "Ensure this env var should be exposed to the client bundle",
+                    apply: async () => {
+                        console.log(chalk.yellow(`    ℹ  Review ${finding.file} — this value is exposed to the client.`));
+                        return true;
+                    },
+                });
+                break;
+            }
+            default:
+                // No auto-fix available for this category
+                break;
+        }
+    }
+    return actions;
+}
+//# sourceMappingURL=fix.js.map

package/dist/commands/fix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix.js","sourceRoot":"","sources":["../../src/commands/fix.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAE3E,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAAkB,EAClB,OAAO,GAAe,EAAE;IAExB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAEzC,uEAAuE;IACvE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE;QACxC,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEnE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,qEAAqE,CACtE,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,yCAAyC;QACzC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,CAClB,CAAC,GAAG,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EACpD,qBAAqB,OAAO,CAAC,MAAM,SAAS,EAC5C,OAAO,CACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IAED,uEAAuE;IACvE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC7D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,uEAAuE,CACxE,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAE9B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrC,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,EAAE,CAAC;oBACV,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;wBACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;oBAC1D,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACnE,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,WAAW,KAAK,GAAG,GAAG,CAAC,CAC1D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE1B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,WAAW,GAAG,KAAK,CAAC;QAExB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,WAAW,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACzC,WAAW,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,4CAA4C;YAC5C,WAAW,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrC,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;gBAC5C,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,gFAAgF;AAEhF;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,QAAuB;IAEvB,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAEzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,mBAAmB,EAAE,CAAC;gBACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;oBACjC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBAC5B,OAAO,CAAC,IAAI,CAAC;wBACX,EAAE,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE;wBACjC,WAAW,EAAE,iCAAiC;wBAC9C,IAAI,EAAE,MAAM;wBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,OAAO,EAAE,oDAAoD;wBAC7D,KAAK,EAAE,KAAK,IAAI,EAAE;4BAChB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;4BACvD,MAAM,UAAU,GAAG,MAAM,cAAc,CACrC,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,EAC1D,aAAa,CACd,CAAC;4BACF,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;4BACvD,OAAO,IAAI,CAAC;wBACd,CAAC;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,aAAa,EAAE,CAAC;gBACnB,MAAM,GAAG,GACP,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC9C,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;oBACvC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAEtC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC;oBACjD,UAAU,CAAC,GAAG,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;oBACrC,OAAO,CAAC,IAAI,CAAC;wBACX,EAAE,EAAE,mBAAmB,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;wBAC1C,WAAW,EAAE,uBAAuB,GAAG,OAAO,OAAO,CAAC,IAAI,EAAE;wBAC5D,IAAI,EAAE,MAAM;wBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,OAAO,EAAE,eAAe,GAAG,QAAQ,OAAO,CAAC,IAAI,EAAE;wBACjD,KAAK,EAAE,KAAK,IAAI,EAAE;4BAChB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;4BACrD,IAAI,OAAO,GAAG,EAAE,CAAC;4BACjB,IAAI,CAAC;gCACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;4BACpD,CAAC;4BAAC,MAAM,CAAC,CAAA,CAAC;4BACV,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;4BACrD,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;4BACrD,OAAO,IAAI,CAAC;wBACd,CAAC;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,cAAc,EAAE,CAAC;gBACpB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;oBACnC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC;wBACX,EAAE,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,EAAE;wBACnC,WAAW,EAAE,8CAA8C;wBAC3D,IAAI,EAAE,MAAM;wBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,OAAO,EAAE,kDAAkD;wBAC3D,KAAK,EAAE,KAAK,IAAI,EAAE;4BAChB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;4BAC/C,IAAI,OAAO,GAAG,EAAE,CAAC;4BACjB,IAAI,CAAC;gCACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;4BACpD,CAAC;4BAAC,MAAM,CAAC;gCACP,OAAO,KAAK,CAAC;4BACf,CAAC;4BACD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;4BAClD,MAAM,cAAc,GAAG,kBAAkB,CACvC,MAAM,EACN,YAAY,EACZ,MAAM,CAAC,gBAAgB,CACxB,CAAC;4BACF,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAClC,cAAc,EACd,OAAO,CACR,CAAC;4BACF,OAAO,IAAI,CAAC;wBACd,CAAC;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,iBAAiB,EAAE,CAAC;gBACvB,iDAAiD;gBACjD,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,cAAc,OAAO,CAAC,EAAE,EAAE;oBAC9B,WAAW,EAAE,sBAAsB,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC1F,IAAI,EAAE,aAAa;oBACnB,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,OAAO,EACL,OAAO,CAAC,UAAU;wBAClB,8CAA8C;oBAChD,KAAK,EAAE,KAAK,IAAI,EAAE;wBAChB,iEAAiE;wBACjE,iDAAiD;wBACjD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,iDAAiD,OAAO,CAAC,IAAI,EAAE,CAChE,CACF,CAAC;wBACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,iFAAiF,CAClF,CACF,CAAC;wBACF,OAAO,IAAI,CAAC;oBACd,CAAC;iBACF,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YAED,KAAK,mBAAmB,CAAC;YACzB,KAAK,aAAa,EAAE,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,eAAe,OAAO,CAAC,EAAE,EAAE;oBAC/B,WAAW,EAAE,mCAAmC,OAAO,CAAC,IAAI,EAAE;oBAC9D,IAAI,EAAE,aAAa;oBACnB,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,OAAO,EACL,OAAO,CAAC,UAAU;wBAClB,4DAA4D;oBAC9D,KAAK,EAAE,KAAK,IAAI,EAAE;wBAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,iBAAiB,OAAO,CAAC,IAAI,yCAAyC,CACvE,CACF,CAAC;wBACF,OAAO,IAAI,CAAC;oBACd,CAAC;iBACF,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YAED;gBACE,0CAA0C;gBAC1C,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Execute the `bilt init` command.
+ *
+ * 1. Print welcome banner
+ * 2. Run full scan
+ * 3. Create snapshot
+ * 4. Auto-fix safe issues (.gitignore, .env.example)
+ * 5. Report results with the beautiful health card
+ */
+export declare function executeInit(projectDir: string): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAgBA;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyGnE"}

package/dist/commands/init.js

@@ -0,0 +1,101 @@
+// ─── Init Command ────────────────────────────────────────────────────────────
+// Zero-friction onboarding: scan, auto-fix safe issues, show health card.
+import path from "node:path";
+import chalk from "chalk";
+import boxen from "boxen";
+import { promises as fs } from "node:fs";
+import { executeScan } from "./scan.js";
+import { createSnapshot } from "../core/fix/snapshot.js";
+import { addToGitignore, generateEnvExample } from "../core/fix/env-fix.js";
+import { checkEnvFilesIgnoredWithGit } from "../core/scan/gitignore.js";
+import { findEnvFiles, parseEnvFile } from "../core/scan/env.js";
+import { reportInitComplete } from "../ui/reporter.js";
+import { SECRET_RULES } from "../core/rules/secret-rules.js";
+import { loadConfig } from "../config/config.js";
+/**
+ * Execute the `bilt init` command.
+ *
+ * 1. Print welcome banner
+ * 2. Run full scan
+ * 3. Create snapshot
+ * 4. Auto-fix safe issues (.gitignore, .env.example)
+ * 5. Report results with the beautiful health card
+ */
+export async function executeInit(projectDir) {
+    const rootDir = path.resolve(projectDir);
+    const config = await loadConfig(rootDir);
+    // ── Welcome banner ──────────────────────────────────────────────────
+    const banner = boxen(`\n${chalk.bold.cyan("  🏗️  BILT — Project Health Toolkit")}\n\n` +
+        chalk.dim("  Zero-configuration setup. One command to a healthy repo.\n"), {
+        padding: 0,
+        margin: { top: 1, bottom: 0, left: 1, right: 1 },
+        borderStyle: "round",
+        borderColor: "cyan",
+    });
+    console.log(banner);
+    console.log("");
+    // ── Run full scan ───────────────────────────────────────────────────
+    const result = await executeScan(rootDir, {
+        quiet: false,
+        fun: true,
+    });
+    // ── Snapshot before fixes ───────────────────────────────────────────
+    let fixesApplied = 0;
+    // Determine what safe fixes we can apply
+    const envFiles = await findEnvFiles(rootDir);
+    const envRelativePaths = envFiles.map((f) => path.relative(rootDir, f));
+    // Collect files to snapshot
+    const filesToSnapshot = [".gitignore", ...envRelativePaths];
+    try {
+        await createSnapshot(filesToSnapshot.map((f) => path.join(rootDir, f)), "Pre-init snapshot", rootDir);
+    }
+    catch {
+        // Snapshot creation failed — proceed anyway
+    }
+    // ── Auto-fix: .gitignore entries ────────────────────────────────────
+    let gitignoreContent = "";
+    try {
+        gitignoreContent = await fs.readFile(path.join(rootDir, ".gitignore"), "utf-8");
+    }
+    catch { }
+    const gitignoreFindings = await checkEnvFilesIgnoredWithGit(rootDir, envFiles);
+    if (gitignoreFindings.length > 0) {
+        try {
+            const envPatterns = [
+                ".env",
+                ".env.*",
+                ".env.local",
+                ".env.*.local",
+                ".bilt/",
+            ];
+            const gitignorePath = path.join(rootDir, ".gitignore");
+            const newContent = await addToGitignore(envPatterns, gitignorePath);
+            await fs.writeFile(gitignorePath, newContent, "utf-8");
+            fixesApplied++;
+            console.log(chalk.green("  ✅ Added .env patterns to .gitignore"));
+        }
+        catch {
+            // Failed to update .gitignore — non-critical
+        }
+    }
+    // ── Auto-fix: generate .env.example ─────────────────────────────────
+    if (envFiles.length > 0) {
+        try {
+            const envFilePath = envFiles[0];
+            const envContent = await fs.readFile(envFilePath, "utf-8");
+            const parsed = parseEnvFile(envContent, envFilePath);
+            const exampleContent = generateEnvExample(parsed, SECRET_RULES, config.entropyThreshold);
+            await fs.writeFile(path.join(rootDir, ".env.example"), exampleContent, "utf-8");
+            fixesApplied++;
+            console.log(chalk.green("  ✅ Generated .env.example"));
+        }
+        catch {
+            // Failed to generate .env.example — non-critical
+        }
+    }
+    // ── Re-run scan to get updated results ──────────────────────────────
+    const updatedResult = fixesApplied > 0 ? await executeScan(rootDir, { quiet: true }) : result;
+    // ── Report ──────────────────────────────────────────────────────────
+    reportInitComplete(updatedResult, fixesApplied);
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,0EAA0E;AAE1E,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAAkB;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAEzC,uEAAuE;IACvE,MAAM,MAAM,GAAG,KAAK,CAClB,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,MAAM;QAChE,KAAK,CAAC,GAAG,CAAC,8DAA8D,CAAC,EAC3E;QACE,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAChD,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,MAAM;KACpB,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,uEAAuE;IACvE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE;QACxC,KAAK,EAAE,KAAK;QACZ,GAAG,EAAE,IAAI;KACV,CAAC,CAAC;IAEH,uEAAuE;IACvE,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,yCAAyC;IACzC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAExE,4BAA4B;IAC5B,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,GAAG,gBAAgB,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,cAAc,CAClB,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EACjD,mBAAmB,EACnB,OAAO,CACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,uEAAuE;IACvE,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,gBAAgB,GAAG,MAAM,EAAE,CAAC,QAAQ,CAClC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAChC,OAAO,CACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,MAAM,iBAAiB,GAAG,MAAM,2BAA2B,CACzD,OAAO,EACP,QAAQ,CACT,CAAC;IAEF,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG;gBAClB,MAAM;gBACN,QAAQ;gBACR,YAAY;gBACZ,cAAc;gBACd,QAAQ;aACT,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YACpE,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YACvD,YAAY,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YACjC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACrD,MAAM,cAAc,GAAG,kBAAkB,CACvC,MAAM,EACN,YAAY,EACZ,MAAM,CAAC,gBAAgB,CACxB,CAAC;YACF,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAClC,cAAc,EACd,OAAO,CACR,CAAC;YACF,YAAY,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,MAAM,aAAa,GACjB,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE1E,uEAAuE;IACvE,kBAAkB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AAClD,CAAC"}

package/dist/commands/scan.d.ts

@@ -0,0 +1,17 @@
+import type { ScanResult, ScanOptions } from "../types/index.js";
+/**
+ * Execute a full project scan, returning a ScanResult.
+ *
+ * 1. Load config
+ * 2. Find & parse .env files
+ * 3. Detect env mismatches (missing/unused vars)
+ * 4. Check .gitignore coverage
+ * 5. Scan working tree for secrets
+ * 6. Scan git history for secrets
+ * 7. Detect framework & client-exposed secrets
+ * 8. Run plugins
+ * 9. Calculate health score
+ * 10. Report results
+ */
+export declare function executeScan(projectDir: string, options?: ScanOptions): Promise<ScanResult>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/commands/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,UAAU,EAEV,WAAW,EAGZ,MAAM,mBAAmB,CAAC;AA0B3B;;;;;;;;;;;;;GAaG;AACH,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,UAAU,CAAC,CAyRrB"}