bilt-toolkit 1.0.0

package/dist/commands/scan.js

@@ -0,0 +1,267 @@
+// ─── Scan Command ────────────────────────────────────────────────────────────
+// Orchestrates all scanning passes and produces a unified ScanResult.
+import path from "node:path";
+import { promises as fs } from "node:fs";
+import fg from "fast-glob";
+import { loadConfig } from "../config/config.js";
+import { parseEnvFile, findEnvFiles, diffEnvFiles, scanCodeForEnvRefs, findMissingEnvVars, findUnusedEnvVars, } from "../core/scan/env.js";
+import { checkEnvFilesIgnoredWithGit } from "../core/scan/gitignore.js";
+import { scanFileForSecrets, scanGitHistory } from "../core/scan/secrets.js";
+import { detectFramework, checkClientExposedSecrets, } from "../core/scan/framework.js";
+import { calculateHealthScore } from "../core/score/health.js";
+import { loadPlugins } from "../plugins/loader.js";
+import { createPluginContext } from "../plugins/interface.js";
+import { SECRET_RULES } from "../core/rules/secret-rules.js";
+import { reportScanStart, reportScanProgress, reportScanResults, } from "../ui/reporter.js";
+/**
+ * Execute a full project scan, returning a ScanResult.
+ *
+ * 1. Load config
+ * 2. Find & parse .env files
+ * 3. Detect env mismatches (missing/unused vars)
+ * 4. Check .gitignore coverage
+ * 5. Scan working tree for secrets
+ * 6. Scan git history for secrets
+ * 7. Detect framework & client-exposed secrets
+ * 8. Run plugins
+ * 9. Calculate health score
+ * 10. Report results
+ */
+export async function executeScan(projectDir, options = {}) {
+    const start = Date.now();
+    const rootDir = path.resolve(projectDir);
+    const config = await loadConfig(rootDir);
+    const findings = [];
+    // Start spinner unless quiet mode
+    const spinner = options.quiet ? null : reportScanStart(rootDir);
+    try {
+        // ── 1. Find & parse .env files ──────────────────────────────────────
+        if (spinner)
+            reportScanProgress(spinner, "Parsing .env files…");
+        const envFiles = await findEnvFiles(rootDir);
+        const parsedEnvFiles = [];
+        for (const envFile of envFiles) {
+            try {
+                const content = await fs.readFile(envFile, "utf-8");
+                const parsed = parseEnvFile(content, envFile);
+                parsedEnvFiles.push(parsed);
+            }
+            catch {
+                // Skip unreadable files
+            }
+        }
+        // ── 2. Env mismatch detection ───────────────────────────────────────
+        if (spinner)
+            reportScanProgress(spinner, "Checking env variable usage…");
+        // Find code files
+        const codeFiles = await fg(["**/*.ts", "**/*.js", "**/*.tsx", "**/*.jsx", "**/*.py", "**/*.rb"], {
+            cwd: rootDir,
+            ignore: config.ignore,
+            onlyFiles: true,
+            absolute: true,
+        });
+        // Scan code for env references and missing vars
+        const envRefs = new Set();
+        const primaryEnv = parsedEnvFiles[0];
+        const definedKeys = primaryEnv ? [...primaryEnv.entries.keys()] : [];
+        for (const codeFile of codeFiles) {
+            try {
+                const content = await fs.readFile(codeFile, "utf-8");
+                const refs = scanCodeForEnvRefs(content, codeFile);
+                for (const ref of refs)
+                    envRefs.add(ref);
+                if (primaryEnv) {
+                    const missingFindings = findMissingEnvVars(refs, definedKeys, path.relative(rootDir, codeFile));
+                    findings.push(...missingFindings);
+                }
+            }
+            catch {
+                // Skip unreadable files
+            }
+        }
+        // Compare env files to find mismatches
+        if (parsedEnvFiles.length >= 2) {
+            const diffFindings = diffEnvFiles(parsedEnvFiles);
+            findings.push(...diffFindings);
+        }
+        // Find unused env vars
+        if (primaryEnv) {
+            const unusedFindings = findUnusedEnvVars([...envRefs], [...primaryEnv.entries.values()], path.relative(rootDir, primaryEnv.filePath));
+            findings.push(...unusedFindings);
+        }
+        // ── 3. Check .gitignore coverage ────────────────────────────────────
+        if (spinner)
+            reportScanProgress(spinner, "Checking .gitignore…");
+        let gitignoreContent = "";
+        try {
+            gitignoreContent = await fs.readFile(path.join(rootDir, ".gitignore"), "utf-8");
+        }
+        catch { }
+        const gitignoreFindings = await checkEnvFilesIgnoredWithGit(rootDir, envFiles);
+        findings.push(...gitignoreFindings);
+        // ── 4. Scan working tree for secrets ────────────────────────────────
+        if (spinner)
+            reportScanProgress(spinner, "Scanning for secrets…");
+        const scanTargets = await fg(["**/*"], {
+            cwd: rootDir,
+            ignore: config.ignore,
+            onlyFiles: true,
+        });
+        // Filter to text-like files only
+        const textExtensions = new Set([
+            ".ts",
+            ".js",
+            ".tsx",
+            ".jsx",
+            ".mjs",
+            ".cjs",
+            ".py",
+            ".rb",
+            ".go",
+            ".rs",
+            ".java",
+            ".kt",
+            ".json",
+            ".yaml",
+            ".yml",
+            ".toml",
+            ".xml",
+            ".env",
+            ".cfg",
+            ".conf",
+            ".ini",
+            ".properties",
+            ".sh",
+            ".bash",
+            ".zsh",
+            ".fish",
+            ".tf",
+            ".hcl",
+            ".dockerfile",
+            ".md",
+            ".txt",
+            ".csv",
+        ]);
+        let scannedFiles = 0;
+        for (const file of scanTargets) {
+            const ext = path.extname(file).toLowerCase();
+            const basename = path.basename(file).toLowerCase();
+            // Include dotfiles like .env, .env.local etc.
+            const isEnvFile = basename.startsWith(".env");
+            if (!isEnvFile && !textExtensions.has(ext) && ext !== "")
+                continue;
+            const fullPath = path.join(rootDir, file);
+            try {
+                const stat = await fs.stat(fullPath);
+                // Skip files > 1MB
+                if (stat.size > 1_048_576)
+                    continue;
+                const content = await fs.readFile(fullPath, "utf-8");
+                const secretFindings = scanFileForSecrets(content, file, SECRET_RULES, config.entropyThreshold);
+                findings.push(...secretFindings);
+                scannedFiles++;
+            }
+            catch {
+                // Skip binary/unreadable files
+            }
+        }
+        // ── 5. Scan git history ─────────────────────────────────────────────
+        if (spinner)
+            reportScanProgress(spinner, "Scanning git history…");
+        try {
+            const depth = options.fullHistory ? undefined : config.historyDepth;
+            const historyFindings = await scanGitHistory(rootDir, SECRET_RULES, config.entropyThreshold, depth);
+            findings.push(...historyFindings);
+        }
+        catch {
+            // Not a git repo or git not available — skip
+        }
+        // ── 6. Detect framework & client-exposed secrets ────────────────────
+        if (spinner)
+            reportScanProgress(spinner, "Detecting framework…");
+        let framework;
+        try {
+            const detected = await detectFramework(rootDir);
+            framework = detected || undefined;
+            if (framework && parsedEnvFiles.length > 0) {
+                const exposedFindings = checkClientExposedSecrets(parsedEnvFiles, framework, SECRET_RULES, config.entropyThreshold);
+                findings.push(...exposedFindings);
+            }
+        }
+        catch {
+            // Framework detection failed — non-critical
+        }
+        // ── 7. Load and run plugins ─────────────────────────────────────────
+        if (spinner)
+            reportScanProgress(spinner, "Running plugins…");
+        try {
+            const plugins = await loadPlugins(config, rootDir);
+            if (plugins.length > 0) {
+                const pluginContext = await createPluginContext(rootDir, config);
+                for (const plugin of plugins) {
+                    try {
+                        const result = await plugin.check(pluginContext);
+                        findings.push(...result.findings);
+                    }
+                    catch {
+                        // Plugin error — skip silently
+                    }
+                }
+            }
+        }
+        catch {
+            // Plugin loading failed — non-critical
+        }
+        // ── 8. Apply severity overrides ─────────────────────────────────────
+        for (const finding of findings) {
+            if (finding.ruleId) {
+                const override = config.severityOverrides[finding.ruleId];
+                if (override) {
+                    finding.severity = override;
+                }
+            }
+        }
+        // ── 9. Filter by severity if requested ──────────────────────────────
+        let filteredFindings = findings;
+        if (options.severity) {
+            const severityOrder = {
+                critical: 0,
+                warning: 1,
+                info: 2,
+            };
+            const minLevel = severityOrder[options.severity];
+            filteredFindings = findings.filter((f) => severityOrder[f.severity] <= minLevel);
+        }
+        // ── 10. Calculate health score ──────────────────────────────────────
+        const { score, grade } = calculateHealthScore(filteredFindings);
+        const duration = Date.now() - start;
+        const result = {
+            findings: filteredFindings,
+            healthScore: score,
+            grade,
+            timestamp: new Date(),
+            scannedFiles,
+            framework,
+            duration,
+        };
+        // ── 11. Report ──────────────────────────────────────────────────────
+        if (spinner)
+            spinner.stop();
+        if (options.json) {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else if (!options.quiet) {
+            reportScanResults(result, {
+                fun: options.fun ?? config.funMode,
+                verbose: options.verbose,
+            });
+        }
+        return result;
+    }
+    catch (error) {
+        if (spinner)
+            spinner.fail("Scan failed");
+        throw error;
+    }
+}
+//# sourceMappingURL=scan.js.map

package/dist/commands/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,sEAAsE;AAEtE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,WAAW,CAAC;AAQ3B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EACL,eAAe,EACf,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,OAAO,GAAgB,EAAE;IAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,kCAAkC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,uEAAuE;QACvE,IAAI,OAAO;YAAE,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAEhE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,EAAE,CAAC;QAC1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACpD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9C,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,IAAI,OAAO;YAAE,kBAAkB,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAEzE,kBAAkB;QAClB,MAAM,SAAS,GAAG,MAAM,EAAE,CACxB,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,EACpE;YACE,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,IAAI;SACf,CACF,CAAC;QAEF,gDAAgD;QAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAErE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACnD,KAAK,MAAM,GAAG,IAAI,IAAI;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEzC,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,eAAe,GAAG,kBAAkB,CACxC,IAAI,EACJ,WAAW,EACX,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CACjC,CAAC;oBACF,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QACjC,CAAC;QAED,uBAAuB;QACvB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,cAAc,GAAG,iBAAiB,CACtC,CAAC,GAAG,OAAO,CAAC,EACZ,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAChC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,CAC5C,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QACnC,CAAC;QAED,uEAAuE;QACvE,IAAI,OAAO;YAAE,kBAAkB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAEjE,IAAI,gBAAgB,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,gBAAgB,GAAG,MAAM,EAAE,CAAC,QAAQ,CAClC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAChC,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,MAAM,iBAAiB,GAAG,MAAM,2BAA2B,CACzD,OAAO,EACP,QAAQ,CACT,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAC;QAEpC,uEAAuE;QACvE,IAAI,OAAO;YAAE,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QAElE,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;YACrC,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,iCAAiC;QACjC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;YAC7B,KAAK;YACL,KAAK;YACL,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,KAAK;YACL,KAAK;YACL,KAAK;YACL,KAAK;YACL,OAAO;YACP,KAAK;YACL,OAAO;YACP,OAAO;YACP,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,aAAa;YACb,KAAK;YACL,OAAO;YACP,MAAM;YACN,OAAO;YACP,KAAK;YACL,MAAM;YACN,aAAa;YACb,KAAK;YACL,MAAM;YACN,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAEnD,8CAA8C;YAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,EAAE;gBAAE,SAAS;YAEnE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrC,mBAAmB;gBACnB,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;oBAAE,SAAS;gBAEpC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrD,MAAM,cAAc,GAAG,kBAAkB,CACvC,OAAO,EACP,IAAI,EACJ,YAAY,EACZ,MAAM,CAAC,gBAAgB,CACxB,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;gBACjC,YAAY,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,+BAA+B;YACjC,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,IAAI,OAAO;YAAE,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YACpE,MAAM,eAAe,GAAG,MAAM,cAAc,CAC1C,OAAO,EACP,YAAY,EACZ,MAAM,CAAC,gBAAgB,EACvB,KAAK,CACN,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;QAED,uEAAuE;QACvE,IAAI,OAAO;YAAE,kBAAkB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAEjE,IAAI,SAAoC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;YAChD,SAAS,GAAG,QAAQ,IAAI,SAAS,CAAC;YAClC,IAAI,SAAS,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,eAAe,GAAG,yBAAyB,CAC/C,cAAc,EACd,SAAS,EACT,YAAY,EACZ,MAAM,CAAC,gBAAgB,CACxB,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;QAED,uEAAuE;QACvE,IAAI,OAAO;YAAE,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAE7D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;wBACjD,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACpC,CAAC;oBAAC,MAAM,CAAC;wBACP,+BAA+B;oBACjC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QAED,uEAAuE;QACvE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC1D,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,IAAI,gBAAgB,GAAG,QAAQ,CAAC;QAChC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,aAAa,GAA6B;gBAC9C,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,CAAC;gBACV,IAAI,EAAE,CAAC;aACR,CAAC;YACF,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjD,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAC7C,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAEhE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,MAAM,MAAM,GAAe;YACzB,QAAQ,EAAE,gBAAgB;YAC1B,WAAW,EAAE,KAAK;YAClB,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,YAAY;YACZ,SAAS;YACT,QAAQ;SACT,CAAC;QAEF,uEAAuE;QACvE,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAE5B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC1B,iBAAiB,CAAC,MAAM,EAAE;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO;gBAClC,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/commands/undo.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Execute the `bilt undo` command.
+ *
+ * 1. List available snapshots
+ * 2. Get latest snapshot
+ * 3. Show preview of what will be restored
+ * 4. Require confirmation
+ * 5. Restore snapshot
+ * 6. Report success
+ */
+export declare function executeUndo(projectDir: string): Promise<void>;
+//# sourceMappingURL=undo.d.ts.map

package/dist/commands/undo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"undo.d.ts","sourceRoot":"","sources":["../../src/commands/undo.ts"],"names":[],"mappings":"AAeA;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuFnE"}

package/dist/commands/undo.js

@@ -0,0 +1,90 @@
+// ─── Undo Command ────────────────────────────────────────────────────────────
+// Restore the latest snapshot to revert changes made by `bilt fix`.
+import path from "node:path";
+import chalk from "chalk";
+import { getLatestSnapshot, listSnapshots, restoreSnapshot, } from "../core/fix/snapshot.js";
+import { requireSimpleConfirmation } from "../core/fix/confirm.js";
+import { reportUndoComplete } from "../ui/reporter.js";
+import { formatDiff } from "../ui/format.js";
+import { promises as fs } from "node:fs";
+/**
+ * Execute the `bilt undo` command.
+ *
+ * 1. List available snapshots
+ * 2. Get latest snapshot
+ * 3. Show preview of what will be restored
+ * 4. Require confirmation
+ * 5. Restore snapshot
+ * 6. Report success
+ */
+export async function executeUndo(projectDir) {
+    const rootDir = path.resolve(projectDir);
+    // ── List snapshots ──────────────────────────────────────────────────
+    const snapshots = await listSnapshots(rootDir);
+    if (snapshots.length === 0) {
+        console.log("");
+        console.log(chalk.yellow("  ⚠ No snapshots found. Nothing to undo."));
+        console.log(chalk.dim("  Snapshots are created automatically when `bilt fix` or `bilt init` makes changes."));
+        console.log("");
+        return;
+    }
+    // ── Get latest snapshot ─────────────────────────────────────────────
+    const snapshot = await getLatestSnapshot(rootDir);
+    if (!snapshot) {
+        console.log("");
+        console.log(chalk.yellow("  ⚠ Could not load the latest snapshot."));
+        console.log("");
+        return;
+    }
+    // ── Preview changes ─────────────────────────────────────────────────
+    console.log("");
+    console.log(chalk.bold(`  ⏪ Snapshot: ${chalk.cyan(snapshot.id)}`));
+    console.log(chalk.dim(`  ${snapshot.description}`));
+    console.log(chalk.dim(`  Created: ${new Date(snapshot.timestamp).toLocaleString()}`));
+    console.log("");
+    console.log(chalk.bold("  Files to restore:"));
+    for (const file of snapshot.files) {
+        const fullPath = path.join(rootDir, file.path);
+        let currentContent = "";
+        try {
+            currentContent = await fs.readFile(fullPath, "utf-8");
+        }
+        catch {
+            currentContent = "";
+        }
+        const hasChanged = currentContent !== file.content;
+        if (hasChanged) {
+            console.log(chalk.yellow(`    ↻ ${file.path}`));
+            // Show brief diff
+            const diff = formatDiff(currentContent, file.content);
+            const diffLines = diff.split("\n").slice(0, 8);
+            for (const line of diffLines) {
+                console.log(`      ${line}`);
+            }
+            if (diff.split("\n").length > 8) {
+                console.log(chalk.dim(`      … and more`));
+            }
+        }
+        else {
+            console.log(chalk.dim(`    ✓ ${file.path} (unchanged)`));
+        }
+    }
+    console.log("");
+    // ── Confirm ─────────────────────────────────────────────────────────
+    const confirmed = await requireSimpleConfirmation({
+        id: "undo",
+        description: `Restore ${snapshot.files.length} file(s) from snapshot`,
+        type: "destructive",
+        findingId: "undo",
+        apply: async () => true,
+    });
+    if (!confirmed) {
+        console.log(chalk.dim("  Undo cancelled."));
+        console.log("");
+        return;
+    }
+    // ── Restore ─────────────────────────────────────────────────────────
+    await restoreSnapshot(snapshot.id, rootDir);
+    reportUndoComplete(snapshot);
+}
+//# sourceMappingURL=undo.js.map

package/dist/commands/undo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"undo.js","sourceRoot":"","sources":["../../src/commands/undo.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,oEAAoE;AAEpE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAEzC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAAkB;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEzC,uEAAuE;IACvE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAE/C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,qFAAqF,CACtF,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAElD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CACzE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAE/C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,cAAc,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,cAAc,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,GAAG,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,UAAU,GAAG,cAAc,KAAK,IAAI,CAAC,OAAO,CAAC;QAEnD,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAEhD,kBAAkB;YAClB,MAAM,IAAI,GAAG,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,uEAAuE;IACvE,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC;QAChD,EAAE,EAAE,MAAM;QACV,WAAW,EAAE,WAAW,QAAQ,CAAC,KAAK,CAAC,MAAM,wBAAwB;QACrE,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;KACxB,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC"}

package/dist/commands/watch.d.ts

@@ -0,0 +1,10 @@
+import type { WatchOptions } from "../types/index.js";
+/**
+ * Execute the `bilt watch` command.
+ *
+ * 1. Start file watcher on the project directory
+ * 2. On file changes: scan for secrets and report findings
+ * 3. Handle SIGINT for graceful shutdown
+ */
+export declare function executeWatch(projectDir: string, options?: WatchOptions): Promise<void>;
+//# sourceMappingURL=watch.d.ts.map

package/dist/commands/watch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../src/commands/watch.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,mBAAmB,CAAC;AAKlE;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CA0Df"}

package/dist/commands/watch.js

@@ -0,0 +1,68 @@
+// ─── Watch Command ───────────────────────────────────────────────────────────
+// Real-time file monitoring with instant secret & env scanning.
+import path from "node:path";
+import chalk from "chalk";
+import { loadConfig } from "../config/config.js";
+import { startWatcher, stopWatcher } from "../core/watch/watcher.js";
+import { reportWatchEvent } from "../ui/reporter.js";
+/**
+ * Execute the `bilt watch` command.
+ *
+ * 1. Start file watcher on the project directory
+ * 2. On file changes: scan for secrets and report findings
+ * 3. Handle SIGINT for graceful shutdown
+ */
+export async function executeWatch(projectDir, options = {}) {
+    const rootDir = path.resolve(projectDir);
+    const config = await loadConfig(rootDir);
+    // ── Status banner ───────────────────────────────────────────────────
+    if (!options.quiet) {
+        console.log("");
+        console.log(chalk.cyan.bold("  👁️  Bilt Watch Mode"));
+        console.log(chalk.dim(`  Monitoring ${rootDir} for changes…`));
+        console.log(chalk.dim("  Press Ctrl+C to stop."));
+        console.log("");
+    }
+    // ── Start watcher ──────────────────────────────────────────────────
+    const watcher = startWatcher(rootDir, config, (event) => {
+        // Only report if there are findings or the file was deleted
+        if (event.findings.length > 0 || event.type === "unlink") {
+            // Map absolute path back to relative path for formatting
+            const relativePath = path.relative(rootDir, event.file);
+            const relativeFindings = event.findings.map((f) => ({
+                ...f,
+                file: path.relative(rootDir, f.file),
+            }));
+            reportWatchEvent({
+                ...event,
+                file: relativePath,
+                findings: relativeFindings,
+            });
+        }
+    });
+    // ── Graceful shutdown ──────────────────────────────────────────────
+    const cleanup = async () => {
+        if (!options.quiet) {
+            console.log("");
+            console.log(chalk.dim("  Stopping watcher…"));
+        }
+        await stopWatcher(watcher);
+        if (!options.quiet) {
+            console.log(chalk.green("  ✓ Watcher stopped."));
+            console.log("");
+        }
+        process.exit(0);
+    };
+    process.on("SIGINT", () => {
+        void cleanup();
+    });
+    process.on("SIGTERM", () => {
+        void cleanup();
+    });
+    // Keep the process running
+    await new Promise(() => {
+        // This promise intentionally never resolves — the process stays alive
+        // until SIGINT/SIGTERM.
+    });
+}
+//# sourceMappingURL=watch.js.map

package/dist/commands/watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../src/commands/watch.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,gEAAgE;AAEhE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,OAAO,GAAiB,EAAE;IAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAEzC,uEAAuE;IACvE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,OAAO,eAAe,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,sEAAsE;IACtE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,KAAiB,EAAE,EAAE;QAClE,4DAA4D;QAC5D,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,yDAAyD;YACzD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,gBAAgB,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClD,GAAG,CAAC;gBACJ,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC;aACrC,CAAC,CAAC,CAAC;YAEJ,gBAAgB,CAAC;gBACf,GAAG,KAAK;gBACR,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,gBAAgB;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sEAAsE;IACtE,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,KAAK,OAAO,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,KAAK,OAAO,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE;QACrB,sEAAsE;QACtE,wBAAwB;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/config/config.d.ts

@@ -0,0 +1,8 @@
+import type { BiltConfig } from "../types/index.js";
+export declare const DEFAULT_CONFIG: BiltConfig;
+/**
+ * Load and merge user configuration with defaults.
+ * If no config file exists, returns defaults (zero-config).
+ */
+export declare function loadConfig(searchFrom?: string): Promise<BiltConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAIpD,eAAO,MAAM,cAAc,EAAE,UAsB5B,CAAC;AAoBF;;;GAGG;AACH,wBAAsB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA+BzE"}

package/dist/config/config.js

@@ -0,0 +1,75 @@
+import { cosmiconfig } from "cosmiconfig";
+// ─── Default Configuration (Zero-Config) ────────────────────────────────────
+export const DEFAULT_CONFIG = {
+    ignore: [
+        "node_modules/**",
+        ".git/**",
+        "dist/**",
+        "build/**",
+        "coverage/**",
+        ".bilt/**",
+        "*.min.js",
+        "*.min.css",
+        "*.map",
+        "*.lock",
+        "package-lock.json",
+        "yarn.lock",
+        "pnpm-lock.yaml",
+    ],
+    severityOverrides: {},
+    plugins: [],
+    entropyThreshold: 4.5,
+    historyDepth: 10,
+    customRules: [],
+    funMode: false,
+};
+// ─── Config Loader ───────────────────────────────────────────────────────────
+const explorer = cosmiconfig("bilt", {
+    searchPlaces: [
+        ".biltrc",
+        ".biltrc.json",
+        ".biltrc.yaml",
+        ".biltrc.yml",
+        ".biltrc.js",
+        ".biltrc.cjs",
+        ".biltrc.mjs",
+        "bilt.config.js",
+        "bilt.config.cjs",
+        "bilt.config.mjs",
+        "bilt.config.ts",
+    ],
+});
+/**
+ * Load and merge user configuration with defaults.
+ * If no config file exists, returns defaults (zero-config).
+ */
+export async function loadConfig(searchFrom) {
+    try {
+        const result = await explorer.search(searchFrom);
+        if (!result || result.isEmpty) {
+            return { ...DEFAULT_CONFIG };
+        }
+        const userConfig = result.config;
+        return {
+            ignore: userConfig.ignore
+                ? [...DEFAULT_CONFIG.ignore, ...userConfig.ignore]
+                : [...DEFAULT_CONFIG.ignore],
+            severityOverrides: {
+                ...DEFAULT_CONFIG.severityOverrides,
+                ...userConfig.severityOverrides,
+            },
+            plugins: userConfig.plugins ?? DEFAULT_CONFIG.plugins,
+            entropyThreshold: userConfig.entropyThreshold ?? DEFAULT_CONFIG.entropyThreshold,
+            historyDepth: userConfig.historyDepth ?? DEFAULT_CONFIG.historyDepth,
+            customRules: userConfig.customRules
+                ? [...DEFAULT_CONFIG.customRules, ...userConfig.customRules]
+                : [...DEFAULT_CONFIG.customRules],
+            funMode: userConfig.funMode ?? DEFAULT_CONFIG.funMode,
+        };
+    }
+    catch {
+        // If config loading fails, silently use defaults (zero-config philosophy)
+        return { ...DEFAULT_CONFIG };
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,+EAA+E;AAE/E,MAAM,CAAC,MAAM,cAAc,GAAe;IACxC,MAAM,EAAE;QACN,iBAAiB;QACjB,SAAS;QACT,SAAS;QACT,UAAU;QACV,aAAa;QACb,UAAU;QACV,UAAU;QACV,WAAW;QACX,OAAO;QACP,QAAQ;QACR,mBAAmB;QACnB,WAAW;QACX,gBAAgB;KACjB;IACD,iBAAiB,EAAE,EAAE;IACrB,OAAO,EAAE,EAAE;IACX,gBAAgB,EAAE,GAAG;IACrB,YAAY,EAAE,EAAE;IAChB,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,KAAK;CACf,CAAC;AAEF,gFAAgF;AAEhF,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE;IACnC,YAAY,EAAE;QACZ,SAAS;QACT,cAAc;QACd,cAAc;QACd,aAAa;QACb,YAAY;QACZ,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,iBAAiB;QACjB,iBAAiB;QACjB,gBAAgB;KACjB;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAmB;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAA6B,CAAC;QAExD,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;gBACvB,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC;gBAClD,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC;YAC9B,iBAAiB,EAAE;gBACjB,GAAG,cAAc,CAAC,iBAAiB;gBACnC,GAAG,UAAU,CAAC,iBAAiB;aAChC;YACD,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO;YACrD,gBAAgB,EACd,UAAU,CAAC,gBAAgB,IAAI,cAAc,CAAC,gBAAgB;YAChE,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,cAAc,CAAC,YAAY;YACpE,WAAW,EAAE,UAAU,CAAC,WAAW;gBACjC,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC;gBAC5D,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,WAAW,CAAC;YACnC,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO;SACtD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/dist/core/fix/confirm.d.ts

@@ -0,0 +1,21 @@
+import type { FixAction } from "../../types/index.js";
+/**
+ * Prompt the user to type the filename to confirm an **irreversible** action.
+ *
+ * Used for actions like permanently deleting a file or rewriting git history
+ * where a simple y/n is not enough assurance.
+ *
+ * @param action   The fix action being applied.
+ * @param fileName The filename the user must type to confirm.
+ * @returns `true` if the user typed the correct filename, `false` otherwise.
+ */
+export declare function requireTypedConfirmation(action: FixAction, fileName: string): Promise<boolean>;
+/**
+ * Prompt the user for a simple y/n confirmation for a **destructive**
+ * action.
+ *
+ * @param action The fix action being applied.
+ * @returns `true` if the user confirms, `false` otherwise.
+ */
+export declare function requireSimpleConfirmation(action: FixAction): Promise<boolean>;
+//# sourceMappingURL=confirm.d.ts.map

package/dist/core/fix/confirm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.d.ts","sourceRoot":"","sources":["../../../src/core/fix/confirm.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAOtD;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,OAAO,CAAC,CAiBlB"}