bilt-toolkit 1.0.0

package/dist/plugins/official/terraform.js

@@ -0,0 +1,131 @@
+// ─── Terraform Plugin ────────────────────────────────────────────────────────
+// Scans .tf files for hardcoded credentials and checks gitignore for tfvars.
+import { promises as fs } from "node:fs";
+import path from "node:path";
+// Patterns that match hardcoded secrets in Terraform files
+const TF_SECRET_PATTERNS = [
+    {
+        name: "AWS access key",
+        pattern: /access_key\s*=\s*"(?!(\$\{|var\.|local\.|data\.))(AKIA[0-9A-Z]{16})"/i,
+    },
+    {
+        name: "AWS secret key",
+        pattern: /secret_key\s*=\s*"(?!(\$\{|var\.|local\.|data\.))[A-Za-z0-9/+=]{40}"/,
+    },
+    {
+        name: "password",
+        pattern: /password\s*=\s*"(?!(\$\{|var\.|local\.|data\.|<|your_|changeme|placeholder))[^"]{6,}"/i,
+    },
+    {
+        name: "token",
+        pattern: /token\s*=\s*"(?!(\$\{|var\.|local\.|data\.|<|your_|changeme|placeholder))[^"]{10,}"/i,
+    },
+    {
+        name: "private key",
+        pattern: /private_key\s*=\s*"(?!(\$\{|var\.|local\.|data\.|file\())[^"]+"/i,
+    },
+    {
+        name: "secret",
+        pattern: /(?:client_secret|api_secret|secret_access_key)\s*=\s*"(?!(\$\{|var\.|local\.|data\.))[^"]{8,}"/i,
+    },
+    {
+        name: "connection string",
+        pattern: /(?:connection_string|database_url)\s*=\s*"(?!(\$\{|var\.|local\.|data\.))[^"]+:\/\/[^"]+"/i,
+    },
+];
+const plugin = {
+    name: "bilt-plugin-terraform",
+    version: "1.0.0",
+    description: "Scans Terraform files for hardcoded credentials and validates .gitignore for .tfvars.",
+    async check(context) {
+        const findings = [];
+        // ── Find all .tf files ─────────────────────────────────────────────
+        const tfFiles = context.files.filter((f) => f.endsWith(".tf") || f.endsWith(".tf.json"));
+        for (const tfFile of tfFiles) {
+            const fullPath = path.join(context.rootDir, tfFile);
+            let content;
+            try {
+                content = await fs.readFile(fullPath, "utf-8");
+            }
+            catch {
+                continue;
+            }
+            const lines = content.split("\n");
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                const trimmed = line.trim();
+                // Skip comments
+                if (trimmed.startsWith("#") ||
+                    trimmed.startsWith("//") ||
+                    trimmed.startsWith("/*")) {
+                    continue;
+                }
+                for (const { name, pattern } of TF_SECRET_PATTERNS) {
+                    if (pattern.test(trimmed)) {
+                        findings.push({
+                            id: `terraform-hardcoded-${name.replace(/\s+/g, "-")}-${tfFile}-${i + 1}`,
+                            severity: "critical",
+                            category: "plugin-finding",
+                            message: `Hardcoded ${name} found in Terraform file`,
+                            file: tfFile,
+                            line: i + 1,
+                            suggestion: `Use a Terraform variable (var.${name.replace(/\s+/g, "_")}) or environment variable instead of hardcoding the value.`,
+                        });
+                        break; // One finding per line
+                    }
+                }
+            }
+        }
+        // ── Check terraform.tfvars in .gitignore ───────────────────────────
+        const hasTfvars = context.files.some((f) => f.endsWith(".tfvars") ||
+            f.endsWith(".tfvars.json") ||
+            path.basename(f) === "terraform.tfvars");
+        if (hasTfvars || tfFiles.length > 0) {
+            const gitignorePath = path.join(context.rootDir, ".gitignore");
+            try {
+                const content = await fs.readFile(gitignorePath, "utf-8");
+                const lines = content
+                    .split("\n")
+                    .map((l) => l.trim())
+                    .filter((l) => l !== "" && !l.startsWith("#"));
+                const coversTfvars = lines.some((l) => l === "*.tfvars" ||
+                    l === "*.tfvars.json" ||
+                    l === "terraform.tfvars" ||
+                    l === "*.auto.tfvars" ||
+                    l === ".terraform/" ||
+                    l === ".terraform");
+                if (!coversTfvars) {
+                    findings.push({
+                        id: "terraform-gitignore-tfvars",
+                        severity: "warning",
+                        category: "plugin-finding",
+                        message: ".gitignore does not exclude *.tfvars — variable files with secrets may be committed",
+                        file: ".gitignore",
+                        suggestion: "Add `*.tfvars` and `*.tfvars.json` to your .gitignore to prevent committing secret variable files.",
+                    });
+                }
+                // Also check .terraform directory
+                const coversTerraformDir = lines.some((l) => l === ".terraform" ||
+                    l === ".terraform/" ||
+                    l === ".terraform/**" ||
+                    l === ".terraform/*");
+                if (!coversTerraformDir) {
+                    findings.push({
+                        id: "terraform-gitignore-dir",
+                        severity: "info",
+                        category: "plugin-finding",
+                        message: ".gitignore does not exclude .terraform/ directory — state and providers should not be committed",
+                        file: ".gitignore",
+                        suggestion: "Add `.terraform/` to your .gitignore to exclude provider binaries and local state.",
+                    });
+                }
+            }
+            catch {
+                // No .gitignore at all — already covered by core scan
+            }
+        }
+        return { findings };
+    },
+};
+export default plugin;
+//# sourceMappingURL=terraform.js.map

package/dist/plugins/official/terraform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terraform.js","sourceRoot":"","sources":["../../../src/plugins/official/terraform.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,6EAA6E;AAE7E,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAQ7B,2DAA2D;AAC3D,MAAM,kBAAkB,GAAG;IACzB;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EACL,uEAAuE;KAC1E;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EACL,sEAAsE;KACzE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EACL,wFAAwF;KAC3F;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EACL,sFAAsF;KACzF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,kEAAkE;KAC5E;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EACL,iGAAiG;KACpG;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EACL,4FAA4F;KAC/F;CACF,CAAC;AAEF,MAAM,MAAM,GAAmB;IAC7B,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,OAAO;IAChB,WAAW,EACT,uFAAuF;IAEzF,KAAK,CAAC,KAAK,CAAC,OAAsB;QAChC,MAAM,QAAQ,GAAkB,EAAE,CAAC;QAEnC,sEAAsE;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CACnD,CAAC;QAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAE5B,gBAAgB;gBAChB,IACE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;oBACxB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,kBAAkB,EAAE,CAAC;oBACnD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC1B,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,uBAAuB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;4BACzE,QAAQ,EAAE,UAAU;4BACpB,QAAQ,EAAE,gBAAgB;4BAC1B,OAAO,EAAE,aAAa,IAAI,0BAA0B;4BACpD,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,UAAU,EAAE,iCAAiC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,4DAA4D;yBACnI,CAAC,CAAC;wBACH,MAAM,CAAC,uBAAuB;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAC1C,CAAC;QAEF,IAAI,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC/D,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;gBAC1D,MAAM,KAAK,GAAG,OAAO;qBAClB,KAAK,CAAC,IAAI,CAAC;qBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;gBAEjD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,KAAK,UAAU;oBAChB,CAAC,KAAK,eAAe;oBACrB,CAAC,KAAK,kBAAkB;oBACxB,CAAC,KAAK,eAAe;oBACrB,CAAC,KAAK,aAAa;oBACnB,CAAC,KAAK,YAAY,CACrB,CAAC;gBAEF,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,4BAA4B;wBAChC,QAAQ,EAAE,SAAS;wBACnB,QAAQ,EAAE,gBAAgB;wBAC1B,OAAO,EACL,qFAAqF;wBACvF,IAAI,EAAE,YAAY;wBAClB,UAAU,EACR,oGAAoG;qBACvG,CAAC,CAAC;gBACL,CAAC;gBAED,kCAAkC;gBAClC,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,KAAK,YAAY;oBAClB,CAAC,KAAK,aAAa;oBACnB,CAAC,KAAK,eAAe;oBACrB,CAAC,KAAK,cAAc,CACvB,CAAC;gBAEF,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBACxB,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,yBAAyB;wBAC7B,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,gBAAgB;wBAC1B,OAAO,EACL,iGAAiG;wBACnG,IAAI,EAAE,YAAY;wBAClB,UAAU,EACR,oFAAoF;qBACvF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sDAAsD;YACxD,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;CACF,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/dist/types/index.d.ts

@@ -0,0 +1,158 @@
+export type Severity = "critical" | "warning" | "info";
+export type FindingCategory = "secret-detected" | "env-missing" | "env-unused" | "env-mismatch" | "env-exposed" | "gitignore-missing" | "framework-warning" | "plugin-finding";
+export interface ScanFinding {
+    id: string;
+    severity: Severity;
+    category: FindingCategory;
+    message: string;
+    file: string;
+    line?: number;
+    column?: number;
+    suggestion?: string;
+    provider?: ProviderInfo;
+    ruleId?: string;
+    /** Masked preview of the detected value */
+    preview?: string;
+}
+export interface ScanResult {
+    findings: ScanFinding[];
+    healthScore: number;
+    grade: string;
+    timestamp: Date;
+    scannedFiles: number;
+    framework?: FrameworkInfo;
+    duration: number;
+}
+export interface SecretRule {
+    id: string;
+    name: string;
+    pattern: RegExp;
+    provider?: string;
+    severity: Severity;
+    description: string;
+}
+export interface ProviderInfo {
+    name: string;
+    displayName: string;
+    icon: string;
+    rotationUrl: string;
+    docsUrl: string;
+}
+export type FixType = "safe" | "destructive" | "irreversible";
+export interface FixAction {
+    id: string;
+    description: string;
+    type: FixType;
+    /** The finding this fix addresses */
+    findingId: string;
+    /** Preview of what the fix will do */
+    preview?: string;
+    /** Function to apply the fix — returns true if successful */
+    apply: () => Promise<boolean>;
+}
+export interface SnapshotFile {
+    path: string;
+    content: string;
+}
+export interface Snapshot {
+    id: string;
+    timestamp: Date;
+    description: string;
+    files: SnapshotFile[];
+}
+export interface SnapshotManifest {
+    id: string;
+    timestamp: string;
+    description: string;
+    filePaths: string[];
+}
+export interface BiltConfig {
+    /** Glob patterns to ignore during scanning */
+    ignore: string[];
+    /** Severity overrides by rule ID */
+    severityOverrides: Record<string, Severity>;
+    /** Paths to plugin files/packages */
+    plugins: string[];
+    /** Entropy threshold for secret detection */
+    entropyThreshold: number;
+    /** Number of git commits to scan (default 10) */
+    historyDepth: number;
+    /** Custom secret rules */
+    customRules: SecretRule[];
+    /** Enable fun mode */
+    funMode: boolean;
+}
+export interface FrameworkInfo {
+    name: string;
+    displayName: string;
+    /** Prefixes that expose env vars to client bundles */
+    clientExposedPrefixes: string[];
+    /** Config files that identify this framework */
+    configFiles: string[];
+}
+export interface PluginContext {
+    /** Root directory of the project */
+    rootDir: string;
+    /** All files in the project (relative paths) */
+    files: string[];
+    /** Parsed env vars from all .env files */
+    envVars: Map<string, Map<string, string>>;
+    /** Git info */
+    git: {
+        isRepo: boolean;
+        branch?: string;
+    };
+    /** Bilt config */
+    config: BiltConfig;
+}
+export interface PluginResult {
+    findings: ScanFinding[];
+    fixes?: FixAction[];
+}
+export interface PluginManifest {
+    name: string;
+    version: string;
+    description: string;
+    check: (context: PluginContext) => Promise<PluginResult>;
+    fix?: (context: PluginContext) => Promise<PluginResult>;
+}
+export interface WatchEvent {
+    type: "add" | "change" | "unlink";
+    file: string;
+    findings: ScanFinding[];
+    timestamp: Date;
+}
+export interface ParsedEnvEntry {
+    key: string;
+    value: string;
+    line: number;
+    comment?: string;
+    /** Whether the value appears to be a secret */
+    isSecret?: boolean;
+}
+export interface ParsedEnvFile {
+    filePath: string;
+    entries: Map<string, ParsedEnvEntry>;
+    /** Raw lines for preserving structure */
+    rawLines: string[];
+}
+export interface ScanOptions {
+    fullHistory?: boolean;
+    json?: boolean;
+    severity?: Severity;
+    verbose?: boolean;
+    quiet?: boolean;
+    dryRun?: boolean;
+    fun?: boolean;
+}
+export interface FixOptions {
+    safe?: boolean;
+    dryRun?: boolean;
+    verbose?: boolean;
+    quiet?: boolean;
+}
+export interface WatchOptions {
+    quiet?: boolean;
+    debounce?: number;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAEvD,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,aAAa,GACb,YAAY,GACZ,cAAc,GACd,aAAa,GACb,mBAAmB,GACnB,mBAAmB,GACnB,gBAAgB,CAAC;AAIrB,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,cAAc,CAAC;AAE9D,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IACd,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/B;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAID,MAAM,WAAW,UAAU;IACzB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,oCAAoC;IACpC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5C,qCAAqC;IACrC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6CAA6C;IAC7C,gBAAgB,EAAE,MAAM,CAAC;IACzB,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,sBAAsB;IACtB,OAAO,EAAE,OAAO,CAAC;CAClB;AAID,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,gDAAgD;IAChD,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAID,MAAM,WAAW,aAAa;IAC5B,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0CAA0C;IAC1C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1C,eAAe;IACf,GAAG,EAAE;QACH,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,kBAAkB;IAClB,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IACzD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CACzD;AAID,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;CACjB;AAID,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrC,yCAAyC;IACzC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAID,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/types/index.js

@@ -0,0 +1,3 @@
+// ─── Severity & Categories ───────────────────────────────────────────────────
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,gFAAgF"}

package/dist/ui/format.d.ts

@@ -0,0 +1,43 @@
+import type { ScanFinding, Severity, ProviderInfo } from "../types/index.js";
+/**
+ * Return the emoji icon for a severity level.
+ */
+export declare function severityIcon(severity: Severity): string;
+/**
+ * Return the chalk color function for a severity level.
+ */
+export declare function severityColor(severity: Severity): (text: string) => string;
+/**
+ * Format a single finding as a one-line string with severity icon,
+ * colored message, and file:line reference.
+ *
+ * Example: 🔴 AWS access key detected  config.js:12
+ */
+export declare function formatFinding(finding: ScanFinding): string;
+/**
+ * Format a health score as a colored ASCII progress bar with grade.
+ *
+ * Example:  ████████████████████░░░  92%  A
+ */
+export declare function formatHealthScore(score: number, grade: string): string;
+/**
+ * Format a provider name with a clickable rotation URL as a terminal hyperlink.
+ *
+ * Terminals that support OSC 8 will render this as a clickable link.
+ */
+export declare function formatProviderLink(provider: ProviderInfo): string;
+/**
+ * Mask a secret value for safe display.
+ *
+ * - If value ≥ 12 chars: show first 4 + asterisks + last 4
+ * - If value < 12 chars: show first 2 + asterisks for rest
+ */
+export declare function maskSecret(value: string): string;
+/**
+ * Simple colored diff between two strings.
+ * Lines prefixed with - are colored red (removed).
+ * Lines prefixed with + are colored green (added).
+ * Context lines are dimmed.
+ */
+export declare function formatDiff(before: string, after: string): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/ui/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/ui/format.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAI7E;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CASvD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAS1E;AAID;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAe1D;AAID;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBtE;AAwBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAKjE;AAID;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAehD;AAID;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA6ChE"}

package/dist/ui/format.js

@@ -0,0 +1,207 @@
+// ─── UI Format Utilities ─────────────────────────────────────────────────────
+// Atomic formatters used across the entire CLI output layer.
+import chalk from "chalk";
+// ─── Severity Helpers ────────────────────────────────────────────────────────
+/**
+ * Return the emoji icon for a severity level.
+ */
+export function severityIcon(severity) {
+    switch (severity) {
+        case "critical":
+            return "🔴";
+        case "warning":
+            return "🟡";
+        case "info":
+            return "🔵";
+    }
+}
+/**
+ * Return the chalk color function for a severity level.
+ */
+export function severityColor(severity) {
+    switch (severity) {
+        case "critical":
+            return (t) => chalk.red(t);
+        case "warning":
+            return (t) => chalk.yellow(t);
+        case "info":
+            return (t) => chalk.cyan(t);
+    }
+}
+// ─── Finding Formatter ───────────────────────────────────────────────────────
+/**
+ * Format a single finding as a one-line string with severity icon,
+ * colored message, and file:line reference.
+ *
+ * Example: 🔴 AWS access key detected  config.js:12
+ */
+export function formatFinding(finding) {
+    const icon = severityIcon(finding.severity);
+    const colorFn = severityColor(finding.severity);
+    const location = finding.line
+        ? chalk.dim(`${finding.file}:${finding.line}`)
+        : chalk.dim(finding.file);
+    const message = colorFn(finding.message);
+    let line = `  ${icon} ${message}  ${location}`;
+    if (finding.preview) {
+        line += `  ${chalk.dim(`[${finding.preview}]`)}`;
+    }
+    return line;
+}
+// ─── Health Score Formatter ──────────────────────────────────────────────────
+/**
+ * Format a health score as a colored ASCII progress bar with grade.
+ *
+ * Example:  ████████████████████░░░  92%  A
+ */
+export function formatHealthScore(score, grade) {
+    const clamped = Math.max(0, Math.min(100, Math.round(score)));
+    const barWidth = 25;
+    const filled = Math.round((clamped / 100) * barWidth);
+    const empty = barWidth - filled;
+    const filledChar = "█";
+    const emptyChar = "░";
+    const gradeColorFn = gradeColor(grade);
+    const bar = gradeColorFn(filledChar.repeat(filled)) +
+        chalk.dim(emptyChar.repeat(empty));
+    const pct = gradeColorFn(`${clamped}%`);
+    const gradeLabel = gradeColorFn(chalk.bold(grade));
+    return `${bar}  ${pct}  ${gradeLabel}`;
+}
+/**
+ * Determine chalk color for a letter grade.
+ */
+function gradeColor(grade) {
+    const letter = grade.charAt(0).toUpperCase();
+    switch (letter) {
+        case "A":
+            return (t) => chalk.green(t);
+        case "B":
+            return (t) => chalk.blue(t);
+        case "C":
+            return (t) => chalk.yellow(t);
+        case "D":
+        case "F":
+            return (t) => chalk.red(t);
+        default:
+            return (t) => chalk.white(t);
+    }
+}
+// ─── Provider Link Formatter ─────────────────────────────────────────────────
+/**
+ * Format a provider name with a clickable rotation URL as a terminal hyperlink.
+ *
+ * Terminals that support OSC 8 will render this as a clickable link.
+ */
+export function formatProviderLink(provider) {
+    const icon = provider.icon || "🔑";
+    // OSC 8 hyperlink: \e]8;;URL\e\\LABEL\e]8;;\e\\
+    const link = `\u001B]8;;${provider.rotationUrl}\u001B\\${chalk.underline.cyan(provider.rotationUrl)}\u001B]8;;\u001B\\`;
+    return `  ${icon} ${chalk.bold(provider.displayName)}  →  Rotate: ${link}`;
+}
+// ─── Secret Masker ───────────────────────────────────────────────────────────
+/**
+ * Mask a secret value for safe display.
+ *
+ * - If value ≥ 12 chars: show first 4 + asterisks + last 4
+ * - If value < 12 chars: show first 2 + asterisks for rest
+ */
+export function maskSecret(value) {
+    if (value.length >= 12) {
+        const first = value.slice(0, 4);
+        const last = value.slice(-4);
+        const masked = "*".repeat(Math.min(value.length - 8, 16));
+        return `${first}${masked}${last}`;
+    }
+    if (value.length <= 2) {
+        return "*".repeat(value.length);
+    }
+    const first = value.slice(0, 2);
+    const masked = "*".repeat(value.length - 2);
+    return `${first}${masked}`;
+}
+// ─── Diff Formatter ──────────────────────────────────────────────────────────
+/**
+ * Simple colored diff between two strings.
+ * Lines prefixed with - are colored red (removed).
+ * Lines prefixed with + are colored green (added).
+ * Context lines are dimmed.
+ */
+export function formatDiff(before, after) {
+    const beforeLines = before.split("\n");
+    const afterLines = after.split("\n");
+    const output = [];
+    // Build a simple LCS-based diff
+    const lcs = buildLCS(beforeLines, afterLines);
+    let bi = 0;
+    let ai = 0;
+    let li = 0;
+    while (bi < beforeLines.length || ai < afterLines.length) {
+        if (li < lcs.length &&
+            bi < beforeLines.length &&
+            ai < afterLines.length &&
+            beforeLines[bi] === lcs[li] &&
+            afterLines[ai] === lcs[li]) {
+            // Context line — common to both
+            output.push(chalk.dim(`  ${beforeLines[bi]}`));
+            bi++;
+            ai++;
+            li++;
+        }
+        else if (bi < beforeLines.length &&
+            (li >= lcs.length || beforeLines[bi] !== lcs[li])) {
+            // Removed line
+            output.push(chalk.red(`- ${beforeLines[bi]}`));
+            bi++;
+        }
+        else if (ai < afterLines.length &&
+            (li >= lcs.length || afterLines[ai] !== lcs[li])) {
+            // Added line
+            output.push(chalk.green(`+ ${afterLines[ai]}`));
+            ai++;
+        }
+        else {
+            // Fallback safety — shouldn't happen
+            break;
+        }
+    }
+    return output.join("\n");
+}
+/**
+ * Build the Longest Common Subsequence of two string arrays.
+ */
+function buildLCS(a, b) {
+    const m = a.length;
+    const n = b.length;
+    // Build DP table
+    const dp = Array.from({ length: m + 1 }, () => Array.from({ length: n + 1 }, () => 0));
+    for (let i = 1; i <= m; i++) {
+        for (let j = 1; j <= n; j++) {
+            if (a[i - 1] === b[j - 1]) {
+                dp[i][j] = (dp[i - 1]?.[j - 1] ?? 0) + 1;
+            }
+            else {
+                dp[i][j] = Math.max(dp[i - 1]?.[j] ?? 0, dp[i]?.[j - 1] ?? 0);
+            }
+        }
+    }
+    // Backtrack to recover the LCS
+    const result = [];
+    let i = m;
+    let j = n;
+    while (i > 0 && j > 0) {
+        if (a[i - 1] === b[j - 1]) {
+            result.unshift(a[i - 1]);
+            i--;
+            j--;
+        }
+        else if ((dp[i - 1]?.[j] ?? 0) > (dp[i]?.[j - 1] ?? 0)) {
+            i--;
+        }
+        else {
+            j--;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=format.js.map

package/dist/ui/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/ui/format.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,6DAA6D;AAE7D,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,QAAkB;IAC7C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAkB;IAC9C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrC,KAAK,SAAS;YACZ,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxC,KAAK,MAAM;YACT,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAAoB;IAChD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI;QAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzC,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;IAE/C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,IAAI,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,KAAa;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,GAAG,GAAG,CAAC;IACvB,MAAM,SAAS,GAAG,GAAG,CAAC;IAEtB,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,GAAG,GACP,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEnD,OAAO,GAAG,GAAG,KAAK,GAAG,KAAK,UAAU,EAAE,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,GAAG;YACN,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,KAAK,GAAG;YACN,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxC,KAAK,GAAG,CAAC;QACT,KAAK,GAAG;YACN,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrC;YACE,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAsB;IACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC;IACnC,gDAAgD;IAChD,MAAM,IAAI,GAAG,aAAa,QAAQ,CAAC,WAAW,WAAW,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC;IACxH,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5C,OAAO,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAa;IACtD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,gCAAgC;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC9C,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,EAAE,GAAG,CAAC,CAAC;IAEX,OAAO,EAAE,GAAG,WAAW,CAAC,MAAM,IAAI,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QACzD,IACE,EAAE,GAAG,GAAG,CAAC,MAAM;YACf,EAAE,GAAG,WAAW,CAAC,MAAM;YACvB,EAAE,GAAG,UAAU,CAAC,MAAM;YACtB,WAAW,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,EAC1B,CAAC;YACD,gCAAgC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/C,EAAE,EAAE,CAAC;YACL,EAAE,EAAE,CAAC;YACL,EAAE,EAAE,CAAC;QACP,CAAC;aAAM,IACL,EAAE,GAAG,WAAW,CAAC,MAAM;YACvB,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,IAAI,WAAW,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,EACjD,CAAC;YACD,eAAe;YACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/C,EAAE,EAAE,CAAC;QACP,CAAC;aAAM,IACL,EAAE,GAAG,UAAU,CAAC,MAAM;YACtB,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,IAAI,UAAU,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,EAChD,CAAC;YACD,aAAa;YACb,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAChD,EAAE,EAAE,CAAC;QACP,CAAC;aAAM,CAAC;YACN,qCAAqC;YACrC,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,CAAW,EAAE,CAAW;IACxC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAEnB,iBAAiB;IACjB,MAAM,EAAE,GAAe,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CACxD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CACvC,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC1B,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;YAC1B,CAAC,EAAE,CAAC;YACJ,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzD,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,CAAC;YACN,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/ui/reporter.d.ts

@@ -0,0 +1,39 @@
+import type { Ora } from "ora";
+import type { ScanResult, WatchEvent, FixAction, Snapshot } from "../types/index.js";
+/**
+ * Start a scan spinner — returns the ora instance for later updates.
+ */
+export declare function reportScanStart(projectDir: string): Ora;
+/**
+ * Update the spinner text mid-scan.
+ */
+export declare function reportScanProgress(spinner: Ora, message: string): void;
+/**
+ * Print a comprehensive, beautiful scan report with findings grouped by
+ * severity and a framed health card.
+ */
+export declare function reportScanResults(result: ScanResult, options?: {
+    fun?: boolean;
+    verbose?: boolean;
+}): void;
+/**
+ * Print a real-time watch notification for a file event.
+ */
+export declare function reportWatchEvent(event: WatchEvent): void;
+/**
+ * Show a preview of all fix actions that will be applied.
+ */
+export declare function reportFixPreview(actions: FixAction[]): void;
+/**
+ * Report fix application summary.
+ */
+export declare function reportFixComplete(applied: number, skipped: number): void;
+/**
+ * Report a successful undo (snapshot restore).
+ */
+export declare function reportUndoComplete(snapshot: Snapshot): void;
+/**
+ * Print the zero-friction onboarding summary after `bilt init`.
+ */
+export declare function reportInitComplete(result: ScanResult, fixesApplied: number): void;
+//# sourceMappingURL=reporter.d.ts.map

package/dist/ui/reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporter.d.ts","sourceRoot":"","sources":["../../src/ui/reporter.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAC/B,OAAO,KAAK,EACV,UAAU,EAEV,UAAU,EACV,SAAS,EACT,QAAQ,EAET,MAAM,mBAAmB,CAAC;AAU3B;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAOvD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAEtE;AAID;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,UAAU,EAClB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GACjD,IAAI,CAmJN;AAID;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAgBxD;AAID;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CA0B3D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAoBxE;AAID;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAc3D;AAID;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,UAAU,EAClB,YAAY,EAAE,MAAM,GACnB,IAAI,CAkCN"}