canship 0.5.0 → 0.6.0

package/dist/cli.js

@@ -2,7 +2,7 @@
 
 // src/cli.ts
 import { isAbsolute as isAbsolute3, relative as relative_, resolve as resolve2 } from "path";
-import { existsSync as existsSync3, realpathSync as realpathSync3, statSync as statSync5, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync3, realpathSync as realpathSync4, statSync as statSync6, writeFileSync as writeFileSync2 } from "fs";
 
 // src/rules/patterns.ts
 var IRRELEVANT_HOSTS = /^(?:localhost|127\.0\.0\.1|0\.0\.0\.0|\[::1\]|host\.docker\.internal|.*\.?example\.(?:com|org|net)|.*\.(?:test|invalid|localhost))$/i;
@@ -375,12 +375,12 @@ function isNetworkPath(path) {
   return process.platform === "win32" && (path.startsWith("\\\\") || path.startsWith("//"));
 }
 function resolveGitExecutable(root) {
-  const executable = process.platform === "win32" ? "git.exe" : "git";
+  const executable2 = process.platform === "win32" ? "git.exe" : "git";
   const unsafe = untrustedRoots(root);
   for (const rawEntry of (process.env.PATH ?? "").split(delimiter)) {
     const entry = cleanPathEntry(rawEntry);
     if (!entry || !isAbsolute(entry) || isNetworkPath(entry) || isProjectBin(entry)) continue;
-    const candidate = join(entry, executable);
+    const candidate = join(entry, executable2);
     try {
       if (!statSync(candidate).isFile()) continue;
       if (process.platform !== "win32") accessSync(candidate, constants.X_OK);
@@ -463,8 +463,8 @@ function hardeningArgs(root) {
     `core.hooksPath=${noHooks}`
   ];
 }
-function execGitSync(executable, root, args, options = {}) {
-  return execFileSync(executable, [...hardeningArgs(root), ...args], {
+function execGitSync(executable2, root, args, options = {}) {
+  return execFileSync(executable2, [...hardeningArgs(root), ...args], {
     timeout: GIT_TIMEOUT_MS,
     cwd: root,
     encoding: "utf8",
@@ -474,8 +474,8 @@ function execGitSync(executable, root, args, options = {}) {
     env: gitEnvironment()
   });
 }
-function execGitBatch(executable, root, args, input, options = {}) {
-  return execFileSync(executable, [...hardeningArgs(root), ...args], {
+function execGitBatch(executable2, root, args, input, options = {}) {
+  return execFileSync(executable2, [...hardeningArgs(root), ...args], {
     timeout: GIT_TIMEOUT_MS,
     cwd: root,
     input,
@@ -817,8 +817,7 @@ function walkTree(root, skipped, wantAll, maxEntries) {
         }
         if (!metadata.isFile()) continue;
         if (wantAll) all.push(rel);
-        const isCandidate = isEnvFile(entry.name) || CREDENTIAL_FILENAMES.has(entry.name) || CREDENTIAL_EXTENSIONS.has(extname(entry.name).toLowerCase()) || isWorthProbing(rel);
-        if (isCandidate) found.push(rel);
+        if (isCredentialName(entry.name) || isWorthProbing(rel)) found.push(rel);
       }
     } catch (err) {
       if (!isMissing(err)) skipped.push({
@@ -871,6 +870,9 @@ function isExampleContext(relPath) {
   if (/\.(test|spec)\.[jt]sx?$/i.test(name)) return true;
   return false;
 }
+function isCredentialName(name) {
+  return isEnvFile(name) || CREDENTIAL_FILENAMES.has(name) || CREDENTIAL_EXTENSIONS.has(extname(name).toLowerCase());
+}
 function readablePath(root, path, skipped) {
   const rel = relative2(root, path);
   if (!rel || rel === ".." || rel.startsWith(`..${sep2}`) || isAbsolute2(rel)) {
@@ -934,8 +936,16 @@ function collectFiles(root, isGitRepo, gitExecutable = resolveGitExecutable(root
   let filesRead = 0;
   const maxBytes = limits.maxBytes ?? MAX_SCAN_BYTES;
   const maxFiles = limits.maxFiles ?? MAX_SCAN_FILES;
+  const credentials = [];
+  const sources = [];
+  const probes = [];
   for (const relPath of candidates) {
     if (!forced.has(relPath) && !shouldScan(relPath)) continue;
+    if (isCredentialName(basename(relPath))) credentials.push(relPath);
+    else if (isWorthProbing(relPath)) probes.push(relPath);
+    else sources.push(relPath);
+  }
+  for (const relPath of [...credentials, ...sources, ...probes]) {
     const absPath = join2(root, relPath);
     let content;
     try {
@@ -1056,6 +1066,8 @@ var BACKSLASH = 92;
 var DOLLAR = 36;
 var OPEN_BRACE = 123;
 var CLOSE_BRACE = 125;
+var LESS_THAN = 60;
+var GREATER_THAN = 62;
 var NEWLINE = 10;
 var SPACE = 32;
 function codesOf(src) {
@@ -1094,19 +1106,19 @@ function endOfString(src, start, quote) {
 }
 var REGEX_PREFIX_WORDS = /* @__PURE__ */ new Set(["return", "throw", "case", "delete", "void", "typeof", "instanceof", "in", "of", "new", "yield", "await", "else", "do"]);
 var CONTROL_WORDS = /* @__PURE__ */ new Set(["if", "while", "for", "with", "switch", "catch"]);
-var regexContext = () => ({ allowed: true, control: false, member: false, parentheses: [], failedUntil: -1 });
+var regexContext = () => ({ allowed: true, control: false, member: false, parentheses: [] });
 function valueEnded(context) {
   context.allowed = false;
   context.control = false;
   context.member = false;
 }
-function regexAt(src, start, context) {
-  if (!context.allowed || start < context.failedUntil || src[start + 1] === "=") return null;
+function regexAt(src, start, context, state) {
+  if (!context.allowed || start < state.failedUntil) return null;
   let inClass = false;
   for (let i = start + 1; i < src.length; i++) {
     const ch = src[i];
     if (ch === "\n" || ch === "\r") {
-      context.failedUntil = i;
+      state.failedUntil = i;
       return null;
     }
     if (ch === "\\") {
@@ -1122,15 +1134,15 @@ function regexAt(src, start, context) {
       return { close: i, end };
     }
   }
-  context.failedUntil = src.length;
+  state.failedUntil = src.length;
   return null;
 }
 function advanceCode(src, at, context) {
   const ch = src[at];
   if (/\s/.test(ch)) return at + 1;
-  if (/[A-Za-z_$\u0080-\uffff]/.test(ch)) {
+  if (/[A-Za-z_$\u0080-￿]/.test(ch)) {
     let end = at + 1;
-    while (end < src.length && /[\w$\u0080-\uffff]/.test(src[end])) end++;
+    while (end < src.length && /[\w$\u0080-￿]/.test(src[end])) end++;
     const word = src.slice(at, end);
     context.control = !context.member && CONTROL_WORDS.has(word);
     context.allowed = !context.member && REGEX_PREFIX_WORDS.has(word);
@@ -1155,11 +1167,39 @@ function advanceCode(src, at, context) {
   context.member = false;
   return at + 1;
 }
-function maskTemplate(src, out, start, maskStrings = true) {
+var JSX_START = /<(?:>|([A-Za-z_$][\w$.:-]*)(?=[\s/>])(?!\s*(?:,|=|extends\b)))/y;
+function jsxStartsAt(src, at) {
+  JSX_START.lastIndex = at;
+  const match = JSX_START.exec(src);
+  if (!match) return false;
+  const name = match[1];
+  if (!name || !/^[A-Z]/.test(name)) return true;
+  const after = at + 1 + name.length;
+  return !/^>\s*\(/.test(src.slice(after, after + 64));
+}
+function maskSource(src, maskStrings, jsx) {
   const length = src.length;
-  const stack = [{ kind: "literal", from: start + 1 }];
-  let i = start + 1;
-  while (i < length && stack.length > 0) {
+  const out = codesOf(src);
+  const state = { failedUntil: -1 };
+  const stack = [{ kind: "code", depth: 0, lexical: regexContext(), nested: false }];
+  const text = (from, to) => {
+    if (maskStrings) blank(out, from, to);
+  };
+  const expression = () => ({ kind: "code", depth: 1, lexical: regexContext(), nested: true });
+  const skipComment = (at) => {
+    const star = src.charCodeAt(at + 1) === STAR;
+    const close = star ? src.indexOf("*/", at + 2) : src.indexOf("\n", at);
+    const stop = close === -1 ? length : close + (star ? 2 : 0);
+    blank(out, at, stop);
+    return stop;
+  };
+  const elementClosed = (at) => {
+    const parent = stack[stack.length - 1];
+    if (parent?.kind === "children") parent.from = at;
+    else if (parent?.kind === "code") valueEnded(parent.lexical);
+  };
+  let i = 0;
+  while (i < length) {
     const frame = stack[stack.length - 1];
     const ch = src.charCodeAt(i);
     if (frame.kind === "literal") {
@@ -1168,171 +1208,155 @@ function maskTemplate(src, out, start, maskStrings = true) {
         continue;
       }
       if (ch === BACKTICK) {
-        if (maskStrings) blank(out, frame.from, i);
+        text(frame.from, i);
         stack.pop();
         const parent = stack[stack.length - 1];
-        if (parent?.kind === "expression") valueEnded(parent.lexical);
+        if (parent?.kind === "code") valueEnded(parent.lexical);
         i++;
         continue;
       }
       if (ch === DOLLAR && src.charCodeAt(i + 1) === OPEN_BRACE) {
-        if (maskStrings) blank(out, frame.from, i);
-        stack.push({ kind: "expression", depth: 1, lexical: regexContext() });
+        text(frame.from, i);
+        stack.push(expression());
         i += 2;
         continue;
       }
       i++;
       continue;
     }
-    if (ch === SLASH) {
-      const next = src.charCodeAt(i + 1);
-      if (next === SLASH || next === STAR) {
-        const close = next === SLASH ? src.indexOf("\n", i) : src.indexOf("*/", i + 2);
-        const stop = close === -1 ? length : close + (next === STAR ? 2 : 0);
-        blank(out, i, stop);
-        i = stop;
+    if (frame.kind === "children") {
+      if (ch === OPEN_BRACE) {
+        text(frame.from, i);
+        stack.push(expression());
+        i++;
         continue;
       }
-      const regex = regexAt(src, i, frame.lexical);
-      if (regex) {
-        if (maskStrings) blank(out, i + 1, regex.close);
-        i = regex.end;
+      if (ch === LESS_THAN && src.charCodeAt(i + 1) === SLASH) {
+        text(frame.from, i);
+        stack.push({ kind: "tag", closing: true });
+        i += 2;
+        continue;
+      }
+      if (ch === LESS_THAN && jsxStartsAt(src, i)) {
+        text(frame.from, i);
+        stack.push({ kind: "tag", closing: false });
+        i++;
         continue;
       }
-    }
-    if (ch === DOUBLE_QUOTE || ch === SINGLE_QUOTE) {
-      const stop = endOfString(src, i, ch);
-      if (maskStrings) blank(out, i + 1, stop - 1);
-      valueEnded(frame.lexical);
-      i = stop;
-      continue;
-    }
-    if (ch === BACKTICK) {
-      stack.push({ kind: "literal", from: i + 1 });
       i++;
       continue;
     }
-    if (ch === OPEN_BRACE) frame.depth++;
-    else if (ch === CLOSE_BRACE) {
-      frame.depth--;
-      if (frame.depth === 0) {
-        stack.pop();
-        const parent = stack[stack.length - 1];
-        if (parent.kind === "literal") parent.from = i + 1;
+    if (frame.kind === "tag") {
+      if (ch === SLASH && (src.charCodeAt(i + 1) === SLASH || src.charCodeAt(i + 1) === STAR)) {
+        i = skipComment(i);
+        continue;
       }
-    }
-    i = advanceCode(src, i, frame.lexical);
-  }
-  const last = stack[stack.length - 1];
-  if (maskStrings && last?.kind === "literal") blank(out, last.from, length);
-  return i;
-}
-function maskJsComments(src) {
-  const length = src.length;
-  const out = codesOf(src);
-  let i = 0;
-  const lexical = regexContext();
-  while (i < length) {
-    const ch = src.charCodeAt(i);
-    if (ch === SLASH) {
-      const next = src.charCodeAt(i + 1);
-      if (next === SLASH) {
-        const end = src.indexOf("\n", i);
-        const stop = end === -1 ? length : end;
-        blank(out, i, stop);
+      if (ch === DOUBLE_QUOTE || ch === SINGLE_QUOTE) {
+        const close = src.indexOf(src[i], i + 1);
+        const stop = close === -1 ? length : close + 1;
+        text(i + 1, close === -1 ? length : close);
         i = stop;
         continue;
       }
-      if (next === STAR) {
-        const close = src.indexOf("*/", i + 2);
-        const stop = close === -1 ? length : close + 2;
-        blank(out, i, stop);
-        i = stop;
+      if (ch === OPEN_BRACE) {
+        stack.push(expression());
+        i++;
         continue;
       }
-    }
-    if (ch === SLASH) {
-      const regex = regexAt(src, i, lexical);
-      if (regex) {
-        i = regex.end;
+      if (ch === LESS_THAN && !frame.closing && jsxStartsAt(src, i)) {
+        stack.push({ kind: "tag", closing: false });
+        i++;
         continue;
       }
-    }
-    if (ch === DOUBLE_QUOTE || ch === SINGLE_QUOTE) {
-      i = endOfString(src, i, ch);
-      valueEnded(lexical);
-      continue;
-    }
-    if (ch === BACKTICK) {
-      i = maskTemplate(src, out, i, false);
-      valueEnded(lexical);
-      continue;
-    }
-    i = advanceCode(src, i, lexical);
-  }
-  return stringOf(out);
-}
-function maskJsNoise(src) {
-  const length = src.length;
-  const out = codesOf(src);
-  let i = 0;
-  const lexical = regexContext();
-  while (i < length) {
-    const ch = src.charCodeAt(i);
-    if (ch === SLASH) {
-      const next = src.charCodeAt(i + 1);
-      if (next === SLASH) {
-        const end = src.indexOf("\n", i);
-        const stop = end === -1 ? length : end;
-        blank(out, i, stop);
-        i = stop;
+      if (ch === SLASH && src.charCodeAt(i + 1) === GREATER_THAN && !frame.closing) {
+        stack.pop();
+        elementClosed(i + 2);
+        i += 2;
         continue;
       }
-      if (next === STAR) {
-        const close = src.indexOf("*/", i + 2);
-        const stop = close === -1 ? length : close + 2;
-        blank(out, i, stop);
-        i = stop;
+      if (ch === GREATER_THAN) {
+        stack.pop();
+        if (frame.closing) {
+          if (stack[stack.length - 1]?.kind === "children") stack.pop();
+          elementClosed(i + 1);
+        } else {
+          stack.push({ kind: "children", from: i + 1 });
+        }
+        i++;
         continue;
       }
+      i++;
+      continue;
     }
     if (ch === SLASH) {
-      const regex = regexAt(src, i, lexical);
+      const next = src.charCodeAt(i + 1);
+      if (next === SLASH || next === STAR) {
+        i = skipComment(i);
+        continue;
+      }
+      const regex = regexAt(src, i, frame.lexical, state);
       if (regex) {
-        blank(out, i + 1, regex.close);
+        text(i + 1, regex.close);
         i = regex.end;
         continue;
       }
     }
     if (ch === DOUBLE_QUOTE || ch === SINGLE_QUOTE) {
       const stop = endOfString(src, i, ch);
-      blank(out, i + 1, stop - 1);
-      valueEnded(lexical);
+      text(i + 1, stop - 1);
+      valueEnded(frame.lexical);
       i = stop;
       continue;
     }
     if (ch === BACKTICK) {
-      i = maskTemplate(src, out, i);
-      valueEnded(lexical);
+      stack.push({ kind: "literal", from: i + 1 });
+      i++;
       continue;
     }
-    i = advanceCode(src, i, lexical);
+    const markup = ch === LESS_THAN && !jsx && /^<[A-Za-z_$][\w$.:-]*\s+[\w:-]+\s*=\s*['"{]/.test(src.slice(i, i + 256));
+    if ((jsx || markup) && ch === LESS_THAN && frame.lexical.allowed && jsxStartsAt(src, i)) {
+      stack.push({ kind: "tag", closing: false });
+      i++;
+      continue;
+    }
+    if (ch === OPEN_BRACE) frame.depth++;
+    else if (ch === CLOSE_BRACE) {
+      frame.depth--;
+      if (frame.nested && frame.depth === 0) {
+        stack.pop();
+        const parent = stack[stack.length - 1];
+        if (parent.kind === "literal" || parent.kind === "children") parent.from = i + 1;
+        i++;
+        continue;
+      }
+    }
+    i = advanceCode(src, i, frame.lexical);
   }
+  const last = stack[stack.length - 1];
+  if (last?.kind === "literal" || last?.kind === "children") text(last.from, length);
   return stringOf(out);
 }
+function maskJsComments(src, options = {}) {
+  return maskSource(src, false, options.jsx === true);
+}
+function maskJsNoise(src, options = {}) {
+  return maskSource(src, true, options.jsx === true);
+}
+var JSX_FILE = /\.(?:jsx|tsx|js|mjs|cjs)$/i;
+var maskOptionsOf = (file) => ({ jsx: typeof file.path === "string" && JSX_FILE.test(file.path) });
 var commentCache = /* @__PURE__ */ new WeakMap();
 var noiseCache = /* @__PURE__ */ new WeakMap();
 function commentsMaskedOf(file) {
   const hit = commentCache.get(file);
   if (hit !== void 0) return hit;
-  const masked = maskJsComments(file.content);
+  const masked = maskJsComments(file.content, maskOptionsOf(file));
   commentCache.set(file, masked);
   return masked;
 }
 function noiseMaskedOf(file) {
   const hit = noiseCache.get(file);
   if (hit !== void 0) return hit;
-  const masked = maskJsNoise(file.content);
+  const masked = maskJsNoise(file.content, maskOptionsOf(file));
   noiseCache.set(file, masked);
   return masked;
 }
@@ -1638,7 +1662,7 @@ function checkEnvFile(file) {
           `For anything the browser needs, use the anon key (NEXT_PUBLIC_SUPABASE_ANON_KEY) together with Row Level Security policies.`
         ],
         humanOnly: [
-          `Rotate the service_role key in your Supabase dashboard (Project Settings -> API). If your site has ever been deployed with this key, assume it is already compromised \u2014 renaming the variable does not revoke it.`
+          `Rotate the Supabase service_role key in your Supabase dashboard (Project Settings -> API). If your site has ever been deployed with this key, assume it is already compromised \u2014 renaming the variable does not revoke it.`
         ]
       });
       continue;
@@ -1720,7 +1744,8 @@ function pushServiceRoleJwts(findings, file, line, i, clientSide) {
         `Put it in .env as SUPABASE_SERVICE_ROLE_KEY (no public prefix) and read it via process.env on the server only.`
       ],
       humanOnly: [
-        `Rotate the key in your Supabase dashboard (Project Settings -> API) \u2014 the current one must be treated as compromised.`
+        // 与公开变量中的同类结果使用相同首句，汇总时合并为一个轮换步骤。
+        `Rotate the Supabase service_role key in your Supabase dashboard (Project Settings -> API) \u2014 the current one must be treated as compromised.`
       ]
     });
   }
@@ -1974,8 +1999,9 @@ var gitleakRule = {
         ],
         fix: [`Add ${path} to .gitignore.`, untrackStep(path)],
         humanOnly: [
-          `Rotate every credential in that file. This is the step people skip, and it is the only one that actually stops the leak.`,
-          `Removing it from history entirely requires rewriting the repo (git filter-repo or BFG). Do that only after rotating the keys \u2014 rotation is what matters, and history rewriting is disruptive enough that it should be a deliberate decision.`
+          // 人工步骤会被单独汇总，首句须写明文件并能独立执行。
+          `Rotate every credential in ${path}. This is the step people skip, and it is the only one that actually stops the leak.`,
+          `If you want ${path} gone from git history, rewrite the history with git filter-repo or BFG Repo-Cleaner after rotating the keys. Rotation is what matters; history rewriting is disruptive enough that it should be a deliberate decision.`
         ]
       });
       reportedTracked.add(path);
@@ -2017,8 +2043,8 @@ var gitleakRule = {
         ],
         fix: stillTracked ? [`Add ${path} to .gitignore.`, untrackStep(path)] : [`Confirm ${path} is in .gitignore so it does not come back.`],
         humanOnly: [
-          `Rotate every credential that was ever in this file. Do this first, and do not skip it \u2014 it is the only step that actually revokes access.`,
-          `Then, if you need the history cleaned, rewrite it with git filter-repo or BFG Repo-Cleaner. Do this deliberately: it rewrites every commit hash and disrupts anyone else working on the repo.`
+          `Rotate every credential that was ever in ${path}. Do this first, and do not skip it \u2014 it is the only step that actually revokes access.`,
+          `If you want ${path} gone from git history, rewrite the history with git filter-repo or BFG Repo-Cleaner after rotating the keys. Do this deliberately: it rewrites every commit hash and disrupts anyone else working on the repo.`
         ]
       });
     }
@@ -2648,8 +2674,8 @@ var supabaseRlsRule = {
           `Keep this in a migration rather than only in the dashboard, so the rule travels with your code.`
         ],
         humanOnly: [
-          `Check the real state first: open Table Editor in the Supabase dashboard and look for the "RLS disabled" badge on "${entry.table}". The repository cannot tell you whether RLS was turned on there.`,
-          `If this table has been live without RLS, assume its contents have already been read.`
+          // 后果说明并入同一步骤，汇总时不会变成脱离表名的独立条目。
+          `Check the real state first: open Table Editor in the Supabase dashboard and look for the "RLS disabled" badge on "${entry.table}". The repository cannot tell you whether RLS was turned on there. If the table has been live without RLS, assume its contents have already been read.`
         ]
       });
     }
@@ -2739,14 +2765,15 @@ function policyFindings(ctx, policies, live, keyOf, buckets) {
       ruleId: "supabase/permissive-policy",
       severity: "P1",
       confidence: modifiesAny && !needsReview ? "certain" : "likely",
-      title: needsReview ? `Policy "${p.name}" has an unrestricted condition on ${table}; other conditions require review` : opensRows ? `Policy "${p.name}" lets ${audience} ${verb} every row of ${table}` : `Policy "${p.name}" lets ${audience} write any values into ${table}`,
+      title: hasRestriction ? `Policy "${p.name}" has an unrestricted condition on ${table}; other conditions require review` : limitedCheck ? `Policy "${p.name}" lets ${audience} target any row of ${table} for updates; only the new values are checked` : opensRows ? `Policy "${p.name}" lets ${audience} ${verb} every row of ${table}` : `Policy "${p.name}" lets ${audience} write any values into ${table}`,
       file: p.file,
       line: p.line,
       excerpt: excerpt(p.file, p.line),
       why: [
         `This policy contains an always-true condition. Permissive policies combine with OR, while applicable restrictive policies combine with AND. Database grants, SELECT policies and WITH CHECK conditions may further limit access.`,
         ...hasRestriction ? ["A restrictive policy on this table may limit access; verify its command and role coverage."] : [],
-        ...limitedCheck ? ["The WITH CHECK condition is not known to be always true, so unrestricted updates are not established."] : [],
+        // PostgreSQL：USING 决定可更新的已有行，WITH CHECK 只约束写回的新行；带条件的更新还需通过 SELECT 策略。
+        ...limitedCheck ? ["USING is always true, so this policy does not limit which existing rows can be updated. WITH CHECK only validates the values written back: a caller may overwrite other users' rows, for example by setting the owner column to their own ID. Updates that filter or return rows must also pass SELECT policies, which may prevent this."] : [],
         ...p.command === "select" || p.command === "insert" ? [`Public read-only tables and open forms can be intentional. If this one is, keep it and consider restricting the columns the API exposes.`] : []
       ],
       fix: [
@@ -3108,6 +3135,15 @@ function namePattern(names) {
 }
 
 // src/rules/auth-values.ts
+function project(value, path) {
+  let current = value;
+  for (const property of path) {
+    if (current.kind === "envelope") current = property === "data" ? { kind: "data", field: current.field } : { kind: "opaque" };
+    else if (current.kind === "data") current = property === current.field ? { kind: "identity" } : { kind: "opaque" };
+    else break;
+  }
+  return current;
+}
 var limited = /* @__PURE__ */ new WeakSet();
 var cache2 = /* @__PURE__ */ new WeakMap();
 var reverseCache = /* @__PURE__ */ new WeakMap();
@@ -3305,8 +3341,10 @@ var AuthValues = class {
       return { kind: "opaque" };
     }
     if (/^process\.env\.[A-Z_][A-Z0-9_]*$/.test(expr)) return { kind: "secret" };
+    const template = /^`[^`$]*\$\{([^{}`]{1,200})\}[^`$]*`$/.exec(expr);
+    if (template) return this.value(template[1], at, depth + 1).kind === "secret" ? { kind: "secret" } : { kind: "literal" };
     if (/^(?:(?:true|false|null|undefined)\b|\d|['"`{\[])/.test(expr)) return { kind: "literal" };
-    const call = /^(?:await\s+)?((?:[A-Za-z_$][\w$]*\.)*(?:getUser|getUserSession|getSession|getServerSession|safeGetSession|currentUser|verifyIdToken|auth))\s*\(/.exec(expr);
+    const call = /^(?:await\s+)?((?:[A-Za-z_$][\w$]*\.)*(?:getUser|getClaims|getUserSession|getSession|getServerSession|safeGetSession|currentUser|verifyIdToken|auth))\s*\(/.exec(expr);
     const callee = call?.[1];
     const identityCall = callee && !/\.(?:body|query|headers|cookies)\b/.test(callee);
     if (identityCall) {
@@ -3319,7 +3357,10 @@ var AuthValues = class {
       }
       if (depth2 !== 0 || masked.slice(end).trim() !== "") return { kind: "opaque" };
       if (/\|\||&&|\?(?!\.)|\.then\s*\(/.test(expr) || /\.catch\s*\(/.test(expr)) return { kind: "opaque" };
-      return { kind: /\.auth\.getUser\s*\(/.test(expr) ? "envelope" : "identity" };
+      if (/\.auth\.getSession\s*\($/.test(call[0])) return { kind: "opaque" };
+      const envelope = /\.auth\.(getUser|getClaims)\s*\($/.exec(call[0])?.[1];
+      if (envelope) return { kind: "envelope", field: envelope === "getUser" ? "user" : "claims" };
+      return { kind: "identity" };
     }
     if (/\.(?:body|query|headers|cookies|searchParams)\b|\.(?:json|text|formData)\s*\(/.test(expr)) return { kind: "input" };
     const access = /^([A-Za-z_$][\w$]*)((?:\??\.[A-Za-z_$][\w$]*)*)$/.exec(expr);
@@ -3341,14 +3382,10 @@ var AuthValues = class {
       }
       if (this.conditions.some((range) => range.start <= assignment.at && assignment.at <= range.end && !(range.start <= at && at <= range.end))) return { kind: "opaque" };
       value = this.value(assignment.expression, assignment.at, depth + 1);
-      if (assignment.projection === null) value = { kind: "opaque" };
-      else if (assignment.projection.length && value.kind === "envelope") value = {
-        kind: assignment.projection.join(".") === "data.user" ? "identity" : "opaque"
-      };
+      value = assignment.projection === null ? { kind: "opaque" } : project(value, assignment.projection);
     } else if (this.parameters.has(name)) value = { kind: "parameter", parameters: [this.parameters.get(name)] };
     else value = { kind: "unknown" };
-    if (value.kind === "envelope") return { kind: /^\??\.data\??\.user$/.test(access[2]) ? "identity" : "envelope" };
-    return value;
+    return project(value, access[2].split(/\??\./).filter(Boolean));
   }
 };
 function identityRequirement(value, allowParameters) {
@@ -3574,6 +3611,8 @@ var ACCESS_CHAIN = String.raw`[\w$]+(?:\??\.[\w$]+)*`;
 var NEGATED_IDENTITY = new RegExp(`^!\\s*${ACCESS_CHAIN}(?:\\s*\\([^=]*\\))?$`);
 var IDENTITY_IS_EMPTY = new RegExp(`^${ACCESS_CHAIN}\\s*={2,3}\\s*(?:null|undefined|false)$`);
 var IDENTITY_MISMATCH = new RegExp(`^${ACCESS_CHAIN}\\s*!={1,2}\\s*(?!(?:null|undefined|false)\\b)${ACCESS_CHAIN}$`);
+var COMPARED_VALUE = String.raw`(?!(?:null|undefined|true|false)\b)(?:${ACCESS_CHAIN}(?:\s*\([^()]{0,200}\))?|\`[^\`]{0,300}\`)`;
+var SECRET_MISMATCH = new RegExp(`^${COMPARED_VALUE}\\s*!={1,2}\\s*${COMPARED_VALUE}$`);
 var STOPS_REQUEST = /^(?:(?:return|throw|redirect|notFound)\b|error\s*\(\s*40[13]\b)/;
 var DENIED_STATUS = /\b(?:return|throw)\b[\s\S]{0,300}\bstatus(?:Code)?\s*[:(=]\s*(?:401|403)\b|\berror\s*\(\s*40[13]\b/i;
 function closingDelimiter(source, start, open, close) {
@@ -3631,7 +3670,7 @@ function hasConditionalAuthGuard(code, requireThrow = false, accept) {
     const returnsDeniedStatus = DENIED_STATUS.test(statement);
     const negative = !/&&|\?(?!\.)/.test(condition) && condition.split("||").some((part) => {
       const term = part.trim();
-      return accept ? (NEGATED_IDENTITY.test(term) || IDENTITY_IS_EMPTY.test(term) || IDENTITY_MISMATCH.test(term)) && accept(term) : rejectsMissingIdentity(term, returnsDeniedStatus);
+      return accept ? (NEGATED_IDENTITY.test(term) || IDENTITY_IS_EMPTY.test(term) || IDENTITY_MISMATCH.test(term) || SECRET_MISMATCH.test(term)) && accept(term) : rejectsMissingIdentity(term, returnsDeniedStatus);
     });
     if (negative) return true;
   }
@@ -3735,7 +3774,7 @@ function unguardedOpsOf(file) {
   return hit;
 }
 function operationsInRange(ops, start, end) {
-  const lowerBound = (value) => {
+  const lowerBound2 = (value) => {
     let low = 0, high = ops.length;
     while (low < high) {
       const middle = low + high >>> 1;
@@ -3744,7 +3783,7 @@ function operationsInRange(ops, start, end) {
     }
     return low;
   };
-  return ops.slice(lowerBound(start + 1), lowerBound(end));
+  return ops.slice(lowerBound2(start + 1), lowerBound2(end));
 }
 var lineStartsCache = /* @__PURE__ */ new WeakMap();
 function lineStartsCached(file) {
@@ -3755,12 +3794,12 @@ function lineStartsCached(file) {
   }
   return hit;
 }
-function cachedByFile(check) {
+function cachedByFile(check2) {
   const cache3 = /* @__PURE__ */ new WeakMap();
   return (file) => {
     let hit = cache3.get(file);
     if (hit === void 0) {
-      hit = check(file);
+      hit = check2(file);
       cache3.set(file, hit);
     }
     return hit;
@@ -4800,6 +4839,10 @@ var apiAuthRule = {
       const globalNote = globalGuard === null ? [] : [
         `${globalGuard} contains an authentication check that may cover ${url}. Its path conditions are written in code, so the scan cannot tell which routes it applies to; this finding is reported at lower confidence. Confirm that check runs for ${url}.`
       ];
+      const handlerCode = noiseMaskedOf(route.file).slice(reachable?.start ?? 0, reachable?.end);
+      if (/\.auth\s*\.\s*getSession\s*\(/.test(handlerCode)) globalNote.push(
+        "This handler checks supabase.auth.getSession(). On the server that reads the session from the cookie without verifying it, so a forged cookie passes; it is not counted as authentication. Use supabase.auth.getClaims() or getUser() instead."
+      );
       const admin = usesAdminClient(route, adminModules, ctx.files);
       const hit = ops.find((o) => o.writes) ?? ops[0];
       const indirect = indirectOps.get(hit.index);
@@ -5258,138 +5301,1565 @@ var corsRule = {
   }
 };
 
-// src/rules/index.ts
-var FILE_RULES = [secretsRule, exposureRule, firebaseRulesRule, corsRule];
-var PROJECT_RULES = [gitleakRule, supabaseRlsRule, apiAuthRule];
-var RULE_IDS = [
-  "api/admin-db-access-without-auth",
-  "api/db-write-without-auth",
-  "cors/reflected-origin-with-credentials",
-  "cors/wildcard-with-credentials",
-  "exposure/private-name-in-public-env",
-  "exposure/secret-in-public-env",
-  "exposure/supabase-service-role-in-client",
-  "firebase/open-rules",
-  "firebase/test-mode-rules",
-  "gitleak/env-in-history",
-  "gitleak/env-tracked",
-  "supabase/permissive-policy",
-  "supabase/public-bucket-listing",
-  "supabase/rls-not-enabled",
-  // 凭据规则 ID 从共享格式表生成。
-  ...SECRET_PATTERNS.map((p) => `secrets/hardcoded/${p.id}`)
+// src/rules/request-input.ts
+var MAX_VALUE_HOPS = 8;
+var MAX_ASSIGNMENTS = 512;
+var MAX_EXPRESSION = 4e3;
+var REQUEST_OBJECT_NAMES = /^(?:req|request|event|evt|ctx|context)$/;
+var DESTRUCTURED_OBJECTS = /* @__PURE__ */ new Set(["request", "req", "event"]);
+var DESTRUCTURED_URLS = /* @__PURE__ */ new Set(["url"]);
+var DESTRUCTURED_COOKIES = /* @__PURE__ */ new Set(["cookies"]);
+var DESTRUCTURED_VALUES = /* @__PURE__ */ new Set(["params", "query", "body", "searchParams"]);
+var TRANSPARENT_CALLS = /* @__PURE__ */ new Set([
+  "json",
+  "formData",
+  "text",
+  "arrayBuffer",
+  "blob",
+  "get",
+  "getAll",
+  "String",
+  "trim",
+  "trimStart",
+  "trimEnd",
+  "toString",
+  "toLowerCase",
+  "toUpperCase",
+  "URL",
+  "URLSearchParams",
+  "decodeURIComponent",
+  "decodeURI",
+  "fromEntries",
+  "entries",
+  "readBody",
+  "readFormData",
+  "readRawBody",
+  "getQuery",
+  "getRouterParam",
+  "getRouterParams",
+  "getHeader",
+  "getHeaders",
+  "getRequestHeader",
+  "getRequestHeaders",
+  "getCookie",
+  "parseCookies",
+  "getRequestURL"
+]);
+var H3_READERS = "readBody|readFormData|readMultipartFormData|readRawBody|readValidatedBody|getQuery|getValidatedQuery|getRouterParams?|getValidatedRouterParams|getHeaders?|getRequestHeaders?|getCookie|parseCookies|getRequestURL";
+var LITERAL = String.raw`(?:'[^']*'|"[^"]*"|\x60[^\x60$]*\x60|-?\d+(?:\.\d+)?|null|undefined|true|false)`;
+var CLEAN_EXPRESSION = [
+  /^(?:await\s+)?(?:Number|parseInt|parseFloat|Boolean|BigInt|isNaN|Math\s*\.\s*\w+|Number\s*\.\s*\w+)\s*\(/,
+  /\.\s*length\s*$/,
+  /^(?:!|typeof\b)/,
+  /\.\s*(?:includes|test|has|startsWith|endsWith|some|every)\s*\([^?]*\)\s*$/,
+  new RegExp(String.raw`^[^?]*\?\s*${LITERAL}\s*:\s*${LITERAL}\s*$`),
+  // 带标签的模板由标签函数处理插值（Prisma.sql、sql、html），String.raw 除外。
+  /^(?:await\s+)?(?!String\s*\.\s*raw\b)[\w$]+(?:\s*\.\s*[\w$]+)*\s*\x60/
 ];
-function ruleMatches(selector, ruleId) {
-  return ruleId === selector || ruleId.startsWith(`${selector}/`);
-}
-function isKnownSelector(selector) {
-  return RULE_IDS.some((id) => ruleMatches(selector, id));
-}
-function shouldRunRule(id, only, skip) {
-  if (only.length === 0 && skip.length === 0) return true;
-  const namespace = id.split("/")[0];
-  return RULE_IDS.filter((candidate) => candidate.startsWith(`${namespace}/`)).some(
-    (candidate) => (only.length === 0 || only.some((selector) => ruleMatches(selector, candidate))) && !skip.some((selector) => ruleMatches(selector, candidate))
-  );
-}
-
-// src/engine.ts
-import { createHash as createHash2 } from "crypto";
-var SEVERITY_ORDER = { P0: 0, P1: 1, P2: 2 };
-var CONFIDENCE_ORDER = { certain: 0, likely: 1 };
-function dedupe(findings) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const f of findings) {
-    const key = `${f.ruleId}|${f.file ?? ""}|${f.line ?? ""}|${f.excerpt ?? ""}|${f.title}`;
-    if (seen.has(key)) continue;
-    seen.add(key);
-    out.push(f);
+var URL_INPUT_ACCESS = /\??\.\s*(?:searchParams|pathname|search|hash)\b/;
+var URL_INPUT_KEYS = /* @__PURE__ */ new Set(["searchParams", "pathname", "search", "hash"]);
+var URL_ORIGIN_ACCESS = /^\s*\??\.\s*(?:origin|host|hostname|protocol|port)\b/;
+var URL_ORIGIN_KEYS = /* @__PURE__ */ new Set(["origin", "host", "hostname", "protocol", "port"]);
+function isComparison(expr) {
+  return !/\?/.test(expr) && !/=>/.test(expr) && /(?:===|!==|==|!=|<=|>=|\binstanceof\b)/.test(expr);
+}
+function parameterList(text) {
+  const parts = [];
+  let depth = 0, from = 0;
+  for (let i = 0; i < text.length; i++) {
+    const ch = text[i];
+    if ("{[(<".includes(ch)) depth++;
+    else if ("}])>".includes(ch)) depth--;
+    else if (ch === "," && depth === 0) {
+      parts.push(text.slice(from, i));
+      from = i + 1;
+    }
   }
-  return out;
-}
-var CONTROL_CHARS = /[\u0000-\u001f\u007f-\u009f]/g;
-var DECEPTIVE_CHARS = /[\u061c\u200b\u200e\u200f\u202a-\u202e\u2066-\u2069\ufeff]/g;
-function nameOf(ch) {
-  return `<U+${(ch.codePointAt(0) ?? 0).toString(16).toUpperCase().padStart(4, "0")}>`;
-}
-function clean(text) {
-  return redactAll(text).replace(/\t/g, " ").replace(CONTROL_CHARS, "").replace(DECEPTIVE_CHARS, nameOf);
+  parts.push(text.slice(from));
+  return parts.map((part) => part.trim()).filter(Boolean);
 }
-function cleanForOutput(text) {
-  return clean(text);
+function destructuredKeys(pattern) {
+  const inner = pattern.slice(1, pattern.lastIndexOf("}"));
+  const result = [];
+  for (const part of parameterList(inner)) {
+    const m = /^(?:\.\.\.)?\s*([A-Za-z_$][\w$]*)\s*(?::\s*([A-Za-z_$][\w$]*))?\s*(?:=[\s\S]*)?$/.exec(part);
+    if (m) result.push({ key: m[1], local: m[2] ?? m[1] });
+  }
+  return result;
 }
-function sanitize(findings, files) {
-  const byPath = new Map(files.map((file) => [file.path, file]));
-  const sourceIdentity = (f) => {
-    if (f.sourceFingerprint !== void 0) return { sourceFingerprint: f.sourceFingerprint };
-    const file = f.file === null ? void 0 : byPath.get(f.file);
-    const source = f.line === null ? file?.content : file?.lines[f.line - 1];
-    return source === void 0 ? {} : {
-      sourceFingerprint: createHash2("sha256").update(source.trim(), "utf8").digest("hex")
-    };
-  };
-  return findings.map((f) => ({
-    ...f,
-    // 仅输出摘要；原始行不进入报告，移动行号不改变身份。
-    ...sourceIdentity(f),
-    title: clean(f.title),
-    // 按段落清理，保留段落之间的结构。
-    why: f.why.map(clean),
-    // 文件路径也必须经过输出清理。
-    file: f.file === null ? null : clean(f.file),
-    // 先脱敏再截断，避免截断导致凭据特征失效。
-    excerpt: f.excerpt === null ? null : truncate(clean(f.excerpt)),
-    ...f.evidence ? {
-      evidence: f.evidence.slice(0, 24).map((step) => ({
-        kind: step.kind,
-        file: clean(step.file),
-        line: step.line,
-        description: clean(step.description)
-      })),
-      evidenceTruncated: f.evidenceTruncated === true || f.evidence.length > 24
-    } : {},
-    fix: f.fix.map(clean),
-    ...f.humanOnly ? { humanOnly: f.humanOnly.map(clean) } : {}
-  }));
+function patternNames(pattern) {
+  const text = pattern.trim();
+  if (/^[A-Za-z_$][\w$]*$/.test(text)) return [text];
+  const stripped = text.replace(/[A-Za-z_$][\w$]*\s*:(?!:)/g, " ").replace(/=[^,}\]]*/g, " ");
+  return stripped.match(/[A-Za-z_$][\w$]*/g) ?? [];
+}
+function paramRoles(paramsText, paramsStart, allInput) {
+  const roles = { objects: /* @__PURE__ */ new Map(), urls: /* @__PURE__ */ new Map(), cookies: /* @__PURE__ */ new Map(), values: /* @__PURE__ */ new Map() };
+  let offset = 0;
+  for (const raw of parameterList(paramsText)) {
+    const at = paramsStart + Math.max(0, paramsText.indexOf(raw, offset));
+    offset = Math.max(offset, paramsText.indexOf(raw, offset) + raw.length);
+    const param = raw.startsWith("{") || raw.startsWith("[") ? raw.slice(0, matchingClose(raw) + 1) : raw.replace(/^\.\.\./, "").split(/[:=]/)[0].trim();
+    if (allInput) {
+      for (const name of patternNames(param)) roles.values.set(name, at);
+      continue;
+    }
+    if (param.startsWith("{")) {
+      for (const { key, local } of destructuredKeys(param)) {
+        if (DESTRUCTURED_OBJECTS.has(key)) roles.objects.set(local, at);
+        else if (DESTRUCTURED_URLS.has(key)) roles.urls.set(local, at);
+        else if (DESTRUCTURED_COOKIES.has(key)) roles.cookies.set(local, at);
+        else if (DESTRUCTURED_VALUES.has(key)) roles.values.set(local, at);
+      }
+    } else if (REQUEST_OBJECT_NAMES.test(param)) roles.objects.set(param, at);
+  }
+  return roles;
 }
-function sanitizeSkippedForOutput(items) {
-  return items.map((item) => ({
-    ...item,
-    path: clean(item.path),
-    ...item.detail === void 0 ? {} : { detail: clean(item.detail) }
-  }));
+function matchingClose(text) {
+  let depth = 0;
+  for (let i = 0; i < text.length; i++) {
+    if ("{[".includes(text[i])) depth++;
+    else if ("}]".includes(text[i]) && --depth === 0) return i;
+  }
+  return text.length - 1;
 }
-function downgradeExampleContext(findings, files) {
-  const examples = new Set(files.filter((f) => f.isExampleContext).map((f) => f.path));
-  return findings.map(
-    (f) => f.file !== null && examples.has(f.file) ? { ...f, confidence: "likely" } : f
-  );
+function parametersOf(code, body, pairs, openers) {
+  const fn = /^function\s*\*?\s*(?:[\w$]+\s*)?\(/.exec(code.slice(body.declaration, body.declaration + 200));
+  if (fn) {
+    const open = body.declaration + fn[0].length - 1;
+    const close2 = pairs.get(open);
+    return close2 === void 0 ? null : { start: open + 1, end: close2 };
+  }
+  const window = code.slice(Math.max(0, body.declaration - 200), body.declaration);
+  const close = window.lastIndexOf(")");
+  if (close !== -1 && /^\s*(?::[^=;{()]*)?$/.test(window.slice(close + 1))) {
+    const absolute = body.declaration - window.length + close;
+    const open = openers.get(absolute);
+    return open === void 0 ? null : { start: open + 1, end: absolute };
+  }
+  const single = /([A-Za-z_$][\w$]*)\s*$/.exec(window);
+  return single ? { start: body.declaration - window.length + single.index, end: body.declaration - window.length + single.index + single[1].length } : null;
 }
-function suppressIgnoredLines(findings, files) {
-  const byPath = new Map(files.map((f) => [f.path, f]));
-  const markers = /* @__PURE__ */ new Map();
-  const kept = [];
-  const ignored = [];
-  for (const f of findings) {
-    if (f.file === null || f.line === null) {
-      kept.push(f);
+function expressionEnd(code, from, limit, pairs, truncated) {
+  const stop = Math.min(limit, from + MAX_EXPRESSION);
+  for (let i = from; i < stop; i++) {
+    const ch = code[i];
+    const close = pairs.get(i);
+    if (close !== void 0) {
+      if (close >= stop) {
+        truncated();
+        return stop;
+      }
+      i = close;
       continue;
     }
-    let lines = markers.get(f.file);
-    if (lines === void 0) {
-      const file = byPath.get(f.file);
-      lines = file === void 0 ? /* @__PURE__ */ new Map() : ignoredLinesOf(file.lines);
-      markers.set(f.file, lines);
+    if (ch === ";" || ch === "," || ch === ")" || ch === "]" || ch === "}") return i;
+    if (ch === "\n") {
+      const before = code.slice(from, i).trimEnd();
+      const after = code.slice(i + 1, i + 80).trimStart();
+      if (before === "" || /[=+\-*/%&|^!?:,.([{<>]$/.test(before)) continue;
+      if (/^(?:[.?+\-*/%&|^,:<>=]|\?\?)/.test(after) && !/^(?:\+\+|--)/.test(after)) continue;
+      return i;
     }
-    if (!lines.has(f.line)) {
-      kept.push(f);
+  }
+  if (stop < limit && !/[;,)}\]\n]/.test(code[stop] ?? "")) truncated();
+  return stop;
+}
+function literalTable(text) {
+  const value = text.trim();
+  const item = new RegExp(`^${LITERAL}$`);
+  const property = new RegExp(`^(?:[A-Za-z_$][\\w$]*|'[^']*'|"[^"]*")\\s*:\\s*${LITERAL}$`);
+  if (!(value.startsWith("{") && value.endsWith("}")) && !(value.startsWith("[") && value.endsWith("]"))) return false;
+  return parameterList(value.slice(1, -1)).every((part) => (value[0] === "{" ? property : item).test(part));
+}
+function fixedTablesOf(code, source, pairs) {
+  const result = /* @__PURE__ */ new Map();
+  const seen = /* @__PURE__ */ new Set();
+  for (const m of code.matchAll(/\b(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*/g)) {
+    const name = m[1];
+    if (seen.has(name)) {
+      result.delete(name);
       continue;
     }
-    const rules = lines.get(f.line);
-    if (rules !== null && rules !== void 0 && !rules.has(f.ruleId)) {
-      kept.push(f);
-      continue;
+    seen.add(name);
+    const open = m.index + m[0].length;
+    const close = pairs.get(open);
+    if (!m[0].startsWith("const") || close === void 0 || close - open > MAX_EXPRESSION) continue;
+    if (literalTable(source.slice(open, close + 1))) result.set(name, m.index);
+  }
+  for (const m of code.matchAll(/(?<![\w$.])([A-Za-z_$][\w$]*)(?:\s*\.\s*[\w$]+|\s*\[[^\]]*\])?\s*(?:\+\+|--|[+*/%&|^-]?=(?![=>]))/g)) {
+    if (!/\bconst\s+$/.test(code.slice(Math.max(0, m.index - 20), m.index))) result.delete(m[1]);
+  }
+  for (const m of code.matchAll(/(?<![\w$.])([A-Za-z_$][\w$]*)\s*\.\s*(?:push|pop|shift|unshift|splice|sort|reverse|fill|copyWithin)\s*\(/g)) {
+    result.delete(m[1]);
+  }
+  for (const m of code.matchAll(/\b(?:Object\s*\.\s*(?:assign|defineProperty|defineProperties|setPrototypeOf)|Reflect\s*\.\s*(?:set|defineProperty|setPrototypeOf))\s*\(\s*([A-Za-z_$][\w$]*)\b/g)) {
+    result.delete(m[1]);
+  }
+  return result;
+}
+var InputFlow = class {
+  constructor(code, source, span, pairs, roles, fixedTables) {
+    this.code = code;
+    this.source = source;
+    this.span = span;
+    this.pairs = pairs;
+    this.fixedTables = fixedTables;
+    for (const [name, at] of roles.values) this.parameters.set(name, { level: "direct", origin: at, names: /* @__PURE__ */ new Set([name]), ownUrl: false });
+    this.sourcePattern = sourceRegex(roles);
+    const assignments = this.assignments().sort((a, b) => a.at - b.at);
+    const region = code.slice(span.start, span.end);
+    const functions = this.localFunctions(region, assignments);
+    const scopes = [span];
+    for (let i = span.start + 1; i < span.end; i++) {
+      const end = code[i] === "{" ? pairs.get(i) : void 0;
+      if (end !== void 0) scopes.push({ start: i, end });
+    }
+    const controls = [];
+    for (const m of region.matchAll(/\b(?:if|for|while|switch|catch)\s*\(|\belse\b/g)) {
+      const open = span.start + m.index + m[0].length - 1;
+      let start = m[0] === "else" ? open + 1 : (pairs.get(open) ?? open) + 1;
+      while (/\s/.test(code[start] ?? "")) start++;
+      controls.push({ start, end: pairs.get(start) ?? expressionEnd(code, start, span.end, pairs, () => {
+        this.limited = true;
+      }) });
+      if (controls.length >= MAX_ASSIGNMENTS) {
+        this.limited = true;
+        break;
+      }
+    }
+    for (const a of assignments) {
+      const owner = functions.filter((f) => f.start < a.at && a.at < f.end).at(-1);
+      if (owner) a.owner = owner;
+      a.scope = scopes.filter((s) => s.start < a.at && a.at < s.end).at(-1) ?? span;
+      if (a.owner && a.owner.start > a.scope.start) a.scope = a.owner;
+      a.controls = controls.filter((s) => s.start <= a.at && a.at <= s.end);
+      for (const name of a.names) {
+        const list = this.assignmentList.get(name) ?? [];
+        if (!list.some((item) => item.exprAt === a.exprAt)) list.push(a);
+        this.assignmentList.set(name, list);
+      }
+    }
+    const names = /* @__PURE__ */ new Set([...this.parameters.keys(), ...this.assignmentList.keys()]);
+    if (names.size) this.references = new RegExp(`(?<![\\w$.])(?:${namePattern(names)})(?![\\w$])`, "g");
+  }
+  code;
+  source;
+  span;
+  pairs;
+  fixedTables;
+  parameters = /* @__PURE__ */ new Map();
+  limited = false;
+  assignmentList = /* @__PURE__ */ new Map();
+  sourcePattern;
+  references = null;
+  values = /* @__PURE__ */ new Map();
+  strings = /* @__PURE__ */ new Map();
+  /** 只索引当前处理函数；未引用的具名闭包不影响外层值。 */
+  localFunctions(region, assignments) {
+    const offset = this.span.start;
+    const bodies = functionBodies(region, delimiterPairs(region)).map((f) => ({
+      declaration: f.declaration + offset,
+      start: f.start + offset,
+      end: f.end + offset
+    }));
+    for (const m of region.matchAll(/=>\s*(?!\s*\{)/g)) {
+      const start = offset + m.index + m[0].length;
+      const end = expressionEnd(this.code, start, this.span.end, this.pairs, () => {
+        this.limited = true;
+      });
+      bodies.push({ declaration: offset + m.index, start: start - 1, end });
+    }
+    if (bodies.length > MAX_ASSIGNMENTS) this.limited = true;
+    return bodies.slice(0, MAX_ASSIGNMENTS).sort((a, b) => a.start - b.start).map((f) => {
+      const binding = assignments.filter((a) => {
+        if (!a.declaration || a.exprAt > f.declaration || a.exprAt + a.expr.length < f.end) return false;
+        const prefix = this.code.slice(a.exprAt, f.declaration).trim();
+        return prefix === "" || prefix === "async" || /^(?:async\s*)?(?:\([^;{}]*\)|[\w$]+)\s*(?::[^=;{}]*)?$/.test(prefix);
+      }).sort((a, b) => b.exprAt - a.exprAt)[0];
+      const declared = /^function\s*\*?\s*([\w$]+)\s*\(/.exec(this.code.slice(f.declaration, f.start))?.[1];
+      const before = this.code.slice(this.span.start, f.declaration).trimEnd().replace(/\basync$/, "").trimEnd();
+      const name = binding?.names.length === 1 ? binding.names[0] : /[;{}]$/.test(before) ? declared : void 0;
+      if (/^\s*\)*\s*(?:\(|\.\s*(?:call|apply)\s*\()/.test(this.code.slice(f.end + 1, this.span.end))) {
+        return { ...f, usedAt: f.end };
+      }
+      if (!name) return { ...f, usedAt: f.end };
+      const start = binding?.at ?? f.declaration;
+      const reference = new RegExp(`(?<![\\w$.])${namePattern([name])}(?![\\w$])`, "g");
+      const use = [...region.matchAll(reference)].find((m) => offset + m.index < start || offset + m.index > f.end);
+      return { ...f, usedAt: use ? offset + use.index : Infinity };
+    });
+  }
+  /** 表达式是否携带请求输入；已转换为数值、布尔或查表结果的不算。 */
+  taintOf(expr, exprAt, depth = 0) {
+    if (expr.length > MAX_EXPRESSION) this.limited = true;
+    const text = expr.trim();
+    if (text === "" || CLEAN_EXPRESSION.some((pattern) => pattern.test(text)) || isComparison(text)) return null;
+    const lookup = new RegExp(`^([A-Za-z_$][\\w$]*)\\s*\\[[^\\]]*\\]\\s*(?:(?:\\?\\?|\\|\\|)\\s*${LITERAL})?\\s*$`).exec(text);
+    if (lookup && this.isFixedTable(lookup[1], exprAt)) return null;
+    const observed = expr.replace(/\[\s*['"][^'"]*['"]\s*\]/g, (part, offset) => {
+      const raw = this.source.slice(exprAt + offset, exprAt + offset + part.length);
+      const key = /^\[\s*['"]([A-Za-z_$][\w$]*)['"]\s*\]$/.exec(raw)?.[1];
+      return key ? `.${key}`.padEnd(part.length) : part;
+    });
+    let found = null;
+    if (this.sourcePattern) {
+      this.sourcePattern.lastIndex = 0;
+      for (const m of observed.matchAll(this.sourcePattern)) {
+        const after = observed.slice(m.index + m[0].length);
+        const ownUrl = m[1] === "url" || m[1] === "nextUrl";
+        if (ownUrl && URL_ORIGIN_ACCESS.test(after)) continue;
+        found = mergeTaint(found, {
+          level: "direct",
+          origin: exprAt + m.index,
+          names: /* @__PURE__ */ new Set(),
+          ownUrl: ownUrl && !URL_INPUT_ACCESS.test(after.slice(0, 40))
+        });
+      }
+    }
+    const refs = this.references && new RegExp(this.references.source, "g");
+    if (refs) {
+      refs.lastIndex = 0;
+      for (const m of expr.matchAll(refs)) {
+        const before = expr.slice(0, m.index).trimEnd();
+        const after = expr.slice(m.index + m[0].length);
+        if (/^\s*:(?!:)/.test(after) && /[{,]$/.test(before)) continue;
+        const t = this.valueOf(m[0], exprAt, depth);
+        if (!t) continue;
+        if (t.ownUrl && URL_ORIGIN_ACCESS.test(after)) continue;
+        found = mergeTaint(found, t.ownUrl && URL_INPUT_ACCESS.test(after.slice(0, 40)) ? { ...t, ownUrl: false } : t);
+      }
+    }
+    if (!found) return null;
+    if (found.ownUrl && URL_INPUT_ACCESS.test(text)) found.ownUrl = false;
+    const calls = [...text.replace(/\bJSON\s*\.\s*parse\s*\(/g, "(").matchAll(/([\w$]+)\s*\(/g)].map((m) => m[1]);
+    if (calls.some((name) => !TRANSPARENT_CALLS.has(name))) found.level = "derived";
+    return found;
+  }
+  /** 字符串拼接：无标签模板的插值或含字符串操作数的 + 拼接中携带请求输入。 */
+  builtOf(expr, exprAt, depth = 0) {
+    if (expr.length > MAX_EXPRESSION) this.limited = true;
+    const text = expr.trim();
+    const lead = expr.length - expr.trimStart().length;
+    if (text.startsWith("`")) return this.interpolationTaint(exprAt + lead, exprAt + lead + text.length, depth);
+    const operands = this.topLevelOperands(expr, exprAt);
+    if (operands.length < 2 || !operands.some((o) => /^['"\x60]/.test(o.text.trim()))) return null;
+    let found = null;
+    for (const operand of operands) {
+      const t = operand.text.trim().startsWith("`") ? this.interpolationTaint(operand.at, operand.at + operand.text.length, depth) : this.taintOf(operand.text, operand.at, depth);
+      if (t) found = mergeTaint(found, t);
+    }
+    return found;
+  }
+  /** 仅保留使用位置可见的赋值；无条件覆盖终止旧值，分支与追加赋值保留可能来源。 */
+  assignmentsFor(name, at) {
+    const list = this.assignmentList.get(name) ?? [];
+    const contains = (s, where) => s.start < where && where < s.end;
+    const bindingAt = (where) => list.filter((a) => a.declaration && a.at <= where && contains(a.scope, where)).sort((a, b) => b.scope.start - a.scope.start || b.at - a.at)[0];
+    const binding = bindingAt(at);
+    const result = [];
+    for (let i = list.length - 1; i >= 0; i--) {
+      const a = list[i];
+      if (a.at >= at || a.exprAt + a.expr.length >= at) continue;
+      if (a.declaration ? a !== binding : bindingAt(a.at) !== binding) continue;
+      const indirect = a.owner !== void 0 && !contains(a.owner, at);
+      if (indirect && a.owner.usedAt >= at) continue;
+      result.push(indirect ? { ...a, indirect: true } : a);
+      if (!indirect && !a.append && contains(a.scope, at) && a.controls.every((s) => contains(s, at))) break;
+    }
+    return result;
+  }
+  valueOf(name, at, depth = 0) {
+    const key = `${name}:${at}:${depth}`;
+    if (this.values.has(key)) return this.values.get(key);
+    const result = this.resolveValue(name, at, depth);
+    this.values.set(key, result);
+    return result;
+  }
+  resolveValue(name, at, depth) {
+    if (depth >= MAX_VALUE_HOPS) {
+      this.limited = true;
+      return null;
+    }
+    const assignments = this.assignmentsFor(name, at);
+    if (!assignments.length) return this.parameters.get(name) ?? null;
+    let found = null;
+    for (const a of assignments) {
+      const taint = this.builtOf(a.expr, a.exprAt, depth + 1) ?? this.taintOf(a.expr, a.exprAt, depth + 1);
+      if (!taint) continue;
+      const own = this.targetsOf(a, taint).find(([target]) => target === name);
+      if (own) found = mergeTaint(found, { ...taint, level: a.indirect ? "derived" : taint.level, ownUrl: own[1], names: /* @__PURE__ */ new Set([name, ...taint.names]) });
+    }
+    if (this.parameters.has(name) && assignments.every((a) => a.append || !a.scope || a.scope.start !== this.span.start || a.controls.length)) {
+      found = mergeTaint(found, this.parameters.get(name));
+    }
+    return found;
+  }
+  /** 保留有效拼接及别名的 SQL 文本证据，不借用已被覆盖的旧查询。 */
+  builtValue(name, at, depth = 0) {
+    const key = `${name}:${at}:${depth}`;
+    if (this.strings.has(key)) return this.strings.get(key);
+    const result = this.resolveBuiltValue(name, at, depth);
+    this.strings.set(key, result);
+    return result;
+  }
+  resolveBuiltValue(name, at, depth) {
+    if (depth >= MAX_VALUE_HOPS) {
+      this.limited = true;
+      return null;
+    }
+    let found = null;
+    let text = "";
+    const append = (part) => {
+      if (text.length + part.length + 1 > MAX_EXPRESSION) this.limited = true;
+      text = `${text}
+${part}`.slice(0, MAX_EXPRESSION);
+    };
+    for (const a of this.assignmentsFor(name, at)) {
+      append(this.source.slice(a.exprAt, a.exprAt + a.expr.length));
+      const alias = /^[A-Za-z_$][\w$]*$/.test(a.expr.trim()) ? this.builtValue(a.expr.trim(), a.exprAt, depth + 1) : null;
+      const t = this.builtOf(a.expr, a.exprAt, depth + 1) ?? alias ?? (a.append ? this.taintOf(a.expr, a.exprAt, depth + 1) : null);
+      if (alias) append(alias.text);
+      if (t) found = mergeTaint(found, a.indirect ? { ...t, level: "derived" } : t);
+    }
+    return found ? { ...found, names: /* @__PURE__ */ new Set([name, ...found.names]), text } : null;
+  }
+  isFixedTable(name, at) {
+    const assignments = this.assignmentsFor(name, at);
+    if (assignments.length) return assignments.every((a) => !a.append && literalTable(this.source.slice(a.exprAt, a.exprAt + a.expr.length))) && this.fixedTables.has(name);
+    return (this.fixedTables.get(name) ?? Infinity) < at && !this.parameters.has(name);
+  }
+  /** 顶层 + 拼接的各操作数；括号与模板插值内部的 + 不拆分。 */
+  operandsOf(expr, exprAt) {
+    return this.topLevelOperands(expr, exprAt);
+  }
+  /** 使用前是否检查过内容：条件中除存在性判断外的引用，或作为校验函数实参。 */
+  validatedBefore(names, at) {
+    if (names.size === 0) return false;
+    const region = this.code.slice(this.span.start, at);
+    const pattern = new RegExp(`(?<![\\w$.])(?:${namePattern(names)})(?![\\w$])`);
+    for (const m of region.matchAll(/\b(?:if|switch)\s*\(/g)) {
+      const open = this.span.start + m.index + m[0].length - 1;
+      const close = this.pairs.get(open);
+      if (close === void 0 || close > at) continue;
+      const condition = this.code.slice(open + 1, close);
+      const alternatives = namePattern(names);
+      const substantive = condition.replace(new RegExp(`!\\s*(?:${alternatives})(?![\\w$.(\\[])`, "g"), " ").replace(new RegExp(`(?<![\\w$.])(?:${alternatives})\\s*[!=]==?\\s*(?:null|undefined|''|""|0)`, "g"), " ").replace(new RegExp(`\\btypeof\\s+(?:${alternatives})\\b`, "g"), " ");
+      if (pattern.test(substantive)) return true;
+    }
+    const validator = /(?:\.\s*(?:test|match|includes|has|startsWith|endsWith|parse|safeParse)|(?<![\w$.])(?:valid\w*|sanitiz\w*|escape\w*|is[A-Z]\w*|assert\w*))\s*\(/gi;
+    for (const m of region.matchAll(validator)) {
+      const open = this.span.start + m.index + m[0].length - 1;
+      const close = this.pairs.get(open);
+      if (close !== void 0 && close <= at && pattern.test(this.code.slice(open + 1, close))) return true;
+    }
+    return false;
+  }
+  interpolationTaint(from, to, depth) {
+    let found = null;
+    for (let i = from; i < to - 1; i++) {
+      if (this.code[i] !== "$" || this.code[i + 1] !== "{") continue;
+      const close = this.pairs.get(i + 1);
+      if (close === void 0) continue;
+      const t = this.taintOf(this.code.slice(i + 2, close), i + 2, depth);
+      i = close;
+      if (t) found = mergeTaint(found, t);
+    }
+    return found;
+  }
+  topLevelOperands(expr, exprAt) {
+    const result = [];
+    let from = 0;
+    for (let i = 0; i < expr.length; i++) {
+      const close = this.pairs.get(exprAt + i);
+      if (close !== void 0) {
+        i = close - exprAt;
+        continue;
+      }
+      if (expr[i] === "+" && expr[i + 1] !== "+" && expr[i + 1] !== "=" && expr[i - 1] !== "+") {
+        result.push({ text: expr.slice(from, i), at: exprAt + from });
+        from = i + 1;
+      }
+    }
+    result.push({ text: expr.slice(from), at: exprAt + from });
+    return result;
+  }
+  /**
+   * 赋值目标及其是否仍只是本站 URL。从本站 URL 解构时按键区分：
+   * searchParams、pathname 等为可控输入，origin、host 等不可控，其余保持本站 URL。
+   */
+  targetsOf(a, taint) {
+    if (!taint.ownUrl || !a.pattern.trim().startsWith("{")) return a.names.map((name) => [name, taint.ownUrl]);
+    const targets = [];
+    for (const { key, local } of destructuredKeys(a.pattern.trim())) {
+      if (URL_ORIGIN_KEYS.has(key)) continue;
+      targets.push([local, !URL_INPUT_KEYS.has(key)]);
+    }
+    return targets;
+  }
+  assignments() {
+    const { code, span, pairs } = this;
+    const region = code.slice(span.start, span.end);
+    const found = [];
+    const push = (a) => {
+      if (found.length >= MAX_ASSIGNMENTS) {
+        this.limited = true;
+        return;
+      }
+      found.push(a);
+    };
+    for (const m of region.matchAll(/\b(?:const|let|var)\s+/g)) {
+      let at = span.start + m.index + m[0].length;
+      for (let guard = 0; guard < 16; guard++) {
+        let patternEnd;
+        if (code[at] === "{" || code[at] === "[") {
+          const close = pairs.get(at);
+          if (close === void 0) break;
+          patternEnd = close + 1;
+        } else {
+          const id = /^[A-Za-z_$][\w$]*/.exec(code.slice(at, at + 200));
+          if (!id) break;
+          patternEnd = at + id[0].length;
+        }
+        const pattern = code.slice(at, patternEnd);
+        const rest = code.slice(patternEnd, patternEnd + 400);
+        const forOf = /^\s+of\s+/.exec(rest);
+        if (forOf) {
+          const exprAt2 = patternEnd + forOf[0].length;
+          const end2 = expressionEnd(code, exprAt2, span.end, pairs, () => {
+            this.limited = true;
+          });
+          push({ at, pattern, names: patternNames(pattern), expr: code.slice(exprAt2, end2), exprAt: exprAt2, iterate: true, append: false, declaration: true });
+          break;
+        }
+        const eq = /^\s*(?::[^=;]{0,200}?)?=(?![=>])/.exec(rest);
+        if (!eq) break;
+        const exprAt = patternEnd + eq[0].length;
+        const end = expressionEnd(code, exprAt, span.end, pairs, () => {
+          this.limited = true;
+        });
+        push({ at, pattern, names: patternNames(pattern), expr: code.slice(exprAt, end), exprAt, iterate: false, append: false, declaration: true });
+        if (code[end] !== ",") break;
+        at = end + 1;
+        while (/\s/.test(code[at] ?? "")) at++;
+      }
+    }
+    for (const m of region.matchAll(/(?<![\w$.])([A-Za-z_$][\w$]*)\s*(\+?=)(?![=>])/g)) {
+      const before = region.slice(Math.max(0, m.index - 8), m.index);
+      if (/\b(?:const|let|var)\s+$/.test(before)) continue;
+      const exprAt = span.start + m.index + m[0].length;
+      const end = expressionEnd(code, exprAt, span.end, pairs, () => {
+        this.limited = true;
+      });
+      push({ at: span.start + m.index, pattern: m[1], names: [m[1]], expr: code.slice(exprAt, end), exprAt, iterate: false, append: m[2] === "+=" });
+    }
+    return found;
+  }
+};
+function sourceRegex(roles) {
+  const parts = [];
+  if (roles.objects.size > 0) {
+    const objects = namePattern(roles.objects.keys());
+    parts.push(
+      String.raw`(?<![\w$.])(?:${objects})(?:\s*\??\.\s*(?:request|event))?\s*\??\.\s*(json|formData|text|arrayBuffer|blob|body|query|params|url|nextUrl|headers|cookies|searchParams)\b`,
+      String.raw`(?<![\w$.])(?:${objects})\s*\??\.\s*context\s*\??\.\s*params\b`,
+      String.raw`\b(?:${H3_READERS})\s*(?:<[^()]{0,200}>\s*)?\(\s*(?:${objects})\b`
+    );
+  }
+  if (roles.urls.size > 0) {
+    parts.push(String.raw`(?<![\w$.])(?:${namePattern(roles.urls.keys())})\s*\??\.\s*(?:searchParams|pathname|search|hash)\b`);
+  }
+  if (roles.cookies.size > 0) {
+    parts.push(String.raw`(?<![\w$.])(?:${namePattern(roles.cookies.keys())})\s*\??\.\s*get(?:All)?\s*\(`);
+  }
+  return parts.length === 0 ? null : new RegExp(parts.join("|"), "g");
+}
+function mergeTaint(found, t) {
+  if (!found) return { level: t.level, origin: t.origin, names: new Set(t.names), ownUrl: t.ownUrl };
+  if (t.level === "derived") found.level = "derived";
+  if (found.ownUrl && !t.ownUrl) {
+    found.ownUrl = false;
+    found.origin = t.origin;
+  }
+  for (const n of t.names) found.names.add(n);
+  return found;
+}
+function hasInput(roles) {
+  return roles.objects.size + roles.urls.size + roles.cookies.size + roles.values.size > 0;
+}
+function lowerBound(values, value) {
+  let low = 0, high = values.length;
+  while (low < high) {
+    const middle = low + high >>> 1;
+    if (values[middle] < value) low = middle + 1;
+    else high = middle;
+  }
+  return low;
+}
+var HandlerFile = class {
+  constructor(code, source, pairs, lineStarts, candidates) {
+    this.code = code;
+    this.source = source;
+    this.pairs = pairs;
+    this.lineStarts = lineStarts;
+    this.candidates = candidates;
+    this.fixedTables = fixedTablesOf(code, source, pairs);
+  }
+  code;
+  source;
+  pairs;
+  lineStarts;
+  candidates;
+  flows = /* @__PURE__ */ new Map();
+  fixedTables;
+  get limited() {
+    for (const flow of this.flows.values()) if (flow.limited) return true;
+    return false;
+  }
+  /** 至少包含一个给定位置的处理函数；positions 必须已按升序排列。 */
+  handlersAround(positions) {
+    const result = [];
+    if (positions.length === 0) return result;
+    for (const candidate of this.candidates) {
+      const { body } = candidate;
+      const first = lowerBound(positions, body.start + 1);
+      if (first >= positions.length || positions[first] >= body.end) continue;
+      let flow = this.flows.get(candidate);
+      if (!flow) {
+        flow = new InputFlow(this.code, this.source, { start: body.start, end: body.end }, this.pairs, candidate.roles, this.fixedTables);
+        this.flows.set(candidate, flow);
+      }
+      result.push({ route: candidate.route, body, flow });
+    }
+    return result;
+  }
+};
+var handlerCache = /* @__PURE__ */ new WeakMap();
+function handlerFileOf(file) {
+  const cached = handlerCache.get(file);
+  if (cached !== void 0) return cached;
+  let result = null;
+  if (/\.[mc]?[jt]sx?$/.test(file.path)) {
+    const route = routeOf(file);
+    const routes = route === null ? serverActionRoutes(file) : [route];
+    if (routes.length > 0) {
+      const code = noiseMaskedOf(file);
+      const source = commentsMaskedOf(file);
+      const pairs = delimiterPairs(code);
+      const openers = /* @__PURE__ */ new Map();
+      for (const [open, close] of pairs) openers.set(close, open);
+      const bodies = functionBodies(code, pairs).sort((a, b) => a.start - b.start);
+      const starts = bodies.map((body) => body.start);
+      const candidates = [];
+      for (const r of routes) {
+        const reachable = r.reachable;
+        const from = reachable ? lowerBound(starts, reachable.start) : 0;
+        for (let i = from; i < bodies.length; i++) {
+          const body = bodies[i];
+          if (reachable && body.start >= reachable.end) break;
+          if (reachable && body.end > reachable.end) continue;
+          const action = r.action !== void 0 && reachable !== void 0 && body.start === reachable.start;
+          const params = parametersOf(code, body, pairs, openers);
+          if (!params) continue;
+          const roles = paramRoles(source.slice(params.start, params.end), params.start, action);
+          if (hasInput(roles)) candidates.push({ route: r, body, roles });
+        }
+      }
+      if (candidates.length > 0) result = new HandlerFile(code, source, pairs, lineStartsOf(file.content), candidates);
+    }
+  }
+  handlerCache.set(file, result);
+  return result;
+}
+function reportInputLimit(ctx, file, analysed) {
+  if (analysed.limited) ctx.reportIncomplete(
+    "request-input/tracking",
+    `${file.path} reached the request-input tracking limit (8 value hops, 512 assignments or control/function regions, 4000 expression characters, or bounded URL analysis)`
+  );
+}
+
+// src/rules/injection.ts
+var SQL_UNSAFE = /(?:\.\s*\$(?:queryRawUnsafe|executeRawUnsafe)|(?<![\w$.])Prisma\s*\.\s*raw|(?<![\w$.])sql\s*\.\s*(?:raw|unsafe))\s*\(/g;
+var SQL_RAW_FRAGMENT = /\.\s*(?:raw|whereRaw|orWhereRaw|andWhereRaw|havingRaw|orHavingRaw|orderByRaw|groupByRaw|joinRaw|fromRaw)\s*\(/g;
+var SQL_DRIVER = /\.\s*(?:query|execute|exec|prepare|run|all|get|unsafe|many|one|none|any|oneOrNone|manyOrNone)\s*\(/g;
+var SQL_CONDITION = /\.\s*(?:where|andWhere|orWhere|having|andHaving|orHaving)\s*\(/g;
+var LOOKS_LIKE_SQL = /\bselect\b[\s\S]*\bfrom\b|\binsert\s+into\b|\bdelete\s+from\b|\bupdate\s+[\w."`]+\s+set\b|\bwhere\b|\border\s+by\b/i;
+var LOOKS_LIKE_CONDITION = /[=<>]|\b(?:like|ilike|in|is|between)\b/i;
+var CHILD_PROCESS = /^(?:node:)?child_process$/;
+var SHELL_EXPORTS = /* @__PURE__ */ new Set(["exec", "execSync"]);
+var SPAWN_EXPORTS = /* @__PURE__ */ new Set(["spawn", "spawnSync", "execFile", "execFileSync"]);
+function commandCallees(file) {
+  const callees = { shell: /* @__PURE__ */ new Set(), spawn: /* @__PURE__ */ new Set(), commands: /* @__PURE__ */ new Set(), namespaces: /* @__PURE__ */ new Set() };
+  for (const binding of bindingsOf(file).imports) {
+    if (binding.spec !== void 0 && CHILD_PROCESS.test(binding.spec)) {
+      if (binding.imported === "default") callees.namespaces.add(binding.local);
+      else if (SHELL_EXPORTS.has(binding.imported)) callees.shell.add(binding.local);
+      else if (SPAWN_EXPORTS.has(binding.imported)) callees.spawn.add(binding.local);
+    } else if (binding.spec === "execa" && /^execaCommand(?:Sync)?$/.test(binding.imported)) {
+      callees.commands.add(binding.local);
+    }
+  }
+  const source = commentsMaskedOf(file);
+  for (const m of source.matchAll(/\bimport\s*\*\s*as\s+([A-Za-z_$][\w$]*)\s+from\s*['"](?:node:)?child_process['"]/g)) {
+    callees.namespaces.add(m[1]);
+  }
+  for (const m of source.matchAll(/\b(?:const|let|var)\s+(\{[^{}]{0,500}\}|[A-Za-z_$][\w$]*)\s*=\s*require\s*\(\s*['"](?:node:)?child_process['"]\s*\)/g)) {
+    const target = m[1];
+    if (!target.startsWith("{")) {
+      callees.namespaces.add(target);
+      continue;
+    }
+    for (const part of target.slice(1, -1).split(",")) {
+      const names = /^\s*([A-Za-z_$][\w$]*)\s*(?::\s*([A-Za-z_$][\w$]*))?\s*$/.exec(part);
+      if (!names) continue;
+      if (SHELL_EXPORTS.has(names[1])) callees.shell.add(names[2] ?? names[1]);
+      else if (SPAWN_EXPORTS.has(names[1])) callees.spawn.add(names[2] ?? names[1]);
+    }
+  }
+  for (const m of source.matchAll(/\b(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*(?:[A-Za-z_$][\w$]*\s*\.\s*)?promisify\s*\(\s*(?:([A-Za-z_$][\w$]*)\s*\.\s*)?([A-Za-z_$][\w$]*)\s*\)/g)) {
+    const [, local, namespace, name] = m;
+    const viaNamespace = namespace !== void 0 && callees.namespaces.has(namespace);
+    if (namespace === void 0 && callees.shell.has(name) || viaNamespace && SHELL_EXPORTS.has(name)) callees.shell.add(local);
+    else if (namespace === void 0 && callees.spawn.has(name) || viaNamespace && SPAWN_EXPORTS.has(name)) callees.spawn.add(local);
+  }
+  return callees;
+}
+function sinksIn(code, pairs, callees) {
+  const sinks = /* @__PURE__ */ new Map();
+  const add = (regex, kind, mode) => {
+    regex.lastIndex = 0;
+    for (const m of code.matchAll(regex)) {
+      const open = m.index + m[0].length - 1;
+      const close = pairs.get(open);
+      if (close === void 0 || sinks.has(open)) continue;
+      sinks.set(open, { kind, at: m.index, open, close, mode });
+    }
+  };
+  if (callees.shell.size > 0) add(new RegExp(`(?<![\\w$.])(?:${namePattern(callees.shell)})\\s*\\(`, "g"), "command", "shell");
+  if (callees.spawn.size > 0) add(new RegExp(`(?<![\\w$.])(?:${namePattern(callees.spawn)})\\s*\\(`, "g"), "command", "spawn");
+  if (callees.commands.size > 0) add(new RegExp(`(?<![\\w$.])(?:${namePattern(callees.commands)})\\s*\\(`, "g"), "command", "execa");
+  if (callees.namespaces.size > 0) {
+    const ns = namePattern(callees.namespaces);
+    add(new RegExp(`(?<![\\w$.])(?:${ns})\\s*\\.\\s*(?:exec|execSync)\\s*\\(`, "g"), "command", "shell");
+    add(new RegExp(`(?<![\\w$.])(?:${ns})\\s*\\.\\s*(?:spawn|spawnSync|execFile|execFileSync)\\s*\\(`, "g"), "command", "spawn");
+  }
+  add(SQL_UNSAFE, "sql", "unsafe");
+  add(SQL_RAW_FRAGMENT, "sql", "fragment");
+  add(SQL_DRIVER, "sql", "driver");
+  add(SQL_CONDITION, "sql", "condition");
+  return [...sinks.values()].sort((a, b) => a.at - b.at);
+}
+function fixedProgram(expr, at, flow, source, depth = 0) {
+  if (depth >= 8) {
+    flow.limited = true;
+    return false;
+  }
+  const text = expr.trim();
+  const start = at + expr.length - expr.trimStart().length;
+  if (/^[A-Za-z_$][\w$]*$/.test(text)) {
+    const assignments = flow.assignmentsFor(text, at).filter((a) => !a.append);
+    return assignments.length > 0 && assignments.every((a) => fixedProgram(a.expr, a.exprAt, flow, source, depth + 1));
+  }
+  const raw = source.slice(start, start + text.length);
+  const prefix = /^["'`]([^"'`$\\]*)/.exec(raw)?.[1];
+  return prefix !== void 0 && /^\S+\s/.test(prefix);
+}
+function hitOf(sink, code, source, pairs, flow) {
+  const args = argumentExpressions(code, code, sink.open + 1, sink.close, pairs);
+  if (args.length === 0) return null;
+  const firstAt = sink.open + 1 + (code.slice(sink.open + 1, sink.close).length - code.slice(sink.open + 1, sink.close).trimStart().length);
+  const first = args[0];
+  const firstSource = source.slice(firstAt, firstAt + first.length);
+  if (sink.mode === "spawn") {
+    if (!/\bshell\s*:\s*true\b/.test(code.slice(sink.open, sink.close))) return null;
+    const taint = flow.taintOf(code.slice(sink.open + 1, sink.close), sink.open + 1) ?? flow.builtOf(first, firstAt);
+    return taint ? { taint } : null;
+  }
+  const built = flow.builtOf(first, firstAt);
+  const identifier = /^[A-Za-z_$][\w$]*$/.exec(first);
+  const builtVariable = identifier ? flow.builtValue(identifier[0], firstAt) : void 0;
+  const text = built ? firstSource : builtVariable?.text ?? null;
+  const stringTaint = built ?? builtVariable ?? null;
+  if (sink.mode === "execa") {
+    const shell = /\bshell\s*:\s*(?:true\b|['"][^'"]+['"])/.test(source.slice(sink.open, sink.close));
+    if (!shell && fixedProgram(first, firstAt, flow, source)) return null;
+    const taint = stringTaint ?? flow.taintOf(first, firstAt);
+    return taint ? { taint, executable: !shell } : null;
+  }
+  if (sink.mode === "shell" || sink.mode === "unsafe") {
+    const taint = stringTaint ?? flow.taintOf(first, firstAt);
+    return taint ? { taint } : null;
+  }
+  if (!stringTaint || text === null) return null;
+  if (sink.mode === "driver" && !LOOKS_LIKE_SQL.test(text)) return null;
+  if (sink.mode === "condition" && !LOOKS_LIKE_CONDITION.test(text)) return null;
+  return { taint: stringTaint };
+}
+function capitalised(text) {
+  return `${text.charAt(0).toUpperCase()}${text.slice(1)}`;
+}
+function findingFor(kind, route, file, line, originLine, certain, executable2 = false) {
+  const lowered = certain ? [] : [
+    "The value passes through other code or a check before it gets here, and the scan cannot tell whether that makes it safe. Confirm the value is restricted to what the query or command expects."
+  ];
+  const excerpt = (file.lines[line - 1] ?? "").trim();
+  if (kind === "sql") {
+    return {
+      ruleId: "injection/sql",
+      severity: "P1",
+      confidence: certain ? "certain" : "likely",
+      title: `${capitalised(route.url)} builds a SQL query from request input`,
+      file: file.path,
+      line,
+      excerpt,
+      why: [
+        `The query text is assembled from a value the caller controls (read on line ${originLine}). Whoever calls ${route.url} can change the query itself, not just the value it compares against \u2014 read other rows, skip filters, or change data.`,
+        ...lowered
+      ],
+      fix: [
+        "Pass values as parameters instead of splicing them into the SQL text: the tagged form (prisma.$queryRaw`\u2026 ${id}`, sql`\u2026 ${id}`) or placeholders ($1, ?) with a separate values array.",
+        "If a column name or sort direction has to vary, choose it from a fixed list in code instead of using the request value."
+      ]
+    };
+  }
+  return {
+    ruleId: "injection/command",
+    severity: "P1",
+    confidence: certain ? "certain" : "likely",
+    title: executable2 ? `${capitalised(route.url)} runs an executable selected by request input` : `${capitalised(route.url)} runs a shell command built from request input`,
+    file: file.path,
+    line,
+    excerpt,
+    why: [
+      executable2 ? `The caller can influence the executable name (read on line ${originLine}). Execa does not use a shell by default, but allowing a caller to choose the program can still run unintended code with server permissions.` : `The command line includes a value the caller controls (read on line ${originLine}) and is run through a shell. Characters such as ; | $( ) let a caller append their own commands, which run with your server's permissions.`,
+      ...lowered
+    ],
+    fix: [
+      executable2 ? "Use a fixed executable and pass request values in a separate argument array; do not accept a caller-supplied command line." : "Use execFile or spawn with an argument array and no shell option, so the value is passed as one argument and never parsed by a shell.",
+      "Check the value against a fixed list of allowed values before using it."
+    ]
+  };
+}
+var injectionRule = {
+  id: "injection/request-input",
+  severity: "P1",
+  check(ctx) {
+    const findings = [];
+    for (const file of ctx.files) {
+      const analysed = handlerFileOf(file);
+      if (!analysed) continue;
+      const { code, source, pairs, lineStarts } = analysed;
+      const sinks = sinksIn(code, pairs, commandCallees(file));
+      if (sinks.length === 0) continue;
+      const positions = sinks.map((sink) => sink.at);
+      const reported = /* @__PURE__ */ new Set();
+      for (const { route, body, flow } of analysed.handlersAround(positions)) {
+        for (let i = lowerBound(positions, body.start + 1); i < sinks.length && sinks[i].at < body.end; i++) {
+          const sink = sinks[i];
+          if (sink.close >= body.end || reported.has(sink.at)) continue;
+          const hit = hitOf(sink, code, source, pairs, flow);
+          if (!hit) continue;
+          reported.add(sink.at);
+          const certain = hit.taint.level === "direct" && !flow.validatedBefore(hit.taint.names, sink.at);
+          findings.push(findingFor(
+            sink.kind,
+            route,
+            file,
+            lineNumberAt(lineStarts, sink.at),
+            lineNumberAt(lineStarts, hit.taint.origin),
+            certain,
+            hit.executable
+          ));
+        }
+      }
+      reportInputLimit(ctx, file, analysed);
+    }
+    return findings;
+  }
+};
+
+// src/rules/outbound.ts
+var FETCH_CALL = /(?<![\w$.])(?:fetch|\$fetch|ofetch|axios|got|ky|needle)\s*(?:<[^()]{0,200}>\s*)?\(/g;
+var FETCH_METHOD = /(?<![\w$.])(?:axios|got|ky|needle|http|https|undici)\s*\.\s*(?:get|post|put|patch|delete|head|request|stream)\s*(?:<[^()]{0,200}>\s*)?\(/g;
+var REDIRECT_CALL = /(?<![\w$.])(?:redirect|permanentRedirect|sendRedirect)\s*\(|(?<![\w$.])(?:NextResponse|Response|res|reply|response|ctx|context|Astro)\s*\.\s*redirect\s*\(/g;
+function callsIn(code, pairs) {
+  const calls = [];
+  const add = (regex, kind) => {
+    regex.lastIndex = 0;
+    for (const m of code.matchAll(regex)) {
+      const open = m.index + m[0].length - 1;
+      const close = pairs.get(open);
+      if (close !== void 0) calls.push({ kind, at: m.index, open, close, name: m[0] });
+    }
+  };
+  add(FETCH_CALL, "ssrf");
+  add(FETCH_METHOD, "ssrf");
+  add(REDIRECT_CALL, "redirect");
+  return calls;
+}
+var HOST_OPEN = /^(?:X?|[a-z][\w+.-]*:\/\/[^/?#\\]*)$/i;
+var REDIRECT_OPEN = /^(?:\/|[/\\]{2}[^/?#\\]*)$/;
+function controlsStart(expr, at, flow, source, kind, depth = 0) {
+  const lead = expr.length - expr.trimStart().length;
+  const text = expr.trim();
+  const start = at + lead;
+  if (text === "") return null;
+  if (depth >= 8) {
+    flow.limited = true;
+    return null;
+  }
+  if (text.length > 4e3) {
+    flow.limited = true;
+    return null;
+  }
+  const open = (prefix) => HOST_OPEN.test(prefix) || kind === "redirect" && REDIRECT_OPEN.test(prefix);
+  const url = /^new\s+URL\s*\(/.exec(text);
+  if (url) {
+    const argsStart = start + url[0].length;
+    const close = matchingParen(text, url[0].length - 1);
+    if (close === null) return null;
+    if (close === text.length - 1) {
+      const first = splitTopLevel(text.slice(url[0].length, close))[0];
+      return first === void 0 ? null : controlsStart(first, argsStart, flow, source, "redirect", depth + 1);
+    }
+  }
+  if (text.startsWith("`")) return templateStart(text, start, flow, source, open);
+  const operands = flow.operandsOf(text, start);
+  if (operands.length > 1) {
+    let prefix = "";
+    for (const operand of operands) {
+      const inner = operand.text.trim();
+      if (/^['"]/.test(inner)) {
+        prefix += source.slice(operand.at + operand.text.indexOf(inner) + 1, operand.at + operand.text.indexOf(inner) + inner.length - 1);
+        continue;
+      }
+      const t2 = inner.startsWith("`") ? templateStart(inner, operand.at + operand.text.indexOf(inner), flow, source, open) : controlsStart(inner, operand.at + operand.text.indexOf(inner), flow, source, kind, depth + 1);
+      if (t2) return open(prefix) ? t2 : null;
+      prefix += "X";
+      if (!open(prefix)) return null;
+    }
+    return null;
+  }
+  if (/^[A-Za-z_$][\w$]*$/.test(text)) {
+    const assignments = flow.assignmentsFor(text, at).filter((a) => !a.append);
+    if (assignments.length === 0) {
+      const t2 = flow.valueOf(text, at);
+      return t2 && !t2.ownUrl ? t2 : null;
+    }
+    for (const a of assignments) {
+      const t2 = controlsStart(a.expr, a.exprAt, flow, source, kind, depth + 1);
+      if (t2) return { ...t2, level: a.indirect ? "derived" : t2.level, names: /* @__PURE__ */ new Set([...t2.names, text]) };
+    }
+    return null;
+  }
+  const t = flow.taintOf(text, start);
+  return t && !t.ownUrl ? t : null;
+}
+function templateStart(text, start, flow, source, open) {
+  let prefix = "";
+  for (let i = 1; i < text.length; i++) {
+    if (text[i] === "`") return null;
+    if (text[i] === "$" && text[i + 1] === "{") {
+      const close = matchingBrace(text, i + 1);
+      if (close === null) return null;
+      const t = flow.taintOf(text.slice(i + 2, close), start + i + 2);
+      if (t && !t.ownUrl) return open(prefix) ? t : null;
+      prefix += "X";
+      i = close;
+      continue;
+    }
+    prefix += source[start + i];
+    if (prefix.length > 200) {
+      flow.limited = true;
+      return null;
+    }
+  }
+  return null;
+}
+function matchingParen(text, open) {
+  let depth = 0;
+  for (let i = open; i < text.length; i++) {
+    if (text[i] === "(") depth++;
+    else if (text[i] === ")" && --depth === 0) return i;
+  }
+  return null;
+}
+function matchingBrace(text, open) {
+  let depth = 0;
+  for (let i = open; i < text.length; i++) {
+    if (text[i] === "{") depth++;
+    else if (text[i] === "}" && --depth === 0) return i;
+  }
+  return null;
+}
+function splitTopLevel(text) {
+  const parts = [];
+  let depth = 0, from = 0;
+  for (let i = 0; i < text.length; i++) {
+    if ("([{".includes(text[i])) depth++;
+    else if (")]}".includes(text[i])) depth--;
+    else if (text[i] === "," && depth === 0) {
+      parts.push(text.slice(from, i));
+      from = i + 1;
+    }
+  }
+  parts.push(text.slice(from));
+  return parts;
+}
+function targetOf(call, analysed) {
+  const { code, pairs } = analysed;
+  const args = argumentExpressions(code, code, call.open + 1, call.close, pairs);
+  if (args.length === 0) return null;
+  const positions = [];
+  let cursor = call.open + 1;
+  for (const arg of args) {
+    const found = code.indexOf(arg, cursor);
+    positions.push(found);
+    cursor = found + arg.length;
+  }
+  let index = 0;
+  if (call.kind === "redirect") {
+    if (/sendRedirect/.test(call.name)) index = 1;
+    else if (/^\d{3}$/.test(args[0]) && args.length > 1) index = 1;
+  }
+  const expr = args[index];
+  if (expr === void 0) return null;
+  if (call.kind === "ssrf" && expr.startsWith("{")) {
+    const property = /(?:^|[{,])\s*(?:url|baseURL|href)\s*:\s*/.exec(expr);
+    if (!property) {
+      const shorthand = /(?:^|[{,])\s*(url|baseURL|href)\s*(?=[,}])/.exec(expr);
+      return shorthand ? { expr: shorthand[1], at: positions[index] + shorthand.index + shorthand[0].length - shorthand[1].length } : null;
+    }
+    const valueAt = positions[index] + property.index + property[0].length;
+    const value = splitTopLevel(expr.slice(property.index + property[0].length))[0].replace(/\}\s*$/, "");
+    return { expr: value, at: valueAt };
+  }
+  return { expr, at: positions[index] };
+}
+function capitalised2(text) {
+  return `${text.charAt(0).toUpperCase()}${text.slice(1)}`;
+}
+function ssrfFinding(route, file, line, originLine) {
+  return {
+    ruleId: "ssrf/request-url",
+    severity: "P1",
+    confidence: "likely",
+    title: `${capitalised2(route.url)} sends a server request to an address the caller chooses`,
+    file: file.path,
+    line,
+    excerpt: (file.lines[line - 1] ?? "").trim(),
+    why: [
+      `The address of this outgoing request comes from request input (read on line ${originLine}). A caller can point your server at internal services, cloud metadata endpoints such as 169.254.169.254, or other hosts only your server can reach, and read the response or trigger actions there.`,
+      "Fetching a caller-supplied address can be the purpose of the route, as in a link preview or image proxy, so this is reported for review. Even then it needs a host allowlist."
+    ],
+    fix: [
+      "Build the address from a fixed origin in code and let the request choose only a path segment or query value.",
+      "If callers must supply full URLs, parse them with new URL(), allow only https and hosts on an explicit allowlist, and reject private, loopback, and link-local addresses after DNS resolution."
+    ]
+  };
+}
+function redirectFinding(route, file, line, originLine, certain) {
+  return {
+    ruleId: "redirect/open",
+    severity: "P2",
+    confidence: certain ? "certain" : "likely",
+    title: `${capitalised2(route.url)} redirects to an address taken from the request`,
+    file: file.path,
+    line,
+    excerpt: (file.lines[line - 1] ?? "").trim(),
+    why: [
+      `The redirect target comes from request input (read on line ${originLine}), and nothing fixes the site it points to. A link to your site can then send visitors anywhere, which makes phishing links look trustworthy and can hand tokens in the URL to another site.`,
+      ...certain ? [] : ["The value passes through other code or a check first; confirm that check rejects other sites, including //host and /\\host forms."]
+    ],
+    fix: [
+      "Accept only relative paths that start with a single / (reject //, /\\, and anything with a scheme), or compare the target against a fixed list.",
+      "When building an absolute URL, use new URL(path, yourOrigin) and redirect only if the result's origin equals yourOrigin."
+    ]
+  };
+}
+function check(ctx, kind) {
+  const findings = [];
+  for (const file of ctx.files) {
+    const analysed = handlerFileOf(file);
+    if (!analysed) continue;
+    const calls = callsIn(analysed.code, analysed.pairs).filter((call) => call.kind === kind).sort((a, b) => a.at - b.at);
+    if (calls.length === 0) continue;
+    const positions = calls.map((call) => call.at);
+    const reported = /* @__PURE__ */ new Set();
+    for (const { route, body, flow } of analysed.handlersAround(positions)) {
+      for (let i = lowerBound(positions, body.start + 1); i < calls.length && calls[i].at < body.end; i++) {
+        const call = calls[i];
+        if (call.close >= body.end || reported.has(call.at)) continue;
+        const target = targetOf(call, analysed);
+        if (!target) continue;
+        const taint = controlsStart(target.expr, target.at, flow, analysed.source, kind);
+        if (!taint) continue;
+        reported.add(call.at);
+        const line = lineNumberAt(analysed.lineStarts, call.at);
+        const originLine = lineNumberAt(analysed.lineStarts, taint.origin);
+        findings.push(kind === "ssrf" ? ssrfFinding(route, file, line, originLine) : redirectFinding(route, file, line, originLine, taint.level === "direct" && !flow.validatedBefore(taint.names, call.at)));
+      }
+    }
+    reportInputLimit(ctx, file, analysed);
+  }
+  return findings;
+}
+var ssrfRule = { id: "ssrf/request-url", severity: "P1", check: (ctx) => check(ctx, "ssrf") };
+var redirectRule = { id: "redirect/open", severity: "P2", check: (ctx) => check(ctx, "redirect") };
+
+// src/rules/verification.ts
+var LocalVerification = class {
+  code;
+  source;
+  pairs;
+  bodies;
+  constructor(file) {
+    this.code = noiseMaskedOf(file);
+    this.source = commentsMaskedOf(file);
+    this.pairs = delimiterPairs(this.code);
+    this.bodies = functionBodies(this.code, this.pairs);
+  }
+  owner(at) {
+    return this.bodies.filter((b) => b.start < at && at < b.end).sort((a, b) => b.start - a.start)[0];
+  }
+  skipSpace(at) {
+    while (/\s/.test(this.code[at] ?? "")) at++;
+    return at;
+  }
+  endOf(at, limit = this.code.length) {
+    if (this.code[at] === "{") return (this.pairs.get(at) ?? limit - 1) + 1;
+    for (let i = at; i < limit; i++) {
+      if (/[;\n}]/.test(this.code[i])) return i;
+      const end = this.pairs.get(i);
+      if (end !== void 0) i = end;
+    }
+    return limit;
+  }
+  /**
+   * 块的顶层有无条件退出即算退出，前面可以有记录日志等语句；
+   * 嵌套分支、函数中的 return 以及无花括号 if/else/循环控制的 return 不算。
+   */
+  exits(from, to) {
+    let at = this.skipSpace(from);
+    if (this.code[at] !== "{") return /^(?:return|throw)\b|^(?:redirect|notFound)\s*\(/.test(this.code.slice(at, to));
+    const end = Math.min(to, this.pairs.get(at) ?? to);
+    at = this.skipSpace(at + 1);
+    while (at < end) {
+      if (/^(?:return|throw)\b|^(?:redirect|notFound)\s*\(/.test(this.code.slice(at, at + 32))) return true;
+      const next = this.statementEnd(at, end);
+      if (next <= at) return false;
+      at = this.skipSpace(next);
+    }
+    return false;
+  }
+  /** 跳过完整语句；分支、循环和函数内的退出不提升为外层退出。 */
+  statementEnd(at, limit, depth = 0) {
+    if (depth >= 64) return limit;
+    if (this.code[at] === "{") return (this.pairs.get(at) ?? limit - 1) + 1;
+    const control = /^(if|for(?:\s+await)?|while|with|switch)\s*\(/.exec(this.code.slice(at, at + 80));
+    if (control) {
+      const close = this.pairs.get(at + control[0].length - 1);
+      if (close === void 0) return limit;
+      let end = this.statementEnd(this.skipSpace(close + 1), limit, depth + 1);
+      const next = this.skipSpace(end);
+      if (control[1] === "if" && /^else\b/.test(this.code.slice(next, next + 5))) {
+        end = this.statementEnd(this.skipSpace(next + 4), limit, depth + 1);
+      }
+      return end;
+    }
+    if (/^(?:try|do)\b/.test(this.code.slice(at, at + 8))) return limit;
+    for (let i = at; i < limit; i++) {
+      if (this.code[i] === ";") return i + 1;
+      const close = this.pairs.get(i);
+      if (close !== void 0) {
+        i = close;
+        continue;
+      }
+      if (this.code[i] !== "\n") continue;
+      const before = this.code.slice(at, i).trimEnd();
+      const after = this.code.slice(i + 1, limit).trimStart();
+      if (!before || /[=+\-*/%&|^!?:,.([{<>]$/.test(before)) continue;
+      if (/^[.?+\-*/%&|^,:<>=([{`]/.test(after)) continue;
+      if (/\b(?:const|let|var|function|async|await|new|yield)$/.test(before)) continue;
+      return i + 1;
+    }
+    return limit;
+  }
+  /** 验证与使用须在同一函数，且不能依赖可选分支或被吞掉的异常。 */
+  enforcedBefore(from, to) {
+    const owner = this.owner(from);
+    if (from >= to || owner !== this.owner(to)) return false;
+    const start = owner ? owner.start + 1 : 0;
+    for (let i = start; i < from; i++) {
+      const conditional = /^(?:if|for|while|switch)\s*\(/.exec(this.code.slice(i, i + 32));
+      if (conditional && !/[\w$]/.test(this.code[i - 1] ?? "")) {
+        const close = this.pairs.get(i + conditional[0].length - 1);
+        if (close !== void 0) {
+          const body = this.skipSpace(close + 1);
+          const end2 = this.endOf(body);
+          if (from < end2 && to >= end2) return false;
+        }
+      }
+      const end = this.pairs.get(i);
+      if (end === void 0) continue;
+      if (end < from) {
+        i = end;
+        continue;
+      }
+      if (end >= to) continue;
+      if (this.code[i] !== "{" || !/\btry\s*$/.test(this.code.slice(Math.max(start, i - 16), i))) return false;
+      let next = this.skipSpace(end + 1);
+      if (/^catch\b/.test(this.code.slice(next))) {
+        next = this.skipSpace(next + 5);
+        if (this.code[next] === "(") next = this.skipSpace((this.pairs.get(next) ?? next) + 1);
+        const caughtEnd = this.endOf(next);
+        if (!this.exits(next, caughtEnd)) return false;
+        next = this.skipSpace(caughtEnd);
+      }
+      if (/^finally\b/.test(this.code.slice(next))) return false;
+    }
+    const boundary = Math.max(
+      start,
+      this.code.lastIndexOf(";", from - 1) + 1,
+      this.code.lastIndexOf("\n", from - 1) + 1,
+      this.code.lastIndexOf("{", from - 1) + 1
+    );
+    return !/[?]|&&|\|\|/.test(this.code.slice(boundary, from));
+  }
+  /** 找出当前函数中最后一次赋值；未知或条件覆盖同样会使旧证明失效。 */
+  assignment(name, at) {
+    const escaped = name.replace(/\$/g, "\\$");
+    const pattern = new RegExp(`(?<![\\w$.])(?:const\\s+|let\\s+|var\\s+)?${escaped}((?:\\s*\\.[\\w$]+|\\s*\\[[^\\]]*\\])*)\\s*(?::[^=;{}\\n]{0,100})?=(?![=>])`, "g");
+    let result = null;
+    for (const m of this.code.slice(0, at).matchAll(pattern)) {
+      if (this.owner(m.index) !== this.owner(at)) continue;
+      const from = this.skipSpace(m.index + m[0].length);
+      const end = this.endOf(from);
+      if (end <= at) result = { at: m.index, from, end, expression: this.code.slice(from, end).trim(), member: m[1].length > 0 };
+    }
+    return result;
+  }
+};
+
+// src/rules/session.ts
+var GET_SESSION = /\.auth\s*\.\s*getSession\s*\(/g;
+function verifiedSession(file, context, sessionAt, names) {
+  const { code, pairs, bodies } = context;
+  const body = context.owner(sessionAt);
+  if (!body) return false;
+  const client = /([\w$.]+)\s*$/.exec(code.slice(body.start, sessionAt))?.[1];
+  if (!client) return false;
+  const values = authValuesOf(file, body, bodies, pairs);
+  const reads = new RegExp(`(?<![\\w$.])(?:${namePattern(names)})(?![\\w$]|\\s*:)`, "g");
+  const verification = /\b(?:const|let)\s+(\{[^;=]{1,500}\}|[A-Za-z_$][\w$]*)\s*=\s*await\s+([\w$.]+)\.auth\.(?:getUser|getClaims)\s*\(/g;
+  for (const call of code.matchAll(verification)) {
+    if (call[2] !== client || context.owner(call.index) !== body) continue;
+    const close = pairs.get(call.index + call[0].length - 1);
+    if (close === void 0) continue;
+    if (code.slice(call.index + call[0].length, close).trim() !== "") continue;
+    const guardAt = context.skipSpace(code[close + 1] === ";" ? close + 2 : close + 1);
+    const condition = /^if\s*\(/.exec(code.slice(guardAt));
+    if (!condition) continue;
+    const conditionClose = pairs.get(guardAt + condition[0].length - 1);
+    if (conditionClose === void 0) continue;
+    const branchAt = context.skipSpace(conditionClose + 1);
+    const branchEnd = context.endOf(branchAt);
+    if (!context.exits(branchAt, branchEnd) || !context.enforcedBefore(call.index, guardAt)) continue;
+    const test = code.slice(guardAt + condition[0].length, conditionClose).trim();
+    const errorNames = call[1].startsWith("{") ? destructuredKeys(call[1]).filter((k) => k.key === "error").map((k) => k.local) : [`${call[1]}.error`];
+    if (/&&|\?(?!\.)/.test(test) || !test.split("||").some((term) => {
+      const t = term.trim();
+      return errorNames.includes(t) || t.startsWith("!") && identityRequirement(values.value(t.slice(1), guardAt), false) !== null;
+    })) continue;
+    const sessionClose = pairs.get(code.indexOf("(", sessionAt)) ?? code.indexOf(")", sessionAt);
+    let before = code.slice(sessionClose + 1, branchEnd);
+    before = before.replace(/\bif\s*\(\s*!\s*([\w$.?]+)\s*\)\s*(?:return|throw|redirect)\b[^;\n]*/g, (text, subject) => {
+      const rest = text.slice(text.indexOf(")") + 1).replace(/\b[\w$]+\s*:/g, "");
+      return names.some((n) => subject === n || subject.startsWith(`${n}.`)) && !new RegExp(reads.source).test(rest) ? " ".repeat(text.length) : text;
+    });
+    if (new RegExp(reads.source).test(before)) continue;
+    if (!context.enforcedBefore(guardAt, body.end - 1)) continue;
+    return true;
+  }
+  return false;
+}
+var SERVER_PATH = [
+  /(?:^|\/)(?:middleware|proxy)\.[mc]?[jt]s$/,
+  /(?:^|\/)app\/(?:.+\/)?(?:page|layout|template|default)\.[mc]?[jt]sx?$/,
+  /\.server\.[mc]?[jt]s$/,
+  /(?:^|\/)server\/.+\.[mc]?[jt]s$/
+];
+function isServerFile(file) {
+  if (!/\.[mc]?[jt]sx?$/.test(file.path)) return false;
+  if (/^\s*(?:(?:'use strict'|"use strict");?\s*)?['"]use client['"]/.test(commentsMaskedOf(file))) return false;
+  return SERVER_PATH.some((pattern) => pattern.test(file.path)) || routeOf(file) !== null || serverActionRoutes(file).length > 0;
+}
+var sessionRule = {
+  id: "auth/unverified-session",
+  severity: "P1",
+  appliesTo(file) {
+    return file.content.includes("getSession") && isServerFile(file);
+  },
+  check(file) {
+    const code = noiseMaskedOf(file);
+    const context = new LocalVerification(file);
+    const { pairs, bodies } = context;
+    const lineStarts = lineStartsOf(file.content);
+    const findings = [];
+    for (const m of code.matchAll(GET_SESSION)) {
+      const body = bodies.filter((b) => b.start < m.index && m.index < b.end).sort((a, b) => b.start - a.start)[0];
+      const start = body?.start ?? 0;
+      const end = body?.end ?? code.length;
+      const statement = code.slice(Math.max(start, m.index - 300), m.index);
+      const declaration = /\b(?:const|let|var)\s+((?:\{[^;=]*\})|[A-Za-z_$][\w$]*)\s*(?::[^=;]{0,200})?=\s*(?:await\s+)?\(?\s*(?:await\s+)?[\w$.?\s]*$/.exec(statement);
+      if (!declaration) continue;
+      const names = patternNames(declaration[1]);
+      if (names.length === 0) continue;
+      const refs = new RegExp(`(?<![\\w$.])(?:${namePattern(names)})(?![\\w$])`);
+      const after = code.slice(m.index, end);
+      let decides = false;
+      for (const condition of after.matchAll(/\bif\s*\(/g)) {
+        const open = m.index + condition.index + condition[0].length - 1;
+        const close = pairs.get(open);
+        if (close !== void 0 && refs.test(code.slice(open + 1, close))) {
+          decides = true;
+          break;
+        }
+      }
+      const readsUser = new RegExp(`(?<![\\w$.])(?:${namePattern(names)})(?:\\??\\.\\s*(?:session|data))*\\??\\.\\s*user\\b`).test(after);
+      if (!decides && !readsUser) continue;
+      if (verifiedSession(file, context, m.index, names)) continue;
+      const line = lineNumberAt(lineStarts, m.index);
+      findings.push({
+        ruleId: "auth/unverified-session",
+        severity: "P1",
+        confidence: decides ? "certain" : "likely",
+        title: "Server code trusts supabase.auth.getSession() to identify the user",
+        file: file.path,
+        line,
+        excerpt: (file.lines[line - 1] ?? "").trim(),
+        why: [
+          "On the server, getSession() reads the session straight from the request cookie without verifying it. Anyone can put a forged or expired session in their cookies, so a check based on it can be passed by a caller who is not signed in.",
+          decides ? "The result is used in a condition here, so it decides who gets through." : "The user from this session is read here, so an unverified user id may be trusted."
+        ],
+        fix: [
+          "Use supabase.auth.getClaims() (verifies the token signature) or supabase.auth.getUser() (asks the Auth server) to decide who the caller is.",
+          "Keep getSession() only where you need the access token itself, not to decide access."
+        ]
+      });
+    }
+    return findings;
+  }
+};
+
+// src/rules/webhook.ts
+var STRIPE_EVENT = /(?:\bcase\s*|\.type\s*[!=]==?\s*)['"`]((?:checkout\.session|payment_intent|customer\.subscription|customer|invoice|charge|setup_intent|payment_method|subscription_schedule|account|payout|refund|checkout)\.[a-z_.]+)['"`]|['"`]((?:checkout\.session|payment_intent|customer\.subscription|invoice|charge)\.[a-z_.]+)['"`]\s*[!=]==?\s*[\w$.]+\.type\b/;
+function verifiedEvent(context, name, at) {
+  const assignment = context.assignment(name, at);
+  if (!assignment || assignment.member || !context.enforcedBefore(assignment.at, at)) return false;
+  const call = /^(?:(await)\s+)?[\w$.]+\.(constructEvent(?:Async)?|retrieve|parseEventNotification)\s*\(/.exec(assignment.expression);
+  if (!call || call[2] !== "constructEvent" && !call[1]) return false;
+  if (call[2] === "retrieve" && !/\.events\s*\.\s*retrieve/.test(call[0])) return false;
+  const close = context.pairs.get(assignment.from + call[0].length - 1);
+  return close !== void 0 && context.code.slice(close + 1, assignment.end).trim() === "";
+}
+function eventName(context, event) {
+  if (event[0].startsWith(".")) return /([A-Za-z_$][\w$]*)\s*$/.exec(context.code.slice(0, event.index))?.[1] ?? null;
+  if (!event[0].startsWith("case")) return /([A-Za-z_$][\w$]*)\.type\b/.exec(event[0])?.[1] ?? null;
+  let name = null;
+  for (const m of context.code.slice(0, event.index).matchAll(/\bswitch\s*\(\s*([A-Za-z_$][\w$]*)\.type\s*\)\s*\{/g)) {
+    const end = context.pairs.get(m.index + m[0].length - 1);
+    if (end !== void 0 && end > event.index && context.owner(m.index) === context.owner(event.index)) name = m[1];
+  }
+  return name;
+}
+var READS_BODY = /\.\s*(?:json|text|arrayBuffer|formData)\s*\(|\breq(?:uest)?\s*\.\s*body\b|\b(?:readBody|readRawBody)\s*\(|\bbuffer\s*\(\s*req\b/;
+var webhookRule = {
+  id: "webhook/unverified-signature",
+  severity: "P1",
+  appliesTo(file) {
+    return /stripe/i.test(file.content) && routeOf(file) !== null;
+  },
+  check(file) {
+    const route = routeOf(file);
+    if (!route) return [];
+    const context = new LocalVerification(file);
+    const { source, code } = context;
+    const findings = [];
+    const reported = /* @__PURE__ */ new Set();
+    for (const event of source.matchAll(new RegExp(STRIPE_EVENT.source, "g"))) {
+      if (code[event.index] !== source[event.index]) continue;
+      const owner = context.owner(event.index);
+      const name = eventName(context, event);
+      if (name && verifiedEvent(context, name, event.index)) continue;
+      const key = owner?.start ?? 0;
+      if (reported.has(key)) continue;
+      reported.add(key);
+      const line = lineNumberAt(lineStartsOf(file.content), event.index);
+      const region = code.slice(owner?.start ?? 0, owner?.end ?? code.length);
+      const readsBody = READS_BODY.test(region);
+      const customCheck = /\bverifyHeader\s*\(/.test(region) || /\bcreateHmac\s*\(/.test(region) && /\btimingSafeEqual\s*\(/.test(region);
+      findings.push({
+        ruleId: "webhook/unverified-signature",
+        severity: "P1",
+        confidence: readsBody && !customCheck ? "certain" : "likely",
+        title: customCheck ? `Review custom Stripe signature verification in ${route.url}` : `${route.url} acts on Stripe events without verifying the signature`,
+        file: file.path,
+        line,
+        excerpt: (file.lines[line - 1] ?? "").trim(),
+        why: [
+          `This route handles ${event[1] ?? event[2]} and similar events, but the scan could not link this event to a signature-verification result. Without effective verification, callers can submit made-up events and trigger the handler.`,
+          ...customCheck ? ["A custom signature check is present; confirm it checks the raw body and rejects invalid signatures before processing this event."] : [],
+          ...readsBody ? [] : ["The event does not appear to come from the request body here; confirm where it is read and whether it is verified there."]
+        ],
+        fix: [
+          "Read the raw body (await request.text() in a route handler) and pass it to stripe.webhooks.constructEvent(body, request.headers.get('stripe-signature'), process.env.STRIPE_WEBHOOK_SECRET) before handling the event. Return 400 when it throws.",
+          "Do not parse the body as JSON before verifying; any change to the raw body makes verification fail."
+        ]
+      });
+    }
+    return findings;
+  }
+};
+
+// src/rules/index.ts
+var FILE_RULES = [secretsRule, exposureRule, firebaseRulesRule, corsRule, sessionRule, webhookRule];
+var PROJECT_RULES = [gitleakRule, supabaseRlsRule, apiAuthRule, injectionRule, ssrfRule, redirectRule];
+var RULE_IDS = [
+  "api/admin-db-access-without-auth",
+  "api/db-write-without-auth",
+  "auth/unverified-session",
+  "cors/reflected-origin-with-credentials",
+  "cors/wildcard-with-credentials",
+  "exposure/private-name-in-public-env",
+  "exposure/secret-in-public-env",
+  "exposure/supabase-service-role-in-client",
+  "firebase/open-rules",
+  "firebase/test-mode-rules",
+  "gitleak/env-in-history",
+  "gitleak/env-tracked",
+  "injection/command",
+  "injection/sql",
+  "redirect/open",
+  "ssrf/request-url",
+  "supabase/permissive-policy",
+  "supabase/public-bucket-listing",
+  "supabase/rls-not-enabled",
+  "webhook/unverified-signature",
+  // 凭据规则 ID 从共享格式表生成。
+  ...SECRET_PATTERNS.map((p) => `secrets/hardcoded/${p.id}`)
+];
+function ruleMatches(selector, ruleId) {
+  return ruleId === selector || ruleId.startsWith(`${selector}/`);
+}
+function isKnownSelector(selector) {
+  return RULE_IDS.some((id) => ruleMatches(selector, id));
+}
+function shouldRunRule(id, only, skip) {
+  if (only.length === 0 && skip.length === 0) return true;
+  const namespace = id.split("/")[0];
+  return RULE_IDS.filter((candidate) => candidate.startsWith(`${namespace}/`)).some(
+    (candidate) => (only.length === 0 || only.some((selector) => ruleMatches(selector, candidate))) && !skip.some((selector) => ruleMatches(selector, candidate))
+  );
+}
+
+// src/engine.ts
+import { createHash as createHash2 } from "crypto";
+var SEVERITY_ORDER = { P0: 0, P1: 1, P2: 2 };
+var CONFIDENCE_ORDER = { certain: 0, likely: 1 };
+function dedupe(findings) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const f of findings) {
+    const key = `${f.ruleId}|${f.file ?? ""}|${f.line ?? ""}|${f.excerpt ?? ""}|${f.title}`;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push(f);
+  }
+  return out;
+}
+var CONTROL_CHARS = /[\u0000-\u001f\u007f-\u009f]/g;
+var DECEPTIVE_CHARS = /[\u061c\u200b\u200e\u200f\u202a-\u202e\u2066-\u2069\ufeff]/g;
+function nameOf(ch) {
+  return `<U+${(ch.codePointAt(0) ?? 0).toString(16).toUpperCase().padStart(4, "0")}>`;
+}
+function clean(text) {
+  return redactAll(text).replace(/\t/g, " ").replace(CONTROL_CHARS, "").replace(DECEPTIVE_CHARS, nameOf);
+}
+function cleanForOutput(text) {
+  return clean(text);
+}
+function sanitize(findings, files) {
+  const byPath = new Map(files.map((file) => [file.path, file]));
+  const sourceIdentity = (f) => {
+    if (f.sourceFingerprint !== void 0) return { sourceFingerprint: f.sourceFingerprint };
+    const file = f.file === null ? void 0 : byPath.get(f.file);
+    const source = f.line === null ? file?.content : file?.lines[f.line - 1];
+    return source === void 0 ? {} : {
+      sourceFingerprint: createHash2("sha256").update(source.trim(), "utf8").digest("hex")
+    };
+  };
+  return findings.map((f) => ({
+    ...f,
+    // 仅输出摘要；原始行不进入报告，移动行号不改变身份。
+    ...sourceIdentity(f),
+    title: clean(f.title),
+    // 按段落清理，保留段落之间的结构。
+    why: f.why.map(clean),
+    // 文件路径也必须经过输出清理。
+    file: f.file === null ? null : clean(f.file),
+    // 先脱敏再截断，避免截断导致凭据特征失效。
+    excerpt: f.excerpt === null ? null : truncate(clean(f.excerpt)),
+    ...f.evidence ? {
+      evidence: f.evidence.slice(0, 24).map((step) => ({
+        kind: step.kind,
+        file: clean(step.file),
+        line: step.line,
+        description: clean(step.description)
+      })),
+      evidenceTruncated: f.evidenceTruncated === true || f.evidence.length > 24
+    } : {},
+    fix: f.fix.map(clean),
+    ...f.humanOnly ? { humanOnly: f.humanOnly.map(clean) } : {}
+  }));
+}
+function sanitizeSkippedForOutput(items) {
+  return items.map((item) => ({
+    ...item,
+    path: clean(item.path),
+    ...item.detail === void 0 ? {} : { detail: clean(item.detail) }
+  }));
+}
+function downgradeExampleContext(findings, files) {
+  const examples = new Set(files.filter((f) => f.isExampleContext).map((f) => f.path));
+  return findings.map(
+    (f) => f.file !== null && examples.has(f.file) ? { ...f, confidence: "likely" } : f
+  );
+}
+function suppressIgnoredLines(findings, files) {
+  const byPath = new Map(files.map((f) => [f.path, f]));
+  const markers = /* @__PURE__ */ new Map();
+  const kept = [];
+  const ignored = [];
+  for (const f of findings) {
+    if (f.file === null || f.line === null) {
+      kept.push(f);
+      continue;
+    }
+    let lines = markers.get(f.file);
+    if (lines === void 0) {
+      const file = byPath.get(f.file);
+      lines = file === void 0 ? /* @__PURE__ */ new Map() : ignoredLinesOf(file.lines);
+      markers.set(f.file, lines);
+    }
+    if (!lines.has(f.line)) {
+      kept.push(f);
+      continue;
+    }
+    const rules = lines.get(f.line);
+    if (rules !== null && rules !== void 0 && !rules.has(f.ruleId)) {
+      kept.push(f);
+      continue;
     }
     ignored.push({ file: f.file, line: f.line, ruleId: f.ruleId });
   }
@@ -5549,196 +7019,319 @@ var SKIP_LABEL = {
 function skipPhrase(reason) {
   return SKIP_LABEL[reason].because;
 }
+var CATEGORIES = ["Credentials", "API access", "Database rules", "CORS", "Code", "Other"];
+var SEVERITIES = ["P0", "P1", "P2"];
+function categoryOf(ruleId) {
+  const namespace = ruleId.split("/")[0];
+  if (namespace === "secrets" || namespace === "exposure" || namespace === "gitleak") return "Credentials";
+  if (namespace === "api" || namespace === "auth" || namespace === "webhook") return "API access";
+  if (namespace === "supabase" || namespace === "firebase") return "Database rules";
+  if (namespace === "cors") return "CORS";
+  if (namespace === "injection" || namespace === "ssrf" || namespace === "redirect") return "Code";
+  return "Other";
+}
+function categoryCounts(findings) {
+  return CATEGORIES.map((category) => {
+    const counts = { P0: 0, P1: 0, P2: 0 };
+    for (const f of findings) if (categoryOf(f.ruleId) === category) counts[f.severity]++;
+    return { category, counts, total: counts.P0 + counts.P1 + counts.P2 };
+  }).filter((row) => row.total > 0);
+}
+function groupByFile(findings) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const f of findings) {
+    const list = groups.get(f.file) ?? [];
+    list.push(f);
+    groups.set(f.file, list);
+  }
+  const rank = (list) => Math.min(...list.map((f) => SEVERITIES.indexOf(f.severity)));
+  return [...groups].map(([file, list]) => ({
+    file,
+    findings: [...list].sort((a, b) => (a.line ?? 0) - (b.line ?? 0) || SEVERITIES.indexOf(a.severity) - SEVERITIES.indexOf(b.severity))
+  })).sort((a, b) => rank(a.findings) - rank(b.findings) || b.findings.length - a.findings.length || (a.file ?? "").localeCompare(b.file ?? ""));
+}
+function firstSentence(text) {
+  const cut = /\.\s+(?=[A-Z"'(])|\s+—\s+/.exec(text);
+  const sentence = cut ? text.slice(0, cut.index + (cut[0].startsWith(".") ? 1 : 0)) : text;
+  return sentence.trim().replace(/\.$/, "");
+}
+function manualSteps(findings) {
+  const steps = /* @__PURE__ */ new Map();
+  for (const f of findings) {
+    for (const item of f.humanOnly ?? []) {
+      const text = firstSentence(item);
+      if (!text) continue;
+      const step = steps.get(text) ?? { text, locations: [], severity: f.severity };
+      const location = locationOf(f);
+      if (!step.locations.includes(location)) step.locations.push(location);
+      if (SEVERITIES.indexOf(f.severity) < SEVERITIES.indexOf(step.severity)) step.severity = f.severity;
+      steps.set(text, step);
+    }
+  }
+  return [...steps.values()].sort((a, b) => SEVERITIES.indexOf(a.severity) - SEVERITIES.indexOf(b.severity));
+}
 
 // src/report/terminal.ts
-var INDENT = "  ";
-function renderBaseline(opts) {
-  const suppressed = opts.baselineSuppressed ?? 0;
-  const stale = opts.baselineStale ?? 0;
-  if (suppressed === 0 && stale === 0) return [];
-  const out = [];
-  if (suppressed > 0) {
-    const where = opts.baselinePath ? ` (${opts.baselinePath})` : "";
-    out.push(
-      `${INDENT}${yellow(`${suppressed} ${plural(suppressed, "finding")} hidden by the baseline${where}`)}`
-    );
-    out.push(`${INDENT}${dim("These problems still exist. Re-run without --baseline to see them.")}`);
-  }
-  if (stale > 0) {
-    out.push(
-      // 不规则复数单独处理。
-      `${INDENT}${dim(`${stale} baseline ${stale === 1 ? "entry" : "entries"} no longer ${stale === 1 ? "matches" : "match"} anything \u2014 re-run --baseline-write to prune.`)}`
-    );
+var DETAIL = " ".repeat(12);
+function widthOf(opts) {
+  const columns = opts.width ?? (process.stdout.isTTY ? process.stdout.columns : void 0) ?? 96;
+  return Math.max(60, Math.min(120, columns));
+}
+function severityColor(severity) {
+  return severity === "P0" ? red : severity === "P1" ? yellow : (s) => s;
+}
+var ANSI = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
+var visibleLength = (s) => s.replace(ANSI, "").length;
+function joinFitting(items, separator, width) {
+  const lines = [];
+  let line = "";
+  for (const item of items) {
+    const next = line === "" ? item : `${line}${separator}${item}`;
+    if (line !== "" && visibleLength(next) > width) {
+      lines.push(line);
+      line = item;
+    } else {
+      line = next;
+    }
   }
-  return out;
+  if (line !== "") lines.push(line);
+  return lines;
 }
+var pad = (s, n) => s.length >= n ? s : s + " ".repeat(n - s.length);
+var rpad = (s, n) => s.length >= n ? s : " ".repeat(n - s.length) + s;
 function renderReport(result, opts) {
-  const out = [""];
-  const { findings } = result;
-  out.push(
-    `${INDENT}${bold("canship")} ${dim(`scanned ${result.filesScanned} ${plural(result.filesScanned, "file")} in ${result.durationMs}ms`)}`
-  );
-  out.push(`${INDENT}${dim(opts.root)}`);
-  if (result.changeView) out.push(`${INDENT}${yellow(changeViewNotice(result.changeView))}`);
+  const width = widthOf(opts);
+  const out = [];
+  const rule2 = () => {
+    out.push(dim("\u2500".repeat(width)));
+  };
+  out.push(`${bold("canship")}${opts.version ? ` ${opts.version}` : ""} ${dim("\xB7")} ${opts.root}`);
+  out.push("\u2500".repeat(width));
   out.push("");
+  const { findings } = result;
   if (findings.length === 0) {
-    out.push(...renderClean(result, opts));
+    out.push(...renderClean(result, opts, width));
+    out.push(...renderNext(opts, width));
     return out.join("\n");
   }
-  const { blocking: visibleBlocking, minor: confirmedMinor, unsure } = verdictOf(findings);
-  const blocking = result.changeView?.totalBlocking ?? visibleBlocking;
-  if (blocking > 0) {
-    out.push(`${INDENT}${red(bold(`\u2717 ${blocking} critical ${plural(blocking, "issue")} \u2014 do not deploy`))}`);
-  } else if (confirmedMinor > 0) {
-    out.push(
-      `${INDENT}${yellow(bold(`! ${confirmedMinor} ${plural(confirmedMinor, "thing")} to fix \u2014 nothing exposed`))}`
-    );
-  } else {
-    out.push(`${INDENT}${yellow(bold(`! ${unsure} possible ${plural(unsure, "issue")} to review`))}`);
-  }
+  out.push(...renderVerdict(result, opts, width));
   out.push("");
-  findings.forEach((f, i) => {
-    out.push(...renderFinding(f, i + 1));
-    out.push("");
-  });
-  out.push(`${INDENT}${gray("\u2500".repeat(60))}`);
+  rule2();
   out.push("");
-  if (result.partial) {
-    out.push(...renderIncomplete(result));
+  out.push(...renderSummary(findings));
+  const steps = renderManualSteps(findings, width);
+  if (steps.length > 0) out.push("", ...steps);
+  out.push("");
+  rule2();
+  out.push("");
+  out.push(`${bold("Findings")}${dim("  grouped by file \xB7 most severe first")}`);
+  out.push("");
+  for (const group of groupByFile(findings)) {
+    out.push(`${group.file ?? "repository"}${dim(` \u2014 ${group.findings.length}`)}`);
+    for (const f of group.findings) out.push(...renderFinding(f, width, opts.verbose === true));
     out.push("");
   }
-  out.push(...renderIgnored(result));
-  out.push(...renderBaseline(opts));
+  rule2();
+  const notes = [...renderIncomplete(result, width), ...renderIgnored(result), ...renderBaseline(opts)];
   if (!opts.showingLikely && opts.hiddenLikely > 0) {
-    out.push(
-      `${INDENT}${dim(`${opts.hiddenLikely} lower-confidence ${plural(opts.hiddenLikely, "finding")} hidden. Run with --all to see ${opts.hiddenLikely === 1 ? "it" : "them"}.`)}`
-    );
+    notes.push(dim(`${opts.hiddenLikely} lower-confidence ${plural(opts.hiddenLikely, "finding")} hidden. Run with --all to see ${opts.hiddenLikely === 1 ? "it" : "them"}.`));
   }
-  out.push(`${INDENT}${dim("Rotate any key that was exposed. Removing it from the code is not enough.")}`);
-  out.push("");
+  if (notes.length > 0) out.push(...notes, "");
+  out.push(...renderNext(opts, width));
   return out.join("\n");
 }
-function renderFinding(f, index) {
+function renderVerdict(result, opts, width) {
+  const { findings } = result;
+  const { blocking: visibleBlocking, minor, unsure } = verdictOf(findings);
+  const blocking = result.changeView?.totalBlocking ?? visibleBlocking;
+  const rotations = manualSteps(findings).filter((step) => /^Rotate\b/.test(step.text)).length;
   const out = [];
-  const marker = f.confidence === "certain" ? red("\u2717") : yellow("!");
-  const location = locationOf(f);
-  out.push(`${INDENT}${marker} ${bold(`[${index}] ${f.title}`)}`);
-  out.push(`${INDENT}${INDENT}${cyan(location)}${f.confidence === "likely" ? dim("  (lower confidence)") : ""}`);
-  if (f.excerpt) {
-    out.push("");
-    out.push(`${INDENT}${INDENT}${gray(f.excerpt)}`);
-  }
-  if (f.evidence?.length) {
-    out.push("", `${INDENT}${INDENT}${bold("Evidence (static relationships):")}`);
-    for (const step of f.evidence) out.push(`${INDENT}${INDENT}  ${locationOf(step)} \u2014 ${step.description}`);
-    if (f.evidenceTruncated) out.push(`${INDENT}${INDENT}  Additional dependency steps omitted.`);
+  let explanation;
+  if (blocking > 0) {
+    out.push(`${red(bold(`${blocking} blocking ${plural(blocking, "finding")}.`))} ${bold("Do not deploy yet.")}`);
+    explanation = "Every certain P0 or P1 result below needs a code change." + (rotations > 0 ? ` ${rotations} exposed ${plural(rotations, "credential")} must also be rotated in ${rotations === 1 ? "its provider" : "their providers"}; a code change does not revoke ${rotations === 1 ? "it" : "them"}.` : "");
+  } else if (minor > 0) {
+    out.push(`${yellow(bold(`${minor} ${plural(minor, "finding")} to fix.`))} ${bold("Nothing blocking.")}`);
+    explanation = "No certain P0 or P1 result was found; the findings below are lower severity.";
+  } else {
+    out.push(`${yellow(bold(`${unsure} ${plural(unsure, "finding")} to review.`))}`);
+    explanation = "These are likely findings: the static evidence is not conclusive, so check each one.";
   }
+  for (const line of wrapText(explanation, width)) out.push(dim(line));
   out.push("");
-  for (const line of wrapText(f.why.join("\n\n"), 76)) {
-    out.push(line === "" ? "" : `${INDENT}${INDENT}${line}`);
+  const facts = [
+    `${dim("findings")} ${findings.length} ${dim("shown")}${opts.hiddenLikely > 0 && !opts.showingLikely ? dim(`, ${opts.hiddenLikely} likely hidden (--all)`) : ""}`,
+    `${dim("files scanned")} ${result.filesScanned}`,
+    `${dim("coverage")} ${result.partial ? yellow("incomplete") : "complete"}`,
+    `${result.durationMs} ${dim("ms")}`
+  ];
+  out.push(...joinFitting(facts, dim("  \xB7  "), width));
+  if (result.changeView) for (const line of wrapText(changeViewNotice(result.changeView), width)) out.push(yellow(line));
+  return out;
+}
+function renderSummary(findings) {
+  const rows = categoryCounts(findings);
+  const out = [bold("By category"), dim(pad("", 22) + SEVERITIES.map((s) => rpad(s, 5)).join("") + rpad("total", 8))];
+  for (const row of rows) {
+    out.push(pad(row.category, 22) + SEVERITIES.map((s) => row.counts[s] ? severityColor(s)(rpad(String(row.counts[s]), 5)) : dim(rpad("\u2013", 5))).join("") + rpad(String(row.total), 8));
+  }
+  const totals = SEVERITIES.map((s) => findings.filter((f) => f.severity === s).length);
+  out.push(dim(pad("all", 22) + totals.map((n) => rpad(String(n), 5)).join("") + rpad(String(findings.length), 8)));
+  return out;
+}
+function renderManualSteps(findings, width) {
+  const steps = manualSteps(findings);
+  if (steps.length === 0) return [];
+  const out = [bold("Manual steps")];
+  steps.forEach((step, i) => {
+    wrapText(step.text, width - 5).forEach((line, j) => out.push(`${dim(j === 0 ? rpad(String(i + 1), 3) : "   ")}  ${line}`));
+    const more = step.locations.length > 1 ? ` +${step.locations.length - 1}` : "";
+    out.push(`     ${dim(`${step.locations[0]}${more}`)}`);
+  });
+  return out;
+}
+var EVIDENCE_LABEL = {
+  operation: "operation",
+  import: "imports",
+  "admin-client": "admin client",
+  "auth-helper": "auth helper"
+};
+function renderFinding(f, width, verbose) {
+  const out = [];
+  const title = wrapText(f.title, width - DETAIL.length);
+  const likely = f.confidence === "likely" ? dim("  likely") : "";
+  title.forEach((line, i) => out.push(i === 0 ? `  ${severityColor(f.severity)(pad(f.severity, 4))}${dim(rpad(f.line !== null ? String(f.line) : f.file ? "file" : "", 4))}  ${verbose ? bold(line) : line}${i === title.length - 1 ? likely : ""}` : `${DETAIL}${verbose ? bold(line) : line}${i === title.length - 1 ? likely : ""}`));
+  if (!verbose) return out;
+  const text = (s, indent = DETAIL) => wrapText(s, width - indent.length).map((line) => line === "" ? "" : `${indent}${line}`);
+  out.push(`${DETAIL}${dim(`${categoryOf(f.ruleId)} \xB7 ${f.ruleId}`)}`);
+  if (f.excerpt) out.push("", `${DETAIL}${gray(f.excerpt)}`);
+  out.push("", ...text(f.why.join("\n\n")));
+  if (f.evidence?.length) {
+    out.push("", `${DETAIL}${dim("trace (static relationships)")}`);
+    f.evidence.forEach((step, i) => {
+      const marker = i === 0 ? red("\u25CF") : i === f.evidence.length - 1 ? dim("\u25CB") : dim("\u2502");
+      out.push(`${DETAIL}${marker} ${dim(pad(EVIDENCE_LABEL[step.kind], 14))}${locationOf(step)}`);
+    });
+    if (f.evidenceTruncated) out.push(`${DETAIL}${dim("  additional dependency steps omitted")}`);
   }
   if (f.fix.length > 0) {
-    out.push("");
-    out.push(`${INDENT}${INDENT}${bold("How to fix:")}`);
+    out.push("", `${DETAIL}${dim("fix")}`);
     f.fix.forEach((step, i) => {
-      const wrapped = wrapText(step, 72);
-      wrapped.forEach((line, j) => {
-        const prefix = j === 0 ? `${i + 1}. ` : "   ";
-        out.push(`${INDENT}${INDENT}${INDENT}${dim(prefix)}${line}`);
-      });
+      wrapText(step, width - DETAIL.length - 3).forEach((line, j) => out.push(`${DETAIL}${j === 0 ? `${i + 1}. ` : "   "}${line}`));
     });
   }
-  if (f.humanOnly && f.humanOnly.length > 0) {
-    out.push("");
-    out.push(`${INDENT}${INDENT}${yellow(bold("Only you can do this:"))}`);
-    f.humanOnly.forEach((step) => {
-      wrapText(step, 72).forEach((line, j) => {
-        const prefix = j === 0 ? "\xB7 " : "  ";
-        out.push(`${INDENT}${INDENT}${INDENT}${dim(prefix)}${line}`);
-      });
-    });
+  if (f.humanOnly?.length) {
+    out.push("", `${DETAIL}${yellow("by hand")}`);
+    for (const step of f.humanOnly) {
+      wrapText(step, width - DETAIL.length - 2).forEach((line, j) => out.push(`${DETAIL}${j === 0 ? dim("\xB7 ") : "  "}${line}`));
+    }
+  }
+  out.push("");
+  return out;
+}
+function renderNext(opts, width) {
+  const out = [];
+  const commands = [
+    ...opts.verbose ? [] : [`${dim("details")} canship --verbose`],
+    `${dim("report")} canship --report --open`,
+    `${dim("fix prompt")} canship --fix-prompt`
+  ];
+  out.push(...joinFitting(commands, "   ", width));
+  if (opts.exitCode !== void 0) {
+    const reason = {
+      0: "no findings",
+      1: "blocking findings present",
+      2: "findings present, none blocking",
+      3: "scan incomplete"
+    }[opts.exitCode];
+    out.push(dim(`exit ${opts.exitCode} \xB7 ${reason}`));
+  }
+  out.push("");
+  return out;
+}
+function renderBaseline(opts) {
+  const suppressed = opts.baselineSuppressed ?? 0;
+  const stale = opts.baselineStale ?? 0;
+  const out = [];
+  if (suppressed > 0) {
+    const where = opts.baselinePath ? ` (${opts.baselinePath})` : "";
+    out.push(yellow(`${suppressed} ${plural(suppressed, "finding")} hidden by the baseline${where}`));
+    out.push(dim("These problems still exist. Re-run without --baseline to see them."));
+  }
+  if (stale > 0) {
+    out.push(dim(`${stale} baseline ${stale === 1 ? "entry" : "entries"} no longer ${stale === 1 ? "matches" : "match"} anything \u2014 re-run --baseline-write to prune.`));
   }
   return out;
 }
-function renderClean(result, opts) {
+function renderClean(result, opts, width) {
   const out = [];
+  const facts = joinFitting([
+    `${dim("files scanned")} ${result.filesScanned}`,
+    `${dim("coverage")} ${result.partial ? yellow("incomplete") : "complete"}`,
+    `${result.durationMs} ${dim("ms")}`
+  ], dim("  \xB7  "), width);
   if (result.filesScanned === 0) {
-    out.push(`${INDENT}${yellow(bold("! No files were scanned \u2014 nothing was checked"))}`);
-    out.push("");
-    for (const line of wrapText(
-      "canship found no files it could read here, so none of its checks ran. This is not a clean result \u2014 it is an empty one.",
-      76
-    )) {
-      out.push(`${INDENT}${line}`);
-    }
+    out.push(yellow(bold("No files were scanned \u2014 nothing was checked.")));
+    for (const line of wrapText("canship found no files it could read here, so none of its checks ran. This is not a clean result \u2014 it is an empty one.", width)) out.push(dim(line));
     out.push("");
-    out.push(`${INDENT}${dim("Most likely one of:")}`);
-    out.push(`${INDENT}${dim("  \xB7 this is not the directory you meant to scan")}`);
-    out.push(`${INDENT}${dim("  \xB7 everything here is gitignored, or is build output canship skips")}`);
-    out.push(`${INDENT}${dim("  \xB7 the project lives in a subdirectory \u2014 try: npx canship ./app")}`);
+    out.push(dim("Most likely one of:"));
+    out.push(dim("  \xB7 this is not the directory you meant to scan"));
+    out.push(dim("  \xB7 everything here is gitignored, or is build output canship skips"));
+    out.push(dim("  \xB7 the project lives in a subdirectory \u2014 try: npx canship ./app"));
     if (result.ignored.length > 0) {
-      out.push(`${INDENT}${dim("  \xB7 every file here was excluded by canship-ignore-file")}`);
-      out.push("");
-      out.push(...renderIgnored(result));
+      out.push(dim("  \xB7 every file here was excluded by canship-ignore-file"));
+      out.push("", ...renderIgnored(result));
     }
     out.push("");
+    if (result.partial) out.push(...renderIncomplete(result, width), "");
     return out;
   }
   if (result.partial) {
-    const headline = opts.hiddenLikely > 0 ? `! No certain findings \u2014 ${opts.hiddenLikely} lower-confidence ${plural(opts.hiddenLikely, "finding")} hidden, and not everything was checked` : "! No findings \u2014 but not everything was checked";
-    out.push(`${INDENT}${yellow(bold(headline))}`);
+    out.push(yellow(bold(opts.hiddenLikely > 0 ? `No certain findings \u2014 ${opts.hiddenLikely} lower-confidence ${plural(opts.hiddenLikely, "finding")} hidden, and not everything was checked.` : "No findings \u2014 but not everything was checked.")));
   } else if ((result.changeView?.hiddenFindings ?? 0) > 0) {
-    out.push(`${INDENT}${yellow(bold("! No visible findings in changed files \u2014 other findings still exist"))}`);
+    out.push(yellow(bold("No visible findings in changed files \u2014 other findings still exist.")));
   } else if (opts.hiddenLikely > 0) {
-    out.push(
-      `${INDENT}${yellow(bold(`! No certain findings \u2014 ${opts.hiddenLikely} lower-confidence ${plural(opts.hiddenLikely, "finding")} hidden`))}`
-    );
+    out.push(yellow(bold(`No certain findings \u2014 ${opts.hiddenLikely} lower-confidence ${plural(opts.hiddenLikely, "finding")} hidden.`)));
   } else if ((opts.baselineSuppressed ?? 0) > 0) {
     const suppressed = opts.baselineSuppressed ?? 0;
-    out.push(
-      `${INDENT}${yellow(bold(`! No new findings \u2014 ${suppressed} ${plural(suppressed, "finding")} accepted by the baseline`))}`
-    );
+    out.push(yellow(bold(`No new findings \u2014 ${suppressed} ${plural(suppressed, "finding")} accepted by the baseline.`)));
   } else {
-    out.push(`${INDENT}${green(bold("\u2713 No exposed credentials found"))}`);
+    out.push(green(bold("No exposed credentials found.")));
   }
+  out.push(...facts);
+  if (result.changeView) for (const line of wrapText(changeViewNotice(result.changeView), width)) out.push(yellow(line));
   out.push("");
-  out.push(...renderBaseline(opts));
-  if ((opts.baselineSuppressed ?? 0) > 0 || (opts.baselineStale ?? 0) > 0) out.push("");
-  out.push(`${INDENT}${dim("canship checked for:")}`);
-  out.push(`${INDENT}${dim("  \xB7 API keys hardcoded in source code")}`);
-  out.push(`${INDENT}${dim("  \xB7 Server-side secrets exposed to the browser via public env prefixes")}`);
-  out.push(`${INDENT}${dim("  \xB7 Supabase service_role keys reachable from the client")}`);
-  out.push(`${INDENT}${dim("  \xB7 .env files committed to git, including in history")}`);
-  out.push(`${INDENT}${dim("  \xB7 Supabase tables with no Row Level Security, or policies open to everyone")}`);
-  out.push(`${INDENT}${dim("  \xB7 Firebase rules left open to anyone")}`);
-  out.push(`${INDENT}${dim("  \xB7 API routes and server actions that query your database with no sign-in check")}`);
-  out.push(`${INDENT}${dim("  \xB7 CORS that lets other sites act as your signed-in visitors")}`);
+  const baseline = renderBaseline(opts);
+  if (baseline.length > 0) out.push(...baseline, "");
+  out.push(bold("Checked for"));
+  for (const item of [
+    "API keys hardcoded in source code",
+    "Server-side secrets exposed to the browser via public env prefixes",
+    "Supabase service_role keys reachable from the client",
+    ".env files committed to git, including in history",
+    "Supabase tables with no Row Level Security, or policies open to everyone",
+    "Firebase rules left open to anyone",
+    "API routes and server actions that query your database with no sign-in check",
+    "CORS that lets other sites act as your signed-in visitors",
+    "Request input in SQL, commands, outbound URLs, and redirects within supported handlers",
+    "Unverified Supabase sessions and Stripe webhook events"
+  ]) out.push(`${dim("  \xB7 ")}${item}`);
   out.push("");
-  out.push(`${INDENT}${dim("It does not check rate limiting, injection, or whether the checks it")}`);
-  out.push(`${INDENT}${dim("did find are the right ones.")}`);
+  out.push(dim("Input analysis is bounded and handler-local; business authorisation, rate limiting and dependency vulnerabilities are not verified."));
   if (opts.hiddenLikely > 0) {
-    out.push(`${INDENT}${dim("This is not a finding-free result. Review the hidden items with --all.")}`);
+    out.push(dim("This is not a finding-free result. Review the hidden items with --all."));
   } else if (result.ignoredFindings.length > 0) {
-    out.push(
-      `${INDENT}${dim("This is not a finding-free result \u2014 some were silenced in the source. See below.")}`
-    );
+    out.push(dim("This is not a finding-free result \u2014 some were silenced in the source. See below."));
   } else {
-    out.push(`${INDENT}${dim("A clean result means these checks passed \u2014 not that your app is secure.")}`);
-  }
-  if (result.partial) {
-    out.push("");
-    out.push(...renderIncomplete(result));
-  }
-  const optedOut = renderIgnored(result);
-  if (optedOut.length > 0) {
-    out.push("");
-    out.push(...optedOut);
+    out.push(dim("A clean result means these checks passed \u2014 not that your app is secure."));
   }
+  const notes = [...renderIncomplete(result, width), ...renderIgnored(result)];
   if (opts.hiddenLikely > 0) {
-    out.push("");
-    out.push(`${INDENT}${dim(`${opts.hiddenLikely} lower-confidence ${plural(opts.hiddenLikely, "finding")} hidden. Run with --all to see ${opts.hiddenLikely === 1 ? "it" : "them"}.`)}`);
+    notes.push(dim(`${opts.hiddenLikely} lower-confidence ${plural(opts.hiddenLikely, "finding")} hidden. Run with --all to see ${opts.hiddenLikely === 1 ? "it" : "them"}.`));
   }
+  if (notes.length > 0) out.push("", ...notes);
   out.push("");
+  out.push(dim("\u2500".repeat(width)));
   return out;
 }
 function renderIgnored(result) {
@@ -5746,47 +7339,38 @@ function renderIgnored(result) {
   if (result.ignored.length > 0) {
     const shown = result.ignored.slice(0, 3).join(", ");
     const more = result.ignored.length > 3 ? `, and ${result.ignored.length - 3} more` : "";
-    out.push(
-      `${INDENT}${dim(`${result.ignored.length} ${plural(result.ignored.length, "file")} excluded by canship-ignore-file: ${shown}${more}`)}`
-    );
+    out.push(dim(`${result.ignored.length} ${plural(result.ignored.length, "file")} excluded by canship-ignore-file: ${shown}${more}`));
   }
   if (result.ruleSelection !== null) {
     const { only, skip, removed } = result.ruleSelection;
     const which = only.length > 0 ? `only ${only.join(", ")}` : `everything except ${skip.join(", ")}`;
     const cost = removed > 0 ? `, hiding ${removed} ${plural(removed, "finding")}` : "";
-    out.push(`${INDENT}${dim(`Rule selection in force: ${which}${cost}`)}`);
+    out.push(dim(`Rule selection in force: ${which}${cost}`));
   }
   if (result.ignoredFindings.length > 0) {
     const n = result.ignoredFindings.length;
     const shown = result.ignoredFindings.slice(0, 3).map((f) => `${f.file}:${f.line} (${f.ruleId})`).join(", ");
     const more = n > 3 ? `, and ${n - 3} more` : "";
-    out.push(
-      `${INDENT}${dim(`${n} ${plural(n, "finding")} silenced by canship-ignore-next-line: ${shown}${more}`)}`
-    );
+    out.push(dim(`${n} ${plural(n, "finding")} silenced by canship-ignore-next-line: ${shown}${more}`));
   }
   if (result.vendored > 0) {
-    out.push(
-      `${INDENT}${dim(`${result.vendored} ${plural(result.vendored, "file")} skipped inside dependency directories (node_modules, vendor, Pods, .yarn, .pnpm-store)`)}`
-    );
+    out.push(dim(`${result.vendored} ${plural(result.vendored, "file")} skipped inside dependency directories (node_modules, vendor, Pods, .yarn, .pnpm-store)`));
   }
   return out;
 }
-function renderIncomplete(result) {
-  const out = [];
-  out.push(`${INDENT}${yellow(bold("Not everything was checked:"))}`);
-  if (result.filesScanned === 0) {
-    out.push(
-      `${INDENT}${INDENT}${dim("\xB7")} no files could be read at this path, so every file-based check was skipped`
-    );
-  }
+function renderIncomplete(result, width) {
+  if (!result.partial) return [];
+  const out = [yellow(bold("Not everything was checked"))];
+  const item = (text) => {
+    wrapText(text, width - 4).forEach((line, i) => out.push(`${i === 0 ? dim("  \xB7 ") : "    "}${line}`));
+  };
+  if (result.filesScanned === 0) item("no files could be read at this path, so every file-based check was skipped");
   for (const err of result.errors.slice(0, 5)) {
     const where = err.file ? ` on ${err.file}` : "";
     const verb = err.kind === "incomplete" ? "did not finish" : "failed";
-    out.push(`${INDENT}${INDENT}${dim("\xB7")} the ${err.ruleId} check ${verb}${where} \u2014 ${err.message}`);
-  }
-  if (result.errors.length > 5) {
-    out.push(`${INDENT}${INDENT}${dim(`\xB7 and ${result.errors.length - 5} more`)}`);
+    item(`the ${err.ruleId} check ${verb}${where} \u2014 ${err.message}`);
   }
+  if (result.errors.length > 5) out.push(dim(`  \xB7 and ${result.errors.length - 5} more`));
   const byReason = /* @__PURE__ */ new Map();
   for (const skip of result.skipped) {
     const list = byReason.get(skip.reason) ?? [];
@@ -5797,12 +7381,9 @@ function renderIncomplete(result) {
     const { noun, because } = SKIP_LABEL[reason];
     const shown = paths.slice(0, 3).join(", ");
     const more = paths.length > 3 ? `, and ${paths.length - 3} more` : "";
-    out.push(
-      `${INDENT}${INDENT}${dim("\xB7")} ${paths.length} ${plural(paths.length, noun)} ${because}: ${shown}${more}`
-    );
+    item(`${paths.length} ${plural(paths.length, noun)} ${because}: ${shown}${more}`);
   }
-  out.push("");
-  out.push(`${INDENT}${dim("Anything could be in what was skipped. Re-run once it is readable.")}`);
+  out.push(dim("Anything could be in what was skipped. Re-run once it is readable."));
   return out;
 }
 function wrapText(text, width) {
@@ -5937,11 +7518,12 @@ function renderFixPrompt(findings, ctx) {
 }
 
 // src/report/html.ts
+import { createHash as createHash3 } from "crypto";
 function esc(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
 function paragraphs(parts) {
-  return parts.map((p) => `<p>${esc(p.trim())}</p>`).join("");
+  return parts.map((p) => `<p>${linkify(esc(p.trim()))}</p>`).join("");
 }
 function linkify(html) {
   return html.replace(
@@ -5949,196 +7531,353 @@ function linkify(html) {
     (url) => `<a href="${url}" target="_blank" rel="noreferrer noopener">${url}</a>`
   );
 }
-function renderFinding2(f, index) {
-  const location = locationOf(f);
-  const cls = f.confidence === "certain" ? "certain" : "likely";
-  const fixList = f.fix.length > 0 ? `<h4>How to fix</h4><ol>${f.fix.map((s) => `<li>${linkify(esc(s))}</li>`).join("")}</ol>` : "";
-  const humanList = f.humanOnly && f.humanOnly.length > 0 ? `<div class="human"><h4>Only you can do this</h4><ul>${f.humanOnly.map((s) => `<li>${linkify(esc(s))}</li>`).join("")}</ul></div>` : "";
-  return `
-<article class="finding ${cls}">
-  <header>
-    <span class="num">${index}</span>
-    <h3>${esc(f.title)}</h3>
-  </header>
-  <div class="loc">${esc(location)}${f.confidence === "likely" ? ' <span class="tag">lower confidence</span>' : ""}</div>
-  ${f.excerpt ? `<pre><code>${esc(f.excerpt)}</code></pre>` : ""}
-  ${f.evidence?.length ? `<h4>Evidence (static relationships)</h4><ol>${f.evidence.map((step) => `<li><code>${esc(locationOf(step))}</code> \u2014 ${esc(step.description)}</li>`).join("")}</ol>${f.evidenceTruncated ? "<p>Additional dependency steps omitted.</p>" : ""}` : ""}
-  <div class="why">${linkify(paragraphs(f.why))}</div>
-  ${fixList}
-  ${humanList}
-</article>`;
+function jsonForScript(value) {
+  return JSON.stringify(value).replace(/</g, "\\u003c").replace(new RegExp(String.fromCharCode(8232), "g"), "\\u2028").replace(new RegExp(String.fromCharCode(8233), "g"), "\\u2029");
 }
+function displayTime(iso) {
+  const date = new Date(iso);
+  if (!iso || Number.isNaN(date.getTime())) return iso;
+  return `${date.toISOString().slice(0, 16).replace("T", " ")} UTC`;
+}
+var EVIDENCE_LABEL2 = {
+  operation: "operation",
+  import: "imports",
+  "admin-client": "admin client",
+  "auth-helper": "auth helper"
+};
+function renderFinding2(f, index) {
+  const category = categoryOf(f.ruleId);
+  const search = `${f.title} ${f.file ?? ""} ${f.ruleId}`.toLowerCase();
+  const trace = f.evidence?.length ? `<h3>Trace (static relationships)</h3><ol class="trace">${f.evidence.map((step) => `<li><span class="k">${EVIDENCE_LABEL2[step.kind]}</span><span class="v">${esc(locationOf(step))}</span><span class="note">${esc(step.description)}</span></li>`).join("")}</ol>${f.evidenceTruncated ? '<p class="faint">Additional dependency steps omitted.</p>' : ""}` : "";
+  const fix = f.fix.length > 0 ? `<h3>Fix</h3><ol class="steps">${f.fix.map((s) => `<li>${linkify(esc(s))}</li>`).join("")}</ol>` : "";
+  const hand = f.humanOnly?.length ? `<div class="hand"><b>By hand</b><ul>${f.humanOnly.map((s) => `<li>${linkify(esc(s))}</li>`).join("")}</ul></div>` : "";
+  return `<details class="f" data-i="${index}" data-sev="${f.severity}" data-cat="${esc(category)}" data-conf="${f.confidence}" data-file="${esc(f.file ?? "")}" data-text="${esc(search)}">
+<summary class="row"><span class="sev ${f.severity}">${f.severity}</span><span class="main"><span class="title">${esc(f.title)}</span>${f.confidence === "likely" ? '<span class="likely">likely</span>' : ""}<span class="loc"><span class="loc-line">${f.line !== null ? `line ${f.line}` : f.file ? "whole file" : "repository"}</span><span class="loc-full">${esc(locationOf(f))}</span></span></span><span class="cat">${esc(category)}</span></summary>
+<div class="body">
+<p class="rule">${esc(f.ruleId)}</p>
+${f.excerpt ? `<pre class="excerpt"><code>${esc(f.excerpt)}</code></pre>` : ""}
+<div class="why">${paragraphs(f.why)}</div>
+${trace}${fix}${hand}
+<p class="actions"><button type="button" class="link" data-copy="${index}">copy fix prompt</button></p>
+</div>
+</details>`;
+}
+var SCRIPT = `(function(){
+var d=document,b=d.body;b.classList.add('js');
+var data={};try{data=JSON.parse(d.getElementById('canship-data').textContent||'{}')}catch(e){}
+var rows=[].slice.call(d.querySelectorAll('details.f')),list=d.getElementById('list'),st={sev:null,cat:null,q:'',g:'file'};
+var SEV=['P0','P1','P2'],CAT=data.categories||[];
+function matches(r){return(!st.sev||r.dataset.sev===st.sev)&&(!st.cat||r.dataset.cat===st.cat)&&(!st.q||r.dataset.text.indexOf(st.q)>=0)}
+function keyOf(r){return st.g==='sev'?r.dataset.sev:st.g==='cat'?r.dataset.cat:r.dataset.file}
+function label(k){return st.g==='sev'?k+' \\u00b7 '+({P0:'critical',P1:'high',P2:'medium'})[k]:(k||'repository')}
+function render(){
+  if(!list)return;
+  var groups=[],index=new Map();
+  rows.forEach(function(r){var k=keyOf(r);if(!index.has(k)){index.set(k,groups.length);groups.push({k:k,rows:[]})}groups[index.get(k)].rows.push(r)});
+  if(st.g==='sev')groups.sort(function(a,c){return SEV.indexOf(a.k)-SEV.indexOf(c.k)});
+  if(st.g==='cat')groups.sort(function(a,c){return CAT.indexOf(a.k)-CAT.indexOf(c.k)});
+  list.textContent='';var shown=0;
+  groups.forEach(function(g){
+    var visible=g.rows.filter(matches);if(!visible.length)return;shown+=visible.length;
+    var h=d.createElement('div');h.className='group';var name=d.createElement('span');name.className='gk';name.textContent=label(g.k);
+    h.appendChild(name);h.appendChild(d.createTextNode(' \\u2014 '+visible.length));list.appendChild(h);
+    var box=d.createElement('div');box.className='ledger';visible.forEach(function(r){box.appendChild(r)});list.appendChild(box);
+  });
+  list.classList.toggle('by-file',st.g==='file');
+  var count=d.getElementById('count');if(count)count.textContent=shown===rows.length?rows.length+' findings':shown+' of '+rows.length+' findings';
+  var empty=d.getElementById('empty');if(empty)empty.hidden=shown>0;
+  [].forEach.call(d.querySelectorAll('[data-filter-sev]'),function(x){x.classList.toggle('on',(x.dataset.filterSev||null)===st.sev&&!st.cat)});
+  [].forEach.call(d.querySelectorAll('[data-group]'),function(x){x.classList.toggle('on',x.dataset.group===st.g)});
+  [].forEach.call(d.querySelectorAll('[data-mx-cat]'),function(x){x.classList.toggle('on',x.dataset.mxCat===st.cat&&x.dataset.mxSev===st.sev)});
+}
+[].forEach.call(d.querySelectorAll('[data-filter-sev]'),function(x){x.onclick=function(){st.sev=x.dataset.filterSev||null;st.cat=null;render()}});
+[].forEach.call(d.querySelectorAll('[data-group]'),function(x){x.onclick=function(){st.g=x.dataset.group;render()}});
+[].forEach.call(d.querySelectorAll('[data-mx-cat]'),function(x){x.onclick=function(){var same=st.cat===x.dataset.mxCat&&st.sev===x.dataset.mxSev;st.cat=same?null:x.dataset.mxCat;st.sev=same?null:x.dataset.mxSev;render()}});
+var q=d.getElementById('q');if(q)q.oninput=function(){st.q=q.value.toLowerCase();render()};
+var clear=d.getElementById('clear');if(clear)clear.onclick=function(){st.sev=null;st.cat=null;st.q='';if(q)q.value='';render()};
+function copy(text,btn){
+  function done(){var t=btn.textContent;btn.textContent='copied';setTimeout(function(){btn.textContent=t},1200)}
+  if(navigator.clipboard&&navigator.clipboard.writeText){navigator.clipboard.writeText(text).then(done,fallback)}else fallback();
+  function fallback(){var a=d.createElement('textarea');a.value=text;d.body.appendChild(a);a.select();try{d.execCommand('copy');done()}catch(e){}d.body.removeChild(a)}
+}
+[].forEach.call(d.querySelectorAll('[data-copy]'),function(x){x.onclick=function(e){e.preventDefault();var t=(data.prompts||{})[x.dataset.copy];if(t)copy(t,x)}});
+var store=null;try{store=window.localStorage}catch(e){}
+var prefix='canship:'+(data.key||'')+':';
+[].forEach.call(d.querySelectorAll('.manual input[type=checkbox]'),function(c){
+  try{c.checked=!!store&&store.getItem(prefix+c.dataset.step)==='1'}catch(e){}
+  c.closest('li').classList.toggle('done',c.checked);
+  c.onchange=function(){c.closest('li').classList.toggle('done',c.checked);try{if(store){if(c.checked)store.setItem(prefix+c.dataset.step,'1');else store.removeItem(prefix+c.dataset.step)}}catch(e){}};
+});
+var print=d.getElementById('print');if(print)print.onclick=function(){window.print()};
+window.addEventListener('beforeprint',function(){rows.forEach(function(r){r.open=true})});
+render();
+})();`;
+var SCRIPT_HASH = createHash3("sha256").update(SCRIPT, "utf8").digest("base64");
+var STYLE = `
+:root{color-scheme:light dark;
+  --paper:#fcfcfa;--ink:#1b1b18;--ink-2:#5c5b56;--ink-3:#8f8d86;--rule:#dddbd3;--rule-2:#bdbab0;--hover:#f3f2ed;
+  --p0:#b3261e;--p1:#946200;--p2:#5c5b56;--ok:#2f6b2f;
+  --serif:"Iowan Old Style","Palatino Linotype",Palatino,Georgia,serif;
+  --code:ui-monospace,"Cascadia Mono","SF Mono",Menlo,Consolas,monospace}
+@media (prefers-color-scheme:dark){:root{
+  --paper:#171715;--ink:#e9e7e0;--ink-2:#a8a69e;--ink-3:#77756e;--rule:#2e2d29;--rule-2:#4a4843;--hover:#1f1f1c;
+  --p0:#f2877f;--p1:#e0b050;--p2:#a8a69e;--ok:#8fcf8f}}
+*{box-sizing:border-box}
+body{margin:0;background:var(--paper);color:var(--ink);font:16px/1.6 var(--serif);font-variant-numeric:lining-nums tabular-nums}
+button,input{font:inherit;color:inherit;background:none;border:0;padding:0}
+a{color:inherit}
+.page{max-width:1040px;margin:0 auto;padding:28px 32px 80px}
+.P0{color:var(--p0)}.P1{color:var(--p1)}.P2{color:var(--p2)}
+.faint{color:var(--ink-3)}
+.mast{display:flex;justify-content:space-between;align-items:baseline;gap:16px;border-bottom:1px solid var(--ink);padding-bottom:8px;font-size:13.5px}
+.mast .root{overflow-wrap:anywhere}
+.mast .right{white-space:nowrap}
+.link{cursor:pointer;text-decoration:underline;text-decoration-color:var(--rule-2);text-underline-offset:3px;margin-left:16px;color:var(--ink-2)}
+.js-only{display:none}.js .js-only{display:inline}
+.verdict-block{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:40px;padding:36px 0 30px;border-bottom:1px solid var(--rule)}
+h1.verdict{font-weight:400;font-size:44px;line-height:1.08;margin:0 0 12px;letter-spacing:-.01em}
+h1.verdict .n{color:var(--p0)}
+h1.verdict.warn .n{color:var(--p1)}
+h1.verdict.clean{color:var(--ok)}
+.verdict-block p{margin:0 0 8px;max-width:58ch;color:var(--ink-2)}
+.facts{font-size:13.5px;display:grid;grid-template-columns:auto auto;gap:4px 18px;align-self:end;color:var(--ink-2);margin:0}
+.facts dt{color:var(--ink-3)}.facts dd{margin:0;text-align:right;color:var(--ink)}
+.notice{color:var(--ink-3);font-size:13.5px;max-width:78ch;margin:14px 0 0}
+h2{font-weight:400;font-size:22px;margin:0 0 12px}
+.section{padding:28px 0;border-bottom:1px solid var(--rule)}
+.section.last{border-bottom:0}
+.two{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1fr);gap:48px}
+table.matrix{border-collapse:collapse;width:100%}
+.matrix th,.matrix td{padding:7px 0;border-bottom:1px solid var(--rule);font-weight:400;text-align:right}
+.matrix th{font-size:13.5px;color:var(--ink-3)}
+.matrix th:first-child,.matrix td:first-child{text-align:left}
+.matrix td button{min-width:28px;text-align:right;cursor:pointer;border-bottom:1px solid transparent}
+.matrix td button:hover{border-bottom-color:currentColor}
+.matrix td button.on{border-bottom:2px solid currentColor}
+.matrix .zero{color:var(--rule-2)}
+.matrix tfoot td{border-bottom:0;color:var(--ink-2)}
+ol.manual{margin:0;padding:0;list-style:none}
+ol.manual li{display:grid;grid-template-columns:24px minmax(0,1fr);align-items:start;gap:8px;padding:6px 0;border-bottom:1px solid var(--rule);font-size:15px}
+ol.manual .num{color:var(--ink-3)}
+.js ol.manual .num{display:none}
+ol.manual input{display:none;margin:5px 0 0;accent-color:var(--ink)}
+.js ol.manual input{display:block}
+ol.manual li.done .t{color:var(--ink-3);text-decoration:line-through}
+ol.manual .src{font-size:13.5px;color:var(--ink-3);overflow-wrap:anywhere}
+.controls{display:none;flex-wrap:wrap;align-items:baseline;gap:6px 22px;margin:4px 0 10px;font-size:14px;color:var(--ink-2)}
+.js .controls{display:flex}
+.controls .lbl{color:var(--ink-3);margin-right:6px}
+.controls button{cursor:pointer;margin-right:10px;color:var(--ink-2)}
+.controls button.on{color:var(--ink);text-decoration:underline;text-underline-offset:4px;text-decoration-thickness:1.5px}
+.controls input{border-bottom:1px solid var(--rule-2);width:200px;padding:2px 0;outline:0}
+.controls input:focus{border-bottom-color:var(--ink)}
+.controls .clear{margin-left:auto}
+#count{color:var(--ink-3);font-size:13.5px;margin:0 0 4px}
+.head{display:grid;grid-template-columns:44px minmax(0,1fr) 130px;font-size:13.5px;color:var(--ink-3);padding:6px 0;border-bottom:1px solid var(--ink)}
+.group{padding:22px 0 6px;font-size:13.5px;color:var(--ink-3)}
+.group .gk{color:var(--ink);font-size:15.5px;overflow-wrap:anywhere}
+details.f{border-bottom:1px solid var(--rule)}
+summary.row{display:grid;grid-template-columns:44px minmax(0,1fr) 130px;align-items:start;padding:10px 0;cursor:pointer;list-style:none}
+summary.row::-webkit-details-marker{display:none}
+summary.row:hover{background:var(--hover)}
+summary.row:focus-visible{outline:2px solid var(--ink-2);outline-offset:2px}
+.sev{font-weight:600;font-size:14px;padding-left:4px}
+.main{min-width:0}
+.title{overflow-wrap:anywhere}
+.likely{font-size:13.5px;color:var(--ink-3);margin-left:8px}
+.loc{display:block;font-size:13.5px;color:var(--ink-2);overflow-wrap:anywhere}
+.loc-line{display:none}
+.by-file .loc-line{display:inline}.by-file .loc-full{display:none}
+.cat{font-size:13.5px;color:var(--ink-3)}
+.body{margin:0 0 22px 44px;max-width:740px}
+.body p{margin:0 0 12px;color:var(--ink-2)}
+.body .rule{font-size:13.5px;color:var(--ink-3)}
+.body h3{font-weight:400;font-style:italic;font-size:14px;color:var(--ink-3);margin:18px 0 6px}
+pre.excerpt{margin:0 0 14px;padding:8px 10px;background:var(--hover);overflow-x:auto}
+code{font-family:var(--code);font-size:12.5px}
+ol.trace{margin:0;padding:0;list-style:none;border-left:1px solid var(--rule-2)}
+ol.trace li{padding:3px 0 3px 14px;position:relative;font-size:14px}
+ol.trace li::before{content:"";position:absolute;left:-4px;top:12px;width:7px;height:7px;border-radius:50%;background:var(--paper);border:1px solid var(--rule-2)}
+ol.trace li:first-child::before{background:var(--p0);border-color:var(--p0)}
+ol.trace .k{color:var(--ink-3);display:inline-block;width:120px}
+ol.trace .v{overflow-wrap:anywhere}
+ol.trace .note{display:block;color:var(--ink-3);font-size:13.5px;margin-left:120px}
+ol.steps{margin:0;padding-left:20px}
+ol.steps li{margin-bottom:6px}
+.hand{margin-top:14px;padding-left:12px;border-left:2px solid var(--p1);font-size:15px}
+.hand ul{margin:4px 0 0;padding-left:18px}
+.actions{margin:14px 0 0;font-size:14px}
+.actions .link{margin-left:0}
+.incomplete{border-left:2px solid var(--p1);padding-left:14px}
+.incomplete ul{margin:0 0 8px;padding-left:18px}
+.notes p{margin:0 0 6px;color:var(--ink-2);font-size:14px}
+.checked ul{margin:0 0 12px;padding-left:18px;color:var(--ink-2)}
+.colophon{margin-top:36px;font-size:13.5px;color:var(--ink-3);max-width:78ch}
+@media (max-width:820px){.verdict-block,.two{grid-template-columns:1fr;gap:24px}h1.verdict{font-size:34px}
+  summary.row,.head{grid-template-columns:40px minmax(0,1fr)}.cat,.head .c{display:none}.body{margin-left:40px}}
+@media print{.controls,.link,#count{display:none!important}body{background:#fff;color:#000}.page{max-width:none;padding:0}}
+`;
 function renderHtml(result, opts) {
   const { findings } = result;
   const hiddenLikely = opts.hiddenLikely ?? 0;
   const baselineSuppressed = opts.baselineSuppressed ?? 0;
   const baselineStale = opts.baselineStale ?? 0;
-  const { blocking, minor, unsure } = verdictOf(findings);
-  const certain = result.changeView?.totalBlocking ?? blocking;
-  const verdict = findings.length === 0 ? result.filesScanned === 0 ? (
-    // 未扫描文件时不显示通过结论。
-    `<div class="verdict warn">No files were scanned &mdash; nothing was checked</div>`
-  ) : result.partial ? (
-    // 扫描不完整时不得显示正常通过。
-    hiddenLikely > 0 ? `<div class="verdict warn">No certain findings &mdash; ${hiddenLikely} lower-confidence ${plural(hiddenLikely, "finding")} hidden, and not everything was checked</div>` : `<div class="verdict warn">No findings &mdash; but not everything was checked</div>`
-  ) : (result.changeView?.hiddenFindings ?? 0) > 0 ? `<div class="verdict warn">No visible findings in changed files &mdash; other findings still exist</div>` : hiddenLikely > 0 ? `<div class="verdict warn">No certain findings &mdash; ${hiddenLikely} lower-confidence ${plural(hiddenLikely, "finding")} hidden</div>` : (
-    // 基线抑制结果时明确说明，避免误报为项目无问题。
-    baselineSuppressed > 0 ? `<div class="verdict warn">No new findings &mdash; ${baselineSuppressed} ${plural(baselineSuppressed, "finding")} accepted by the baseline</div>` : `<div class="verdict clean">No exposed credentials found</div>`
-  ) : certain > 0 ? `<div class="verdict bad">${certain} critical ${plural(certain, "issue")} &mdash; do not deploy</div>` : minor > 0 ? `<div class="verdict warn">${minor} ${plural(minor, "thing")} to fix &mdash; nothing exposed</div>` : `<div class="verdict warn">${unsure} possible ${plural(unsure, "issue")} to review</div>`;
-  const body = findings.length === 0 ? result.filesScanned === 0 ? (
-    // 零文件扫描不能显示已完成的检查清单。
-    `<div class="clean-note">
-           <p>canship found no files it could read at this path, so none of its checks ran.
-           <strong>This is not a clean result &mdash; it is an empty one.</strong></p>
-           <p>Most likely this is not the directory you meant to scan, or everything in it is
-           gitignored or build output that canship skips. If the project lives in a
-           subdirectory, point canship at it: <code>npx canship ./app</code>.</p>
-         </div>`
-  ) : (result.changeView?.hiddenFindings ?? 0) > 0 ? '<div class="clean-note">This view hides existing findings. Re-run without --changed-since for the full report.</div>' : hiddenLikely > 0 ? `<div class="clean-note">
-             <p><strong>This is not a finding-free result.</strong> The default report hides
-             ${hiddenLikely} lower-confidence ${plural(hiddenLikely, "finding")}.</p>
-             <p>Re-run with <code>--all --report</code> to include ${hiddenLikely === 1 ? "it" : "them"} in the report.</p>
-           </div>` : baselineSuppressed > 0 ? `<div class="clean-note">
-             <p><strong>This is not a finding-free result.</strong> A baseline is hiding
-             ${baselineSuppressed} ${plural(baselineSuppressed, "finding")}${opts.baselinePath ? ` (<code>${esc(opts.baselinePath)}</code>)` : ""}.</p>
-             <p>Those problems still exist. Re-run without <code>--baseline</code> to see ${baselineSuppressed === 1 ? "it" : "them"}.</p>
-           </div>` : `<div class="clean-note">
-           <p>canship checked for hardcoded API keys, server secrets exposed to the browser,
-            Supabase tables without Row Level Security or with policies open to everyone, open Firebase rules, API routes and server actions that reach
-            the database with no sign-in check, CORS that lets other sites use your visitors&rsquo;
-           sessions, and <code>.env</code> files committed to git.</p>
-           <p><strong>A clean result means those checks passed &mdash; not that your app is secure.</strong>
-           Rate limiting and injection are not covered, and neither is whether the authorisation
-           checks it did find are the right ones.</p>
-         </div>` : findings.map((f, i) => renderFinding2(f, i + 1)).join("\n");
-  const optedOut = result.ignored.length > 0 ? `<p class="opted-out">${result.ignored.length} ${plural(result.ignored.length, "file")} excluded by <code>canship-ignore-file</code>: ${result.ignored.map((f) => `<code>${esc(f)}</code>`).join(", ")}</p>` : "";
+  const { blocking: visibleBlocking, minor, unsure } = verdictOf(findings);
+  const blocking = result.changeView?.totalBlocking ?? visibleBlocking;
+  const steps = manualSteps(findings);
+  const rotations = steps.filter((step) => /^Rotate\b/.test(step.text)).length;
+  let verdict;
+  let explanation = "";
+  if (findings.length > 0) {
+    if (blocking > 0) {
+      verdict = `<h1 class="verdict bad"><span class="n">${blocking} blocking ${plural(blocking, "finding")}.</span><br>Do not deploy yet.</h1>`;
+      explanation = "Every certain P0 or P1 result below needs a code change." + (rotations > 0 ? ` ${rotations} exposed ${plural(rotations, "credential")} must also be rotated in ${rotations === 1 ? "its provider" : "their providers"}; a code change does not revoke ${rotations === 1 ? "it" : "them"}.` : "");
+    } else if (minor > 0) {
+      verdict = `<h1 class="verdict warn"><span class="n">${minor} ${plural(minor, "finding")} to fix.</span><br>Nothing blocking.</h1>`;
+      explanation = "No certain P0 or P1 result was found; the findings below are lower severity.";
+    } else {
+      verdict = `<h1 class="verdict warn"><span class="n">${unsure} ${plural(unsure, "finding")} to review.</span></h1>`;
+      explanation = "These are likely findings: the static evidence is not conclusive, so check each one.";
+    }
+  } else if (result.filesScanned === 0) {
+    verdict = '<h1 class="verdict warn">No files were scanned.<br>Nothing was checked.</h1>';
+    explanation = "canship found no files it could read at this path, so none of its checks ran. This is not a clean result \u2014 it is an empty one.";
+  } else if (result.partial) {
+    verdict = hiddenLikely > 0 ? `<h1 class="verdict warn">No certain findings \u2014 ${hiddenLikely} lower-confidence ${plural(hiddenLikely, "finding")} hidden, and not everything was checked.</h1>` : '<h1 class="verdict warn">No findings \u2014 but not everything was checked.</h1>';
+  } else if ((result.changeView?.hiddenFindings ?? 0) > 0) {
+    verdict = '<h1 class="verdict warn">No visible findings in changed files \u2014 other findings still exist.</h1>';
+    explanation = "This view hides existing findings. Re-run without --changed-since for the full report.";
+  } else if (hiddenLikely > 0) {
+    verdict = `<h1 class="verdict warn">No certain findings \u2014 ${hiddenLikely} lower-confidence ${plural(hiddenLikely, "finding")} hidden.</h1>`;
+    explanation = `This is not a finding-free result. Re-run with --all --report to include ${hiddenLikely === 1 ? "it" : "them"} in the report.`;
+  } else if (baselineSuppressed > 0) {
+    verdict = `<h1 class="verdict warn">No new findings \u2014 ${baselineSuppressed} ${plural(baselineSuppressed, "finding")} accepted by the baseline.</h1>`;
+    explanation = `This is not a finding-free result. Those problems still exist. Re-run without --baseline to see ${baselineSuppressed === 1 ? "it" : "them"}.`;
+  } else {
+    verdict = '<h1 class="verdict clean">No exposed credentials found.</h1>';
+  }
+  const facts = [
+    ["findings", String(findings.length)],
+    ...hiddenLikely > 0 ? [["likely hidden", String(hiddenLikely)]] : [],
+    ["files scanned", String(result.filesScanned)],
+    ["coverage", result.partial ? "incomplete" : "complete"],
+    ["duration", `${result.durationMs} ms`]
+  ].map(([k, v]) => `<dt>${k}</dt><dd>${esc(v)}</dd>`).join("");
+  const rows = categoryCounts(findings);
+  const totals = SEVERITIES.map((s) => findings.filter((f) => f.severity === s).length);
+  const matrix = `<table class="matrix"><thead><tr><th></th>${SEVERITIES.map((s) => `<th>${s}</th>`).join("")}<th>total</th></tr></thead><tbody>${rows.map((row) => `<tr><td>${row.category}</td>${SEVERITIES.map((s) => `<td>${row.counts[s] ? `<button type="button" class="${s}" data-mx-cat="${row.category}" data-mx-sev="${s}">${row.counts[s]}</button>` : '<span class="zero">\u2013</span>'}</td>`).join("")}<td>${row.total}</td></tr>`).join("")}</tbody><tfoot><tr><td>all</td>${totals.map((n) => `<td>${n}</td>`).join("")}<td>${findings.length}</td></tr></tfoot></table>`;
+  const manual = steps.length > 0 ? `<ol class="manual">${steps.map((step, i) => `<li><span class="num">${i + 1}</span><input type="checkbox" data-step="${i}" aria-label="done"><div><div class="t">${linkify(esc(step.text))}</div><div class="src">${esc(step.locations.join(", "))}</div></div></li>`).join("")}</ol>` : '<p class="faint">No manual steps for these findings.</p>';
+  const groups = groupByFile(findings);
+  let index = 0;
+  const prompts = {};
+  const allPrompt = renderFixPrompt(findings);
+  if (allPrompt) prompts["all"] = allPrompt;
+  const list = groups.map((group) => {
+    const items = group.findings.map((f) => {
+      index++;
+      const prompt = renderFixPrompt([f]);
+      if (prompt) prompts[String(index)] = prompt;
+      return renderFinding2(f, index);
+    }).join("\n");
+    return `<div class="group"><span class="gk">${esc(group.file ?? "repository")}</span> \u2014 ${group.findings.length}</div><div class="ledger">${items}</div>`;
+  }).join("\n");
+  const findingsSection = findings.length > 0 ? `
+<section class="section two">
+<div><h2>By category</h2>${matrix}</div>
+<div><h2>Manual steps</h2>${manual}</div>
+</section>
+<section class="section last">
+<h2>Findings</h2>
+<div class="controls">
+<span><span class="lbl">severity</span><button type="button" data-filter-sev="">all</button>${SEVERITIES.map((s) => `<button type="button" data-filter-sev="${s}">${s}</button>`).join("")}</span>
+<span><span class="lbl">group by</span><button type="button" data-group="file">file</button><button type="button" data-group="sev">severity</button><button type="button" data-group="cat">category</button></span>
+<input id="q" type="search" placeholder="filter by text or path" aria-label="Filter findings">
+<button type="button" class="clear" id="clear">clear filters</button>
+</div>
+<p id="count"></p>
+<div class="head"><span>sev</span><span>finding</span><span class="c">category</span></div>
+<div id="list" class="by-file">${list}</div>
+<p id="empty" class="faint" hidden>No findings match these filters.</p>
+</section>` : `
+<section class="section last checked">
+<h2>Checked for</h2>
+<ul>
+<li>API keys hardcoded in source code</li>
+<li>Server-side secrets exposed to the browser via public env prefixes</li>
+<li>Supabase service_role keys reachable from the client</li>
+<li><code>.env</code> files committed to git, including in history</li>
+<li>Supabase tables with no Row Level Security, or policies open to everyone</li>
+<li>Firebase rules left open to anyone</li>
+<li>API routes and server actions that query your database with no sign-in check</li>
+<li>CORS that lets other sites act as your signed-in visitors</li>
+<li>Request input in SQL, commands, outbound URLs, and redirects within supported handlers</li>
+<li>Unverified Supabase sessions and Stripe webhook events</li>
+</ul>
+<p><strong>No findings means no matches in the selected scope \u2014 not that your app is secure.</strong> Checks are bounded and syntax-based. Request-input analysis stays within supported handlers; business authorisation, rate limiting and dependency vulnerabilities are not verified. Rule selection and exclusions are disclosed below.</p>
+</section>`;
+  const incomplete = result.partial ? `
+<section class="section incomplete">
+<h2>Not everything was checked</h2>
+<ul>
+${result.filesScanned === 0 ? "<li>no files could be read at this path, so every file-based check was skipped</li>" : ""}
+${result.errors.map((e) => `<li>the <code>${esc(e.ruleId)}</code> check ${e.kind === "incomplete" ? "did not finish" : "failed"}${e.file ? ` on <code>${esc(e.file)}</code>` : ""} \u2014 ${esc(e.message)}</li>`).join("\n")}
+${result.skipped.map((s) => `<li><code>${esc(s.path)}</code> \u2014 ${esc(skipPhrase(s.reason))}${s.detail ? ` (${esc(s.detail)})` : ""}</li>`).join("\n")}
+</ul>
+<p>Anything could be in what was skipped. Re-run once it is readable.</p>
+</section>` : "";
   const selection = result.ruleSelection;
-  const ruleSelection = selection === null ? "" : `<p class="opted-out">Rule selection in force: ${selection.only.length > 0 ? `only <code>${selection.only.map(esc).join("</code>, <code>")}</code>` : `everything except <code>${selection.skip.map(esc).join("</code>, <code>")}</code>`}${selection.removed > 0 ? `, hiding ${selection.removed} ${plural(selection.removed, "finding")}` : ""}.</p>`;
-  const silenced = result.ignoredFindings.length > 0 ? `<p class="opted-out">${result.ignoredFindings.length} ${plural(result.ignoredFindings.length, "finding")} silenced by <code>canship-ignore-next-line</code>: ${result.ignoredFindings.map((f) => `<code>${esc(f.file)}:${f.line}</code> (${esc(f.ruleId)})`).join(", ")}</p>` : "";
-  const hiddenNotice = hiddenLikely > 0 && findings.length > 0 ? `<p class="opted-out">${hiddenLikely} lower-confidence ${plural(hiddenLikely, "finding")} hidden. Re-run with <code>--all --report</code> to include ${hiddenLikely === 1 ? "it" : "them"}.</p>` : "";
-  const baselineNotice = baselineSuppressed > 0 && findings.length > 0 ? `<p class="opted-out">${baselineSuppressed} ${plural(baselineSuppressed, "finding")} hidden by the baseline${opts.baselinePath ? ` (<code>${esc(opts.baselinePath)}</code>)` : ""}. Those problems still exist.</p>` : "";
-  const staleNotice = baselineStale > 0 ? `<p class="opted-out">${baselineStale} baseline ${baselineStale === 1 ? "entry" : "entries"} no longer ${baselineStale === 1 ? "matches" : "match"} anything &mdash; re-run <code>--baseline-write</code> to prune.</p>` : "";
-  const incomplete = result.partial ? `<div class="incomplete">
-         <h2>Not everything was checked</h2>
-         <ul>
-           ${// 工作区零文件时仍可能产生 Git 历史结果。
-  result.filesScanned === 0 ? `<li>no files could be read at this path, so every file-based check was skipped</li>` : ""}
-           ${result.errors.map(
-    (e) => `<li>the <code>${esc(e.ruleId)}</code> check ${e.kind === "incomplete" ? "did not finish" : "failed"}${e.file ? ` on <code>${esc(e.file)}</code>` : ""} &mdash; ${esc(e.message)}</li>`
-  ).join("\n           ")}
-           ${result.skipped.map((s) => `<li><code>${esc(s.path)}</code> &mdash; ${esc(skipPhrase(s.reason))}${s.detail ? ` (${esc(s.detail)})` : ""}</li>`).join("\n           ")}
-         </ul>
-         <p>Anything could be in what was skipped. Re-run once it is readable.</p>
-       </div>` : "";
+  const notes = [
+    hiddenLikely > 0 && findings.length > 0 ? `${hiddenLikely} lower-confidence ${plural(hiddenLikely, "finding")} hidden. Re-run with <code>--all --report</code> to include ${hiddenLikely === 1 ? "it" : "them"}.` : "",
+    baselineSuppressed > 0 ? `${baselineSuppressed} ${plural(baselineSuppressed, "finding")} hidden by the baseline${opts.baselinePath ? ` (<code>${esc(opts.baselinePath)}</code>)` : ""}. Those problems still exist.` : "",
+    baselineStale > 0 ? `${baselineStale} baseline ${baselineStale === 1 ? "entry" : "entries"} no longer ${baselineStale === 1 ? "matches" : "match"} anything \u2014 re-run <code>--baseline-write</code> to prune.` : "",
+    result.ignoredFindings.length > 0 ? `${result.ignoredFindings.length} ${plural(result.ignoredFindings.length, "finding")} silenced by <code>canship-ignore-next-line</code>: ${result.ignoredFindings.map((f) => `<code>${esc(f.file)}:${f.line}</code> (${esc(f.ruleId)})`).join(", ")}` : "",
+    selection === null ? "" : `Rule selection in force: ${selection.only.length > 0 ? `only <code>${selection.only.map(esc).join("</code>, <code>")}</code>` : `everything except <code>${selection.skip.map(esc).join("</code>, <code>")}</code>`}${selection.removed > 0 ? `, hiding ${selection.removed} ${plural(selection.removed, "finding")}` : ""}.`,
+    result.ignored.length > 0 ? `${result.ignored.length} ${plural(result.ignored.length, "file")} excluded by <code>canship-ignore-file</code>: ${result.ignored.map((f) => `<code>${esc(f)}</code>`).join(", ")}` : "",
+    result.vendored > 0 ? `${result.vendored} ${plural(result.vendored, "file")} skipped inside dependency directories.` : ""
+  ].filter(Boolean);
+  const data = {
+    key: createHash3("sha256").update(`${opts.root}\0${opts.generatedAt}`).digest("hex").slice(0, 16),
+    categories: CATEGORIES,
+    prompts
+  };
   return `<!doctype html>
 <html lang="en">
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
+<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; script-src 'sha256-${SCRIPT_HASH}'; base-uri 'none'; form-action 'none'">
+<meta name="referrer" content="no-referrer">
 <title>canship report</title>
-<style>
-  :root {
-    --bg: #ffffff; --fg: #1a1a1a; --muted: #666; --line: #e3e3e3;
-    --card: #fafafa; --bad: #c0392b; --warn: #b8860b; --good: #1e7e34;
-    --code-bg: #f4f4f4; --human-bg: #fff8e6; --human-line: #e6c35c;
-  }
-  @media (prefers-color-scheme: dark) {
-    :root {
-      --bg: #16181c; --fg: #e6e6e6; --muted: #9aa0a6; --line: #2c3036;
-      --card: #1c1f24; --bad: #ff6b5e; --warn: #e8b339; --good: #4ade80;
-      --code-bg: #22262c; --human-bg: #2a2418; --human-line: #6b5a2a;
-    }
-  }
-  * { box-sizing: border-box; }
-  body {
-    margin: 0; padding: 2rem 1rem 4rem; background: var(--bg); color: var(--fg);
-    font: 16px/1.6 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
-  }
-  main { max-width: 46rem; margin: 0 auto; }
-  h1 { font-size: 1.4rem; margin: 0 0 .25rem; }
-  .meta { color: var(--muted); font-size: .85rem; margin-bottom: 1.5rem; word-break: break-all; }
-  .verdict { font-weight: 600; padding: .75rem 1rem; border-radius: 6px; margin-bottom: 1.5rem; }
-  .verdict.bad { background: var(--bad); color: #fff; }
-  .verdict.warn { background: var(--warn); color: #000; }
-  .verdict.clean { background: var(--good); color: #fff; }
-  .notice {
-    border: 1px solid var(--line); border-left: 3px solid var(--muted);
-    padding: .75rem 1rem; margin-bottom: 2rem; font-size: .85rem; color: var(--muted);
-  }
-  .finding {
-    border: 1px solid var(--line); border-radius: 6px; background: var(--card);
-    padding: 1.25rem; margin-bottom: 1.25rem;
-  }
-  .finding.certain { border-left: 3px solid var(--bad); }
-  .finding.likely { border-left: 3px solid var(--warn); }
-  .finding header { display: flex; gap: .6rem; align-items: baseline; }
-  .num { color: var(--muted); font-variant-numeric: tabular-nums; font-size: .9rem; }
-  .finding h3 { font-size: 1.05rem; margin: 0 0 .35rem; }
-  .loc { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: .82rem; color: var(--muted); margin-bottom: .75rem; word-break: break-all; }
-  .tag { background: var(--warn); color: #000; padding: 0 .35rem; border-radius: 3px; font-size: .72rem; }
-  pre {
-    background: var(--code-bg); padding: .7rem .9rem; border-radius: 4px;
-    overflow-x: auto; font-size: .82rem; margin: 0 0 .9rem;
-  }
-  code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
-  .why p { margin: 0 0 .7rem; }
-  h4 { font-size: .82rem; text-transform: uppercase; letter-spacing: .04em; color: var(--muted); margin: 1.1rem 0 .4rem; }
-  ol, ul { margin: 0; padding-left: 1.3rem; }
-  li { margin-bottom: .45rem; }
-  .human {
-    background: var(--human-bg); border-left: 3px solid var(--human-line);
-    padding: .1rem 1rem .8rem; margin-top: 1rem; border-radius: 0 4px 4px 0;
-  }
-  .human h4 { color: var(--fg); }
-  .opted-out { color: var(--muted); font-size: .85rem; margin-top: 1.5rem; }
-  .clean-note { border: 1px solid var(--line); border-radius: 6px; padding: 1.25rem; }
-  .incomplete { border: 1px solid var(--warn); border-radius: 6px; padding: 1rem 1.25rem; margin-top: 1.5rem; }
-  .incomplete h2 { font-size: 1rem; margin: 0 0 .5rem; }
-  .incomplete ul { margin: 0 0 .75rem; padding-left: 1.25rem; }
-  .incomplete li { margin-bottom: .25rem; }
-  .incomplete p:last-child { margin-bottom: 0; }
-  .clean-note p:last-child { margin-bottom: 0; }
-  footer { margin-top: 2.5rem; padding-top: 1.25rem; border-top: 1px solid var(--line); color: var(--muted); font-size: .82rem; }
-  a { color: inherit; }
-</style>
+<style>${STYLE}</style>
 </head>
 <body>
-<main>
-  <h1>canship report</h1>
-  <div class="meta">${esc(opts.root)}<br>${esc(opts.generatedAt)} &middot; ${result.filesScanned} ${plural(result.filesScanned, "file")} scanned in ${result.durationMs}ms</div>
-  ${verdict}
-  ${result.changeView ? `<p class="opted-out">${esc(changeViewNotice(result.changeView))}</p>` : ""}
-  <div class="notice">
-    Credential values canship recognises are masked in this report. One in a format it has no
-    pattern for can still appear inside a quoted line, and this report lists your
-    file paths and project structure either way &mdash; so treat it as internal,
-    shareable with your team rather than something to post publicly.
-  </div>
-  ${body}
-  ${incomplete}
-  ${hiddenNotice}
-  ${baselineNotice}
-  ${staleNotice}
-  ${silenced}
-  ${ruleSelection}
-  ${optedOut}
-  <footer>
-    Generated by canship. Everything ran locally; nothing was uploaded.
-  </footer>
-</main>
+<div class="page">
+<header class="mast"><span class="root"><b>canship</b>${opts.version ? ` ${esc(opts.version)}` : ""} \xB7 ${esc(opts.root)}</span><span class="right">${esc(displayTime(opts.generatedAt))}${allPrompt ? '<button type="button" class="link js-only" data-copy="all">copy fix prompt</button>' : ""}<button type="button" class="link js-only" id="print">print</button></span></header>
+<section class="verdict-block">
+<div>${verdict}${explanation ? `<p>${esc(explanation)}</p>` : ""}${result.changeView ? `<p>${esc(changeViewNotice(result.changeView))}</p>` : ""}
+<p class="notice">Credential values canship recognises are masked in this report. One in a format it has no pattern for can still appear inside a quoted line, and this report lists your file paths and project structure either way \u2014 so treat it as internal, shareable with your team rather than something to post publicly.</p></div>
+<dl class="facts">${facts}</dl>
+</section>
+${findingsSection}
+${incomplete}
+${notes.length > 0 ? `<section class="section last notes">${notes.map((n) => `<p>${n}</p>`).join("")}</section>` : ""}
+<p class="colophon">Generated by canship. Everything ran locally; nothing was uploaded. Findings describe static evidence in this repository; they do not verify deployed configuration, credential validity or business authorisation.</p>
+</div>
+<script type="application/json" id="canship-data">${jsonForScript(data)}</script>
+<script>${SCRIPT}</script>
 </body>
 </html>
 `;
 }
 
 // src/baseline.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 import { readFileSync as readFileSync3, statSync as statSync3, writeFileSync } from "fs";
 var BASELINE_VERSION = 2;
 var DEFAULT_BASELINE_PATH = "canship-baseline.json";
 function fingerprintOf(f) {
   const identity = [f.ruleId, f.file ?? "", f.title, f.sourceFingerprint ?? f.excerpt ?? ""].join("\0");
-  return createHash3("sha256").update(identity, "utf8").digest("hex");
+  return createHash4("sha256").update(identity, "utf8").digest("hex");
 }
 function buildBaseline(findings, now = /* @__PURE__ */ new Date()) {
   const byFingerprint = /* @__PURE__ */ new Map();
@@ -6519,6 +8258,14 @@ var RULE_CATALOG = [
     "Server routes and Next.js Server Functions in Next.js, SvelteKit (endpoints and form actions), Nuxt, Remix/React Router, and Astro.",
     "Session-scoped clients and indirect guards may need manual review."
   ),
+  rule(
+    "auth/unverified-session",
+    "Server code trusting supabase.auth.getSession()",
+    "P1",
+    "varies",
+    "Server routes, Server Functions, middleware and proxy modules, Next.js server components, *.server modules, and server directories that call supabase.auth.getSession(): a result used in a condition is certain; reading its user is reported for review. Exemption requires a checked, awaited identity from the same client before trusted session use.",
+    "Only the receiving variable in the same function is followed; results passed to helpers are not tracked."
+  ),
   rule(
     "cors/reflected-origin-with-credentials",
     "Reflected origin with credentials",
@@ -6591,6 +8338,30 @@ var RULE_CATALOG = [
     "Tracked environment files; templates and public-only values are treated separately.",
     "Unrecognized private values are heuristic findings, not verified credentials."
   ),
+  rule(
+    "injection/command",
+    "Shell command built from request input",
+    "P1",
+    "varies",
+    "exec, execSync, and spawn/execFile with shell: true in supported server handlers. Execa command strings are checked for a caller-chosen executable, or shell interpolation when shell is enabled. Direct request input is certain; values passing through other calls or content checks require review.",
+    "Only flows inside one function are followed; values passed to helpers, other files, or validated elsewhere are not tracked."
+  ),
+  rule(
+    "injection/sql",
+    "SQL query built from request input",
+    "P1",
+    "varies",
+    "Untagged template or string concatenation in Prisma $queryRawUnsafe/$executeRawUnsafe, Prisma.raw, sql.raw/sql.unsafe, knex *Raw methods, driver query/execute calls, and query-builder where clauses, in server routes and Next.js Server Functions. Tagged templates and placeholders are not reported.",
+    "Only flows inside one function are followed; values passed to helpers, other files, or validated elsewhere are not tracked. Driver calls are reported only when the text looks like SQL."
+  ),
+  rule(
+    "redirect/open",
+    "Redirect to an address taken from the request",
+    "P2",
+    "varies",
+    "redirect, permanentRedirect, NextResponse.redirect, Response.redirect, res.redirect, and sendRedirect in server routes and Next.js Server Functions, when request input decides the start of the target (a whole value, a leading /, or the host). Request input used directly is certain; values that pass through other calls or checks require review.",
+    "Only flows inside one function are followed. The request's own URL and fixed paths followed by input are not reported; helper-built targets are not tracked."
+  ),
   rule(
     "supabase/permissive-policy",
     "Row Level Security policy with an always-true condition",
@@ -6607,6 +8378,14 @@ var RULE_CATALOG = [
     "Public buckets declared in migrations or supabase/config.toml, paired with a SELECT policy on storage.objects that is always true or filters only by that bucket.",
     "Buckets created from the dashboard or at runtime are not visible; restrictive policies may limit listing and lower confidence."
   ),
+  rule(
+    "ssrf/request-url",
+    "Server request to an address the caller chooses",
+    "P1",
+    "likely",
+    "fetch, $fetch/ofetch, axios, got, ky, needle, and Node http(s) calls in server routes and Next.js Server Functions, when request input decides the scheme or host of the address.",
+    "Only flows inside one function are followed. Fetching caller-supplied URLs can be intended, and allowlists or network controls are not verified."
+  ),
   rule(
     "supabase/rls-not-enabled",
     "Table without RLS in migrations",
@@ -6615,6 +8394,14 @@ var RULE_CATALOG = [
     "Supabase SQL migrations, replayed by application scope.",
     "Migration state is not deployed database state; grants and policy correctness are outside this check."
   ),
+  rule(
+    "webhook/unverified-signature",
+    "Stripe webhook events handled without signature verification",
+    "P1",
+    "varies",
+    "Server routes that branch on Stripe event types without an enforced constructEvent or awaited event-retrieval result for the handled value. Request-body handling is certain; custom signature checks remain likely.",
+    "Only Stripe is recognized. Unused calls do not verify events; custom HMAC and shared-helper verification require review."
+  ),
   ...SECRET_PATTERNS.map((pattern) => ({
     ...rule(
       `secrets/hardcoded/${pattern.id}`,
@@ -6683,8 +8470,94 @@ function changedFileView(result, changed) {
   } };
 }
 
+// src/open.ts
+import { spawn } from "child_process";
+import { accessSync as accessSync2, constants as constants2, realpathSync as realpathSync3, statSync as statSync5 } from "fs";
+import { dirname as dirname2, posix as posix2, win32 } from "path";
+var UNIX_SYSTEM_DIRS = ["/usr/bin", "/bin", "/usr/local/bin", "/usr/sbin", "/sbin", "/usr/local/sbin"];
+function pathValue(env) {
+  return Object.entries(env).find(([key]) => key.toLowerCase() === "path")?.[1] ?? "";
+}
+function unixBoundary(env, cwd, options) {
+  const canonical2 = (path) => {
+    try {
+      const real = (options.realpath ?? realpathSync3)(path);
+      return posix2.isAbsolute(real) ? posix2.normalize(real) : null;
+    } catch {
+      return null;
+    }
+  };
+  const named = [cwd, options.root ?? cwd, env.INIT_CWD, env.npm_config_local_prefix].filter((path) => !!path && posix2.isAbsolute(path)).map((path) => posix2.normalize(path));
+  const resolved = named.map(canonical2);
+  if (!canonical2(cwd) || !canonical2(options.root ?? cwd)) return () => false;
+  const roots = [...named, ...resolved.filter((p) => p !== null)];
+  const outside = (path) => !/(?:^|\/)node_modules(?:\/|$)/.test(path) && roots.every((root) => {
+    const rel = posix2.relative(root, path);
+    return rel === ".." || rel.startsWith("../") || posix2.isAbsolute(rel);
+  });
+  return (path) => {
+    if (!posix2.isAbsolute(path) || path.includes("\0")) return false;
+    const real = canonical2(path);
+    return real !== null && outside(posix2.normalize(path)) && outside(real);
+  };
+}
+function trustedUnixPath(env, cwd, options = {}) {
+  const trusted = unixBoundary(env, cwd, options);
+  return [...new Set([...UNIX_SYSTEM_DIRS, ...pathValue(env).split(":")].filter(trusted).map((dir) => posix2.normalize(dir).replace(/(.)\/$/, "$1")))];
+}
+function executable(path) {
+  try {
+    accessSync2(path, constants2.X_OK);
+    return statSync5(path).isFile();
+  } catch {
+    return false;
+  }
+}
+function openerFor(platform, path, env = process.env, options = {}) {
+  if (platform === "win32") {
+    const root = Object.entries(env).find(([key]) => key.toLowerCase() === "systemroot")?.[1];
+    if (!root || !/^[a-z]:[\\/]/i.test(root) || root.includes("\0")) throw new Error("Windows system directory is unavailable");
+    return { command: win32.join(root, "explorer.exe"), args: [path] };
+  }
+  if (platform === "darwin") return { command: "/usr/bin/open", args: [path] };
+  const exists = options.exists ?? executable;
+  const cwd = options.cwd ?? process.cwd();
+  const trusted = unixBoundary(env, cwd, options);
+  for (const dir of trustedUnixPath(env, cwd, options)) {
+    const candidate = posix2.join(dir, "xdg-open");
+    if (trusted(candidate) && exists(candidate)) return { command: candidate, args: [path] };
+  }
+  throw new Error("xdg-open was not found in system directories or PATH outside the project");
+}
+function openerEnvironment(platform, command, env, cwd = process.cwd(), options = {}) {
+  const clean2 = { ...env };
+  for (const key of Object.keys(clean2)) if (key.toLowerCase() === "path") delete clean2[key];
+  clean2.PATH = platform === "win32" ? `${win32.dirname(command)};${win32.join(win32.dirname(command), "System32")}` : trustedUnixPath(env, cwd, options).join(":");
+  return clean2;
+}
+function canOpen(env, interactive) {
+  return interactive && !env["CI"];
+}
+function openReport(path, onError, options = {}) {
+  try {
+    const { command, args } = openerFor(process.platform, path, process.env, options);
+    const child = spawn(command, args, {
+      detached: true,
+      stdio: "ignore",
+      windowsHide: true,
+      shell: false,
+      cwd: dirname2(command),
+      env: openerEnvironment(process.platform, command, process.env, options.cwd, options)
+    });
+    child.on("error", (err) => onError(`could not open the report with ${command}: ${err.message}`));
+    child.unref();
+  } catch (err) {
+    onError(`could not open the report: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+
 // src/cli.ts
-var VERSION = true ? "0.5.0" : "0.0.0-dev";
+var VERSION = true ? "0.6.0" : "0.0.0-dev";
 function finish(code) {
   process.exitCode = code;
 }
@@ -6715,7 +8588,7 @@ function realPathOf(path) {
   const rest = [];
   for (let depth = 0; depth < MAX_REAL_PATH_DEPTH; depth++) {
     try {
-      const real = realpathSync3(at);
+      const real = realpathSync4(at);
       return rest.length === 0 ? real : resolve2(real, ...rest);
     } catch {
       const parent = resolve2(at, "..");
@@ -6754,7 +8627,9 @@ function parseArgs(argv) {
     version: false,
     listRules: false,
     noExcerpts: false,
-    changedSince: null
+    changedSince: null,
+    verbose: false,
+    open: false
   };
   const positional = [];
   for (const arg of argv) {
@@ -6833,6 +8708,12 @@ function parseArgs(argv) {
       case "--no-excerpts":
         args.noExcerpts = true;
         break;
+      case "--verbose":
+        args.verbose = true;
+        break;
+      case "--open":
+        args.open = true;
+        break;
       case "--help":
       case "-h":
         args.help = true;
@@ -6862,8 +8743,11 @@ var HELP = `
 
   ${bold("Options")}
     -a, --all         Show likely findings
+        --verbose     Show each finding's excerpt, explanation, trace and fix steps
         --fix-prompt  Output instructions to paste into a coding assistant
         --report[=F]  Write a self-contained HTML report (default canship-report.html)
+        --open        With --report, open the report in the default browser
+                      (skipped in CI and non-interactive shells)
         --json        Output raw JSON (for CI or tooling)
         --best-effort Allow exit 0 for an incomplete scan with no findings;
                       findings still exit 1 or 2
@@ -6925,11 +8809,12 @@ async function main() {
   if ((args.baseline !== null || args.baselineDefault) && (args.baselineWrite !== null || args.baselineWriteDefault)) {
     argumentError("--baseline and --baseline-write are mutually exclusive");
   }
-  if (!existsSync3(args.root) || !statSync5(args.root).isDirectory()) {
+  if (!existsSync3(args.root) || !statSync6(args.root).isDirectory()) {
     process.stderr.write(`${red("canship:")} not a directory: ${cleanForOutput(args.root)}
 `);
     return finish(3);
   }
+  if (args.open && args.report === null) argumentError("--open requires --report");
   if (args.changedSince !== null && (args.baselineWrite !== null || args.baselineWriteDefault)) {
     argumentError("--changed-since cannot be combined with --baseline-write");
   }
@@ -7030,6 +8915,7 @@ ${cleanForOutput(String(err))}
   if (changed) result = changedFileView(result, changed);
   const shown = showAll ? result.findings : result.findings.filter((f) => f.confidence === "certain");
   const hiddenLikely = showAll ? 0 : result.findings.filter((f) => f.confidence === "likely").length;
+  const exitCode = verdictOf(fullResult.findings).blocking > 0 ? 1 : fullResult.findings.length > 0 ? 2 : result.partial && !bestEffort ? 3 : 0;
   if (args.fixPrompt) {
     const prompt = renderFixPrompt(shown, {
       ...result.changeView ? { changeView: result.changeView } : {},
@@ -7071,7 +8957,10 @@ ${cleanForOutput(String(err))}
           hiddenLikely,
           baselineSuppressed,
           baselineStale,
-          baselinePath: baselinePath === null ? null : cleanForOutput(baselinePath)
+          baselinePath: baselinePath === null ? null : cleanForOutput(baselinePath),
+          verbose: args.verbose,
+          version: VERSION,
+          exitCode
         }
       )}
 `
@@ -7094,8 +8983,7 @@ ${cleanForOutput(String(err))}
         "utf8"
       );
       if (!args.json && !args.fixPrompt) {
-        process.stdout.write(`  ${dim("SARIF written to")} ${cyan(cleanForOutput(target))}
-
+        process.stdout.write(`SARIF written to ${cleanForOutput(target)}
 `);
       }
     } catch (err) {
@@ -7117,6 +9005,7 @@ ${cleanForOutput(String(err))}
           {
             root: displayRoot,
             generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            version: VERSION,
             hiddenLikely,
             baselineSuppressed,
             baselineStale,
@@ -7126,10 +9015,17 @@ ${cleanForOutput(String(err))}
         "utf8"
       );
       if (!args.json && !args.fixPrompt) {
-        process.stdout.write(`  ${dim("Report written to")} ${cyan(cleanForOutput(target))}
-
+        process.stdout.write(`Report written to ${cleanForOutput(target)}
 `);
       }
+      if (args.open) {
+        if (canOpen(process.env, process.stdout.isTTY === true)) {
+          openReport(target, (message) => process.stderr.write(`canship: ${cleanForOutput(message)}
+`), { root: args.root });
+        } else {
+          process.stderr.write("canship: not opening the report in CI or a non-interactive session\n");
+        }
+      }
     } catch (err) {
       process.stderr.write(
         `${red("canship:")} could not write report to ${cleanForOutput(target)}
@@ -7139,10 +9035,7 @@ ${cleanForOutput(String(err))}
       return finish(3);
     }
   }
-  if (verdictOf(fullResult.findings).blocking > 0) return finish(1);
-  if (fullResult.findings.length > 0) return finish(2);
-  if (result.partial && !bestEffort) return finish(3);
-  return finish(0);
+  return finish(exitCode);
 }
 main().catch((err) => {
   if (err instanceof ArgumentError || err instanceof ChangeViewError) process.stderr.write(`canship: ${err.message}