chainwall 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (348) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +278 -0
  3. package/commands/security-scan.md +35 -0
  4. package/dist/auditor/access-mapper.d.ts +3 -0
  5. package/dist/auditor/access-mapper.d.ts.map +1 -0
  6. package/dist/auditor/access-mapper.js +15 -0
  7. package/dist/auditor/access-mapper.js.map +1 -0
  8. package/dist/auditor/cli-detector.d.ts +7 -0
  9. package/dist/auditor/cli-detector.d.ts.map +1 -0
  10. package/dist/auditor/cli-detector.js +63 -0
  11. package/dist/auditor/cli-detector.js.map +1 -0
  12. package/dist/auditor/cross-reference.d.ts +4 -0
  13. package/dist/auditor/cross-reference.d.ts.map +1 -0
  14. package/dist/auditor/cross-reference.js +16 -0
  15. package/dist/auditor/cross-reference.js.map +1 -0
  16. package/dist/auditor/env-auditor.d.ts +9 -0
  17. package/dist/auditor/env-auditor.d.ts.map +1 -0
  18. package/dist/auditor/env-auditor.js +83 -0
  19. package/dist/auditor/env-auditor.js.map +1 -0
  20. package/dist/auditor/mcp-analyzer.d.ts +11 -0
  21. package/dist/auditor/mcp-analyzer.d.ts.map +1 -0
  22. package/dist/auditor/mcp-analyzer.js +145 -0
  23. package/dist/auditor/mcp-analyzer.js.map +1 -0
  24. package/dist/auditor/mcp-detector.d.ts +17 -0
  25. package/dist/auditor/mcp-detector.d.ts.map +1 -0
  26. package/dist/auditor/mcp-detector.js +86 -0
  27. package/dist/auditor/mcp-detector.js.map +1 -0
  28. package/dist/auditor/remediation.d.ts +26 -0
  29. package/dist/auditor/remediation.d.ts.map +1 -0
  30. package/dist/auditor/remediation.js +222 -0
  31. package/dist/auditor/remediation.js.map +1 -0
  32. package/dist/auditor/tool-detector.d.ts +15 -0
  33. package/dist/auditor/tool-detector.d.ts.map +1 -0
  34. package/dist/auditor/tool-detector.js +241 -0
  35. package/dist/auditor/tool-detector.js.map +1 -0
  36. package/dist/auditor/types.d.ts +31 -0
  37. package/dist/auditor/types.d.ts.map +1 -0
  38. package/dist/auditor/types.js +2 -0
  39. package/dist/auditor/types.js.map +1 -0
  40. package/dist/auditor/vscode-extension-scanner.d.ts +8 -0
  41. package/dist/auditor/vscode-extension-scanner.d.ts.map +1 -0
  42. package/dist/auditor/vscode-extension-scanner.js +51 -0
  43. package/dist/auditor/vscode-extension-scanner.js.map +1 -0
  44. package/dist/cli.d.ts +3 -0
  45. package/dist/cli.d.ts.map +1 -0
  46. package/dist/cli.js +159 -0
  47. package/dist/cli.js.map +1 -0
  48. package/dist/commands/audit.d.ts +8 -0
  49. package/dist/commands/audit.d.ts.map +1 -0
  50. package/dist/commands/audit.js +151 -0
  51. package/dist/commands/audit.js.map +1 -0
  52. package/dist/commands/init.d.ts +2 -0
  53. package/dist/commands/init.d.ts.map +1 -0
  54. package/dist/commands/init.js +34 -0
  55. package/dist/commands/init.js.map +1 -0
  56. package/dist/commands/remediate-cli.d.ts +3 -0
  57. package/dist/commands/remediate-cli.d.ts.map +1 -0
  58. package/dist/commands/remediate-cli.js +96 -0
  59. package/dist/commands/remediate-cli.js.map +1 -0
  60. package/dist/commands/scan.d.ts +11 -0
  61. package/dist/commands/scan.d.ts.map +1 -0
  62. package/dist/commands/scan.js +138 -0
  63. package/dist/commands/scan.js.map +1 -0
  64. package/dist/commands/watch.d.ts +6 -0
  65. package/dist/commands/watch.d.ts.map +1 -0
  66. package/dist/commands/watch.js +203 -0
  67. package/dist/commands/watch.js.map +1 -0
  68. package/dist/config.d.ts +19 -0
  69. package/dist/config.d.ts.map +1 -0
  70. package/dist/config.js +235 -0
  71. package/dist/config.js.map +1 -0
  72. package/dist/mcp-server/index.d.ts +3 -0
  73. package/dist/mcp-server/index.d.ts.map +1 -0
  74. package/dist/mcp-server/index.js +69 -0
  75. package/dist/mcp-server/index.js.map +1 -0
  76. package/dist/mcp-server/schemas.d.ts +13 -0
  77. package/dist/mcp-server/schemas.d.ts.map +1 -0
  78. package/dist/mcp-server/schemas.js +13 -0
  79. package/dist/mcp-server/schemas.js.map +1 -0
  80. package/dist/mcp-server/tools/audit-status.d.ts +3 -0
  81. package/dist/mcp-server/tools/audit-status.d.ts.map +1 -0
  82. package/dist/mcp-server/tools/audit-status.js +46 -0
  83. package/dist/mcp-server/tools/audit-status.js.map +1 -0
  84. package/dist/mcp-server/tools/check-command.d.ts +4 -0
  85. package/dist/mcp-server/tools/check-command.d.ts.map +1 -0
  86. package/dist/mcp-server/tools/check-command.js +30 -0
  87. package/dist/mcp-server/tools/check-command.js.map +1 -0
  88. package/dist/mcp-server/tools/scan-content.d.ts +4 -0
  89. package/dist/mcp-server/tools/scan-content.d.ts.map +1 -0
  90. package/dist/mcp-server/tools/scan-content.js +18 -0
  91. package/dist/mcp-server/tools/scan-content.js.map +1 -0
  92. package/dist/mcp-server/tools/scan-file.d.ts +4 -0
  93. package/dist/mcp-server/tools/scan-file.d.ts.map +1 -0
  94. package/dist/mcp-server/tools/scan-file.js +48 -0
  95. package/dist/mcp-server/tools/scan-file.js.map +1 -0
  96. package/dist/mcp-server/types.d.ts +15 -0
  97. package/dist/mcp-server/types.d.ts.map +1 -0
  98. package/dist/mcp-server/types.js +2 -0
  99. package/dist/mcp-server/types.js.map +1 -0
  100. package/dist/reporter/audit-report.d.ts +4 -0
  101. package/dist/reporter/audit-report.d.ts.map +1 -0
  102. package/dist/reporter/audit-report.js +186 -0
  103. package/dist/reporter/audit-report.js.map +1 -0
  104. package/dist/reporter/json-report.d.ts +3 -0
  105. package/dist/reporter/json-report.d.ts.map +1 -0
  106. package/dist/reporter/json-report.js +4 -0
  107. package/dist/reporter/json-report.js.map +1 -0
  108. package/dist/reporter/remediation-text.d.ts +3 -0
  109. package/dist/reporter/remediation-text.d.ts.map +1 -0
  110. package/dist/reporter/remediation-text.js +12 -0
  111. package/dist/reporter/remediation-text.js.map +1 -0
  112. package/dist/reporter/risk-scorer.d.ts +8 -0
  113. package/dist/reporter/risk-scorer.d.ts.map +1 -0
  114. package/dist/reporter/risk-scorer.js +40 -0
  115. package/dist/reporter/risk-scorer.js.map +1 -0
  116. package/dist/reporter/sarif-report.d.ts +3 -0
  117. package/dist/reporter/sarif-report.d.ts.map +1 -0
  118. package/dist/reporter/sarif-report.js +80 -0
  119. package/dist/reporter/sarif-report.js.map +1 -0
  120. package/dist/reporter/shared.d.ts +11 -0
  121. package/dist/reporter/shared.d.ts.map +1 -0
  122. package/dist/reporter/shared.js +85 -0
  123. package/dist/reporter/shared.js.map +1 -0
  124. package/dist/reporter/summary-generator.d.ts +16 -0
  125. package/dist/reporter/summary-generator.d.ts.map +1 -0
  126. package/dist/reporter/summary-generator.js +89 -0
  127. package/dist/reporter/summary-generator.js.map +1 -0
  128. package/dist/reporter/terminal-report.d.ts +4 -0
  129. package/dist/reporter/terminal-report.d.ts.map +1 -0
  130. package/dist/reporter/terminal-report.js +135 -0
  131. package/dist/reporter/terminal-report.js.map +1 -0
  132. package/dist/rules/crypto-rules.d.ts +3 -0
  133. package/dist/rules/crypto-rules.d.ts.map +1 -0
  134. package/dist/rules/crypto-rules.js +252 -0
  135. package/dist/rules/crypto-rules.js.map +1 -0
  136. package/dist/rules/default-rules.d.ts +9 -0
  137. package/dist/rules/default-rules.d.ts.map +1 -0
  138. package/dist/rules/default-rules.js +1319 -0
  139. package/dist/rules/default-rules.js.map +1 -0
  140. package/dist/rules/index.d.ts +7 -0
  141. package/dist/rules/index.d.ts.map +1 -0
  142. package/dist/rules/index.js +7 -0
  143. package/dist/rules/index.js.map +1 -0
  144. package/dist/rules/injection-rules.d.ts +8 -0
  145. package/dist/rules/injection-rules.d.ts.map +1 -0
  146. package/dist/rules/injection-rules.js +108 -0
  147. package/dist/rules/injection-rules.js.map +1 -0
  148. package/dist/rules/types.d.ts +52 -0
  149. package/dist/rules/types.d.ts.map +1 -0
  150. package/dist/rules/types.js +2 -0
  151. package/dist/rules/types.js.map +1 -0
  152. package/dist/scanner/filesystem-scanner.d.ts +26 -0
  153. package/dist/scanner/filesystem-scanner.d.ts.map +1 -0
  154. package/dist/scanner/filesystem-scanner.js +369 -0
  155. package/dist/scanner/filesystem-scanner.js.map +1 -0
  156. package/dist/scanner/injection-scanner.d.ts +12 -0
  157. package/dist/scanner/injection-scanner.d.ts.map +1 -0
  158. package/dist/scanner/injection-scanner.js +136 -0
  159. package/dist/scanner/injection-scanner.js.map +1 -0
  160. package/dist/scanner/permission-checker.d.ts +4 -0
  161. package/dist/scanner/permission-checker.d.ts.map +1 -0
  162. package/dist/scanner/permission-checker.js +37 -0
  163. package/dist/scanner/permission-checker.js.map +1 -0
  164. package/dist/scanner/redact.d.ts +3 -0
  165. package/dist/scanner/redact.d.ts.map +1 -0
  166. package/dist/scanner/redact.js +17 -0
  167. package/dist/scanner/redact.js.map +1 -0
  168. package/dist/scanner/rule-engine.d.ts +9 -0
  169. package/dist/scanner/rule-engine.d.ts.map +1 -0
  170. package/dist/scanner/rule-engine.js +129 -0
  171. package/dist/scanner/rule-engine.js.map +1 -0
  172. package/dist/scanner/system-targets.d.ts +17 -0
  173. package/dist/scanner/system-targets.d.ts.map +1 -0
  174. package/dist/scanner/system-targets.js +81 -0
  175. package/dist/scanner/system-targets.js.map +1 -0
  176. package/dist/tui/App.d.ts +6 -0
  177. package/dist/tui/App.d.ts.map +1 -0
  178. package/dist/tui/App.js +224 -0
  179. package/dist/tui/App.js.map +1 -0
  180. package/dist/tui/components/BootSequence.d.ts +6 -0
  181. package/dist/tui/components/BootSequence.d.ts.map +1 -0
  182. package/dist/tui/components/BootSequence.js +40 -0
  183. package/dist/tui/components/BootSequence.js.map +1 -0
  184. package/dist/tui/components/BorderedSection.d.ts +12 -0
  185. package/dist/tui/components/BorderedSection.d.ts.map +1 -0
  186. package/dist/tui/components/BorderedSection.js +7 -0
  187. package/dist/tui/components/BorderedSection.js.map +1 -0
  188. package/dist/tui/components/ErrorBoundary.d.ts +18 -0
  189. package/dist/tui/components/ErrorBoundary.d.ts.map +1 -0
  190. package/dist/tui/components/ErrorBoundary.js +36 -0
  191. package/dist/tui/components/ErrorBoundary.js.map +1 -0
  192. package/dist/tui/components/FirstUseHint.d.ts +7 -0
  193. package/dist/tui/components/FirstUseHint.d.ts.map +1 -0
  194. package/dist/tui/components/FirstUseHint.js +20 -0
  195. package/dist/tui/components/FirstUseHint.js.map +1 -0
  196. package/dist/tui/components/Footer.d.ts +10 -0
  197. package/dist/tui/components/Footer.d.ts.map +1 -0
  198. package/dist/tui/components/Footer.js +51 -0
  199. package/dist/tui/components/Footer.js.map +1 -0
  200. package/dist/tui/components/MetricCard.d.ts +11 -0
  201. package/dist/tui/components/MetricCard.d.ts.map +1 -0
  202. package/dist/tui/components/MetricCard.js +8 -0
  203. package/dist/tui/components/MetricCard.js.map +1 -0
  204. package/dist/tui/components/Panel.d.ts +15 -0
  205. package/dist/tui/components/Panel.d.ts.map +1 -0
  206. package/dist/tui/components/Panel.js +25 -0
  207. package/dist/tui/components/Panel.js.map +1 -0
  208. package/dist/tui/components/RemediationMenu.d.ts +10 -0
  209. package/dist/tui/components/RemediationMenu.d.ts.map +1 -0
  210. package/dist/tui/components/RemediationMenu.js +84 -0
  211. package/dist/tui/components/RemediationMenu.js.map +1 -0
  212. package/dist/tui/components/RiskGauge.d.ts +7 -0
  213. package/dist/tui/components/RiskGauge.d.ts.map +1 -0
  214. package/dist/tui/components/RiskGauge.js +55 -0
  215. package/dist/tui/components/RiskGauge.js.map +1 -0
  216. package/dist/tui/components/ScrollableList.d.ts +11 -0
  217. package/dist/tui/components/ScrollableList.d.ts.map +1 -0
  218. package/dist/tui/components/ScrollableList.js +14 -0
  219. package/dist/tui/components/ScrollableList.js.map +1 -0
  220. package/dist/tui/components/Section.d.ts +9 -0
  221. package/dist/tui/components/Section.d.ts.map +1 -0
  222. package/dist/tui/components/Section.js +7 -0
  223. package/dist/tui/components/Section.js.map +1 -0
  224. package/dist/tui/components/SectionHeader.d.ts +8 -0
  225. package/dist/tui/components/SectionHeader.d.ts.map +1 -0
  226. package/dist/tui/components/SectionHeader.js +15 -0
  227. package/dist/tui/components/SectionHeader.js.map +1 -0
  228. package/dist/tui/components/SeverityBadge.d.ts +5 -0
  229. package/dist/tui/components/SeverityBadge.d.ts.map +1 -0
  230. package/dist/tui/components/SeverityBadge.js +7 -0
  231. package/dist/tui/components/SeverityBadge.js.map +1 -0
  232. package/dist/tui/components/Sidebar.d.ts +2 -0
  233. package/dist/tui/components/Sidebar.d.ts.map +1 -0
  234. package/dist/tui/components/Sidebar.js +40 -0
  235. package/dist/tui/components/Sidebar.js.map +1 -0
  236. package/dist/tui/components/StatusIndicator.d.ts +8 -0
  237. package/dist/tui/components/StatusIndicator.d.ts.map +1 -0
  238. package/dist/tui/components/StatusIndicator.js +15 -0
  239. package/dist/tui/components/StatusIndicator.js.map +1 -0
  240. package/dist/tui/components/Table.d.ts +21 -0
  241. package/dist/tui/components/Table.d.ts.map +1 -0
  242. package/dist/tui/components/Table.js +38 -0
  243. package/dist/tui/components/Table.js.map +1 -0
  244. package/dist/tui/components/Transition.d.ts +8 -0
  245. package/dist/tui/components/Transition.d.ts.map +1 -0
  246. package/dist/tui/components/Transition.js +38 -0
  247. package/dist/tui/components/Transition.js.map +1 -0
  248. package/dist/tui/components/WelcomeScreen.d.ts +6 -0
  249. package/dist/tui/components/WelcomeScreen.d.ts.map +1 -0
  250. package/dist/tui/components/WelcomeScreen.js +14 -0
  251. package/dist/tui/components/WelcomeScreen.js.map +1 -0
  252. package/dist/tui/educational.d.ts +32 -0
  253. package/dist/tui/educational.d.ts.map +1 -0
  254. package/dist/tui/educational.js +117 -0
  255. package/dist/tui/educational.js.map +1 -0
  256. package/dist/tui/hooks/useAudit.d.ts +24 -0
  257. package/dist/tui/hooks/useAudit.d.ts.map +1 -0
  258. package/dist/tui/hooks/useAudit.js +263 -0
  259. package/dist/tui/hooks/useAudit.js.map +1 -0
  260. package/dist/tui/hooks/useConfig.d.ts +18 -0
  261. package/dist/tui/hooks/useConfig.d.ts.map +1 -0
  262. package/dist/tui/hooks/useConfig.js +85 -0
  263. package/dist/tui/hooks/useConfig.js.map +1 -0
  264. package/dist/tui/hooks/useHookStatus.d.ts +10 -0
  265. package/dist/tui/hooks/useHookStatus.d.ts.map +1 -0
  266. package/dist/tui/hooks/useHookStatus.js +59 -0
  267. package/dist/tui/hooks/useHookStatus.js.map +1 -0
  268. package/dist/tui/hooks/useLogs.d.ts +42 -0
  269. package/dist/tui/hooks/useLogs.d.ts.map +1 -0
  270. package/dist/tui/hooks/useLogs.js +105 -0
  271. package/dist/tui/hooks/useLogs.js.map +1 -0
  272. package/dist/tui/hooks/useScan.d.ts +39 -0
  273. package/dist/tui/hooks/useScan.d.ts.map +1 -0
  274. package/dist/tui/hooks/useScan.js +255 -0
  275. package/dist/tui/hooks/useScan.js.map +1 -0
  276. package/dist/tui/hooks/useTerminalSize.d.ts +10 -0
  277. package/dist/tui/hooks/useTerminalSize.d.ts.map +1 -0
  278. package/dist/tui/hooks/useTerminalSize.js +27 -0
  279. package/dist/tui/hooks/useTerminalSize.js.map +1 -0
  280. package/dist/tui/index.d.ts +2 -0
  281. package/dist/tui/index.d.ts.map +1 -0
  282. package/dist/tui/index.js +8 -0
  283. package/dist/tui/index.js.map +1 -0
  284. package/dist/tui/screens/AuditPanel.d.ts +7 -0
  285. package/dist/tui/screens/AuditPanel.d.ts.map +1 -0
  286. package/dist/tui/screens/AuditPanel.js +467 -0
  287. package/dist/tui/screens/AuditPanel.js.map +1 -0
  288. package/dist/tui/screens/LogsPanel.d.ts +2 -0
  289. package/dist/tui/screens/LogsPanel.d.ts.map +1 -0
  290. package/dist/tui/screens/LogsPanel.js +127 -0
  291. package/dist/tui/screens/LogsPanel.js.map +1 -0
  292. package/dist/tui/screens/OverviewPanel.d.ts +2 -0
  293. package/dist/tui/screens/OverviewPanel.d.ts.map +1 -0
  294. package/dist/tui/screens/OverviewPanel.js +84 -0
  295. package/dist/tui/screens/OverviewPanel.js.map +1 -0
  296. package/dist/tui/screens/ScanPanel.d.ts +2 -0
  297. package/dist/tui/screens/ScanPanel.d.ts.map +1 -0
  298. package/dist/tui/screens/ScanPanel.js +188 -0
  299. package/dist/tui/screens/ScanPanel.js.map +1 -0
  300. package/dist/tui/screens/ScanResultsPanel.d.ts +2 -0
  301. package/dist/tui/screens/ScanResultsPanel.d.ts.map +1 -0
  302. package/dist/tui/screens/ScanResultsPanel.js +394 -0
  303. package/dist/tui/screens/ScanResultsPanel.js.map +1 -0
  304. package/dist/tui/screens/SettingsPanel.d.ts +2 -0
  305. package/dist/tui/screens/SettingsPanel.d.ts.map +1 -0
  306. package/dist/tui/screens/SettingsPanel.js +353 -0
  307. package/dist/tui/screens/SettingsPanel.js.map +1 -0
  308. package/dist/tui/state.d.ts +35 -0
  309. package/dist/tui/state.d.ts.map +1 -0
  310. package/dist/tui/state.js +13 -0
  311. package/dist/tui/state.js.map +1 -0
  312. package/dist/tui/theme.d.ts +58 -0
  313. package/dist/tui/theme.d.ts.map +1 -0
  314. package/dist/tui/theme.js +80 -0
  315. package/dist/tui/theme.js.map +1 -0
  316. package/dist/version.d.ts +2 -0
  317. package/dist/version.d.ts.map +1 -0
  318. package/dist/version.js +5 -0
  319. package/dist/version.js.map +1 -0
  320. package/hooks/audit-logger.sh +74 -0
  321. package/hooks/detection-lib.sh +301 -0
  322. package/hooks/git-pre-commit.sh +195 -0
  323. package/hooks/git-pre-push.sh +125 -0
  324. package/hooks/git-safety.sh +152 -0
  325. package/hooks/security-scanner.sh +527 -0
  326. package/install.sh +543 -0
  327. package/package.json +67 -0
  328. package/patterns/credentials.yaml +317 -0
  329. package/patterns/dangerous-commands.yaml +167 -0
  330. package/patterns/pii.yaml +95 -0
  331. package/patterns/prompt-injection.yaml +131 -0
  332. package/patterns/supply-chain.yaml +119 -0
  333. package/rules/AGENTS.md +60 -0
  334. package/rules/SECURITY-RULES.md +177 -0
  335. package/rules/claude.md +9 -0
  336. package/rules/clinerules +29 -0
  337. package/rules/continuerules +29 -0
  338. package/rules/copilot-instructions.md +9 -0
  339. package/rules/cursor-security.mdc +14 -0
  340. package/rules/gemini.md +9 -0
  341. package/rules/kiro-security.md +29 -0
  342. package/rules/roocode-security.md +29 -0
  343. package/rules/trae-security.md +29 -0
  344. package/rules/windsurfrules +9 -0
  345. package/skill/llm-antivirus/SKILL.md +73 -0
  346. package/skill/llm-antivirus/references/threat-patterns.yaml +82 -0
  347. package/skill/llm-antivirus/scripts/security-audit.sh +244 -0
  348. package/uninstall.sh +215 -0
@@ -0,0 +1,241 @@
1
+ import { existsSync, readdirSync } from 'node:fs';
2
+ import { join, dirname, basename } from 'node:path';
3
+ import { homedir, platform } from 'node:os';
4
+ function expandPath(template) {
5
+ const home = homedir();
6
+ let result = template.replace(/^~\//, home + '/');
7
+ result = result.replace(/%USERPROFILE%/g, home);
8
+ result = result.replace(/%APPDATA%/g, join(home, 'AppData', 'Roaming'));
9
+ return result;
10
+ }
11
+ export const TOOL_DEFINITIONS = [
12
+ {
13
+ name: 'Claude Code',
14
+ accessLevel: 'full',
15
+ description: 'Can read/write any file on this machine',
16
+ paths: {
17
+ darwin: ['~/.claude/'],
18
+ linux: ['~/.claude/'],
19
+ win32: ['%USERPROFILE%\\.claude\\'],
20
+ },
21
+ },
22
+ {
23
+ name: 'Codex CLI',
24
+ accessLevel: 'full',
25
+ description: 'Can read/write any file on this machine',
26
+ paths: {
27
+ darwin: ['~/.codex/', '~/.config/openai/'],
28
+ linux: ['~/.codex/', '~/.config/openai/'],
29
+ win32: ['%USERPROFILE%\\.codex\\', '%APPDATA%\\openai\\'],
30
+ },
31
+ },
32
+ {
33
+ name: 'Aider',
34
+ accessLevel: 'full',
35
+ description: 'Can read/write any file on this machine',
36
+ paths: {
37
+ darwin: ['~/.aider.conf.yml', '~/.aider/'],
38
+ linux: ['~/.aider.conf.yml', '~/.aider/'],
39
+ win32: ['%USERPROFILE%\\.aider\\'],
40
+ },
41
+ },
42
+ {
43
+ name: 'Cursor',
44
+ accessLevel: 'workspace',
45
+ description: 'Can read/write files in open workspace',
46
+ paths: {
47
+ darwin: ['~/.cursor/', '~/Library/Application Support/Cursor/'],
48
+ linux: ['~/.cursor/', '~/.config/Cursor/'],
49
+ win32: ['%USERPROFILE%\\.cursor\\', '%APPDATA%\\Cursor\\'],
50
+ },
51
+ },
52
+ {
53
+ name: 'Windsurf',
54
+ accessLevel: 'workspace',
55
+ description: 'Can read/write files in open workspace',
56
+ paths: {
57
+ darwin: ['~/.codeium/', '~/Library/Application Support/Windsurf/'],
58
+ linux: ['~/.codeium/', '~/.config/Windsurf/'],
59
+ win32: ['%USERPROFILE%\\.codeium\\', '%APPDATA%\\Windsurf\\'],
60
+ },
61
+ },
62
+ {
63
+ name: 'Continue.dev',
64
+ accessLevel: 'workspace',
65
+ description: 'Can read/write files in open workspace',
66
+ paths: {
67
+ darwin: ['~/.continue/'],
68
+ linux: ['~/.continue/'],
69
+ win32: ['%USERPROFILE%\\.continue\\'],
70
+ },
71
+ },
72
+ {
73
+ name: 'Gemini Code Assist',
74
+ accessLevel: 'workspace',
75
+ description: 'Can read/write files in open workspace',
76
+ paths: {
77
+ darwin: ['~/.config/google-cloud/'],
78
+ linux: ['~/.config/google-cloud/'],
79
+ win32: ['%APPDATA%\\google-cloud\\'],
80
+ },
81
+ },
82
+ {
83
+ name: 'GitHub Copilot',
84
+ accessLevel: 'limited',
85
+ description: 'Can see open files and nearby context only',
86
+ paths: {
87
+ darwin: ['~/.config/github-copilot/'],
88
+ linux: ['~/.config/github-copilot/'],
89
+ win32: ['%APPDATA%\\github-copilot\\'],
90
+ },
91
+ },
92
+ {
93
+ name: 'Cline',
94
+ accessLevel: 'workspace',
95
+ description: 'Can read/write files in open workspace',
96
+ paths: {
97
+ darwin: ['~/.vscode/extensions/saoudrizwan.claude-dev-*'],
98
+ linux: ['~/.vscode/extensions/saoudrizwan.claude-dev-*'],
99
+ win32: ['%USERPROFILE%\\.vscode\\extensions\\saoudrizwan.claude-dev-*'],
100
+ },
101
+ },
102
+ {
103
+ name: 'RooCode',
104
+ accessLevel: 'workspace',
105
+ description: 'Can read/write files in open workspace',
106
+ paths: {
107
+ darwin: ['~/.vscode/extensions/rooveterinaryinc.roo-cline-*'],
108
+ linux: ['~/.vscode/extensions/rooveterinaryinc.roo-cline-*'],
109
+ win32: ['%USERPROFILE%\\.vscode\\extensions\\rooveterinaryinc.roo-cline-*'],
110
+ },
111
+ },
112
+ {
113
+ name: 'BLACKBOXAI',
114
+ accessLevel: 'workspace',
115
+ description: 'Can read/write files in open workspace',
116
+ paths: {
117
+ darwin: ['~/.vscode/extensions/blackbox-ai.blackbox-*'],
118
+ linux: ['~/.vscode/extensions/blackbox-ai.blackbox-*'],
119
+ win32: ['%USERPROFILE%\\.vscode\\extensions\\blackbox-ai.blackbox-*'],
120
+ },
121
+ },
122
+ {
123
+ name: 'Qodo Gen',
124
+ accessLevel: 'workspace',
125
+ description: 'Can read/write files in open workspace',
126
+ paths: {
127
+ darwin: ['~/.vscode/extensions/qodo-gen.qodo-gen-*'],
128
+ linux: ['~/.vscode/extensions/qodo-gen.qodo-gen-*'],
129
+ win32: ['%USERPROFILE%\\.vscode\\extensions\\qodo-gen.qodo-gen-*'],
130
+ },
131
+ },
132
+ {
133
+ name: 'Trae IDE',
134
+ accessLevel: 'full',
135
+ description: 'Can read/write any file on this machine',
136
+ paths: {
137
+ darwin: ['~/.trae/'],
138
+ linux: ['~/.trae/'],
139
+ win32: ['%USERPROFILE%\\.trae\\'],
140
+ },
141
+ },
142
+ {
143
+ name: 'Kiro',
144
+ accessLevel: 'workspace',
145
+ description: 'Can read/write files in open workspace',
146
+ paths: {
147
+ darwin: ['~/.kiro/'],
148
+ linux: ['~/.kiro/'],
149
+ win32: ['%USERPROFILE%\\.kiro\\'],
150
+ },
151
+ },
152
+ {
153
+ name: 'Amazon Q',
154
+ accessLevel: 'workspace',
155
+ description: 'Can read/write files in open workspace + AWS integration',
156
+ paths: {
157
+ darwin: ['~/.aws/amazonq/', '~/Library/Application Support/amazon-q/'],
158
+ linux: ['~/.aws/amazonq/', '~/.config/amazon-q/'],
159
+ win32: ['%USERPROFILE%\\.aws\\amazonq\\', '%APPDATA%\\amazon-q\\'],
160
+ },
161
+ },
162
+ {
163
+ name: 'JetBrains AI',
164
+ accessLevel: 'workspace',
165
+ description: 'Can read/write files in open workspace via IDE',
166
+ paths: {
167
+ darwin: ['~/Library/Application Support/JetBrains/'],
168
+ linux: ['~/.config/JetBrains/', '~/.local/share/JetBrains/'],
169
+ win32: ['%APPDATA%\\JetBrains\\'],
170
+ },
171
+ },
172
+ {
173
+ name: 'Augment',
174
+ accessLevel: 'workspace',
175
+ description: 'Can read/write files in open workspace',
176
+ paths: {
177
+ darwin: ['~/.augment/'],
178
+ linux: ['~/.augment/', '~/.config/augment/'],
179
+ win32: ['%USERPROFILE%\\.augment\\', '%APPDATA%\\augment\\'],
180
+ },
181
+ },
182
+ {
183
+ name: 'Bolt',
184
+ accessLevel: 'full',
185
+ description: 'Can read/write any file + terminal access',
186
+ paths: {
187
+ darwin: ['~/.bolt/'],
188
+ linux: ['~/.bolt/', '~/.config/bolt/'],
189
+ win32: ['%USERPROFILE%\\.bolt\\', '%APPDATA%\\bolt\\'],
190
+ },
191
+ },
192
+ ];
193
+ function matchGlobPath(expanded) {
194
+ if (!expanded.includes('*')) {
195
+ return existsSync(expanded) ? [expanded] : [];
196
+ }
197
+ // Glob: check parent dir and filter by prefix (assumes wildcard at end of pattern)
198
+ const dir = dirname(expanded);
199
+ const pattern = basename(expanded);
200
+ const prefix = pattern.slice(0, pattern.indexOf('*'));
201
+ try {
202
+ if (!existsSync(dir))
203
+ return [];
204
+ const entries = readdirSync(dir);
205
+ const matches = [];
206
+ for (const entry of entries) {
207
+ if (entry.startsWith(prefix)) {
208
+ matches.push(join(dir, entry));
209
+ }
210
+ }
211
+ return matches;
212
+ }
213
+ catch {
214
+ return [];
215
+ }
216
+ }
217
+ export function detectInstalledTools() {
218
+ const plat = platform();
219
+ const tools = [];
220
+ for (const def of TOOL_DEFINITIONS) {
221
+ const templates = def.paths[plat];
222
+ if (!templates)
223
+ continue;
224
+ const foundPaths = [];
225
+ for (const tpl of templates) {
226
+ const expanded = expandPath(tpl);
227
+ const matches = matchGlobPath(expanded);
228
+ foundPaths.push(...matches);
229
+ }
230
+ if (foundPaths.length > 0) {
231
+ tools.push({
232
+ name: def.name,
233
+ accessLevel: def.accessLevel,
234
+ configPaths: foundPaths,
235
+ description: def.description,
236
+ });
237
+ }
238
+ }
239
+ return tools;
240
+ }
241
+ //# sourceMappingURL=tool-detector.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"tool-detector.js","sourceRoot":"","sources":["../../src/auditor/tool-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAc5C,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAqB;IAChD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,YAAY,CAAC;YACtB,KAAK,EAAE,CAAC,YAAY,CAAC;YACrB,KAAK,EAAE,CAAC,0BAA0B,CAAC;SACpC;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;YAC1C,KAAK,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;YACzC,KAAK,EAAE,CAAC,yBAAyB,EAAE,qBAAqB,CAAC;SAC1D;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,mBAAmB,EAAE,WAAW,CAAC;YAC1C,KAAK,EAAE,CAAC,mBAAmB,EAAE,WAAW,CAAC;YACzC,KAAK,EAAE,CAAC,yBAAyB,CAAC;SACnC;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,YAAY,EAAE,uCAAuC,CAAC;YAC/D,KAAK,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC;YAC1C,KAAK,EAAE,CAAC,0BAA0B,EAAE,qBAAqB,CAAC;SAC3D;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,aAAa,EAAE,yCAAyC,CAAC;YAClE,KAAK,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC;YAC7C,KAAK,EAAE,CAAC,2BAA2B,EAAE,uBAAuB,CAAC;SAC9D;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,cAAc,CAAC;YACxB,KAAK,EAAE,CAAC,cAAc,CAAC;YACvB,KAAK,EAAE,CAAC,4BAA4B,CAAC;SACtC;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,yBAAyB,CAAC;YACnC,KAAK,EAAE,CAAC,yBAAyB,CAAC;YAClC,KAAK,EAAE,CAAC,2BAA2B,CAAC;SACrC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,4CAA4C;QACzD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,2BAA2B,CAAC;YACrC,KAAK,EAAE,CAAC,2BAA2B,CAAC;YACpC,KAAK,EAAE,CAAC,6BAA6B,CAAC;SACvC;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,+CAA+C,CAAC;YACzD,KAAK,EAAE,CAAC,+CAA+C,CAAC;YACxD,KAAK,EAAE,CAAC,8DAA8D,CAAC;SACxE;KACF;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,mDAAmD,CAAC;YAC7D,KAAK,EAAE,CAAC,mDAAmD,CAAC;YAC5D,KAAK,EAAE,CAAC,kEAAkE,CAAC;SAC5E;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,6CAA6C,CAAC;YACvD,KAAK,EAAE,CAAC,6CAA6C,CAAC;YACtD,KAAK,EAAE,CAAC,4DAA4D,CAAC;SACtE;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,0CAA0C,CAAC;YACpD,KAAK,EAAE,CAAC,0CAA0C,CAAC;YACnD,KAAK,EAAE,CAAC,yDAAyD,CAAC;SACnE;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,UAAU,CAAC;YACpB,KAAK,EAAE,CAAC,UAAU,CAAC;YACnB,KAAK,EAAE,CAAC,wBAAwB,CAAC;SAClC;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,UAAU,CAAC;YACpB,KAAK,EAAE,CAAC,UAAU,CAAC;YACnB,KAAK,EAAE,CAAC,wBAAwB,CAAC;SAClC;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,0DAA0D;QACvE,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;YACtE,KAAK,EAAE,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;YACjD,KAAK,EAAE,CAAC,gCAAgC,EAAE,uBAAuB,CAAC;SACnE;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,gDAAgD;QAC7D,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,0CAA0C,CAAC;YACpD,KAAK,EAAE,CAAC,sBAAsB,EAAE,2BAA2B,CAAC;YAC5D,KAAK,EAAE,CAAC,wBAAwB,CAAC;SAClC;KACF;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,aAAa,CAAC;YACvB,KAAK,EAAE,CAAC,aAAa,EAAE,oBAAoB,CAAC;YAC5C,KAAK,EAAE,CAAC,2BAA2B,EAAE,sBAAsB,CAAC;SAC7D;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,2CAA2C;QACxD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,UAAU,CAAC;YACpB,KAAK,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC;YACtC,KAAK,EAAE,CAAC,wBAAwB,EAAE,mBAAmB,CAAC;SACvD;KACF;CACF,CAAC;AAEF,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,mFAAmF;IACnF,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,IAAI,GAAG,QAAQ,EAAkC,CAAC;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS;YAAE,SAAS;QAEzB,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,WAAW,EAAE,UAAU;gBACvB,WAAW,EAAE,GAAG,CAAC,WAAW;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
@@ -0,0 +1,31 @@
1
+ import type { ScanFinding, ScanResult, Severity } from '../rules/types.js';
2
+ import type { MCPServer } from './mcp-detector.js';
3
+ import type { VSCodeExtension } from './vscode-extension-scanner.js';
4
+ import type { DetectedCLI } from './cli-detector.js';
5
+ import type { EnvExposure } from './env-auditor.js';
6
+ export type AccessLevel = 'full' | 'workspace' | 'limited';
7
+ export interface AITool {
8
+ name: string;
9
+ accessLevel: AccessLevel;
10
+ configPaths: string[];
11
+ description: string;
12
+ }
13
+ export interface ToolExposure {
14
+ tool: AITool;
15
+ exposedFindings: ScanFinding[];
16
+ counts: Record<Severity, number>;
17
+ }
18
+ export interface AuditResult {
19
+ tools: AITool[];
20
+ exposures: ToolExposure[];
21
+ scanResult: ScanResult;
22
+ totalExposed: number;
23
+ durationMs: number;
24
+ mcpServers: MCPServer[];
25
+ mcpConfigFiles: string[];
26
+ vsCodeExtensions: VSCodeExtension[] | null;
27
+ detectedCLIs: DetectedCLI[];
28
+ systemFindings: ScanFinding[];
29
+ envExposures: EnvExposure[];
30
+ }
31
+ //# sourceMappingURL=types.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auditor/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3D,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IAC3C,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,cAAc,EAAE,WAAW,EAAE,CAAC;IAC9B,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=types.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auditor/types.ts"],"names":[],"mappings":""}
@@ -0,0 +1,8 @@
1
+ export interface VSCodeExtension {
2
+ id: string;
3
+ name: string;
4
+ riskLevel: 'high' | 'medium' | 'low';
5
+ riskReason: string;
6
+ }
7
+ export declare function scanVSCodeExtensions(): VSCodeExtension[] | null;
8
+ //# sourceMappingURL=vscode-extension-scanner.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"vscode-extension-scanner.d.ts","sourceRoot":"","sources":["../../src/auditor/vscode-extension-scanner.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB;AAgCD,wBAAgB,oBAAoB,IAAI,eAAe,EAAE,GAAG,IAAI,CAwB/D"}
@@ -0,0 +1,51 @@
1
+ import { execFileSync } from 'node:child_process';
2
+ const KNOWN_AI_EXTENSIONS = new Map([
3
+ ['github.copilot', 'GitHub Copilot'],
4
+ ['github.copilot-chat', 'GitHub Copilot Chat'],
5
+ ['saoudrizwan.claude-dev', 'Cline'],
6
+ ['rooveterinaryinc.roo-cline', 'RooCode'],
7
+ ['continue.continue', 'Continue.dev'],
8
+ ['blackbox-ai.blackbox', 'BLACKBOXAI'],
9
+ ['qodo-gen.qodo-gen', 'Qodo Gen'],
10
+ ['amazonwebservices.amazon-q-vscode', 'Amazon Q'],
11
+ ['sourcegraph.cody-ai', 'Sourcegraph Cody'],
12
+ ['cursor.cursor', 'Cursor'],
13
+ ['google.gcp-vscode', 'Gemini Code Assist'],
14
+ ['tabnine.tabnine-vscode', 'Tabnine'],
15
+ ]);
16
+ const EXTENSION_RISK = new Map([
17
+ ['github.copilot', { level: 'low', reason: 'Limited to open file context' }],
18
+ ['github.copilot-chat', { level: 'medium', reason: 'Can read workspace files via chat' }],
19
+ ['saoudrizwan.claude-dev', { level: 'high', reason: 'Full workspace file read/write + terminal access' }],
20
+ ['rooveterinaryinc.roo-cline', { level: 'high', reason: 'Full workspace file read/write + terminal access' }],
21
+ ['continue.continue', { level: 'medium', reason: 'Workspace file access via context providers' }],
22
+ ['blackbox-ai.blackbox', { level: 'medium', reason: 'Workspace file access for code completion' }],
23
+ ['qodo-gen.qodo-gen', { level: 'medium', reason: 'Workspace file access for test generation' }],
24
+ ['amazonwebservices.amazon-q-vscode', { level: 'medium', reason: 'Workspace file access + AWS integration' }],
25
+ ['sourcegraph.cody-ai', { level: 'medium', reason: 'Full codebase indexing + workspace access' }],
26
+ ['cursor.cursor', { level: 'medium', reason: 'Workspace file access' }],
27
+ ['google.gcp-vscode', { level: 'medium', reason: 'Workspace file access + GCP integration' }],
28
+ ['tabnine.tabnine-vscode', { level: 'low', reason: 'Limited to code completion context' }],
29
+ ]);
30
+ export function scanVSCodeExtensions() {
31
+ let output;
32
+ try {
33
+ output = execFileSync('code', ['--list-extensions'], { timeout: 10000, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
34
+ }
35
+ catch {
36
+ return null; // VS Code not available
37
+ }
38
+ const installed = new Set(output
39
+ .split('\n')
40
+ .map((line) => line.trim().toLowerCase())
41
+ .filter(Boolean));
42
+ const found = [];
43
+ for (const [id, name] of KNOWN_AI_EXTENSIONS) {
44
+ if (installed.has(id.toLowerCase())) {
45
+ const risk = EXTENSION_RISK.get(id.toLowerCase()) ?? { level: 'medium', reason: 'Unknown AI extension' };
46
+ found.push({ id, name, riskLevel: risk.level, riskReason: risk.reason });
47
+ }
48
+ }
49
+ return found;
50
+ }
51
+ //# sourceMappingURL=vscode-extension-scanner.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"vscode-extension-scanner.js","sourceRoot":"","sources":["../../src/auditor/vscode-extension-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAiB;IAClD,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACpC,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IAC9C,CAAC,wBAAwB,EAAE,OAAO,CAAC;IACnC,CAAC,4BAA4B,EAAE,SAAS,CAAC;IACzC,CAAC,mBAAmB,EAAE,cAAc,CAAC;IACrC,CAAC,sBAAsB,EAAE,YAAY,CAAC;IACtC,CAAC,mBAAmB,EAAE,UAAU,CAAC;IACjC,CAAC,mCAAmC,EAAE,UAAU,CAAC;IACjD,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;IAC3C,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAC3C,CAAC,wBAAwB,EAAE,SAAS,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAsE,IAAI,GAAG,CAAC;IAChG,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC5E,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACzF,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IACzG,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IAC7G,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IACjG,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAClG,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC/F,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IAC7G,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IACjG,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACvE,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IAC7F,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;CAC3F,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB;IAClC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,wBAAwB;IACvC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,MAAM;SACH,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SACxC,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IAEF,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;QAC7C,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAiB,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;YAClH,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
package/dist/cli.d.ts ADDED
@@ -0,0 +1,3 @@
1
+ #!/usr/bin/env node
2
+ export {};
3
+ //# sourceMappingURL=cli.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}
package/dist/cli.js ADDED
@@ -0,0 +1,159 @@
1
+ #!/usr/bin/env node
2
+ import { Command, Option } from 'commander';
3
+ import chalk from 'chalk';
4
+ import { runScan } from './commands/scan.js';
5
+ import { runInit } from './commands/init.js';
6
+ import { runAudit } from './commands/audit.js';
7
+ import { isProtectionEnabled, setProtectionEnabled, addAllowlistPath, disableRule } from './config.js';
8
+ import { allRules } from './rules/index.js';
9
+ import { detectInstalledTools } from './auditor/tool-detector.js';
10
+ import { existsSync } from 'node:fs';
11
+ import { join } from 'node:path';
12
+ import { homedir } from 'node:os';
13
+ import { VERSION } from './version.js';
14
+ // Launch TUI when invoked with no arguments
15
+ const args = process.argv.slice(2);
16
+ if (args.length === 0) {
17
+ import('./tui/index.js')
18
+ .then(({ launchTUI }) => launchTUI())
19
+ .catch((err) => {
20
+ console.error(`Fatal: ${err.message}`);
21
+ process.exitCode = 1;
22
+ });
23
+ }
24
+ else {
25
+ const program = new Command();
26
+ program
27
+ .name('chainwall')
28
+ .description('Security scanner for exposed secrets, crypto keys, and dangerous patterns.\n\nRun with no arguments to launch the interactive TUI.')
29
+ .version(VERSION)
30
+ .addHelpText('after', `
31
+ Examples:
32
+ $ chainwall Launch interactive TUI
33
+ $ chainwall scan Full security scan (home + credentials)
34
+ $ chainwall scan ~/project Scan a specific directory
35
+ $ chainwall scan --system System targets only (credentials, keys)
36
+ $ chainwall audit Targeted system audit (~3s)
37
+ $ chainwall audit ~/project Scan a specific directory + system audit
38
+ $ chainwall audit --deep Full home directory scan (slow)
39
+ $ chainwall watch Watch current dir for secrets in real-time
40
+ $ chainwall init Install hooks in current project`);
41
+ program
42
+ .command('scan')
43
+ .description('Scan a directory for security findings')
44
+ .argument('[dir]', 'Directory to scan', '.')
45
+ .option('--json', 'Output results as JSON (for CI pipelines)')
46
+ .option('--crypto-only', 'Only run crypto/web3 rules')
47
+ .option('--verbose', 'Show match details and descriptions')
48
+ .option('--system', 'Scan known credential locations across ~/')
49
+ .addOption(new Option('--format <type>', 'Output format').choices(['text', 'json', 'sarif']).default('text'))
50
+ .option('--include-tests', 'Include test directories in scan (normally skipped)')
51
+ .option('--grouped', 'Group findings by category instead of severity')
52
+ .action(async (dir, options) => {
53
+ await runScan(dir, options);
54
+ });
55
+ program
56
+ .command('init')
57
+ .description('Initialize ChainWall hooks in a project')
58
+ .argument('[dir]', 'Target directory', '.')
59
+ .action((dir) => {
60
+ runInit(dir);
61
+ });
62
+ program
63
+ .command('audit')
64
+ .description('Map AI tool permissions and cross-reference with exposed secrets')
65
+ .argument('[dir]', 'Directory to scan')
66
+ .option('--json', 'Output results as JSON')
67
+ .addOption(new Option('--format <type>', 'Output format').choices(['text', 'json', 'sarif']).default('text'))
68
+ .option('--remediate', 'Interactive remediation after audit')
69
+ .option('--deep', 'Include full recursive home directory scan (slow)')
70
+ .action(async (dir, options) => {
71
+ await runAudit(dir ?? '.', options);
72
+ });
73
+ program
74
+ .command('watch')
75
+ .description('Watch a directory for file changes and scan in real-time')
76
+ .argument('[dir]', 'Directory to watch', '.')
77
+ .option('--verbose', 'Show match details')
78
+ .option('--json', 'Output findings as JSON lines')
79
+ .action(async (dir, options) => {
80
+ const { runWatch } = await import('./commands/watch.js');
81
+ await runWatch(dir, options);
82
+ });
83
+ program
84
+ .command('mcp')
85
+ .description('Start MCP security server (stdio transport)')
86
+ .action(async () => {
87
+ const { startMCPServer } = await import('./mcp-server/index.js');
88
+ await startMCPServer();
89
+ });
90
+ program
91
+ .command('enable')
92
+ .description('Enable real-time protection (hooks block threats)')
93
+ .action(() => {
94
+ setProtectionEnabled(true);
95
+ console.log(chalk.green('\u2713 Real-time protection enabled'));
96
+ });
97
+ program
98
+ .command('disable')
99
+ .description('Disable real-time protection (hooks pass through)')
100
+ .action(() => {
101
+ setProtectionEnabled(false);
102
+ console.log(chalk.yellow('\u26a0 Real-time protection disabled'));
103
+ console.log(' Manual scans (chainwall scan/audit) still work.');
104
+ console.log(` Run ${chalk.bold('chainwall enable')} to re-enable.`);
105
+ });
106
+ program
107
+ .command('allow <path>')
108
+ .description('Add a file path to the global allowlist, or disable a rule')
109
+ .option('--rule', 'Treat the argument as a rule ID instead of a file path')
110
+ .action((pathOrRule, options) => {
111
+ const value = pathOrRule.trim();
112
+ if (!value) {
113
+ console.error('chainwall: value cannot be empty');
114
+ process.exitCode = 1;
115
+ return;
116
+ }
117
+ if (options.rule) {
118
+ disableRule(value);
119
+ console.log(chalk.green(`\u2713 Rule disabled: ${value}`));
120
+ }
121
+ else {
122
+ addAllowlistPath(value);
123
+ console.log(chalk.green(`\u2713 Path allowlisted: ${value}`));
124
+ }
125
+ });
126
+ program
127
+ .command('status')
128
+ .description('Show protection status')
129
+ .action(() => {
130
+ const enabled = isProtectionEnabled();
131
+ const tools = detectInstalledTools();
132
+ const hooksInstalled = existsSync(join(process.cwd(), '.llm-av'));
133
+ const configPath = join(homedir(), '.llm-av', 'config.json');
134
+ console.log('');
135
+ console.log(chalk.bold('ChainWall Status'));
136
+ if (enabled) {
137
+ console.log(` Protection: ${chalk.green('\u2713 ON')}`);
138
+ }
139
+ else {
140
+ console.log(` Protection: ${chalk.yellow('\u2717 OFF')}`);
141
+ }
142
+ console.log(` Rules: ${allRules.length} patterns loaded`);
143
+ if (tools.length > 0) {
144
+ const names = tools.map((t) => t.name).join(', ');
145
+ console.log(` AI tools: ${tools.length} detected (${names})`);
146
+ }
147
+ else {
148
+ console.log(' AI tools: none detected');
149
+ }
150
+ console.log(` Hooks: ${hooksInstalled ? chalk.green('\u2713 installed in current project') : chalk.yellow('\u2717 not installed')}`);
151
+ console.log(` Config: ${configPath}`);
152
+ console.log('');
153
+ });
154
+ program.parseAsync().catch((err) => {
155
+ console.error(`Fatal: ${err.message}`);
156
+ process.exitCode = 1;
157
+ });
158
+ }
159
+ //# sourceMappingURL=cli.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvG,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,4CAA4C;AAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;IACtB,MAAM,CAAC,gBAAgB,CAAC;SACrB,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC;SACpC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;QACpB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC;KAAM,CAAC;IACN,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,WAAW,CAAC;SACjB,WAAW,CAAC,oIAAoI,CAAC;SACjJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;oEAU0C,CAAC,CAAC;IAEpE,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wCAAwC,CAAC;SACrD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,CAAC;SAC3C,MAAM,CAAC,QAAQ,EAAE,2CAA2C,CAAC;SAC7D,MAAM,CAAC,eAAe,EAAE,4BAA4B,CAAC;SACrD,MAAM,CAAC,WAAW,EAAE,qCAAqC,CAAC;SAC1D,MAAM,CAAC,UAAU,EAAE,2CAA2C,CAAC;SAC/D,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SAC5G,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,CAAC;SAChF,MAAM,CAAC,WAAW,EAAE,gDAAgD,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,OAAkJ,EAAE,EAAE;QAChL,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yCAAyC,CAAC;SACtD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,CAAC;SAC1C,MAAM,CAAC,CAAC,GAAY,EAAE,EAAE;QACvB,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;SACtC,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SAC5G,MAAM,CAAC,aAAa,EAAE,qCAAqC,CAAC;SAC5D,MAAM,CAAC,QAAQ,EAAE,mDAAmD,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,GAAuB,EAAE,OAAiF,EAAE,EAAE;QAC3H,MAAM,QAAQ,CAAC,GAAG,IAAI,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,0DAA0D,CAAC;SACvE,QAAQ,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,CAAC;SAC5C,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,+BAA+B,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,OAA8C,EAAE,EAAE;QAC5E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACzD,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,6CAA6C,CAAC;SAC1D,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACjE,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,GAAG,EAAE;QACX,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,GAAG,EAAE;QACX,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,4DAA4D,CAAC;SACzE,MAAM,CAAC,QAAQ,EAAE,wDAAwD,CAAC;SAC1E,MAAM,CAAC,CAAC,UAAkB,EAAE,OAA2B,EAAE,EAAE;QAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,WAAW,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAE7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,CAAC,MAAM,kBAAkB,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,MAAM,cAAc,KAAK,GAAG,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC5I,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEL,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,8 @@
1
+ export interface AuditOptions {
2
+ json?: boolean;
3
+ format?: string;
4
+ remediate?: boolean;
5
+ deep?: boolean;
6
+ }
7
+ export declare function runAudit(targetDir: string, options: AuditOptions): Promise<void>;
8
+ //# sourceMappingURL=audit.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA0JtF"}