chainwall 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +278 -0
- package/commands/security-scan.md +35 -0
- package/dist/auditor/access-mapper.d.ts +3 -0
- package/dist/auditor/access-mapper.d.ts.map +1 -0
- package/dist/auditor/access-mapper.js +15 -0
- package/dist/auditor/access-mapper.js.map +1 -0
- package/dist/auditor/cli-detector.d.ts +7 -0
- package/dist/auditor/cli-detector.d.ts.map +1 -0
- package/dist/auditor/cli-detector.js +63 -0
- package/dist/auditor/cli-detector.js.map +1 -0
- package/dist/auditor/cross-reference.d.ts +4 -0
- package/dist/auditor/cross-reference.d.ts.map +1 -0
- package/dist/auditor/cross-reference.js +16 -0
- package/dist/auditor/cross-reference.js.map +1 -0
- package/dist/auditor/env-auditor.d.ts +9 -0
- package/dist/auditor/env-auditor.d.ts.map +1 -0
- package/dist/auditor/env-auditor.js +83 -0
- package/dist/auditor/env-auditor.js.map +1 -0
- package/dist/auditor/mcp-analyzer.d.ts +11 -0
- package/dist/auditor/mcp-analyzer.d.ts.map +1 -0
- package/dist/auditor/mcp-analyzer.js +145 -0
- package/dist/auditor/mcp-analyzer.js.map +1 -0
- package/dist/auditor/mcp-detector.d.ts +17 -0
- package/dist/auditor/mcp-detector.d.ts.map +1 -0
- package/dist/auditor/mcp-detector.js +86 -0
- package/dist/auditor/mcp-detector.js.map +1 -0
- package/dist/auditor/remediation.d.ts +26 -0
- package/dist/auditor/remediation.d.ts.map +1 -0
- package/dist/auditor/remediation.js +222 -0
- package/dist/auditor/remediation.js.map +1 -0
- package/dist/auditor/tool-detector.d.ts +15 -0
- package/dist/auditor/tool-detector.d.ts.map +1 -0
- package/dist/auditor/tool-detector.js +241 -0
- package/dist/auditor/tool-detector.js.map +1 -0
- package/dist/auditor/types.d.ts +31 -0
- package/dist/auditor/types.d.ts.map +1 -0
- package/dist/auditor/types.js +2 -0
- package/dist/auditor/types.js.map +1 -0
- package/dist/auditor/vscode-extension-scanner.d.ts +8 -0
- package/dist/auditor/vscode-extension-scanner.d.ts.map +1 -0
- package/dist/auditor/vscode-extension-scanner.js +51 -0
- package/dist/auditor/vscode-extension-scanner.js.map +1 -0
- package/dist/cli.d.ts +3 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +159 -0
- package/dist/cli.js.map +1 -0
- package/dist/commands/audit.d.ts +8 -0
- package/dist/commands/audit.d.ts.map +1 -0
- package/dist/commands/audit.js +151 -0
- package/dist/commands/audit.js.map +1 -0
- package/dist/commands/init.d.ts +2 -0
- package/dist/commands/init.d.ts.map +1 -0
- package/dist/commands/init.js +34 -0
- package/dist/commands/init.js.map +1 -0
- package/dist/commands/remediate-cli.d.ts +3 -0
- package/dist/commands/remediate-cli.d.ts.map +1 -0
- package/dist/commands/remediate-cli.js +96 -0
- package/dist/commands/remediate-cli.js.map +1 -0
- package/dist/commands/scan.d.ts +11 -0
- package/dist/commands/scan.d.ts.map +1 -0
- package/dist/commands/scan.js +138 -0
- package/dist/commands/scan.js.map +1 -0
- package/dist/commands/watch.d.ts +6 -0
- package/dist/commands/watch.d.ts.map +1 -0
- package/dist/commands/watch.js +203 -0
- package/dist/commands/watch.js.map +1 -0
- package/dist/config.d.ts +19 -0
- package/dist/config.d.ts.map +1 -0
- package/dist/config.js +235 -0
- package/dist/config.js.map +1 -0
- package/dist/mcp-server/index.d.ts +3 -0
- package/dist/mcp-server/index.d.ts.map +1 -0
- package/dist/mcp-server/index.js +69 -0
- package/dist/mcp-server/index.js.map +1 -0
- package/dist/mcp-server/schemas.d.ts +13 -0
- package/dist/mcp-server/schemas.d.ts.map +1 -0
- package/dist/mcp-server/schemas.js +13 -0
- package/dist/mcp-server/schemas.js.map +1 -0
- package/dist/mcp-server/tools/audit-status.d.ts +3 -0
- package/dist/mcp-server/tools/audit-status.d.ts.map +1 -0
- package/dist/mcp-server/tools/audit-status.js +46 -0
- package/dist/mcp-server/tools/audit-status.js.map +1 -0
- package/dist/mcp-server/tools/check-command.d.ts +4 -0
- package/dist/mcp-server/tools/check-command.d.ts.map +1 -0
- package/dist/mcp-server/tools/check-command.js +30 -0
- package/dist/mcp-server/tools/check-command.js.map +1 -0
- package/dist/mcp-server/tools/scan-content.d.ts +4 -0
- package/dist/mcp-server/tools/scan-content.d.ts.map +1 -0
- package/dist/mcp-server/tools/scan-content.js +18 -0
- package/dist/mcp-server/tools/scan-content.js.map +1 -0
- package/dist/mcp-server/tools/scan-file.d.ts +4 -0
- package/dist/mcp-server/tools/scan-file.d.ts.map +1 -0
- package/dist/mcp-server/tools/scan-file.js +48 -0
- package/dist/mcp-server/tools/scan-file.js.map +1 -0
- package/dist/mcp-server/types.d.ts +15 -0
- package/dist/mcp-server/types.d.ts.map +1 -0
- package/dist/mcp-server/types.js +2 -0
- package/dist/mcp-server/types.js.map +1 -0
- package/dist/reporter/audit-report.d.ts +4 -0
- package/dist/reporter/audit-report.d.ts.map +1 -0
- package/dist/reporter/audit-report.js +186 -0
- package/dist/reporter/audit-report.js.map +1 -0
- package/dist/reporter/json-report.d.ts +3 -0
- package/dist/reporter/json-report.d.ts.map +1 -0
- package/dist/reporter/json-report.js +4 -0
- package/dist/reporter/json-report.js.map +1 -0
- package/dist/reporter/remediation-text.d.ts +3 -0
- package/dist/reporter/remediation-text.d.ts.map +1 -0
- package/dist/reporter/remediation-text.js +12 -0
- package/dist/reporter/remediation-text.js.map +1 -0
- package/dist/reporter/risk-scorer.d.ts +8 -0
- package/dist/reporter/risk-scorer.d.ts.map +1 -0
- package/dist/reporter/risk-scorer.js +40 -0
- package/dist/reporter/risk-scorer.js.map +1 -0
- package/dist/reporter/sarif-report.d.ts +3 -0
- package/dist/reporter/sarif-report.d.ts.map +1 -0
- package/dist/reporter/sarif-report.js +80 -0
- package/dist/reporter/sarif-report.js.map +1 -0
- package/dist/reporter/shared.d.ts +11 -0
- package/dist/reporter/shared.d.ts.map +1 -0
- package/dist/reporter/shared.js +85 -0
- package/dist/reporter/shared.js.map +1 -0
- package/dist/reporter/summary-generator.d.ts +16 -0
- package/dist/reporter/summary-generator.d.ts.map +1 -0
- package/dist/reporter/summary-generator.js +89 -0
- package/dist/reporter/summary-generator.js.map +1 -0
- package/dist/reporter/terminal-report.d.ts +4 -0
- package/dist/reporter/terminal-report.d.ts.map +1 -0
- package/dist/reporter/terminal-report.js +135 -0
- package/dist/reporter/terminal-report.js.map +1 -0
- package/dist/rules/crypto-rules.d.ts +3 -0
- package/dist/rules/crypto-rules.d.ts.map +1 -0
- package/dist/rules/crypto-rules.js +252 -0
- package/dist/rules/crypto-rules.js.map +1 -0
- package/dist/rules/default-rules.d.ts +9 -0
- package/dist/rules/default-rules.d.ts.map +1 -0
- package/dist/rules/default-rules.js +1319 -0
- package/dist/rules/default-rules.js.map +1 -0
- package/dist/rules/index.d.ts +7 -0
- package/dist/rules/index.d.ts.map +1 -0
- package/dist/rules/index.js +7 -0
- package/dist/rules/index.js.map +1 -0
- package/dist/rules/injection-rules.d.ts +8 -0
- package/dist/rules/injection-rules.d.ts.map +1 -0
- package/dist/rules/injection-rules.js +108 -0
- package/dist/rules/injection-rules.js.map +1 -0
- package/dist/rules/types.d.ts +52 -0
- package/dist/rules/types.d.ts.map +1 -0
- package/dist/rules/types.js +2 -0
- package/dist/rules/types.js.map +1 -0
- package/dist/scanner/filesystem-scanner.d.ts +26 -0
- package/dist/scanner/filesystem-scanner.d.ts.map +1 -0
- package/dist/scanner/filesystem-scanner.js +369 -0
- package/dist/scanner/filesystem-scanner.js.map +1 -0
- package/dist/scanner/injection-scanner.d.ts +12 -0
- package/dist/scanner/injection-scanner.d.ts.map +1 -0
- package/dist/scanner/injection-scanner.js +136 -0
- package/dist/scanner/injection-scanner.js.map +1 -0
- package/dist/scanner/permission-checker.d.ts +4 -0
- package/dist/scanner/permission-checker.d.ts.map +1 -0
- package/dist/scanner/permission-checker.js +37 -0
- package/dist/scanner/permission-checker.js.map +1 -0
- package/dist/scanner/redact.d.ts +3 -0
- package/dist/scanner/redact.d.ts.map +1 -0
- package/dist/scanner/redact.js +17 -0
- package/dist/scanner/redact.js.map +1 -0
- package/dist/scanner/rule-engine.d.ts +9 -0
- package/dist/scanner/rule-engine.d.ts.map +1 -0
- package/dist/scanner/rule-engine.js +129 -0
- package/dist/scanner/rule-engine.js.map +1 -0
- package/dist/scanner/system-targets.d.ts +17 -0
- package/dist/scanner/system-targets.d.ts.map +1 -0
- package/dist/scanner/system-targets.js +81 -0
- package/dist/scanner/system-targets.js.map +1 -0
- package/dist/tui/App.d.ts +6 -0
- package/dist/tui/App.d.ts.map +1 -0
- package/dist/tui/App.js +224 -0
- package/dist/tui/App.js.map +1 -0
- package/dist/tui/components/BootSequence.d.ts +6 -0
- package/dist/tui/components/BootSequence.d.ts.map +1 -0
- package/dist/tui/components/BootSequence.js +40 -0
- package/dist/tui/components/BootSequence.js.map +1 -0
- package/dist/tui/components/BorderedSection.d.ts +12 -0
- package/dist/tui/components/BorderedSection.d.ts.map +1 -0
- package/dist/tui/components/BorderedSection.js +7 -0
- package/dist/tui/components/BorderedSection.js.map +1 -0
- package/dist/tui/components/ErrorBoundary.d.ts +18 -0
- package/dist/tui/components/ErrorBoundary.d.ts.map +1 -0
- package/dist/tui/components/ErrorBoundary.js +36 -0
- package/dist/tui/components/ErrorBoundary.js.map +1 -0
- package/dist/tui/components/FirstUseHint.d.ts +7 -0
- package/dist/tui/components/FirstUseHint.d.ts.map +1 -0
- package/dist/tui/components/FirstUseHint.js +20 -0
- package/dist/tui/components/FirstUseHint.js.map +1 -0
- package/dist/tui/components/Footer.d.ts +10 -0
- package/dist/tui/components/Footer.d.ts.map +1 -0
- package/dist/tui/components/Footer.js +51 -0
- package/dist/tui/components/Footer.js.map +1 -0
- package/dist/tui/components/MetricCard.d.ts +11 -0
- package/dist/tui/components/MetricCard.d.ts.map +1 -0
- package/dist/tui/components/MetricCard.js +8 -0
- package/dist/tui/components/MetricCard.js.map +1 -0
- package/dist/tui/components/Panel.d.ts +15 -0
- package/dist/tui/components/Panel.d.ts.map +1 -0
- package/dist/tui/components/Panel.js +25 -0
- package/dist/tui/components/Panel.js.map +1 -0
- package/dist/tui/components/RemediationMenu.d.ts +10 -0
- package/dist/tui/components/RemediationMenu.d.ts.map +1 -0
- package/dist/tui/components/RemediationMenu.js +84 -0
- package/dist/tui/components/RemediationMenu.js.map +1 -0
- package/dist/tui/components/RiskGauge.d.ts +7 -0
- package/dist/tui/components/RiskGauge.d.ts.map +1 -0
- package/dist/tui/components/RiskGauge.js +55 -0
- package/dist/tui/components/RiskGauge.js.map +1 -0
- package/dist/tui/components/ScrollableList.d.ts +11 -0
- package/dist/tui/components/ScrollableList.d.ts.map +1 -0
- package/dist/tui/components/ScrollableList.js +14 -0
- package/dist/tui/components/ScrollableList.js.map +1 -0
- package/dist/tui/components/Section.d.ts +9 -0
- package/dist/tui/components/Section.d.ts.map +1 -0
- package/dist/tui/components/Section.js +7 -0
- package/dist/tui/components/Section.js.map +1 -0
- package/dist/tui/components/SectionHeader.d.ts +8 -0
- package/dist/tui/components/SectionHeader.d.ts.map +1 -0
- package/dist/tui/components/SectionHeader.js +15 -0
- package/dist/tui/components/SectionHeader.js.map +1 -0
- package/dist/tui/components/SeverityBadge.d.ts +5 -0
- package/dist/tui/components/SeverityBadge.d.ts.map +1 -0
- package/dist/tui/components/SeverityBadge.js +7 -0
- package/dist/tui/components/SeverityBadge.js.map +1 -0
- package/dist/tui/components/Sidebar.d.ts +2 -0
- package/dist/tui/components/Sidebar.d.ts.map +1 -0
- package/dist/tui/components/Sidebar.js +40 -0
- package/dist/tui/components/Sidebar.js.map +1 -0
- package/dist/tui/components/StatusIndicator.d.ts +8 -0
- package/dist/tui/components/StatusIndicator.d.ts.map +1 -0
- package/dist/tui/components/StatusIndicator.js +15 -0
- package/dist/tui/components/StatusIndicator.js.map +1 -0
- package/dist/tui/components/Table.d.ts +21 -0
- package/dist/tui/components/Table.d.ts.map +1 -0
- package/dist/tui/components/Table.js +38 -0
- package/dist/tui/components/Table.js.map +1 -0
- package/dist/tui/components/Transition.d.ts +8 -0
- package/dist/tui/components/Transition.d.ts.map +1 -0
- package/dist/tui/components/Transition.js +38 -0
- package/dist/tui/components/Transition.js.map +1 -0
- package/dist/tui/components/WelcomeScreen.d.ts +6 -0
- package/dist/tui/components/WelcomeScreen.d.ts.map +1 -0
- package/dist/tui/components/WelcomeScreen.js +14 -0
- package/dist/tui/components/WelcomeScreen.js.map +1 -0
- package/dist/tui/educational.d.ts +32 -0
- package/dist/tui/educational.d.ts.map +1 -0
- package/dist/tui/educational.js +117 -0
- package/dist/tui/educational.js.map +1 -0
- package/dist/tui/hooks/useAudit.d.ts +24 -0
- package/dist/tui/hooks/useAudit.d.ts.map +1 -0
- package/dist/tui/hooks/useAudit.js +263 -0
- package/dist/tui/hooks/useAudit.js.map +1 -0
- package/dist/tui/hooks/useConfig.d.ts +18 -0
- package/dist/tui/hooks/useConfig.d.ts.map +1 -0
- package/dist/tui/hooks/useConfig.js +85 -0
- package/dist/tui/hooks/useConfig.js.map +1 -0
- package/dist/tui/hooks/useHookStatus.d.ts +10 -0
- package/dist/tui/hooks/useHookStatus.d.ts.map +1 -0
- package/dist/tui/hooks/useHookStatus.js +59 -0
- package/dist/tui/hooks/useHookStatus.js.map +1 -0
- package/dist/tui/hooks/useLogs.d.ts +42 -0
- package/dist/tui/hooks/useLogs.d.ts.map +1 -0
- package/dist/tui/hooks/useLogs.js +105 -0
- package/dist/tui/hooks/useLogs.js.map +1 -0
- package/dist/tui/hooks/useScan.d.ts +39 -0
- package/dist/tui/hooks/useScan.d.ts.map +1 -0
- package/dist/tui/hooks/useScan.js +255 -0
- package/dist/tui/hooks/useScan.js.map +1 -0
- package/dist/tui/hooks/useTerminalSize.d.ts +10 -0
- package/dist/tui/hooks/useTerminalSize.d.ts.map +1 -0
- package/dist/tui/hooks/useTerminalSize.js +27 -0
- package/dist/tui/hooks/useTerminalSize.js.map +1 -0
- package/dist/tui/index.d.ts +2 -0
- package/dist/tui/index.d.ts.map +1 -0
- package/dist/tui/index.js +8 -0
- package/dist/tui/index.js.map +1 -0
- package/dist/tui/screens/AuditPanel.d.ts +7 -0
- package/dist/tui/screens/AuditPanel.d.ts.map +1 -0
- package/dist/tui/screens/AuditPanel.js +467 -0
- package/dist/tui/screens/AuditPanel.js.map +1 -0
- package/dist/tui/screens/LogsPanel.d.ts +2 -0
- package/dist/tui/screens/LogsPanel.d.ts.map +1 -0
- package/dist/tui/screens/LogsPanel.js +127 -0
- package/dist/tui/screens/LogsPanel.js.map +1 -0
- package/dist/tui/screens/OverviewPanel.d.ts +2 -0
- package/dist/tui/screens/OverviewPanel.d.ts.map +1 -0
- package/dist/tui/screens/OverviewPanel.js +84 -0
- package/dist/tui/screens/OverviewPanel.js.map +1 -0
- package/dist/tui/screens/ScanPanel.d.ts +2 -0
- package/dist/tui/screens/ScanPanel.d.ts.map +1 -0
- package/dist/tui/screens/ScanPanel.js +188 -0
- package/dist/tui/screens/ScanPanel.js.map +1 -0
- package/dist/tui/screens/ScanResultsPanel.d.ts +2 -0
- package/dist/tui/screens/ScanResultsPanel.d.ts.map +1 -0
- package/dist/tui/screens/ScanResultsPanel.js +394 -0
- package/dist/tui/screens/ScanResultsPanel.js.map +1 -0
- package/dist/tui/screens/SettingsPanel.d.ts +2 -0
- package/dist/tui/screens/SettingsPanel.d.ts.map +1 -0
- package/dist/tui/screens/SettingsPanel.js +353 -0
- package/dist/tui/screens/SettingsPanel.js.map +1 -0
- package/dist/tui/state.d.ts +35 -0
- package/dist/tui/state.d.ts.map +1 -0
- package/dist/tui/state.js +13 -0
- package/dist/tui/state.js.map +1 -0
- package/dist/tui/theme.d.ts +58 -0
- package/dist/tui/theme.d.ts.map +1 -0
- package/dist/tui/theme.js +80 -0
- package/dist/tui/theme.js.map +1 -0
- package/dist/version.d.ts +2 -0
- package/dist/version.d.ts.map +1 -0
- package/dist/version.js +5 -0
- package/dist/version.js.map +1 -0
- package/hooks/audit-logger.sh +74 -0
- package/hooks/detection-lib.sh +301 -0
- package/hooks/git-pre-commit.sh +195 -0
- package/hooks/git-pre-push.sh +125 -0
- package/hooks/git-safety.sh +152 -0
- package/hooks/security-scanner.sh +527 -0
- package/install.sh +543 -0
- package/package.json +67 -0
- package/patterns/credentials.yaml +317 -0
- package/patterns/dangerous-commands.yaml +167 -0
- package/patterns/pii.yaml +95 -0
- package/patterns/prompt-injection.yaml +131 -0
- package/patterns/supply-chain.yaml +119 -0
- package/rules/AGENTS.md +60 -0
- package/rules/SECURITY-RULES.md +177 -0
- package/rules/claude.md +9 -0
- package/rules/clinerules +29 -0
- package/rules/continuerules +29 -0
- package/rules/copilot-instructions.md +9 -0
- package/rules/cursor-security.mdc +14 -0
- package/rules/gemini.md +9 -0
- package/rules/kiro-security.md +29 -0
- package/rules/roocode-security.md +29 -0
- package/rules/trae-security.md +29 -0
- package/rules/windsurfrules +9 -0
- package/skill/llm-antivirus/SKILL.md +73 -0
- package/skill/llm-antivirus/references/threat-patterns.yaml +82 -0
- package/skill/llm-antivirus/scripts/security-audit.sh +244 -0
- package/uninstall.sh +215 -0
|
@@ -0,0 +1,241 @@
|
|
|
1
|
+
import { existsSync, readdirSync } from 'node:fs';
|
|
2
|
+
import { join, dirname, basename } from 'node:path';
|
|
3
|
+
import { homedir, platform } from 'node:os';
|
|
4
|
+
function expandPath(template) {
|
|
5
|
+
const home = homedir();
|
|
6
|
+
let result = template.replace(/^~\//, home + '/');
|
|
7
|
+
result = result.replace(/%USERPROFILE%/g, home);
|
|
8
|
+
result = result.replace(/%APPDATA%/g, join(home, 'AppData', 'Roaming'));
|
|
9
|
+
return result;
|
|
10
|
+
}
|
|
11
|
+
export const TOOL_DEFINITIONS = [
|
|
12
|
+
{
|
|
13
|
+
name: 'Claude Code',
|
|
14
|
+
accessLevel: 'full',
|
|
15
|
+
description: 'Can read/write any file on this machine',
|
|
16
|
+
paths: {
|
|
17
|
+
darwin: ['~/.claude/'],
|
|
18
|
+
linux: ['~/.claude/'],
|
|
19
|
+
win32: ['%USERPROFILE%\\.claude\\'],
|
|
20
|
+
},
|
|
21
|
+
},
|
|
22
|
+
{
|
|
23
|
+
name: 'Codex CLI',
|
|
24
|
+
accessLevel: 'full',
|
|
25
|
+
description: 'Can read/write any file on this machine',
|
|
26
|
+
paths: {
|
|
27
|
+
darwin: ['~/.codex/', '~/.config/openai/'],
|
|
28
|
+
linux: ['~/.codex/', '~/.config/openai/'],
|
|
29
|
+
win32: ['%USERPROFILE%\\.codex\\', '%APPDATA%\\openai\\'],
|
|
30
|
+
},
|
|
31
|
+
},
|
|
32
|
+
{
|
|
33
|
+
name: 'Aider',
|
|
34
|
+
accessLevel: 'full',
|
|
35
|
+
description: 'Can read/write any file on this machine',
|
|
36
|
+
paths: {
|
|
37
|
+
darwin: ['~/.aider.conf.yml', '~/.aider/'],
|
|
38
|
+
linux: ['~/.aider.conf.yml', '~/.aider/'],
|
|
39
|
+
win32: ['%USERPROFILE%\\.aider\\'],
|
|
40
|
+
},
|
|
41
|
+
},
|
|
42
|
+
{
|
|
43
|
+
name: 'Cursor',
|
|
44
|
+
accessLevel: 'workspace',
|
|
45
|
+
description: 'Can read/write files in open workspace',
|
|
46
|
+
paths: {
|
|
47
|
+
darwin: ['~/.cursor/', '~/Library/Application Support/Cursor/'],
|
|
48
|
+
linux: ['~/.cursor/', '~/.config/Cursor/'],
|
|
49
|
+
win32: ['%USERPROFILE%\\.cursor\\', '%APPDATA%\\Cursor\\'],
|
|
50
|
+
},
|
|
51
|
+
},
|
|
52
|
+
{
|
|
53
|
+
name: 'Windsurf',
|
|
54
|
+
accessLevel: 'workspace',
|
|
55
|
+
description: 'Can read/write files in open workspace',
|
|
56
|
+
paths: {
|
|
57
|
+
darwin: ['~/.codeium/', '~/Library/Application Support/Windsurf/'],
|
|
58
|
+
linux: ['~/.codeium/', '~/.config/Windsurf/'],
|
|
59
|
+
win32: ['%USERPROFILE%\\.codeium\\', '%APPDATA%\\Windsurf\\'],
|
|
60
|
+
},
|
|
61
|
+
},
|
|
62
|
+
{
|
|
63
|
+
name: 'Continue.dev',
|
|
64
|
+
accessLevel: 'workspace',
|
|
65
|
+
description: 'Can read/write files in open workspace',
|
|
66
|
+
paths: {
|
|
67
|
+
darwin: ['~/.continue/'],
|
|
68
|
+
linux: ['~/.continue/'],
|
|
69
|
+
win32: ['%USERPROFILE%\\.continue\\'],
|
|
70
|
+
},
|
|
71
|
+
},
|
|
72
|
+
{
|
|
73
|
+
name: 'Gemini Code Assist',
|
|
74
|
+
accessLevel: 'workspace',
|
|
75
|
+
description: 'Can read/write files in open workspace',
|
|
76
|
+
paths: {
|
|
77
|
+
darwin: ['~/.config/google-cloud/'],
|
|
78
|
+
linux: ['~/.config/google-cloud/'],
|
|
79
|
+
win32: ['%APPDATA%\\google-cloud\\'],
|
|
80
|
+
},
|
|
81
|
+
},
|
|
82
|
+
{
|
|
83
|
+
name: 'GitHub Copilot',
|
|
84
|
+
accessLevel: 'limited',
|
|
85
|
+
description: 'Can see open files and nearby context only',
|
|
86
|
+
paths: {
|
|
87
|
+
darwin: ['~/.config/github-copilot/'],
|
|
88
|
+
linux: ['~/.config/github-copilot/'],
|
|
89
|
+
win32: ['%APPDATA%\\github-copilot\\'],
|
|
90
|
+
},
|
|
91
|
+
},
|
|
92
|
+
{
|
|
93
|
+
name: 'Cline',
|
|
94
|
+
accessLevel: 'workspace',
|
|
95
|
+
description: 'Can read/write files in open workspace',
|
|
96
|
+
paths: {
|
|
97
|
+
darwin: ['~/.vscode/extensions/saoudrizwan.claude-dev-*'],
|
|
98
|
+
linux: ['~/.vscode/extensions/saoudrizwan.claude-dev-*'],
|
|
99
|
+
win32: ['%USERPROFILE%\\.vscode\\extensions\\saoudrizwan.claude-dev-*'],
|
|
100
|
+
},
|
|
101
|
+
},
|
|
102
|
+
{
|
|
103
|
+
name: 'RooCode',
|
|
104
|
+
accessLevel: 'workspace',
|
|
105
|
+
description: 'Can read/write files in open workspace',
|
|
106
|
+
paths: {
|
|
107
|
+
darwin: ['~/.vscode/extensions/rooveterinaryinc.roo-cline-*'],
|
|
108
|
+
linux: ['~/.vscode/extensions/rooveterinaryinc.roo-cline-*'],
|
|
109
|
+
win32: ['%USERPROFILE%\\.vscode\\extensions\\rooveterinaryinc.roo-cline-*'],
|
|
110
|
+
},
|
|
111
|
+
},
|
|
112
|
+
{
|
|
113
|
+
name: 'BLACKBOXAI',
|
|
114
|
+
accessLevel: 'workspace',
|
|
115
|
+
description: 'Can read/write files in open workspace',
|
|
116
|
+
paths: {
|
|
117
|
+
darwin: ['~/.vscode/extensions/blackbox-ai.blackbox-*'],
|
|
118
|
+
linux: ['~/.vscode/extensions/blackbox-ai.blackbox-*'],
|
|
119
|
+
win32: ['%USERPROFILE%\\.vscode\\extensions\\blackbox-ai.blackbox-*'],
|
|
120
|
+
},
|
|
121
|
+
},
|
|
122
|
+
{
|
|
123
|
+
name: 'Qodo Gen',
|
|
124
|
+
accessLevel: 'workspace',
|
|
125
|
+
description: 'Can read/write files in open workspace',
|
|
126
|
+
paths: {
|
|
127
|
+
darwin: ['~/.vscode/extensions/qodo-gen.qodo-gen-*'],
|
|
128
|
+
linux: ['~/.vscode/extensions/qodo-gen.qodo-gen-*'],
|
|
129
|
+
win32: ['%USERPROFILE%\\.vscode\\extensions\\qodo-gen.qodo-gen-*'],
|
|
130
|
+
},
|
|
131
|
+
},
|
|
132
|
+
{
|
|
133
|
+
name: 'Trae IDE',
|
|
134
|
+
accessLevel: 'full',
|
|
135
|
+
description: 'Can read/write any file on this machine',
|
|
136
|
+
paths: {
|
|
137
|
+
darwin: ['~/.trae/'],
|
|
138
|
+
linux: ['~/.trae/'],
|
|
139
|
+
win32: ['%USERPROFILE%\\.trae\\'],
|
|
140
|
+
},
|
|
141
|
+
},
|
|
142
|
+
{
|
|
143
|
+
name: 'Kiro',
|
|
144
|
+
accessLevel: 'workspace',
|
|
145
|
+
description: 'Can read/write files in open workspace',
|
|
146
|
+
paths: {
|
|
147
|
+
darwin: ['~/.kiro/'],
|
|
148
|
+
linux: ['~/.kiro/'],
|
|
149
|
+
win32: ['%USERPROFILE%\\.kiro\\'],
|
|
150
|
+
},
|
|
151
|
+
},
|
|
152
|
+
{
|
|
153
|
+
name: 'Amazon Q',
|
|
154
|
+
accessLevel: 'workspace',
|
|
155
|
+
description: 'Can read/write files in open workspace + AWS integration',
|
|
156
|
+
paths: {
|
|
157
|
+
darwin: ['~/.aws/amazonq/', '~/Library/Application Support/amazon-q/'],
|
|
158
|
+
linux: ['~/.aws/amazonq/', '~/.config/amazon-q/'],
|
|
159
|
+
win32: ['%USERPROFILE%\\.aws\\amazonq\\', '%APPDATA%\\amazon-q\\'],
|
|
160
|
+
},
|
|
161
|
+
},
|
|
162
|
+
{
|
|
163
|
+
name: 'JetBrains AI',
|
|
164
|
+
accessLevel: 'workspace',
|
|
165
|
+
description: 'Can read/write files in open workspace via IDE',
|
|
166
|
+
paths: {
|
|
167
|
+
darwin: ['~/Library/Application Support/JetBrains/'],
|
|
168
|
+
linux: ['~/.config/JetBrains/', '~/.local/share/JetBrains/'],
|
|
169
|
+
win32: ['%APPDATA%\\JetBrains\\'],
|
|
170
|
+
},
|
|
171
|
+
},
|
|
172
|
+
{
|
|
173
|
+
name: 'Augment',
|
|
174
|
+
accessLevel: 'workspace',
|
|
175
|
+
description: 'Can read/write files in open workspace',
|
|
176
|
+
paths: {
|
|
177
|
+
darwin: ['~/.augment/'],
|
|
178
|
+
linux: ['~/.augment/', '~/.config/augment/'],
|
|
179
|
+
win32: ['%USERPROFILE%\\.augment\\', '%APPDATA%\\augment\\'],
|
|
180
|
+
},
|
|
181
|
+
},
|
|
182
|
+
{
|
|
183
|
+
name: 'Bolt',
|
|
184
|
+
accessLevel: 'full',
|
|
185
|
+
description: 'Can read/write any file + terminal access',
|
|
186
|
+
paths: {
|
|
187
|
+
darwin: ['~/.bolt/'],
|
|
188
|
+
linux: ['~/.bolt/', '~/.config/bolt/'],
|
|
189
|
+
win32: ['%USERPROFILE%\\.bolt\\', '%APPDATA%\\bolt\\'],
|
|
190
|
+
},
|
|
191
|
+
},
|
|
192
|
+
];
|
|
193
|
+
function matchGlobPath(expanded) {
|
|
194
|
+
if (!expanded.includes('*')) {
|
|
195
|
+
return existsSync(expanded) ? [expanded] : [];
|
|
196
|
+
}
|
|
197
|
+
// Glob: check parent dir and filter by prefix (assumes wildcard at end of pattern)
|
|
198
|
+
const dir = dirname(expanded);
|
|
199
|
+
const pattern = basename(expanded);
|
|
200
|
+
const prefix = pattern.slice(0, pattern.indexOf('*'));
|
|
201
|
+
try {
|
|
202
|
+
if (!existsSync(dir))
|
|
203
|
+
return [];
|
|
204
|
+
const entries = readdirSync(dir);
|
|
205
|
+
const matches = [];
|
|
206
|
+
for (const entry of entries) {
|
|
207
|
+
if (entry.startsWith(prefix)) {
|
|
208
|
+
matches.push(join(dir, entry));
|
|
209
|
+
}
|
|
210
|
+
}
|
|
211
|
+
return matches;
|
|
212
|
+
}
|
|
213
|
+
catch {
|
|
214
|
+
return [];
|
|
215
|
+
}
|
|
216
|
+
}
|
|
217
|
+
export function detectInstalledTools() {
|
|
218
|
+
const plat = platform();
|
|
219
|
+
const tools = [];
|
|
220
|
+
for (const def of TOOL_DEFINITIONS) {
|
|
221
|
+
const templates = def.paths[plat];
|
|
222
|
+
if (!templates)
|
|
223
|
+
continue;
|
|
224
|
+
const foundPaths = [];
|
|
225
|
+
for (const tpl of templates) {
|
|
226
|
+
const expanded = expandPath(tpl);
|
|
227
|
+
const matches = matchGlobPath(expanded);
|
|
228
|
+
foundPaths.push(...matches);
|
|
229
|
+
}
|
|
230
|
+
if (foundPaths.length > 0) {
|
|
231
|
+
tools.push({
|
|
232
|
+
name: def.name,
|
|
233
|
+
accessLevel: def.accessLevel,
|
|
234
|
+
configPaths: foundPaths,
|
|
235
|
+
description: def.description,
|
|
236
|
+
});
|
|
237
|
+
}
|
|
238
|
+
}
|
|
239
|
+
return tools;
|
|
240
|
+
}
|
|
241
|
+
//# sourceMappingURL=tool-detector.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"tool-detector.js","sourceRoot":"","sources":["../../src/auditor/tool-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAc5C,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAqB;IAChD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,YAAY,CAAC;YACtB,KAAK,EAAE,CAAC,YAAY,CAAC;YACrB,KAAK,EAAE,CAAC,0BAA0B,CAAC;SACpC;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;YAC1C,KAAK,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;YACzC,KAAK,EAAE,CAAC,yBAAyB,EAAE,qBAAqB,CAAC;SAC1D;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,mBAAmB,EAAE,WAAW,CAAC;YAC1C,KAAK,EAAE,CAAC,mBAAmB,EAAE,WAAW,CAAC;YACzC,KAAK,EAAE,CAAC,yBAAyB,CAAC;SACnC;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,YAAY,EAAE,uCAAuC,CAAC;YAC/D,KAAK,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC;YAC1C,KAAK,EAAE,CAAC,0BAA0B,EAAE,qBAAqB,CAAC;SAC3D;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,aAAa,EAAE,yCAAyC,CAAC;YAClE,KAAK,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC;YAC7C,KAAK,EAAE,CAAC,2BAA2B,EAAE,uBAAuB,CAAC;SAC9D;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,cAAc,CAAC;YACxB,KAAK,EAAE,CAAC,cAAc,CAAC;YACvB,KAAK,EAAE,CAAC,4BAA4B,CAAC;SACtC;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,yBAAyB,CAAC;YACnC,KAAK,EAAE,CAAC,yBAAyB,CAAC;YAClC,KAAK,EAAE,CAAC,2BAA2B,CAAC;SACrC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,4CAA4C;QACzD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,2BAA2B,CAAC;YACrC,KAAK,EAAE,CAAC,2BAA2B,CAAC;YACpC,KAAK,EAAE,CAAC,6BAA6B,CAAC;SACvC;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,+CAA+C,CAAC;YACzD,KAAK,EAAE,CAAC,+CAA+C,CAAC;YACxD,KAAK,EAAE,CAAC,8DAA8D,CAAC;SACxE;KACF;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,mDAAmD,CAAC;YAC7D,KAAK,EAAE,CAAC,mDAAmD,CAAC;YAC5D,KAAK,EAAE,CAAC,kEAAkE,CAAC;SAC5E;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,6CAA6C,CAAC;YACvD,KAAK,EAAE,CAAC,6CAA6C,CAAC;YACtD,KAAK,EAAE,CAAC,4DAA4D,CAAC;SACtE;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,0CAA0C,CAAC;YACpD,KAAK,EAAE,CAAC,0CAA0C,CAAC;YACnD,KAAK,EAAE,CAAC,yDAAyD,CAAC;SACnE;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,UAAU,CAAC;YACpB,KAAK,EAAE,CAAC,UAAU,CAAC;YACnB,KAAK,EAAE,CAAC,wBAAwB,CAAC;SAClC;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,UAAU,CAAC;YACpB,KAAK,EAAE,CAAC,UAAU,CAAC;YACnB,KAAK,EAAE,CAAC,wBAAwB,CAAC;SAClC;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,0DAA0D;QACvE,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;YACtE,KAAK,EAAE,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;YACjD,KAAK,EAAE,CAAC,gCAAgC,EAAE,uBAAuB,CAAC;SACnE;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,gDAAgD;QAC7D,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,0CAA0C,CAAC;YACpD,KAAK,EAAE,CAAC,sBAAsB,EAAE,2BAA2B,CAAC;YAC5D,KAAK,EAAE,CAAC,wBAAwB,CAAC;SAClC;KACF;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,aAAa,CAAC;YACvB,KAAK,EAAE,CAAC,aAAa,EAAE,oBAAoB,CAAC;YAC5C,KAAK,EAAE,CAAC,2BAA2B,EAAE,sBAAsB,CAAC;SAC7D;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,2CAA2C;QACxD,KAAK,EAAE;YACL,MAAM,EAAE,CAAC,UAAU,CAAC;YACpB,KAAK,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC;YACtC,KAAK,EAAE,CAAC,wBAAwB,EAAE,mBAAmB,CAAC;SACvD;KACF;CACF,CAAC;AAEF,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,mFAAmF;IACnF,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,IAAI,GAAG,QAAQ,EAAkC,CAAC;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS;YAAE,SAAS;QAEzB,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,WAAW,EAAE,UAAU;gBACvB,WAAW,EAAE,GAAG,CAAC,WAAW;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
import type { ScanFinding, ScanResult, Severity } from '../rules/types.js';
|
|
2
|
+
import type { MCPServer } from './mcp-detector.js';
|
|
3
|
+
import type { VSCodeExtension } from './vscode-extension-scanner.js';
|
|
4
|
+
import type { DetectedCLI } from './cli-detector.js';
|
|
5
|
+
import type { EnvExposure } from './env-auditor.js';
|
|
6
|
+
export type AccessLevel = 'full' | 'workspace' | 'limited';
|
|
7
|
+
export interface AITool {
|
|
8
|
+
name: string;
|
|
9
|
+
accessLevel: AccessLevel;
|
|
10
|
+
configPaths: string[];
|
|
11
|
+
description: string;
|
|
12
|
+
}
|
|
13
|
+
export interface ToolExposure {
|
|
14
|
+
tool: AITool;
|
|
15
|
+
exposedFindings: ScanFinding[];
|
|
16
|
+
counts: Record<Severity, number>;
|
|
17
|
+
}
|
|
18
|
+
export interface AuditResult {
|
|
19
|
+
tools: AITool[];
|
|
20
|
+
exposures: ToolExposure[];
|
|
21
|
+
scanResult: ScanResult;
|
|
22
|
+
totalExposed: number;
|
|
23
|
+
durationMs: number;
|
|
24
|
+
mcpServers: MCPServer[];
|
|
25
|
+
mcpConfigFiles: string[];
|
|
26
|
+
vsCodeExtensions: VSCodeExtension[] | null;
|
|
27
|
+
detectedCLIs: DetectedCLI[];
|
|
28
|
+
systemFindings: ScanFinding[];
|
|
29
|
+
envExposures: EnvExposure[];
|
|
30
|
+
}
|
|
31
|
+
//# sourceMappingURL=types.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auditor/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3D,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IAC3C,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,cAAc,EAAE,WAAW,EAAE,CAAC;IAC9B,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auditor/types.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vscode-extension-scanner.d.ts","sourceRoot":"","sources":["../../src/auditor/vscode-extension-scanner.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB;AAgCD,wBAAgB,oBAAoB,IAAI,eAAe,EAAE,GAAG,IAAI,CAwB/D"}
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
import { execFileSync } from 'node:child_process';
|
|
2
|
+
const KNOWN_AI_EXTENSIONS = new Map([
|
|
3
|
+
['github.copilot', 'GitHub Copilot'],
|
|
4
|
+
['github.copilot-chat', 'GitHub Copilot Chat'],
|
|
5
|
+
['saoudrizwan.claude-dev', 'Cline'],
|
|
6
|
+
['rooveterinaryinc.roo-cline', 'RooCode'],
|
|
7
|
+
['continue.continue', 'Continue.dev'],
|
|
8
|
+
['blackbox-ai.blackbox', 'BLACKBOXAI'],
|
|
9
|
+
['qodo-gen.qodo-gen', 'Qodo Gen'],
|
|
10
|
+
['amazonwebservices.amazon-q-vscode', 'Amazon Q'],
|
|
11
|
+
['sourcegraph.cody-ai', 'Sourcegraph Cody'],
|
|
12
|
+
['cursor.cursor', 'Cursor'],
|
|
13
|
+
['google.gcp-vscode', 'Gemini Code Assist'],
|
|
14
|
+
['tabnine.tabnine-vscode', 'Tabnine'],
|
|
15
|
+
]);
|
|
16
|
+
const EXTENSION_RISK = new Map([
|
|
17
|
+
['github.copilot', { level: 'low', reason: 'Limited to open file context' }],
|
|
18
|
+
['github.copilot-chat', { level: 'medium', reason: 'Can read workspace files via chat' }],
|
|
19
|
+
['saoudrizwan.claude-dev', { level: 'high', reason: 'Full workspace file read/write + terminal access' }],
|
|
20
|
+
['rooveterinaryinc.roo-cline', { level: 'high', reason: 'Full workspace file read/write + terminal access' }],
|
|
21
|
+
['continue.continue', { level: 'medium', reason: 'Workspace file access via context providers' }],
|
|
22
|
+
['blackbox-ai.blackbox', { level: 'medium', reason: 'Workspace file access for code completion' }],
|
|
23
|
+
['qodo-gen.qodo-gen', { level: 'medium', reason: 'Workspace file access for test generation' }],
|
|
24
|
+
['amazonwebservices.amazon-q-vscode', { level: 'medium', reason: 'Workspace file access + AWS integration' }],
|
|
25
|
+
['sourcegraph.cody-ai', { level: 'medium', reason: 'Full codebase indexing + workspace access' }],
|
|
26
|
+
['cursor.cursor', { level: 'medium', reason: 'Workspace file access' }],
|
|
27
|
+
['google.gcp-vscode', { level: 'medium', reason: 'Workspace file access + GCP integration' }],
|
|
28
|
+
['tabnine.tabnine-vscode', { level: 'low', reason: 'Limited to code completion context' }],
|
|
29
|
+
]);
|
|
30
|
+
export function scanVSCodeExtensions() {
|
|
31
|
+
let output;
|
|
32
|
+
try {
|
|
33
|
+
output = execFileSync('code', ['--list-extensions'], { timeout: 10000, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
|
|
34
|
+
}
|
|
35
|
+
catch {
|
|
36
|
+
return null; // VS Code not available
|
|
37
|
+
}
|
|
38
|
+
const installed = new Set(output
|
|
39
|
+
.split('\n')
|
|
40
|
+
.map((line) => line.trim().toLowerCase())
|
|
41
|
+
.filter(Boolean));
|
|
42
|
+
const found = [];
|
|
43
|
+
for (const [id, name] of KNOWN_AI_EXTENSIONS) {
|
|
44
|
+
if (installed.has(id.toLowerCase())) {
|
|
45
|
+
const risk = EXTENSION_RISK.get(id.toLowerCase()) ?? { level: 'medium', reason: 'Unknown AI extension' };
|
|
46
|
+
found.push({ id, name, riskLevel: risk.level, riskReason: risk.reason });
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
return found;
|
|
50
|
+
}
|
|
51
|
+
//# sourceMappingURL=vscode-extension-scanner.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vscode-extension-scanner.js","sourceRoot":"","sources":["../../src/auditor/vscode-extension-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAiB;IAClD,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACpC,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IAC9C,CAAC,wBAAwB,EAAE,OAAO,CAAC;IACnC,CAAC,4BAA4B,EAAE,SAAS,CAAC;IACzC,CAAC,mBAAmB,EAAE,cAAc,CAAC;IACrC,CAAC,sBAAsB,EAAE,YAAY,CAAC;IACtC,CAAC,mBAAmB,EAAE,UAAU,CAAC;IACjC,CAAC,mCAAmC,EAAE,UAAU,CAAC;IACjD,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;IAC3C,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAC3C,CAAC,wBAAwB,EAAE,SAAS,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAsE,IAAI,GAAG,CAAC;IAChG,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC5E,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACzF,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IACzG,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IAC7G,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IACjG,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAClG,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC/F,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IAC7G,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IACjG,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACvE,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IAC7F,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;CAC3F,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB;IAClC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,wBAAwB;IACvC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,MAAM;SACH,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SACxC,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IAEF,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;QAC7C,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAiB,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;YAClH,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
|
package/dist/cli.d.ts
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}
|
package/dist/cli.js
ADDED
|
@@ -0,0 +1,159 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
import { Command, Option } from 'commander';
|
|
3
|
+
import chalk from 'chalk';
|
|
4
|
+
import { runScan } from './commands/scan.js';
|
|
5
|
+
import { runInit } from './commands/init.js';
|
|
6
|
+
import { runAudit } from './commands/audit.js';
|
|
7
|
+
import { isProtectionEnabled, setProtectionEnabled, addAllowlistPath, disableRule } from './config.js';
|
|
8
|
+
import { allRules } from './rules/index.js';
|
|
9
|
+
import { detectInstalledTools } from './auditor/tool-detector.js';
|
|
10
|
+
import { existsSync } from 'node:fs';
|
|
11
|
+
import { join } from 'node:path';
|
|
12
|
+
import { homedir } from 'node:os';
|
|
13
|
+
import { VERSION } from './version.js';
|
|
14
|
+
// Launch TUI when invoked with no arguments
|
|
15
|
+
const args = process.argv.slice(2);
|
|
16
|
+
if (args.length === 0) {
|
|
17
|
+
import('./tui/index.js')
|
|
18
|
+
.then(({ launchTUI }) => launchTUI())
|
|
19
|
+
.catch((err) => {
|
|
20
|
+
console.error(`Fatal: ${err.message}`);
|
|
21
|
+
process.exitCode = 1;
|
|
22
|
+
});
|
|
23
|
+
}
|
|
24
|
+
else {
|
|
25
|
+
const program = new Command();
|
|
26
|
+
program
|
|
27
|
+
.name('chainwall')
|
|
28
|
+
.description('Security scanner for exposed secrets, crypto keys, and dangerous patterns.\n\nRun with no arguments to launch the interactive TUI.')
|
|
29
|
+
.version(VERSION)
|
|
30
|
+
.addHelpText('after', `
|
|
31
|
+
Examples:
|
|
32
|
+
$ chainwall Launch interactive TUI
|
|
33
|
+
$ chainwall scan Full security scan (home + credentials)
|
|
34
|
+
$ chainwall scan ~/project Scan a specific directory
|
|
35
|
+
$ chainwall scan --system System targets only (credentials, keys)
|
|
36
|
+
$ chainwall audit Targeted system audit (~3s)
|
|
37
|
+
$ chainwall audit ~/project Scan a specific directory + system audit
|
|
38
|
+
$ chainwall audit --deep Full home directory scan (slow)
|
|
39
|
+
$ chainwall watch Watch current dir for secrets in real-time
|
|
40
|
+
$ chainwall init Install hooks in current project`);
|
|
41
|
+
program
|
|
42
|
+
.command('scan')
|
|
43
|
+
.description('Scan a directory for security findings')
|
|
44
|
+
.argument('[dir]', 'Directory to scan', '.')
|
|
45
|
+
.option('--json', 'Output results as JSON (for CI pipelines)')
|
|
46
|
+
.option('--crypto-only', 'Only run crypto/web3 rules')
|
|
47
|
+
.option('--verbose', 'Show match details and descriptions')
|
|
48
|
+
.option('--system', 'Scan known credential locations across ~/')
|
|
49
|
+
.addOption(new Option('--format <type>', 'Output format').choices(['text', 'json', 'sarif']).default('text'))
|
|
50
|
+
.option('--include-tests', 'Include test directories in scan (normally skipped)')
|
|
51
|
+
.option('--grouped', 'Group findings by category instead of severity')
|
|
52
|
+
.action(async (dir, options) => {
|
|
53
|
+
await runScan(dir, options);
|
|
54
|
+
});
|
|
55
|
+
program
|
|
56
|
+
.command('init')
|
|
57
|
+
.description('Initialize ChainWall hooks in a project')
|
|
58
|
+
.argument('[dir]', 'Target directory', '.')
|
|
59
|
+
.action((dir) => {
|
|
60
|
+
runInit(dir);
|
|
61
|
+
});
|
|
62
|
+
program
|
|
63
|
+
.command('audit')
|
|
64
|
+
.description('Map AI tool permissions and cross-reference with exposed secrets')
|
|
65
|
+
.argument('[dir]', 'Directory to scan')
|
|
66
|
+
.option('--json', 'Output results as JSON')
|
|
67
|
+
.addOption(new Option('--format <type>', 'Output format').choices(['text', 'json', 'sarif']).default('text'))
|
|
68
|
+
.option('--remediate', 'Interactive remediation after audit')
|
|
69
|
+
.option('--deep', 'Include full recursive home directory scan (slow)')
|
|
70
|
+
.action(async (dir, options) => {
|
|
71
|
+
await runAudit(dir ?? '.', options);
|
|
72
|
+
});
|
|
73
|
+
program
|
|
74
|
+
.command('watch')
|
|
75
|
+
.description('Watch a directory for file changes and scan in real-time')
|
|
76
|
+
.argument('[dir]', 'Directory to watch', '.')
|
|
77
|
+
.option('--verbose', 'Show match details')
|
|
78
|
+
.option('--json', 'Output findings as JSON lines')
|
|
79
|
+
.action(async (dir, options) => {
|
|
80
|
+
const { runWatch } = await import('./commands/watch.js');
|
|
81
|
+
await runWatch(dir, options);
|
|
82
|
+
});
|
|
83
|
+
program
|
|
84
|
+
.command('mcp')
|
|
85
|
+
.description('Start MCP security server (stdio transport)')
|
|
86
|
+
.action(async () => {
|
|
87
|
+
const { startMCPServer } = await import('./mcp-server/index.js');
|
|
88
|
+
await startMCPServer();
|
|
89
|
+
});
|
|
90
|
+
program
|
|
91
|
+
.command('enable')
|
|
92
|
+
.description('Enable real-time protection (hooks block threats)')
|
|
93
|
+
.action(() => {
|
|
94
|
+
setProtectionEnabled(true);
|
|
95
|
+
console.log(chalk.green('\u2713 Real-time protection enabled'));
|
|
96
|
+
});
|
|
97
|
+
program
|
|
98
|
+
.command('disable')
|
|
99
|
+
.description('Disable real-time protection (hooks pass through)')
|
|
100
|
+
.action(() => {
|
|
101
|
+
setProtectionEnabled(false);
|
|
102
|
+
console.log(chalk.yellow('\u26a0 Real-time protection disabled'));
|
|
103
|
+
console.log(' Manual scans (chainwall scan/audit) still work.');
|
|
104
|
+
console.log(` Run ${chalk.bold('chainwall enable')} to re-enable.`);
|
|
105
|
+
});
|
|
106
|
+
program
|
|
107
|
+
.command('allow <path>')
|
|
108
|
+
.description('Add a file path to the global allowlist, or disable a rule')
|
|
109
|
+
.option('--rule', 'Treat the argument as a rule ID instead of a file path')
|
|
110
|
+
.action((pathOrRule, options) => {
|
|
111
|
+
const value = pathOrRule.trim();
|
|
112
|
+
if (!value) {
|
|
113
|
+
console.error('chainwall: value cannot be empty');
|
|
114
|
+
process.exitCode = 1;
|
|
115
|
+
return;
|
|
116
|
+
}
|
|
117
|
+
if (options.rule) {
|
|
118
|
+
disableRule(value);
|
|
119
|
+
console.log(chalk.green(`\u2713 Rule disabled: ${value}`));
|
|
120
|
+
}
|
|
121
|
+
else {
|
|
122
|
+
addAllowlistPath(value);
|
|
123
|
+
console.log(chalk.green(`\u2713 Path allowlisted: ${value}`));
|
|
124
|
+
}
|
|
125
|
+
});
|
|
126
|
+
program
|
|
127
|
+
.command('status')
|
|
128
|
+
.description('Show protection status')
|
|
129
|
+
.action(() => {
|
|
130
|
+
const enabled = isProtectionEnabled();
|
|
131
|
+
const tools = detectInstalledTools();
|
|
132
|
+
const hooksInstalled = existsSync(join(process.cwd(), '.llm-av'));
|
|
133
|
+
const configPath = join(homedir(), '.llm-av', 'config.json');
|
|
134
|
+
console.log('');
|
|
135
|
+
console.log(chalk.bold('ChainWall Status'));
|
|
136
|
+
if (enabled) {
|
|
137
|
+
console.log(` Protection: ${chalk.green('\u2713 ON')}`);
|
|
138
|
+
}
|
|
139
|
+
else {
|
|
140
|
+
console.log(` Protection: ${chalk.yellow('\u2717 OFF')}`);
|
|
141
|
+
}
|
|
142
|
+
console.log(` Rules: ${allRules.length} patterns loaded`);
|
|
143
|
+
if (tools.length > 0) {
|
|
144
|
+
const names = tools.map((t) => t.name).join(', ');
|
|
145
|
+
console.log(` AI tools: ${tools.length} detected (${names})`);
|
|
146
|
+
}
|
|
147
|
+
else {
|
|
148
|
+
console.log(' AI tools: none detected');
|
|
149
|
+
}
|
|
150
|
+
console.log(` Hooks: ${hooksInstalled ? chalk.green('\u2713 installed in current project') : chalk.yellow('\u2717 not installed')}`);
|
|
151
|
+
console.log(` Config: ${configPath}`);
|
|
152
|
+
console.log('');
|
|
153
|
+
});
|
|
154
|
+
program.parseAsync().catch((err) => {
|
|
155
|
+
console.error(`Fatal: ${err.message}`);
|
|
156
|
+
process.exitCode = 1;
|
|
157
|
+
});
|
|
158
|
+
}
|
|
159
|
+
//# sourceMappingURL=cli.js.map
|
package/dist/cli.js.map
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvG,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,4CAA4C;AAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;IACtB,MAAM,CAAC,gBAAgB,CAAC;SACrB,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC;SACpC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;QACpB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC;KAAM,CAAC;IACN,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,WAAW,CAAC;SACjB,WAAW,CAAC,oIAAoI,CAAC;SACjJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;oEAU0C,CAAC,CAAC;IAEpE,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wCAAwC,CAAC;SACrD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,CAAC;SAC3C,MAAM,CAAC,QAAQ,EAAE,2CAA2C,CAAC;SAC7D,MAAM,CAAC,eAAe,EAAE,4BAA4B,CAAC;SACrD,MAAM,CAAC,WAAW,EAAE,qCAAqC,CAAC;SAC1D,MAAM,CAAC,UAAU,EAAE,2CAA2C,CAAC;SAC/D,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SAC5G,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,CAAC;SAChF,MAAM,CAAC,WAAW,EAAE,gDAAgD,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,OAAkJ,EAAE,EAAE;QAChL,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yCAAyC,CAAC;SACtD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,CAAC;SAC1C,MAAM,CAAC,CAAC,GAAY,EAAE,EAAE;QACvB,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;SACtC,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SAC5G,MAAM,CAAC,aAAa,EAAE,qCAAqC,CAAC;SAC5D,MAAM,CAAC,QAAQ,EAAE,mDAAmD,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,GAAuB,EAAE,OAAiF,EAAE,EAAE;QAC3H,MAAM,QAAQ,CAAC,GAAG,IAAI,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,0DAA0D,CAAC;SACvE,QAAQ,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,CAAC;SAC5C,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,+BAA+B,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,OAA8C,EAAE,EAAE;QAC5E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACzD,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,6CAA6C,CAAC;SAC1D,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACjE,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,GAAG,EAAE;QACX,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,GAAG,EAAE;QACX,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,4DAA4D,CAAC;SACzE,MAAM,CAAC,QAAQ,EAAE,wDAAwD,CAAC;SAC1E,MAAM,CAAC,CAAC,UAAkB,EAAE,OAA2B,EAAE,EAAE;QAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,WAAW,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAE7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,CAAC,MAAM,kBAAkB,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,MAAM,cAAc,KAAK,GAAG,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC5I,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEL,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA0JtF"}
|