claude-permissions-manager 0.6.0 → 0.9.0

package/README.md

@@ -70,12 +70,54 @@ cpm mode acceptEdits --project ~/my-project --scope project
 ### Flags
 
 ```
---root <dir>   Override scan root (default: ~)
---depth <n>    Max directory depth for scanning (default: 8)
---json         Output as JSON (list, show, audit, diff, export)
---no-global    Skip user/managed global settings (list, audit, export)
+--root <dir>       Override scan root (default: ~)
+--depth <n>        Max directory depth for scanning (default: 8)
+--json             Output as JSON (list, show, audit, diff, export)
+--no-global        Skip user/managed global settings (list, audit, export, ui)
+--exit-code        Exit 1 if issues found, 2 if critical issues (audit only — useful in CI)
+--dry-run          Preview what would be written without modifying files (allow, deny, ask, mode, reset --all)
+--format <fmt>     Output format: json|csv (export only, default: json)
+--output <file>    Write output to file instead of stdout (export only)
 ```
 
+#### Exit codes
+
+All commands exit `0` on success and `1` on error (missing `.claude` directory, invalid arguments, file I/O failure).
+
+`cpm audit --exit-code` uses additional codes:
+
+| Code | Meaning |
+|------|---------|
+| `0`  | No issues found |
+| `1`  | Warnings found (high, medium, or low severity) |
+| `2`  | Critical issues found |
+
+#### Path arguments
+
+`cpm` does **not** expand a bare `~` — use `~/` (with trailing slash) or a full path:
+
+```bash
+cpm show ~/my-project   # ✓ works
+cpm show ~              # ✗ won't expand to home directory
+```
+
+### JSON output format
+
+When using `--json`, allow/deny/ask rules are emitted as objects with `rule` and `scope` fields (consistent across `list`, `show`, `diff`, and `export`):
+
+```json
+{
+  "allow": [
+    { "rule": "Bash(npm run *)", "scope": "project" },
+    { "rule": "Read", "scope": "user" }
+  ]
+}
+```
+
+`scope` is one of `"managed"`, `"user"`, `"project"`, or `"local"`.
+
+`cpm diff --json` additionally wraps rule arrays into `onlyInA`, `onlyInB`, and `inBoth` sub-keys. `inBoth` entries are plain strings (the scope is the same in both projects by definition).
+
 ## Shell completion
 
 ```bash
@@ -98,12 +140,17 @@ Run `cpm` (or `cpm ui`) for the interactive terminal UI:
 - `d` — diff two projects
 - `q` — quit
 
+In the audit screen:
+- `↑↓` / `j`/`k` — navigate warnings
+- `Enter` — jump to that project's detail screen (back returns to audit)
+- `←` / `Esc` / `q` — back to list
+
 In project detail (permissions tab):
 - `1` / `2` / `3` — switch tabs (permissions / MCP / warnings)
 - `j`/`k` — move cursor through rules
 - `a` — add allow rule, `d` — add deny rule, `s` — add ask rule
 - `x` — delete selected rule
-- `←` / `Esc` / `q` — back to list
+- `←` / `Esc` / `q` — back
 
 ## What it reads
 
@@ -126,4 +173,4 @@ Values from all scopes are merged. Deny rules at any scope win absolutely.
 
 ## Requirements
 
-Node.js ≥ 18
+Node.js ≥ 20

package/dist/cli.js

@@ -4,11 +4,16 @@ import { listCommand } from "./commands/list.js";
 import { showCommand } from "./commands/show.js";
 import { auditCommand } from "./commands/audit.js";
 import { homeDir } from "./utils/paths.js";
+import { PermissionModeSchema } from "./core/schemas.js";
+function parseDepth(raw, fallback = 8) {
+    const n = parseInt(raw, 10);
+    return Number.isFinite(n) && n >= 0 ? n : fallback;
+}
 const program = new Command();
 program
     .name("cpm")
     .description("Claude Permissions Manager — discover and manage Claude Code permissions")
-    .version("0.6.0");
+    .version("0.9.0");
 // Default action: TUI when TTY, list otherwise
 program.action(async () => {
     // If any non-option args were passed, they didn't match a known subcommand
@@ -19,10 +24,10 @@ program.action(async () => {
     }
     if (process.stdout.isTTY) {
         const { uiCommand } = await import("./commands/ui.js");
-        await uiCommand({ root: homeDir() });
+        await uiCommand({ root: homeDir(), maxDepth: 8, includeGlobal: true });
     }
     else {
-        await listCommand({ root: homeDir() });
+        await listCommand({ root: homeDir(), maxDepth: 8, includeGlobal: true });
     }
 });
 program
@@ -30,11 +35,13 @@ program
     .description("Launch interactive TUI")
     .option("--root <dir>", "Root directory to scan from", homeDir())
     .option("--depth <n>", "Max scan depth", "8")
+    .option("--no-global", "Skip user and managed global settings")
     .action(async (opts) => {
     const { uiCommand } = await import("./commands/ui.js");
     await uiCommand({
         root: opts.root,
-        maxDepth: parseInt(opts.depth, 10),
+        maxDepth: parseDepth(opts.depth),
+        includeGlobal: opts.global !== false,
     });
 });
 program
@@ -47,7 +54,7 @@ program
     .action(async (opts) => {
     await listCommand({
         root: opts.root,
-        maxDepth: parseInt(opts.depth, 10),
+        maxDepth: parseDepth(opts.depth),
         json: opts.json,
         includeGlobal: opts.global !== false,
     });
@@ -66,12 +73,14 @@ program
     .option("--depth <n>", "Max scan depth", "8")
     .option("--json", "Output as JSON")
     .option("--no-global", "Skip user and managed global settings")
+    .option("--exit-code", "Exit with code 1 (issues found) or 2 (critical issues) for CI use")
     .action(async (opts) => {
     await auditCommand({
         root: opts.root,
-        maxDepth: parseInt(opts.depth, 10),
+        maxDepth: parseDepth(opts.depth),
         json: opts.json,
         includeGlobal: opts.global !== false,
+        exitCode: opts.exitCode,
     });
 });
 program
@@ -87,27 +96,30 @@ program
     .description('Add a rule to the allow list (e.g. cpm allow "Bash(npm run *)")')
     .option("--scope <scope>", "Settings scope: local|project|user (default: local)", "local")
     .option("--project <path>", "Project path for local/project scope (default: cwd)")
+    .option("--dry-run", "Preview what would be written without modifying any files")
     .action(async (rule, opts) => {
     const { allowCommand } = await import("./commands/manage.js");
-    await allowCommand(rule, opts);
+    await allowCommand(rule, { ...opts, dryRun: opts.dryRun });
 });
 program
     .command("deny <rule>")
     .description('Add a rule to the deny list (e.g. cpm deny "Read(**/.env)")')
     .option("--scope <scope>", "Settings scope: local|project|user (default: local)", "local")
     .option("--project <path>", "Project path for local/project scope (default: cwd)")
+    .option("--dry-run", "Preview what would be written without modifying any files")
     .action(async (rule, opts) => {
     const { denyCommand } = await import("./commands/manage.js");
-    await denyCommand(rule, opts);
+    await denyCommand(rule, { ...opts, dryRun: opts.dryRun });
 });
 program
     .command("ask <rule>")
     .description('Add a rule to the ask list (always prompt for confirmation)')
     .option("--scope <scope>", "Settings scope: local|project|user (default: local)", "local")
     .option("--project <path>", "Project path for local/project scope (default: cwd)")
+    .option("--dry-run", "Preview what would be written without modifying any files")
     .action(async (rule, opts) => {
     const { askCommand } = await import("./commands/manage.js");
-    await askCommand(rule, opts);
+    await askCommand(rule, { ...opts, dryRun: opts.dryRun });
 });
 program
     .command("reset [rule]")
@@ -115,11 +127,12 @@ program
     .option("--scope <scope>", "Settings scope: local|project|user (default: local)", "local")
     .option("--project <path>", "Project path for local/project scope (default: cwd)")
     .option("--all", "Clear all permission rules")
-    .option("--yes", "Skip confirmation prompt")
+    .option("--yes", "Skip confirmation prompt (with --all)")
+    .option("--dry-run", "Preview what would be cleared without modifying any files (with --all)")
     .action(async (rule, opts) => {
     const { resetRuleCommand, resetAllCommand } = await import("./commands/manage.js");
     if (opts.all) {
-        await resetAllCommand(opts);
+        await resetAllCommand({ ...opts, dryRun: opts.dryRun });
     }
     else if (rule) {
         await resetRuleCommand(rule, opts);
@@ -131,12 +144,13 @@ program
 });
 program
     .command("mode <mode>")
-    .description("Set defaultMode: default|acceptEdits|plan|auto|dontAsk|bypassPermissions")
+    .description(`Set defaultMode: ${PermissionModeSchema.options.join("|")}`)
     .option("--scope <scope>", "Settings scope: local|project|user (default: local)", "local")
     .option("--project <path>", "Project path for local/project scope (default: cwd)")
+    .option("--dry-run", "Preview what would be written without modifying any files")
     .action(async (mode, opts) => {
     const { modeCommand } = await import("./commands/manage.js");
-    await modeCommand(mode, opts);
+    await modeCommand(mode, { ...opts, dryRun: opts.dryRun });
 });
 program
     .command("export")
@@ -150,7 +164,7 @@ program
     const { exportCommand } = await import("./commands/export.js");
     await exportCommand({
         root: opts.root,
-        maxDepth: parseInt(opts.depth, 10),
+        maxDepth: parseDepth(opts.depth),
         format: opts.format,
         output: opts.output,
         includeGlobal: opts.global !== false,

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,KAAK,CAAC;KACX,WAAW,CAAC,0EAA0E,CAAC;KACvF,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,+CAA+C;AAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;IACxB,2EAA2E;IAC3E,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,WAAW,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC;QAClG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACvD,MAAM,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,OAAO;KACJ,OAAO,CAAC,IAAI,CAAC;KACb,WAAW,CAAC,wBAAwB,CAAC;KACrC,MAAM,CAAC,cAAc,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC;KAChE,MAAM,CAAC,aAAa,EAAE,gBAAgB,EAAE,GAAG,CAAC;KAC5C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC;QACd,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;KACnC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,2DAA2D,CAAC;KACxE,MAAM,CAAC,cAAc,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC;KAChE,MAAM,CAAC,aAAa,EAAE,gBAAgB,EAAE,GAAG,CAAC;KAC5C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,aAAa,EAAE,uCAAuC,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,WAAW,CAAC;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAClC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK;KACrC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,wDAAwD,CAAC;KACrE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,4DAA4D,CAAC;KACzE,MAAM,CAAC,cAAc,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC;KAChE,MAAM,CAAC,aAAa,EAAE,gBAAgB,EAAE,GAAG,CAAC;KAC5C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,aAAa,EAAE,uCAAuC,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,YAAY,CAAC;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAClC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK;KACrC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,sBAAsB,CAAC;KAC/B,WAAW,CAAC,oDAAoD,CAAC;KACjE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACnC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,iEAAiE,CAAC;KAC9E,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,EAAE,OAAO,CAAC;KACzF,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,EAAE,OAAO,CAAC;KACzF,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7D,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,EAAE,OAAO,CAAC;KACzF,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC5D,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,2DAA2D,CAAC;KACxE,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,EAAE,OAAO,CAAC;KACzF,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;KACjF,MAAM,CAAC,OAAO,EAAE,4BAA4B,CAAC;KAC7C,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;SAAM,IAAI,IAAI,EAAE,CAAC;QAChB,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,0EAA0E,CAAC;KACvF,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,EAAE,OAAO,CAAC;KACzF,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7D,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,cAAc,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC;KAChE,MAAM,CAAC,aAAa,EAAE,gBAAgB,EAAE,GAAG,CAAC;KAC5C,MAAM,CAAC,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,CAAC;KAC3D,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;KAC5D,MAAM,CAAC,aAAa,EAAE,uCAAuC,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC/D,MAAM,aAAa,CAAC;QAClB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,aAAa,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK;KACrC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,kBAAkB,EAAE,2CAA2C,CAAC;KACvE,MAAM,CAAC,iBAAiB,EAAE,uDAAuD,EAAE,SAAS,CAAC;KAC7F,MAAM,CAAC,mBAAmB,EAAE,mDAAmD,EAAE,MAAM,CAAC;KACxF,MAAM,CAAC,eAAe,EAAE,sBAAsB,CAAC;KAC/C,MAAM,CAAC,OAAO,EAAE,+CAA+C,CAAC;KAChE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,oBAAoB,CAAC;KAC7B,WAAW,CAAC,oEAAoE,CAAC;KACjF,WAAW,CAAC,OAAO,EAAE,iGAAiG,CAAC;KACvH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;IACtB,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACvE,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC1C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,SAAS,UAAU,CAAC,GAAW,EAAE,QAAQ,GAAG,CAAC;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrD,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,KAAK,CAAC;KACX,WAAW,CAAC,0EAA0E,CAAC;KACvF,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,+CAA+C;AAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;IACxB,2EAA2E;IAC3E,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,WAAW,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC;QAClG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACvD,MAAM,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,OAAO;KACJ,OAAO,CAAC,IAAI,CAAC;KACb,WAAW,CAAC,wBAAwB,CAAC;KACrC,MAAM,CAAC,cAAc,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC;KAChE,MAAM,CAAC,aAAa,EAAE,gBAAgB,EAAE,GAAG,CAAC;KAC5C,MAAM,CAAC,aAAa,EAAE,uCAAuC,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC;QACd,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,aAAa,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK;KACrC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,2DAA2D,CAAC;KACxE,MAAM,CAAC,cAAc,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC;KAChE,MAAM,CAAC,aAAa,EAAE,gBAAgB,EAAE,GAAG,CAAC;KAC5C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,aAAa,EAAE,uCAAuC,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,WAAW,CAAC;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK;KACrC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,wDAAwD,CAAC;KACrE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,4DAA4D,CAAC;KACzE,MAAM,CAAC,cAAc,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC;KAChE,MAAM,CAAC,aAAa,EAAE,gBAAgB,EAAE,GAAG,CAAC;KAC5C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,aAAa,EAAE,uCAAuC,CAAC;KAC9D,MAAM,CAAC,aAAa,EAAE,mEAAmE,CAAC;KAC1F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,YAAY,CAAC;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK;QACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,sBAAsB,CAAC;KAC/B,WAAW,CAAC,oDAAoD,CAAC;KACjE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACnC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,iEAAiE,CAAC;KAC9E,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,EAAE,OAAO,CAAC;KACzF,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;KACjF,MAAM,CAAC,WAAW,EAAE,2DAA2D,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,EAAE,OAAO,CAAC;KACzF,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;KACjF,MAAM,CAAC,WAAW,EAAE,2DAA2D,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7D,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,EAAE,OAAO,CAAC;KACzF,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;KACjF,MAAM,CAAC,WAAW,EAAE,2DAA2D,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC5D,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,2DAA2D,CAAC;KACxE,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,EAAE,OAAO,CAAC;KACzF,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;KACjF,MAAM,CAAC,OAAO,EAAE,4BAA4B,CAAC;KAC7C,MAAM,CAAC,OAAO,EAAE,uCAAuC,CAAC;KACxD,MAAM,CAAC,WAAW,EAAE,wEAAwE,CAAC;KAC7F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,eAAe,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;SAAM,IAAI,IAAI,EAAE,CAAC;QAChB,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,oBAAoB,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;KACzE,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,EAAE,OAAO,CAAC;KACzF,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;KACjF,MAAM,CAAC,WAAW,EAAE,2DAA2D,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAC3B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7D,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,cAAc,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC;KAChE,MAAM,CAAC,aAAa,EAAE,gBAAgB,EAAE,GAAG,CAAC;KAC5C,MAAM,CAAC,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,CAAC;KAC3D,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;KAC5D,MAAM,CAAC,aAAa,EAAE,uCAAuC,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC/D,MAAM,aAAa,CAAC;QAClB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,aAAa,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK;KACrC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,kBAAkB,EAAE,2CAA2C,CAAC;KACvE,MAAM,CAAC,iBAAiB,EAAE,uDAAuD,EAAE,SAAS,CAAC;KAC7F,MAAM,CAAC,mBAAmB,EAAE,mDAAmD,EAAE,MAAM,CAAC;KACxF,MAAM,CAAC,eAAe,EAAE,sBAAsB,CAAC;KAC/C,MAAM,CAAC,OAAO,EAAE,+CAA+C,CAAC;KAChE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,oBAAoB,CAAC;KAC7B,WAAW,CAAC,oEAAoE,CAAC;KACjF,WAAW,CAAC,OAAO,EAAE,iGAAiG,CAAC;KACvH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;IACtB,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACvE,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC1C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/commands/audit.d.ts

@@ -1,5 +1,6 @@
 import type { ScanOptions } from "../core/discovery.js";
 export declare function auditCommand(options: ScanOptions & {
     json?: boolean;
+    exitCode?: boolean;
 }): Promise<void>;
 //# sourceMappingURL=audit.d.ts.map

package/dist/commands/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmD3F"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiF/G"}

package/dist/commands/audit.js

@@ -15,13 +15,33 @@ export async function auditCommand(options) {
             });
         }
     }
+    const exitWithCode = () => {
+        if (options.exitCode && allIssues.length > 0) {
+            const hasCritical = allIssues.some((i) => i.severity === "critical");
+            process.exit(hasCritical ? 2 : 1);
+        }
+    };
     if (options.json) {
-        console.log(JSON.stringify({ issues: allIssues, errors: result.errors }, null, 2));
+        console.log(JSON.stringify({
+            generatedAt: result.scannedAt.toISOString(),
+            scanRoot: result.scanRoot,
+            projectCount: result.projects.length,
+            issueCount: allIssues.length,
+            issues: allIssues,
+            errors: result.errors,
+        }, null, 2));
+        exitWithCode();
         return;
     }
     if (allIssues.length === 0) {
         console.log(chalk.green(`\n✓ No issues found across ${result.projects.length} project(s).`));
-        return;
+        if (result.errors.length > 0) {
+            console.log(chalk.red(`\n${result.errors.length} scan error(s) — some projects could not be checked:`));
+            for (const e of result.errors) {
+                console.log(chalk.red(`  ${collapseHome(e.path)}: ${e.error}`));
+            }
+        }
+        return; // exit 0
     }
     const bySeverity = {
         critical: allIssues.filter((i) => i.severity === "critical"),
@@ -42,5 +62,12 @@ export async function auditCommand(options) {
         }
         console.log("");
     }
+    if (result.errors.length > 0) {
+        console.log(chalk.red(`${result.errors.length} scan error(s) — some projects could not be checked:`));
+        for (const e of result.errors) {
+            console.log(chalk.red(`  ${collapseHome(e.path)}: ${e.error}`));
+        }
+    }
+    exitWithCode();
 }
 //# sourceMappingURL=audit.js.map

package/dist/commands/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyC;IAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,SAAS,GAKV,EAAE,CAAC;IAER,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YACtD,SAAS,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,OAAO,CAAC,QAAQ;gBACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,8BAA8B,MAAM,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;QAC5D,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;QACpD,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACxD,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC;KACnD,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;IAE/G,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA6D;IAC9F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,SAAS,GAKV,EAAE,CAAC;IAER,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YACtD,SAAS,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,OAAO,CAAC,QAAQ;gBACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,IAAI,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YACpC,UAAU,EAAE,SAAS,CAAC,MAAM;YAC5B,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACb,YAAY,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,8BAA8B,MAAM,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC;QAC7F,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,sDAAsD,CAAC,CAAC,CAAC;YACxG,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,OAAO,CAAC,SAAS;IACnB,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;QAC5D,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;QACpD,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACxD,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC;KACnD,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;IAE/G,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,sDAAsD,CAAC,CAAC,CAAC;QACtG,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,YAAY,EAAE,CAAC;AACjB,CAAC"}

package/dist/commands/completion.d.ts

@@ -1,9 +1,2 @@
-/**
- * Shell completion for cpm.
- *
- * Usage:
- *   eval "$(cpm completion bash)"   # add to ~/.bashrc
- *   eval "$(cpm completion zsh)"    # add to ~/.zshrc
- */
 export declare function completionCommand(shell: string): Promise<void>;
 //# sourceMappingURL=completion.d.ts.map

package/dist/commands/completion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"completion.d.ts","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkQH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASpE"}
+{"version":3,"file":"completion.d.ts","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAgSA,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASpE"}

package/dist/commands/completion.js

@@ -5,6 +5,8 @@
  *   eval "$(cpm completion bash)"   # add to ~/.bashrc
  *   eval "$(cpm completion zsh)"    # add to ~/.zshrc
  */
+import { PermissionModeSchema } from "../core/schemas.js";
+import { WRITABLE_SCOPES } from "../core/types.js";
 const COMMANDS = [
     "ui",
     "list",
@@ -20,8 +22,8 @@ const COMMANDS = [
     "init",
     "completion",
 ];
-const SCOPES = ["local", "project", "user"];
-const MODES = ["default", "acceptEdits", "plan", "auto", "dontAsk", "bypassPermissions"];
+const SCOPES = WRITABLE_SCOPES;
+const MODES = PermissionModeSchema.options;
 const PRESETS = ["safe", "node", "strict"];
 const FORMATS = ["json", "csv"];
 // Bash completion script
@@ -54,6 +56,10 @@ _cpm_completions() {
       COMPREPLY=( \$(compgen -W "${presetList}" -- "\${cur}") )
       return 0
       ;;
+    --mode)
+      COMPREPLY=( \$(compgen -W "${modeList}" -- "\${cur}") )
+      return 0
+      ;;
     --root|--project|--output)
       COMPREPLY=( \$(compgen -d -- "\${cur}") )
       return 0
@@ -81,14 +87,26 @@ _cpm_completions() {
     mode)
       if [[ "\${cur}" != -* ]]; then
         COMPREPLY=( \$(compgen -W "${modeList}" -- "\${cur}") )
-        return 0
+      else
+        COMPREPLY=( \$(compgen -W "--scope --project --dry-run" -- "\${cur}") )
       fi
+      return 0
       ;;
-    show|diff)
+    show)
       if [[ "\${cur}" != -* ]]; then
         COMPREPLY=( \$(compgen -d -- "\${cur}") )
-        return 0
+      else
+        COMPREPLY=( \$(compgen -W "--json" -- "\${cur}") )
       fi
+      return 0
+      ;;
+    diff)
+      if [[ "\${cur}" != -* ]]; then
+        COMPREPLY=( \$(compgen -d -- "\${cur}") )
+      else
+        COMPREPLY=( \$(compgen -W "--json" -- "\${cur}") )
+      fi
+      return 0
       ;;
     completion)
       COMPREPLY=( \$(compgen -W "bash zsh" -- "\${cur}") )
@@ -99,11 +117,11 @@ _cpm_completions() {
       return 0
       ;;
     ui)
-      COMPREPLY=( \$(compgen -W "--root --depth --json" -- "\${cur}") )
+      COMPREPLY=( \$(compgen -W "--root --depth --no-global" -- "\${cur}") )
       return 0
       ;;
     audit)
-      COMPREPLY=( \$(compgen -W "--root --depth --json --no-global" -- "\${cur}") )
+      COMPREPLY=( \$(compgen -W "--root --depth --json --no-global --exit-code" -- "\${cur}") )
       return 0
       ;;
     export)
@@ -111,11 +129,11 @@ _cpm_completions() {
       return 0
       ;;
     allow|deny|ask)
-      COMPREPLY=( \$(compgen -W "--scope --project" -- "\${cur}") )
+      COMPREPLY=( \$(compgen -W "--scope --project --dry-run" -- "\${cur}") )
       return 0
       ;;
     reset)
-      COMPREPLY=( \$(compgen -W "--scope --project --all --yes" -- "\${cur}") )
+      COMPREPLY=( \$(compgen -W "--scope --project --all --yes --dry-run" -- "\${cur}") )
       return 0
       ;;
     init)
@@ -182,10 +200,13 @@ ${commandDefs}
           _arguments \\
             '--scope[Settings scope]:scope:(${scopeList})' \\
             '--project[Project path]:project:_directories' \\
+            '--dry-run[Preview without writing]' \\
             '1:mode:(${modeList})'
           ;;
         show)
-          _arguments '1:project:_directories'
+          _arguments \\
+            '1:project:_directories' \\
+            '--json[Output as JSON]'
           ;;
         diff)
           _arguments \\
@@ -197,6 +218,7 @@ ${commandDefs}
           _arguments \\
             '--scope[Settings scope]:scope:(${scopeList})' \\
             '--project[Project path]:project:_directories' \\
+            '--dry-run[Preview without writing]' \\
             '1:rule:'
           ;;
         reset)
@@ -205,6 +227,7 @@ ${commandDefs}
             '--project[Project path]:project:_directories' \\
             '--all[Clear all rules]' \\
             '--yes[Skip confirmation]' \\
+            '--dry-run[Preview without writing]' \\
             '1:rule:'
           ;;
         init)
@@ -226,14 +249,15 @@ ${commandDefs}
           _arguments \\
             '--root[Root directory]:root:_directories' \\
             '--depth[Max scan depth]:depth:' \\
-            '--json[Output as JSON]'
+            '--no-global[Skip user and managed global settings]'
           ;;
         audit)
           _arguments \\
             '--root[Root directory]:root:_directories' \\
             '--depth[Max scan depth]:depth:' \\
             '--json[Output as JSON]' \\
-            '--no-global[Skip user and managed global settings]'
+            '--no-global[Skip user and managed global settings]' \\
+            '--exit-code[Exit 1 if issues, 2 if critical (for CI)]'
           ;;
         export)
           _arguments \\

package/dist/commands/completion.js.map

@@ -1 +1 @@
-{"version":3,"file":"completion.js","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,QAAQ,GAAG;IACf,IAAI;IACJ,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,YAAY;CACb,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC5C,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AACzF,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC3C,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAEhC,yBAAyB;AACzB,SAAS,UAAU;IACjB,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAErC,OAAO;;;;;;;;;;;;mCAY0B,SAAS;;;;mCAIT,UAAU;;;;mCAIV,UAAU;;;;;;;;;;;;;;;;;;;;;iCAqBZ,WAAW;;;;;;;;qCAQP,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiD5C,CAAC,IAAI,EAAE,CAAC;AACT,CAAC;AAED,wBAAwB;AACxB,SAAS,SAAS;IAChB,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrC,MAAM,IAAI,GAA2B;YACnC,EAAE,EAAE,wBAAwB;YAC5B,IAAI,EAAE,0BAA0B;YAChC,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,0BAA0B;YACjC,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,gBAAgB;YACvB,IAAI,EAAE,eAAe;YACrB,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,gBAAgB;YACvB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,yBAAyB;YACjC,IAAI,EAAE,yBAAyB;YAC/B,UAAU,EAAE,+BAA+B;SAC5C,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IACtC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAErC,OAAO;;;;;;;;;;;;;;;;;EAiBP,WAAW;;;;;;;;8CAQiC,SAAS;;uBAEhC,QAAQ;;;;;;;;;;;;;8CAae,SAAS;;;;;;8CAMT,SAAS;;;;;;;;;8CAST,SAAS;iDACN,UAAU;0CACjB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;+CA2BH,UAAU;;;;;;;;;;;;;CAaxD,CAAC,IAAI,EAAE,CAAC;AACT,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa;IACnD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,kBAAkB,KAAK,wBAAwB,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"completion.js","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,QAAQ,GAAG;IACf,IAAI;IACJ,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,YAAY;CACb,CAAC;AAEF,MAAM,MAAM,GAAG,eAAe,CAAC;AAC/B,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC;AAC3C,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC3C,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAEhC,yBAAyB;AACzB,SAAS,UAAU;IACjB,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAErC,OAAO;;;;;;;;;;;;mCAY0B,SAAS;;;;mCAIT,UAAU;;;;mCAIV,UAAU;;;;mCAIV,QAAQ;;;;;;;;;;;;;;;;;;;;;iCAqBV,WAAW;;;;;;;;qCAQP,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6D5C,CAAC,IAAI,EAAE,CAAC;AACT,CAAC;AAED,wBAAwB;AACxB,SAAS,SAAS;IAChB,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrC,MAAM,IAAI,GAA2B;YACnC,EAAE,EAAE,wBAAwB;YAC5B,IAAI,EAAE,0BAA0B;YAChC,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,0BAA0B;YACjC,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,gBAAgB;YACvB,IAAI,EAAE,eAAe;YACrB,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,gBAAgB;YACvB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,yBAAyB;YACjC,IAAI,EAAE,yBAAyB;YAC/B,UAAU,EAAE,+BAA+B;SAC5C,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IACtC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAErC,OAAO;;;;;;;;;;;;;;;;;EAiBP,WAAW;;;;;;;;8CAQiC,SAAS;;;uBAGhC,QAAQ;;;;;;;;;;;;;;;8CAee,SAAS;;;;;;;8CAOT,SAAS;;;;;;;;;;8CAUT,SAAS;iDACN,UAAU;0CACjB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;+CA4BH,UAAU;;;;;;;;;;;;;CAaxD,CAAC,IAAI,EAAE,CAAC;AACT,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa;IACnD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,kBAAkB,KAAK,wBAAwB,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/diff.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/commands/diff.ts"],"names":[],"mappings":"AAKA,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5B,OAAO,CAAC,IAAI,CAAC,CA4Kf"}
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/commands/diff.ts"],"names":[],"mappings":"AAMA,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5B,OAAO,CAAC,IAAI,CAAC,CAqOf"}

package/dist/commands/diff.js

@@ -5,6 +5,9 @@ import { expandHome, collapseHome } from "../utils/paths.js";
 export async function diffCommand(path1, path2, opts = {}) {
     const root1 = resolve(expandHome(path1));
     const root2 = resolve(expandHome(path2));
+    if (root1 === root2) {
+        console.log(chalk.yellow("Note: comparing a project with itself — paths resolve to the same directory."));
+    }
     const [result1, result2] = await Promise.all([
         scan({ root: root1, maxDepth: 1 }),
         scan({ root: root2, maxDepth: 1 }),
@@ -24,20 +27,38 @@ export async function diffCommand(path1, path2, opts = {}) {
     const mcpNamesA = new Set(p1.mcpServers.map((s) => s.name));
     const mcpNamesB = new Set(p2.mcpServers.map((s) => s.name));
     if (opts.json) {
-        const allowOnlyA = p1.allow.filter((r) => !p2.allow.some((x) => x.raw === r.raw)).map((r) => r.raw);
-        const allowOnlyB = p2.allow.filter((r) => !p1.allow.some((x) => x.raw === r.raw)).map((r) => r.raw);
-        const denyOnlyA = p1.deny.filter((r) => !p2.deny.some((x) => x.raw === r.raw)).map((r) => r.raw);
-        const denyOnlyB = p2.deny.filter((r) => !p1.deny.some((x) => x.raw === r.raw)).map((r) => r.raw);
-        const askOnlyA = p1.ask.filter((r) => !p2.ask.some((x) => x.raw === r.raw)).map((r) => r.raw);
-        const askOnlyB = p2.ask.filter((r) => !p1.ask.some((x) => x.raw === r.raw)).map((r) => r.raw);
+        // Pre-compute Sets for O(1) lookup instead of O(n) per-item scan
+        const p1AllowRaws = new Set(p1.allow.map((r) => r.raw));
+        const p2AllowRaws = new Set(p2.allow.map((r) => r.raw));
+        const p1DenyRaws = new Set(p1.deny.map((r) => r.raw));
+        const p2DenyRaws = new Set(p2.deny.map((r) => r.raw));
+        const p1AskRaws = new Set(p1.ask.map((r) => r.raw));
+        const p2AskRaws = new Set(p2.ask.map((r) => r.raw));
+        const toRuleObj = (r) => ({ rule: r.raw, scope: r.scope });
+        const allowOnlyA = p1.allow.filter((r) => !p2AllowRaws.has(r.raw)).map(toRuleObj);
+        const allowOnlyB = p2.allow.filter((r) => !p1AllowRaws.has(r.raw)).map(toRuleObj);
+        const denyOnlyA = p1.deny.filter((r) => !p2DenyRaws.has(r.raw)).map(toRuleObj);
+        const denyOnlyB = p2.deny.filter((r) => !p1DenyRaws.has(r.raw)).map(toRuleObj);
+        const askOnlyA = p1.ask.filter((r) => !p2AskRaws.has(r.raw)).map(toRuleObj);
+        const askOnlyB = p2.ask.filter((r) => !p1AskRaws.has(r.raw)).map(toRuleObj);
         const mcpOnlyA = [...mcpNamesA].filter((n) => !mcpNamesB.has(n));
         const mcpOnlyB = [...mcpNamesB].filter((n) => !mcpNamesA.has(n));
+        const envNamesA = new Set(p1.envVarNames);
+        const envNamesB = new Set(p2.envVarNames);
+        const envOnlyA = p1.envVarNames.filter((v) => !envNamesB.has(v));
+        const envOnlyB = p2.envVarNames.filter((v) => !envNamesA.has(v));
+        const dirNamesA = new Set(p1.additionalDirs);
+        const dirNamesB = new Set(p2.additionalDirs);
+        const dirsOnlyA = p1.additionalDirs.filter((d) => !dirNamesB.has(d));
+        const dirsOnlyB = p2.additionalDirs.filter((d) => !dirNamesA.has(d));
         const identical = p1.defaultMode === p2.defaultMode &&
             p1.isBypassDisabled === p2.isBypassDisabled &&
             allowOnlyA.length === 0 && allowOnlyB.length === 0 &&
             denyOnlyA.length === 0 && denyOnlyB.length === 0 &&
             askOnlyA.length === 0 && askOnlyB.length === 0 &&
-            mcpOnlyA.length === 0 && mcpOnlyB.length === 0;
+            mcpOnlyA.length === 0 && mcpOnlyB.length === 0 &&
+            envOnlyA.length === 0 && envOnlyB.length === 0 &&
+            dirsOnlyA.length === 0 && dirsOnlyB.length === 0;
         const output = {
             projectA: root1,
             projectB: root2,
@@ -47,23 +68,33 @@ export async function diffCommand(path1, path2, opts = {}) {
             allow: {
                 onlyInA: allowOnlyA,
                 onlyInB: allowOnlyB,
-                inBoth: p1.allow.filter((r) => p2.allow.some((x) => x.raw === r.raw)).map((r) => r.raw),
+                inBoth: p1.allow.filter((r) => p2AllowRaws.has(r.raw)).map((r) => r.raw),
             },
             deny: {
                 onlyInA: denyOnlyA,
                 onlyInB: denyOnlyB,
-                inBoth: p1.deny.filter((r) => p2.deny.some((x) => x.raw === r.raw)).map((r) => r.raw),
+                inBoth: p1.deny.filter((r) => p2DenyRaws.has(r.raw)).map((r) => r.raw),
             },
             ask: {
                 onlyInA: askOnlyA,
                 onlyInB: askOnlyB,
-                inBoth: p1.ask.filter((r) => p2.ask.some((x) => x.raw === r.raw)).map((r) => r.raw),
+                inBoth: p1.ask.filter((r) => p2AskRaws.has(r.raw)).map((r) => r.raw),
             },
             mcpServers: {
                 onlyInA: mcpOnlyA,
                 onlyInB: mcpOnlyB,
                 inBoth: [...mcpNamesA].filter((n) => mcpNamesB.has(n)),
             },
+            envVarNames: {
+                onlyInA: envOnlyA,
+                onlyInB: envOnlyB,
+                inBoth: p1.envVarNames.filter((v) => envNamesB.has(v)),
+            },
+            additionalDirs: {
+                onlyInA: dirsOnlyA,
+                onlyInB: dirsOnlyB,
+                inBoth: p1.additionalDirs.filter((d) => dirNamesB.has(d)),
+            },
         };
         console.log(JSON.stringify(output, null, 2));
         return;
@@ -111,6 +142,29 @@ export async function diffCommand(path1, path2, opts = {}) {
     printDiff("ALLOW", p1.allow, p2.allow, "green");
     printDiff("DENY", p1.deny, p2.deny, "red");
     printDiff("ASK", p1.ask, p2.ask, "yellow");
+    // Helper for plain string set diffs (env vars, dirs)
+    function printStringsDiff(label, a, b) {
+        const setA = new Set(a);
+        const setB = new Set(b);
+        const all = new Set([...setA, ...setB]);
+        if (all.size === 0)
+            return;
+        console.log(chalk.bold(label));
+        for (const v of all) {
+            if (setA.has(v) && setB.has(v)) {
+                console.log(chalk.gray(`  = ${v}`));
+            }
+            else if (setA.has(v)) {
+                console.log(chalk.red(`  - ${v}  (only in A)`));
+            }
+            else {
+                console.log(chalk.green(`  + ${v}  (only in B)`));
+            }
+        }
+        console.log("");
+    }
+    printStringsDiff("ENV VARS", p1.envVarNames, p2.envVarNames);
+    printStringsDiff("ADDITIONAL DIRS", p1.additionalDirs, p2.additionalDirs);
     // MCP servers diff
     const allMcp = new Set([...mcpNamesA, ...mcpNamesB]);
     if (allMcp.size > 0) {
@@ -153,7 +207,9 @@ export async function diffCommand(path1, path2, opts = {}) {
         !setsEqual(p1.allow, p2.allow) ||
         !setsEqual(p1.deny, p2.deny) ||
         !setsEqual(p1.ask, p2.ask) ||
-        !setsOfStringsEqual(mcpNamesA, mcpNamesB);
+        !setsOfStringsEqual(mcpNamesA, mcpNamesB) ||
+        !setsOfStringsEqual(new Set(p1.envVarNames), new Set(p2.envVarNames)) ||
+        !setsOfStringsEqual(new Set(p1.additionalDirs), new Set(p2.additionalDirs));
     if (!hasChanges) {
         console.log(chalk.green("✓ Projects have identical effective permissions."));
     }