codegate-ai 0.7.0 → 0.9.0

package/README.md

@@ -108,6 +108,7 @@ See the [Configuration](#configuration) section for full settings and examples.
 | Command                  | Purpose                                                                |
 | ------------------------ | ---------------------------------------------------------------------- |
 | `codegate scan [target]` | Scan a directory, file, or URL target for AI tool config risks.        |
+| `codegate scan-content`  | Scan inline JSON, YAML, TOML, Markdown, or text content.               |
 | `codegate run <tool>`    | Scan current directory, then launch selected AI tool if policy allows. |
 | `codegate skills [...]`  | Wrap `npx skills` and preflight-scan `skills add` targets.             |
 | `codegate clawhub [...]` | Wrap `npx clawhub` and preflight-scan `clawhub install` targets.       |
@@ -119,21 +120,26 @@ See the [Configuration](#configuration) section for full settings and examples.
 
 ## `scan` Command Flags
 
-| Flag                   | Purpose                                                                                                   |
-| ---------------------- | --------------------------------------------------------------------------------------------------------- |
-| `--deep`               | Enable Layer 3 dynamic analysis.                                                                          |
-| `--remediate`          | Enter remediation mode after scan.                                                                        |
-| `--fix-safe`           | Auto-fix unambiguous critical findings.                                                                   |
-| `--dry-run`            | Show proposed fixes but write nothing.                                                                    |
-| `--patch`              | Generate a patch file for review workflows.                                                               |
-| `--no-tui`             | Disable TUI and interactive prompts.                                                                      |
-| `--format <type>`      | Output format: `terminal`, `json`, `sarif`, `markdown`, `html`.                                           |
-| `--output <path>`      | Write report to file instead of stdout.                                                                   |
-| `--verbose`            | Show extended output in terminal format.                                                                  |
-| `--config <path>`      | Use a specific global config file path.                                                                   |
-| `--force`              | Skip interactive confirmations.                                                                           |
-| `--include-user-scope` | Force-enable user/home AI tool config paths for this run (useful if config disables user-scope scanning). |
-| `--reset-state`        | Clear persisted scan-state history and exit.                                                              |
+| Flag                    | Purpose                                                                                                   |
+| ----------------------- | --------------------------------------------------------------------------------------------------------- |
+| `--deep`                | Enable Layer 3 dynamic analysis.                                                                          |
+| `--remediate`           | Enter remediation mode after scan.                                                                        |
+| `--fix-safe`            | Auto-fix unambiguous critical findings.                                                                   |
+| `--dry-run`             | Show proposed fixes but write nothing.                                                                    |
+| `--patch`               | Generate a patch file for review workflows.                                                               |
+| `--no-tui`              | Disable TUI and interactive prompts.                                                                      |
+| `--format <type>`       | Output format: `terminal`, `json`, `sarif`, `markdown`, `html`.                                           |
+| `--output <path>`       | Write report to file instead of stdout.                                                                   |
+| `--verbose`             | Show extended output in terminal format.                                                                  |
+| `--config <path>`       | Use a specific global config file path.                                                                   |
+| `--force`               | Skip interactive confirmations.                                                                           |
+| `--include-user-scope`  | Force-enable user/home AI tool config paths for this run (useful if config disables user-scope scanning). |
+| `--collect <mode>`      | Collection scope mode (`default`, `project`, `user`, `explicit`, `all`). Repeatable.                      |
+| `--strict-collection`   | Treat parse failures in collected inputs as high-severity findings.                                       |
+| `--persona <type>`      | Audit sensitivity (`regular`, `pedantic`, `auditor`).                                                     |
+| `--runtime-mode <mode>` | Runtime mode for optional online audits (`offline`, `online`, `online-no-audits`).                        |
+| `--workflow-audits`     | Enable CI/CD audit pack for GitHub workflow, action, and Dependabot inputs.                               |
+| `--reset-state`         | Clear persisted scan-state history and exit.                                                              |
 
 Examples:
 
@@ -147,9 +153,59 @@ codegate scan . --deep --force
 codegate scan . --remediate
 codegate scan . --fix-safe
 codegate scan . --remediate --dry-run --patch
+codegate scan . --workflow-audits --collect project --persona auditor --runtime-mode online
+codegate scan . --workflow-audits --strict-collection
 codegate scan . --reset-state
 ```
 
+## Workflow Audit Pack
+
+CodeGate can audit GitHub Actions workflows when `--workflow-audits` is enabled.
+
+Current checks include:
+
+- Unpinned external action references (`uses: owner/repo@tag` instead of commit SHA)
+- High-risk triggers (`pull_request_target`, `workflow_run`)
+- Overly broad permissions (`write-all` and explicit write grants)
+- Template expression injection patterns in run steps and known sink inputs
+- Known vulnerable action references (online runtime mode)
+- Dependabot cooldown and execution-risk checks
+- Workflow hygiene checks (concurrency gates, obfuscation, unsafe conditional trust)
+
+Track the current workflow-audit coverage and backlog in the [workflow audit parity checklist](docs/workflow-audit-parity-checklist.md).
+Real public validation fixtures and source provenance are documented in [workflow audit real-case corpus](docs/workflow-audit-real-cases.md).
+
+Examples:
+
+```bash
+codegate scan . --workflow-audits
+codegate scan . --workflow-audits --collect project --persona auditor
+codegate scan . --workflow-audits --runtime-mode online
+codegate scan . --workflow-audits --collect-kind dependabot
+```
+
+## `scan-content` Command
+
+`codegate scan-content <content...>` scans inline content directly from the command line. It is useful when you want to inspect JSON, YAML, TOML, Markdown, or plain text before writing it to disk or installing it into a tool configuration.
+
+Use `--type` to declare the content format:
+
+| Type       | Purpose                                                              |
+| ---------- | -------------------------------------------------------------------- |
+| `json`     | Parse JSON input and run the static scanner on the parsed structure. |
+| `yaml`     | Parse YAML input and run the static scanner on the parsed structure. |
+| `toml`     | Parse TOML input and run the static scanner on the parsed structure. |
+| `markdown` | Analyze Markdown instruction text as a rule surface.                 |
+| `text`     | Analyze plain text as a rule surface.                                |
+
+Examples:
+
+```bash
+codegate scan-content '{"mcpServers":{"bad":{"command":"bash"}}}' --type json
+codegate scan-content '# Suspicious instructions' --type markdown
+codegate scan-content 'echo hello' --type text
+```
+
 ## `run` Command
 
 `codegate run <tool>` runs scan-first wrapper mode.
@@ -199,6 +255,7 @@ Behavior:
 - Dangerous findings block execution (fail-closed).
 - Warning-level findings can still require confirmation unless `--cg-force` is provided.
 - Non-install subcommands (for example `skills find` or `clawhub search`) are passed through without preflight scanning.
+- Wrapper scans honor the same config policy controls as `codegate scan`, including `suppress_findings`, `suppression_rules`, `rule_pack_paths`, `allowed_rules`, and `skip_rules`.
 
 Wrapper flags (consumed by CodeGate, not forwarded):
 
@@ -299,33 +356,38 @@ codegate init
 - List values are merged and de-duplicated across levels.
 - `trusted_directories` is global-only; project config cannot set it.
 - `blocked_commands` is merged with defaults; defaults are always retained.
+- `rule_pack_paths`, `allowed_rules`, `skip_rules`, `suppress_findings`, and `suppression_rules` merge across global and project config.
 
 ### Full Configuration Reference
 
-| Key                              | Type             | Allowed Values                                                              | Default                                            |
-| -------------------------------- | ---------------- | --------------------------------------------------------------------------- | -------------------------------------------------- |
-| `severity_threshold`             | string           | `critical`, `high`, `medium`, `low`, `info`                                 | `high`                                             |
-| `auto_proceed_below_threshold`   | boolean          | `true`, `false`                                                             | `true`                                             |
-| `output_format`                  | string           | `terminal`, `json`, `sarif`, `markdown`, `html`                             | `terminal`                                         |
-| `scan_state_path`                | string           | file path                                                                   | `~/.codegate/scan-state.json`                      |
-| `scan_user_scope`                | boolean          | `true`, `false`                                                             | `true`                                             |
-| `tui.enabled`                    | boolean          | `true`, `false`                                                             | `true`                                             |
-| `tui.colour_scheme`              | string           | free string (currently `default`)                                           | `default`                                          |
-| `tui.compact_mode`               | boolean          | `true`, `false`                                                             | `false`                                            |
-| `tool_discovery.preferred_agent` | string           | practical values: `claude`, `claude-code`, `codex`, `codex-cli`, `opencode` | `claude`                                           |
-| `tool_discovery.agent_paths`     | object           | map of agent key -> binary path                                             | `{}`                                               |
-| `tool_discovery.skip_tools`      | array of strings | tool keys to skip in discovery/selection                                    | `[]`                                               |
-| `trusted_directories`            | array of strings | directory paths                                                             | `[]`                                               |
-| `blocked_commands`               | array of strings | command names                                                               | `["bash","sh","curl","wget","nc","python","node"]` |
-| `known_safe_mcp_servers`         | array of strings | package/server identifiers                                                  | prefilled                                          |
-| `known_safe_formatters`          | array of strings | formatter names                                                             | prefilled                                          |
-| `known_safe_lsp_servers`         | array of strings | lsp server names                                                            | prefilled                                          |
-| `known_safe_hooks`               | array of strings | relative hook paths such as `.git/hooks/pre-commit`                         | `[]`                                               |
-| `unicode_analysis`               | boolean          | `true`, `false`                                                             | `true`                                             |
-| `check_ide_settings`             | boolean          | `true`, `false`                                                             | `true`                                             |
-| `owasp_mapping`                  | boolean          | `true`, `false`                                                             | `true`                                             |
-| `trusted_api_domains`            | array of strings | domain names                                                                | `[]`                                               |
-| `suppress_findings`              | array of strings | finding IDs/fingerprints                                                    | `[]`                                               |
+| Key                              | Type             | Allowed Values                                                                               | Default                                            |
+| -------------------------------- | ---------------- | -------------------------------------------------------------------------------------------- | -------------------------------------------------- |
+| `severity_threshold`             | string           | `critical`, `high`, `medium`, `low`, `info`                                                  | `high`                                             |
+| `auto_proceed_below_threshold`   | boolean          | `true`, `false`                                                                              | `true`                                             |
+| `output_format`                  | string           | `terminal`, `json`, `sarif`, `markdown`, `html`                                              | `terminal`                                         |
+| `scan_state_path`                | string           | file path                                                                                    | `~/.codegate/scan-state.json`                      |
+| `scan_user_scope`                | boolean          | `true`, `false`                                                                              | `true`                                             |
+| `tui.enabled`                    | boolean          | `true`, `false`                                                                              | `true`                                             |
+| `tui.colour_scheme`              | string           | free string (currently `default`)                                                            | `default`                                          |
+| `tui.compact_mode`               | boolean          | `true`, `false`                                                                              | `false`                                            |
+| `tool_discovery.preferred_agent` | string           | practical values: `claude`, `claude-code`, `codex`, `codex-cli`, `opencode`                  | `claude`                                           |
+| `tool_discovery.agent_paths`     | object           | map of agent key -> binary path                                                              | `{}`                                               |
+| `tool_discovery.skip_tools`      | array of strings | tool keys to skip in discovery/selection                                                     | `[]`                                               |
+| `trusted_directories`            | array of strings | directory paths                                                                              | `[]`                                               |
+| `blocked_commands`               | array of strings | command names                                                                                | `["bash","sh","curl","wget","nc","python","node"]` |
+| `known_safe_mcp_servers`         | array of strings | package/server identifiers                                                                   | prefilled                                          |
+| `known_safe_formatters`          | array of strings | formatter names                                                                              | prefilled                                          |
+| `known_safe_lsp_servers`         | array of strings | lsp server names                                                                             | prefilled                                          |
+| `known_safe_hooks`               | array of strings | relative hook paths such as `.git/hooks/pre-commit`                                          | `[]`                                               |
+| `unicode_analysis`               | boolean          | `true`, `false`                                                                              | `true`                                             |
+| `check_ide_settings`             | boolean          | `true`, `false`                                                                              | `true`                                             |
+| `owasp_mapping`                  | boolean          | `true`, `false`                                                                              | `true`                                             |
+| `trusted_api_domains`            | array of strings | domain names                                                                                 | `[]`                                               |
+| `suppress_findings`              | array of strings | finding IDs/fingerprints                                                                     | `[]`                                               |
+| `suppression_rules`              | array of objects | rule match objects with `rule_id`, `file_path`, `severity`, `category`, `cwe`, `fingerprint` | `[]`                                               |
+| `rule_pack_paths`                | array of strings | extra rule pack files or directories                                                         | `[]`                                               |
+| `allowed_rules`                  | array of strings | rule IDs to keep after loading                                                               | `[]`                                               |
+| `skip_rules`                     | array of strings | rule IDs to drop after loading                                                               | `[]`                                               |
 
 ### Default Config Example
 
@@ -359,7 +421,11 @@ codegate init
   "check_ide_settings": true,
   "owasp_mapping": true,
   "trusted_api_domains": [],
-  "suppress_findings": []
+  "suppress_findings": [],
+  "suppression_rules": [],
+  "rule_pack_paths": [],
+  "allowed_rules": [],
+  "skip_rules": []
 }
 ```
 
@@ -371,6 +437,9 @@ Configuration notes:
 - `unicode_analysis=false` disables hidden-unicode findings in Layer 2 rule-file scanning and Layer 3 tool-description scanning. Other rule-file heuristics remain enabled.
 - `check_ide_settings=false` disables `IDE_SETTINGS` findings.
 - `owasp_mapping=false` keeps detection behavior unchanged and emits empty `owasp` arrays in reports.
+- `suppression_rules` applies all listed criteria with AND semantics. If a criterion is omitted, it is ignored.
+- `rule_pack_paths` can point to extra JSON rule-pack files or directories of JSON rule packs.
+- `allowed_rules` and `skip_rules` control which loaded rule IDs remain active after rule-pack loading.
 
 ## Output Formats
 

package/dist/cli.js

@@ -6,7 +6,7 @@ import { dirname, resolve } from "node:path";
 import { createInterface } from "node:readline/promises";
 import { pathToFileURL } from "node:url";
 import { Command, Option } from "commander";
-import { DEFAULT_CONFIG, OUTPUT_FORMATS, resolveEffectiveConfig, } from "./config.js";
+import { DEFAULT_CONFIG, OUTPUT_FORMATS, PERSONAS, RUNTIME_MODES, SCAN_COLLECTION_MODES, SCAN_COLLECTION_KINDS, resolveEffectiveConfig, } from "./config.js";
 import { APP_NAME } from "./index.js";
 import { runSandboxCommand } from "./layer3-dynamic/sandbox.js";
 import { loadKnowledgeBase } from "./layer1-discovery/knowledge-base.js";
@@ -18,6 +18,7 @@ import { executeWrapperRun } from "./wrapper.js";
 import { runRemediation as runRemediationWorkflow, } from "./layer4-remediation/remediation-runner.js";
 import { undoLatestSession } from "./commands/undo.js";
 import { executeScanCommand } from "./commands/scan-command.js";
+import { executeScanContentCommand, SCAN_CONTENT_TYPES, } from "./commands/scan-content-command.js";
 import { executeSkillsWrapper, launchSkillsPassthrough, } from "./commands/skills-wrapper.js";
 import { executeClawhubWrapper, launchClawhubPassthrough, } from "./commands/clawhub-wrapper.js";
 import { promptDeepAgentSelection, promptDeepScanConsent, promptMetaAgentCommandConsent, promptRemediationConsent, promptSkillSelection, } from "./cli-prompts.js";
@@ -126,6 +127,8 @@ const defaultCliDeps = {
     }),
     prepareScanDiscovery: (scanTarget, config, options) => createScanDiscoveryContext(scanTarget, undefined, {
         includeUserScope: config?.scan_user_scope === true,
+        collectModes: config?.scan_collection_modes,
+        collectKinds: config?.scan_collection_kinds,
         parseSelected: true,
         explicitCandidates: options?.explicitCandidates,
     }),
@@ -157,6 +160,8 @@ const defaultCliDeps = {
         ? discoverDeepScanResourcesFromContext(discoveryContext)
         : discoverDeepScanResources(scanTarget, undefined, {
             includeUserScope: config?.scan_user_scope === true,
+            collectModes: config?.scan_collection_modes,
+            collectKinds: config?.scan_collection_kinds,
         }),
     discoverLocalTextTargets: (_scanTarget, _config, discoveryContext) => discoveryContext ? discoverLocalTextAnalysisTargetsFromContext(discoveryContext) : [],
     // Deep resource execution never makes outbound network calls.
@@ -197,6 +202,20 @@ function addScanCommand(program, version, deps) {
         .option("--config <path>", "use a specific global config file")
         .option("--force", "skip interactive confirmations")
         .option("--include-user-scope", "include user/home AI tool config paths in scan")
+        .addOption(new Option("--collect <mode>", "collection mode (repeatable): default, project, user, explicit, all")
+        .choices([...SCAN_COLLECTION_MODES])
+        .argParser((value, previous = []) => [...previous, value]))
+        .addOption(new Option("--collect-kind <kind>", "collection kind (repeatable): workflows, actions, dependabot")
+        .choices([...SCAN_COLLECTION_KINDS])
+        .argParser((value, previous = []) => [...previous, value]))
+        .option("--strict-collection", "treat parse failures in collected inputs as high severity")
+        .addOption(new Option("--persona <type>", "audit sensitivity persona")
+        .choices([...PERSONAS])
+        .argParser((value) => value))
+        .addOption(new Option("--runtime-mode <mode>", "runtime network mode for optional online audits")
+        .choices([...RUNTIME_MODES])
+        .argParser((value) => value))
+        .option("--workflow-audits", "enable workflow security audit pack for .github/workflows")
         .option("--skill <name>", "select one skill directory when scanning a skills index repo URL")
         .option("--reset-state", "clear persisted scan-state history and exit")
         .addHelpText("after", renderExampleHelp([
@@ -204,6 +223,7 @@ function addScanCommand(program, version, deps) {
         "codegate scan ./skills/security-review/SKILL.md",
         "codegate scan https://github.com/owner/repo",
         "codegate scan https://github.com/owner/repo --skill security-review",
+        "codegate scan . --workflow-audits --collect project --persona auditor --runtime-mode online",
         "codegate scan https://github.com/owner/repo/blob/main/skills/security-review/SKILL.md",
         "codegate scan https://example.com/security-review/SKILL.md --format json",
     ]))
@@ -219,6 +239,7 @@ function addScanCommand(program, version, deps) {
         };
         let resolvedTarget;
         try {
+            const scanOptions = options;
             const resolveTarget = deps.resolveScanTarget ??
                 ((input) => resolveScanTarget(input));
             resolvedTarget = await resolveTarget({
@@ -236,12 +257,26 @@ function addScanCommand(program, version, deps) {
                 scanTarget,
                 cli: cliConfig,
             });
-            const config = options.includeUserScope === true
-                ? {
-                    ...baseConfig,
-                    scan_user_scope: true,
-                }
-                : baseConfig;
+            const config = {
+                ...baseConfig,
+                scan_collection_modes: options.collect && options.collect.length > 0
+                    ? options.collect
+                    : baseConfig.scan_collection_modes,
+                scan_collection_kinds: (scanOptions.collectKind && scanOptions.collectKind.length > 0
+                    ? scanOptions.collectKind
+                    : baseConfig.scan_collection_kinds),
+                strict_collection: options.strictCollection === true
+                    ? true
+                    : (baseConfig.strict_collection ?? DEFAULT_CONFIG.strict_collection),
+                persona: options.persona ?? baseConfig.persona,
+                runtime_mode: options.runtimeMode ?? baseConfig.runtime_mode,
+                workflow_audits: {
+                    enabled: options.workflowAudits === true
+                        ? true
+                        : (baseConfig.workflow_audits?.enabled ?? false),
+                },
+                scan_user_scope: options.includeUserScope === true ? true : (baseConfig.scan_user_scope ?? false),
+            };
             if (options.resetState) {
                 const reset = deps.resetScanState ?? ((path) => resetScanState(path));
                 await reset(config.scan_state_path);
@@ -314,6 +349,47 @@ function addScanCommand(program, version, deps) {
         }
     });
 }
+function addScanContentCommand(program, version, deps) {
+    program
+        .command("scan-content <content...>")
+        .description("Scan inline content for AI tool config risks")
+        .addOption(new Option("--type <type>", "content type")
+        .choices([...SCAN_CONTENT_TYPES])
+        .makeOptionMandatory())
+        .addHelpText("after", renderExampleHelp([
+        'codegate scan-content \'{"mcpServers":{"bad":{"command":"bash"}}}\' --type json',
+        "codegate scan-content '# Suspicious instructions' --type markdown",
+        "codegate scan-content 'echo hello' --type text",
+    ]))
+        .action(async (contentParts, options) => {
+        try {
+            const content = (contentParts ?? []).join(" ");
+            const type = options.type;
+            if (!type) {
+                throw new Error("Missing required option: --type");
+            }
+            const config = deps.resolveConfig({
+                scanTarget: deps.cwd(),
+            });
+            await executeScanContentCommand({
+                version,
+                cwd: deps.cwd(),
+                content,
+                type,
+                config,
+            }, {
+                stdout: deps.stdout,
+                stderr: deps.stderr,
+                setExitCode: deps.setExitCode,
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            deps.stderr(`Scan content failed: ${message}`);
+            deps.setExitCode(3);
+        }
+    });
+}
 function addRunCommand(program, version, deps) {
     program
         .command("run <tool>")
@@ -568,11 +644,13 @@ export function createCli(version = packageJson.version ?? "0.0.0-dev", deps = d
         "codegate scan .",
         "codegate scan https://github.com/owner/repo",
         "codegate scan https://github.com/owner/repo/blob/main/skills/security-review/SKILL.md",
+        'codegate scan-content \'{"mcpServers":{"bad":{"command":"bash"}}}\' --type json',
         "codegate skills add owner/repo --skill security-review",
         "codegate clawhub install security-auditor",
         "codegate run claude",
     ]));
     addScanCommand(program, version, deps);
+    addScanContentCommand(program, version, deps);
     addSkillsCommand(program, version, deps);
     addClawhubCommand(program, version, deps);
     addRunCommand(program, version, deps);

package/dist/commands/scan-command.d.ts

@@ -1,4 +1,4 @@
-import { type CodeGateConfig, type OutputFormat } from "../config.js";
+import { type AuditPersona, type CodeGateConfig, type OutputFormat, type RuntimeMode, type ScanCollectionMode } from "../config.js";
 import { type MetaAgentCommand, type MetaAgentTool } from "../layer3-dynamic/command-builder.js";
 import type { LocalTextAnalysisTarget } from "../layer3-dynamic/local-text-analysis.js";
 import type { ResourceFetchResult } from "../layer3-dynamic/resource-fetcher.js";
@@ -21,6 +21,11 @@ export interface ScanCommandOptions {
     resetState?: boolean;
     includeUserScope?: boolean;
     skill?: string;
+    collect?: ScanCollectionMode[];
+    strictCollection?: boolean;
+    persona?: AuditPersona;
+    runtimeMode?: RuntimeMode;
+    workflowAudits?: boolean;
 }
 export interface ScanRunnerInput {
     version: string;

package/dist/commands/scan-command.js

@@ -1,5 +1,5 @@
 import { resolve } from "node:path";
-import { applyConfigPolicy } from "../config.js";
+import { applyConfigPolicy, } from "../config.js";
 import { buildMetaAgentCommand, } from "../layer3-dynamic/command-builder.js";
 import { supportsAgentLocalTextAnalysis } from "../layer3-dynamic/local-text-analysis.js";
 import { buildLocalTextAnalysisPrompt, buildSecurityAnalysisPrompt, } from "../layer3-dynamic/meta-agent.js";

package/dist/commands/scan-content-command.d.ts

@@ -0,0 +1,16 @@
+import { type CodeGateConfig } from "../config.js";
+export declare const SCAN_CONTENT_TYPES: readonly ["json", "yaml", "toml", "markdown", "text"];
+export type ScanContentType = (typeof SCAN_CONTENT_TYPES)[number];
+export interface ExecuteScanContentCommandInput {
+    version: string;
+    cwd: string;
+    content: string;
+    type: ScanContentType;
+    config: CodeGateConfig;
+}
+export interface ExecuteScanContentCommandDeps {
+    stdout: (message: string) => void;
+    stderr: (message: string) => void;
+    setExitCode: (code: number) => void;
+}
+export declare function executeScanContentCommand(input: ExecuteScanContentCommandInput, deps: ExecuteScanContentCommandDeps): Promise<void>;

package/dist/commands/scan-content-command.js

@@ -0,0 +1,65 @@
+import { applyConfigPolicy } from "../config.js";
+import { loadKnowledgeBase } from "../layer1-discovery/knowledge-base.js";
+import { parseConfigContent } from "../layer1-discovery/config-parser.js";
+import { runStaticPipeline } from "../pipeline.js";
+import { renderByFormat } from "./scan-command/helpers.js";
+export const SCAN_CONTENT_TYPES = ["json", "yaml", "toml", "markdown", "text"];
+function toReportPath(type) {
+    if (type === "markdown") {
+        return "scan-content.md";
+    }
+    if (type === "text") {
+        return "scan-content.txt";
+    }
+    return `scan-content.${type}`;
+}
+export async function executeScanContentCommand(input, deps) {
+    try {
+        const parsed = parseConfigContent(input.content, input.type);
+        if (!parsed.ok) {
+            throw new Error(parsed.error);
+        }
+        const kbVersion = loadKnowledgeBase().schemaVersion;
+        const report = applyConfigPolicy(await runStaticPipeline({
+            version: input.version,
+            kbVersion,
+            scanTarget: `scan-content:${input.type}`,
+            toolsDetected: [],
+            projectRoot: input.cwd,
+            files: [
+                {
+                    filePath: toReportPath(input.type),
+                    format: input.type,
+                    parsed: parsed.data,
+                    textContent: input.content,
+                },
+            ],
+            symlinkEscapes: [],
+            hooks: [],
+            config: {
+                knownSafeMcpServers: input.config.known_safe_mcp_servers,
+                knownSafeFormatters: input.config.known_safe_formatters,
+                knownSafeLspServers: input.config.known_safe_lsp_servers,
+                knownSafeHooks: input.config.known_safe_hooks,
+                blockedCommands: input.config.blocked_commands,
+                trustedApiDomains: input.config.trusted_api_domains,
+                unicodeAnalysis: input.config.unicode_analysis,
+                checkIdeSettings: input.config.check_ide_settings,
+                rulePackPaths: input.config.rule_pack_paths,
+                allowedRules: input.config.allowed_rules,
+                skipRules: input.config.skip_rules,
+                persona: input.config.persona,
+                runtimeMode: input.config.runtime_mode,
+                workflowAuditsEnabled: input.config.workflow_audits?.enabled === true,
+                rulePolicies: input.config.rules,
+            },
+        }), input.config);
+        deps.stdout(renderByFormat(input.config.output_format, report));
+        deps.setExitCode(report.summary.exit_code);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        deps.stderr(`Scan content failed: ${message}`);
+        deps.setExitCode(3);
+    }
+}

package/dist/config/inline-ignore.d.ts

@@ -0,0 +1,11 @@
+import type { Finding } from "../types/finding.js";
+export interface InlineIgnoreDirectiveSet {
+    rules: Set<string>;
+    ruleLines: Map<string, Set<number>>;
+}
+export type InlineIgnoreMap = Map<string, InlineIgnoreDirectiveSet>;
+export declare function collectInlineIgnoreDirectives(files: Array<{
+    filePath: string;
+    textContent: string;
+}>): InlineIgnoreMap;
+export declare function applyInlineIgnoreDirectives<T extends Finding>(findings: T[], directives: InlineIgnoreMap): T[];

package/dist/config/inline-ignore.js

@@ -0,0 +1,57 @@
+function normalizeRuleId(value) {
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
+function addDirective(target, ruleId, line) {
+    target.rules.add(ruleId);
+    const lines = target.ruleLines.get(ruleId) ?? new Set();
+    lines.add(line);
+    target.ruleLines.set(ruleId, lines);
+}
+function parseDirectiveRules(raw) {
+    return raw
+        .split(",")
+        .map((entry) => normalizeRuleId(entry))
+        .filter((entry) => entry !== null);
+}
+export function collectInlineIgnoreDirectives(files) {
+    const directives = new Map();
+    const pattern = /codegate:\s*ignore\[([^\]]+)\]/giu;
+    for (const file of files) {
+        const lines = file.textContent.split(/\r?\n/u);
+        let directiveSet = directives.get(file.filePath);
+        for (let index = 0; index < lines.length; index += 1) {
+            const line = lines[index] ?? "";
+            pattern.lastIndex = 0;
+            for (const match of line.matchAll(pattern)) {
+                const ruleIds = parseDirectiveRules(match[1] ?? "");
+                if (ruleIds.length === 0) {
+                    continue;
+                }
+                if (!directiveSet) {
+                    directiveSet = {
+                        rules: new Set(),
+                        ruleLines: new Map(),
+                    };
+                    directives.set(file.filePath, directiveSet);
+                }
+                for (const ruleId of ruleIds) {
+                    addDirective(directiveSet, ruleId, index + 1);
+                }
+            }
+        }
+    }
+    return directives;
+}
+export function applyInlineIgnoreDirectives(findings, directives) {
+    return findings.map((finding) => {
+        const set = directives.get(finding.file_path);
+        if (!set || !set.rules.has(finding.rule_id)) {
+            return finding;
+        }
+        return {
+            ...finding,
+            suppressed: true,
+        };
+    });
+}

package/dist/config/suppression-policy.d.ts

@@ -0,0 +1,22 @@
+import type { Finding } from "../types/finding.js";
+export interface SuppressionRule {
+    rule_id?: string;
+    file_path?: string;
+    location?: string;
+    severity?: Finding["severity"];
+    category?: Finding["category"];
+    cwe?: string;
+    fingerprint?: string;
+}
+export interface RulePolicyConfig {
+    disable?: boolean;
+    ignore?: readonly string[];
+    config?: Record<string, unknown>;
+}
+export type RulePolicyMap = Record<string, RulePolicyConfig>;
+export interface SuppressionPolicy {
+    suppress_findings?: readonly string[];
+    suppression_rules?: readonly SuppressionRule[];
+    rule_policies?: RulePolicyMap;
+}
+export declare function applySuppressionPolicy<T extends Finding>(findings: T[], policy: SuppressionPolicy): T[];