ghostpatch 1.0.0

package/dist/ai/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/ai/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAgC,MAAM,kBAAkB,CAAC;AAE3E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7D,WAAW,IAAI,OAAO,CAAC;CACxB;AAED,wBAAgB,oBAAoB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAkC1E;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CAuB7D"}

package/dist/ai/provider.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAvailableProvider = getAvailableProvider;
+exports.parseAIResponse = parseAIResponse;
+const severity_1 = require("../core/severity");
+function getAvailableProvider(preferred) {
+    // Import providers lazily
+    const { HuggingFaceProvider } = require('./huggingface');
+    const { AnthropicProvider } = require('./anthropic');
+    const { OpenAIProvider } = require('./openai');
+    if (preferred) {
+        switch (preferred) {
+            case 'anthropic': {
+                const p = new AnthropicProvider();
+                if (p.isAvailable())
+                    return p;
+                break;
+            }
+            case 'openai': {
+                const p = new OpenAIProvider();
+                if (p.isAvailable())
+                    return p;
+                break;
+            }
+            case 'huggingface': {
+                const p = new HuggingFaceProvider();
+                return p;
+            }
+        }
+    }
+    // Auto-detect: prefer Anthropic > OpenAI > HuggingFace
+    const anthropic = new AnthropicProvider();
+    if (anthropic.isAvailable())
+        return anthropic;
+    const openai = new OpenAIProvider();
+    if (openai.isAvailable())
+        return openai;
+    // HuggingFace is always available (free tier)
+    return new HuggingFaceProvider();
+}
+function parseAIResponse(response) {
+    try {
+        // Try to extract JSON from the response
+        const jsonMatch = response.match(/\{[\s\S]*"findings"[\s\S]*\}/);
+        if (!jsonMatch)
+            return [];
+        const parsed = JSON.parse(jsonMatch[0]);
+        if (!Array.isArray(parsed.findings))
+            return [];
+        return parsed.findings
+            .filter((f) => f.title && f.description)
+            .map((f) => ({
+            title: String(f.title),
+            description: String(f.description),
+            severity: (0, severity_1.severityFromString)(f.severity || 'medium'),
+            confidence: (['high', 'medium', 'low'].includes(f.confidence) ? f.confidence : 'medium'),
+            line: typeof f.line === 'number' ? f.line : undefined,
+            cwe: f.cwe ? String(f.cwe) : undefined,
+            remediation: f.remediation ? String(f.remediation) : undefined,
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=provider.js.map

package/dist/ai/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/ai/provider.ts"],"names":[],"mappings":";;AAQA,oDAkCC;AAED,0CAuBC;AAnED,+CAA2E;AAQ3E,SAAgB,oBAAoB,CAAC,SAAkB;IACrD,0BAA0B;IAC1B,MAAM,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACzD,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE/C,IAAI,SAAS,EAAE,CAAC;QACd,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,CAAC,GAAG,IAAI,iBAAiB,EAAE,CAAC;gBAClC,IAAI,CAAC,CAAC,WAAW,EAAE;oBAAE,OAAO,CAAC,CAAC;gBAC9B,MAAM;YACR,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,CAAC,WAAW,EAAE;oBAAE,OAAO,CAAC,CAAC;gBAC9B,MAAM;YACR,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,CAAC,GAAG,IAAI,mBAAmB,EAAE,CAAC;gBACpC,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,MAAM,SAAS,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC1C,IAAI,SAAS,CAAC,WAAW,EAAE;QAAE,OAAO,SAAS,CAAC;IAE9C,MAAM,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;IACpC,IAAI,MAAM,CAAC,WAAW,EAAE;QAAE,OAAO,MAAM,CAAC;IAExC,8CAA8C;IAC9C,OAAO,IAAI,mBAAmB,EAAE,CAAC;AACnC,CAAC;AAED,SAAgB,eAAe,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACH,wCAAwC;QACxC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAE1B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAE/C,OAAO,MAAM,CAAC,QAAQ;aACnB,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,WAAW,CAAC;aAC5C,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACtB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;YAClC,QAAQ,EAAE,IAAA,6BAAkB,EAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;YACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAA8B;YACrH,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACrD,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;YACtC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;SAC/D,CAAC,CAAC,CAAC;IACR,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":""}

package/dist/cli/index.js

@@ -0,0 +1,318 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const scanner_1 = require("../core/scanner");
+const reporter_1 = require("../core/reporter");
+const severity_1 = require("../core/severity");
+const provider_1 = require("../ai/provider");
+const program = new commander_1.Command();
+program
+    .name('ghostpatch')
+    .description('AI-powered security vulnerability scanner')
+    .version('1.0.0');
+// ============================================================
+// scan command
+// ============================================================
+program
+    .command('scan')
+    .description('Scan for security vulnerabilities')
+    .argument('[path]', 'Path to scan', '.')
+    .option('-o, --output <format>', 'Output format: terminal, json, sarif, html', 'terminal')
+    .option('-s, --severity <level>', 'Minimum severity: critical, high, medium, low, info', 'low')
+    .option('--ai', 'Enable AI-enhanced analysis')
+    .option('--provider <name>', 'AI provider: huggingface, anthropic, openai')
+    .option('--fix', 'Show auto-fix suggestions')
+    .option('-q, --quiet', 'Minimal output')
+    .option('--exclude <patterns...>', 'Additional exclude patterns')
+    .option('--max-file-size <bytes>', 'Maximum file size in bytes', '1048576')
+    .option('--config <path>', 'Path to config file')
+    .action(async (scanPath, options) => {
+    try {
+        const resolvedPath = path.resolve(scanPath);
+        if (!fs.existsSync(resolvedPath)) {
+            console.error(`Error: Path does not exist: ${resolvedPath}`);
+            process.exit(1);
+        }
+        if (!options.quiet) {
+            console.log('\n  GhostPatch v1.0.0 — AI-Powered Security Scanner\n');
+            console.log(`  Scanning: ${resolvedPath}\n`);
+        }
+        const result = await (0, scanner_1.scan)(resolvedPath, {
+            output: options.output,
+            severity: options.severity,
+            ai: options.ai,
+            provider: options.provider,
+            fix: options.fix,
+            quiet: options.quiet,
+            exclude: options.exclude,
+            maxFileSize: parseInt(options.maxFileSize, 10),
+            configPath: options.config,
+        });
+        // If AI is enabled, run AI analysis
+        if (options.ai) {
+            const provider = (0, provider_1.getAvailableProvider)(options.provider);
+            if (provider && provider.isAvailable()) {
+                if (!options.quiet) {
+                    console.log(`  AI Provider: ${provider.name}\n`);
+                }
+                // AI analysis would happen here on suspicious findings
+            }
+        }
+        const report = (0, reporter_1.generateReport)(result, options.output, options.quiet);
+        if (options.output === 'json' || options.output === 'sarif') {
+            console.log(report);
+        }
+        else if (options.output === 'html') {
+            const outputFile = path.join(process.cwd(), 'ghostpatch-report.html');
+            fs.writeFileSync(outputFile, report, 'utf-8');
+            console.log(`  HTML report saved to: ${outputFile}\n`);
+        }
+        else {
+            console.log(report);
+        }
+        // Exit with non-zero if critical/high findings
+        const criticalOrHigh = (result.summary.bySeverity[severity_1.Severity.CRITICAL] || 0)
+            + (result.summary.bySeverity[severity_1.Severity.HIGH] || 0);
+        if (criticalOrHigh > 0) {
+            process.exit(1);
+        }
+    }
+    catch (err) {
+        console.error(`Error: ${err.message}`);
+        process.exit(1);
+    }
+});
+// ============================================================
+// secrets command
+// ============================================================
+program
+    .command('secrets')
+    .description('Scan for hardcoded secrets and API keys')
+    .argument('[path]', 'Path to scan', '.')
+    .option('-o, --output <format>', 'Output format', 'terminal')
+    .option('-q, --quiet', 'Minimal output')
+    .action(async (scanPath, options) => {
+    try {
+        const resolvedPath = path.resolve(scanPath);
+        if (!options.quiet) {
+            console.log('\n  GhostPatch — Secrets Scanner\n');
+        }
+        const result = await (0, scanner_1.scan)(resolvedPath, {
+            output: options.output,
+            severity: severity_1.Severity.LOW,
+        });
+        // Filter to only secrets-related findings
+        const secretsResult = {
+            ...result,
+            findings: result.findings.filter(f => f.ruleId.startsWith('SEC-') ||
+                f.ruleId.startsWith('SEC') ||
+                f.title.toLowerCase().includes('secret') ||
+                f.title.toLowerCase().includes('key') ||
+                f.title.toLowerCase().includes('token') ||
+                f.title.toLowerCase().includes('password') ||
+                f.title.toLowerCase().includes('credential')),
+        };
+        secretsResult.summary.total = secretsResult.findings.length;
+        const report = (0, reporter_1.generateReport)(secretsResult, options.output, options.quiet);
+        console.log(report);
+    }
+    catch (err) {
+        console.error(`Error: ${err.message}`);
+        process.exit(1);
+    }
+});
+// ============================================================
+// deps command
+// ============================================================
+program
+    .command('deps')
+    .description('Check dependencies for known vulnerabilities')
+    .argument('[path]', 'Path to scan', '.')
+    .option('-o, --output <format>', 'Output format', 'terminal')
+    .action(async (scanPath, options) => {
+    try {
+        const resolvedPath = path.resolve(scanPath);
+        console.log('\n  GhostPatch — Dependency Scanner\n');
+        const result = await (0, scanner_1.scan)(resolvedPath, {
+            output: options.output,
+            severity: severity_1.Severity.LOW,
+        });
+        const depsResult = {
+            ...result,
+            findings: result.findings.filter(f => f.ruleId.startsWith('DEP-') ||
+                f.owasp === 'A06'),
+        };
+        depsResult.summary.total = depsResult.findings.length;
+        const report = (0, reporter_1.generateReport)(depsResult, options.output);
+        console.log(report);
+    }
+    catch (err) {
+        console.error(`Error: ${err.message}`);
+        process.exit(1);
+    }
+});
+// ============================================================
+// watch command
+// ============================================================
+program
+    .command('watch')
+    .description('Watch mode — scan on file changes')
+    .argument('[path]', 'Path to watch', '.')
+    .option('-s, --severity <level>', 'Minimum severity', 'medium')
+    .option('-q, --quiet', 'Minimal output')
+    .action(async (watchPath, options) => {
+    try {
+        const resolvedPath = path.resolve(watchPath);
+        console.log('\n  GhostPatch — Watch Mode\n');
+        console.log(`  Watching: ${resolvedPath}\n`);
+        const chokidar = require('chokidar');
+        const watcher = chokidar.watch(resolvedPath, {
+            ignored: ['**/node_modules/**', '**/dist/**', '**/.git/**'],
+            persistent: true,
+            ignoreInitial: true,
+        });
+        let scanTimeout = null;
+        const runScan = async () => {
+            console.log('\n  File change detected. Scanning...\n');
+            const result = await (0, scanner_1.scan)(resolvedPath, {
+                severity: options.severity,
+                quiet: true,
+            });
+            const report = (0, reporter_1.generateReport)(result, 'terminal', options.quiet);
+            console.log(report);
+        };
+        watcher.on('change', () => {
+            if (scanTimeout)
+                clearTimeout(scanTimeout);
+            scanTimeout = setTimeout(runScan, 500);
+        });
+        watcher.on('add', () => {
+            if (scanTimeout)
+                clearTimeout(scanTimeout);
+            scanTimeout = setTimeout(runScan, 500);
+        });
+        // Initial scan
+        await runScan();
+        console.log('  Watching for changes... (Ctrl+C to stop)\n');
+    }
+    catch (err) {
+        console.error(`Error: ${err.message}`);
+        process.exit(1);
+    }
+});
+// ============================================================
+// report command
+// ============================================================
+program
+    .command('report')
+    .description('Generate HTML security report')
+    .argument('[path]', 'Path to scan', '.')
+    .option('-o, --output <file>', 'Output file', 'ghostpatch-report.html')
+    .option('-s, --severity <level>', 'Minimum severity', 'low')
+    .option('--ai', 'Enable AI analysis')
+    .action(async (scanPath, options) => {
+    try {
+        const resolvedPath = path.resolve(scanPath);
+        console.log('\n  GhostPatch — Generating Report\n');
+        const result = await (0, scanner_1.scan)(resolvedPath, {
+            severity: options.severity,
+            ai: options.ai,
+        });
+        const html = (0, reporter_1.generateReport)(result, 'html');
+        const outputFile = path.resolve(options.output);
+        fs.writeFileSync(outputFile, html, 'utf-8');
+        console.log(`  Report saved to: ${outputFile}`);
+        console.log(`  Findings: ${result.summary.total}\n`);
+    }
+    catch (err) {
+        console.error(`Error: ${err.message}`);
+        process.exit(1);
+    }
+});
+// ============================================================
+// serve command (MCP server)
+// ============================================================
+program
+    .command('serve')
+    .description('Start MCP server for AI coding agents')
+    .action(async () => {
+    const { startMCPServer } = require('../mcp/server');
+    await startMCPServer();
+});
+// ============================================================
+// install command
+// ============================================================
+program
+    .command('install')
+    .description('Configure GhostPatch MCP for Claude Code')
+    .action(async () => {
+    try {
+        const home = process.env.HOME || process.env.USERPROFILE || '';
+        const claudeConfigDir = path.join(home, '.claude');
+        const mcpConfigPath = path.join(claudeConfigDir, 'mcp_servers.json');
+        if (!fs.existsSync(claudeConfigDir)) {
+            fs.mkdirSync(claudeConfigDir, { recursive: true });
+        }
+        let config = {};
+        if (fs.existsSync(mcpConfigPath)) {
+            config = JSON.parse(fs.readFileSync(mcpConfigPath, 'utf-8'));
+        }
+        config.ghostpatch = {
+            command: 'node',
+            args: [path.resolve(__dirname, '../mcp/server.js')],
+        };
+        fs.writeFileSync(mcpConfigPath, JSON.stringify(config, null, 2), 'utf-8');
+        console.log('\n  GhostPatch MCP server configured for Claude Code!');
+        console.log(`  Config: ${mcpConfigPath}\n`);
+    }
+    catch (err) {
+        console.error(`Error: ${err.message}`);
+        process.exit(1);
+    }
+});
+// ============================================================
+// Default command (scan current directory)
+// ============================================================
+program
+    .action(async () => {
+    // If no command provided, run scan on current directory
+    await program.parseAsync(['node', 'ghostpatch', 'scan', '.']);
+});
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,yCAAoC;AACpC,uCAAyB;AACzB,2CAA6B;AAC7B,6CAAuC;AACvC,+CAAkD;AAClD,+CAA4C;AAC5C,6CAAsD;AAEtD,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,2CAA2C,CAAC;KACxD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,+DAA+D;AAC/D,eAAe;AACf,+DAA+D;AAC/D,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,mCAAmC,CAAC;KAChD,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,CAAC;KACvC,MAAM,CAAC,uBAAuB,EAAE,4CAA4C,EAAE,UAAU,CAAC;KACzF,MAAM,CAAC,wBAAwB,EAAE,qDAAqD,EAAE,KAAK,CAAC;KAC9F,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC;KAC7C,MAAM,CAAC,mBAAmB,EAAE,6CAA6C,CAAC;KAC1E,MAAM,CAAC,OAAO,EAAE,2BAA2B,CAAC;KAC5C,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC;KACvC,MAAM,CAAC,yBAAyB,EAAE,6BAA6B,CAAC;KAChE,MAAM,CAAC,yBAAyB,EAAE,4BAA4B,EAAE,SAAS,CAAC;KAC1E,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;KAChD,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,OAAY,EAAE,EAAE;IAC/C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,eAAe,YAAY,IAAI,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,cAAI,EAAC,YAAY,EAAE;YACtC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAoB;YACtC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9C,UAAU,EAAE,OAAO,CAAC,MAAM;SAC3B,CAAC,CAAC;QAEH,oCAAoC;QACpC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAA,+BAAoB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;gBACnD,CAAC;gBACD,uDAAuD;YACzD,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,yBAAc,EAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAErE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;YACtE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,2BAA2B,UAAU,IAAI,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAED,+CAA+C;QAC/C,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,mBAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;cACtE,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,mBAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,+DAA+D;AAC/D,kBAAkB;AAClB,+DAA+D;AAC/D,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,yCAAyC,CAAC;KACtD,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,CAAC;KACvC,MAAM,CAAC,uBAAuB,EAAE,eAAe,EAAE,UAAU,CAAC;KAC5D,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC;KACvC,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,OAAY,EAAE,EAAE;IAC/C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,cAAI,EAAC,YAAY,EAAE;YACtC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,mBAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,0CAA0C;QAC1C,MAAM,aAAa,GAAG;YACpB,GAAG,MAAM;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACnC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC3B,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC1B,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACxC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACrC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACvC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC1C,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC7C;SACF,CAAC;QACF,aAAa,CAAC,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;QAE5D,MAAM,MAAM,GAAG,IAAA,yBAAc,EAAC,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,+DAA+D;AAC/D,eAAe;AACf,+DAA+D;AAC/D,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,8CAA8C,CAAC;KAC3D,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,CAAC;KACvC,MAAM,CAAC,uBAAuB,EAAE,eAAe,EAAE,UAAU,CAAC;KAC5D,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,OAAY,EAAE,EAAE;IAC/C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,IAAA,cAAI,EAAC,YAAY,EAAE;YACtC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,mBAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG;YACjB,GAAG,MAAM;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACnC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC3B,CAAC,CAAC,KAAK,KAAK,KAAK,CAClB;SACF,CAAC;QACF,UAAU,CAAC,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QAEtD,MAAM,MAAM,GAAG,IAAA,yBAAc,EAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,+DAA+D;AAC/D,gBAAgB;AAChB,+DAA+D;AAC/D,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,mCAAmC,CAAC;KAChD,QAAQ,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC;KACxC,MAAM,CAAC,wBAAwB,EAAE,kBAAkB,EAAE,QAAQ,CAAC;KAC9D,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC;KACvC,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAAY,EAAE,EAAE;IAChD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,YAAY,IAAI,CAAC,CAAC;QAE7C,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE;YAC3C,OAAO,EAAE,CAAC,oBAAoB,EAAE,YAAY,EAAE,YAAY,CAAC;YAC3D,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QAEH,IAAI,WAAW,GAA0B,IAAI,CAAC;QAE9C,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,IAAA,cAAI,EAAC,YAAY,EAAE;gBACtC,QAAQ,EAAE,OAAO,CAAC,QAAoB;gBACtC,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,yBAAc,EAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,IAAI,WAAW;gBAAE,YAAY,CAAC,WAAW,CAAC,CAAC;YAC3C,WAAW,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,WAAW;gBAAE,YAAY,CAAC,WAAW,CAAC,CAAC;YAC3C,WAAW,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,eAAe;QACf,MAAM,OAAO,EAAE,CAAC;QAEhB,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,+DAA+D;AAC/D,iBAAiB;AACjB,+DAA+D;AAC/D,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,+BAA+B,CAAC;KAC5C,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,CAAC;KACvC,MAAM,CAAC,qBAAqB,EAAE,aAAa,EAAE,wBAAwB,CAAC;KACtE,MAAM,CAAC,wBAAwB,EAAE,kBAAkB,EAAE,KAAK,CAAC;KAC3D,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC;KACpC,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,OAAY,EAAE,EAAE;IAC/C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,IAAA,cAAI,EAAC,YAAY,EAAE;YACtC,QAAQ,EAAE,OAAO,CAAC,QAAoB;YACtC,EAAE,EAAE,OAAO,CAAC,EAAE;SACf,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAA,yBAAc,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,+DAA+D;AAC/D,6BAA6B;AAC7B,+DAA+D;AAC/D,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,uCAAuC,CAAC;KACpD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpD,MAAM,cAAc,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,+DAA+D;AAC/D,kBAAkB;AAClB,+DAA+D;AAC/D,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC/D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;QAErE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,MAAM,GAAQ,EAAE,CAAC;QACrB,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,CAAC,UAAU,GAAG;YAClB,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;SACpD,CAAC;QAEF,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,aAAa,aAAa,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,+DAA+D;AAC/D,2CAA2C;AAC3C,+DAA+D;AAC/D,OAAO;KACJ,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,wDAAwD;IACxD,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/core/reporter.d.ts

@@ -0,0 +1,7 @@
+import { ScanResult } from './severity';
+export declare function reportTerminal(result: ScanResult, quiet?: boolean): string;
+export declare function reportJSON(result: ScanResult): string;
+export declare function reportSARIF(result: ScanResult): string;
+export declare function reportHTML(result: ScanResult): string;
+export declare function generateReport(result: ScanResult, format?: 'terminal' | 'json' | 'sarif' | 'html', quiet?: boolean): string;
+//# sourceMappingURL=reporter.d.ts.map

package/dist/core/reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporter.d.ts","sourceRoot":"","sources":["../../src/core/reporter.ts"],"names":[],"mappings":"AACA,OAAO,EAAW,UAAU,EAA6C,MAAM,YAAY,CAAC;AAc5F,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,GAAE,OAAe,GAAG,MAAM,CA8DjF;AAsCD,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAkCrD;AAKD,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CA2CtD;AAsCD,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAwFrD;AAoBD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,EAClB,MAAM,GAAE,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,MAAmB,EAC3D,KAAK,GAAE,OAAe,GACrB,MAAM,CAQR"}