hazmat-cli 0.1.0

package/README.md

@@ -0,0 +1,39 @@
+# Hazmat
+
+Local exposure scanner and scrubber for AI coding-agent transcripts.
+
+Current pre-v0 supports scan/report/export plus in-place scrubbing for discovered Codex, Claude, pi, OpenCode, and best-effort Cursor transcript sources.
+
+```bash
+bun install
+bun run build
+node dist/src/cli.js scan
+node dist/src/cli.js report
+node dist/src/cli.js export --out report.json
+node dist/src/cli.js scrub --dry-run
+```
+
+Publish flow:
+
+```bash
+# terminal 1
+cd web && bun run dev
+
+# terminal 2
+export HAZMAT_API_URL=http://localhost:3000
+export HAZMAT_GITHUB_CLIENT_ID=<github-oauth-client-id>
+node dist/src/cli.js login
+node dist/src/cli.js export --publish
+# or: node dist/src/cli.js scan --publish
+```
+
+For CLI login, enable Device Flow on the GitHub OAuth App.
+
+Planned package binary:
+
+```bash
+hazmat scan
+hazmat report
+hazmat export --publish
+hazmat scrub
+```

package/dist/src/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/src/cli.js

@@ -0,0 +1,239 @@
+#!/usr/bin/env node
+import { writeFile } from "node:fs/promises";
+import { cpus } from "node:os";
+import { createInterface } from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
+import { Command } from "commander";
+import { scanCodexFile } from "./codex.js";
+import { scanGenericTranscriptFile } from "./jsonl.js";
+import { buildScanReport, buildSharePayload, formatReport } from "./report.js";
+import { loginWithGithubDeviceFlow, publishPayload } from "./publish.js";
+import { scanSQLiteSource } from "./sqlite.js";
+import { discoverDefaultSources, discoverPathSources } from "./sources.js";
+import { dryRunSQLiteScrub, scrubSQLiteInPlace } from "./sqliteScrub.js";
+import { dryRunScrubTextFile, scrubTextFileInPlace } from "./scrub.js";
+import { latestScanPath, loadLatestScan, saveLatestScan } from "./state.js";
+import { c, printBanner, progressLine, savedLine, scrubSummary } from "./ui.js";
+installWarningFilter();
+const program = new Command();
+program
+    .name("hazmat")
+    .description("Local exposure scanner for AI coding-agent transcripts")
+    .version("0.0.0");
+program
+    .command("scan")
+    .description("Scan agent transcripts for sensitive exposure")
+    .argument("[paths...]", "optional files or directories to scan; defaults to known transcript locations")
+    .option("--json", "print JSON instead of terminal report")
+    .option("--publish", "publish the privacy-safe export after scanning")
+    .action(async (paths, options) => {
+    const report = await runScan(paths, { quiet: Boolean(options.json) });
+    if (options.json)
+        console.log(JSON.stringify(report, null, 2));
+    else {
+        console.log(formatReport(report));
+        console.log("");
+        console.log(savedLine(latestScanPath));
+    }
+    if (options.publish)
+        await publishReport(report);
+});
+program
+    .command("scrub")
+    .description("Redact secret values in transcript files/databases in-place")
+    .argument("[paths...]", "optional files, directories, or DBs to scrub; defaults to known transcript locations")
+    .option("--dry-run", "show what would change without modifying files")
+    .option("--yes", "skip confirmation prompt")
+    .action(async (paths, options) => {
+    const scrubSources = paths.length > 0 ? await discoverPathSources(paths) : await discoverDefaultSources();
+    if (!options.dryRun && !options.yes) {
+        const ok = await confirmScrub(scrubSources.length, paths.length === 0);
+        if (!ok) {
+            console.error("Scrub cancelled.");
+            process.exitCode = 1;
+            return;
+        }
+    }
+    const concurrency = Math.max(1, Math.min(4, cpus().length || 1));
+    console.error(`${options.dryRun ? "Checking" : "Scrubbing"} ${scrubSources.length} sources with concurrency ${concurrency}...`);
+    const results = await mapLimit(scrubSources, concurrency, async (source, index) => {
+        console.error(progressLine("start", index + 1, scrubSources.length, source.harness, source.path));
+        try {
+            const result = await scrubSource(source, Boolean(options.dryRun));
+            console.error(progressLine("done", index + 1, scrubSources.length, source.harness, source.path));
+            return result;
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            console.error(`${c.warn("skip")} ${source.harness} ${source.path}: ${message}`);
+            return null;
+        }
+    });
+    const completed = results.filter((result) => result !== null);
+    const skipped = scrubSources.length - completed.length;
+    const changedFiles = completed.filter((result) => result.changed > 0).length;
+    const redactions = completed.reduce((total, result) => total + result.redactions, 0);
+    const changedLines = completed.reduce((total, result) => total + result.changed, 0);
+    console.log(scrubSummary(changedFiles, scrubSources.length, redactions, changedLines, Boolean(options.dryRun), skipped));
+});
+program
+    .command("export")
+    .description("Export or publish the privacy-safe aggregate report from the latest scan")
+    .option("--json", "print privacy-safe JSON to stdout")
+    .option("--out <path>", "write privacy-safe JSON to a file")
+    .option("--publish", "publish the privacy-safe export to the configured backend")
+    .action(async (options) => {
+    const report = await loadLatestScan();
+    if (!report) {
+        console.error("No scan report found. Run: hazmat scan");
+        process.exitCode = 1;
+        return;
+    }
+    const payload = buildSharePayload(report);
+    const json = `${JSON.stringify(payload, null, 2)}\n`;
+    if (options.out) {
+        await writeFile(options.out, json, "utf8");
+        console.log(`Wrote privacy-safe export: ${options.out}`);
+    }
+    if (options.publish)
+        await publishReport(report);
+    if (options.json || (!options.out && !options.publish))
+        console.log(json);
+});
+program
+    .command("share", { hidden: true })
+    .description("Alias for export")
+    .option("--out <path>", "write privacy-safe JSON to a file")
+    .option("--publish", "publish the privacy-safe export to the configured backend")
+    .action(async (options) => {
+    const report = await loadLatestScan();
+    if (!report) {
+        console.error("No scan report found. Run: hazmat scan");
+        process.exitCode = 1;
+        return;
+    }
+    const payload = buildSharePayload(report);
+    if (options.out) {
+        await writeFile(options.out, `${JSON.stringify(payload, null, 2)}\n`, "utf8");
+        console.log(`Wrote privacy-safe export: ${options.out}`);
+    }
+    if (options.publish)
+        await publishReport(report);
+    if (!options.out && !options.publish)
+        console.log(`${JSON.stringify(payload, null, 2)}\n`);
+});
+program
+    .command("login")
+    .description("Log in with GitHub for publishing reports")
+    .action(async () => {
+    await loginWithGithubDeviceFlow();
+});
+program
+    .command("report")
+    .description("Show latest saved scan report")
+    .option("--json", "print JSON instead of terminal report")
+    .option("--verbose", "show per-session fingerprints and paths")
+    .action(async (options) => {
+    const report = await loadLatestScan();
+    if (!report) {
+        console.error("No scan report found. Run: hazmat scan");
+        process.exitCode = 1;
+        return;
+    }
+    if (options.json)
+        console.log(JSON.stringify(report, null, 2));
+    else {
+        printBanner();
+        console.log(formatReport(report, { verbose: options.verbose }));
+    }
+});
+function installWarningFilter() {
+    const originalEmitWarning = process.emitWarning.bind(process);
+    process.emitWarning = ((warning, ...args) => {
+        const message = typeof warning === "string" ? warning : warning.message;
+        if (message.includes("SQLite is an experimental feature"))
+            return;
+        return originalEmitWarning(warning, ...args);
+    });
+}
+async function runScan(paths, options) {
+    const scanSources = paths.length > 0 ? await discoverPathSources(paths) : await discoverDefaultSources();
+    const concurrency = Math.max(1, Math.min(4, cpus().length || 1));
+    if (!options.quiet) {
+        printBanner();
+        console.log(`${c.heading("Scanning")} ${c.value(String(scanSources.length))} sources ${c.muted(`with concurrency ${concurrency}`)}...`);
+    }
+    const sourceResults = await mapLimit(scanSources, concurrency, async (source, index) => {
+        if (!options.quiet)
+            console.log(progressLine("start", index + 1, scanSources.length, source.harness, source.path));
+        const result = await scanSource(source);
+        if (!options.quiet)
+            console.log(progressLine("done", index + 1, scanSources.length, source.harness, source.path));
+        return result;
+    });
+    const report = buildScanReport(sourceResults.filter((source) => source !== null));
+    await saveLatestScan(report);
+    return report;
+}
+async function publishReport(report) {
+    const payload = buildSharePayload(report);
+    const result = await publishPayload(payload);
+    console.log(`${c.good("✓")} Published report: ${c.accent(result.url)}`);
+}
+async function scanSource(source) {
+    if (source.kind === "sqlite")
+        return scanSQLiteSource(source.path, source.harness);
+    if (source.harness === "codex")
+        return scanCodexFile(source.path);
+    return scanGenericTranscriptFile(source.path, source.harness);
+}
+async function scrubSource(source, dryRun) {
+    if (source.kind === "sqlite") {
+        const result = dryRun
+            ? await dryRunSQLiteScrub(source.path, source.harness)
+            : await scrubSQLiteInPlace(source.path, source.harness);
+        if (!result)
+            return null;
+        return { changed: result.rowsChanged, redactions: result.redactions };
+    }
+    const result = dryRun ? await dryRunScrubTextFile(source.path) : await scrubTextFileInPlace(source.path);
+    return { changed: result.linesChanged, redactions: result.redactions };
+}
+async function confirmScrub(fileCount, isDefaultDiscovery) {
+    if (!process.stdin.isTTY) {
+        console.error("Non-interactive shell detected. Re-run with --yes to scrub.");
+        return false;
+    }
+    const scope = isDefaultDiscovery ? "all discovered transcript sources" : "the selected transcript sources";
+    const rl = createInterface({ input, output });
+    try {
+        const answer = await rl.question(`This will redact secret-like values in-place in ${fileCount} files (${scope}). Continue? [Y/n] `);
+        const normalized = answer.trim().toLowerCase();
+        return normalized === "" || normalized === "y" || normalized === "yes";
+    }
+    finally {
+        rl.close();
+    }
+}
+async function mapLimit(items, limit, fn) {
+    const results = new Array(items.length);
+    let nextIndex = 0;
+    async function worker() {
+        while (true) {
+            const index = nextIndex;
+            nextIndex += 1;
+            if (index >= items.length)
+                return;
+            results[index] = await fn(items[index], index);
+        }
+    }
+    const workers = Array.from({ length: Math.min(limit, items.length) }, () => worker());
+    await Promise.all(workers);
+    return results;
+}
+program.parseAsync(process.argv).catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(`hazmat: ${message}`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/src/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAsB,aAAa,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAmB,MAAM,cAAc,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEhF,oBAAoB,EAAE,CAAC;AAEvB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,wDAAwD,CAAC;KACrE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,+CAA+C,CAAC;KAC5D,QAAQ,CAAC,YAAY,EAAE,+EAA+E,CAAC;KACvG,MAAM,CAAC,QAAQ,EAAE,uCAAuC,CAAC;KACzD,MAAM,CAAC,WAAW,EAAE,gDAAgD,CAAC;KACrE,MAAM,CAAC,KAAK,EAAE,KAAe,EAAE,OAA8C,EAAE,EAAE;IAChF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEtE,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;SAC1D,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,CAAC,OAAO;QAAE,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,QAAQ,CAAC,YAAY,EAAE,sFAAsF,CAAC;KAC9G,MAAM,CAAC,WAAW,EAAE,gDAAgD,CAAC;KACrE,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,KAAe,EAAE,OAA4C,EAAE,EAAE;IAC9E,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,sBAAsB,EAAE,CAAC;IAE1G,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,IAAI,YAAY,CAAC,MAAM,6BAA6B,WAAW,KAAK,CAAC,CAAC;IAEhI,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;QAChF,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACjG,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IACvD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7E,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3H,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,0EAA0E,CAAC;KACvF,MAAM,CAAC,QAAQ,EAAE,mCAAmC,CAAC;KACrD,MAAM,CAAC,cAAc,EAAE,mCAAmC,CAAC;KAC3D,MAAM,CAAC,WAAW,EAAE,2DAA2D,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,OAA4D,EAAE,EAAE;IAC7E,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACrD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,8BAA8B,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,OAAO;QAAE,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAClC,WAAW,CAAC,kBAAkB,CAAC;KAC/B,MAAM,CAAC,cAAc,EAAE,mCAAmC,CAAC;KAC3D,MAAM,CAAC,WAAW,EAAE,2DAA2D,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,OAA4C,EAAE,EAAE;IAC7D,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,8BAA8B,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,OAAO;QAAE,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC7F,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,yBAAyB,EAAE,CAAC;AACpC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,+BAA+B,CAAC;KAC5C,MAAM,CAAC,QAAQ,EAAE,uCAAuC,CAAC;KACzD,MAAM,CAAC,WAAW,EAAE,yCAAyC,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,OAA8C,EAAE,EAAE;IAC/D,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;SAC1D,CAAC;QACJ,WAAW,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,SAAS,oBAAoB;IAC3B,MAAM,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC,OAAuB,EAAE,GAAG,IAAe,EAAE,EAAE;QACrE,MAAM,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxE,IAAI,OAAO,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAAE,OAAO;QAClE,OAAO,mBAAmB,CAAC,OAAgB,EAAE,GAAI,IAAgB,CAAC,CAAC;IACrE,CAAC,CAA+B,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,KAAe,EAAE,OAA2B;IACjE,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,sBAAsB,EAAE,CAAC;IACzG,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;IAEjE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,WAAW,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,oBAAoB,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;IAC1I,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;QACrF,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACnH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,EAAwC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC;IACxH,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAmD;IAC9E,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAkB;IAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAID,KAAK,UAAU,WAAW,CAAC,MAAkB,EAAE,MAAe;IAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM;YACnB,CAAC,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC;YACtD,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzG,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,kBAA2B;IACxE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,iCAAiC,CAAC;IAC3G,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAC9B,mDAAmD,SAAS,WAAW,KAAK,qBAAqB,CAClG,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,OAAO,UAAU,KAAK,EAAE,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,CAAC;IACzE,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAO,KAAU,EAAE,KAAa,EAAE,EAA0C;IACjG,MAAM,OAAO,GAAG,IAAI,KAAK,CAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,UAAU,MAAM;QACnB,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,SAAS,CAAC;YACxB,SAAS,IAAI,CAAC,CAAC;YACf,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAO;YAClC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAM,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IACxD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/codex.d.ts

@@ -0,0 +1,3 @@
+import type { SourceReport } from "./types.js";
+export declare function discoverCodexFiles(inputPaths?: string[]): Promise<string[]>;
+export declare function scanCodexFile(filePath: string): Promise<SourceReport>;

package/dist/src/codex.js

@@ -0,0 +1,135 @@
+import { createReadStream } from "node:fs";
+import { access, readdir, stat } from "node:fs/promises";
+import { createInterface } from "node:readline";
+import { homedir } from "node:os";
+import path from "node:path";
+import { hasDetectorHint } from "./detectors.js";
+import { buildSourceReport, createFindingState, scanCandidateText } from "./scanner.js";
+const CODEX_DIR = path.join(homedir(), ".codex");
+const CODEX_SESSIONS_DIR = path.join(CODEX_DIR, "sessions");
+const CODEX_EXTRA_FILES = [path.join(CODEX_DIR, "history.jsonl"), path.join(CODEX_DIR, "session_index.jsonl")];
+const SCANNABLE_EXTENSIONS = new Set([".jsonl", ".json", ".log", ".txt"]);
+export async function discoverCodexFiles(inputPaths = []) {
+    const roots = inputPaths.length > 0 ? inputPaths.map(expandHome) : [CODEX_SESSIONS_DIR, ...CODEX_EXTRA_FILES];
+    const files = new Set();
+    for (const root of roots) {
+        if (!(await exists(root)))
+            continue;
+        const rootStat = await stat(root);
+        if (rootStat.isDirectory()) {
+            for await (const file of walk(root))
+                if (isScannable(file))
+                    files.add(file);
+        }
+        else if (rootStat.isFile() && isScannable(root))
+            files.add(root);
+    }
+    return [...files].sort();
+}
+export async function scanCodexFile(filePath) {
+    const state = createFindingState();
+    let linesScanned = 0;
+    const rl = createInterface({ input: createReadStream(filePath, { encoding: "utf8" }), crlfDelay: Infinity });
+    for await (const line of rl) {
+        linesScanned += 1;
+        for (const text of extractCodexScanTexts(line))
+            scanCandidateText(text, state);
+    }
+    return buildSourceReport({ harness: "codex", path: filePath, linesScanned, state });
+}
+function extractCodexScanTexts(line) {
+    if (!hasDetectorHint(line))
+        return [];
+    let entry;
+    try {
+        entry = JSON.parse(line);
+    }
+    catch {
+        return [line];
+    }
+    if (!isObject(entry))
+        return [line];
+    const type = stringValue(entry.type);
+    const payload = isObject(entry.payload) ? entry.payload : undefined;
+    if (!payload)
+        return [];
+    const payloadType = stringValue(payload.type);
+    if (type === "event_msg") {
+        if (payloadType === "user_message" || payloadType === "agent_message")
+            return compactStrings([payload.message]);
+        if (payloadType === "task_complete")
+            return compactStrings([payload.last_agent_message]);
+        return [];
+    }
+    if (type === "response_item") {
+        if (payloadType === "function_call")
+            return compactStrings([payload.name, payload.arguments]);
+        if (payloadType === "function_call_output")
+            return compactStrings([payload.output]);
+        if (payloadType === "message")
+            return extractContentText(payload.content);
+        if (payloadType === "reasoning")
+            return extractContentText(payload.summary);
+        return [];
+    }
+    if (type === "turn_context")
+        return compactStrings([payload.user_instructions, payload.summary]);
+    if (type === "session_meta")
+        return [];
+    return extractLikelyText(payload);
+}
+function extractContentText(value) {
+    if (!Array.isArray(value))
+        return compactStrings([value]);
+    const out = [];
+    for (const item of value) {
+        if (typeof item === "string")
+            out.push(item);
+        else if (isObject(item))
+            out.push(...compactStrings([item.text, item.content, item.message, item.output]));
+    }
+    return out;
+}
+function extractLikelyText(value, depth = 0) {
+    if (depth > 4)
+        return [];
+    if (typeof value === "string")
+        return [value];
+    if (Array.isArray(value))
+        return value.flatMap((item) => extractLikelyText(item, depth + 1));
+    if (!isObject(value))
+        return [];
+    const out = [];
+    for (const [key, nested] of Object.entries(value)) {
+        if (["encrypted_content", "rate_limits", "usage", "base_instructions"].includes(key))
+            continue;
+        if (["message", "text", "content", "output", "arguments", "user_instructions", "last_agent_message"].includes(key))
+            out.push(...extractLikelyText(nested, depth + 1));
+    }
+    return out;
+}
+async function* walk(dir) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        const fullPath = path.join(dir, entry.name);
+        if (entry.isDirectory())
+            yield* walk(fullPath);
+        else if (entry.isFile())
+            yield fullPath;
+    }
+}
+function compactStrings(values) { return values.filter((value) => typeof value === "string" && value.length > 0); }
+function stringValue(value) { return typeof value === "string" ? value : undefined; }
+function isObject(value) { return typeof value === "object" && value !== null; }
+function isScannable(filePath) { return SCANNABLE_EXTENSIONS.has(path.extname(filePath).toLowerCase()); }
+function expandHome(input) { if (input === "~")
+    return homedir(); if (input.startsWith("~/"))
+    return path.join(homedir(), input.slice(2)); return path.resolve(input); }
+async function exists(filePath) { try {
+    await access(filePath);
+    return true;
+}
+catch {
+    return false;
+} }
+//# sourceMappingURL=codex.js.map

package/dist/src/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/codex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGxF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AACjD,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC5D,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAC/G,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAU,GAAa,EAAE;IAChE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,GAAG,iBAAiB,CAAC,CAAC;IAC9G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,WAAW,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB;IAClD,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE7G,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,YAAY,IAAI,CAAC,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC;YAAE,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,iBAAiB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9C,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,IAAI,WAAW,KAAK,cAAc,IAAI,WAAW,KAAK,eAAe;YAAE,OAAO,cAAc,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAChH,IAAI,WAAW,KAAK,eAAe;YAAE,OAAO,cAAc,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACzF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,IAAI,WAAW,KAAK,eAAe;YAAE,OAAO,cAAc,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9F,IAAI,WAAW,KAAK,sBAAsB;YAAE,OAAO,cAAc,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACpF,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAI,WAAW,KAAK,WAAW;YAAE,OAAO,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,cAAc,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACjG,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACxC,IAAI,QAAQ,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAClD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,mBAAmB,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/F,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACxK,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,GAAW;IAC9B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aAC1C,IAAI,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,QAAQ,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAiB,IAAc,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACzJ,SAAS,WAAW,CAAC,KAAc,IAAwB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAClH,SAAS,QAAQ,CAAC,KAAc,IAAsC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC;AAC3H,SAAS,WAAW,CAAC,QAAgB,IAAa,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1H,SAAS,UAAU,CAAC,KAAa,IAAY,IAAI,KAAK,KAAK,GAAG;IAAE,OAAO,OAAO,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;IAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxL,KAAK,UAAU,MAAM,CAAC,QAAgB,IAAsB,IAAI,CAAC;IAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAAC,OAAO,IAAI,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,KAAK,CAAC;AAAC,CAAC,CAAC,CAAC"}

package/dist/src/detectors.d.ts

@@ -0,0 +1,20 @@
+import type { FileRefFinding, SecretFinding } from "./types.js";
+type SecretMatch = {
+    label: string;
+    value: string;
+};
+type FileRefMatch = {
+    label: string;
+    value: string;
+};
+export declare function hasDetectorHint(text: string): boolean;
+export declare function detectSecrets(text: string): SecretMatch[];
+export declare function detectFileReferences(text: string): FileRefMatch[];
+export declare function redactText(text: string): {
+    text: string;
+    redactions: number;
+};
+export declare function fingerprint(value: string): string;
+export declare function addSecretFinding(map: Map<string, SecretFinding>, match: SecretMatch): void;
+export declare function addFileRefFinding(map: Map<string, FileRefFinding>, match: FileRefMatch): void;
+export {};

package/dist/src/detectors.js

@@ -0,0 +1,120 @@
+import { createHash } from "node:crypto";
+const secretPatterns = [
+    {
+        label: "private-key",
+        hints: ["PRIVATE KEY"],
+        regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]+?-----END [A-Z ]*PRIVATE KEY-----/g,
+    },
+    {
+        label: "anthropic-api-key",
+        hints: ["sk-ant-"],
+        regex: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g,
+    },
+    {
+        label: "openai-api-key",
+        hints: ["sk-"],
+        regex: /\bsk-[A-Za-z0-9_-]{20,}\b/g,
+    },
+    {
+        label: "github-token",
+        hints: ["ghp_", "gho_", "ghu_", "ghs_", "ghr_"],
+        regex: /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g,
+    },
+    {
+        label: "database-url",
+        hints: ["postgres://", "postgresql://", "mysql://", "mongodb://", "mongodb+srv://", "redis://"],
+        regex: /(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis):\/\/[^\s"'`<>\\]+/gi,
+    },
+    {
+        label: "jwt",
+        hints: ["eyJ"],
+        regex: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,
+    },
+    {
+        label: "webhook-url",
+        hints: ["webhook", "hooks.slack", "discord.com/api/webhooks", "discordapp.com/api/webhooks"],
+        regex: /https:\/\/[^\s"'`<>]*(?:webhook|hooks\.slack|discord(?:app)?\.com\/api\/webhooks)[^\s"'`<>]*/gi,
+    },
+    {
+        label: "env-secret-assignment",
+        hints: ["KEY", "TOKEN", "SECRET", "PASSWORD", "DATABASE_URL", "DB_URL", "AUTH"],
+        regex: /(?:^|\\n|[^A-Za-z0-9_])([A-Z][A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|PASS|DATABASE_URL|DB_URL|AUTH)[A-Z0-9_]*)\s*=\s*(["']?)([^\s"'`\\<>]{8,})\2/g,
+        valueGroup: 3,
+    },
+];
+const fileReferenceHints = [".env", "id_rsa", "id_ed25519", ".pem", ".p12", ".pfx", "wallet", "keypair"];
+const fileRefPattern = /(?:^|[\/\s"'`])((?:\.env(?:\.[A-Za-z0-9_-]+)?|id_rsa|id_ed25519|[^\s"'`]+\.(?:pem|p12|pfx)|[^\s"'`]*wallet[^\s"'`]*\.json|[^\s"'`]*keypair[^\s"'`]*\.json))(?=$|[\s"'`,:;])/gi;
+export function hasDetectorHint(text) {
+    return secretPatterns.some((pattern) => pattern.hints.some((hint) => text.includes(hint))) ||
+        fileReferenceHints.some((hint) => text.includes(hint));
+}
+export function detectSecrets(text) {
+    const matches = [];
+    for (const pattern of secretPatterns) {
+        if (!pattern.hints.some((hint) => text.includes(hint)))
+            continue;
+        pattern.regex.lastIndex = 0;
+        for (const match of text.matchAll(pattern.regex)) {
+            const value = match[pattern.valueGroup ?? 0];
+            if (!value)
+                continue;
+            matches.push({ label: pattern.label, value });
+        }
+    }
+    return matches;
+}
+export function detectFileReferences(text) {
+    const matches = [];
+    if (!fileReferenceHints.some((hint) => text.includes(hint)))
+        return matches;
+    fileRefPattern.lastIndex = 0;
+    for (const match of text.matchAll(fileRefPattern)) {
+        const value = match[1];
+        if (!value)
+            continue;
+        matches.push({ label: "sensitive-file-reference", value });
+    }
+    return matches;
+}
+export function redactText(text) {
+    let redactions = 0;
+    let output = text;
+    for (const pattern of secretPatterns) {
+        if (!pattern.hints.some((hint) => output.includes(hint)))
+            continue;
+        pattern.regex.lastIndex = 0;
+        output = output.replace(pattern.regex, (...args) => {
+            const match = String(args[0] ?? "");
+            const value = pattern.valueGroup === undefined ? match : String(args[pattern.valueGroup] ?? "");
+            if (!value)
+                return match;
+            redactions += 1;
+            const replacement = `<redacted:${pattern.label}:${fingerprint(value)}>`;
+            if (pattern.valueGroup === undefined)
+                return replacement;
+            return match.replace(value, replacement);
+        });
+    }
+    return { text: output, redactions };
+}
+export function fingerprint(value) {
+    return createHash("sha256").update(value).digest("hex").slice(0, 8);
+}
+export function addSecretFinding(map, match) {
+    const fp = fingerprint(match.value);
+    const key = `${match.label}:${fp}`;
+    const existing = map.get(key);
+    if (existing)
+        existing.count += 1;
+    else
+        map.set(key, { kind: "secret", label: match.label, fingerprint: fp, count: 1 });
+}
+export function addFileRefFinding(map, match) {
+    const key = `${match.label}:${match.value}`;
+    const existing = map.get(key);
+    if (existing)
+        existing.count += 1;
+    else
+        map.set(key, { kind: "file-reference", label: match.label, value: match.value, count: 1 });
+}
+//# sourceMappingURL=detectors.js.map

package/dist/src/detectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectors.js","sourceRoot":"","sources":["../../src/detectors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,MAAM,cAAc,GAAkF;IACpG;QACE,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,CAAC,aAAa,CAAC;QACtB,KAAK,EAAE,6EAA6E;KACrF;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,KAAK,EAAE,CAAC,SAAS,CAAC;QAClB,KAAK,EAAE,gCAAgC;KACxC;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,CAAC,KAAK,CAAC;QACd,KAAK,EAAE,4BAA4B;KACpC;IACD;QACE,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/C,KAAK,EAAE,kCAAkC;KAC1C;IACD;QACE,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,CAAC;QAC/F,KAAK,EAAE,uEAAuE;KAC/E;IACD;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,CAAC,KAAK,CAAC;QACd,KAAK,EAAE,oEAAoE;KAC5E;IACD;QACE,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,0BAA0B,EAAE,6BAA6B,CAAC;QAC5F,KAAK,EAAE,gGAAgG;KACxG;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC;QAC/E,KAAK,EAAE,kJAAkJ;QACzJ,UAAU,EAAE,CAAC;KACd;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AACzG,MAAM,cAAc,GAAG,+KAA+K,CAAC;AAEvM,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjE,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5E,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,GAAG,IAAI,CAAC;IAElB,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACnE,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;YAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YAChG,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,UAAU,IAAI,CAAC,CAAC;YAChB,MAAM,WAAW,GAAG,aAAa,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC;YACxE,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;gBAAE,OAAO,WAAW,CAAC;YACzD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAA+B,EAAE,KAAkB;IAClF,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,QAAQ;QAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;;QAC7B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAgC,EAAE,KAAmB;IACrF,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,QAAQ;QAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;;QAC7B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC"}

package/dist/src/jsonl.d.ts

@@ -0,0 +1,4 @@
+import type { Harness, SourceReport } from "./types.js";
+export declare function discoverFiles(roots: string[]): Promise<string[]>;
+export declare function scanGenericTranscriptFile(filePath: string, harness: Harness): Promise<SourceReport>;
+export declare function expandHome(input: string): string;