hazmat-cli 0.1.0

package/dist/src/jsonl.js

@@ -0,0 +1,136 @@
+import { createReadStream } from "node:fs";
+import { access, readdir, stat } from "node:fs/promises";
+import { createInterface } from "node:readline";
+import { homedir } from "node:os";
+import path from "node:path";
+import { hasDetectorHint } from "./detectors.js";
+import { buildSourceReport, createFindingState, scanCandidateText } from "./scanner.js";
+const SCANNABLE_EXTENSIONS = new Set([".jsonl", ".json", ".log", ".txt", ".md"]);
+export async function discoverFiles(roots) {
+    const files = new Set();
+    for (const rootInput of roots) {
+        const root = expandHome(rootInput);
+        if (!(await exists(root)))
+            continue;
+        const rootStat = await stat(root);
+        if (rootStat.isDirectory()) {
+            for await (const file of walk(root))
+                if (isScannable(file))
+                    files.add(file);
+        }
+        else if (rootStat.isFile() && isScannable(root))
+            files.add(root);
+    }
+    return [...files].sort();
+}
+export async function scanGenericTranscriptFile(filePath, harness) {
+    const state = createFindingState();
+    let linesScanned = 0;
+    let projectPath;
+    let sessionId;
+    const rl = createInterface({ input: createReadStream(filePath, { encoding: "utf8" }), crlfDelay: Infinity });
+    for await (const line of rl) {
+        linesScanned += 1;
+        for (const text of extractGenericScanTexts(line))
+            scanCandidateText(text, state);
+        if (!projectPath || !sessionId) {
+            const meta = extractMetadata(line);
+            projectPath ||= meta.projectPath;
+            sessionId ||= meta.sessionId;
+        }
+    }
+    return buildSourceReport({ harness, path: filePath, linesScanned, state, projectPath, sessionId });
+}
+function extractGenericScanTexts(line) {
+    if (!hasDetectorHint(line))
+        return [];
+    try {
+        const parsed = JSON.parse(line);
+        return extractLikelyText(parsed);
+    }
+    catch {
+        return [line];
+    }
+}
+function extractLikelyText(value, depth = 0) {
+    if (depth > 7)
+        return [];
+    if (typeof value === "string")
+        return hasDetectorHint(value) ? [value] : [];
+    if (Array.isArray(value))
+        return value.flatMap((item) => extractLikelyText(item, depth + 1));
+    if (!isObject(value))
+        return [];
+    const out = [];
+    for (const [key, nested] of Object.entries(value)) {
+        if (shouldSkipKey(key))
+            continue;
+        if (typeof nested === "string") {
+            if (hasDetectorHint(nested))
+                out.push(nested);
+            continue;
+        }
+        out.push(...extractLikelyText(nested, depth + 1));
+    }
+    return out;
+}
+function extractMetadata(line) {
+    try {
+        const parsed = JSON.parse(line);
+        if (!isObject(parsed))
+            return {};
+        const payload = isObject(parsed.payload) ? parsed.payload : parsed;
+        return {
+            projectPath: firstString(payload.cwd, payload.projectPath, payload.project_path, payload.directory),
+            sessionId: firstString(payload.session_id, payload.sessionId, payload.id, parsed.sessionId, parsed.session_id),
+        };
+    }
+    catch {
+        return {};
+    }
+}
+function shouldSkipKey(key) {
+    return [
+        "timestamp",
+        "created_at",
+        "updated_at",
+        "uuid",
+        "id",
+        "parent_id",
+        "session_id",
+        "encrypted_content",
+        "rate_limits",
+        "usage",
+        "tokens",
+        "embedding",
+    ].includes(key);
+}
+async function* walk(dir) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        const fullPath = path.join(dir, entry.name);
+        if (entry.isDirectory())
+            yield* walk(fullPath);
+        else if (entry.isFile())
+            yield fullPath;
+    }
+}
+function firstString(...values) {
+    for (const value of values)
+        if (typeof value === "string" && value.length > 0)
+            return value;
+    return undefined;
+}
+function isObject(value) { return typeof value === "object" && value !== null; }
+function isScannable(filePath) { return SCANNABLE_EXTENSIONS.has(path.extname(filePath).toLowerCase()); }
+export function expandHome(input) { if (input === "~")
+    return homedir(); if (input.startsWith("~/"))
+    return path.join(homedir(), input.slice(2)); return path.resolve(input); }
+async function exists(filePath) { try {
+    await access(filePath);
+    return true;
+}
+catch {
+    return false;
+} }
+//# sourceMappingURL=jsonl.js.map

package/dist/src/jsonl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonl.js","sourceRoot":"","sources":["../../src/jsonl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGxF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAe;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,WAAW,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,QAAgB,EAAE,OAAgB;IAChF,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,WAA+B,CAAC;IACpC,IAAI,SAA6B,CAAC;IAClC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE7G,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,YAAY,IAAI,CAAC,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,uBAAuB,CAAC,IAAI,CAAC;YAAE,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjF,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YACnC,WAAW,KAAK,IAAI,CAAC,WAAW,CAAC;YACjC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY;IAC3C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAClD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,aAAa,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,eAAe,CAAC,MAAM,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACnE,OAAO;YACL,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC;YACnG,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;SAC/G,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO;QACL,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,MAAM;QACN,IAAI;QACJ,WAAW;QACX,YAAY;QACZ,mBAAmB;QACnB,aAAa;QACb,OAAO;QACP,QAAQ;QACR,WAAW;KACZ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,GAAW;IAC9B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aAC1C,IAAI,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,QAAQ,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAG,MAAiB;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC5F,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,IAAsC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC;AAC3H,SAAS,WAAW,CAAC,QAAgB,IAAa,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1H,MAAM,UAAU,UAAU,CAAC,KAAa,IAAY,IAAI,KAAK,KAAK,GAAG;IAAE,OAAO,OAAO,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;IAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/L,KAAK,UAAU,MAAM,CAAC,QAAgB,IAAsB,IAAI,CAAC;IAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAAC,OAAO,IAAI,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,KAAK,CAAC;AAAC,CAAC,CAAC,CAAC"}

package/dist/src/publish.d.ts

@@ -0,0 +1,16 @@
+import type { SharePayload } from "./types.js";
+export type PublishResult = {
+    url: string;
+    id: string;
+    owner: string;
+};
+type AuthState = {
+    githubAccessToken?: string;
+    githubLogin?: string;
+};
+export declare function apiBaseUrl(): string;
+export declare function githubClientId(): string;
+export declare function loginWithGithubDeviceFlow(): Promise<AuthState>;
+export declare function publishPayload(payload: SharePayload): Promise<PublishResult>;
+export declare function loadAuthState(): Promise<AuthState>;
+export {};

package/dist/src/publish.js

@@ -0,0 +1,121 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { homedir } from "node:os";
+const DEFAULT_API_URL = "https://hazmat-beta.vercel.app";
+const DEFAULT_GITHUB_CLIENT_ID = "Ov23liWdPNynna949jms";
+const GITHUB_DEVICE_CODE_URL = "https://github.com/login/device/code";
+const GITHUB_ACCESS_TOKEN_URL = "https://github.com/login/oauth/access_token";
+export function apiBaseUrl() {
+    return trimTrailingSlash(process.env.HAZMAT_API_URL || DEFAULT_API_URL);
+}
+export function githubClientId() {
+    return process.env.HAZMAT_GITHUB_CLIENT_ID || process.env.NEXT_PUBLIC_GITHUB_CLIENT_ID || DEFAULT_GITHUB_CLIENT_ID;
+}
+export async function loginWithGithubDeviceFlow() {
+    const clientId = githubClientId();
+    const device = await requestDeviceCode(clientId);
+    console.log("GitHub login required.");
+    console.log(`Open: ${device.verification_uri}`);
+    console.log(`Code: ${device.user_code}`);
+    console.log("");
+    console.log("Waiting for authorization...");
+    const token = await pollForAccessToken(clientId, device);
+    const user = await fetchGithubUser(token);
+    const state = { githubAccessToken: token, githubLogin: user.login };
+    await saveAuthState(state);
+    console.log(`Logged in as ${user.login}.`);
+    return state;
+}
+export async function publishPayload(payload) {
+    const auth = await loadAuthState();
+    const token = auth.githubAccessToken ?? (await loginWithGithubDeviceFlow()).githubAccessToken;
+    if (!token)
+        throw new Error("GitHub login failed.");
+    const response = await fetch(`${apiBaseUrl()}/api/reports`, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${token}`,
+        },
+        body: JSON.stringify(payload),
+    });
+    const body = await response.json().catch(() => null);
+    if (!response.ok)
+        throw new Error(body?.error || `Publish failed with HTTP ${response.status}`);
+    if (!body?.url || !body.id || !body.owner)
+        throw new Error("Publish response was missing report metadata.");
+    return { url: body.url, id: body.id, owner: body.owner };
+}
+export async function loadAuthState() {
+    try {
+        const raw = await readFile(authPath(), "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+}
+async function saveAuthState(state) {
+    await mkdir(path.dirname(authPath()), { recursive: true, mode: 0o700 });
+    await writeFile(authPath(), `${JSON.stringify(state, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
+}
+function authPath() {
+    return path.join(homedir(), ".hazmat", "auth.json");
+}
+async function requestDeviceCode(clientId) {
+    const response = await fetch(GITHUB_DEVICE_CODE_URL, {
+        method: "POST",
+        headers: { accept: "application/json", "content-type": "application/json" },
+        body: JSON.stringify({ client_id: clientId, scope: "read:user" }),
+    });
+    const body = await response.json();
+    if (!response.ok || body.error) {
+        const detail = body.error_description || body.error || `HTTP ${response.status}`;
+        throw new Error(`Failed to start GitHub device login (${detail}). ` +
+            "Check that the Hazmat GitHub OAuth App has Device Flow enabled and the Client ID is correct.");
+    }
+    return body;
+}
+async function pollForAccessToken(clientId, device) {
+    let intervalMs = Math.max(1, device.interval ?? 5) * 1000;
+    const deadline = Date.now() + device.expires_in * 1000;
+    while (Date.now() < deadline) {
+        await sleep(intervalMs);
+        const response = await fetch(GITHUB_ACCESS_TOKEN_URL, {
+            method: "POST",
+            headers: { accept: "application/json", "content-type": "application/json" },
+            body: JSON.stringify({
+                client_id: clientId,
+                device_code: device.device_code,
+                grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+            }),
+        });
+        const body = await response.json();
+        if (body.access_token)
+            return body.access_token;
+        if (body.error === "authorization_pending")
+            continue;
+        if (body.error === "slow_down") {
+            intervalMs += 5000;
+            continue;
+        }
+        throw new Error(body.error_description || body.error || `GitHub token exchange failed with HTTP ${response.status}`);
+    }
+    throw new Error("GitHub device login expired. Run `hazmat login` again.");
+}
+async function fetchGithubUser(token) {
+    const response = await fetch("https://api.github.com/user", {
+        headers: { accept: "application/vnd.github+json", authorization: `Bearer ${token}`, "user-agent": "hazmat-cli" },
+    });
+    const body = await response.json().catch(() => null);
+    if (!response.ok || !body?.login)
+        throw new Error(body?.message || "Failed to fetch GitHub user.");
+    return { login: body.login };
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function trimTrailingSlash(value) {
+    return value.replace(/\/$/, "");
+}
+//# sourceMappingURL=publish.js.map

package/dist/src/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/publish.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,MAAM,eAAe,GAAG,gCAAgC,CAAC;AACzD,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AACxD,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AACtE,MAAM,uBAAuB,GAAG,6CAA6C,CAAC;AA6B9E,MAAM,UAAU,UAAU;IACxB,OAAO,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,eAAe,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,wBAAwB,CAAC;AACrH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACpE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAqB;IACxD,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,IAAI,CAAC,MAAM,yBAAyB,EAAE,CAAC,CAAC,iBAAiB,CAAC;IAC9F,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,EAAE,cAAc,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAuD,CAAC;IAC3G,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,4BAA4B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAChG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC5G,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAgB;IAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IAC/C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,sBAAsB,EAAE;QACnD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;KAClE,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyE,CAAC;IAC1G,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,KAAK;YACjD,8FAA8F,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAA0B;IAC5E,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IAEvD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,uBAAuB,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,8CAA8C;aAC3D,CAAC;SACH,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;QAC1D,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAChD,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB;YAAE,SAAS;QACrD,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/B,UAAU,IAAI,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,IAAI,0CAA0C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACvH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAa;IAC1C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6BAA6B,EAAE;QAC1D,OAAO,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;KACjH,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAgD,CAAC;IACpG,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,8BAA8B,CAAC,CAAC;IACnG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC"}

package/dist/src/report.d.ts

@@ -0,0 +1,6 @@
+import type { ScanReport, SourceReport, SharePayload } from "./types.js";
+export declare function buildScanReport(sources: SourceReport[]): ScanReport;
+export declare function formatReport(report: ScanReport, options?: {
+    verbose?: boolean;
+}): string;
+export declare function buildSharePayload(report: ScanReport): SharePayload;

package/dist/src/report.js

@@ -0,0 +1,192 @@
+import { homedir } from "node:os";
+import { calculateScore, scoreLabel } from "./scoring.js";
+import { c, formatScore, riskColor } from "./ui.js";
+export function buildScanReport(sources) {
+    const sensitiveSources = sources.filter((source) => source.risk !== "low");
+    return {
+        version: 1,
+        generatedAt: new Date().toISOString(),
+        sources,
+        summary: {
+            filesScanned: sources.length,
+            linesScanned: sum(sources.map((source) => source.linesScanned)),
+            sensitiveFiles: sensitiveSources.length,
+            highRiskFiles: sources.filter((source) => source.risk === "high").length,
+            mediumRiskFiles: sources.filter((source) => source.risk === "medium").length,
+            secretFindings: sum(sources.flatMap((source) => source.secrets.map((finding) => finding.count))),
+            fileReferenceFindings: sum(sources.flatMap((source) => source.fileReferences.map((finding) => finding.count))),
+            score: calculateScore(sources),
+        },
+    };
+}
+export function formatReport(report, options = {}) {
+    return options.verbose ? formatVerboseReport(report) : formatSummaryReport(report);
+}
+function formatSummaryReport(report) {
+    const lines = [];
+    const secretClasses = aggregateSecretClasses(report);
+    const fileRefGroups = aggregateFileReferenceGroups(report);
+    const topSources = report.sources
+        .filter((source) => source.risk !== "low")
+        .map((source) => ({
+        source,
+        secrets: sum(source.secrets.map((finding) => finding.count)),
+        refs: sum(source.fileReferences.map((finding) => finding.count)),
+    }))
+        .sort((a, b) => b.secrets - a.secrets || b.refs - a.refs)
+        .slice(0, 10);
+    lines.push(c.heading("Exposure Report"));
+    lines.push(c.muted("───────────────"));
+    lines.push(`${c.heading("Generated:")} ${c.muted(report.generatedAt)}`);
+    lines.push("");
+    lines.push(c.heading("Summary"));
+    lines.push(c.muted("───────"));
+    lines.push(`${c.muted("Scanned")} ${c.value(String(report.summary.filesScanned))} sources, ${c.value(String(report.summary.linesScanned))} records/lines`);
+    lines.push(`${c.muted("Score")} ${formatScore(getScore(report))} ${c.muted(`(${scoreLabel(getScore(report))})`)}`);
+    lines.push(`${c.muted("Sensitive")} ${c.value(String(report.summary.sensitiveFiles))} files ${c.muted(`(${report.summary.highRiskFiles} high, ${report.summary.mediumRiskFiles} medium)`)}`);
+    lines.push(`${c.muted("Secret-like values")} ${c.value(String(report.summary.secretFindings))}`);
+    lines.push(`${c.muted("Sensitive file/path refs")} ${c.value(String(report.summary.fileReferenceFindings))}`);
+    if (report.summary.sensitiveFiles === 0) {
+        lines.push("");
+        lines.push("No sensitive transcript findings detected.");
+        return lines.join("\n");
+    }
+    lines.push("");
+    lines.push(c.heading("Secret classes"));
+    lines.push(c.muted("──────────────"));
+    for (const item of secretClasses) {
+        lines.push(`- ${c.accent(item.label)}: ${c.value(String(item.count))} occurrences, ${c.value(String(item.unique))} unique fingerprints`);
+    }
+    lines.push("");
+    lines.push(c.heading("Sensitive file/path refs"));
+    lines.push(c.muted("────────────────────────"));
+    for (const item of fileRefGroups.slice(0, 10)) {
+        lines.push(`- ${c.accent(item.label)}: ${c.value(String(item.count))} refs, ${c.value(String(item.unique))} unique paths`);
+    }
+    lines.push("");
+    lines.push(c.heading("Top risky sessions"));
+    lines.push(c.muted("──────────────────"));
+    for (const item of topSources) {
+        lines.push(`- ${riskColor(item.source.risk)(item.source.risk.toUpperCase())} ${c.accent(item.source.harness)} ${c.muted(prettyPath(item.source.path))}`);
+        lines.push(`  ${c.value(String(item.secrets))} secret-like findings, ${c.value(String(item.refs))} sensitive refs`);
+    }
+    lines.push("");
+    lines.push(c.muted("Note: raw secret values are not printed. Fingerprints are short SHA-256 hashes."));
+    lines.push(c.muted("Run `hazmat report --verbose` for per-session fingerprints and paths."));
+    return lines.join("\n");
+}
+function formatVerboseReport(report) {
+    const lines = [];
+    lines.push("Hazmat Exposure Report");
+    lines.push("======================");
+    lines.push(`Generated: ${report.generatedAt}`);
+    lines.push(`Scanned sources: ${report.summary.filesScanned}`);
+    lines.push(`Scanned records/lines: ${report.summary.linesScanned}`);
+    lines.push(`Score: ${getScore(report)}/100 (${scoreLabel(getScore(report))})`);
+    lines.push(`Sensitive files: ${report.summary.sensitiveFiles}`);
+    lines.push(`High risk files: ${report.summary.highRiskFiles}`);
+    lines.push(`Medium risk files: ${report.summary.mediumRiskFiles}`);
+    lines.push(`Secret findings: ${report.summary.secretFindings}`);
+    lines.push(`Sensitive file references: ${report.summary.fileReferenceFindings}`);
+    const sensitiveSources = report.sources.filter((source) => source.risk !== "low");
+    if (sensitiveSources.length === 0) {
+        lines.push("");
+        lines.push("No sensitive transcript findings detected.");
+        return lines.join("\n");
+    }
+    lines.push("");
+    lines.push("Findings");
+    lines.push("--------");
+    for (const source of sensitiveSources) {
+        lines.push("");
+        lines.push(`${source.risk.toUpperCase()} ${source.harness} ${prettyPath(source.path)}`);
+        lines.push(`Lines scanned: ${source.linesScanned}`);
+        if (source.secrets.length > 0) {
+            lines.push("Secrets:");
+            for (const finding of source.secrets) {
+                lines.push(`- ${finding.label}:${finding.fingerprint} (${finding.count})`);
+            }
+        }
+        if (source.fileReferences.length > 0) {
+            lines.push("Sensitive file refs:");
+            for (const finding of source.fileReferences.slice(0, 20)) {
+                lines.push(`- ${finding.value} (${finding.count})`);
+            }
+            if (source.fileReferences.length > 20) {
+                lines.push(`- ...and ${source.fileReferences.length - 20} more`);
+            }
+        }
+    }
+    return lines.join("\n");
+}
+export function buildSharePayload(report) {
+    return {
+        version: 1,
+        generatedAt: report.generatedAt,
+        score: getScore(report),
+        sources: [...new Set(report.sources.map((source) => source.harness))].sort(),
+        totals: {
+            filesScanned: report.summary.filesScanned,
+            sensitiveFiles: report.summary.sensitiveFiles,
+            highRiskFiles: report.summary.highRiskFiles,
+            mediumRiskFiles: report.summary.mediumRiskFiles,
+            secretFindings: report.summary.secretFindings,
+            fileReferenceFindings: report.summary.fileReferenceFindings,
+        },
+        secretClasses: aggregateSecretClasses(report),
+        fileReferenceGroups: aggregateFileReferenceGroups(report),
+    };
+}
+function aggregateSecretClasses(report) {
+    const map = new Map();
+    for (const source of report.sources) {
+        for (const finding of source.secrets) {
+            const current = map.get(finding.label) ?? { label: finding.label, count: 0, fingerprints: new Set() };
+            current.count += finding.count;
+            current.fingerprints.add(finding.fingerprint);
+            map.set(finding.label, current);
+        }
+    }
+    return [...map.values()]
+        .map((item) => ({ label: item.label, count: item.count, unique: item.fingerprints.size }))
+        .sort((a, b) => b.count - a.count || a.label.localeCompare(b.label));
+}
+function aggregateFileReferenceGroups(report) {
+    const map = new Map();
+    for (const source of report.sources) {
+        for (const finding of source.fileReferences) {
+            const label = fileReferenceGroup(finding);
+            const current = map.get(label) ?? { count: 0, values: new Set() };
+            current.count += finding.count;
+            current.values.add(finding.value);
+            map.set(label, current);
+        }
+    }
+    return [...map.entries()]
+        .map(([label, item]) => ({ label, count: item.count, unique: item.values.size }))
+        .sort((a, b) => b.count - a.count || a.label.localeCompare(b.label));
+}
+function fileReferenceGroup(finding) {
+    const value = finding.value;
+    const envMatch = value.match(/\.env(?:\.[A-Za-z0-9_-]+)?/);
+    if (envMatch)
+        return envMatch[0];
+    if (/wallet/i.test(value))
+        return "wallet JSON paths";
+    if (/keypair/i.test(value))
+        return "keypair JSON paths";
+    if (/\.pem|\.p12|\.pfx|id_rsa|id_ed25519/.test(value))
+        return "private key/cert paths";
+    return "other sensitive paths";
+}
+function getScore(report) {
+    return typeof report.summary.score === "number" ? report.summary.score : calculateScore(report.sources);
+}
+function sum(values) {
+    return values.reduce((total, value) => total + value, 0);
+}
+function prettyPath(filePath) {
+    const home = homedir();
+    return filePath.startsWith(home) ? `~${filePath.slice(home.length)}` : filePath;
+}
+//# sourceMappingURL=report.js.map

package/dist/src/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpD,MAAM,UAAU,eAAe,CAAC,OAAuB;IACrD,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC3E,OAAO;QACL,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,OAAO;QACP,OAAO,EAAE;YACP,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC/D,cAAc,EAAE,gBAAgB,CAAC,MAAM;YACvC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM;YACxE,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC5E,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAChG,qBAAqB,EAAE,GAAG,CACxB,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CACnF;YACD,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC;SAC/B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,OAAO,GAA0B,EAAE;IAClF,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAkB;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO;SAC9B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC;SACzC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChB,MAAM;QACN,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;KACjE,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;SACxD,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC3J,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,UAAU,MAAM,CAAC,OAAO,CAAC,eAAe,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7L,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;IACjG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC;IAE9G,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAC3I,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAC7H,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QACzJ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACtH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC,CAAC;IACvG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC,CAAC;IAC7F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAkB;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,MAAM,CAAC,SAAS,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/E,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAEjF,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAClF,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEvB,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACnC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACtC,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QAC5E,MAAM,EAAE;YACN,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;YACzC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;YAC7C,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa;YAC3C,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe;YAC/C,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;YAC7C,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,qBAAqB;SAC5D;QACD,aAAa,EAAE,sBAAsB,CAAC,MAAM,CAAC;QAC7C,mBAAmB,EAAE,4BAA4B,CAAC,MAAM,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAkB;IAChD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuE,CAAC;IAC3F,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;YAC9G,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;YAC/B,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC9C,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;SACrB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;SACzF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAkB;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkD,CAAC;IACtE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;YAC1E,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;SAChF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAuB;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC3D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACtD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,oBAAoB,CAAC;IACxD,IAAI,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,wBAAwB,CAAC;IACvF,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,MAAkB;IAClC,OAAO,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,GAAG,CAAC,MAAgB;IAC3B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClF,CAAC"}

package/dist/src/scanner.d.ts

@@ -0,0 +1,15 @@
+import type { FileRefFinding, Harness, SourceReport, SecretFinding } from "./types.js";
+export type FindingState = {
+    secrets: Map<string, SecretFinding>;
+    fileReferences: Map<string, FileRefFinding>;
+};
+export declare function createFindingState(): FindingState;
+export declare function scanCandidateText(text: string, state: FindingState): void;
+export declare function buildSourceReport(input: {
+    harness: Harness;
+    path: string;
+    linesScanned: number;
+    state: FindingState;
+    projectPath?: string;
+    sessionId?: string;
+}): SourceReport;

package/dist/src/scanner.js

@@ -0,0 +1,43 @@
+import { addFileRefFinding, addSecretFinding, detectFileReferences, detectSecrets, hasDetectorHint, } from "./detectors.js";
+export function createFindingState() {
+    return { secrets: new Map(), fileReferences: new Map() };
+}
+export function scanCandidateText(text, state) {
+    if (!hasDetectorHint(text))
+        return;
+    for (const chunk of scanChunks(text)) {
+        for (const match of detectSecrets(chunk))
+            addSecretFinding(state.secrets, match);
+        for (const match of detectFileReferences(chunk))
+            addFileRefFinding(state.fileReferences, match);
+    }
+}
+export function buildSourceReport(input) {
+    const secretList = [...input.state.secrets.values()].sort(byLabelThenFingerprint);
+    const fileRefList = [...input.state.fileReferences.values()].sort((a, b) => a.value.localeCompare(b.value));
+    const risk = secretList.length > 0 ? "high" : fileRefList.length > 0 ? "medium" : "low";
+    return {
+        harness: input.harness,
+        path: input.path,
+        linesScanned: input.linesScanned,
+        risk,
+        secrets: secretList,
+        fileReferences: fileRefList,
+        ...(input.projectPath ? { projectPath: input.projectPath } : {}),
+        ...(input.sessionId ? { sessionId: input.sessionId } : {}),
+    };
+}
+function* scanChunks(text) {
+    const chunkSize = 256 * 1024;
+    const overlap = 2048;
+    if (text.length <= chunkSize) {
+        yield text;
+        return;
+    }
+    for (let start = 0; start < text.length; start += chunkSize - overlap)
+        yield text.slice(start, start + chunkSize);
+}
+function byLabelThenFingerprint(a, b) {
+    return a.label.localeCompare(b.label) || a.fingerprint.localeCompare(b.fingerprint);
+}
+//# sourceMappingURL=scanner.js.map

package/dist/src/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAQxB,MAAM,UAAU,kBAAkB;IAChC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAmB;IACjE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO;IACnC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjF,KAAK,MAAM,KAAK,IAAI,oBAAoB,CAAC,KAAK,CAAC;YAAE,iBAAiB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAOjC;IACC,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5G,MAAM,IAAI,GAAyB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9G,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI;QACJ,OAAO,EAAE,UAAU;QACnB,cAAc,EAAE,WAAW;QAC3B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,CAAC,UAAU,CAAC,IAAY;IAC/B,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC;IACrB,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC;QACX,OAAO;IACT,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,SAAS,GAAG,OAAO;QAAE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC;AACpH,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAgB,EAAE,CAAgB;IAChE,OAAO,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;AACtF,CAAC"}

package/dist/src/scoring.d.ts

@@ -0,0 +1,4 @@
+import type { ScanReport, SourceReport } from "./types.js";
+export declare function calculateScore(sources: SourceReport[]): number;
+export declare function scoreLabel(score: number): string;
+export declare function reportScoreLabel(report: ScanReport): string;

package/dist/src/scoring.js

@@ -0,0 +1,27 @@
+export function calculateScore(sources) {
+    const secretCount = sources.flatMap((source) => source.secrets).reduce((total, finding) => total + finding.count, 0);
+    const refCount = sources.flatMap((source) => source.fileReferences).reduce((total, finding) => total + finding.count, 0);
+    const highRiskFiles = sources.filter((source) => source.risk === "high").length;
+    const mediumRiskFiles = sources.filter((source) => source.risk === "medium").length;
+    const privateKeyCount = sources.flatMap((source) => source.secrets).filter((finding) => finding.label === "private-key").reduce((total, finding) => total + finding.count, 0);
+    const secretPenalty = Math.min(70, Math.log10(secretCount + 1) * 25);
+    const refPenalty = Math.min(18, Math.log10(refCount + 1) * 5);
+    const filePenalty = Math.min(12, highRiskFiles * 1.2 + mediumRiskFiles * 0.4);
+    const privateKeyPenalty = Math.min(20, privateKeyCount * 8);
+    return Math.max(0, Math.round(100 - secretPenalty - refPenalty - filePenalty - privateKeyPenalty));
+}
+export function scoreLabel(score) {
+    if (score >= 90)
+        return "Clean";
+    if (score >= 70)
+        return "Mostly clean";
+    if (score >= 40)
+        return "Exposed";
+    if (score >= 15)
+        return "High exposure";
+    return "Critical exposure";
+}
+export function reportScoreLabel(report) {
+    return scoreLabel(report.summary.score);
+}
+//# sourceMappingURL=scoring.js.map

package/dist/src/scoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoring.js","sourceRoot":"","sources":["../../src/scoring.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,cAAc,CAAC,OAAuB;IACpD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrH,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzH,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAChF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACpF,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAE9K,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,GAAG,GAAG,GAAG,eAAe,GAAG,GAAG,CAAC,CAAC;IAC9E,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC;IAE5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,aAAa,GAAG,UAAU,GAAG,WAAW,GAAG,iBAAiB,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,cAAc,CAAC;IACvC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,eAAe,CAAC;IACxC,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,OAAO,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC"}

package/dist/src/scrub.d.ts

@@ -0,0 +1,8 @@
+export type ScrubResult = {
+    path: string;
+    linesScanned: number;
+    linesChanged: number;
+    redactions: number;
+};
+export declare function dryRunScrubTextFile(filePath: string): Promise<ScrubResult>;
+export declare function scrubTextFileInPlace(filePath: string): Promise<ScrubResult>;