heyiam 0.1.4 → 0.1.6

package/dist/redact.js

@@ -0,0 +1,373 @@
+// Redact — scans text for secrets, PII, and sensitive file paths before publish.
+//
+// Two layers:
+//   1. secretlint (community-maintained rules for Anthropic, GitHub, Slack, npm, etc.)
+//   2. Custom regex (fills gaps: OpenAI, Stripe, Google, JWT, Bearer, PII, paths)
+//
+// Two severity levels:
+//   HIGH   — auto-redacted (known API key prefixes, private keys, connection strings)
+//   MEDIUM — flagged for user review (email addresses)
+//
+// Usage:
+//   const findings = await scanText(text);
+//   const cleaned  = await redactText(text);
+//   const results  = await scanSession(session);
+import { homedir } from "node:os";
+// ── Secretlint integration ─────────────────────────────────────
+let _engine = null;
+let _engineInitFailed = false;
+async function getSecretlintEngine() {
+    if (_engine)
+        return _engine;
+    if (_engineInitFailed)
+        return null;
+    try {
+        const { createEngine } = await import("@secretlint/node");
+        _engine = await createEngine({
+            color: false,
+            formatter: "json",
+            maskSecrets: false,
+            configFileJSON: {
+                rules: [{
+                        id: "@secretlint/secretlint-rule-preset-recommend",
+                    }],
+            },
+        });
+        return _engine;
+    }
+    catch {
+        _engineInitFailed = true;
+        return null;
+    }
+}
+async function secretlintScan(text) {
+    const engine = await getSecretlintEngine();
+    if (!engine)
+        return [];
+    try {
+        const { ok, output } = await engine.executeOnContent({ content: text, filePath: "/scan.txt" });
+        if (ok)
+            return []; // no findings
+        const results = JSON.parse(output);
+        const findings = [];
+        for (const file of results) {
+            for (const msg of file.messages ?? []) {
+                findings.push({
+                    pattern: msg.ruleId.replace("@secretlint/secretlint-rule-", ""),
+                    severity: "high",
+                    category: "secret",
+                    match: msg.message.length > 60 ? msg.message.slice(0, 50) + "..." : msg.message,
+                    index: msg.loc?.start?.offset ?? 0,
+                });
+            }
+        }
+        return findings;
+    }
+    catch {
+        return [];
+    }
+}
+// All regex patterns — used for both scanning AND redaction (find-and-replace).
+// secretlint adds additional detection on top; deduplication prevents double-counting.
+const CUSTOM_SECRET_PATTERNS = [
+    // ─── AWS ───────────────────────────────────────────────
+    {
+        name: "AWS Access Key",
+        regex: /\b(?:A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── GitHub ────────────────────────────────────────────
+    {
+        name: "GitHub Token",
+        regex: /\b(?:ghp|gho|ghu|ghs|ghr|github_pat)_[A-Za-z0-9_]{36,255}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── Anthropic ─────────────────────────────────────────
+    {
+        name: "Anthropic API Key",
+        regex: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── OpenAI ────────────────────────────────────────────
+    {
+        name: "OpenAI API Key",
+        regex: /\bsk-(?:proj-)?[A-Za-z0-9]{20,}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── Slack ─────────────────────────────────────────────
+    {
+        name: "Slack Token",
+        regex: /\bxox[bporas]-[A-Za-z0-9-]{10,}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── Stripe ────────────────────────────────────────────
+    {
+        name: "Stripe Key",
+        regex: /\b[sr]k_(?:live|test)_[A-Za-z0-9]{20,}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── Google ────────────────────────────────────────────
+    {
+        name: "Google API Key",
+        regex: /\bAIza[0-9A-Za-z_-]{35}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── Twilio ────────────────────────────────────────────
+    {
+        name: "Twilio Auth Token",
+        regex: /\bSK[0-9a-f]{32}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── SendGrid ──────────────────────────────────────────
+    {
+        name: "SendGrid Key",
+        regex: /\bSG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── Private keys (PEM) ────────────────────────────────
+    {
+        name: "Private Key",
+        regex: /-----BEGIN[\s\w]*PRIVATE KEY-----[\s\S]{10,}?-----END[\s\w]*PRIVATE KEY-----/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── Database connection strings with passwords ────────
+    {
+        name: "Database Connection String",
+        regex: /\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp|mssql):\/\/[^\s:]+:[^\s@]+@[^\s]+/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── JWT ───────────────────────────────────────────────
+    {
+        name: "JWT Token",
+        regex: /\beyJ[A-Za-z0-9_-]{20,}\.eyJ[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── Generic: KEY=value, SECRET=value, TOKEN=value ─────
+    {
+        name: "Secret Assignment",
+        regex: /\b(?:PASSWORD|SECRET|TOKEN|API_KEY|PRIVATE_KEY|ACCESS_KEY|SECRET_KEY|AUTH_TOKEN|CLIENT_SECRET|ENCRYPTION_KEY|SIGNING_KEY)\s{0,5}[=:]\s{0,5}['"]?[A-Za-z0-9/+=_.-]{8,}['"]?/gi,
+        severity: "high",
+        category: "secret",
+    },
+    // ─── Bearer tokens ─────────────────────────────────────
+    {
+        name: "Bearer Token",
+        regex: /\bBearer\s+[A-Za-z0-9_.-]{20,}\b/g,
+        severity: "high",
+        category: "secret",
+    },
+];
+const PII_PATTERNS = [
+    {
+        name: "Email Address",
+        regex: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g,
+        severity: "medium",
+        category: "pii",
+    },
+    {
+        name: "SSN",
+        regex: /\b\d{3}-\d{2}-\d{4}\b/g,
+        severity: "high",
+        category: "pii",
+    },
+];
+const ALL_CUSTOM_PATTERNS = [...CUSTOM_SECRET_PATTERNS, ...PII_PATTERNS];
+// Email false positives: example/test/noreply addresses common in code
+const EMAIL_ALLOWLIST = [
+    /^noreply@/i,
+    /^no-reply@/i,
+    /^example@/i,
+    /^test@/i,
+    /^user@example/i,
+    /^foo@/i,
+    /^bar@/i,
+    /^admin@example/i,
+    /@example\.(com|org|net)$/i,
+    /@test\.(com|org)$/i,
+    /@localhost$/i,
+    /@users\.noreply\.github\.com$/i,
+];
+// ── Scanning ───────────────────────────────────────────────────
+function regexScan(text) {
+    const findings = [];
+    for (const pattern of ALL_CUSTOM_PATTERNS) {
+        pattern.regex.lastIndex = 0;
+        let match;
+        while ((match = pattern.regex.exec(text)) !== null) {
+            const matchStr = match[0];
+            if (pattern.name === "Email Address") {
+                if (EMAIL_ALLOWLIST.some((re) => re.test(matchStr)))
+                    continue;
+            }
+            findings.push({
+                pattern: pattern.name,
+                severity: pattern.severity,
+                category: pattern.category,
+                match: matchStr.length > 40
+                    ? matchStr.slice(0, 20) + "..." + matchStr.slice(-10)
+                    : matchStr,
+                index: match.index,
+            });
+        }
+    }
+    return findings;
+}
+/** Scan text for secrets and PII using secretlint + custom regex. */
+export async function scanText(text) {
+    const [slFindings, regexFindings] = await Promise.all([
+        secretlintScan(text),
+        Promise.resolve(regexScan(text)),
+    ]);
+    return deduplicateFindings([...slFindings, ...regexFindings]);
+}
+/** Synchronous scan using only custom regex patterns (no secretlint). */
+export function scanTextSync(text) {
+    return regexScan(text);
+}
+/** Replace detected secrets in text. mode='high' redacts only high-severity. */
+export function redactText(text, mode = "high") {
+    let result = text;
+    for (const pattern of ALL_CUSTOM_PATTERNS) {
+        if (mode === "high" && pattern.severity !== "high")
+            continue;
+        pattern.regex.lastIndex = 0;
+        result = result.replace(pattern.regex, (match) => {
+            if (pattern.name === "Email Address") {
+                if (EMAIL_ALLOWLIST.some((re) => re.test(match)))
+                    return match;
+            }
+            return `[REDACTED ${pattern.name.toUpperCase()}]`;
+        });
+    }
+    return result;
+}
+// ── Path stripping ─────────────────────────────────────────────
+const HOME = homedir();
+/** Strip home directory prefix, returning project-relative or ~/rest. */
+export function stripHomePath(filepath, cwd) {
+    if (cwd && filepath.startsWith(cwd)) {
+        const rel = filepath.slice(cwd.length).replace(/^[/\\]+/, "");
+        return rel || filepath;
+    }
+    if (filepath.startsWith(HOME)) {
+        return "~" + filepath.slice(HOME.length);
+    }
+    return filepath;
+}
+/** Strip home directory and cwd prefixes from all paths in a string. */
+export function stripHomePathsInText(text, cwd) {
+    if (cwd) {
+        const cwdPattern = escapeRegex(cwd).replace(/\\\//g, "[\\\\/]");
+        const cwdRe = new RegExp(cwdPattern + "[/\\\\]?", "g");
+        text = text.replace(cwdRe, "");
+    }
+    const homePattern = escapeRegex(HOME).replace(/\\\//g, "[\\\\/]");
+    const homeRe = new RegExp(homePattern + "[/\\\\]?", "g");
+    return text.replace(homeRe, "~/");
+}
+// ── Session-level operations ───────────────────────────────────
+/** Scan all string fields in a session object for secrets/PII. */
+export async function scanSession(session) {
+    // Collect all string values with their paths
+    const strings = [];
+    function walk(value, path) {
+        if (typeof value === "string" && value.length > 0) {
+            strings.push({ value, path });
+        }
+        else if (Array.isArray(value)) {
+            for (let i = 0; i < value.length; i++)
+                walk(value[i], `${path}[${i}]`);
+        }
+        else if (value && typeof value === "object") {
+            for (const [k, v] of Object.entries(value))
+                walk(v, path ? `${path}.${k}` : k);
+        }
+    }
+    walk(session, "");
+    // Batch all strings into one scan for secretlint efficiency
+    const allText = strings.map((s) => s.value).join("\n---FIELD_BOUNDARY---\n");
+    const allFindings = await scanText(allText);
+    // Map findings back to field paths
+    const fieldsWithFindings = [];
+    let offset = 0;
+    for (const { value, path } of strings) {
+        const endOffset = offset + value.length;
+        const fieldFindings = allFindings.filter((f) => f.index >= offset && f.index < endOffset);
+        if (fieldFindings.length > 0)
+            fieldsWithFindings.push(path);
+        offset = endOffset + "\n---FIELD_BOUNDARY---\n".length;
+    }
+    return { findings: allFindings, fieldsWithFindings };
+}
+/** Deep-redact all string fields + strip paths. Returns a new object. */
+export function redactSession(session, mode = "high", cwd) {
+    return deepRedact(session, mode, cwd);
+}
+function deepRedact(value, mode, cwd) {
+    if (typeof value === "string") {
+        let result = redactText(value, mode);
+        result = stripHomePathsInText(result, cwd);
+        return result;
+    }
+    if (Array.isArray(value)) {
+        return value.map((v) => deepRedact(v, mode, cwd));
+    }
+    if (value && typeof value === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            out[k] = deepRedact(v, mode, cwd);
+        }
+        return out;
+    }
+    return value;
+}
+// ── Helpers ────────────────────────────────────────────────────
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+/** Deduplicate findings by (pattern, match) pair. */
+export function deduplicateFindings(findings) {
+    const seen = new Set();
+    return findings.filter((f) => {
+        const key = `${f.pattern}::${f.match}`;
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+}
+/** Format findings for CLI warning output. */
+export function formatFindings(findings) {
+    const deduped = deduplicateFindings(findings);
+    if (deduped.length === 0)
+        return "";
+    const high = deduped.filter((f) => f.severity === "high");
+    const medium = deduped.filter((f) => f.severity === "medium");
+    const lines = [];
+    if (high.length > 0) {
+        lines.push(`  ${high.length} secret(s) auto-redacted:`);
+        for (const f of high) {
+            lines.push(`    - ${f.pattern}: ${f.match}`);
+        }
+    }
+    if (medium.length > 0) {
+        lines.push(`  ${medium.length} potential PII flagged:`);
+        for (const f of medium) {
+            lines.push(`    - ${f.pattern}: ${f.match}`);
+        }
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=redact.js.map

package/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,cAAc;AACd,uFAAuF;AACvF,kFAAkF;AAClF,EAAE;AACF,uBAAuB;AACvB,sFAAsF;AACtF,uDAAuD;AACvD,EAAE;AACF,SAAS;AACT,2CAA2C;AAC3C,6CAA6C;AAC7C,iDAAiD;AAEjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAoBlC,kEAAkE;AAElE,IAAI,OAAO,GAEA,IAAI,CAAC;AAChB,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B,KAAK,UAAU,mBAAmB;IAChC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC1D,OAAO,GAAG,MAAM,YAAY,CAAC;YAC3B,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,MAAM;YACjB,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE;gBACd,KAAK,EAAE,CAAC;wBACN,EAAE,EAAE,8CAA8C;qBACnD,CAAC;aACH;SACF,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB,GAAG,IAAI,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/F,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC,CAAC,cAAc;QAEjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAwG,CAAC;QAC1I,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC;oBAC/D,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;oBAC/E,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAWD,gFAAgF;AAChF,uFAAuF;AACvF,MAAM,sBAAsB,GAAiB;IAC3C,0DAA0D;IAC1D;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,0EAA0E;QACjF,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,8DAA8D;QACrE,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,gCAAgC;QACvC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,oCAAoC;QAC3C,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,oCAAoC;QAC3C,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,2CAA2C;QAClD,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,4BAA4B;QACnC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,iDAAiD;QACxD,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,+EAA+E;QACtF,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,4FAA4F;QACnG,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,uEAAuE;QAC9E,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,8KAA8K;QACrL,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;IACD,0DAA0D;IAC1D;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,mCAAmC;QAC1C,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;KACnB;CACF,CAAC;AAEF,MAAM,YAAY,GAAiB;IACjC;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,qDAAqD;QAC5D,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,wBAAwB;QAC/B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,KAAK;KAChB;CACF,CAAC;AAEF,MAAM,mBAAmB,GAAiB,CAAC,GAAG,sBAAsB,EAAE,GAAG,YAAY,CAAC,CAAC;AAEvF,uEAAuE;AACvE,MAAM,eAAe,GAAG;IACtB,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,SAAS;IACT,gBAAgB;IAChB,QAAQ;IACR,QAAQ;IACR,iBAAiB;IACjB,2BAA2B;IAC3B,oBAAoB;IACpB,cAAc;IACd,gCAAgC;CACjC,CAAC;AAEF,kEAAkE;AAElE,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,IAAI,KAA6B,CAAC;QAElC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAE1B,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACrC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAAE,SAAS;YAChE,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,QAAQ,CAAC,MAAM,GAAG,EAAE;oBACzB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACrD,CAAC,CAAC,QAAQ;gBACZ,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,cAAc,CAAC,IAAI,CAAC;QACpB,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;KACjC,CAAC,CAAC;IAEH,OAAO,mBAAmB,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAuB,MAAM;IACpE,IAAI,MAAM,GAAG,IAAI,CAAC;IAElB,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;YAAE,SAAS;QAE7D,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACrC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;YACjE,CAAC;YACD,OAAO,aAAa,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kEAAkE;AAElE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;AAEvB,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,GAAY;IAC1D,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9D,OAAO,GAAG,IAAI,QAAQ,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,GAAY;IAC7D,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,GAAG,UAAU,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW,GAAG,UAAU,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,kEAAkE;AAElE,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgC;IAChE,6CAA6C;IAC7C,MAAM,OAAO,GAA2C,EAAE,CAAC;IAE3D,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAElB,4DAA4D;IAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE5C,mCAAmC;IACnC,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACxC,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC;QAC1F,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;YAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,GAAG,SAAS,GAAG,0BAA0B,CAAC,MAAM,CAAC;IACzD,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;AACvD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAC3B,OAAgC,EAChC,OAAuB,MAAM,EAC7B,GAAY;IAEZ,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAA4B,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAoB,EAAE,GAAY;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kEAAkE;AAElE,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,mBAAmB,CAAC,QAAmB;IACrD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,cAAc,CAAC,QAAmB;IAChD,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,2BAA2B,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,yBAAyB,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/screenshot.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Find the first available Chrome binary on the system.
+ * Returns the path or null if not found.
+ */
+export declare function findChrome(): string | null;
+/**
+ * Capture a screenshot of a URL using headless Chrome.
+ * Returns the local file path on success, or null if Chrome is unavailable or capture fails.
+ */
+export declare function captureScreenshot(url: string, slug: string): Promise<string | null>;

package/dist/screenshot.js

@@ -0,0 +1,80 @@
+import { execFile } from 'node:child_process';
+import { existsSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir, platform } from 'node:os';
+const SCREENSHOTS_DIR = join(homedir(), '.config', 'heyiam', 'screenshots');
+/** Known Chrome binary paths by platform */
+const CHROME_PATHS = {
+    darwin: [
+        '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
+        '/Applications/Chromium.app/Contents/MacOS/Chromium',
+        '/Applications/Google Chrome Canary.app/Contents/MacOS/Google Chrome Canary',
+    ],
+    linux: [
+        '/usr/bin/google-chrome',
+        '/usr/bin/google-chrome-stable',
+        '/usr/bin/chromium',
+        '/usr/bin/chromium-browser',
+        '/snap/bin/chromium',
+    ],
+    win32: [
+        'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+        'C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe',
+    ],
+};
+/**
+ * Find the first available Chrome binary on the system.
+ * Returns the path or null if not found.
+ */
+export function findChrome() {
+    const paths = CHROME_PATHS[platform()] ?? [];
+    for (const p of paths) {
+        if (existsSync(p))
+            return p;
+    }
+    return null;
+}
+/**
+ * Capture a screenshot of a URL using headless Chrome.
+ * Returns the local file path on success, or null if Chrome is unavailable or capture fails.
+ */
+export async function captureScreenshot(url, slug) {
+    const chrome = findChrome();
+    if (!chrome)
+        return null;
+    mkdirSync(SCREENSHOTS_DIR, { recursive: true });
+    const outPath = join(SCREENSHOTS_DIR, `${slug}.png`);
+    try {
+        await new Promise((resolve, reject) => {
+            execFile(chrome, [
+                '--headless=new',
+                '--disable-gpu',
+                '--no-sandbox',
+                '--disable-software-rasterizer',
+                `--screenshot=${outPath}`,
+                '--window-size=1280,800',
+                '--hide-scrollbars',
+                '--disable-extensions',
+                '--disable-background-networking',
+                '--disable-sync',
+                '--disable-translate',
+                '--disable-default-apps',
+                '--mute-audio',
+                '--no-first-run',
+                url,
+            ], { timeout: 30_000 }, (err) => {
+                if (err)
+                    reject(err);
+                else
+                    resolve();
+            });
+        });
+        if (existsSync(outPath))
+            return outPath;
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=screenshot.js.map

package/dist/screenshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"screenshot.js","sourceRoot":"","sources":["../src/screenshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE5C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAE5E,4CAA4C;AAC5C,MAAM,YAAY,GAA6B;IAC7C,MAAM,EAAE;QACN,8DAA8D;QAC9D,oDAAoD;QACpD,4EAA4E;KAC7E;IACD,KAAK,EAAE;QACL,wBAAwB;QACxB,+BAA+B;QAC/B,mBAAmB;QACnB,2BAA2B;QAC3B,oBAAoB;KACrB;IACD,KAAK,EAAE;QACL,4DAA4D;QAC5D,kEAAkE;KACnE;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAAY;IAC/D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,QAAQ,CAAC,MAAM,EAAE;gBACf,gBAAgB;gBAChB,eAAe;gBACf,cAAc;gBACd,+BAA+B;gBAC/B,gBAAgB,OAAO,EAAE;gBACzB,wBAAwB;gBACxB,mBAAmB;gBACnB,sBAAsB;gBACtB,iCAAiC;gBACjC,gBAAgB;gBAChB,qBAAqB;gBACrB,wBAAwB;gBACxB,cAAc;gBACd,gBAAgB;gBAChB,GAAG;aACJ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}