logicstamp-context 0.2.6 → 0.3.0

package/dist/cli/commands/init.js

@@ -5,6 +5,7 @@ import { resolve } from 'node:path';
 import { ensureGitignorePatterns, readGitignore, hasLogicStampPatterns } from '../../utils/gitignore.js';
 import { updateConfig } from '../../utils/config.js';
 import { readPackageLLMContext, writeLLMContext, llmContextExists } from '../../utils/llmContext.js';
+import { securityScanCommand } from './security.js';
 /**
  * Check if running in interactive TTY
  */
@@ -32,11 +33,18 @@ async function promptYesNo(question) {
  */
 export async function init(options = {}) {
     const targetDir = resolve(options.targetDir || process.cwd());
+    // Security scan runs by default unless --no-secure is set
+    // When security scan runs, automatically enable --yes (no prompts)
+    const shouldRunSecurity = !options.noSecure;
+    const autoYes = shouldRunSecurity || options.yes;
+    // Track what was done for summary (only used when security scan runs)
+    let gitignoreAdded = false;
+    let llmContextGenerated = false;
     console.log('🚀 Initializing LogicStamp...\n');
     // Setup .gitignore (always prompt unless skipGitignore flag)
     if (!options.skipGitignore) {
         try {
-            // Check if patterns already exist
+            // Check if patterns already exist (for display purposes)
             const gitignoreContent = await readGitignore(targetDir);
             const alreadyHasPatterns = hasLogicStampPatterns(gitignoreContent);
             if (!alreadyHasPatterns) {
@@ -47,8 +55,9 @@ export async function init(options = {}) {
                 console.log('   - *.uif.json');
                 console.log('   - logicstamp.manifest.json');
                 console.log('   - .logicstamp/');
+                console.log('   - stamp_security_report.json (🔒 SECURITY: contains sensitive secret locations)');
                 let shouldAdd = true; // Default to "yes" in non-interactive mode
-                if (isTTY()) {
+                if (isTTY() && !autoYes) {
                     // Interactive prompt (local dev convenience)
                     shouldAdd = await promptYesNo('\nAdd recommended patterns to .gitignore? [Y/n] ');
                 }
@@ -57,19 +66,31 @@ export async function init(options = {}) {
                     if (created) {
                         console.log('✅ Created .gitignore with LogicStamp patterns');
                         await updateConfig(targetDir, { gitignorePreference: 'added' });
+                        gitignoreAdded = true;
                     }
                     else if (added) {
                         console.log('✅ Added LogicStamp patterns to existing .gitignore');
                         await updateConfig(targetDir, { gitignorePreference: 'added' });
+                        gitignoreAdded = true;
                     }
                 }
                 else {
                     console.log('📝 Skipping .gitignore setup');
+                    console.log('⚠️  Note: If you run `stamp security scan`, it will automatically add `stamp_security_report.json` to `.gitignore` to protect sensitive findings.');
                     await updateConfig(targetDir, { gitignorePreference: 'skipped' });
                 }
             }
             else {
-                console.log('ℹ️  .gitignore already contains LogicStamp patterns');
+                // Even if hasLogicStampPatterns() returns true, ensureGitignorePatterns()
+                // will check for missing patterns and update if needed (idempotent patch mode)
+                const { added } = await ensureGitignorePatterns(targetDir);
+                if (added) {
+                    console.log('✅ Updated existing LogicStamp section in .gitignore');
+                    gitignoreAdded = true;
+                }
+                else {
+                    console.log('ℹ️  .gitignore already contains all LogicStamp patterns');
+                }
                 // Still save preference in case config doesn't exist
                 await updateConfig(targetDir, { gitignorePreference: 'added' });
             }
@@ -93,7 +114,7 @@ export async function init(options = {}) {
             if (content) {
                 console.log('\n💡 LogicStamp can generate LLM_CONTEXT.md to help AI assistants understand your project structure.');
                 let shouldAdd = true; // Default to "yes" in non-interactive mode
-                if (isTTY()) {
+                if (isTTY() && !autoYes) {
                     // Interactive prompt (local dev convenience)
                     shouldAdd = await promptYesNo('Generate LLM_CONTEXT.md in project root? [Y/n] ');
                 }
@@ -101,6 +122,7 @@ export async function init(options = {}) {
                     await writeLLMContext(targetDir, content);
                     console.log('✅ Created LLM_CONTEXT.md');
                     await updateConfig(targetDir, { llmContextPreference: 'added' });
+                    llmContextGenerated = true;
                 }
                 else {
                     console.log('📝 Skipping LLM_CONTEXT.md creation');
@@ -133,7 +155,7 @@ Add instructions for how to get started with this project.
 This file is generated by LogicStamp Context. Customize it to fit your project's needs.
 `;
                 let shouldAdd = true; // Default to "yes" in non-interactive mode
-                if (isTTY()) {
+                if (isTTY() && !autoYes) {
                     // Interactive prompt (local dev convenience)
                     shouldAdd = await promptYesNo('Generate LLM_CONTEXT.md in project root? [Y/n] ');
                 }
@@ -141,6 +163,7 @@ This file is generated by LogicStamp Context. Customize it to fit your project's
                     await writeLLMContext(targetDir, defaultContent);
                     console.log('✅ Created LLM_CONTEXT.md with default template');
                     await updateConfig(targetDir, { llmContextPreference: 'added' });
+                    llmContextGenerated = true;
                 }
                 else {
                     console.log('📝 Skipping LLM_CONTEXT.md creation');
@@ -152,9 +175,60 @@ This file is generated by LogicStamp Context. Customize it to fit your project's
     catch (error) {
         console.error('\n⚠️  Failed to create LLM_CONTEXT.md:', error instanceof Error ? error.message : String(error));
     }
-    console.log('\n✨ LogicStamp initialization complete!');
-    console.log('\nNext steps:');
-    console.log('  • Run `stamp context` to generate context files');
-    console.log('  • Run `stamp context --help` for more options');
+    // Run security scan after init (default behavior, unless --no-secure is set)
+    if (shouldRunSecurity) {
+        console.log('\n🔒 Running security scan...\n');
+        try {
+            const scanResult = await securityScanCommand({
+                entry: targetDir,
+                quiet: false,
+                noExit: true,
+            });
+            // Print combined summary
+            console.log('\n📊 Initialization complete.');
+            // Summary of init actions
+            if (!options.skipGitignore) {
+                if (gitignoreAdded) {
+                    console.log('✔ Added LogicStamp patterns to .gitignore');
+                }
+                else {
+                    // Check if it was already there
+                    const gitignoreContent = await readGitignore(targetDir);
+                    if (hasLogicStampPatterns(gitignoreContent)) {
+                        console.log('✔ LogicStamp patterns already in .gitignore');
+                    }
+                }
+            }
+            if (llmContextGenerated) {
+                console.log('✔ Generated LLM_CONTEXT.md');
+            }
+            else if (await llmContextExists(targetDir)) {
+                console.log('✔ LLM_CONTEXT.md already exists');
+            }
+            // Summary of security scan
+            if (scanResult && typeof scanResult === 'object' && 'report' in scanResult) {
+                const { report } = scanResult;
+                console.log(`✔ Security scan: ${report.filesScanned} files scanned, ${report.secretsFound} secrets found`);
+                if (report.secretsFound > 0) {
+                    console.log(`✔ Report written to stamp_security_report.json`);
+                    process.exit(1);
+                }
+                else {
+                    console.log(`✔ No secrets detected`);
+                    console.log(`✔ Report written to stamp_security_report.json`);
+                }
+            }
+        }
+        catch (error) {
+            console.error('\n⚠️  Security scan failed:', error instanceof Error ? error.message : String(error));
+            // Don't exit with error - init succeeded, scan failed
+        }
+    }
+    else {
+        console.log('\n✨ LogicStamp initialization complete!');
+        console.log('\nNext steps:');
+        console.log('  • Run `stamp context` to generate context files');
+        console.log('  • Run `stamp context --help` for more options');
+    }
 }
 //# sourceMappingURL=init.js.map

package/dist/cli/commands/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACzG,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AASrG;;GAEG;AACH,SAAS,KAAK;IACZ,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CAAC,QAAgB;IACzC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YACrC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,UAAuB,EAAE;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAE9D,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAE/C,6DAA6D;IAC7D,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YACxD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;YAEnE,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;gBAC3F,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAEjC,IAAI,SAAS,GAAG,IAAI,CAAC,CAAC,2CAA2C;gBACjE,IAAI,KAAK,EAAE,EAAE,CAAC;oBACZ,6CAA6C;oBAC7C,SAAS,GAAG,MAAM,WAAW,CAAC,kDAAkD,CAAC,CAAC;gBACpF,CAAC;gBAED,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC;oBAEpE,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;wBAC7D,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;oBAClE,CAAC;yBAAM,IAAI,KAAK,EAAE,CAAC;wBACjB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;wBAClE,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;oBAClE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;oBAC5C,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBACnE,qDAAqD;gBACrD,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1G,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC;QACH,IAAI,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAC9C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,sGAAsG,CAAC,CAAC;gBACpH,IAAI,SAAS,GAAG,IAAI,CAAC,CAAC,2CAA2C;gBACjE,IAAI,KAAK,EAAE,EAAE,CAAC;oBACZ,6CAA6C;oBAC7C,SAAS,GAAG,MAAM,WAAW,CAAC,iDAAiD,CAAC,CAAC;gBACnF,CAAC;gBAED,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;oBAC1C,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;oBACxC,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;gBACnE,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;oBACnD,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,kEAAkE;gBAClE,OAAO,CAAC,GAAG,CAAC,sGAAsG,CAAC,CAAC;gBACpH,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;gBAExE,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;CAoB9B,CAAC;gBAEM,IAAI,SAAS,GAAG,IAAI,CAAC,CAAC,2CAA2C;gBACjE,IAAI,KAAK,EAAE,EAAE,CAAC;oBACZ,6CAA6C;oBAC7C,SAAS,GAAG,MAAM,WAAW,CAAC,iDAAiD,CAAC,CAAC;gBACnF,CAAC;gBAED,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,eAAe,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;oBACjD,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;oBAC9D,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;gBACnE,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;oBACnD,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;AACjE,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACzG,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAapD;;GAEG;AACH,SAAS,KAAK;IACZ,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CAAC,QAAgB;IACzC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YACrC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,UAAuB,EAAE;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAE9D,0DAA0D;IAC1D,mEAAmE;IACnE,MAAM,iBAAiB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC5C,MAAM,OAAO,GAAG,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC;IAEjD,sEAAsE;IACtE,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAEhC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAE/C,6DAA6D;IAC7D,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,yDAAyD;YACzD,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YACxD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;YAEnE,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;gBAC3F,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC;gBAElG,IAAI,SAAS,GAAG,IAAI,CAAC,CAAC,2CAA2C;gBACjE,IAAI,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACxB,6CAA6C;oBAC7C,SAAS,GAAG,MAAM,WAAW,CAAC,kDAAkD,CAAC,CAAC;gBACpF,CAAC;gBAED,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC;oBAEpE,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;wBAC7D,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;wBAChE,cAAc,GAAG,IAAI,CAAC;oBACxB,CAAC;yBAAM,IAAI,KAAK,EAAE,CAAC;wBACjB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;wBAClE,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;wBAChE,cAAc,GAAG,IAAI,CAAC;oBACxB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;oBAC5C,OAAO,CAAC,GAAG,CAAC,mJAAmJ,CAAC,CAAC;oBACjK,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,0EAA0E;gBAC1E,+EAA+E;gBAC/E,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC;gBAE3D,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;oBACnE,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;gBACzE,CAAC;gBAED,qDAAqD;gBACrD,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1G,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC;QACH,IAAI,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAC9C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,sGAAsG,CAAC,CAAC;gBACpH,IAAI,SAAS,GAAG,IAAI,CAAC,CAAC,2CAA2C;gBACjE,IAAI,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACxB,6CAA6C;oBAC7C,SAAS,GAAG,MAAM,WAAW,CAAC,iDAAiD,CAAC,CAAC;gBACnF,CAAC;gBAED,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;oBAC1C,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;oBACxC,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;oBACjE,mBAAmB,GAAG,IAAI,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;oBACnD,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,kEAAkE;gBAClE,OAAO,CAAC,GAAG,CAAC,sGAAsG,CAAC,CAAC;gBACpH,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;gBAExE,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;CAoB9B,CAAC;gBAEM,IAAI,SAAS,GAAG,IAAI,CAAC,CAAC,2CAA2C;gBACjE,IAAI,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACxB,6CAA6C;oBAC7C,SAAS,GAAG,MAAM,WAAW,CAAC,iDAAiD,CAAC,CAAC;gBACnF,CAAC;gBAED,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,eAAe,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;oBACjD,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;oBAC9D,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;oBACjE,mBAAmB,GAAG,IAAI,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;oBACnD,MAAM,YAAY,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClH,CAAC;IAED,6EAA6E;IAC7E,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC;gBAC3C,KAAK,EAAE,SAAS;gBAChB,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YAEH,yBAAyB;YACzB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAE7C,0BAA0B;YAC1B,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC3B,IAAI,cAAc,EAAE,CAAC;oBACnB,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;gBAC3D,CAAC;qBAAM,CAAC;oBACN,gCAAgC;oBAChC,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;oBACxD,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,CAAC;wBAC5C,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,mBAAmB,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC5C,CAAC;iBAAM,IAAI,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YACjD,CAAC;YAED,2BAA2B;YAC3B,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,YAAY,mBAAmB,MAAM,CAAC,YAAY,gBAAgB,CAAC,CAAC;gBAE3G,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;oBAC5B,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;oBAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;oBACrC,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrG,sDAAsD;QACxD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/cli/commands/security.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Security scan command - Scans for secrets and generates report
+ */
+import { type SecretMatch } from '../../utils/secretDetector.js';
+export interface SecurityScanOptions {
+    entry?: string;
+    out?: string;
+    quiet?: boolean;
+    /** If true, return result instead of calling process.exit */
+    noExit?: boolean;
+}
+export interface SecurityReport {
+    type: 'LogicStampSecurityReport';
+    schemaVersion: '0.1';
+    createdAt: string;
+    projectRoot: string;
+    filesScanned: number;
+    secretsFound: number;
+    matches: SecretMatch[];
+    filesWithSecrets: string[];
+}
+export interface SecurityHardResetOptions {
+    entry?: string;
+    out?: string;
+    force?: boolean;
+    quiet?: boolean;
+}
+/**
+ * Hard reset command - deletes security report file
+ */
+export declare function securityHardResetCommand(options: SecurityHardResetOptions): Promise<void>;
+export interface SecurityScanResult {
+    secretsFound: boolean;
+    report: SecurityReport;
+}
+export declare function securityScanCommand(options: SecurityScanOptions): Promise<void | SecurityScanResult>;
+//# sourceMappingURL=security.d.ts.map

package/dist/cli/commands/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/security.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,OAAO,EAA4C,KAAK,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAM3G,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,0BAA0B,CAAC;IACjC,aAAa,EAAE,KAAK,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAsBD,MAAM,WAAW,wBAAwB;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2C/F;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,GAAG,kBAAkB,CAAC,CAyP1G"}

package/dist/cli/commands/security.js

@@ -0,0 +1,304 @@
+/**
+ * Security scan command - Scans for secrets and generates report
+ */
+import { resolve, dirname, join, relative } from 'node:path';
+import { writeFile, mkdir, unlink, stat } from 'node:fs/promises';
+import { createInterface } from 'node:readline';
+import { stdin, stdout } from 'node:process';
+import { globFiles, readFileWithText, getRelativePath } from '../../utils/fsx.js';
+import { scanFileForSecrets, filterFalsePositives } from '../../utils/secretDetector.js';
+import { STAMPIGNORE_FILENAME } from '../../utils/stampignore.js';
+import { ensureGitignorePatterns, ensurePatternInGitignore } from '../../utils/gitignore.js';
+import { debugError } from '../../utils/debug.js';
+import { displayPath } from './context/fileWriter.js';
+/**
+ * Security scan command
+ */
+/**
+ * Prompt user for yes/no confirmation
+ */
+async function promptYesNo(question) {
+    const rl = createInterface({
+        input: stdin,
+        output: stdout,
+    });
+    return new Promise((resolve) => {
+        rl.question(`${question} (y/N): `, (answer) => {
+            rl.close();
+            resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
+        });
+    });
+}
+/**
+ * Hard reset command - deletes security report file
+ */
+export async function securityHardResetCommand(options) {
+    const projectRoot = resolve(options.entry || '.');
+    const outputPath = options.out || 'stamp_security_report.json';
+    const outputFile = outputPath.endsWith('.json') ? outputPath : join(outputPath, 'stamp_security_report.json');
+    const reportPath = outputFile;
+    let shouldReset = options.force;
+    if (!shouldReset) {
+        // Prompt for confirmation
+        shouldReset = await promptYesNo(`⚠️  This will delete ${displayPath(reportPath)}. Continue?`);
+    }
+    if (shouldReset) {
+        // Delete report file
+        let reportDeleted = false;
+        try {
+            await unlink(reportPath);
+            reportDeleted = true;
+        }
+        catch (error) {
+            const err = error;
+            if (err.code !== 'ENOENT') {
+                // Only error if file exists but couldn't be deleted
+                throw new Error(`Failed to delete report file: ${err.message}`);
+            }
+        }
+        if (!options.quiet) {
+            if (reportDeleted) {
+                console.log(`\n✅ Reset complete:`);
+                console.log(`   Deleted ${displayPath(reportPath)}`);
+            }
+            else {
+                console.log(`\nℹ️  No report file to reset (file doesn't exist)`);
+            }
+        }
+    }
+    else {
+        if (!options.quiet) {
+            console.log(`\n❌ Reset cancelled`);
+        }
+        process.exit(0);
+    }
+}
+export async function securityScanCommand(options) {
+    const projectRoot = resolve(options.entry || '.');
+    const outputPath = options.out || 'stamp_security_report.json';
+    const outputDir = outputPath.endsWith('.json') ? dirname(outputPath) : outputPath;
+    const outputFile = outputPath.endsWith('.json') ? outputPath : join(outputPath, 'stamp_security_report.json');
+    if (!options.quiet) {
+        console.log(`🔒 Scanning for secrets in ${displayPath(projectRoot)}...`);
+    }
+    // Resolve output file relative to project root if it's a relative path
+    const resolvedOutputFile = outputFile.startsWith('/') || outputFile.match(/^[A-Z]:/)
+        ? outputFile
+        : join(projectRoot, outputFile);
+    // Find all files to scan (TypeScript, JavaScript, and JSON files)
+    let files = await globFiles(projectRoot, '.ts,.tsx,.js,.jsx,.json');
+    // Exclude the report file and .stampignore from scanning (they may contain secrets)
+    // Use absolute path comparison to be safe
+    const reportFileAbs = resolve(resolvedOutputFile);
+    const stampignoreFileAbs = join(projectRoot, STAMPIGNORE_FILENAME);
+    files = files.filter(file => {
+        const fileAbs = resolve(file);
+        return fileAbs !== reportFileAbs && fileAbs !== stampignoreFileAbs;
+    });
+    if (files.length === 0) {
+        if (!options.quiet) {
+            console.log('   No files found to scan');
+        }
+        // Still create an empty report if noExit is true (called from init)
+        if (options.noExit) {
+            const emptyReport = {
+                type: 'LogicStampSecurityReport',
+                schemaVersion: '0.1',
+                createdAt: new Date().toISOString(),
+                projectRoot,
+                filesScanned: 0,
+                secretsFound: 0,
+                matches: [], // Already empty, no paths to convert
+                filesWithSecrets: [], // Already empty, no paths to convert
+            };
+            // Resolve output file relative to project root if it's a relative path
+            const resolvedOutputFile = outputFile.startsWith('/') || outputFile.match(/^[A-Z]:/)
+                ? outputFile
+                : join(projectRoot, outputFile);
+            const resolvedOutputDir = dirname(resolvedOutputFile);
+            try {
+                await mkdir(resolvedOutputDir, { recursive: true });
+                await writeFile(resolvedOutputFile, JSON.stringify(emptyReport, null, 2), 'utf8');
+            }
+            catch (error) {
+                const err = error;
+                debugError('security', 'securityScanCommand', {
+                    outputFile: resolvedOutputFile,
+                    message: err.message,
+                    code: err.code,
+                });
+                throw new Error(`Failed to write security report: ${err.message}`);
+            }
+            // Automatically ensure report file is in .gitignore to prevent accidental commits
+            try {
+                const reportPathRelative = relative(projectRoot, resolvedOutputFile).replace(/\\/g, '/');
+                const isDefaultPath = outputPath === 'stamp_security_report.json' ||
+                    (outputPath.endsWith('.json') && resolvedOutputFile.endsWith('stamp_security_report.json'));
+                if (isDefaultPath) {
+                    // Default path - ensure all LogicStamp patterns are in .gitignore
+                    await ensureGitignorePatterns(projectRoot);
+                }
+                else {
+                    // Custom path - ensure this specific file is in .gitignore
+                    await ensurePatternInGitignore(projectRoot, reportPathRelative);
+                }
+            }
+            catch (error) {
+                // Non-fatal: log warning but don't fail the scan
+                if (!options.quiet) {
+                    const err = error;
+                    console.warn(`\n⚠️  Warning: Could not update .gitignore: ${err.message}`);
+                    console.warn(`   Please manually add the report file to .gitignore to prevent accidental commits.`);
+                }
+            }
+            if (!options.quiet) {
+                console.log(`\n✅ No secrets detected`);
+                console.log(`📝 Report written to: ${displayPath(resolvedOutputFile)}`);
+            }
+            return { secretsFound: false, report: emptyReport };
+        }
+        return;
+    }
+    if (!options.quiet) {
+        console.log(`   Scanning ${files.length} files...`);
+    }
+    // Scan each file for secrets
+    const allMatches = [];
+    const filesWithSecrets = new Set();
+    // Maximum file size to scan (10MB) - prevents DoS on huge files
+    const MAX_FILE_SIZE = 10 * 1024 * 1024;
+    for (const file of files) {
+        try {
+            // Check file size before reading
+            const fileStats = await stat(file);
+            if (fileStats.size > MAX_FILE_SIZE) {
+                if (!options.quiet) {
+                    console.warn(`   ⚠️  Skipped ${file}: file too large (${Math.round(fileStats.size / 1024 / 1024)}MB > 10MB)`);
+                }
+                continue;
+            }
+            const { text } = await readFileWithText(file);
+            const matches = scanFileForSecrets(file, text);
+            const filteredMatches = filterFalsePositives(matches);
+            if (filteredMatches.length > 0) {
+                allMatches.push(...filteredMatches);
+                filesWithSecrets.add(file);
+            }
+        }
+        catch (error) {
+            // Skip files that can't be read (binary, permissions, etc.)
+            if (!options.quiet) {
+                console.warn(`   ⚠️  Skipped ${file}: ${error.message}`);
+            }
+        }
+    }
+    // Generate report - convert absolute paths to relative before serializing
+    const report = {
+        type: 'LogicStampSecurityReport',
+        schemaVersion: '0.1',
+        createdAt: new Date().toISOString(),
+        projectRoot,
+        filesScanned: files.length,
+        secretsFound: allMatches.length,
+        matches: allMatches.map(match => ({
+            ...match,
+            file: getRelativePath(projectRoot, match.file),
+        })),
+        filesWithSecrets: Array.from(filesWithSecrets)
+            .map(file => getRelativePath(projectRoot, file))
+            .sort(),
+    };
+    // Write report
+    const resolvedOutputDir = dirname(resolvedOutputFile);
+    try {
+        await mkdir(resolvedOutputDir, { recursive: true });
+        await writeFile(resolvedOutputFile, JSON.stringify(report, null, 2), 'utf8');
+    }
+    catch (error) {
+        const err = error;
+        debugError('security', 'securityScanCommand', {
+            outputFile: resolvedOutputFile,
+            message: err.message,
+            code: err.code,
+        });
+        throw new Error(`Failed to write security report: ${err.message}`);
+    }
+    // Automatically ensure report file is in .gitignore to prevent accidental commits
+    // The report contains sensitive information (locations of secrets)
+    try {
+        const reportPathRelative = relative(projectRoot, resolvedOutputFile).replace(/\\/g, '/');
+        const isDefaultPath = outputPath === 'stamp_security_report.json' ||
+            (outputPath.endsWith('.json') && resolvedOutputFile.endsWith('stamp_security_report.json'));
+        if (isDefaultPath) {
+            // Default path - ensure all LogicStamp patterns are in .gitignore
+            await ensureGitignorePatterns(projectRoot);
+        }
+        else {
+            // Custom path - ensure this specific file is in .gitignore
+            await ensurePatternInGitignore(projectRoot, reportPathRelative);
+        }
+    }
+    catch (error) {
+        // Non-fatal: log warning but don't fail the scan
+        if (!options.quiet) {
+            const err = error;
+            console.warn(`\n⚠️  Warning: Could not update .gitignore: ${err.message}`);
+            console.warn(`   Please manually add the report file to .gitignore to prevent accidental commits.`);
+        }
+    }
+    // Display results
+    if (!options.quiet) {
+        console.log(`\n📊 Security Scan Results:`);
+        console.log(`   Files scanned: ${files.length}`);
+        console.log(`   Secrets found: ${allMatches.length}`);
+        console.log(`   Files with secrets: ${filesWithSecrets.size}`);
+        if (allMatches.length > 0) {
+            console.log(`\n⚠️  Secrets detected in the following files:`);
+            // Group by file
+            const matchesByFile = new Map();
+            for (const match of allMatches) {
+                if (!matchesByFile.has(match.file)) {
+                    matchesByFile.set(match.file, []);
+                }
+                matchesByFile.get(match.file).push(match);
+            }
+            for (const [file, matches] of matchesByFile.entries()) {
+                console.log(`\n   ${displayPath(file)}`);
+                for (const match of matches.slice(0, 5)) { // Show first 5 matches per file
+                    console.log(`      Line ${match.line}: ${match.type} (${match.severity})`);
+                    console.log(`      ${match.snippet}`);
+                }
+                if (matches.length > 5) {
+                    console.log(`      ... and ${matches.length - 5} more`);
+                }
+            }
+            console.log(`\n📝 Report written to: ${displayPath(resolvedOutputFile)}`);
+        }
+        else {
+            console.log(`\n✅ No secrets detected`);
+            console.log(`📝 Report written to: ${displayPath(outputFile)}`);
+        }
+    }
+    else {
+        // Quiet mode: just output JSON stats
+        console.log(JSON.stringify({
+            filesScanned: files.length,
+            secretsFound: allMatches.length,
+            filesWithSecrets: filesWithSecrets.size,
+            reportPath: resolvedOutputFile,
+        }));
+    }
+    // Exit with error code if secrets found (unless noExit is true)
+    if (allMatches.length > 0) {
+        if (options.noExit) {
+            return { secretsFound: true, report };
+        }
+        else {
+            process.exit(1);
+        }
+    }
+    if (options.noExit) {
+        return { secretsFound: false, report };
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/cli/commands/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/cli/commands/security.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAY,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAoB,MAAM,+BAA+B,CAAC;AAC3G,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAqBtD;;GAEG;AACH;;GAEG;AACH,KAAK,UAAU,WAAW,CAAC,QAAgB;IACzC,MAAM,EAAE,GAAG,eAAe,CAAC;QACzB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE;YAC5C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AASD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAiC;IAC9E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,4BAA4B,CAAC;IAC/D,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IAC9G,MAAM,UAAU,GAAG,UAAU,CAAC;IAE9B,IAAI,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAEhC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,0BAA0B;QAC1B,WAAW,GAAG,MAAM,WAAW,CAC7B,wBAAwB,WAAW,CAAC,UAAU,CAAC,aAAa,CAC7D,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,qBAAqB;QACrB,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YACzB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAA8B,CAAC;YAC3C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,oDAAoD;gBACpD,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAA4B;IACpE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,4BAA4B,CAAC;IAC/D,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAClF,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IAE9G,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,8BAA8B,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,uEAAuE;IACvE,MAAM,kBAAkB,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;QAClF,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAElC,kEAAkE;IAClE,IAAI,KAAK,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;IAEpE,oFAAoF;IACpF,0CAA0C;IAC1C,MAAM,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAEnE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,kBAAkB,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;QAED,oEAAoE;QACpE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,WAAW,GAAmB;gBAClC,IAAI,EAAE,0BAA0B;gBAChC,aAAa,EAAE,KAAK;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,WAAW;gBACX,YAAY,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,EAAE,EAAE,qCAAqC;gBAClD,gBAAgB,EAAE,EAAE,EAAE,qCAAqC;aAC5D,CAAC;YAEF,uEAAuE;YACvE,MAAM,kBAAkB,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;gBAClF,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAClC,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAEtD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,MAAM,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,KAA8B,CAAC;gBAC3C,UAAU,CAAC,UAAU,EAAE,qBAAqB,EAAE;oBAC5C,UAAU,EAAE,kBAAkB;oBAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;iBACf,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,kFAAkF;YAClF,IAAI,CAAC;gBACH,MAAM,kBAAkB,GAAG,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACzF,MAAM,aAAa,GAAG,UAAU,KAAK,4BAA4B;oBAC3C,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC;gBAElH,IAAI,aAAa,EAAE,CAAC;oBAClB,kEAAkE;oBAClE,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC;gBAC7C,CAAC;qBAAM,CAAC;oBACN,2DAA2D;oBAC3D,MAAM,wBAAwB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iDAAiD;gBACjD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,GAAG,GAAG,KAAc,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC,+CAA+C,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC3E,OAAO,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;gBACtG,CAAC;YACH,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,yBAAyB,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACtD,CAAC;QAED,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC;IACtD,CAAC;IAED,6BAA6B;IAC7B,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,gEAAgE;IAChE,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,iCAAiC;YACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,SAAS,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;gBACnC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC,kBAAkB,IAAI,qBAAqB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;gBAChH,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/C,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAEtD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;gBACpC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4DAA4D;YAC5D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,kBAAkB,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,MAAM,GAAmB;QAC7B,IAAI,EAAE,0BAA0B;QAChC,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW;QACX,YAAY,EAAE,KAAK,CAAC,MAAM;QAC1B,YAAY,EAAE,UAAU,CAAC,MAAM;QAC/B,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChC,GAAG,KAAK;YACR,IAAI,EAAE,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC;SAC/C,CAAC,CAAC;QACH,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;aAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;aAC/C,IAAI,EAAE;KACV,CAAC;IAEF,eAAe;IACf,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAA8B,CAAC;QAC3C,UAAU,CAAC,UAAU,EAAE,qBAAqB,EAAE;YAC5C,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,kFAAkF;IAClF,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,kBAAkB,GAAG,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzF,MAAM,aAAa,GAAG,UAAU,KAAK,4BAA4B;YAC3C,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAElH,IAAI,aAAa,EAAE,CAAC;YAClB,kEAAkE;YAClE,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,2DAA2D;YAC3D,MAAM,wBAAwB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iDAAiD;QACjD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,KAAc,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,+CAA+C,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,0BAA0B,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;QAE/D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YAE9D,gBAAgB;YAChB,MAAM,aAAa,GAAG,IAAI,GAAG,EAAyB,CAAC;YACvD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACpC,CAAC;gBACD,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;YAED,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,QAAQ,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,gCAAgC;oBACzE,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;oBAC3E,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,yBAAyB,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,qCAAqC;QACrC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,YAAY,EAAE,KAAK,CAAC,MAAM;YAC1B,YAAY,EAAE,UAAU,CAAC,MAAM;YAC/B,gBAAgB,EAAE,gBAAgB,CAAC,IAAI;YACvC,UAAU,EAAE,kBAAkB;SAC/B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,gEAAgE;IAChE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/cli/handlers/ignoreHandler.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Handler for ignore command
+ */
+export declare function handleIgnore(args: string[]): Promise<void>;
+//# sourceMappingURL=ignoreHandler.d.ts.map

package/dist/cli/handlers/ignoreHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignoreHandler.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/ignoreHandler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhE"}

package/dist/cli/handlers/ignoreHandler.js

@@ -0,0 +1,23 @@
+/**
+ * Handler for ignore command
+ */
+import { ignoreCommand } from '../commands/ignore.js';
+import { parseIgnoreArgs } from '../parser/argumentParser.js';
+import { getIgnoreHelp } from '../parser/helpText.js';
+import { printFoxIcon } from './initHandler.js';
+export async function handleIgnore(args) {
+    printFoxIcon();
+    if (args.includes('--help') || args.includes('-h')) {
+        console.log(getIgnoreHelp());
+        process.exit(0);
+    }
+    const options = parseIgnoreArgs(args);
+    try {
+        await ignoreCommand(options);
+    }
+    catch (error) {
+        console.error('❌ Failed to add paths to .stampignore:', error.message);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=ignoreHandler.js.map

package/dist/cli/handlers/ignoreHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignoreHandler.js","sourceRoot":"","sources":["../../../src/cli/handlers/ignoreHandler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,aAAa,EAAsB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,YAAY,EAAE,CAAC;IAEf,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/cli/handlers/securityHandler.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Handler for security scan command
+ */
+export declare function handleSecurityScan(args: string[]): Promise<void>;
+//# sourceMappingURL=securityHandler.d.ts.map

package/dist/cli/handlers/securityHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityHandler.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/securityHandler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCtE"}

package/dist/cli/handlers/securityHandler.js

@@ -0,0 +1,41 @@
+/**
+ * Handler for security scan command
+ */
+import { securityScanCommand } from '../commands/security.js';
+import { getSecurityScanHelp } from '../parser/helpText.js';
+import { printFoxIcon } from './initHandler.js';
+export async function handleSecurityScan(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        printFoxIcon();
+        console.log(getSecurityScanHelp());
+        process.exit(0);
+    }
+    const options = {
+        entry: undefined,
+        out: undefined,
+        quiet: args.includes('--quiet') || args.includes('-q'),
+    };
+    // Parse arguments
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === '--quiet' || arg === '-q') {
+            options.quiet = true;
+        }
+        else if (arg === '--out' || arg === '-o') {
+            options.out = args[i + 1];
+            i++;
+        }
+        else if (!arg.startsWith('-') && !options.entry) {
+            options.entry = arg;
+        }
+    }
+    try {
+        await securityScanCommand(options);
+    }
+    catch (error) {
+        console.error('❌ Security scan failed:', error.message);
+        console.error(error.stack);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=securityHandler.js.map