openpitstop 1.0.0

package/dist/analyzers/ledger/discover.js

@@ -0,0 +1,122 @@
+import fs from "node:fs";
+import path from "node:path";
+import { walkFiles } from "../util.js";
+import { findRoutesInFile, ROUTE_EXTS } from "../routes.js";
+/** Keywords that mark a route as money-moving. */
+const KEYWORDS = [
+    "charge",
+    "capture",
+    "payment",
+    "transfer",
+    "refund",
+    "webhook",
+];
+/** Payment-SDK imports we watch for. */
+const SDK_IMPORTS = ["razorpay", "stripe", "braintree"];
+/** SDK package -> well-known gateway host(s). */
+const SDK_TO_HOSTS = {
+    razorpay: ["https://api.razorpay.com"],
+    stripe: ["https://api.stripe.com"],
+    braintree: ["https://api.braintreegateway.com"],
+};
+/**
+ * discover.ts — static, read-only phase of ledger mode.
+ * Heuristically finds money-moving endpoints (routes whose path/handler match a
+ * money keyword, or whose file imports a payment SDK) and the expected payload
+ * shape. This NEVER runs the app and never touches the network.
+ */
+export function discover(repo) {
+    const repoSdkImports = new Set();
+    const endpoints = [];
+    for (const file of walkFiles(repo, ROUTE_EXTS)) {
+        safeScanFile(repo, file, repoSdkImports, endpoints);
+    }
+    // Keep only money-moving candidates.
+    const money = endpoints.filter((e) => KEYWORDS.some((k) => e.matchedKeyword === k));
+    const sdkImports = [...repoSdkImports];
+    const gatewayHosts = [
+        ...new Set(sdkImports.flatMap((s) => SDK_TO_HOSTS[s] ?? [])),
+    ];
+    // Surface the repo-level payment-SDK set on every endpoint so the report is
+    // accurate even when the SDK is imported transitively (e.g. a routes file
+    // requiring a gateway wrapper that imports razorpay).
+    for (const ep of money)
+        ep.sdkImports = sdkImports;
+    return { endpoints: money, sdkImports, gatewayHosts };
+}
+function safeScanFile(repo, file, repoSdkImports, out) {
+    let content;
+    try {
+        content = fs.readFileSync(file, "utf8");
+    }
+    catch {
+        return;
+    }
+    const sdkImports = detectSdkImports(content);
+    for (const s of sdkImports)
+        repoSdkImports.add(s);
+    const routes = findRoutesInFile(content, path.extname(file).toLowerCase());
+    for (const r of routes) {
+        const kw = KEYWORDS.find((k) => r.path.toLowerCase().includes(k))
+            ?? keywordFromContext(content, r);
+        if (!kw)
+            continue;
+        const rel = path.relative(repo, file);
+        out.push(buildEndpoint(r, file, rel, sdkImports, kw, content));
+    }
+}
+function frameworkName(ext) {
+    switch (ext) {
+        case ".js":
+        case ".jsx":
+        case ".ts":
+        case ".tsx":
+        case ".mjs":
+        case ".cjs":
+            return "express/fastify";
+        case ".py":
+            return "python";
+        default:
+            return ext.slice(1);
+    }
+}
+function buildEndpoint(r, absFile, relFile, sdkImports, kw, content) {
+    const c = content.toLowerCase();
+    const idemIn = /\bidempotency\b/.test(c) ? "Idempotency-Key" : undefined;
+    const amountIn = /\bamounts?\b/.test(c) ? "amount" : undefined;
+    const currencyIn = /\bcurrencies?\b/.test(c) ? "currency" : undefined;
+    const orderIn = /\border_?id\b|\borderid\b/.test(c) ? "order_id" : undefined;
+    return {
+        method: r.method,
+        path: r.path,
+        file: absFile,
+        line: r.line,
+        framework: frameworkName(path.extname(absFile).toLowerCase()),
+        matchedKeyword: kw,
+        sdkImports: sdkImports.length ? sdkImports : [],
+        expectedPayload: {
+            idempotencyKeyHeader: idemIn,
+            amountField: amountIn,
+            currencyField: currencyIn,
+            orderIdField: orderIn,
+        },
+        webhook: r.path.toLowerCase().includes("webhook"),
+    };
+}
+function keywordFromContext(content, r) {
+    const before = content.slice(Math.max(0, r.line - 3), r.line).toLowerCase();
+    for (const k of KEYWORDS)
+        if (before.includes(k))
+            return k;
+    return undefined;
+}
+function detectSdkImports(content) {
+    const found = new Set();
+    for (const sdk of SDK_IMPORTS) {
+        const re = new RegExp(`(?:require\\s*\\(\\s*['"\`]${sdk}|from\\s+['"]${sdk}|import\\s+['"]${sdk})`, "i");
+        if (re.test(content))
+            found.add(sdk);
+    }
+    return [...found];
+}
+//# sourceMappingURL=discover.js.map

package/dist/analyzers/ledger/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../../src/analyzers/ledger/discover.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAmB,MAAM,cAAc,CAAC;AAG7E,kDAAkD;AAClD,MAAM,QAAQ,GAAG;IACf,QAAQ;IACR,SAAS;IACT,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;CACV,CAAC;AAEF,wCAAwC;AACxC,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAExD,iDAAiD;AACjD,MAAM,YAAY,GAA6B;IAC7C,QAAQ,EAAE,CAAC,0BAA0B,CAAC;IACtC,MAAM,EAAE,CAAC,wBAAwB,CAAC;IAClC,SAAS,EAAE,CAAC,kCAAkC,CAAC;CAChD,CAAC;AAUF;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QAC/C,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACtD,CAAC;IAED,qCAAqC;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,CAC7C,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG;QACnB,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;KAC7D,CAAC;IAEF,4EAA4E;IAC5E,0EAA0E;IAC1E,sDAAsD;IACtD,KAAK,MAAM,EAAE,IAAI,KAAK;QAAE,EAAE,CAAC,UAAU,GAAG,UAAU,CAAC;IAEnD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CACnB,IAAY,EACZ,IAAY,EACZ,cAA2B,EAC3B,GAAqB;IAErB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAElD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;eAC5D,kBAAkB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,iBAAiB,CAAC;QAC3B,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,CAAa,EACb,OAAe,EACf,OAAe,EACf,UAAoB,EACpB,EAAU,EACV,OAAe;IAEf,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,MAAM,GACV,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7E,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,cAAc,EAAE,EAAE;QAClB,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;QAC/C,eAAe,EAAE;YACf,oBAAoB,EAAE,MAAM;YAC5B,WAAW,EAAE,QAAQ;YACrB,aAAa,EAAE,UAAU;YACzB,YAAY,EAAE,OAAO;SACtB;QACD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,CAAa;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,8BAA8B,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,GAAG,EAC5E,GAAG,CACJ,CAAC;QACF,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/analyzers/ledger/evidence.d.ts

@@ -0,0 +1,22 @@
+import type { LedgerEndpoint, LedgerEvidence } from "../types.js";
+import type { AttackReport } from "./types.js";
+export interface EvidenceInput {
+    repo: string;
+    discovery: {
+        endpoints: LedgerEndpoint[];
+    };
+    attacks: AttackReport;
+    gatewayLogPath: string;
+}
+export interface EvidenceOutput {
+    evidence: LedgerEvidence[];
+    note?: string;
+}
+/**
+ * evidence.ts — counts how many times the mocked gateway actually received a
+ * "charge" call for each idempotency key. Any key with >1 charge call is a
+ * PROVEN double-charge. Reads the gateway's own receipt log (written by the
+ * nock preload), so nothing here is simulated or fabricated.
+ */
+export declare function analyzeEvidence(input: EvidenceInput): EvidenceOutput;
+export declare function writeEvidenceFile(filePath: string, evidence: LedgerEvidence[], gatewayLogPath: string): void;

package/dist/analyzers/ledger/evidence.js

@@ -0,0 +1,127 @@
+import fs from "node:fs";
+import path from "node:path";
+const SCENARIO_LABEL = {
+    "duplicate-webhook": "webhook replay",
+    "concurrent-double-submit": "concurrent double-submit",
+    "delayed-retry": "delayed retry (client timeout)",
+};
+const CHARGE_GROUPS_TO_REPORT = 20;
+/**
+ * evidence.ts — counts how many times the mocked gateway actually received a
+ * "charge" call for each idempotency key. Any key with >1 charge call is a
+ * PROVEN double-charge. Reads the gateway's own receipt log (written by the
+ * nock preload), so nothing here is simulated or fabricated.
+ */
+export function analyzeEvidence(input) {
+    const entries = readGatewayLog(input.gatewayLogPath);
+    if (entries.length === 0) {
+        return {
+            evidence: [],
+            note: "no gateway calls were recorded — the app may not have reached the payment " +
+                "gateway, or an outbound call may have been blocked. Check the ledger run logs.",
+        };
+    }
+    const chargeCalls = entries.filter((e) => e.charge);
+    const byKey = new Map();
+    for (const e of chargeCalls) {
+        const k = e.key || "(no-key)";
+        if (!byKey.has(k))
+            byKey.set(k, []);
+        byKey.get(k).push(e);
+    }
+    const evidence = [];
+    for (const [key, calls] of byKey) {
+        if (calls.length < 2)
+            continue; // single charge — idempotency held
+        const run = matchRun(input.attacks, key, calls);
+        const endpoint = run
+            ? input.discovery.endpoints[run.endpointIndex]
+            : undefined;
+        const scenarioLabel = run ? SCENARIO_LABEL[run.scenario] : "gateway replay";
+        const orderId = (run && run.orderId) || String(calls[0].orderId || key);
+        const idemKey = (run && run.idempotencyKey) || key;
+        const scenario = (run && run.scenario) || "duplicate-webhook";
+        const gapMs = calls.length > 1 ? msBetween(calls[0], calls[1]) : null;
+        const keyFrag = run && run.idempotencyKey ? ` (idempotency key "${idemKey}")` : "";
+        const summary = `order ${orderId} charged ${calls.length} times via ${scenarioLabel}` +
+            `${keyFrag}, ${gapMs}ms apart`;
+        evidence.push({
+            orderId,
+            idempotencyKey: idemKey,
+            scenario,
+            endpoint: endpoint ? endpoint.path : "(unknown endpoint)",
+            endpointFile: endpoint && endpoint.file ? path.relative(input.repo, endpoint.file) : undefined,
+            doubleCharged: true,
+            chargeCalls: calls,
+            summary,
+        });
+    }
+    const doubleCharges = evidence.length;
+    const keyNote = doubleCharges > 0
+        ? `${doubleCharges} proven double-charge(s) observed at the mocked gateway`
+        : undefined;
+    evidence.sort((a, b) => b.chargeCalls.length - a.chargeCalls.length);
+    const trimmed = evidence.slice(0, CHARGE_GROUPS_TO_REPORT);
+    return { evidence: trimmed, note: keyNote };
+}
+function readGatewayLog(p) {
+    const out = [];
+    if (!fs.existsSync(p))
+        return out;
+    for (const line of fs.readFileSync(p, "utf8").split(/\r?\n/)) {
+        const t = line.trim();
+        if (!t)
+            continue;
+        try {
+            out.push(JSON.parse(t));
+        }
+        catch {
+            /* skip malformed */
+        }
+    }
+    return out;
+}
+function matchRun(attacks, key, calls) {
+    // Prefer an exact identifier match, then a substring match, across the runs.
+    const ids = new Set();
+    for (const c of calls) {
+        if (c.orderId)
+            ids.add(c.orderId);
+        if (c.key)
+            ids.add(c.key);
+    }
+    ids.add(key);
+    let exact;
+    let sub;
+    for (const run of attacks.runs) {
+        for (const id of run.identifiers) {
+            if (ids.has(id)) {
+                if (!exact)
+                    exact = run;
+            }
+            else if (key.length && (key.includes(id) || id.includes(key))) {
+                if (!sub)
+                    sub = run;
+            }
+        }
+    }
+    return exact || sub;
+}
+function msBetween(a, b) {
+    const ta = new Date(a.at).getTime();
+    const tb = new Date(b.at).getTime();
+    if (!Number.isFinite(ta) || !Number.isFinite(tb))
+        return Math.round(Math.abs(tb - ta));
+    return Math.round(tb - ta);
+}
+export function writeEvidenceFile(filePath, evidence, gatewayLogPath) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    const doc = {
+        generatedAt: new Date().toISOString(),
+        gatewayLogPath,
+        doubleCharges: evidence.length,
+        evidence,
+    };
+    fs.writeFileSync(filePath, JSON.stringify(doc, null, 2));
+}
+//# sourceMappingURL=evidence.js.map

package/dist/analyzers/ledger/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/analyzers/ledger/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAqB7B,MAAM,cAAc,GAAmC;IACrD,mBAAmB,EAAE,gBAAgB;IACrC,0BAA0B,EAAE,0BAA0B;IACtD,eAAe,EAAE,gCAAgC;CAClD,CAAC;AAEF,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAoB;IAClD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,IAAI,EACF,4EAA4E;gBAC5E,gFAAgF;SACnF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,CAAC,mCAAmC;QACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,GAAG;YAClB,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC;YAC9C,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5E,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC;QACnD,MAAM,QAAQ,GAAmB,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,mBAAmB,CAAC;QAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEtE,MAAM,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,sBAAsB,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,OAAO,GACX,SAAS,OAAO,YAAY,KAAK,CAAC,MAAM,cAAc,aAAa,EAAE;YACrE,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC;QAEjC,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO;YACP,cAAc,EAAE,OAAO;YACvB,QAAQ;YACR,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB;YACzD,YAAY,EAAE,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC9F,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,KAAK;YAClB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;IACtC,MAAM,OAAO,GACX,aAAa,GAAG,CAAC;QACf,CAAC,CAAC,GAAG,aAAa,yDAAyD;QAC3E,CAAC,CAAC,SAAS,CAAC;IAChB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAqB,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CACf,OAAqB,EACrB,GAAW,EACX,KAAyB;IAEzB,6EAA6E;IAC7E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,OAAO;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACb,IAAI,KAA+C,CAAC;IACpD,IAAI,GAA6C,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,KAAK;oBAAE,KAAK,GAAG,GAAG,CAAC;YAC1B,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,GAAG;oBAAE,GAAG,GAAG,GAAG,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,IAAI,GAAG,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,CAAmB,EAAE,CAAmB;IACzD,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACpC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,QAA0B,EAC1B,cAAsB;IAEtB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG;QACV,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,cAAc;QACd,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,QAAQ;KACT,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/analyzers/ledger/harness.d.ts

@@ -0,0 +1,4 @@
+import type { HarnessResult } from "./types.js";
+export declare function startHarness(repo: string, gatewayHosts: string[]): Promise<HarnessResult>;
+export declare function newEvidencePath(repo: string, ts: string): string;
+export declare function readAbortReason(controlPath: string): string | null;

package/dist/analyzers/ledger/harness.js

@@ -0,0 +1,270 @@
+import { execa } from "execa";
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import net from "node:net";
+import { detectLanguage } from "../util.js";
+import { startRecordingProxy } from "../../sandbox/proxy.js";
+import { isNodeCommand, resolveNativeStart, resolveNodeStart, } from "../../sandbox/startCmd.js";
+const STARTUP_TIMEOUT_MS = 25_000;
+/** Absolute path of the nock sandbox preload that ships with the package. */
+function preloadPath() {
+    return fileURLToPath(new URL("../../../templates/ledger/preload.cjs", import.meta.url));
+}
+function freePort() {
+    return new Promise((resolve, reject) => {
+        const s = net.createServer();
+        s.unref();
+        s.on("error", reject);
+        s.listen(0, () => {
+            const p = s.address().port;
+            s.close(() => resolve(p));
+        });
+    });
+}
+async function waitForServer(baseUrl, exited, controlPath, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    const armed = async () => {
+        if (!fs.existsSync(controlPath))
+            return false;
+        try {
+            return fs
+                .readFileSync(controlPath, "utf8")
+                .split(/\r?\n/)
+                .some((l) => l.includes('"event":"armed"'));
+        }
+        catch {
+            return false;
+        }
+    };
+    while (Date.now() < deadline) {
+        const aborted = controlAborted(controlPath);
+        if (aborted)
+            return { up: false, aborted: true };
+        if (exited()) {
+            return { up: false, aborted: controlAborted(controlPath) };
+        }
+        if ((await armed()) && baseUrl) {
+            try {
+                const res = await fetch(`${baseUrl}/__pitstop_ledger_probe__`);
+                if (res)
+                    return { up: true, aborted: false };
+            }
+            catch {
+                /* not up yet */
+            }
+        }
+        await new Promise((r) => setTimeout(r, 150));
+    }
+    return { up: false, aborted: controlAborted(controlPath) };
+}
+function controlAborted(controlPath) {
+    if (!fs.existsSync(controlPath))
+        return false;
+    try {
+        return fs
+            .readFileSync(controlPath, "utf8")
+            .split(/\r?\n/)
+            .some((l) => l.includes('"event":"abort"'));
+    }
+    catch {
+        return false;
+    }
+}
+export async function startHarness(repo, gatewayHosts) {
+    const lang = detectLanguage(repo);
+    const nodeMode = lang === "js";
+    // Java/Dart clients do not honor HTTP_PROXY by default — a proxy sandbox
+    // there cannot claim to intercept gateway traffic, so refuse honestly.
+    if (lang === "unknown") {
+        return {
+            harness: null,
+            aborted: true,
+            abortReason: "could not identify the repo language — refusing to run ledger mode",
+        };
+    }
+    if (!nodeMode && (lang === "java" || lang === "dart")) {
+        return {
+            harness: null,
+            aborted: true,
+            abortReason: `--ledger cannot guarantee interception for ${lang} apps: ${lang} HTTP clients do not honor ` +
+                "HTTP_PROXY by default, and the nock preload cannot load into a non-Node process. " +
+                "Run ledger mode on a Node/JS, Go, Python, Rust, or .NET app.",
+        };
+    }
+    const workDir = path.join(repo, ".pitstop", "ledger");
+    fs.mkdirSync(workDir, { recursive: true });
+    const ts = new Date().toISOString().replace(/[:.]/g, "-");
+    const runDir = path.join(workDir, `run-${ts}`);
+    fs.mkdirSync(runDir, { recursive: true });
+    const gatewayLogPath = path.join(runDir, "gateway.log.jsonl");
+    const controlPath = path.join(runDir, "control.jsonl");
+    const appOut = path.join(runDir, "app.out.log");
+    const port = await freePort();
+    const baseUrl = `http://127.0.0.1:${port}`;
+    let start = null;
+    try {
+        if (nodeMode) {
+            start = resolveNodeStart(repo);
+            if (!isNodeCommand(start.cmd)) {
+                return {
+                    harness: null,
+                    aborted: true,
+                    abortReason: `start script runs "${start.cmd}", which is not a Node-based runtime — ` +
+                        "outbound HTTP from it cannot be guaranteed to be intercepted; refusing to run ledger mode",
+                };
+            }
+        }
+        else {
+            start = resolveNativeStart(repo, lang, port);
+        }
+    }
+    catch (e) {
+        return {
+            harness: null,
+            aborted: false,
+            abortReason: e.message,
+        };
+    }
+    if (!start) {
+        return {
+            harness: null,
+            aborted: false,
+            abortReason: `could not determine a start command for a ${lang} repo — set PITSTOP_START ` +
+                `(e.g. "PITSTOP_START=uvicorn app.main:app") and re-run`,
+        };
+    }
+    // Non-Node sandbox: HTTP(S)_PROXY recording proxy that mocks the gateway
+    // hosts and writes receipts to the same gateway.log.jsonl contract.
+    let proxy = null;
+    if (!nodeMode) {
+        try {
+            proxy = await startRecordingProxy({
+                logPath: path.join(runDir, "outbound.jsonl"),
+                controlPath,
+                gatewayLogPath,
+                gatewayHosts,
+                canarySuffix: "pitstop.invalid",
+            });
+        }
+        catch (e) {
+            return {
+                harness: null,
+                aborted: true,
+                abortReason: `could not start the recording proxy: ${e.message}`,
+            };
+        }
+    }
+    else if (!fs.existsSync(preloadPath())) {
+        return {
+            harness: null,
+            aborted: true,
+            abortReason: `ledger preload missing at ${preloadPath()}; cannot guarantee interception`,
+        };
+    }
+    const baseEnv = {
+        ...process.env,
+        PORT: String(port),
+        PITSTOP_LEDGER_CONTROL: controlPath,
+        PITSTOP_LEDGER_GATEWAY_LOG: gatewayLogPath,
+        PITSTOP_LEDGER_GATEWAY_HOSTS: gatewayHosts.join(","),
+        // Fake credentials — requests are intercepted before they reach a real gateway.
+        RAZORPAY_KEY_ID: process.env.RAZORPAY_KEY_ID || "rzp_test_pitstop000000",
+        RAZORPAY_KEY_SECRET: process.env.RAZORPAY_KEY_SECRET || "pitstop_fake_secret",
+        STRIPE_SECRET_KEY: process.env.STRIPE_SECRET_KEY || "sk_test_pitstop_fake",
+        NODE_ENV: process.env.NODE_ENV || "test",
+    };
+    const env = nodeMode
+        ? {
+            ...baseEnv,
+            NODE_OPTIONS: [process.env.NODE_OPTIONS, `--require=${preloadPath()}`]
+                .filter(Boolean)
+                .join(" "),
+        }
+        : {
+            ...baseEnv,
+            HTTP_PROXY: `http://127.0.0.1:${proxy.port}`,
+            HTTPS_PROXY: `http://127.0.0.1:${proxy.port}`,
+            http_proxy: `http://127.0.0.1:${proxy.port}`,
+            https_proxy: `http://127.0.0.1:${proxy.port}`,
+            NO_PROXY: "localhost,127.0.0.1,::1",
+            no_proxy: "localhost,127.0.0.1,::1",
+        };
+    const child = execa(start.cmd, start.args, {
+        cwd: repo,
+        env,
+        stdio: ["ignore", "pipe", "pipe"],
+        windowsHide: true,
+        reject: false,
+        maxBuffer: 50 * 1024 * 1024,
+    });
+    // execa's subprocess is a promise (never rejects with `reject: false`);
+    // track completion so the poll loop can detect an early exit.
+    let exited = false;
+    child
+        .then(() => {
+        exited = true;
+    })
+        .catch(() => {
+        exited = true;
+    });
+    const outFd = fs.openSync(appOut, "a");
+    const pump = (chunk) => fs.writeSync(outFd, typeof chunk === "string" ? chunk : chunk.toString());
+    child.stdout?.on("data", pump);
+    child.stderr?.on("data", pump);
+    const { up, aborted } = await waitForServer(baseUrl, () => exited, controlPath, STARTUP_TIMEOUT_MS);
+    if (!up) {
+        const reason = (controlAborted(controlPath) ? readAbortReason(controlPath) : null) ??
+            `app did not come up within ${STARTUP_TIMEOUT_MS / 1000}s (start: "${start.cmd} ${start.args.join(" ")}")`;
+        try {
+            child.kill();
+        }
+        catch {
+            /* ignore */
+        }
+        if (proxy)
+            proxy.close().catch(() => { });
+        return { harness: null, aborted, abortReason: reason };
+    }
+    const harness = {
+        port,
+        baseUrl,
+        gatewayLogPath,
+        controlPath,
+        close: () => new Promise((resolve) => {
+            try {
+                child.kill();
+            }
+            catch {
+                /* ignore */
+            }
+            fs.closeSync(outFd);
+            if (proxy)
+                proxy.close().catch(() => { });
+            resolve();
+        }),
+    };
+    return { harness, aborted: false };
+}
+export function newEvidencePath(repo, ts) {
+    return path.join(repo, ".pitstop", `ledger-evidence-${ts}.json`);
+}
+export function readAbortReason(controlPath) {
+    try {
+        for (const line of fs.readFileSync(controlPath, "utf8").split(/\r?\n/)) {
+            try {
+                const e = JSON.parse(line);
+                if (e.event === "abort" && e.reason)
+                    return e.reason;
+            }
+            catch {
+                /* skip */
+            }
+        }
+    }
+    catch {
+        /* ignore */
+    }
+    return null;
+}
+//# sourceMappingURL=harness.js.map

package/dist/analyzers/ledger/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../../src/analyzers/ledger/harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAuB,MAAM,wBAAwB,CAAC;AAClF,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,gBAAgB,GAEjB,MAAM,2BAA2B,CAAC;AAGnC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,6EAA6E;AAC7E,SAAS,WAAW;IAClB,OAAO,aAAa,CAClB,IAAI,GAAG,CAAC,uCAAuC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,CAAC,CAAC,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE;YACf,MAAM,CAAC,GAAI,CAAC,CAAC,OAAO,EAAsB,CAAC,IAAI,CAAC;YAChD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,OAAe,EACf,MAAqB,EACrB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,CAAC;YACH,OAAO,EAAE;iBACN,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC;iBACjC,KAAK,CAAC,OAAO,CAAC;iBACd,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACjD,IAAI,MAAM,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,2BAA2B,CAAC,CAAC;gBAC/D,IAAI,GAAG;oBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,EAAE;aACN,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC;aACjC,KAAK,CAAC,OAAO,CAAC;aACd,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,YAAsB;IAEtB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC;IAE/B,yEAAyE;IACzE,uEAAuE;IACvE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oEAAoE;SAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,WAAW,EACT,8CAA8C,IAAI,UAAU,IAAI,6BAA6B;gBAC7F,mFAAmF;gBACnF,8DAA8D;SACjE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,oBAAoB,IAAI,EAAE,CAAC;IAE3C,IAAI,KAAK,GAAwB,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,WAAW,EACT,sBAAsB,KAAK,CAAC,GAAG,yCAAyC;wBACxE,2FAA2F;iBAC9F,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;YACd,WAAW,EAAG,CAAW,CAAC,OAAO;SAClC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;YACd,WAAW,EACT,6CAA6C,IAAI,4BAA4B;gBAC7E,wDAAwD;SAC3D,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,mBAAmB,CAAC;gBAChC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;gBAC5C,WAAW;gBACX,cAAc;gBACd,YAAY;gBACZ,YAAY,EAAE,iBAAiB;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,wCAAyC,CAAW,CAAC,OAAO,EAAE;aAC5E,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,6BAA6B,WAAW,EAAE,iCAAiC;SACzF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAsB;QACjC,GAAG,OAAO,CAAC,GAAG;QACd,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;QAClB,sBAAsB,EAAE,WAAW;QACnC,0BAA0B,EAAE,cAAc;QAC1C,4BAA4B,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QACpD,gFAAgF;QAChF,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,wBAAwB;QACxE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,qBAAqB;QAC7E,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,sBAAsB;QAC1E,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM;KACzC,CAAC;IACF,MAAM,GAAG,GAAsB,QAAQ;QACrC,CAAC,CAAC;YACE,GAAG,OAAO;YACV,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,WAAW,EAAE,EAAE,CAAC;iBACnE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,GAAG,CAAC;SACb;QACH,CAAC,CAAC;YACE,GAAG,OAAO;YACV,UAAU,EAAE,oBAAoB,KAAM,CAAC,IAAI,EAAE;YAC7C,WAAW,EAAE,oBAAoB,KAAM,CAAC,IAAI,EAAE;YAC9C,UAAU,EAAE,oBAAoB,KAAM,CAAC,IAAI,EAAE;YAC7C,WAAW,EAAE,oBAAoB,KAAM,CAAC,IAAI,EAAE;YAC9C,QAAQ,EAAE,yBAAyB;YACnC,QAAQ,EAAE,yBAAyB;SACpC,CAAC;IAEN,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE;QACzC,GAAG,EAAE,IAAI;QACT,GAAG;QACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAC;IAEH,wEAAwE;IACxE,8DAA8D;IAC9D,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK;SACF,IAAI,CAAC,GAAG,EAAE;QACT,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE;QACV,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;IAEL,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAE,EAAE,CACtC,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5E,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE/B,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CACzC,OAAO,EACP,GAAG,EAAE,CAAC,MAAM,EACZ,WAAW,EACX,kBAAkB,CACnB,CAAC;IAEF,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,MAAM,GACV,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnE,8BAA8B,kBAAkB,GAAG,IAAI,cAAc,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7G,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,IAAI,KAAK;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAY;QACvB,IAAI;QACJ,OAAO;QACP,cAAc;QACd,WAAW;QACX,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5B,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,KAAK;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;KACL,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,EAAU;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM;oBAAE,OAAO,CAAC,CAAC,MAAM,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/analyzers/ledger/index.d.ts

@@ -0,0 +1,14 @@
+import type { LedgerResult } from "../types.js";
+/**
+ * ledger.ts — orchestrates `pitstop scan --ledger`.
+ *
+ * This is invasive (it boots the app and fires live traffic at it), so it is
+ * ONLY ever invoked from the CLI when the user explicitly passes `--ledger`.
+ * Every outbound HTTP call from the app is routed through a nock sandbox before
+ * it can leave the process; the request/response pairs the "gateway" receives
+ * are recorded so evidence of a double-charge is real, not simulated.
+ */
+export declare function runLedgerAnalyzer(repo: string): Promise<LedgerResult>;
+export { discover } from "./discover.js";
+export { runAttacks } from "./attacks.js";
+export { analyzeEvidence } from "./evidence.js";