praxis-sec 1.2.0 → 1.2.2

package/cli/commands/red-team.js

@@ -1,350 +1,351 @@
-/**
- * Red Team Command
- * =================
- *
- * Run all security agents against the codebase.
- * This is the main entry point for the multi-agent security audit.
- *
- * USAGE:
- *   npx praxis-sec red-team [path]           Full multi-agent audit
- *   npx praxis-sec red-team . --agents injection,auth  Run specific agents
- *   npx praxis-sec red-team . --json         JSON output
- *   npx praxis-sec red-team . --html report.html  Generate HTML report
- *   npx praxis-sec red-team . --sarif        SARIF output
- */
-
-import fs from 'fs';
-import path from 'path';
-import { renderFindingsSARIF } from '../core/output/sarif.js';
-import chalk from 'chalk';
-import ora from 'ora';
-import { buildOrchestratorAsync } from '../agents/index.js';
-import { SwarmOrchestrator } from '../agents/swarm-orchestrator.js';
-import { ReconAgent } from '../agents/recon-agent.js';
-import { ScoringEngine } from '../agents/scoring-engine.js';
-import { PolicyEngine } from '../agents/policy-engine.js';
-import { HTMLReporter } from '../agents/html-reporter.js';
-import { SBOMGenerator } from '../agents/sbom-generator.js';
-import { autoDetectProvider } from '../providers/llm-provider.js';
-import { runDepsAudit } from './deps.js';
-import * as output from '../utils/output.js';
-import { printBanner } from '../utils/output.js';
-
-export async function redTeamCommand(targetPath = '.', options = {}) {
-  const absolutePath = path.resolve(targetPath);
-
-  // Any of these formats owns stdout; decorative output must not follow it.
-  const machineOutput = !!(options.json || options.sarif || options.html || options.sbom);
-
-  if (!fs.existsSync(absolutePath)) {
-    output.error(`Path does not exist: ${absolutePath}`);
-    process.exit(1);
-  }
-
-  console.log();
-
-  let findings = [];
-  let recon = {};
-  let agentResults = [];
-
-  // ── 1a. Swarm mode (parallel execution via best available provider) ────────
-  if (options.swarm) {
-    printBanner();
-    output.header('AI Swarm Mode');
-    console.log();
-
-    const swarm = SwarmOrchestrator.create(absolutePath, {
-      provider: options.provider,
-      model: options.model,
-      verbose: options.verbose,
-      budgetCents: options.budget ?? 200,
-    });
-
-    if (!swarm) {
-      output.error('Swarm mode requires DEEPSEEK_API_KEY or MOONSHOT_API_KEY. Set one and retry.');
-      process.exit(1);
-    }
-
-    const reconSpinner = ora({ text: 'Mapping attack surface...', color: 'cyan' }).start();
-    const reconAgent = new ReconAgent();
-    const reconResult = await reconAgent.analyze({ rootPath: absolutePath });
-    recon = Array.isArray(reconResult) ? {} : reconResult;
-    const files = await reconAgent.discoverFiles(absolutePath);
-    reconSpinner.succeed(chalk.green('Attack surface mapped'));
-
-    const providerLabel = swarm.provider?.name || 'AI';
-    const swarmSpinner = ora({ text: `Deploying ${chalk.cyan('23 swarm agents')} via ${providerLabel}...`, color: 'cyan' }).start();
-    try {
-      findings = await swarm.run(absolutePath, recon, files);
-      swarmSpinner.succeed(chalk.green(`Swarm complete — ${findings.length} finding(s)`));
-    } catch (err) {
-      swarmSpinner.fail(chalk.red(`Swarm failed: ${err.message}`));
-      process.exit(1);
-    }
-
-    agentResults = [{ agent: 'KimiSwarm', category: 'swarm', findingCount: findings.length, success: true }];
-
-  } else {
-    // ── 1b. Standard local orchestration ───────────────────────────────────
-    printBanner();
-    output.header('Multi-Agent Security Audit');
-    console.log();
-
-    const orchestrator = await buildOrchestratorAsync(absolutePath, { quiet: true });
-
-    const agentFilter = options.agents
-      ? options.agents.split(',').map(a => a.trim())
-      : null;
-
-    const orchestratorOpts = {
-      verbose: options.verbose,
-      agents: agentFilter,
-    };
-    if (options.deep) orchestratorOpts.deep = true;
-    if (options.local) orchestratorOpts.local = true;
-    if (options.model) orchestratorOpts.model = options.model;
-    if (options.provider) orchestratorOpts.provider = options.provider;
-    if (options.baseUrl) orchestratorOpts.baseUrl = options.baseUrl;
-    if (options.budget) orchestratorOpts.budget = options.budget;
-
-    const results = await orchestrator.runAll(absolutePath, orchestratorOpts); // praxis-ignore — orchestrator result, not LLM output triggering actions
-    ({ recon, findings, agentResults } = results);
-  }
-
-  // ── 2. Dependency audit ─────────────────────────────────────────────────────
-  let depVulns = [];
-  if (!options.noDeps) {
-    const depSpinner = ora({ text: 'Auditing dependencies...', color: 'cyan' }).start();
-    try {
-      const depResult = await runDepsAudit(absolutePath);
-      depVulns = depResult.vulns || [];
-      depSpinner.succeed(
-        depVulns.length === 0
-          ? chalk.green('Dependencies: clean')
-          : chalk.yellow(`Dependencies: ${depVulns.length} CVE(s)`)
-      );
-    } catch {
-      depSpinner.succeed(chalk.gray('Dependencies: skipped'));
-    }
-  }
-
-  // ── 3. Apply policy ─────────────────────────────────────────────────────────
-  const policy = PolicyEngine.load(absolutePath);
-  const filteredFindings = policy.applyPolicy(findings);
-
-  // ── 4. Score ────────────────────────────────────────────────────────────────
-  const scoringEngine = new ScoringEngine();
-  const scoreResult = scoringEngine.compute(filteredFindings, depVulns);
-  scoringEngine.saveToHistory(absolutePath, scoreResult);
-
-  // ── 5. AI classification (if provider available) ────────────────────────────
-  if (options.ai !== false) {
-    const provider = autoDetectProvider(absolutePath, {
-      provider: options.provider,
-      baseUrl:  options.baseUrl,
-      model:    options.model,
-    });
-    if (provider && filteredFindings.length > 0 && filteredFindings.length <= 50) {
-      const aiSpinner = ora({ text: `Classifying ${filteredFindings.length} finding(s) with ${provider.name}...`, color: 'cyan' }).start();
-      try {
-        const classifications = await provider.classify(filteredFindings);
-        // Merge classifications back into findings
-        for (const cl of classifications) {
-          const finding = filteredFindings.find(f => `${f.file}:${f.line}` === cl.id);
-          if (finding) {
-            finding.aiClassification = cl.classification;
-            finding.aiReason = cl.reason;
-            finding.aiFix = cl.fix;
-          }
-        }
-        aiSpinner.succeed(chalk.green(`AI classification complete (${provider.name})`));
-      } catch (err) {
-        aiSpinner.fail(chalk.yellow(`AI classification failed: ${err.message}`));
-      }
-    }
-  }
-
-  // ── 6. Output ───────────────────────────────────────────────────────────────
-  if (options.json) {
-    outputJSON(scoreResult, filteredFindings, recon, agentResults);
-  } else if (options.sarif) {
-    outputSARIF(filteredFindings, absolutePath);
-  } else if (options.html) {
-    const reporter = new HTMLReporter();
-    const htmlPath = typeof options.html === 'string' ? options.html : 'praxis-report.html';
-    reporter.generateToFile(scoreResult, filteredFindings, recon, absolutePath, htmlPath, agentResults);
-    output.success(`HTML report saved to ${htmlPath}`);
-  } else {
-    printResults(scoreResult, filteredFindings, recon, agentResults, depVulns, absolutePath);
-  }
-
-  // ── 7. SBOM (if requested) ──────────────────────────────────────────────────
-  if (options.sbom) {
-    const sbomGen = new SBOMGenerator();
-    const sbomPath = typeof options.sbom === 'string' ? options.sbom : 'sbom.json';
-    sbomGen.generateToFile(absolutePath, sbomPath);
-    output.success(`SBOM saved to ${sbomPath}`);
-  }
-
-  // ── 8. Policy evaluation ────────────────────────────────────────────────────
-  const violations = policy.evaluate(scoreResult, filteredFindings, {
-    agentResults,
-    depsRun: options.deps !== false,
-    secretsRun: true,
-    depVulns,
-  });
-  if (violations.length > 0) {
-    console.log();
-    console.log(chalk.red.bold('  Policy Violations:'));
-    for (const v of violations.slice(0, 10)) {
-      console.log(chalk.red(`    ✗ ${v.message}`));
-    }
-    if (violations.length > 10) {
-      console.log(chalk.gray(`    ... and ${violations.length - 10} more`));
-    }
-  }
-
-  // ── 9. Trend ────────────────────────────────────────────────────────────────
-  // Suppressed for machine output. `scan redteam . --sarif > results.sarif` must
-  // produce a parseable file; printing a trend line after the SARIF document
-  // corrupts it, and `audit.js` already guards the same way via `machineOutput`.
-  if (!machineOutput) {
-    const trend = scoringEngine.getTrend(absolutePath, scoreResult.score);
-    if (trend) {
-      const arrow = trend.diff > 0 ? chalk.green('↑') : trend.diff < 0 ? chalk.red('↓') : chalk.gray('→');
-      console.log();
-      console.log(chalk.gray(`  Trend: ${trend.previousScore} → ${trend.currentScore} ${arrow} (${trend.diff > 0 ? '+' : ''}${trend.diff})`));
-    }
-
-    console.log();
-  }
-
-  // Exit code
-  process.exit(scoreResult.score >= 75 ? 0 : 1);
-}
-
-// =============================================================================
-// OUTPUT FORMATTERS
-// =============================================================================
-
-function printResults(scoreResult, findings, recon, agentResults, depVulns, rootPath) { // praxis-ignore
-  const GRADE_COLOR = { A: chalk.green.bold, B: chalk.cyan.bold, C: chalk.yellow.bold, D: chalk.red, F: chalk.red.bold };
-  const SEV_COLOR = { critical: chalk.red.bold, high: chalk.yellow, medium: chalk.blue, low: chalk.gray };
-
-  // ── Score ───────────────────────────────────────────────────────────────────
-  console.log();
-  const gradeColor = GRADE_COLOR[scoreResult.grade.letter] || chalk.white;
-  const scoreColor = scoreResult.score >= 75 ? chalk.green.bold : scoreResult.score >= 60 ? chalk.yellow.bold : chalk.red.bold;
-
-  console.log(
-    chalk.white.bold('  Security Score: ') +
-    scoreColor(`${scoreResult.score}/100 `) +
-    gradeColor(scoreResult.grade.letter) +
-    chalk.gray(` — ${scoreResult.grade.label}`)
-  );
-  console.log(chalk.cyan('  ' + '─'.repeat(58)));
-  console.log();
-
-  // ── Category breakdown ──────────────────────────────────────────────────────
-  for (const [key, cat] of Object.entries(scoreResult.categories)) {
-    const count = Object.values(cat.counts).reduce((a, b) => a + b, 0);
-    const icon = count === 0 ? chalk.green('✔') : chalk.red('✘');
-    const status = count === 0 ? chalk.green('clean') : chalk.red(`${count} issue(s)`);
-    const deduction = cat.deduction > 0 ? chalk.red(`-${cat.deduction} pts`) : chalk.gray('+0');
-    console.log(`  ${icon}  ${chalk.white.bold(cat.label.padEnd(22))} ${status.padEnd(25)} ${deduction}`);
-  }
-
-  // Dependencies row
-  const depCount = depVulns.length;
-  const depIcon = depCount === 0 ? chalk.green('✔') : chalk.red('✘');
-  const depDeduction = scoreResult.categories.deps?.deduction || 0;
-  console.log(`  ${depIcon}  ${chalk.white.bold('Dependencies'.padEnd(22))} ${depCount === 0 ? chalk.green('clean') : chalk.red(`${depCount} CVE(s)`)}`);
-
-  // ── Top findings ────────────────────────────────────────────────────────────
-  if (findings.length > 0) {
-    console.log();
-    console.log(chalk.yellow.bold(`  Top Findings (${Math.min(findings.length, 20)} of ${findings.length})`));
-    console.log(chalk.yellow('  ' + '─'.repeat(58)));
-
-    for (const f of findings.slice(0, 20)) {
-      const relFile = path.relative(rootPath, f.file).replace(/\\/g, '/');
-      const sevColor = SEV_COLOR[f.severity] || chalk.white;
-      const aiTag = f.aiClassification === 'FALSE_POSITIVE'
-        ? chalk.gray(' [FP]')
-        : f.aiClassification === 'REAL' ? chalk.red(' [REAL]') : '';
-
-      console.log(`  ${sevColor(`[${f.severity.toUpperCase()}]`.padEnd(12))} ${chalk.white(`${relFile}:${f.line}`)}${aiTag}`);
-      console.log(`  ${chalk.gray('           ')} ${f.title || f.rule}`);
-      if (f.aiFix || f.fix) {
-        console.log(`  ${chalk.gray('     Fix:')} ${chalk.green((f.aiFix || f.fix).slice(0, 80))}`);
-      }
-    }
-  }
-
-  // ── Attack surface summary ──────────────────────────────────────────────────
-  if (recon) {
-    console.log();
-    console.log(chalk.cyan('  Attack Surface:'));
-    if (recon.frameworks?.length) console.log(chalk.gray(`    Frameworks:  ${recon.frameworks.join(', ')}`));
-    if (recon.databases?.length) console.log(chalk.gray(`    Databases:   ${recon.databases.join(', ')}`));
-    if (recon.authPatterns?.length) console.log(chalk.gray(`    Auth:        ${recon.authPatterns.join(', ')}`));
-    if (recon.apiRoutes?.length) console.log(chalk.gray(`    API Routes:  ${recon.apiRoutes.length} discovered`));
-  }
-
-  // ── Next steps ──────────────────────────────────────────────────────────────
-  if (findings.length > 0) {
-    console.log();
-    console.log(chalk.yellow.bold('  Next steps:'));
-    console.log(chalk.gray('    1. Review and fix findings above'));
-    console.log(chalk.gray('    2. Run again: ') + chalk.cyan('npx praxis-sec red-team .'));
-    console.log(chalk.gray('    3. Generate report: ') + chalk.cyan('npx praxis-sec red-team . --html report.html'));
-    console.log(chalk.gray('    4. Set policy: ') + chalk.cyan('npx praxis-sec policy init'));
-  } else {
-    console.log();
-    output.success('All agents report clean — safe to ship!');
-  }
-
-  console.log(chalk.cyan('  ' + '═'.repeat(58)));
-}
-
-function outputJSON(scoreResult, findings, recon, agentResults) {
-  console.log(JSON.stringify({
-    score: scoreResult.score,
-    grade: scoreResult.grade.letter,
-    gradeLabel: scoreResult.grade.label,
-    totalFindings: findings.length,
-    categories: Object.fromEntries(
-      Object.entries(scoreResult.categories).map(([k, v]) => [k, {
-        label: v.label,
-        findingCount: Object.values(v.counts).reduce((a, b) => a + b, 0),
-        deduction: v.deduction,
-        counts: v.counts,
-      }])
-    ),
-    findings: findings.map(f => ({
-      file: f.file,
-      line: f.line,
-      severity: f.severity,
-      category: f.category,
-      rule: f.rule,
-      title: f.title,
-      description: f.description,
-      fix: f.fix,
-      aiClassification: f.aiClassification,
-      aiFix: f.aiFix,
-    })),
-    recon,
-    agents: agentResults,
-  }, null, 2));
-}
-
-/**
- * SARIF for GitHub Code Scanning.
- *
- * Delegates to the shared serializer in `cli/core/output/sarif.js` (P-IMP-062); this was
- * a private copy hardcoding a driver version of `4.0.0` and carrying no
- * `security-severity`.
- */
-function outputSARIF(findings, rootPath) {
-  console.log(renderFindingsSARIF(findings, { rootPath }));
-}
+/**
+ * Red Team Command
+ * =================
+ *
+ * Run all security agents against the codebase.
+ * This is the main entry point for the multi-agent security audit.
+ *
+ * USAGE:
+ *   npx praxis-sec red-team [path]           Full multi-agent audit
+ *   npx praxis-sec red-team . --agents injection,auth  Run specific agents
+ *   npx praxis-sec red-team . --json         JSON output
+ *   npx praxis-sec red-team . --html report.html  Generate HTML report
+ *   npx praxis-sec red-team . --sarif        SARIF output
+ */
+
+import fs from 'fs';
+import path from 'path';
+import { renderFindingsSARIF } from '../core/output/sarif.js';
+import chalk from 'chalk';
+import ora from 'ora';
+import { displayPath } from '../core/paths.js';
+import { buildOrchestratorAsync } from '../agents/index.js';
+import { SwarmOrchestrator } from '../agents/swarm-orchestrator.js';
+import { ReconAgent } from '../agents/recon-agent.js';
+import { ScoringEngine } from '../agents/scoring-engine.js';
+import { PolicyEngine } from '../agents/policy-engine.js';
+import { HTMLReporter } from '../agents/html-reporter.js';
+import { SBOMGenerator } from '../agents/sbom-generator.js';
+import { autoDetectProvider } from '../providers/llm-provider.js';
+import { runDepsAudit } from './deps.js';
+import * as output from '../utils/output.js';
+import { printBanner } from '../utils/output.js';
+
+export async function redTeamCommand(targetPath = '.', options = {}) {
+  const absolutePath = path.resolve(targetPath);
+
+  // Any of these formats owns stdout; decorative output must not follow it.
+  const machineOutput = !!(options.json || options.sarif || options.html || options.sbom);
+
+  if (!fs.existsSync(absolutePath)) {
+    output.error(`Path does not exist: ${absolutePath}`);
+    process.exit(1);
+  }
+
+  console.log();
+
+  let findings = [];
+  let recon = {};
+  let agentResults = [];
+
+  // ── 1a. Swarm mode (parallel execution via best available provider) ────────
+  if (options.swarm) {
+    printBanner();
+    output.header('AI Swarm Mode');
+    console.log();
+
+    const swarm = SwarmOrchestrator.create(absolutePath, {
+      provider: options.provider,
+      model: options.model,
+      verbose: options.verbose,
+      budgetCents: options.budget ?? 200,
+    });
+
+    if (!swarm) {
+      output.error('Swarm mode requires DEEPSEEK_API_KEY or MOONSHOT_API_KEY. Set one and retry.');
+      process.exit(1);
+    }
+
+    const reconSpinner = ora({ text: 'Mapping attack surface...', color: 'cyan' }).start();
+    const reconAgent = new ReconAgent();
+    const reconResult = await reconAgent.analyze({ rootPath: absolutePath });
+    recon = Array.isArray(reconResult) ? {} : reconResult;
+    const files = await reconAgent.discoverFiles(absolutePath);
+    reconSpinner.succeed(chalk.green('Attack surface mapped'));
+
+    const providerLabel = swarm.provider?.name || 'AI';
+    const swarmSpinner = ora({ text: `Deploying ${chalk.cyan('23 swarm agents')} via ${providerLabel}...`, color: 'cyan' }).start();
+    try {
+      findings = await swarm.run(absolutePath, recon, files);
+      swarmSpinner.succeed(chalk.green(`Swarm complete — ${findings.length} finding(s)`));
+    } catch (err) {
+      swarmSpinner.fail(chalk.red(`Swarm failed: ${err.message}`));
+      process.exit(1);
+    }
+
+    agentResults = [{ agent: 'KimiSwarm', category: 'swarm', findingCount: findings.length, success: true }];
+
+  } else {
+    // ── 1b. Standard local orchestration ───────────────────────────────────
+    printBanner();
+    output.header('Multi-Agent Security Audit');
+    console.log();
+
+    const orchestrator = await buildOrchestratorAsync(absolutePath, { quiet: true });
+
+    const agentFilter = options.agents
+      ? options.agents.split(',').map(a => a.trim())
+      : null;
+
+    const orchestratorOpts = {
+      verbose: options.verbose,
+      agents: agentFilter,
+    };
+    if (options.deep) orchestratorOpts.deep = true;
+    if (options.local) orchestratorOpts.local = true;
+    if (options.model) orchestratorOpts.model = options.model;
+    if (options.provider) orchestratorOpts.provider = options.provider;
+    if (options.baseUrl) orchestratorOpts.baseUrl = options.baseUrl;
+    if (options.budget) orchestratorOpts.budget = options.budget;
+
+    const results = await orchestrator.runAll(absolutePath, orchestratorOpts); // praxis-ignore — orchestrator result, not LLM output triggering actions
+    ({ recon, findings, agentResults } = results);
+  }
+
+  // ── 2. Dependency audit ─────────────────────────────────────────────────────
+  let depVulns = [];
+  if (!options.noDeps) {
+    const depSpinner = ora({ text: 'Auditing dependencies...', color: 'cyan' }).start();
+    try {
+      const depResult = await runDepsAudit(absolutePath);
+      depVulns = depResult.vulns || [];
+      depSpinner.succeed(
+        depVulns.length === 0
+          ? chalk.green('Dependencies: clean')
+          : chalk.yellow(`Dependencies: ${depVulns.length} CVE(s)`)
+      );
+    } catch {
+      depSpinner.succeed(chalk.gray('Dependencies: skipped'));
+    }
+  }
+
+  // ── 3. Apply policy ─────────────────────────────────────────────────────────
+  const policy = PolicyEngine.load(absolutePath);
+  const filteredFindings = policy.applyPolicy(findings);
+
+  // ── 4. Score ────────────────────────────────────────────────────────────────
+  const scoringEngine = new ScoringEngine();
+  const scoreResult = scoringEngine.compute(filteredFindings, depVulns);
+  scoringEngine.saveToHistory(absolutePath, scoreResult);
+
+  // ── 5. AI classification (if provider available) ────────────────────────────
+  if (options.ai !== false) {
+    const provider = autoDetectProvider(absolutePath, {
+      provider: options.provider,
+      baseUrl:  options.baseUrl,
+      model:    options.model,
+    });
+    if (provider && filteredFindings.length > 0 && filteredFindings.length <= 50) {
+      const aiSpinner = ora({ text: `Classifying ${filteredFindings.length} finding(s) with ${provider.name}...`, color: 'cyan' }).start();
+      try {
+        const classifications = await provider.classify(filteredFindings);
+        // Merge classifications back into findings
+        for (const cl of classifications) {
+          const finding = filteredFindings.find(f => `${f.file}:${f.line}` === cl.id);
+          if (finding) {
+            finding.aiClassification = cl.classification;
+            finding.aiReason = cl.reason;
+            finding.aiFix = cl.fix;
+          }
+        }
+        aiSpinner.succeed(chalk.green(`AI classification complete (${provider.name})`));
+      } catch (err) {
+        aiSpinner.fail(chalk.yellow(`AI classification failed: ${err.message}`));
+      }
+    }
+  }
+
+  // ── 6. Output ───────────────────────────────────────────────────────────────
+  if (options.json) {
+    outputJSON(scoreResult, filteredFindings, recon, agentResults);
+  } else if (options.sarif) {
+    outputSARIF(filteredFindings, absolutePath);
+  } else if (options.html) {
+    const reporter = new HTMLReporter();
+    const htmlPath = typeof options.html === 'string' ? options.html : 'praxis-report.html';
+    reporter.generateToFile(scoreResult, filteredFindings, recon, absolutePath, htmlPath, agentResults);
+    output.success(`HTML report saved to ${htmlPath}`);
+  } else {
+    printResults(scoreResult, filteredFindings, recon, agentResults, depVulns, absolutePath);
+  }
+
+  // ── 7. SBOM (if requested) ──────────────────────────────────────────────────
+  if (options.sbom) {
+    const sbomGen = new SBOMGenerator();
+    const sbomPath = typeof options.sbom === 'string' ? options.sbom : 'sbom.json';
+    sbomGen.generateToFile(absolutePath, sbomPath);
+    output.success(`SBOM saved to ${sbomPath}`);
+  }
+
+  // ── 8. Policy evaluation ────────────────────────────────────────────────────
+  const violations = policy.evaluate(scoreResult, filteredFindings, {
+    agentResults,
+    depsRun: options.deps !== false,
+    secretsRun: true,
+    depVulns,
+  });
+  if (violations.length > 0) {
+    console.log();
+    console.log(chalk.red.bold('  Policy Violations:'));
+    for (const v of violations.slice(0, 10)) {
+      console.log(chalk.red(`    ✗ ${v.message}`));
+    }
+    if (violations.length > 10) {
+      console.log(chalk.gray(`    ... and ${violations.length - 10} more`));
+    }
+  }
+
+  // ── 9. Trend ────────────────────────────────────────────────────────────────
+  // Suppressed for machine output. `scan redteam . --sarif > results.sarif` must
+  // produce a parseable file; printing a trend line after the SARIF document
+  // corrupts it, and `audit.js` already guards the same way via `machineOutput`.
+  if (!machineOutput) {
+    const trend = scoringEngine.getTrend(absolutePath, scoreResult.score);
+    if (trend) {
+      const arrow = trend.diff > 0 ? chalk.green('↑') : trend.diff < 0 ? chalk.red('↓') : chalk.gray('→');
+      console.log();
+      console.log(chalk.gray(`  Trend: ${trend.previousScore} → ${trend.currentScore} ${arrow} (${trend.diff > 0 ? '+' : ''}${trend.diff})`));
+    }
+
+    console.log();
+  }
+
+  // Exit code
+  process.exit(scoreResult.score >= 75 ? 0 : 1);
+}
+
+// =============================================================================
+// OUTPUT FORMATTERS
+// =============================================================================
+
+function printResults(scoreResult, findings, recon, agentResults, depVulns, rootPath) { // praxis-ignore
+  const GRADE_COLOR = { A: chalk.green.bold, B: chalk.cyan.bold, C: chalk.yellow.bold, D: chalk.red, F: chalk.red.bold };
+  const SEV_COLOR = { critical: chalk.red.bold, high: chalk.yellow, medium: chalk.blue, low: chalk.gray };
+
+  // ── Score ───────────────────────────────────────────────────────────────────
+  console.log();
+  const gradeColor = GRADE_COLOR[scoreResult.grade.letter] || chalk.white;
+  const scoreColor = scoreResult.score >= 75 ? chalk.green.bold : scoreResult.score >= 60 ? chalk.yellow.bold : chalk.red.bold;
+
+  console.log(
+    chalk.white.bold('  Security Score: ') +
+    scoreColor(`${scoreResult.score}/100 `) +
+    gradeColor(scoreResult.grade.letter) +
+    chalk.gray(` — ${scoreResult.grade.label}`)
+  );
+  console.log(chalk.cyan('  ' + '─'.repeat(58)));
+  console.log();
+
+  // ── Category breakdown ──────────────────────────────────────────────────────
+  for (const [key, cat] of Object.entries(scoreResult.categories)) {
+    const count = Object.values(cat.counts).reduce((a, b) => a + b, 0);
+    const icon = count === 0 ? chalk.green('✔') : chalk.red('✘');
+    const status = count === 0 ? chalk.green('clean') : chalk.red(`${count} issue(s)`);
+    const deduction = cat.deduction > 0 ? chalk.red(`-${cat.deduction} pts`) : chalk.gray('+0');
+    console.log(`  ${icon}  ${chalk.white.bold(cat.label.padEnd(22))} ${status.padEnd(25)} ${deduction}`);
+  }
+
+  // Dependencies row
+  const depCount = depVulns.length;
+  const depIcon = depCount === 0 ? chalk.green('✔') : chalk.red('✘');
+  const depDeduction = scoreResult.categories.deps?.deduction || 0;
+  console.log(`  ${depIcon}  ${chalk.white.bold('Dependencies'.padEnd(22))} ${depCount === 0 ? chalk.green('clean') : chalk.red(`${depCount} CVE(s)`)}`);
+
+  // ── Top findings ────────────────────────────────────────────────────────────
+  if (findings.length > 0) {
+    console.log();
+    console.log(chalk.yellow.bold(`  Top Findings (${Math.min(findings.length, 20)} of ${findings.length})`));
+    console.log(chalk.yellow('  ' + '─'.repeat(58)));
+
+    for (const f of findings.slice(0, 20)) {
+      const relFile = displayPath(f.file, rootPath);
+      const sevColor = SEV_COLOR[f.severity] || chalk.white;
+      const aiTag = f.aiClassification === 'FALSE_POSITIVE'
+        ? chalk.gray(' [FP]')
+        : f.aiClassification === 'REAL' ? chalk.red(' [REAL]') : '';
+
+      console.log(`  ${sevColor(`[${f.severity.toUpperCase()}]`.padEnd(12))} ${chalk.white(`${relFile}:${f.line}`)}${aiTag}`);
+      console.log(`  ${chalk.gray('           ')} ${f.title || f.rule}`);
+      if (f.aiFix || f.fix) {
+        console.log(`  ${chalk.gray('     Fix:')} ${chalk.green((f.aiFix || f.fix).slice(0, 80))}`);
+      }
+    }
+  }
+
+  // ── Attack surface summary ──────────────────────────────────────────────────
+  if (recon) {
+    console.log();
+    console.log(chalk.cyan('  Attack Surface:'));
+    if (recon.frameworks?.length) console.log(chalk.gray(`    Frameworks:  ${recon.frameworks.join(', ')}`));
+    if (recon.databases?.length) console.log(chalk.gray(`    Databases:   ${recon.databases.join(', ')}`));
+    if (recon.authPatterns?.length) console.log(chalk.gray(`    Auth:        ${recon.authPatterns.join(', ')}`));
+    if (recon.apiRoutes?.length) console.log(chalk.gray(`    API Routes:  ${recon.apiRoutes.length} discovered`));
+  }
+
+  // ── Next steps ──────────────────────────────────────────────────────────────
+  if (findings.length > 0) {
+    console.log();
+    console.log(chalk.yellow.bold('  Next steps:'));
+    console.log(chalk.gray('    1. Review and fix findings above'));
+    console.log(chalk.gray('    2. Run again: ') + chalk.cyan('npx praxis-sec red-team .'));
+    console.log(chalk.gray('    3. Generate report: ') + chalk.cyan('npx praxis-sec red-team . --html report.html'));
+    console.log(chalk.gray('    4. Set policy: ') + chalk.cyan('npx praxis-sec policy init'));
+  } else {
+    console.log();
+    output.success('All agents report clean — safe to ship!');
+  }
+
+  console.log(chalk.cyan('  ' + '═'.repeat(58)));
+}
+
+function outputJSON(scoreResult, findings, recon, agentResults) {
+  console.log(JSON.stringify({
+    score: scoreResult.score,
+    grade: scoreResult.grade.letter,
+    gradeLabel: scoreResult.grade.label,
+    totalFindings: findings.length,
+    categories: Object.fromEntries(
+      Object.entries(scoreResult.categories).map(([k, v]) => [k, {
+        label: v.label,
+        findingCount: Object.values(v.counts).reduce((a, b) => a + b, 0),
+        deduction: v.deduction,
+        counts: v.counts,
+      }])
+    ),
+    findings: findings.map(f => ({
+      file: f.file,
+      line: f.line,
+      severity: f.severity,
+      category: f.category,
+      rule: f.rule,
+      title: f.title,
+      description: f.description,
+      fix: f.fix,
+      aiClassification: f.aiClassification,
+      aiFix: f.aiFix,
+    })),
+    recon,
+    agents: agentResults,
+  }, null, 2));
+}
+
+/**
+ * SARIF for GitHub Code Scanning.
+ *
+ * Delegates to the shared serializer in `cli/core/output/sarif.js`; this was
+ * a private copy hardcoding a driver version of `4.0.0` and carrying no
+ * `security-severity`.
+ */
+function outputSARIF(findings, rootPath) {
+  console.log(renderFindingsSARIF(findings, { rootPath }));
+}