praxis-sec 1.2.1 → 1.2.2

package/cli/commands/audit.js

@@ -17,6 +17,7 @@ import path from 'path';
 import { renderFindingsSARIF } from '../core/output/sarif.js';
 import chalk from 'chalk';
 import ora from 'ora';
+import { displayPath } from '../core/paths.js';
 import fg from '../core/glob.js';
 import { buildOrchestrator, buildOrchestratorAsync } from '../agents/index.js';
 import { LegalRiskAgent } from '../agents/legal-risk-agent.js';
@@ -158,7 +159,9 @@ export async function auditCommand(targetPath = '.', options = {}) {
       const fileResults = scanFileForSecrets(file);
       for (const f of fileResults) {
         secretFindings.push({
-          file,
+          // Normalised here so secret findings are indistinguishable from agent
+          // findings by the time anything renders them.
+          file: displayPath(file, absolutePath),
           line: f.line,
           column: f.column,
           severity: f.severity,
@@ -486,7 +489,7 @@ export async function auditCommand(targetPath = '.', options = {}) {
   } else if (options.md) {
     outputMarkdown(scoreResult, filteredFindings, depVulns, remediationPlan, absolutePath);
   } else if (options.json) {
-    outputJSON(scoreResult, filteredFindings, depVulns, recon, agentResults, remediationPlan, suppressions, options.compare ? scoringEngine.loadHistory(absolutePath) : null, filesScanned);
+    outputJSON(scoreResult, filteredFindings, depVulns, recon, agentResults, remediationPlan, suppressions, options.compare ? scoringEngine.loadHistory(absolutePath) : null, filesScanned, absolutePath);
   } else if (options.sarif) {
     outputSARIF(filteredFindings, absolutePath);
   } else {
@@ -709,7 +712,7 @@ function buildRemediationPlan(findings, depVulns, rootPath) {
     const nonEnvSecrets = [];
 
     for (const f of sevSecrets) {
-      const relFile = path.relative(rootPath, f.file).replace(/\\/g, '/');
+      const relFile = displayPath(f.file, rootPath);
       if (f.file.match(/\.env(\..*)?$/)) {
         if (!envGroups.has(relFile)) envGroups.set(relFile, []);
         envGroups.get(relFile).push(f);
@@ -741,7 +744,7 @@ function buildRemediationPlan(findings, depVulns, rootPath) {
         category: 'secrets',
         categoryLabel: 'SECRETS',
         title: f.title || f.rule,
-        file: `${path.relative(rootPath, f.file).replace(/\\/g, '/')}:${f.line}`,
+        file: `${displayPath(f.file, rootPath)}:${f.line}`,
         action: f.aiFix || f.fix || f.description,
         effort: 'low',
       });
@@ -755,7 +758,7 @@ function buildRemediationPlan(findings, depVulns, rootPath) {
         category: f.category,
         categoryLabel: (CATEGORY_LABELS[f.category] || f.category).toUpperCase(),
         title: f.title || f.rule,
-        file: `${path.relative(rootPath, f.file).replace(/\\/g, '/')}:${f.line}`,
+        file: `${displayPath(f.file, rootPath)}:${f.line}`,
         action: f.aiFix || f.fix || f.description,
         effort: EFFORT_MAP[f.category] || 'medium',
       });
@@ -880,7 +883,7 @@ function printReport(scoreResult, findings, depVulns, recon, plan, rootPath, fil
 // JSON OUTPUT
 // =============================================================================
 
-function outputJSON(scoreResult, findings, depVulns, recon, agentResults, remediationPlan, suppressions, history, filesScanned = null) {
+function outputJSON(scoreResult, findings, depVulns, recon, agentResults, remediationPlan, suppressions, history, filesScanned = null, absolutePath = process.cwd()) {
   const output = {
     score: scoreResult.score,
     grade: scoreResult.grade.letter,
@@ -896,13 +899,14 @@ function outputJSON(scoreResult, findings, depVulns, recon, agentResults, remedi
       }])
     ),
     findings: findings.map(f => {
-      const normFile = String(f.file || '')
-        .replace(/\\/g, '/')
-        .replace(/^[a-zA-Z]:\/+/, '')
-        .replace(/^.*\/Praxis\/showcase-target\//, 'showcase-target/')
-        .replace(/^.*\/Praxis\//, '');
       return {
-        file: normFile, line: f.line, severity: f.severity, category: f.category,
+        // Secret findings are built here rather than by an agent, so they never
+        // pass through the orchestrator's normalisation. Do it at the source —
+        // see cli/core/paths.js. This used to be the fourth copy of the same
+        // strippers, which is how an absolute path reached the JSON report with
+        // its drive letter removed and the username left behind.
+        file: displayPath(f.file, absolutePath),
+        line: f.line, severity: f.severity, category: f.category,
         rule: f.rule, title: f.title, description: f.description, fix: f.fix,
         cwe: f.cwe, owasp: f.owasp,
         ...(f.eaa ? { eaa: f.eaa } : {}),
@@ -1102,7 +1106,7 @@ function outputCSV(findings, depVulns, scoreResult, rootPath) {
 
   console.log('severity,category,rule,file,line,title,description,fix');
   for (const f of findings) {
-    const relFile = path.relative(rootPath, f.file).replace(/\\/g, '/');
+    const relFile = displayPath(f.file, rootPath);
     console.log([
       escape(f.severity), escape(f.category), escape(f.rule),
       escape(relFile), f.line || '', escape(f.title),
@@ -1152,7 +1156,7 @@ function outputMarkdown(scoreResult, findings, depVulns, remediationPlan, rootPa
     lines.push('| File | Rule | Description | Fix |');
     lines.push('|------|------|-------------|-----|');
     for (const f of sevFindings) {
-      const relFile = path.relative(rootPath, f.file).replace(/\\/g, '/');
+      const relFile = displayPath(f.file, rootPath);
       lines.push(`| ${relFile}:${f.line} | ${f.rule} | ${(f.description || '').slice(0, 80)} | ${(f.fix || '').slice(0, 60)} |`);
     }
     lines.push('');

package/cli/commands/baseline.js

@@ -16,6 +16,7 @@ import fs from 'fs';
 import path from 'path';
 import chalk from 'chalk';
 import ora from 'ora';
+import { displayPath } from '../core/paths.js';
 import { buildOrchestrator } from '../agents/index.js';
 import { SECRET_PATTERNS, SKIP_DIRS, SKIP_EXTENSIONS, SKIP_FILENAMES, MAX_FILE_SIZE } from '../utils/patterns.js';
 import { isHighEntropyMatch } from '../utils/entropy.js';
@@ -28,7 +29,7 @@ const BASELINE_FILE = '.praxis/baseline.json';
  * Uses rule + relative file path + first 40 chars of matched text.
  */
 function fingerprint(finding, rootPath) {
-  const relFile = path.relative(rootPath, finding.file || '').replace(/\\/g, '/');
+  const relFile = displayPath(finding.file || '', rootPath);
   const matched = (finding.matched || '').slice(0, 40);
   return `${finding.rule}:${relFile}:${matched}`;
 }

package/cli/commands/ci.js

@@ -19,6 +19,7 @@
 
 import fs from 'fs';
 import path from 'path';
+import { displayPath } from '../core/paths.js';
 import { renderFindingsSARIF } from '../core/output/sarif.js';
 import { execFileSync } from 'child_process';
 import { buildOrchestrator } from '../agents/index.js';
@@ -181,7 +182,7 @@ export async function ciCommand(targetPath = '.', options = {}) {
       }])),
       ...(options.includeFindings ? {
         findings: allFindings.map(f => ({
-          file: path.relative(absolutePath, f.file).replace(/\\/g, '/'),
+          file: displayPath(f.file, absolutePath),
           line: f.line, rule: f.rule, severity: f.severity,
         })),
       } : {}),
@@ -203,7 +204,7 @@ export async function ciCommand(targetPath = '.', options = {}) {
     if (critical > 0) {
       console.log(`[praxis] Critical findings:`);
       for (const f of allFindings.filter(f => f.severity === 'critical').slice(0, 5)) {
-        const rel = path.relative(absolutePath, f.file).replace(/\\/g, '/');
+        const rel = displayPath(f.file, absolutePath);
         console.log(`  - ${f.rule} at ${rel}:${f.line}`);
       }
     }
@@ -274,7 +275,7 @@ function emitGitHubAnnotations(findings, rootPath) {
   if (process.env.GITHUB_ACTIONS !== 'true') return;
   for (const f of findings) {
     if (!f.file || !f.line) continue;
-    const rel = path.relative(rootPath, f.file).replace(/\\/g, '/');
+    const rel = displayPath(f.file, rootPath);
     const level = ['critical', 'high'].includes(f.severity) ? 'error' : 'warning';
     const col = f.column || 1;
     const escapeData = value => String(value).replace(/%/g, '%25').replace(/\r/g, '%0D').replace(/\n/g, '%0A');
@@ -350,7 +351,7 @@ function postPRComment(scoreResult, findings, depVulns, rootPath, duration) {
     body += `### Critical & High Findings\n\n`;
     body += `| Severity | File | Issue |\n|----------|------|-------|\n`;
     for (const f of findings.filter(f => f.severity === 'critical' || f.severity === 'high').slice(0, 20)) {
-      const rel = path.relative(rootPath, f.file).replace(/\\/g, '/');
+      const rel = displayPath(f.file, rootPath);
       body += `| ${f.severity.toUpperCase()} | \`${rel}:${f.line}\` | ${(f.title || f.rule).slice(0, 60)} |\n`;
     }
     body += '\n';

package/cli/commands/diff.js

@@ -16,6 +16,7 @@ import { execFileSync } from 'child_process';
 import path from 'path';
 import chalk from 'chalk';
 import ora from 'ora';
+import { displayPath } from '../core/paths.js';
 import { SECRET_PATTERNS, SECURITY_PATTERNS, SKIP_EXTENSIONS, SKIP_FILENAMES } from '../utils/patterns.js';
 import { buildOrchestrator } from '../agents/index.js';
 import { ScoringEngine } from '../agents/scoring-engine.js';
@@ -165,7 +166,7 @@ export async function diffCommand(ref, options) {
       const sevColor = f.severity === 'critical' ? chalk.red :
                         f.severity === 'high' ? chalk.yellow :
                         f.severity === 'medium' ? chalk.cyan : chalk.gray;
-      const relPath = path.relative(absolutePath, f.file);
+      const relPath = displayPath(f.file, absolutePath);
       console.log(`  ${sevColor(`[${f.severity.toUpperCase()}]`)} ${chalk.white(f.title)}`);
       console.log(chalk.gray(`    ${relPath}:${f.line} → ${f.fix || f.description}`));
       shown++;

package/cli/commands/legal.js

@@ -19,6 +19,7 @@ import fs from 'fs';
 import path from 'path';
 import chalk from 'chalk';
 import ora from 'ora';
+import { displayPath } from '../core/paths.js';
 import { LegalRiskAgent } from '../agents/legal-risk-agent.js';
 import * as output from '../utils/output.js';
 
@@ -136,7 +137,7 @@ export async function legalCommand(targetPath = '.', options = {}) {
       const riskLabel = RISK_LABELS[riskKey] || riskKey;
 
       console.log(`  ${sevBadge}  ${chalk.white.bold(f.title)}`);
-      console.log(`          ${riskColor(`[${riskLabel}]`)}  ${chalk.gray(path.relative(absolutePath, f.file) || f.file)}`);
+      console.log(`          ${riskColor(`[${riskLabel}]`)}  ${chalk.gray(displayPath(f.file, absolutePath))}`);
       console.log();
       console.log(`          ${chalk.gray(f.description)}`);
       console.log();

package/cli/commands/mcp.js

@@ -34,6 +34,7 @@
 
 import fs from 'fs';
 import path from 'path';
+import { displayPath } from '../core/paths.js';
 import fg from '../core/glob.js';
 import { SECRET_PATTERNS, SKIP_DIRS, SKIP_EXTENSIONS, SKIP_FILENAMES, TEST_FILE_PATTERNS, MAX_FILE_SIZE } from '../utils/patterns.js';
 import { isHighEntropyMatch } from '../utils/entropy.js';
@@ -313,7 +314,7 @@ async function scanRepo({ path: targetPath, agents: agentFilter, llm = false, ou
         severity:      f.severity,
         category:      f.category,
         rule:          f.rule,
-        file:          f.file ? path.relative(rootPath, f.file) : null,
+        file:          f.file ? displayPath(f.file, rootPath) : null,
         line:          f.line,
         description:   f.description,
         remediation:   f.remediation,

package/cli/commands/openclaw.js

@@ -15,6 +15,7 @@
 import fs from 'fs';
 import path from 'path';
 import chalk from 'chalk';
+import { displayPath } from '../core/paths.js';
 import * as output from '../utils/output.js';
 import { AgentConfigScanner } from '../agents/agent-config-scanner.js';
 import { MCPSecurityAgent } from '../agents/mcp-security-agent.js';
@@ -138,11 +139,7 @@ async function runJsonMode(absolutePath, options) {
   const findings = [...configFindings, ...mcpFindings];
   const normFindings = findings.map(f => ({
     ...f,
-    file: String(f.file || '')
-      .replace(/\\/g, '/')
-      .replace(/^[a-zA-Z]:\/+/, '')
-      .replace(/^.*\/Praxis\/showcase-target\//, 'showcase-target/')
-      .replace(/^.*\/Praxis\//, ''),
+    file: displayPath(f.file, absolutePath),
   }));
   const result = {
     findings: normFindings,
@@ -174,7 +171,7 @@ function printFindings(findings, rootPath) {
   findings.sort((a, b) => (sevOrder[a.severity] ?? 4) - (sevOrder[b.severity] ?? 4));
 
   for (const f of findings) {
-    const relFile = path.relative(rootPath, f.file).replace(/\\/g, '/');
+    const relFile = displayPath(f.file, rootPath);
     const sevLabel = f.severity === 'critical' ? chalk.red.bold('CRITICAL')
       : f.severity === 'high' ? chalk.yellow('HIGH')
       : chalk.blue('MEDIUM');

package/cli/commands/red-team.js

@@ -18,6 +18,7 @@ import path from 'path';
 import { renderFindingsSARIF } from '../core/output/sarif.js';
 import chalk from 'chalk';
 import ora from 'ora';
+import { displayPath } from '../core/paths.js';
 import { buildOrchestratorAsync } from '../agents/index.js';
 import { SwarmOrchestrator } from '../agents/swarm-orchestrator.js';
 import { ReconAgent } from '../agents/recon-agent.js';
@@ -267,7 +268,7 @@ function printResults(scoreResult, findings, recon, agentResults, depVulns, root
     console.log(chalk.yellow('  ' + '─'.repeat(58)));
 
     for (const f of findings.slice(0, 20)) {
-      const relFile = path.relative(rootPath, f.file).replace(/\\/g, '/');
+      const relFile = displayPath(f.file, rootPath);
       const sevColor = SEV_COLOR[f.severity] || chalk.white;
       const aiTag = f.aiClassification === 'FALSE_POSITIVE'
         ? chalk.gray(' [FP]')

package/cli/commands/scan-standard.js

@@ -16,6 +16,7 @@ import fs from 'fs';
 import path from 'path';
 import chalk from 'chalk';
 import ora from 'ora';
+import { displayPath } from '../core/paths.js';
 import { buildOrchestratorAsync } from '../agents/index.js';
 import { ScoringEngine } from '../agents/scoring-engine.js';
 import {
@@ -102,11 +103,7 @@ export async function scanStandardCommand(name, targetPath = '.', options = {})
     controls: standardSummary.controls,
     findings: filtered.map(f => ({
       ...f,
-      file: String(f.file || '')
-        .replace(/\\/g, '/')
-        .replace(/^[a-zA-Z]:\/+/, '')
-        .replace(/^.*\/Praxis\/showcase-target\//, 'showcase-target/')
-        .replace(/^.*\/Praxis\//, ''),
+      file: displayPath(f.file, absolutePath),
     })),
     score: scoreResult.score,
     grade: scoreResult.grade?.letter || 'A',
@@ -239,7 +236,7 @@ async function printHumanReport(standard, report) {  console.log(chalk.white.bol
     const sev = (f.severity || 'medium').toUpperCase();
     const color = SEV_COLORS[f.severity] || chalk.white;
     const tag = ids.join(', ');
-    const file = f.file ? path.relative(process.cwd(), f.file) : '';
+    const file = f.file ? displayPath(f.file, process.cwd()) : '';
     const loc = file ? `${file}:${f.line || 0}` : '';
     console.log(`  ${color(`[${sev}]`)} ${chalk.cyan(`[${tag}]`)} ${f.title || f.rule || ''}`);
     if (loc) console.log(chalk.gray(`    ${loc}`));

package/cli/commands/vibe-check.js

@@ -18,6 +18,7 @@ import fs from 'fs';
 import path from 'path';
 import chalk from 'chalk';
 import ora from 'ora';
+import { displayPath } from '../core/paths.js';
 import { buildOrchestrator } from '../agents/index.js';
 import { ScoringEngine } from '../agents/scoring-engine.js';
 import { runDepsAudit } from './deps.js';
@@ -215,7 +216,7 @@ export async function vibeCheckCommand(targetPath = '.', options = {}) {
       })
       .slice(0, 3);
     for (const f of top) {
-      const rel = path.relative(absolutePath, f.file).replace(/\\/g, '/');
+      const rel = displayPath(f.file, absolutePath);
       console.log(`    ${SEV_EMOJI[f.severity] || '⚪'} ${f.title || f.rule} ${chalk.gray(`(${rel}:${f.line})`)}`);
     }
     console.log();

package/cli/commands/watch.js

@@ -13,6 +13,7 @@
 import fs from 'fs';
 import path from 'path';
 import chalk from 'chalk';
+import { displayPath } from '../core/paths.js';
 import { execFileSync } from 'child_process';
 import { SKIP_DIRS, SKIP_EXTENSIONS, SKIP_FILENAMES, SECRET_PATTERNS, SECURITY_PATTERNS } from '../utils/patterns.js';
 import { isHighEntropyMatch, getConfidence } from '../utils/entropy.js';
@@ -358,7 +359,7 @@ async function watchStateful(absolutePath, options = {}) {
         const scoreColor = scoreResult.score >= 75 ? chalk.cyan : scoreResult.score >= 50 ? chalk.yellow : chalk.red;
         console.log(`  [${timestamp}] ${chalk.white(`${newFindings.length} new finding(s)`)}: Score ${scoreColor(`${scoreResult.score}/100`)}`);
         for (const f of newFindings.filter(f => f.severity === 'critical' || f.severity === 'high')) {
-          const relFile = path.relative(absolutePath, f.file || '');
+          const relFile = displayPath(f.file || '', absolutePath);
           const sev = f.severity === 'critical' ? chalk.red.bold('!!') : chalk.yellow(' !');
           console.log(`    ${sev} ${f.title} — ${relFile}:${f.line}`);
         }
@@ -375,7 +376,7 @@ async function watchStateful(absolutePath, options = {}) {
             provider: stats.provider,
             model: stats.model,
             findings: allFindings.map(f => ({
-              file: path.relative(absolutePath, f.file || ''),
+              file: displayPath(f.file || '', absolutePath),
               line: f.line,
               severity: f.severity,
               rule: f.rule,
@@ -498,7 +499,7 @@ async function watchDeep(absolutePath, options = {}) {
             ? { flagged: scoreResult.agenticSummary.flagged, total: scoreResult.agenticSummary.total }
             : null,
           findings: findings.map(f => ({
-            file: path.relative(absolutePath, f.file || ''),
+            file: displayPath(f.file || '', absolutePath),
             line: f.line,
             severity: f.severity,
             rule: f.rule,
@@ -519,7 +520,7 @@ async function watchDeep(absolutePath, options = {}) {
         console.log(`  [${timestamp}] ${chalk.white(`${findings.length} finding(s)`)}: ${criticals ? chalk.red.bold(`${criticals} critical`) : ''}${criticals && highs ? ', ' : ''}${highs ? chalk.yellow(`${highs} high`) : ''}. Score: ${scoreColor(`${scoreResult.score}/100 ${scoreResult.grade?.letter}`)}`);
 
         for (const f of findings.filter(f => f.severity === 'critical' || f.severity === 'high')) {
-          const relFile = path.relative(absolutePath, f.file || '');
+          const relFile = displayPath(f.file || '', absolutePath);
           const sev = f.severity === 'critical' ? chalk.red.bold('!!') : chalk.yellow(' !');
           const agentic = f.agenticRisk ? chalk.gray(` [${f.agenticRisk.id}]`) : '';
           console.log(`    ${sev} ${f.title} — ${relFile}:${f.line}${agentic}`);
@@ -671,7 +672,7 @@ async function postPRComments(findings, rootPath) {
   ).slice(0, 10); // Max 10 comments per scan
 
   for (const f of criticalOrHigh) {
-    const relFile = path.relative(rootPath, f.file).replace(/\\/g, '/');
+    const relFile = displayPath(f.file, rootPath);
     const body = [
       `**Praxis — ${f.severity.toUpperCase()} finding**`,
       '',

package/cli/core/output/json.js

@@ -1,48 +1,56 @@
-/**
- * JSON output formatter.
- *
- * Reports are emitted with `schemaVersion` so consumers can pin to a
- * version. Bump the version when the shape changes in a breaking way.
- *
- * Scanner hardening: secret-category findings never expose their raw
- * matched value — `matched` is redacted centrally so no consumer of the
- * JSON report can leak a credential.
- */
-
-const SCHEMA_VERSION = 3;
-
-function redactFinding(f) {
-  if (!f || typeof f !== 'object') return f;
-  const isSecret = f.category === 'secrets' || f.category === 'secret'
-    || /secret|api[_-]?key|token|password|credential/i.test(String(f.rule || ''));
-  const out = { ...f };
-  if (f.matched) {
-    out.matched = isSecret
-      ? `${String(f.matched).slice(0, 3)}***`
-      : String(f.matched).slice(0, 160);
-  }
-  if (out.file) {
-    out.file = String(out.file)
-      .replace(/\\/g, '/')
-      .replace(/^[a-zA-Z]:\/+/, '')
-      .replace(/^.*\/Praxis\/showcase-target\//, 'showcase-target/')
-      .replace(/^.*\/Praxis\//, '');
-  }
-  return out;
-}
-
-export default function json(report, options = {}) {
-  const { pretty = true } = options;
-  const enriched = {
-    schemaVersion: SCHEMA_VERSION,
-    ...report,
-  };
-  if (Array.isArray(enriched.findings)) {
-    enriched.findings = enriched.findings.map(redactFinding);
-  }
-  return pretty
-    ? JSON.stringify(enriched, null, 2)
-    : JSON.stringify(enriched);
-}
-
-export { redactFinding, SCHEMA_VERSION };
+/**
+ * JSON output formatter.
+ *
+ * Reports are emitted with `schemaVersion` so consumers can pin to a
+ * version. Bump the version when the shape changes in a breaking way.
+ *
+ * Scanner hardening: secret-category findings never expose their raw
+ * matched value — `matched` is redacted centrally so no consumer of the
+ * JSON report can leak a credential. Finding paths are normalised against the scan
+ * root by the orchestrator, so no consumer can receive an absolute path either.
+ */
+
+import path from 'path';
+
+const SCHEMA_VERSION = 3;
+
+function redactFinding(f) {
+  if (!f || typeof f !== 'object') return f;
+  const isSecret = f.category === 'secrets' || f.category === 'secret'
+    || /secret|api[_-]?key|token|password|credential/i.test(String(f.rule || ''));
+  const out = { ...f };
+  if (f.matched) {
+    out.matched = isSecret
+      ? `${String(f.matched).slice(0, 3)}***`
+      : String(f.matched).slice(0, 160);
+  }
+  if (out.file) {
+    // Paths arrive already normalised against the scan root by the orchestrator,
+    // so this only has to unify separators. The three strippers that used to live
+    // here were wrong for everyone but this repository:
+    //   `^[a-zA-Z]:\/+`  turned `C:\Users\alice\.cursor\mcp.json` into
+    //                   `Users/alice/.cursor/mcp.json` — leaking the username and
+    //                   naming a repo-relative file that does not exist;
+    //   the two `/Praxis/` rules were dogfooding hacks that silently truncated any
+    //                   real path merely containing a directory called `Praxis`.
+    // See cli/core/paths.js for the replacement.
+    out.file = String(out.file).split(path.sep).join('/').replace(/\\/g, '/');
+  }
+  return out;
+}
+
+export default function json(report, options = {}) {
+  const { pretty = true } = options;
+  const enriched = {
+    schemaVersion: SCHEMA_VERSION,
+    ...report,
+  };
+  if (Array.isArray(enriched.findings)) {
+    enriched.findings = enriched.findings.map(redactFinding);
+  }
+  return pretty
+    ? JSON.stringify(enriched, null, 2)
+    : JSON.stringify(enriched);
+}
+
+export { redactFinding, SCHEMA_VERSION };

package/cli/core/paths.js

@@ -0,0 +1,91 @@
+/**
+ * Honest, publishable paths for findings.
+ *
+ * A finding is not always about a file inside the scanned tree.
+ * `MCP_SHADOW_CONFIG` reports the developer's own `~/.cursor/mcp.json`, because a
+ * shadow MCP server configured outside version control is precisely the finding
+ * worth reporting. That file sits above the scan root, and neither obvious way of
+ * rendering it is acceptable:
+ *
+ *   path.relative(root, file)  ->  '../../../Users/alice/.cursor/mcp.json'
+ *                                  leaks the username and the directory depth into
+ *                                  a report that gets pasted into a CI comment.
+ *   strip the drive letter     ->  'Users/alice/.cursor/mcp.json'
+ *                                  does not exist, and falsely reads as
+ *                                  repo-relative, so the finding is unlocatable.
+ *
+ * The only honest rendering of a path above the root is `~/…`. It identifies the
+ * file, leaks neither the username nor the directory layout, and — unlike either
+ * alternative — is identical on every machine, so a self-scan's findings do not
+ * change identity when a colleague runs it.
+ *
+ * Applied once by the orchestrator, before findings reach any renderer, because
+ * the terminal table, the HTML and JSON reports, CI annotations and SARIF all read
+ * the same `finding.file`. `fix` and `remediate` build their own absolute paths and
+ * never read this field, so normalising it cannot redirect a write.
+ */
+
+import os from 'os';
+import path from 'path';
+
+const toSlash = (p) => String(p).split(path.sep).join('/').replace(/\\/g, '/');
+
+// `path.isAbsolute` is platform-specific: on POSIX it reports false for
+// `C:/work/src/a.js`, because that is a legal relative filename there. Findings
+// normally come from the host's own glob, but a path read back from a report or
+// a cache can carry the other platform's shape, and treating it as relative would
+// print a drive letter straight into the output. Same guard sarif.js uses.
+const isAbsoluteLike = (s) => path.isAbsolute(s) || /^[a-zA-Z]:[\\/]/.test(s);
+
+/**
+ * Render a finding's file for display.
+ *
+ * @param {string} file  Absolute or already-relative path.
+ * @param {string} [root] Absolute scan root, when known.
+ * @returns {string} Root-relative when inside `root`, `~/…` when inside the home
+ *   directory, otherwise the bare filename — never an absolute path.
+ */
+export function displayPath(file, root) {
+  if (file === undefined || file === null || file === '') return file;
+
+  const s = String(file);
+  // Already display-shaped. Passing a relative path back through
+  // `path.relative(root, ...)` would resolve it against the cwd, escape the root
+  // and collapse it to a bare filename — the trap that made Code Scanning alerts
+  // unlocatable.
+  if (!isAbsoluteLike(s)) return toSlash(s);
+
+  if (root) {
+    const rel = path.relative(root, s);
+    // `rel` starting with '..' means the file is outside the scan root.
+    if (rel && !rel.startsWith('..') && !path.isAbsolute(rel)) return toSlash(rel);
+  }
+
+  const home = os.homedir();
+  if (home && s !== home && s.startsWith(home + path.sep)) {
+    return '~/' + toSlash(s.slice(home.length + 1));
+  }
+
+  // Outside the root and outside home: identify the file without publishing the
+  // local directory layout.
+  return path.basename(s);
+}
+
+/**
+ * Apply {@link displayPath} to every finding that carries a path.
+ *
+ * The orchestrator calls this once, at the boundary where findings stop being
+ * internal state and become report output.
+ *
+ * @param {Array<object>} findings Mutated in place and returned.
+ * @param {string} [root] Absolute scan root.
+ */
+export function normalizeFindingPaths(findings, root) {
+  if (!Array.isArray(findings)) return findings;
+  for (const f of findings) {
+    if (f && typeof f === 'object' && f.file) f.file = displayPath(f.file, root);
+  }
+  return findings;
+}
+
+export default displayPath;

package/cli/utils/cache-manager.js

@@ -17,6 +17,7 @@
 
 import fs from 'fs';
 import path from 'path';
+import { displayPath } from '../core/paths.js';
 import crypto from 'crypto';
 import { toolVersion } from '../core/version.js';
 
@@ -200,7 +201,7 @@ export class CacheManager {
       // Group findings by file (relative paths)
       const lastFindings = {};
       for (const f of allFindings) {
-        const relPath = path.relative(this.rootPath, f.file).replace(/\\/g, '/');
+        const relPath = displayPath(f.file, this.rootPath);
         if (!lastFindings[relPath]) lastFindings[relPath] = [];
         // Store a lightweight copy (no absolute paths)
         lastFindings[relPath].push({

package/docs/USAGE.md

@@ -961,7 +961,7 @@ only ever emits a known class name.
 prints a provenance line in its footer:
 
 ```
-praxis 1.2.1 · node v24.14.1 · probes v1.1(23) · threatpack v1.1(3) · eaa v0.1.0 · files 214
+praxis 1.2.2 · node v24.14.1 · probes v1.1(23) · threatpack v1.1(3) · eaa v0.1.0 · files 215
 ```
 
 It records the tool version, the runtime, and the version of every vendored data asset