project-athena 0.4.0 → 0.5.0

package/dist/{chunk-3XSDI5WF.js → chunk-L2EHJCH4.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   committedAiWarning
-} from "./chunk-RXNRMIZP.js";
+} from "./chunk-WUIC65QO.js";
 import {
   whichExecutable
-} from "./chunk-VSYBC3VY.js";
+} from "./chunk-UMWX4UTK.js";
 import {
   readRecentEvents
-} from "./chunk-65TSRDQ3.js";
+} from "./chunk-P4TRQMES.js";
 import {
   listRules,
   parseRules
@@ -21,7 +21,7 @@ import {
 import {
   gitAvailable,
   isGitRepo
-} from "./chunk-OLPSEQS5.js";
+} from "./chunk-AKOI4VTD.js";
 import {
   ADAPTERS
 } from "./chunk-YRIS7ZS6.js";
@@ -176,4 +176,4 @@ export {
   findRunningInstance,
   runDoctor
 };
-//# sourceMappingURL=chunk-3XSDI5WF.js.map
+//# sourceMappingURL=chunk-L2EHJCH4.js.map

package/dist/{chunk-65TSRDQ3.js → chunk-P4TRQMES.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   redact
-} from "./chunk-JCGDR4UV.js";
+} from "./chunk-WWQ5NKEC.js";
 import {
   toPosix
 } from "./chunk-XW3MLHI2.js";
@@ -121,4 +121,4 @@ export {
   readRecentEvents,
   summarizeSessions
 };
-//# sourceMappingURL=chunk-65TSRDQ3.js.map
+//# sourceMappingURL=chunk-P4TRQMES.js.map

package/dist/{chunk-KHMBNT66.js → chunk-PZPMWCXS.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   projectSession
-} from "./chunk-WVQC2EGO.js";
+} from "./chunk-GU3ZX2J7.js";
 import {
   impactOf
 } from "./chunk-GR4DL2VM.js";
@@ -11,13 +11,13 @@ import {
   indexWithIntegrations,
   planKnowledge,
   writePlannedKnowledge
-} from "./chunk-GGXPG6OE.js";
+} from "./chunk-4FETKOY3.js";
 import {
   analyzeProject
-} from "./chunk-MPG3IEGB.js";
+} from "./chunk-44EGCEB2.js";
 import {
   headMovement
-} from "./chunk-OLPSEQS5.js";
+} from "./chunk-AKOI4VTD.js";
 import {
   KNOWLEDGE_DOCS
 } from "./chunk-FQEGEVLY.js";
@@ -396,4 +396,4 @@ export {
   HISTORY_SECTIONS,
   staleForCheck
 };
-//# sourceMappingURL=chunk-KHMBNT66.js.map
+//# sourceMappingURL=chunk-PZPMWCXS.js.map

package/dist/{chunk-XDCKZ5TV.js → chunk-R5AX7VST.js}

@@ -33,7 +33,7 @@ import {
 } from "./chunk-XFN7UZCS.js";
 import {
   runPipeline
-} from "./chunk-GGXPG6OE.js";
+} from "./chunk-4FETKOY3.js";
 import {
   ADAPTERS,
   resolveAdapters
@@ -433,4 +433,4 @@ export {
   printSummary,
   summarize
 };
-//# sourceMappingURL=chunk-XDCKZ5TV.js.map
+//# sourceMappingURL=chunk-R5AX7VST.js.map

package/dist/{chunk-QLW657NT.js → chunk-RQKGT2EK.js}

@@ -2,7 +2,7 @@
 import {
   readRecentEvents,
   summarizeSessions
-} from "./chunk-65TSRDQ3.js";
+} from "./chunk-P4TRQMES.js";
 import {
   ADAPTERS,
   applyChanges,
@@ -92,4 +92,4 @@ export {
   configureAgents,
   removeAgents
 };
-//# sourceMappingURL=chunk-QLW657NT.js.map
+//# sourceMappingURL=chunk-RQKGT2EK.js.map

package/dist/{chunk-VSYBC3VY.js → chunk-UMWX4UTK.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-// src/services/which.ts
+// src/core/util/which.ts
 import { promises as fs } from "fs";
 import path from "path";
 async function whichExecutable(command) {
@@ -25,4 +25,4 @@ async function whichExecutable(command) {
 export {
   whichExecutable
 };
-//# sourceMappingURL=chunk-VSYBC3VY.js.map
+//# sourceMappingURL=chunk-UMWX4UTK.js.map

package/dist/{chunk-RXNRMIZP.js → chunk-WUIC65QO.js}

@@ -5,7 +5,7 @@ import {
 import {
   redact,
   scanText
-} from "./chunk-JCGDR4UV.js";
+} from "./chunk-WWQ5NKEC.js";
 import {
   KNOWLEDGE_DOCS
 } from "./chunk-FQEGEVLY.js";
@@ -387,4 +387,4 @@ export {
   buildEnrichPayload,
   enrich
 };
-//# sourceMappingURL=chunk-RXNRMIZP.js.map
+//# sourceMappingURL=chunk-WUIC65QO.js.map

package/dist/{chunk-JCGDR4UV.js → chunk-WWQ5NKEC.js}

@@ -174,9 +174,11 @@ function isSecretLikeName(name) {
 }
 
 export {
+  MAX_GENERIC_LINE,
+  SECRET_PATTERNS,
   ephemeralFingerprint,
   scanText,
   redact,
   isSecretLikeName
 };
-//# sourceMappingURL=chunk-JCGDR4UV.js.map
+//# sourceMappingURL=chunk-WWQ5NKEC.js.map

package/dist/{chunk-RVTNSNGK.js → chunk-X7EYOAEX.js}

@@ -2,7 +2,7 @@
 import {
   planSnapshot,
   planSync
-} from "./chunk-KHMBNT66.js";
+} from "./chunk-PZPMWCXS.js";
 
 // src/services/scheduler.ts
 var DEFAULT_FULL_WALK_EVERY_MS = 5 * 6e4;
@@ -179,4 +179,4 @@ var AnalysisScheduler = class {
 export {
   AnalysisScheduler
 };
-//# sourceMappingURL=chunk-RVTNSNGK.js.map
+//# sourceMappingURL=chunk-X7EYOAEX.js.map

package/dist/chunk-Y6SDMZET.js

@@ -0,0 +1,278 @@
+#!/usr/bin/env node
+import {
+  MAX_SECRET_FINDINGS,
+  scanFilesForSecrets
+} from "./chunk-44EGCEB2.js";
+import {
+  walkProject
+} from "./chunk-ELKFRTZT.js";
+import {
+  MAX_GENERIC_LINE,
+  SECRET_PATTERNS,
+  ephemeralFingerprint
+} from "./chunk-WWQ5NKEC.js";
+
+// src/core/findings/finding.ts
+import { z } from "zod";
+var CATEGORIES = ["secret", "dependency", "sast", "iac", "license", "quality", "review", "memory"];
+var SEVERITIES = ["critical", "high", "medium", "low", "info", "unrated"];
+var SEVERITY_RANK = { critical: 5, high: 4, medium: 3, low: 2, info: 1, unrated: 0 };
+var CONFIDENCES = ["high", "medium", "low"];
+var CONFIDENCE_RANK = { high: 3, medium: 2, low: 1 };
+var Location = z.object({
+  file: z.string(),
+  startLine: z.number().int().positive().optional(),
+  startColumn: z.number().int().positive().optional(),
+  endLine: z.number().int().positive().optional(),
+  endColumn: z.number().int().positive().optional()
+});
+var PackageRef = z.object({
+  ecosystem: z.string(),
+  name: z.string(),
+  version: z.string().optional(),
+  /** Manifest or lockfile the package comes from, if known. */
+  manifest: z.string().optional(),
+  advisoryIds: z.array(z.string()).default([]),
+  vulnerableRange: z.string().optional(),
+  fixedIn: z.string().optional(),
+  fixAvailable: z.boolean().optional()
+});
+var Finding = z.object({
+  /** Stable identity (32 hex). Never derived from a secret's value; see fingerprint.ts. */
+  fingerprint: z.string().regex(/^[a-f0-9]{32}$/),
+  /** e.g. `secret/stripe-key`, `dependency/vulnerable-package`, `review/env-file`, `sast/js/sql-concat`. */
+  ruleId: z.string().regex(/^[a-z0-9][a-z0-9._/-]{1,120}$/),
+  category: z.enum(CATEGORIES),
+  severity: z.enum(SEVERITIES),
+  confidence: z.enum(CONFIDENCES),
+  label: z.enum(["FACT", "DETECTED", "INFERRED"]),
+  /** Heuristic: "worth checking", not a confirmed problem. Rendered as "Potential …". */
+  potential: z.boolean().default(false),
+  title: z.string(),
+  message: z.string(),
+  cwe: z.array(z.string().regex(/^CWE-\d+$/)).default([]),
+  owasp: z.array(z.string()).default([]),
+  location: Location.optional(),
+  package: PackageRef.optional(),
+  /** Which engine produced it: `athena`, `npm-audit`, `semgrep`, … */
+  engine: z.object({ id: z.string(), version: z.string().optional() }),
+  /** Other engines that reported the same problem (after de-duplication). */
+  alsoReportedBy: z.array(z.string()).default([]),
+  help: z.object({ text: z.string(), url: z.string().optional() }).optional()
+});
+var Coverage = z.object({
+  engine: z.string(),
+  category: z.enum(CATEGORIES),
+  /** ok: ran · unavailable: not installed / nothing to scan · skipped: excluded by policy or options · failed/timeout: ran without usable output */
+  status: z.enum(["ok", "unavailable", "skipped", "failed", "timeout"]),
+  reason: z.string().optional(),
+  /** What was scanned when an engine runs per input (e.g. a requirements file). */
+  target: z.string().optional(),
+  languages: z.array(z.string()).default([]),
+  filesScanned: z.number().int().nonnegative().optional(),
+  filesSkipped: z.object({
+    tooLarge: z.number().int().nonnegative().default(0),
+    binary: z.number().int().nonnegative().default(0),
+    minified: z.number().int().nonnegative().default(0),
+    unreadable: z.number().int().nonnegative().default(0),
+    unsupported: z.number().int().nonnegative().default(0)
+  }).optional(),
+  /** Whether the engine contacted the network (e.g. an audit tool querying an advisory database). */
+  network: z.boolean().default(false),
+  durationMs: z.number().nonnegative()
+});
+var SCAN_SCOPES = ["all", "base", "staged", "changed"];
+var ScanResult = z.object({
+  schemaVersion: z.literal(1),
+  scannedAt: z.string(),
+  durationMs: z.number().nonnegative(),
+  scope: z.object({ mode: z.enum(SCAN_SCOPES), base: z.string().optional(), files: z.number().int().nonnegative().optional() }),
+  findings: z.array(Finding),
+  coverage: z.array(Coverage)
+});
+function compareFindings(a, b) {
+  return SEVERITY_RANK[b.severity] - SEVERITY_RANK[a.severity] || CONFIDENCE_RANK[b.confidence] - CONFIDENCE_RANK[a.confidence] || a.category.localeCompare(b.category) || a.ruleId.localeCompare(b.ruleId) || (a.location?.file ?? "").localeCompare(b.location?.file ?? "") || (a.location?.startLine ?? 0) - (b.location?.startLine ?? 0) || a.fingerprint.localeCompare(b.fingerprint);
+}
+function dedupeFindings(findings) {
+  const byFp = /* @__PURE__ */ new Map();
+  for (const f of findings) {
+    const prev = byFp.get(f.fingerprint);
+    if (!prev) {
+      byFp.set(f.fingerprint, { ...f, alsoReportedBy: [...f.alsoReportedBy] });
+      continue;
+    }
+    const other = f.engine.id;
+    if (other !== prev.engine.id && !prev.alsoReportedBy.includes(other)) prev.alsoReportedBy.push(other);
+    if (SEVERITY_RANK[f.severity] > SEVERITY_RANK[prev.severity]) prev.severity = f.severity;
+    if (CONFIDENCE_RANK[f.confidence] > CONFIDENCE_RANK[prev.confidence]) prev.confidence = f.confidence;
+  }
+  return [...byFp.values()].sort(compareFindings);
+}
+
+// src/core/scanners/secrets.ts
+import { promises as fs } from "fs";
+import path from "path";
+
+// src/core/findings/fingerprint.ts
+import crypto from "crypto";
+var FINGERPRINT_VERSION = 1;
+var hash = (parts) => crypto.createHash("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
+function normalizeLine(text, mask) {
+  const masked = mask ? `${text.slice(0, mask[0])}\u27E8v\u27E9${text.slice(mask[1])}` : text;
+  return masked.replace(/\s+/g, " ").trim();
+}
+function codeFingerprint(input) {
+  return hash(["v1", "code", input.ruleId, input.file, normalizeLine(input.lineText, input.mask), String(input.occurrence ?? 0)]);
+}
+function packageFingerprint(input) {
+  return hash(["v1", "package", input.ruleId, input.ecosystem, input.name, input.manifest ?? "", input.advisoryId ?? ""]);
+}
+function fileFingerprint(input) {
+  return hash(["v1", "file", input.ruleId, input.file ?? "", input.key ?? ""]);
+}
+function occurrenceCounter() {
+  const seen = /* @__PURE__ */ new Map();
+  return (ruleId, file, normalized) => {
+    const key = `${ruleId}\0${file}\0${normalized}`;
+    const n = seen.get(key) ?? 0;
+    seen.set(key, n + 1);
+    return n;
+  };
+}
+
+// src/core/scanners/secrets.ts
+var SECRETS_ENGINE = "athena-secrets";
+var CRITICAL = /* @__PURE__ */ new Set(["private-key", "aws-access-key-id", "aws-secret-access-key", "gcp-service-account", "azure-storage-key"]);
+var GENERIC = /* @__PURE__ */ new Set(["generic-secret-assignment", "env-secret-assignment"]);
+var MEDIUM_CONFIDENCE = /* @__PURE__ */ new Set(["jwt", "connection-string-credentials"]);
+var DESCRIPTION = new Map(SECRET_PATTERNS.map((p) => [p.id, p.description]));
+function secretSeverity(type) {
+  if (CRITICAL.has(type)) return { severity: "critical", confidence: "high", potential: false };
+  if (GENERIC.has(type)) return { severity: "medium", confidence: "low", potential: true };
+  return { severity: "high", confidence: MEDIUM_CONFIDENCE.has(type) ? "medium" : "high", potential: false };
+}
+function secretFinding(hit, occurrence = 0, engineId = "athena") {
+  const ruleId = `secret/${hit.type}`;
+  const { severity, confidence, potential } = secretSeverity(hit.type);
+  const description = DESCRIPTION.get(hit.type) ?? hit.type;
+  return {
+    fingerprint: codeFingerprint({ ruleId, file: hit.file, lineText: hit.lineText, mask: hit.mask, occurrence }),
+    ruleId,
+    category: "secret",
+    severity,
+    confidence,
+    label: "DETECTED",
+    potential,
+    title: potential ? `Potential hardcoded secret (${description.toLowerCase()})` : `Hardcoded ${description}`,
+    message: `${potential ? "A value that looks like a secret" : `A ${description}`} appears in ${hit.file}:${hit.line}. Athena does not store the value.`,
+    cwe: ["CWE-798"],
+    owasp: ["A07:2021"],
+    location: {
+      file: hit.file,
+      startLine: hit.line,
+      ...hit.column ? { startColumn: hit.column } : {},
+      ...hit.endLine ? { endLine: hit.endLine } : {},
+      ...hit.endColumn ? { endColumn: hit.endColumn } : {}
+    },
+    engine: { id: engineId },
+    help: {
+      text: potential ? "Check whether this is a real credential. If it is, move it to an environment variable or secret manager and rotate it." : "Remove the value, load it from an environment variable or secret manager, and rotate the credential \u2014 assume it is compromised once committed."
+    }
+  };
+}
+function hitsFromMatches(file, text, matches) {
+  const lineStart = (offset) => text.lastIndexOf("\n", offset - 1) + 1;
+  return matches.map((m) => {
+    const start = lineStart(m.start);
+    let end = text.indexOf("\n", m.start);
+    if (end < 0) end = text.length;
+    let lineText = text.slice(start, end);
+    if (lineText.endsWith("\r")) lineText = lineText.slice(0, -1);
+    const maskEnd = Math.min(m.end, start + lineText.length) - start;
+    const span = text.slice(m.start, m.end);
+    const extraLines = (span.match(/\n/g) ?? []).length;
+    const lastStart = extraLines ? lineStart(m.end) : start;
+    return {
+      type: m.type,
+      file,
+      line: m.line,
+      column: m.start - start + 1,
+      endLine: m.line + extraLines,
+      endColumn: m.end - lastStart + 1,
+      lineText,
+      mask: [m.start - start, Math.max(maskEnd, m.start - start)]
+    };
+  });
+}
+function secretFindings(hits, engineId = "athena") {
+  const occurrence = occurrenceCounter();
+  return hits.map((h) => secretFinding(h, occurrence(`secret/${h.type}`, h.file, normalizeLine(h.lineText, h.mask)), engineId));
+}
+async function scanSecrets(ctx, opts = {}) {
+  const started = Date.now();
+  let files = opts.walk ?? (await walkProject(ctx.root, { config: ctx.config, signal: ctx.signal })).files;
+  if (ctx.files) {
+    const scope = new Set(ctx.files);
+    files = files.filter((f) => scope.has(f.path));
+  }
+  const hits = [];
+  const read = async (rel) => fs.readFile(path.join(ctx.root, rel), "utf8").catch(() => null);
+  const r = await scanFilesForSecrets(files, read, {
+    fingerprint: ephemeralFingerprint,
+    signal: ctx.signal,
+    onFile: (file, text, matches) => hits.push(...hitsFromMatches(file, text, matches))
+  });
+  const notes = [];
+  if (r.truncated) notes.push(`stopped after ${MAX_SECRET_FINDINGS} findings; remaining files were not scanned`);
+  if (r.skippedLongLines) notes.push(`generic keyword patterns not applied to ${r.skippedLongLines} line(s) longer than ${MAX_GENERIC_LINE} characters`);
+  if (r.files.excluded) notes.push(`${r.files.excluded} lockfile/snapshot/SVG file(s) not scanned`);
+  const coverage = {
+    engine: SECRETS_ENGINE,
+    category: "secret",
+    status: "ok",
+    ...notes.length ? { reason: notes.join("; ") } : {},
+    filesScanned: r.files.scanned,
+    filesSkipped: { tooLarge: r.files.tooLarge, binary: r.files.binary, minified: r.files.minified, unreadable: r.files.unreadable, unsupported: r.files.excluded },
+    network: false,
+    durationMs: Date.now() - started
+  };
+  return {
+    findings: secretFindings(hits),
+    coverage: [coverage],
+    summary: { count: hits.length, files: [...new Set(hits.map((h) => h.file))], skippedLongLines: r.skippedLongLines, truncated: r.truncated }
+  };
+}
+var secretsScanner = {
+  id: SECRETS_ENGINE,
+  category: "secret",
+  title: "Hardcoded secrets",
+  async run(ctx) {
+    const { findings, coverage } = await scanSecrets(ctx);
+    return { findings, coverage };
+  }
+};
+
+export {
+  FINGERPRINT_VERSION,
+  normalizeLine,
+  codeFingerprint,
+  packageFingerprint,
+  fileFingerprint,
+  occurrenceCounter,
+  SECRETS_ENGINE,
+  hitsFromMatches,
+  secretFindings,
+  scanSecrets,
+  secretsScanner,
+  CATEGORIES,
+  SEVERITIES,
+  SEVERITY_RANK,
+  CONFIDENCES,
+  CONFIDENCE_RANK,
+  Finding,
+  Coverage,
+  ScanResult,
+  compareFindings,
+  dedupeFindings
+};
+//# sourceMappingURL=chunk-Y6SDMZET.js.map

package/dist/{clean-MDBYH62P.js → clean-LQOG56AM.js}

@@ -2,7 +2,7 @@
 import {
   cleanCommand,
   confirm
-} from "./chunk-7DZK6WSQ.js";
+} from "./chunk-DH5AGULY.js";
 import "./chunk-Z6QWMJLK.js";
 import "./chunk-XFN7UZCS.js";
 import "./chunk-KBO7XRBW.js";
@@ -20,4 +20,4 @@ export {
   cleanCommand,
   confirm
 };
-//# sourceMappingURL=clean-MDBYH62P.js.map
+//# sourceMappingURL=clean-LQOG56AM.js.map

package/dist/cli.js

@@ -2,7 +2,7 @@
 
 // src/cli/index.ts
 async function runEvent(args) {
-  const { parseEventArgs, eventCommand } = await import("./event-TNT6CQZR.js");
+  const { parseEventArgs, eventCommand } = await import("./event-6YW6TGFI.js");
   const opts = parseEventArgs(args);
   if (!opts) return false;
   let signalled = false;
@@ -21,7 +21,7 @@ function eventFailed(err) {
   return true;
 }
 if (process.argv[2] !== "event" || !await runEvent(process.argv.slice(3)).catch(eventFailed)) {
-  const { main } = await import("./program-CWJNGCTZ.js");
+  const { main } = await import("./program-DCP526LU.js");
   await main();
 }
 //# sourceMappingURL=cli.js.map

package/dist/{context-PLPCAPCO.js → context-G5YHY3L2.js}

@@ -3,10 +3,10 @@ import {
   getRelevantContext,
   graphSummary,
   refreshGraph
-} from "./chunk-UAZLPNVC.js";
+} from "./chunk-GYQG4Q2N.js";
 import {
   formatContext
-} from "./chunk-TDNZ2RYA.js";
+} from "./chunk-F65QINMR.js";
 import "./chunk-3IS2X2Z7.js";
 import {
   bullet,
@@ -24,17 +24,17 @@ import {
   requireProjectRoot
 } from "./chunk-XFN7UZCS.js";
 import "./chunk-KBO7XRBW.js";
-import "./chunk-WVQC2EGO.js";
-import "./chunk-MPG3IEGB.js";
-import "./chunk-ELKFRTZT.js";
+import "./chunk-GU3ZX2J7.js";
+import "./chunk-44EGCEB2.js";
 import "./chunk-PVCIGUIT.js";
-import "./chunk-OLPSEQS5.js";
+import "./chunk-ELKFRTZT.js";
+import "./chunk-AKOI4VTD.js";
 import {
   loadGraph,
   neighbors
 } from "./chunk-SVTEJYMS.js";
 import "./chunk-QCC4VJUH.js";
-import "./chunk-JCGDR4UV.js";
+import "./chunk-WWQ5NKEC.js";
 import "./chunk-673EPYYH.js";
 import "./chunk-FQEGEVLY.js";
 import "./chunk-2DY4PUR4.js";
@@ -158,4 +158,4 @@ export {
   contextCommand,
   graphCommand
 };
-//# sourceMappingURL=context-PLPCAPCO.js.map
+//# sourceMappingURL=context-G5YHY3L2.js.map

package/dist/{doctor-BX677KRE.js → doctor-L34QJ7WR.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   runDoctor
-} from "./chunk-3XSDI5WF.js";
-import "./chunk-RXNRMIZP.js";
-import "./chunk-VSYBC3VY.js";
-import "./chunk-65TSRDQ3.js";
+} from "./chunk-L2EHJCH4.js";
+import "./chunk-WUIC65QO.js";
+import "./chunk-UMWX4UTK.js";
+import "./chunk-P4TRQMES.js";
 import "./chunk-3IS2X2Z7.js";
 import {
   c,
@@ -21,8 +21,8 @@ import {
 import "./chunk-KBO7XRBW.js";
 import "./chunk-2R6PXY6Z.js";
 import "./chunk-PVCIGUIT.js";
-import "./chunk-OLPSEQS5.js";
-import "./chunk-JCGDR4UV.js";
+import "./chunk-AKOI4VTD.js";
+import "./chunk-WWQ5NKEC.js";
 import "./chunk-YRIS7ZS6.js";
 import "./chunk-GHFRQAYT.js";
 import "./chunk-INT3IGMQ.js";
@@ -39,7 +39,7 @@ async function doctorCommand(opts) {
   const cwd = await resolveCwd(opts);
   const { checks, root } = await runDoctor(cwd);
   if (root) {
-    const m = await (await import("./memory-VSVNLEJC.js")).memorySummary(root);
+    const m = await (await import("./memory-XBZCYQLW.js")).memorySummary(root);
     if (m?.total) {
       const pending = [m.unreviewed ? `${m.unreviewed} unreviewed` : "", m.stale ? `${m.stale} stale` : ""].filter(Boolean);
       checks.push({ area: "Memory", level: "info", message: `${m.total} project memory ${m.total === 1 ? "entry" : "entries"}${pending.length ? ` (${pending.join(", ")})` : ""}`, hint: pending.length ? "Review with `athena memory review` and `athena memory stale`." : void 0 });
@@ -66,4 +66,4 @@ async function doctorCommand(opts) {
 export {
   doctorCommand
 };
-//# sourceMappingURL=doctor-BX677KRE.js.map
+//# sourceMappingURL=doctor-L34QJ7WR.js.map

package/dist/{event-TNT6CQZR.js → event-6YW6TGFI.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   appendEvent
-} from "./chunk-65TSRDQ3.js";
+} from "./chunk-P4TRQMES.js";
 import {
   findProjectRoot
 } from "./chunk-KBO7XRBW.js";
-import "./chunk-JCGDR4UV.js";
+import "./chunk-WWQ5NKEC.js";
 import {
   normalizeHookEvent
 } from "./chunk-INT3IGMQ.js";
@@ -98,4 +98,4 @@ export {
   eventCommand,
   parseEventArgs
 };
-//# sourceMappingURL=event-TNT6CQZR.js.map
+//# sourceMappingURL=event-6YW6TGFI.js.map

package/dist/{git-hook-YZNZGAAP.js → git-hook-Y7Y262F7.js}

@@ -15,7 +15,7 @@ import {
 import "./chunk-KBO7XRBW.js";
 import {
   git
-} from "./chunk-OLPSEQS5.js";
+} from "./chunk-AKOI4VTD.js";
 import {
   hookCommand
 } from "./chunk-GHFRQAYT.js";
@@ -249,4 +249,4 @@ export {
   gitHookStatusCommand,
   gitHookUninstallCommand
 };
-//# sourceMappingURL=git-hook-YZNZGAAP.js.map
+//# sourceMappingURL=git-hook-Y7Y262F7.js.map

package/dist/{init-WQCAOJ2R.js → init-427QR5AS.js}

@@ -5,19 +5,19 @@ import {
   printSummary,
   runWithProgress,
   summarize
-} from "./chunk-XDCKZ5TV.js";
+} from "./chunk-R5AX7VST.js";
 import "./chunk-SHKXELUX.js";
 import "./chunk-Z6QWMJLK.js";
 import "./chunk-XFN7UZCS.js";
 import "./chunk-KBO7XRBW.js";
-import "./chunk-GGXPG6OE.js";
-import "./chunk-MPG3IEGB.js";
-import "./chunk-ELKFRTZT.js";
+import "./chunk-4FETKOY3.js";
 import "./chunk-2R6PXY6Z.js";
+import "./chunk-44EGCEB2.js";
 import "./chunk-PVCIGUIT.js";
-import "./chunk-OLPSEQS5.js";
+import "./chunk-ELKFRTZT.js";
+import "./chunk-AKOI4VTD.js";
 import "./chunk-QCC4VJUH.js";
-import "./chunk-JCGDR4UV.js";
+import "./chunk-WWQ5NKEC.js";
 import "./chunk-YRIS7ZS6.js";
 import "./chunk-GHFRQAYT.js";
 import "./chunk-INT3IGMQ.js";
@@ -35,4 +35,4 @@ export {
   runWithProgress,
   summarize
 };
-//# sourceMappingURL=init-WQCAOJ2R.js.map
+//# sourceMappingURL=init-427QR5AS.js.map