project-shield 1.0.2 → 1.1.1

package/dist/license/http.js

@@ -0,0 +1,89 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.postJSON = postJSON;
+const https = __importStar(require("node:https"));
+const http = __importStar(require("node:http"));
+const TIMEOUT_MS = 5000;
+/**
+ * POST JSON to a URL and parse the JSON response.
+ * Uses node:https (no external dependencies).
+ * Timeout: 5 seconds.
+ */
+function postJSON(url, body) {
+    return new Promise((resolve, reject) => {
+        const data = JSON.stringify(body);
+        const parsed = new URL(url);
+        const isHttps = parsed.protocol === 'https:';
+        const options = {
+            hostname: parsed.hostname,
+            port: parsed.port || (isHttps ? 443 : 80),
+            path: parsed.pathname + parsed.search,
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Content-Length': Buffer.byteLength(data),
+                'User-Agent': 'project-shield-cli/1.0.0',
+            },
+            timeout: TIMEOUT_MS,
+        };
+        const transport = isHttps ? https : http;
+        const req = transport.request(options, (res) => {
+            let responseBody = '';
+            res.setEncoding('utf-8');
+            res.on('data', (chunk) => {
+                responseBody += chunk;
+            });
+            res.on('end', () => {
+                try {
+                    resolve(JSON.parse(responseBody));
+                }
+                catch {
+                    reject(new Error(`Invalid JSON response: ${responseBody.substring(0, 200)}`));
+                }
+            });
+        });
+        req.on('timeout', () => {
+            req.destroy();
+            reject(new Error('Request timed out'));
+        });
+        req.on('error', (err) => {
+            reject(err);
+        });
+        req.write(data);
+        req.end();
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/license/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/license/http.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,4BA+CC;AAzDD,kDAAoC;AACpC,gDAAkC;AAElC,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB;;;;GAIG;AACH,SAAgB,QAAQ,CAAC,GAAW,EAAE,IAAa;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAE7C,MAAM,OAAO,GAAyB;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;gBACzC,YAAY,EAAE,0BAA0B;aACzC;YACD,OAAO,EAAE,UAAU;SACpB,CAAC;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7C,IAAI,YAAY,GAAG,EAAE,CAAC;YACtB,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACzB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC/B,YAAY,IAAI,KAAK,CAAC;YACxB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/license/index.d.ts

@@ -0,0 +1,6 @@
+export { validateLicense, isValidKeyFormat, isCacheValid, isInGracePeriod } from './validator.js';
+export { canScan, recordScan, getCurrentMonthKey, getUsageForMonth } from './usage.js';
+export { getFeatureGate } from './gate.js';
+export { activateCommand, deactivateCommand, statusCommand } from './commands.js';
+export type { TierStatus, FeatureGate, LicenseInfo, LicenseCache, UsageData } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/license/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/license/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAClF,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC"}

package/dist/license/index.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.statusCommand = exports.deactivateCommand = exports.activateCommand = exports.getFeatureGate = exports.getUsageForMonth = exports.getCurrentMonthKey = exports.recordScan = exports.canScan = exports.isInGracePeriod = exports.isCacheValid = exports.isValidKeyFormat = exports.validateLicense = void 0;
+var validator_js_1 = require("./validator.js");
+Object.defineProperty(exports, "validateLicense", { enumerable: true, get: function () { return validator_js_1.validateLicense; } });
+Object.defineProperty(exports, "isValidKeyFormat", { enumerable: true, get: function () { return validator_js_1.isValidKeyFormat; } });
+Object.defineProperty(exports, "isCacheValid", { enumerable: true, get: function () { return validator_js_1.isCacheValid; } });
+Object.defineProperty(exports, "isInGracePeriod", { enumerable: true, get: function () { return validator_js_1.isInGracePeriod; } });
+var usage_js_1 = require("./usage.js");
+Object.defineProperty(exports, "canScan", { enumerable: true, get: function () { return usage_js_1.canScan; } });
+Object.defineProperty(exports, "recordScan", { enumerable: true, get: function () { return usage_js_1.recordScan; } });
+Object.defineProperty(exports, "getCurrentMonthKey", { enumerable: true, get: function () { return usage_js_1.getCurrentMonthKey; } });
+Object.defineProperty(exports, "getUsageForMonth", { enumerable: true, get: function () { return usage_js_1.getUsageForMonth; } });
+var gate_js_1 = require("./gate.js");
+Object.defineProperty(exports, "getFeatureGate", { enumerable: true, get: function () { return gate_js_1.getFeatureGate; } });
+var commands_js_1 = require("./commands.js");
+Object.defineProperty(exports, "activateCommand", { enumerable: true, get: function () { return commands_js_1.activateCommand; } });
+Object.defineProperty(exports, "deactivateCommand", { enumerable: true, get: function () { return commands_js_1.deactivateCommand; } });
+Object.defineProperty(exports, "statusCommand", { enumerable: true, get: function () { return commands_js_1.statusCommand; } });
+//# sourceMappingURL=index.js.map

package/dist/license/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/license/index.ts"],"names":[],"mappings":";;;AAAA,+CAAkG;AAAzF,+GAAA,eAAe,OAAA;AAAE,gHAAA,gBAAgB,OAAA;AAAE,4GAAA,YAAY,OAAA;AAAE,+GAAA,eAAe,OAAA;AACzE,uCAAuF;AAA9E,mGAAA,OAAO,OAAA;AAAE,sGAAA,UAAU,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAAE,4GAAA,gBAAgB,OAAA;AAClE,qCAA2C;AAAlC,yGAAA,cAAc,OAAA;AACvB,6CAAkF;AAAzE,8GAAA,eAAe,OAAA;AAAE,gHAAA,iBAAiB,OAAA;AAAE,4GAAA,aAAa,OAAA"}

package/dist/license/storage.d.ts

@@ -0,0 +1,31 @@
+import type { LicenseFile, UsageFile } from './types.js';
+/**
+ * Get the config directory path.
+ * Uses PROJECT_SHIELD_CONFIG_DIR env var for testing, otherwise ~/.project-shield/
+ */
+export declare function getConfigDir(): string;
+/**
+ * Ensure the config directory exists.
+ */
+export declare function ensureConfigDir(): void;
+/**
+ * Read the license file. Returns null if not found or corrupted.
+ */
+export declare function readLicenseFile(): LicenseFile | null;
+/**
+ * Write the license file.
+ */
+export declare function writeLicenseFile(data: LicenseFile): void;
+/**
+ * Delete the license file.
+ */
+export declare function deleteLicenseFile(): void;
+/**
+ * Read the usage file. Returns default if not found or corrupted.
+ */
+export declare function readUsageFile(): UsageFile;
+/**
+ * Write the usage file.
+ */
+export declare function writeUsageFile(data: UsageFile): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/license/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/license/storage.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIzD;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAKtC;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,WAAW,GAAG,IAAI,CAcpD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAIxD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAKxC;AAcD;;GAEG;AACH,wBAAgB,aAAa,IAAI,SAAS,CAazC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAIpD"}

package/dist/license/storage.js

@@ -0,0 +1,138 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getConfigDir = getConfigDir;
+exports.ensureConfigDir = ensureConfigDir;
+exports.readLicenseFile = readLicenseFile;
+exports.writeLicenseFile = writeLicenseFile;
+exports.deleteLicenseFile = deleteLicenseFile;
+exports.readUsageFile = readUsageFile;
+exports.writeUsageFile = writeUsageFile;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const os = __importStar(require("node:os"));
+const DIR_NAME = '.project-shield';
+/**
+ * Get the config directory path.
+ * Uses PROJECT_SHIELD_CONFIG_DIR env var for testing, otherwise ~/.project-shield/
+ */
+function getConfigDir() {
+    return process.env.PROJECT_SHIELD_CONFIG_DIR ?? path.join(os.homedir(), DIR_NAME);
+}
+/**
+ * Ensure the config directory exists.
+ */
+function ensureConfigDir() {
+    const dir = getConfigDir();
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+}
+/**
+ * Read the license file. Returns null if not found or corrupted.
+ */
+function readLicenseFile() {
+    try {
+        const filePath = path.join(getConfigDir(), 'license.json');
+        if (!fs.existsSync(filePath))
+            return null;
+        const raw = fs.readFileSync(filePath, 'utf-8');
+        const data = JSON.parse(raw);
+        // Basic shape validation
+        if (!data.cache?.license?.key || !data.cache?.validatedAt || !data.cache?.validUntil) {
+            return null;
+        }
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Write the license file.
+ */
+function writeLicenseFile(data) {
+    ensureConfigDir();
+    const filePath = path.join(getConfigDir(), 'license.json');
+    fs.writeFileSync(filePath, JSON.stringify(data, null, 2), 'utf-8');
+}
+/**
+ * Delete the license file.
+ */
+function deleteLicenseFile() {
+    const filePath = path.join(getConfigDir(), 'license.json');
+    if (fs.existsSync(filePath)) {
+        fs.unlinkSync(filePath);
+    }
+}
+function defaultUsage() {
+    const now = new Date();
+    const monthKey = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}`;
+    return {
+        usage: {
+            monthKey,
+            scanCount: 0,
+            lastScanAt: '',
+        },
+    };
+}
+/**
+ * Read the usage file. Returns default if not found or corrupted.
+ */
+function readUsageFile() {
+    try {
+        const filePath = path.join(getConfigDir(), 'usage.json');
+        if (!fs.existsSync(filePath))
+            return defaultUsage();
+        const raw = fs.readFileSync(filePath, 'utf-8');
+        const data = JSON.parse(raw);
+        if (!data.usage?.monthKey || typeof data.usage?.scanCount !== 'number') {
+            return defaultUsage();
+        }
+        return data;
+    }
+    catch {
+        return defaultUsage();
+    }
+}
+/**
+ * Write the usage file.
+ */
+function writeUsageFile(data) {
+    ensureConfigDir();
+    const filePath = path.join(getConfigDir(), 'usage.json');
+    fs.writeFileSync(filePath, JSON.stringify(data, null, 2), 'utf-8');
+}
+//# sourceMappingURL=storage.js.map

package/dist/license/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/license/storage.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,oCAEC;AAKD,0CAKC;AAKD,0CAcC;AAKD,4CAIC;AAKD,8CAKC;AAiBD,sCAaC;AAKD,wCAIC;AApGD,4CAA8B;AAC9B,gDAAkC;AAClC,4CAA8B;AAG9B,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAEnC;;;GAGG;AACH,SAAgB,YAAY;IAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe;IAC7B,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe;IAC7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,CAAC;QAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QAC5C,yBAAyB;QACzB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;YACrF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,IAAiB;IAChD,eAAe,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACvF,OAAO;QACL,KAAK,EAAE;YACL,QAAQ;YACR,SAAS,EAAE,CAAC;YACZ,UAAU,EAAE,EAAE;SACf;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,YAAY,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;YACvE,OAAO,YAAY,EAAE,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,IAAe;IAC5C,eAAe,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,YAAY,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC"}

package/dist/license/types.d.ts

@@ -0,0 +1,55 @@
+export interface LicenseInfo {
+    key: string;
+    tier: 'free' | 'pro';
+    email: string;
+    activatedAt: string;
+    expiresAt: string;
+    maxScansPerMonth: number;
+}
+export interface LicenseCache {
+    license: LicenseInfo;
+    validatedAt: string;
+    validUntil: string;
+}
+export interface LicenseFile {
+    cache: LicenseCache;
+}
+export interface UsageData {
+    monthKey: string;
+    scanCount: number;
+    lastScanAt: string;
+}
+export interface UsageFile {
+    usage: UsageData;
+}
+export type TierStatus = {
+    tier: 'free' | 'pro';
+    isPro: boolean;
+    scansRemaining: number;
+    scansUsed: number;
+    maxScans: number;
+    source: 'license' | 'default';
+};
+export interface FeatureGate {
+    isPro: boolean;
+    canGenerateEvidence: boolean;
+    canSeePiiDetails: boolean;
+    canSeeCleanBadge: boolean;
+    canSeeFullFixit: boolean;
+    canGenerateSealUUID: boolean;
+}
+export interface ValidateResponse {
+    valid: boolean;
+    license?: LicenseInfo;
+    error?: string;
+}
+export interface ActivateResponse {
+    success: boolean;
+    license?: LicenseInfo;
+    error?: string;
+}
+export interface DeactivateResponse {
+    success: boolean;
+    error?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/license/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/license/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,SAAS,CAAC;CAClB;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/license/types.js

@@ -0,0 +1,4 @@
+"use strict";
+// ─── License Types ───────────────────────────────────────────
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/license/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/license/types.ts"],"names":[],"mappings":";AAAA,gEAAgE"}

package/dist/license/usage.d.ts

@@ -0,0 +1,22 @@
+import type { UsageData, TierStatus } from './types.js';
+/**
+ * Get current month key in "YYYY-MM" format.
+ */
+export declare function getCurrentMonthKey(): string;
+/**
+ * Get usage data for a given month. Resets if month changed.
+ */
+export declare function getUsageForMonth(monthKey?: string): UsageData;
+/**
+ * Record a scan. Increments count for current month.
+ */
+export declare function recordScan(): void;
+/**
+ * Check if a scan is allowed based on tier limits.
+ * free: 5/month, pro: 50/month
+ */
+export declare function canScan(tier: TierStatus): {
+    allowed: boolean;
+    reason?: string;
+};
+//# sourceMappingURL=usage.d.ts.map

package/dist/license/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../src/license/usage.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExD;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAG3C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAc7D;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,IAAI,CAWjC;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAY/E"}

package/dist/license/usage.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCurrentMonthKey = getCurrentMonthKey;
+exports.getUsageForMonth = getUsageForMonth;
+exports.recordScan = recordScan;
+exports.canScan = canScan;
+const storage_js_1 = require("./storage.js");
+/**
+ * Get current month key in "YYYY-MM" format.
+ */
+function getCurrentMonthKey() {
+    const now = new Date();
+    return `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}`;
+}
+/**
+ * Get usage data for a given month. Resets if month changed.
+ */
+function getUsageForMonth(monthKey) {
+    const key = monthKey ?? getCurrentMonthKey();
+    const file = (0, storage_js_1.readUsageFile)();
+    // Month rollover → reset
+    if (file.usage.monthKey !== key) {
+        return {
+            monthKey: key,
+            scanCount: 0,
+            lastScanAt: '',
+        };
+    }
+    return file.usage;
+}
+/**
+ * Record a scan. Increments count for current month.
+ */
+function recordScan() {
+    const monthKey = getCurrentMonthKey();
+    const current = getUsageForMonth(monthKey);
+    (0, storage_js_1.writeUsageFile)({
+        usage: {
+            monthKey,
+            scanCount: current.scanCount + 1,
+            lastScanAt: new Date().toISOString(),
+        },
+    });
+}
+/**
+ * Check if a scan is allowed based on tier limits.
+ * free: 5/month, pro: 50/month
+ */
+function canScan(tier) {
+    if (tier.scansRemaining <= 0) {
+        return {
+            allowed: false,
+            reason: `Monthly scan limit reached (${tier.maxScans}/${tier.maxScans}). ${tier.isPro
+                ? 'Your Pro plan allows 50 scans/month. Resets next month.'
+                : 'Upgrade to Pro for 50 scans/month: https://project-shield.dev/pro'}`,
+        };
+    }
+    return { allowed: true };
+}
+//# sourceMappingURL=usage.js.map

package/dist/license/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../src/license/usage.ts"],"names":[],"mappings":";;AAMA,gDAGC;AAKD,4CAcC;AAKD,gCAWC;AAMD,0BAYC;AA9DD,6CAA6D;AAG7D;;GAEG;AACH,SAAgB,kBAAkB;IAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,QAAiB;IAChD,MAAM,GAAG,GAAG,QAAQ,IAAI,kBAAkB,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAA,0BAAa,GAAE,CAAC;IAE7B,yBAAyB;IACzB,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,CAAC;YACZ,UAAU,EAAE,EAAE;SACf,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU;IACxB,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE3C,IAAA,2BAAc,EAAC;QACb,KAAK,EAAE;YACL,QAAQ;YACR,SAAS,EAAE,OAAO,CAAC,SAAS,GAAG,CAAC;YAChC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,OAAO,CAAC,IAAgB;IACtC,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,+BAA+B,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,MACnE,IAAI,CAAC,KAAK;gBACR,CAAC,CAAC,yDAAyD;gBAC3D,CAAC,CAAC,mEACN,EAAE;SACH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/license/validator.d.ts

@@ -0,0 +1,28 @@
+import type { LicenseCache, TierStatus, ValidateResponse } from './types.js';
+/**
+ * Validate key format: PSH-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}
+ */
+export declare function isValidKeyFormat(key: string): boolean;
+/**
+ * Validate license with server.
+ */
+export declare function validateWithServer(key: string): Promise<ValidateResponse>;
+/**
+ * Check if cache is within the 7-day validity window.
+ */
+export declare function isCacheValid(cache: LicenseCache): boolean;
+/**
+ * Check if still within the grace period (3 extra days after cache expires).
+ */
+export declare function isInGracePeriod(cache: LicenseCache): boolean;
+/**
+ * Main license validation flow:
+ * 1. No license.json → free (default)
+ * 2. Cache valid (7 days) → return cached tier
+ * 3. Cache expired → try server re-validation
+ * 4. Server success → update cache, return tier
+ * 5. Server fail + grace period → cached tier + warning
+ * 6. Grace expired → downgrade to free
+ */
+export declare function validateLicense(): Promise<TierStatus>;
+//# sourceMappingURL=validator.d.ts.map

package/dist/license/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/license/validator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAO7E;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAG/E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAIzD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAK5D;AAkBD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,UAAU,CAAC,CA6C3D"}

package/dist/license/validator.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isValidKeyFormat = isValidKeyFormat;
+exports.validateWithServer = validateWithServer;
+exports.isCacheValid = isCacheValid;
+exports.isInGracePeriod = isInGracePeriod;
+exports.validateLicense = validateLicense;
+const storage_js_1 = require("./storage.js");
+const usage_js_1 = require("./usage.js");
+const http_js_1 = require("./http.js");
+const API_BASE = 'https://project-shield-license-api.vnddns999.workers.dev/api/v1';
+const KEY_PATTERN = /^PSH-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}$/;
+const CACHE_DAYS = 7;
+const GRACE_DAYS = 3;
+/**
+ * Validate key format: PSH-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}
+ */
+function isValidKeyFormat(key) {
+    return KEY_PATTERN.test(key);
+}
+/**
+ * Validate license with server.
+ */
+async function validateWithServer(key) {
+    const response = await (0, http_js_1.postJSON)(`${API_BASE}/validate`, { key });
+    return response;
+}
+/**
+ * Check if cache is within the 7-day validity window.
+ */
+function isCacheValid(cache) {
+    const now = Date.now();
+    const validUntil = new Date(cache.validUntil).getTime();
+    return now < validUntil;
+}
+/**
+ * Check if still within the grace period (3 extra days after cache expires).
+ */
+function isInGracePeriod(cache) {
+    const now = Date.now();
+    const validUntil = new Date(cache.validUntil).getTime();
+    const graceEnd = validUntil + GRACE_DAYS * 24 * 60 * 60 * 1000;
+    return now >= validUntil && now < graceEnd;
+}
+function makeTierStatus(tier, maxScans, source) {
+    const usage = (0, usage_js_1.getUsageForMonth)((0, usage_js_1.getCurrentMonthKey)());
+    return {
+        tier,
+        isPro: tier === 'pro',
+        scansRemaining: Math.max(0, maxScans - usage.scanCount),
+        scansUsed: usage.scanCount,
+        maxScans,
+        source,
+    };
+}
+/**
+ * Main license validation flow:
+ * 1. No license.json → free (default)
+ * 2. Cache valid (7 days) → return cached tier
+ * 3. Cache expired → try server re-validation
+ * 4. Server success → update cache, return tier
+ * 5. Server fail + grace period → cached tier + warning
+ * 6. Grace expired → downgrade to free
+ */
+async function validateLicense() {
+    const file = (0, storage_js_1.readLicenseFile)();
+    // 1. No license file → free
+    if (!file) {
+        return makeTierStatus('free', 5, 'default');
+    }
+    const cache = file.cache;
+    // 2. Cache valid
+    if (isCacheValid(cache)) {
+        const max = cache.license.tier === 'pro' ? 50 : 5;
+        return makeTierStatus(cache.license.tier, max, 'license');
+    }
+    // 3. Cache expired → try server
+    try {
+        const response = await validateWithServer(cache.license.key);
+        if (response.valid && response.license) {
+            // 4. Server success → update cache
+            const now = new Date();
+            const validUntil = new Date(now.getTime() + CACHE_DAYS * 24 * 60 * 60 * 1000);
+            (0, storage_js_1.writeLicenseFile)({
+                cache: {
+                    license: response.license,
+                    validatedAt: now.toISOString(),
+                    validUntil: validUntil.toISOString(),
+                },
+            });
+            const max = response.license.tier === 'pro' ? 50 : 5;
+            return makeTierStatus(response.license.tier, max, 'license');
+        }
+        // Server says invalid → downgrade
+        return makeTierStatus('free', 5, 'default');
+    }
+    catch {
+        // 5. Server unreachable
+        if (isInGracePeriod(cache)) {
+            // Grace period → use cached tier with warning
+            const max = cache.license.tier === 'pro' ? 50 : 5;
+            return makeTierStatus(cache.license.tier, max, 'license');
+        }
+        // 6. Grace expired → downgrade
+        return makeTierStatus('free', 5, 'default');
+    }
+}
+//# sourceMappingURL=validator.js.map

package/dist/license/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/license/validator.ts"],"names":[],"mappings":";;AAaA,4CAEC;AAKD,gDAGC;AAKD,oCAIC;AAKD,0CAKC;AA2BD,0CA6CC;AAlHD,6CAAiE;AACjE,yCAAkE;AAClE,uCAAqC;AAGrC,MAAM,QAAQ,GAAG,iEAAiE,CAAC;AACnF,MAAM,WAAW,GAAG,uDAAuD,CAAC;AAC5E,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB;;GAEG;AACH,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,QAAQ,GAAG,MAAM,IAAA,kBAAQ,EAAC,GAAG,QAAQ,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACjE,OAAO,QAA4B,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,KAAmB;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;IACxD,OAAO,GAAG,GAAG,UAAU,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,KAAmB;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/D,OAAO,GAAG,IAAI,UAAU,IAAI,GAAG,GAAG,QAAQ,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc,CACrB,IAAoB,EACpB,QAAgB,EAChB,MAA6B;IAE7B,MAAM,KAAK,GAAG,IAAA,2BAAgB,EAAC,IAAA,6BAAkB,GAAE,CAAC,CAAC;IACrD,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,IAAI,KAAK,KAAK;QACrB,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;QACvD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,eAAe;IACnC,MAAM,IAAI,GAAG,IAAA,4BAAe,GAAE,CAAC;IAE/B,4BAA4B;IAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAEzB,iBAAiB;IACjB,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,gCAAgC;IAChC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACvC,mCAAmC;YACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC9E,IAAA,6BAAgB,EAAC;gBACf,KAAK,EAAE;oBACL,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;oBAC9B,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE;iBACrC;aACF,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,OAAO,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/D,CAAC;QACD,kCAAkC;QAClC,OAAO,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;QACxB,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,8CAA8C;YAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,OAAO,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QACD,+BAA+B;QAC/B,OAAO,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/output/terminal.d.ts

@@ -1,10 +1,16 @@
 import type { ScanResult, ScanScore, LockStatus, SealedResult } from '../types/index.js';
 /**
  * Format scan results for terminal output.
+ * @param options.isPro - If false, PII section shows summary only (no file:line details).
  */
-export declare function formatTerminalOutput(result: ScanResult, rulesetVersion: string, rulesetHash: string, score?: ScanScore, lockStatus?: LockStatus): string;
+export declare function formatTerminalOutput(result: ScanResult, rulesetVersion: string, rulesetHash: string, score?: ScanScore, lockStatus?: LockStatus, options?: {
+    isPro?: boolean;
+}): string;
 /**
  * Format scan results as JSON.
+ * @param options.isPro - If false, PII array is replaced with a summary object.
  */
-export declare function formatJsonOutput(result: ScanResult, score?: ScanScore, seal?: SealedResult): string;
+export declare function formatJsonOutput(result: ScanResult, score?: ScanScore, seal?: SealedResult, options?: {
+    isPro?: boolean;
+}): string;
 //# sourceMappingURL=terminal.d.ts.map

package/dist/output/terminal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terminal.d.ts","sourceRoot":"","sources":["../../src/output/terminal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EAKV,SAAS,EACT,UAAU,EACV,YAAY,EACb,MAAM,mBAAmB,CAAC;AAiG3B;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,UAAU,EAClB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,SAAS,EACjB,UAAU,CAAC,EAAE,UAAU,GACtB,MAAM,CA+FR;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,UAAU,EAClB,KAAK,CAAC,EAAE,SAAS,EACjB,IAAI,CAAC,EAAE,YAAY,GAClB,MAAM,CASR"}
+{"version":3,"file":"terminal.d.ts","sourceRoot":"","sources":["../../src/output/terminal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EAKV,SAAS,EACT,UAAU,EACV,YAAY,EACb,MAAM,mBAAmB,CAAC;AAiG3B;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,UAAU,EAClB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,SAAS,EACjB,UAAU,CAAC,EAAE,UAAU,EACvB,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5B,MAAM,CAqGR;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,UAAU,EAClB,KAAK,CAAC,EAAE,SAAS,EACjB,IAAI,CAAC,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5B,MAAM,CAmBR"}