project-shield 1.1.6 → 2.0.0

package/dist/retention/hash-detect.js

@@ -0,0 +1,29 @@
+"use strict";
+// ─── Settings Hash Change Detection ─────────────────────────
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectHashChange = detectHashChange;
+const storage_js_1 = require("./storage.js");
+/**
+ * Compare stored settings hash with current hash.
+ * Returns change detection result.
+ */
+function detectHashChange(projectDir, currentHash) {
+    const state = (0, storage_js_1.readAuditState)(projectDir);
+    if (!state || !state.settingsHash) {
+        return {
+            hasChanged: false,
+            previousHash: '',
+            currentHash,
+        };
+    }
+    const hasChanged = state.settingsHash !== currentHash && currentHash !== '';
+    return {
+        hasChanged,
+        previousHash: state.settingsHash,
+        currentHash,
+        message: hasChanged
+            ? 'Claude Code settings have changed since last audit. Run `project-shield audit` to re-check.'
+            : undefined,
+    };
+}
+//# sourceMappingURL=hash-detect.js.map

package/dist/retention/hash-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash-detect.js","sourceRoot":"","sources":["../../src/retention/hash-detect.ts"],"names":[],"mappings":";AAAA,+DAA+D;;AAe/D,4CAwBC;AArCD,6CAA8C;AAS9C;;;GAGG;AACH,SAAgB,gBAAgB,CAC9B,UAAkB,EAClB,WAAmB;IAEnB,MAAM,KAAK,GAAG,IAAA,2BAAc,EAAC,UAAU,CAAC,CAAC;IAEzC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAClC,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,EAAE;YAChB,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,KAAK,WAAW,IAAI,WAAW,KAAK,EAAE,CAAC;IAE5E,OAAO;QACL,UAAU;QACV,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW;QACX,OAAO,EAAE,UAAU;YACjB,CAAC,CAAC,6FAA6F;YAC/F,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC"}

package/dist/retention/storage.d.ts

@@ -0,0 +1,17 @@
+export interface AuditState {
+    lastAuditAt: string;
+    settingsHash: string;
+    score: number;
+    grade: string;
+    findingsCount: number;
+    criticalCount: number;
+}
+/**
+ * Read audit state for a project. Returns null if not found or corrupted.
+ */
+export declare function readAuditState(projectDir: string): AuditState | null;
+/**
+ * Write audit state for a project.
+ */
+export declare function writeAuditState(projectDir: string, state: AuditState): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/retention/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/retention/storage.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAgBD;;GAEG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAWpE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAI3E"}

package/dist/retention/storage.js

@@ -0,0 +1,79 @@
+"use strict";
+// ─── Retention Storage ──────────────────────────────────────
+// Stores audit state per-project in .claude/.shield/audit-state.json
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readAuditState = readAuditState;
+exports.writeAuditState = writeAuditState;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const STATE_DIR = '.claude/.shield';
+const STATE_FILE = 'audit-state.json';
+function getStatePath(projectDir) {
+    return path.join(projectDir, STATE_DIR, STATE_FILE);
+}
+function ensureStateDir(projectDir) {
+    const dir = path.join(projectDir, STATE_DIR);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+}
+/**
+ * Read audit state for a project. Returns null if not found or corrupted.
+ */
+function readAuditState(projectDir) {
+    try {
+        const filePath = getStatePath(projectDir);
+        if (!fs.existsSync(filePath))
+            return null;
+        const raw = fs.readFileSync(filePath, 'utf-8');
+        const data = JSON.parse(raw);
+        if (!data.lastAuditAt || typeof data.settingsHash !== 'string')
+            return null;
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Write audit state for a project.
+ */
+function writeAuditState(projectDir, state) {
+    ensureStateDir(projectDir);
+    const filePath = getStatePath(projectDir);
+    fs.writeFileSync(filePath, JSON.stringify(state, null, 2), 'utf-8');
+}
+//# sourceMappingURL=storage.js.map

package/dist/retention/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/retention/storage.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,qEAAqE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BrE,wCAWC;AAKD,0CAIC;AAjDD,4CAA8B;AAC9B,gDAAkC;AAWlC,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC,SAAS,YAAY,CAAC,UAAkB;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,UAAkB;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,UAAkB,EAAE,KAAiB;IACnE,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC"}

package/dist/types/audit.d.ts

@@ -0,0 +1,77 @@
+export type AuditSeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';
+export type AuditTier = 'free' | 'pro';
+export interface AuditFinding {
+    id: string;
+    title: string;
+    description: string;
+    severity: AuditSeverity;
+    tier: AuditTier;
+    category: 'environment' | 'hooks';
+    remediation: string;
+    evidence?: string;
+}
+export interface AuditScore {
+    total: number;
+    grade: 'A' | 'B' | 'C' | 'D' | 'E' | 'F';
+    breakdown: {
+        environment: number;
+        hooks: number;
+    };
+}
+export interface AuditResult {
+    environment: AuditFinding[];
+    hooks: AuditFinding[];
+    score: AuditScore;
+    summary: {
+        total: number;
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+        info: number;
+        freeVisible: number;
+        proOnly: number;
+    };
+    settingsHash: string;
+    scannedAt: string;
+    projectDir: string;
+}
+export interface AuditConfig {
+    projectDir?: string;
+    format?: 'terminal' | 'json';
+    fix?: boolean;
+    evidencePath?: string;
+}
+export interface AuditEvidencePack {
+    version: string;
+    generatedAt: string;
+    result: AuditResult;
+    config: AuditConfig;
+    environment?: {
+        hostname: string;
+        platform: string;
+        nodeVersion: string;
+    };
+    fixitSummary?: {
+        totalCritical: number;
+        totalWarning: number;
+        totalInfo: number;
+        guidesAvailable: number;
+    };
+    fixitGuides?: Array<{
+        id: string;
+        severity: string;
+        title: string;
+        description: string;
+        steps: string[];
+        command?: string;
+        references?: string[];
+    }>;
+    integrity?: {
+        auditHash: string;
+        generatorVersion: string;
+    };
+    disclaimer?: string;
+}
+export type RetentionState = 'active' | 'stale' | 'expired';
+//# sourceMappingURL=audit.d.ts.map

package/dist/types/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAC5E,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC;AAEvC,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACzC,SAAS,EAAE;QACT,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,YAAY,EAAE,CAAC;IAC5B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,CAAC,EAAE;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,WAAW,CAAC,EAAE,KAAK,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;KACvB,CAAC,CAAC;IACH,SAAS,CAAC,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC"}

package/dist/types/audit.js

@@ -0,0 +1,4 @@
+"use strict";
+// ─── Audit Types (F008 + F009) ──────────────────────────────
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=audit.js.map

package/dist/types/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":";AAAA,+DAA+D"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "project-shield",
-  "version": "1.1.6",
-  "description": "Security scanner for AI coders and MCP users — detects API keys, secrets, and PII",
+  "version": "2.0.0",
+  "description": "Security scanner for AI coders and MCP users — secrets, PII, injection, and Claude Code environment audit",
   "main": "dist/index.js",
   "bin": {
     "project-shield": "dist/index.js"
@@ -30,7 +30,10 @@
     "prompt-injection",
     "ai-security",
     "claude",
-    "llm"
+    "llm",
+    "audit",
+    "environment-security",
+    "hooks"
   ],
   "author": "ShovelMaker91",
   "license": "MIT",