safecrab 0.1.0

package/dist/system/parsers/ip-parser.js

@@ -0,0 +1,100 @@
+/**
+ * Parser for ip addr output
+ * Maps IP addresses to network interface names
+ */
+/**
+ * Parse ip addr output to create a mapping of IP addresses to interface names
+ *
+ * Example output:
+ * 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
+ *     inet 127.0.0.1/8 scope host lo
+ * 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP
+ *     inet 192.168.1.100/24 brd 192.168.1.255 scope global eth0
+ * 3: tailscale0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1280 qdisc fq_codel state UNKNOWN
+ *     inet 100.64.0.1/32 scope global tailscale0
+ */
+export function parseIPAddr(output) {
+    const ipToInterfaces = new Map();
+    const lines = output.split("\n");
+    let currentInterface = null;
+    for (const line of lines) {
+        const trimmed = line.trim();
+        // Interface line: "2: eth0: <BROADCAST,..."
+        const ifaceMatch = trimmed.match(/^\d+:\s+([^:]+):/);
+        if (ifaceMatch) {
+            currentInterface = ifaceMatch[1]?.trim() ?? null;
+            continue;
+        }
+        // IPv4 address line: "inet 192.168.1.100/24 ..."
+        const inet4Match = trimmed.match(/^inet\s+([0-9.]+)/);
+        if (inet4Match && currentInterface) {
+            const ip = inet4Match[1];
+            if (ip) {
+                const interfaces = ipToInterfaces.get(ip) ?? [];
+                interfaces.push(currentInterface);
+                ipToInterfaces.set(ip, interfaces);
+            }
+            continue;
+        }
+        // IPv6 address line: "inet6 fe80::1/64 ..."
+        const inet6Match = trimmed.match(/^inet6\s+([0-9a-f:]+)/);
+        if (inet6Match && currentInterface) {
+            const ip = inet6Match[1];
+            if (ip) {
+                const interfaces = ipToInterfaces.get(ip) ?? [];
+                interfaces.push(currentInterface);
+                ipToInterfaces.set(ip, interfaces);
+            }
+        }
+    }
+    return ipToInterfaces;
+}
+/**
+ * Get list of all network interfaces from ip addr output
+ */
+export function getInterfaces(output) {
+    const interfaces = [];
+    const ipMap = parseIPAddr(output);
+    // Group by interface name
+    const interfaceMap = new Map();
+    for (const [ip, ifaces] of ipMap.entries()) {
+        for (const iface of ifaces) {
+            const ips = interfaceMap.get(iface) ?? [];
+            ips.push(ip);
+            interfaceMap.set(iface, ips);
+        }
+    }
+    for (const [name, ips] of interfaceMap.entries()) {
+        interfaces.push({
+            name,
+            ips,
+            isPublic: isPublicInterface(name, ips),
+        });
+    }
+    return interfaces;
+}
+/**
+ * Determine if an interface is public-facing
+ * Private interfaces: lo, docker*, tailscale*, cloudflare*
+ */
+function isPublicInterface(name, ips) {
+    // Loopback
+    if (name === "lo" || name.startsWith("lo:")) {
+        return false;
+    }
+    // Virtual/tunnel interfaces
+    if (name.startsWith("docker") ||
+        name.startsWith("tailscale") ||
+        name.startsWith("cloudflare") ||
+        name.startsWith("veth") ||
+        name.startsWith("br-")) {
+        return false;
+    }
+    // Check if all IPs are localhost
+    const allLocalhost = ips.every((ip) => ip.startsWith("127.") || ip === "::1");
+    if (allLocalhost) {
+        return false;
+    }
+    return true;
+}
+//# sourceMappingURL=ip-parser.js.map

package/dist/system/parsers/ip-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-parser.js","sourceRoot":"","sources":["../../../src/system/parsers/ip-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAE3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,4CAA4C;QAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACrD,IAAI,UAAU,EAAE,CAAC;YACf,gBAAgB,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;YACjD,SAAS;QACX,CAAC;QAED,iDAAiD;QACjD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACtD,IAAI,UAAU,IAAI,gBAAgB,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBAChD,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAClC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACrC,CAAC;YACD,SAAS;QACX,CAAC;QAED,4CAA4C;QAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC1D,IAAI,UAAU,IAAI,gBAAgB,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBAChD,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAClC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAK1C,MAAM,UAAU,GAA8D,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAElC,0BAA0B;IAC1B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;IACjD,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACb,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI;YACJ,GAAG;YACH,QAAQ,EAAE,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAAa;IACpD,WAAW;IACX,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4BAA4B;IAC5B,IACE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EACtB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iCAAiC;IACjC,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC;IAC9E,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/system/parsers/ss-parser.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Parser for ss -tulnp output
+ * Extracts listening services with port, protocol, process info
+ */
+import type { ListeningService } from "../../engine/types.js";
+/**
+ * Parse ss -tulnp output into structured ListeningService objects
+ *
+ * Example ss output:
+ * Netid  State   Recv-Q  Send-Q  Local Address:Port  Peer Address:Port  Process
+ * tcp    LISTEN  0       128     0.0.0.0:22          0.0.0.0:*          users:(("sshd",pid=1234,fd=3))
+ * udp    UNCONN  0       0       127.0.0.1:53        0.0.0.0:*          users:(("systemd-resolve",pid=567,fd=12))
+ */
+export declare function parseSSOutput(output: string, interfaceMap: Map<string, string[]>): ListeningService[];
+//# sourceMappingURL=ss-parser.d.ts.map

package/dist/system/parsers/ss-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ss-parser.d.ts","sourceRoot":"","sources":["../../../src/system/parsers/ss-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAW9D;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAClC,gBAAgB,EAAE,CAiBpB"}

package/dist/system/parsers/ss-parser.js

@@ -0,0 +1,153 @@
+/**
+ * Parser for ss -tulnp output
+ * Extracts listening services with port, protocol, process info
+ */
+import { z } from "zod";
+const ListeningServiceSchema = z.object({
+    port: z.number(),
+    protocol: z.enum(["tcp", "udp"]),
+    process: z.string(),
+    pid: z.number(),
+    interfaces: z.array(z.string()),
+    boundIp: z.string(),
+});
+/**
+ * Parse ss -tulnp output into structured ListeningService objects
+ *
+ * Example ss output:
+ * Netid  State   Recv-Q  Send-Q  Local Address:Port  Peer Address:Port  Process
+ * tcp    LISTEN  0       128     0.0.0.0:22          0.0.0.0:*          users:(("sshd",pid=1234,fd=3))
+ * udp    UNCONN  0       0       127.0.0.1:53        0.0.0.0:*          users:(("systemd-resolve",pid=567,fd=12))
+ */
+export function parseSSOutput(output, interfaceMap) {
+    const services = [];
+    const lines = output.split("\n");
+    for (const line of lines) {
+        // Skip header and empty lines
+        if (!line.trim() || line.startsWith("Netid") || line.startsWith("State")) {
+            continue;
+        }
+        const service = parseSSLine(line, interfaceMap);
+        if (service) {
+            services.push(service);
+        }
+    }
+    return services;
+}
+function parseSSLine(line, interfaceMap) {
+    // Split by whitespace
+    const parts = line.trim().split(/\s+/);
+    if (parts.length < 5) {
+        return null;
+    }
+    // Extract protocol (tcp or udp)
+    const protocol = parts[0]?.toLowerCase();
+    if (protocol !== "tcp" && protocol !== "udp") {
+        return null;
+    }
+    // Extract local address:port (usually index 4 for ss -tulnp)
+    // Format: "0.0.0.0:22" or "[::]:80" or "127.0.0.1:8080"
+    let localAddrPart = parts[4];
+    // Handle different formats in ss output
+    if (!localAddrPart?.includes(":")) {
+        // Try to find the Local Address:Port part
+        for (let i = 3; i < parts.length; i++) {
+            if (parts[i]?.includes(":")) {
+                localAddrPart = parts[i];
+                break;
+            }
+        }
+    }
+    if (!localAddrPart) {
+        return null;
+    }
+    const { ip, port } = parseAddress(localAddrPart);
+    if (port === null) {
+        return null;
+    }
+    // Extract process info from the Process column
+    // Format: users:(("sshd",pid=1234,fd=3))
+    const processMatch = line.match(/users:\(\("([^"]+)",pid=(\d+)/);
+    const processName = processMatch?.[1] ?? "unknown";
+    const pid = processMatch?.[2] ? Number.parseInt(processMatch[2], 10) : 0;
+    // Map IP to interfaces
+    const interfaces = mapIpToInterfaces(ip, interfaceMap);
+    const service = {
+        port,
+        protocol: protocol,
+        process: processName,
+        pid,
+        interfaces,
+        boundIp: ip,
+    };
+    // Validate with zod
+    const result = ListeningServiceSchema.safeParse(service);
+    if (!result.success) {
+        return null;
+    }
+    return service;
+}
+/**
+ * Parse address:port string
+ * Handles IPv4, IPv6, and wildcard addresses
+ */
+function parseAddress(addr) {
+    // IPv6 format: [::]:80 or [::1]:8080
+    const ipv6Match = addr.match(/^\[([^\]]+)\]:(\d+)$/);
+    if (ipv6Match) {
+        const port = Number.parseInt(ipv6Match[2] ?? "", 10);
+        return {
+            ip: ipv6Match[1] ?? "::",
+            port: Number.isNaN(port) ? null : port,
+        };
+    }
+    // IPv4 format: 0.0.0.0:22 or 127.0.0.1:8080
+    const ipv4Match = addr.match(/^([^:]+):(\d+)$/);
+    if (ipv4Match) {
+        const port = Number.parseInt(ipv4Match[2] ?? "", 10);
+        return {
+            ip: ipv4Match[1] ?? "0.0.0.0",
+            port: Number.isNaN(port) ? null : port,
+        };
+    }
+    // Handle asterisk wildcard (some versions of ss)
+    if (addr.startsWith("*:")) {
+        const portStr = addr.slice(2);
+        const port = Number.parseInt(portStr, 10);
+        return {
+            ip: "0.0.0.0",
+            port: Number.isNaN(port) ? null : port,
+        };
+    }
+    return { ip: "0.0.0.0", port: null };
+}
+/**
+ * Map bound IP to network interface names
+ *
+ * Rules:
+ * - 0.0.0.0 or :: → all public interfaces (eth0, ens3, etc.) + lo
+ * - 127.0.0.1 or ::1 → localhost only
+ * - Specific IP → lookup in interface map
+ */
+function mapIpToInterfaces(ip, interfaceMap) {
+    // Localhost
+    if (ip === "127.0.0.1" || ip === "::1" || ip === "localhost") {
+        return ["lo"];
+    }
+    // Wildcard - bind to all interfaces
+    if (ip === "0.0.0.0" || ip === "::" || ip === "*") {
+        const allInterfaces = [];
+        for (const ifaces of interfaceMap.values()) {
+            allInterfaces.push(...ifaces);
+        }
+        return allInterfaces.length > 0 ? allInterfaces : ["lo"];
+    }
+    // Specific IP - look up which interface(s) have this IP
+    const interfaces = interfaceMap.get(ip);
+    if (interfaces && interfaces.length > 0) {
+        return interfaces;
+    }
+    // Unknown - assume localhost for safety
+    return ["lo"];
+}
+//# sourceMappingURL=ss-parser.js.map

package/dist/system/parsers/ss-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ss-parser.js","sourceRoot":"","sources":["../../../src/system/parsers/ss-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,YAAmC;IAEnC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,8BAA8B;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,YAAmC;IACpE,sBAAsB;IACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAEvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACzC,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6DAA6D;IAC7D,wDAAwD;IACxD,IAAI,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAE7B,wCAAwC;IACxC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,0CAA0C;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACzB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+CAA+C;IAC/C,yCAAyC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IACnD,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzE,uBAAuB;IACvB,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAEvD,MAAM,OAAO,GAAqB;QAChC,IAAI;QACJ,QAAQ,EAAE,QAAyB;QACnC,OAAO,EAAE,WAAW;QACpB,GAAG;QACH,UAAU;QACV,OAAO,EAAE,EAAE;KACZ,CAAC;IAEF,oBAAoB;IACpB,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,qCAAqC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI;YACxB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACvC,CAAC;IACJ,CAAC;IAED,4CAA4C;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS;YAC7B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACvC,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC1C,OAAO;YACL,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACvC,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,EAAU,EAAE,YAAmC;IACxE,YAAY;IACZ,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,oCAAoC;IACpC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QAClD,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,aAAa,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED,wDAAwD;IACxD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,wCAAwC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/system/shell.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Centralized shell execution wrapper
+ * This is the ONLY place raw shell calls happen
+ */
+export interface CommandResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    success: boolean;
+}
+export interface ShellOptions {
+    timeout?: number;
+    ignoreErrors?: boolean;
+}
+/**
+ * Execute a shell command with error handling
+ */
+export declare function execCommand(command: string, args?: string[], options?: ShellOptions): Promise<CommandResult>;
+/**
+ * Check if running with root privileges
+ */
+export declare function isRoot(): boolean;
+/**
+ * Check if a command exists in PATH
+ */
+export declare function commandExists(command: string): Promise<boolean>;
+//# sourceMappingURL=shell.d.ts.map

package/dist/system/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/system/shell.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,aAAa,CAAC,CA4BxB;AAED;;GAEG;AACH,wBAAgB,MAAM,IAAI,OAAO,CAOhC;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGrE"}

package/dist/system/shell.js

@@ -0,0 +1,56 @@
+/**
+ * Centralized shell execution wrapper
+ * This is the ONLY place raw shell calls happen
+ */
+import { execa } from "execa";
+/**
+ * Execute a shell command with error handling
+ */
+export async function execCommand(command, args = [], options = {}) {
+    const timeout = options.timeout ?? 5000;
+    const ignoreErrors = options.ignoreErrors ?? false;
+    try {
+        const result = await execa(command, args, {
+            timeout,
+            reject: false, // Don't throw on non-zero exit codes
+            shell: false,
+        });
+        return {
+            stdout: result.stdout,
+            stderr: result.stderr,
+            exitCode: result.exitCode ?? 0,
+            success: result.exitCode === 0,
+        };
+    }
+    catch (error) {
+        if (ignoreErrors) {
+            return {
+                stdout: "",
+                stderr: error instanceof Error ? error.message : String(error),
+                exitCode: 1,
+                success: false,
+            };
+        }
+        throw error;
+    }
+}
+/**
+ * Check if running with root privileges
+ */
+export function isRoot() {
+    try {
+        return process.getuid?.() === 0;
+    }
+    catch {
+        // getuid not available (e.g., on Windows)
+        return false;
+    }
+}
+/**
+ * Check if a command exists in PATH
+ */
+export async function commandExists(command) {
+    const result = await execCommand("which", [command], { ignoreErrors: true });
+    return result.success;
+}
+//# sourceMappingURL=shell.js.map

package/dist/system/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/system/shell.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAc9B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,OAAiB,EAAE,EACnB,UAAwB,EAAE;IAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACxC,OAAO;YACP,MAAM,EAAE,KAAK,EAAE,qCAAqC;YACpD,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;YAC9B,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;SAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC9D,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,MAAM;IACpB,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC"}

package/dist/ui/findings.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Findings rendering - grouped by severity
+ */
+import type { Finding } from "../engine/types.js";
+export declare function renderFindings(findings: Finding[]): string;
+//# sourceMappingURL=findings.d.ts.map

package/dist/ui/findings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.d.ts","sourceRoot":"","sources":["../../src/ui/findings.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGlD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAwC1D"}

package/dist/ui/findings.js

@@ -0,0 +1,91 @@
+/**
+ * Findings rendering - grouped by severity
+ */
+import { colors, icons, spacing } from "./theme.js";
+export function renderFindings(findings) {
+    if (findings.length === 0) {
+        return `${spacing.section}${colors.success(`${icons.tick} No security issues detected.`)}`;
+    }
+    const lines = [];
+    // Group by severity
+    const critical = findings.filter((f) => f.severity === "critical");
+    const warnings = findings.filter((f) => f.severity === "warning");
+    const info = findings.filter((f) => f.severity === "info");
+    // Render critical findings
+    if (critical.length > 0) {
+        lines.push(spacing.section);
+        lines.push(colors.critical.bold("CRITICAL"));
+        for (const finding of critical) {
+            lines.push(renderFinding(finding));
+        }
+    }
+    // Render warnings
+    if (warnings.length > 0) {
+        lines.push(spacing.section);
+        lines.push(colors.warning.bold("WARNINGS"));
+        for (const finding of warnings) {
+            lines.push(renderFinding(finding));
+        }
+    }
+    // Render info
+    if (info.length > 0) {
+        lines.push(spacing.section);
+        lines.push(colors.info.bold("INFO"));
+        for (const finding of info) {
+            lines.push(renderFinding(finding));
+        }
+    }
+    return lines.join(spacing.line);
+}
+function renderFinding(finding) {
+    const lines = [];
+    // Icon + title
+    const icon = getIcon(finding);
+    const colorFn = getColor(finding.severity);
+    lines.push(colorFn(`${icon} ${finding.title}`));
+    // Description with indentation
+    const descLines = finding.description.split("\n");
+    for (const line of descLines) {
+        lines.push(`${spacing.indent}${line}`);
+    }
+    // Recommendation if present
+    if (finding.recommendation) {
+        lines.push("");
+        lines.push(colors.dim(`${spacing.indent}Recommendation:`));
+        lines.push(`${spacing.doubleIndent}${finding.recommendation}`);
+    }
+    return lines.join(spacing.line);
+}
+function getIcon(finding) {
+    // Use icon override if specified
+    if (finding.icon === "warning") {
+        return icons.warning;
+    }
+    if (finding.icon === "tick") {
+        return icons.tick;
+    }
+    // Default icon based on severity
+    switch (finding.severity) {
+        case "critical":
+            return icons.cross;
+        case "warning":
+            return icons.warning;
+        case "info":
+            return icons.tick;
+        default:
+            return icons.info;
+    }
+}
+function getColor(severity) {
+    switch (severity) {
+        case "critical":
+            return colors.critical;
+        case "warning":
+            return colors.warning;
+        case "info":
+            return colors.info;
+        default:
+            return (text) => text;
+    }
+}
+//# sourceMappingURL=findings.js.map

package/dist/ui/findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.js","sourceRoot":"","sources":["../../src/ui/findings.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,UAAU,cAAc,CAAC,QAAmB;IAChD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,GAAG,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,+BAA+B,CAAC,EAAE,CAAC;IAC7F,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,oBAAoB;IACpB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAE3D,2BAA2B;IAC3B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,eAAe;IACf,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEhD,+BAA+B;IAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB;IAC/B,iCAAiC;IACjC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IAED,iCAAiC;IACjC,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB;YACE,OAAO,KAAK,CAAC,IAAI,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB;YACE,OAAO,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/ui/renderer.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Main report renderer
+ */
+import type { Finding, ListeningService } from "../engine/types.js";
+export interface ScanReport {
+    services: ListeningService[];
+    findings: Finding[];
+}
+/**
+ * Render the complete security scan report
+ */
+export declare function renderReport(report: ScanReport): string;
+/**
+ * Determine exit code based on findings
+ * Returns 1 if critical findings exist, 0 otherwise
+ */
+export declare function getExitCode(findings: Finding[]): number;
+//# sourceMappingURL=renderer.d.ts.map

package/dist/ui/renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.d.ts","sourceRoot":"","sources":["../../src/ui/renderer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAMpE,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAkBvD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAGvD"}

package/dist/ui/renderer.js

@@ -0,0 +1,33 @@
+/**
+ * Main report renderer
+ */
+import { isRoot } from "../system/shell.js";
+import { renderFindings } from "./findings.js";
+import { calculateStats, renderSummary } from "./summary.js";
+import { dim, spacing } from "./theme.js";
+/**
+ * Render the complete security scan report
+ */
+export function renderReport(report) {
+    const { services, findings } = report;
+    const root = isRoot();
+    const lines = [];
+    // Summary section
+    const stats = calculateStats(services, findings, root);
+    lines.push(renderSummary(stats));
+    // Findings sections
+    lines.push(renderFindings(findings));
+    // Footer - trust-building message
+    lines.push(spacing.section);
+    lines.push(dim("No changes were made to your system."));
+    return lines.join(spacing.line);
+}
+/**
+ * Determine exit code based on findings
+ * Returns 1 if critical findings exist, 0 otherwise
+ */
+export function getExitCode(findings) {
+    const hasCritical = findings.some((f) => f.severity === "critical");
+    return hasCritical ? 1 : 0;
+}
+//# sourceMappingURL=renderer.js.map

package/dist/ui/renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.js","sourceRoot":"","sources":["../../src/ui/renderer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAO1C;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAkB;IAC7C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC;IAEtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,kBAAkB;IAClB,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAEjC,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IAErC,kCAAkC;IAClC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;IAExD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAAmB;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IACpE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC"}

package/dist/ui/summary.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Summary section rendering
+ */
+import type { Finding, ListeningService } from "../engine/types.js";
+export interface SummaryStats {
+    totalServices: number;
+    publiclyReachable: number;
+    criticalFindings: number;
+    warningFindings: number;
+    isRoot: boolean;
+}
+export declare function renderSummary(stats: SummaryStats): string;
+/**
+ * Calculate summary statistics from services and findings
+ */
+export declare function calculateStats(services: ListeningService[], findings: Finding[], isRoot: boolean): SummaryStats;
+//# sourceMappingURL=summary.d.ts.map

package/dist/ui/summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.d.ts","sourceRoot":"","sources":["../../src/ui/summary.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGpE,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CA6BzD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,QAAQ,EAAE,OAAO,EAAE,EACnB,MAAM,EAAE,OAAO,GACd,YAAY,CAYd"}

package/dist/ui/summary.js

@@ -0,0 +1,39 @@
+/**
+ * Summary section rendering
+ */
+import { bullet, colors, header, icons, spacing } from "./theme.js";
+export function renderSummary(stats) {
+    const lines = [];
+    // Title
+    lines.push(`${icons.crab} ${colors.crab.bold("Safecrab Security Scan")}`);
+    lines.push("");
+    // Root warning if not running as root
+    if (!stats.isRoot) {
+        lines.push(colors.warning(`${icons.warning} Running without root may hide some services and can show incorrect firewall or process info.`));
+        lines.push(colors.dim("   For full visibility, run Safecrab with sudo."));
+        lines.push("");
+    }
+    // Summary statistics
+    lines.push(header("Summary:"));
+    lines.push(bullet(`${stats.totalServices} services detected`));
+    lines.push(bullet(`${stats.publiclyReachable} publicly reachable`));
+    lines.push(bullet(`${stats.criticalFindings} critical issues`));
+    if (stats.warningFindings > 0) {
+        lines.push(bullet(`${stats.warningFindings} warnings`));
+    }
+    return lines.join(spacing.line);
+}
+/**
+ * Calculate summary statistics from services and findings
+ */
+export function calculateStats(services, findings, isRoot) {
+    const publiclyReachable = new Set(findings.filter((f) => f.service && f.severity !== "info").map((f) => f.service?.port)).size;
+    return {
+        totalServices: services.length,
+        publiclyReachable,
+        criticalFindings: findings.filter((f) => f.severity === "critical").length,
+        warningFindings: findings.filter((f) => f.severity === "warning").length,
+        isRoot,
+    };
+}
+//# sourceMappingURL=summary.js.map

package/dist/ui/summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../src/ui/summary.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAUpE,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,QAAQ;IACR,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,sCAAsC;IACtC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,OAAO,CACZ,GAAG,KAAK,CAAC,OAAO,+FAA+F,CAChH,CACF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,qBAAqB;IACrB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,oBAAoB,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,iBAAiB,qBAAqB,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,gBAAgB,kBAAkB,CAAC,CAAC,CAAC;IAEhE,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,eAAe,WAAW,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,QAAmB,EACnB,MAAe;IAEf,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CACvF,CAAC,IAAI,CAAC;IAEP,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,iBAAiB;QACjB,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;QAC1E,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;QACxE,MAAM;KACP,CAAC;AACJ,CAAC"}