seaworthycode 1.2.3 → 1.2.4

package/dist/index.js

@@ -6,10 +6,10 @@ import { existsSync as existsSync6 } from "fs";
 import { dirname as dirname7, resolve as resolve4 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { cac } from "cac";
-import { createRequire as createRequire3 } from "module";
+import { createRequire as createRequire4 } from "module";
 
 // src/cli-action.ts
-import { stat, access as access2 } from "fs/promises";
+import { stat, access as access2, appendFile, mkdir } from "fs/promises";
 import { resolve as resolve3 } from "path";
 import { homedir as homedir3 } from "os";
 import { join as join15 } from "path";
@@ -93,6 +93,7 @@ var CACHE_DIR = join(CONFIG_DIR, "cache");
 var AST_CACHE_DIR = join(CACHE_DIR, "ast");
 var DEP_CACHE_DIR = join(CACHE_DIR, "deps");
 var LLM_CACHE_DIR = join(CACHE_DIR, "llm");
+var LOG_DIR = join(CONFIG_DIR, "logs");
 var VALID_CATEGORIES = /* @__PURE__ */ new Set([
   "security",
   "resilience",
@@ -400,11 +401,11 @@ async function crawl(options) {
         const ext2 = entry.name.includes(".") ? entry.name.slice(entry.name.lastIndexOf(".")) : "";
         if (SKIP_EXTENSIONS.has(ext2)) continue;
         try {
-          const stat22 = await fs.stat(fullPath);
-          if (!stat22.isFile()) continue;
-          if (stat22.size > maxFileSize) continue;
-          const { isBinary: isBinary2, isGenerated: isGenerated2 } = await peekFileHead(fullPath);
-          if (isBinary2 || isGenerated2) continue;
+          const stat2 = await fs.stat(fullPath);
+          if (!stat2.isFile()) continue;
+          if (stat2.size > maxFileSize) continue;
+          const { isBinary, isGenerated } = await peekFileHead(fullPath);
+          if (isBinary || isGenerated) continue;
           if (await shouldSkipMinifiedJs(fullPath, entry.name)) continue;
           files.push({
             path: fullPath,
@@ -420,17 +421,20 @@ async function crawl(options) {
       if (ig.ignores(relPath)) continue;
       const ext = entry.name.includes(".") ? entry.name.slice(entry.name.lastIndexOf(".")) : "";
       if (SKIP_EXTENSIONS.has(ext)) continue;
-      const stat2 = await fs.stat(fullPath);
-      if (stat2.size > maxFileSize) continue;
-      const { isBinary, isGenerated } = await peekFileHead(fullPath);
-      if (isBinary || isGenerated) continue;
-      if (await shouldSkipMinifiedJs(fullPath, entry.name)) continue;
-      files.push({
-        path: fullPath,
-        relativePath: relPath,
-        content: () => fs.readFile(fullPath, "utf-8"),
-        language: inferLanguage(entry.name)
-      });
+      try {
+        const stat2 = await fs.stat(fullPath);
+        if (stat2.size > maxFileSize) continue;
+        const { isBinary, isGenerated } = await peekFileHead(fullPath);
+        if (isBinary || isGenerated) continue;
+        if (await shouldSkipMinifiedJs(fullPath, entry.name)) continue;
+        files.push({
+          path: fullPath,
+          relativePath: relPath,
+          content: () => fs.readFile(fullPath, "utf-8"),
+          language: inferLanguage(entry.name)
+        });
+      } catch {
+      }
     }
   }
   await walk(targetDir);
@@ -779,10 +783,12 @@ var copy = {
   "report.tierWatermark": (licensedTo) => `\u2693 Pro \xB7 ${licensedTo}`,
   "report.scanProgress.starting": (targetDir) => `\u2693 Scanning ${targetDir}...`,
   "report.scanProgress.category": (label, count) => count > 0 ? `  \u2693 ${label} \u2014 ${count} issue(s)` : `  \u2693 ${label} \u2713`,
+  "report.licenseNotice": (licensedTo) => `Licensed to ${licensedTo}`,
   "report.cta.clean": `\u2713 All clear \u2014 your project is shipshape!`,
   "report.cta.hasFindings": `Fix these before you ship. ${SITE_URL}/docs`,
   "report.cta.critical": `\u26A0 Critical issues found \u2014 patch before you deploy. ${SITE_URL}/docs`,
   "report.proUpsellNamed": (names, count) => `\u2693 Pro unlocks ${count} more check${count === 1 ? "" : "s"} (${names}). ${SITE_URL}`,
+  "report.preScanNotice": (count) => `\u2693 Pro unlocks ${count} additional checks. Upgrade at ${SITE_URL}`,
   "report.llmPrivacyWarning": "Pro checks will send code context to your LLM provider via your API key. No data is sent to Seaworthy servers.",
   "report.confidenceHigh": "high confidence",
   "report.confidenceMedium": "medium confidence",
@@ -7655,7 +7661,7 @@ registry.register({
   }
 });
 var CHECK_ID10 = "security.xss-surface";
-var CGI_PATH_HINT = /(^|[\/_-])cgi([\/_.-]|$)/i;
+var CGI_PATH_HINT = new RegExp("(^|[/_-])cgi([/_.-]|$)", "i");
 function isLikelyCgiBashScript(file) {
   return CGI_PATH_HINT.test(file.relativePath);
 }
@@ -15842,7 +15848,7 @@ var copy3 = {
   "cli.setup.apiKeyPrompt": "API key for",
   "cli.setup.modelPrompt": "Model (press Enter for default)",
   "cli.setup.baseUrlPrompt": "Custom API base URL (press Enter to use default)",
-  "cli.setup.done": "Config saved. Run `seaworthy .` to scan your project.",
+  "cli.setup.done": "Config saved. Run `npx seaworthycode .` to scan your project.",
   "cli.setup.skipped": "Setup skipped. Running free-tier scan.",
   "cli.firstRun": "First time? Let's get you set up.",
   "cli.category.security": "Security",
@@ -15868,7 +15874,19 @@ var copy3 = {
   "cli.error.config.unknownKey": "Unknown config key. Valid keys: licenseKey, llmProvider, llmApiKey, llmModel, llmApiUrl",
   "cli.error.config.invalidProvider": "Invalid provider. Valid providers: anthropic, openai, kimi, moonshot, deepseek, gemini, ollama, openrouter",
   "cli.error.config.invalidAction": "Invalid config action. Usage: seaworthy config <set|get|list>",
-  "cli.config.setSuccess": (key) => `${key} updated.`
+  "cli.config.setSuccess": (key) => `${key} updated.`,
+  "cli.licenseNotice": (licensedTo) => `Licensed to ${licensedTo}`,
+  "cli.error.debugHint": (logPath) => `Re-run with --debug to write a diagnostic log: ${logPath}
+Report persistent issues: npx seaworthycode bugreport`,
+  "cli.bugreport.intro": "Seaworthy Bug Report \u2014 send an anonymized diagnostic to the Seaworthy team.",
+  "cli.bugreport.noLog": (logFile) => `No diagnostic log found at ${logFile}.
+Re-run the failing command with --debug first, then run bugreport again.`,
+  "cli.bugreport.preview": "The following diagnostic data will be sent (home directory paths have been anonymized):",
+  "cli.bugreport.confirm": "Send this report to the Seaworthy team?",
+  "cli.bugreport.cancelled": "Cancelled \u2014 no data was sent.",
+  "cli.bugreport.sent": (eventId) => `Report sent. Reference ID: ${eventId}
+Mention this ID when contacting support at ${SITE_URL}/support`,
+  "cli.bugreport.failed": "Could not reach the error reporting service. Check your connection and try again."
 };
 function getCopy2(key, ...args) {
   const value = copy3[key];
@@ -15893,7 +15911,7 @@ function createCommand(definition, options) {
         return {
           ok: false,
           code: "errors.unexpected",
-          detail: err instanceof Error ? err.message : String(err)
+          detail: err instanceof Error ? err.stack ?? err.message : String(err)
         };
       }
     }
@@ -15955,6 +15973,11 @@ async function executeScan(args, ctx) {
   }
   const showProgress = args.format === "terminal" && !args.sarifStdout;
   if (showProgress) {
+    if (ctx.tier === "free") {
+      const skippedCount = registry.getSkippedChecks("free").length;
+      process.stderr.write(getCopy("report.preScanNotice", skippedCount) + "\n");
+      process.stderr.write(getCopy2("cli.licenseNotice", ctx.licensedTo ?? "free tier") + "\n");
+    }
     process.stderr.write(getCopy("report.scanProgress.starting", args.targetDir) + "\n");
   }
   const runner = new ScanRunner();
@@ -16340,7 +16363,21 @@ async function runCli(options) {
     return { code: resolveExitCode("scan.failed"), error: message };
   }
   if (!result.ok) {
-    const message = resolveErrorMessage(result.code);
+    let message = resolveErrorMessage(result.code);
+    if (result.code === "errors.unexpected") {
+      const logFile = join15(LOG_DIR, "seaworthy.log");
+      message += "\n" + getCopy2("cli.error.debugHint", logFile);
+      if (options.debug && result.detail) {
+        try {
+          await mkdir(LOG_DIR, { recursive: true });
+          await appendFile(logFile, `[${(/* @__PURE__ */ new Date()).toISOString()}] unexpected error
+${result.detail}
+
+`);
+        } catch {
+        }
+      }
+    }
     return { code: resolveExitCode(result.code), error: message };
   }
   const remaining = Math.max(0, 3e3 - (Date.now() - updateStart));
@@ -16405,13 +16442,89 @@ var configCommand = createCommand(
   { requireLicense: false }
 );
 
+// src/commands/bugreport.ts
+import { readFile as readFile2 } from "fs/promises";
+import { randomUUID } from "crypto";
+import { platform, arch, homedir as homedir4 } from "os";
+import { join as join16 } from "path";
+import { createRequire as createRequire3 } from "module";
+import { intro as intro2, outro as outro2, confirm, isCancel as isCancel2 } from "@clack/prompts";
+var _require2 = createRequire3(import.meta.url);
+var { version: CLI_VERSION2 } = _require2("../../package.json");
+var LOG_FILE = join16(LOG_DIR, "seaworthy.log");
+var SENTRY_PROJECT_ID = "4511394796666960";
+var SENTRY_INGEST = "https://o4508597942026240.ingest.de.sentry.io";
+var SENTRY_KEY = "3c8dc912769032c73a306cb571805658";
+function sanitize(text3) {
+  return text3.split(homedir4()).join("<home>");
+}
+async function sendReport(log) {
+  const eventId = randomUUID().replace(/-/g, "");
+  const payload = {
+    event_id: eventId,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    platform: "node",
+    level: "error",
+    environment: "cli",
+    release: CLI_VERSION2,
+    message: log.split("\n")[0] ?? "Unexpected error",
+    extra: { log },
+    contexts: {
+      runtime: { name: "node", version: process.version },
+      os: { name: platform(), arch: arch() }
+    },
+    tags: { source: "cli-bugreport" }
+  };
+  try {
+    const res = await fetch(`${SENTRY_INGEST}/api/${SENTRY_PROJECT_ID}/store/`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "X-Sentry-Auth": `Sentry sentry_version=7, sentry_key=${SENTRY_KEY}, sentry_client=seaworthycode/${CLI_VERSION2}`
+      },
+      body: JSON.stringify(payload),
+      signal: AbortSignal.timeout(1e4)
+    });
+    return res.ok ? eventId : null;
+  } catch {
+    return null;
+  }
+}
+async function executeBugReport() {
+  intro2(getCopy2("cli.bugreport.intro"));
+  let log;
+  try {
+    const raw = await readFile2(LOG_FILE, "utf-8");
+    if (!raw.trim()) throw new Error("empty");
+    log = sanitize(raw.length > 8192 ? raw.slice(-8192) : raw);
+  } catch {
+    return { ok: true, output: getCopy2("cli.bugreport.noLog", LOG_FILE) };
+  }
+  process.stderr.write(getCopy2("cli.bugreport.preview") + "\n---\n" + log + "---\n\n");
+  const confirmed = await confirm({ message: getCopy2("cli.bugreport.confirm") });
+  if (isCancel2(confirmed) || !confirmed) {
+    outro2(getCopy2("cli.bugreport.cancelled"));
+    return { ok: true };
+  }
+  const eventId = await sendReport(log);
+  outro2(eventId ? getCopy2("cli.bugreport.sent", eventId) : getCopy2("cli.bugreport.failed"));
+  return { ok: true };
+}
+var bugReportCommand = createCommand(
+  {
+    name: "bugreport",
+    description: "Send an anonymized bug report to the Seaworthy team",
+    handler: async () => executeBugReport()
+  },
+  { requireLicense: false }
+);
+
 // src/index.ts
-loadEnv({ path: resolve4(process.cwd(), ".env") });
 var repoRootEnv = resolve4(dirname7(fileURLToPath3(import.meta.url)), "../../..", ".env");
 if (existsSync6(repoRootEnv)) {
   loadEnv({ path: repoRootEnv, override: false });
 }
-var require5 = createRequire3(import.meta.url);
+var require5 = createRequire4(import.meta.url);
 var { version } = require5("../package.json");
 var cli = cac("seaworthy");
 cli.version(version);
@@ -16451,6 +16564,16 @@ cli.command("setup", "Interactive setup for license key and LLM provider").actio
     process.exit(2);
   }
 });
+cli.command("bugreport", "Send an anonymized bug report to the Seaworthy team").action(async () => {
+  const result = await bugReportCommand.handler({ action: "run" }, { tier: "free", licensedTo: "free tier" });
+  if (!result.ok) {
+    console.error(resolveErrorMessage(result.code));
+    process.exit(2);
+  }
+  if (result.output) {
+    console.log(result.output);
+  }
+});
 cli.help(() => {
   return [
     {
@@ -16463,7 +16586,8 @@ cli.help(() => {
     },
     {
       title: "Commands",
-      body: `  npx seaworthycode setup    Interactive setup for license key and LLM provider`
+      body: `  npx seaworthycode setup        Interactive setup for license key and LLM provider
+  npx seaworthycode bugreport    Send an anonymized bug report to the Seaworthy team`
     },
     {
       title: "Options",