srclawyer 0.4.1 → 0.5.0

package/dist/commands/init.js

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { createInterface } from "node:readline/promises";
-import { CONFIG_FILENAME, DEFAULT_CONFIG, configPath, writeConfig } from "../config/config.js";
+import { CONFIG_FILENAME, DEFAULT_CONFIG, configPath, hasUnmigratedLegacyConfig, legacyConfigMessage, writeConfig, } from "../config/config.js";
 function guessIndustry(root) {
     const pkgPath = join(root, "package.json");
     if (!existsSync(pkgPath))
@@ -29,6 +29,10 @@ export async function runInit(root) {
         console.log(`${CONFIG_FILENAME} already exists. Delete it first if you want to redo setup.`);
         return;
     }
+    if (hasUnmigratedLegacyConfig(root)) {
+        console.log(legacyConfigMessage());
+        return;
+    }
     const guessedIndustry = guessIndustry(root);
     const rl = createInterface({ input: process.stdin, output: process.stdout });
     const lines = rl[Symbol.asyncIterator]();

package/dist/commands/scan.js

@@ -1,6 +1,6 @@
 import { writeFileSync } from "node:fs";
 import { join, resolve } from "node:path";
-import { loadConfig } from "../config/config.js";
+import { CONFIG_FILENAME, hasUnmigratedLegacyConfig, legacyConfigMessage, loadConfig } from "../config/config.js";
 import { scan } from "../engine/scanEngine.js";
 import { formatText } from "../report/formatText.js";
 import { generatePolicyMarkdown } from "../policy/generatePolicy.js";
@@ -10,8 +10,15 @@ import { resolveProtectedLogic } from "../cloud/resolveProtectedLogic.js";
 import { resolveProtectedLogicEndpoint } from "../cloud/config.js";
 export async function runScan(root, options) {
     const config = loadConfig(root);
+    let legacyConfigWarning = null;
     if (!config) {
-        console.error('No .privacypolicy.yml found. Run "srclawyer init" first.\n');
+        if (hasUnmigratedLegacyConfig(root)) {
+            legacyConfigWarning = legacyConfigMessage();
+            console.error(legacyConfigWarning);
+        }
+        else {
+            console.error(`No ${CONFIG_FILENAME} found. Run "srclawyer init" first.\n`);
+        }
     }
     const result = await scan(root);
     let findings = result.findings;
@@ -52,11 +59,11 @@ export async function runScan(root, options) {
     const finalResult = { ...result, findings, ambiguousCount };
     const policyPath = resolve(root, options.out);
     writeFileSync(policyPath, generatePolicyMarkdown(finalResult, config, llmError));
-    if (result.unsupportedStackWarning || llmError || protectedLogicWarning) {
+    if (result.unsupportedStackWarning || llmError || protectedLogicWarning || legacyConfigWarning) {
         process.exitCode = 1;
     }
     if (options.json) {
-        console.log(JSON.stringify({ ...finalResult, policyPath, llmError, protectedLogicWarning }, null, 2));
+        console.log(JSON.stringify({ ...finalResult, policyPath, llmError, protectedLogicWarning, legacyConfigWarning }, null, 2));
         return;
     }
     console.log(formatText(finalResult));

package/dist/config/config.d.ts

@@ -1,4 +1,6 @@
-export declare const CONFIG_FILENAME = ".privacypolicy.yml";
+export declare const CONFIG_FILENAME = ".srclawyer.config.yml";
+/** The pre-0.5.0 name. Never auto-migrated or silently read as a fallback -- see legacyConfigMessage. */
+export declare const LEGACY_CONFIG_FILENAME = ".privacypolicy.yml";
 export type SrcLawyerTier = "free" | "byok" | "managed";
 export interface SrcLawyerLlmConfig {
     provider: "anthropic";
@@ -14,5 +16,15 @@ export interface SrcLawyerConfig {
 }
 export declare const DEFAULT_CONFIG: SrcLawyerConfig;
 export declare function configPath(root: string): string;
+export declare function legacyConfigPath(root: string): string;
+/** True only when the old file is present and the new one isn't -- never fires once migrated. */
+export declare function hasUnmigratedLegacyConfig(root: string): boolean;
+/**
+ * Single source of truth for this message so init and scan can't drift into saying it two different
+ * ways. Deliberately never auto-reads the legacy file as a fallback, even though the YAML shape is
+ * identical -- the rename needs to be an explicit, visible action, not a silent compatibility shim
+ * that lets the old filename linger indefinitely.
+ */
+export declare function legacyConfigMessage(): string;
 export declare function loadConfig(root: string): SrcLawyerConfig | null;
 export declare function writeConfig(root: string, config: SrcLawyerConfig): void;

package/dist/config/config.js

@@ -1,7 +1,9 @@
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import yaml from "js-yaml";
-export const CONFIG_FILENAME = ".privacypolicy.yml";
+export const CONFIG_FILENAME = ".srclawyer.config.yml";
+/** The pre-0.5.0 name. Never auto-migrated or silently read as a fallback -- see legacyConfigMessage. */
+export const LEGACY_CONFIG_FILENAME = ".privacypolicy.yml";
 export const DEFAULT_CONFIG = {
     entityLocation: null,
     targetMarkets: [],
@@ -12,6 +14,22 @@ export const DEFAULT_CONFIG = {
 export function configPath(root) {
     return join(root, CONFIG_FILENAME);
 }
+export function legacyConfigPath(root) {
+    return join(root, LEGACY_CONFIG_FILENAME);
+}
+/** True only when the old file is present and the new one isn't -- never fires once migrated. */
+export function hasUnmigratedLegacyConfig(root) {
+    return existsSync(legacyConfigPath(root)) && !existsSync(configPath(root));
+}
+/**
+ * Single source of truth for this message so init and scan can't drift into saying it two different
+ * ways. Deliberately never auto-reads the legacy file as a fallback, even though the YAML shape is
+ * identical -- the rename needs to be an explicit, visible action, not a silent compatibility shim
+ * that lets the old filename linger indefinitely.
+ */
+export function legacyConfigMessage() {
+    return `Found a legacy ${LEGACY_CONFIG_FILENAME} from an older version of SrcLawyer. Rename it to keep your existing settings:\n\n  mv ${LEGACY_CONFIG_FILENAME} ${CONFIG_FILENAME}\n\nThen re-run this command. (If you'd rather start fresh instead, delete ${LEGACY_CONFIG_FILENAME} first.)`;
+}
 export function loadConfig(root) {
     const path = configPath(root);
     if (!existsSync(path))

package/dist/llm/resolveProviderForTier.d.ts

@@ -1,3 +1,3 @@
-import type { SrcLawyerConfig } from "../config/config.js";
+import { type SrcLawyerConfig } from "../config/config.js";
 import type { ProviderResolution } from "./types.js";
 export declare function resolveProviderForTier(config: SrcLawyerConfig): ProviderResolution;

package/dist/llm/resolveProviderForTier.js

@@ -1,3 +1,4 @@
+import { CONFIG_FILENAME } from "../config/config.js";
 import { AnthropicProvider } from "./anthropicProvider.js";
 export function resolveProviderForTier(config) {
     const tier = config.tier ?? "free";
@@ -9,7 +10,7 @@ export function resolveProviderForTier(config) {
         if (!envVar) {
             return {
                 provider: null,
-                error: 'Tier is "byok" but no API key environment variable is configured in .privacypolicy.yml. Run "srclawyer init" to set one.',
+                error: `Tier is "byok" but no API key environment variable is configured in ${CONFIG_FILENAME}. Run "srclawyer init" to set one.`,
             };
         }
         const apiKey = process.env[envVar];
@@ -27,5 +28,5 @@ export function resolveProviderForTier(config) {
             error: 'Tier is "managed" but SrcLawyer\'s managed backend is not available yet. Use "byok" with your own Anthropic API key, or "free".',
         };
     }
-    return { provider: null, error: `Unknown tier "${tier}" in .privacypolicy.yml.` };
+    return { provider: null, error: `Unknown tier "${tier}" in ${CONFIG_FILENAME}.` };
 }

package/dist/policy/generatePolicy.d.ts

@@ -1,3 +1,3 @@
 import type { ScanResult } from "../engine/types.js";
-import type { SrcLawyerConfig } from "../config/config.js";
+import { type SrcLawyerConfig } from "../config/config.js";
 export declare function generatePolicyMarkdown(result: ScanResult, config: SrcLawyerConfig | null, llmError?: string | null): string;

package/dist/policy/generatePolicy.js

@@ -1,3 +1,4 @@
+import { CONFIG_FILENAME } from "../config/config.js";
 import { DATA_CATEGORY_LABELS } from "./dataCategoryLabels.js";
 import { MANDATORY_DISCLAIMER } from "./disclaimer.js";
 function locationRef(finding) {
@@ -88,7 +89,7 @@ function renderContextSection(config) {
         return [
             "## Scope",
             "",
-            "No `.privacypolicy.yml` configuration was found, so this policy was generated without jurisdiction, target-market, or industry context. Run `srclawyer init` and re-run `srclawyer scan` to include that context.",
+            `No \`${CONFIG_FILENAME}\` configuration was found, so this policy was generated without jurisdiction, target-market, or industry context. Run \`srclawyer init\` and re-run \`srclawyer scan\` to include that context.`,
         ].join("\n");
     }
     const lines = ["## Scope", ""];
@@ -129,6 +130,9 @@ export function generatePolicyMarkdown(result, config, llmError) {
     if (categorySections.length > 0) {
         parts.push(categorySections.join("\n\n"));
     }
+    else if (result.unsupportedStackWarning) {
+        parts.push("**Not analyzed:** this codebase's primary language/framework isn't supported yet (see the warning above). This is not a clean-scan result — nothing below should be read as \"no data collection found.\"");
+    }
     else {
         parts.push("No data-collection patterns were confidently identified in this codebase.");
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "srclawyer",
-  "version": "0.4.1",
+  "version": "0.5.0",
   "description": "Static analysis engine that derives privacy policy documentation directly from source code",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",