sublyzer-snapshot 0.3.0

package/dist/commands/ci.js

@@ -0,0 +1,65 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { ok, title, info } from '../utils/log.js';
+const WORKFLOW = `# Generated by sublyzer-snapshot ci — commit or customize as needed
+name: Sublyzer Snapshot
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  schedule:
+    - cron: '0 9 * * 1'  # Weekly Monday 09:00 UTC
+
+jobs:
+  snapshot:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+
+      - name: Install Sublyzer Snapshot
+        run: npm install -g sublyzer-snapshot@latest
+
+      - name: Link integration
+        env:
+          SUBLYZER_INTEGRATION_CODE: \${{ secrets.SUBLYZER_INTEGRATION_CODE }}
+        run: sublyzer-snapshot init --code "$SUBLYZER_INTEGRATION_CODE" -y
+
+      - name: Scan and push
+        run: sublyzer-snapshot run --fail-on high --json > snapshot-result.json
+
+      - name: Upload report
+        run: sublyzer-snapshot report --out sublyzer-report.md
+
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: sublyzer-snapshot
+          path: |
+            snapshot-result.json
+            sublyzer-report.md
+`;
+export async function runCi(opts = {}) {
+    const outPath = path.resolve(process.cwd(), opts.out || '.github/workflows/sublyzer-snapshot.yml');
+    const content = WORKFLOW;
+    if (opts.print !== false && !opts.out) {
+        title('Sublyzer Snapshot — CI template');
+        console.log(content);
+        info('Save to .github/workflows/sublyzer-snapshot.yml and add secret SUBLYZER_INTEGRATION_CODE');
+        return { path: outPath, content };
+    }
+    fs.mkdirSync(path.dirname(outPath), { recursive: true });
+    if (fs.existsSync(outPath)) {
+        throw new Error(`File already exists: ${outPath} (use --out to pick another path)`);
+    }
+    fs.writeFileSync(outPath, content, 'utf8');
+    ok(`Wrote ${outPath}`);
+    info('Add GitHub secret: SUBLYZER_INTEGRATION_CODE');
+    return { path: outPath, content };
+}
+//# sourceMappingURL=ci.js.map

package/dist/commands/ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.js","sourceRoot":"","sources":["../../src/commands/ci.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0ChB,CAAC;AAOF,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAkB,EAAE;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAC;IACnG,MAAM,OAAO,GAAG,QAAQ,CAAC;IAEzB,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACtC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,0FAA0F,CAAC,CAAC;QACjG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACpC,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,mCAAmC,CAAC,CAAC;IACtF,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,EAAE,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACvB,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC"}

package/dist/commands/compare.d.ts

@@ -0,0 +1,7 @@
+export type CompareOptions = {
+    json?: boolean;
+    rescan?: boolean;
+    skipAudit?: boolean;
+};
+export declare function runCompare(opts?: CompareOptions): Promise<Record<string, unknown>>;
+//# sourceMappingURL=compare.d.ts.map

package/dist/commands/compare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare.d.ts","sourceRoot":"","sources":["../../src/commands/compare.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,wBAAsB,UAAU,CAAC,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA8D5F"}

package/dist/commands/compare.js

@@ -0,0 +1,60 @@
+import { loadConfig } from '../config.js';
+import { diffSnapshots, loadLastSnapshot, loadPreviousSnapshot, } from '../scan/history.js';
+import { buildProjectSnapshot } from '../scan/snapshot.js';
+import { info, title } from '../utils/log.js';
+export async function runCompare(opts = {}) {
+    const config = loadConfig();
+    const root = config.projectRoot || process.cwd();
+    const previous = loadPreviousSnapshot(root) || loadLastSnapshot(root);
+    const current = opts.rescan
+        ? buildProjectSnapshot(root, { skipAudit: opts.skipAudit })
+        : loadLastSnapshot(root);
+    if (!current) {
+        throw new Error('No scan data. Run: sublyzer-snapshot run');
+    }
+    if (!previous || previous.scannedAt === current.scannedAt) {
+        throw new Error('Need at least two scans to compare. Run `sublyzer-snapshot run` again.');
+    }
+    const healthDelta = (current.health?.score ?? current.summary.healthScore) -
+        (previous.health?.score ?? previous.summary?.healthScore ?? 0);
+    const diff = diffSnapshots(previous, current, healthDelta);
+    const payload = {
+        previous: {
+            scannedAt: previous.scannedAt,
+            healthScore: previous.health?.score ?? previous.summary?.healthScore,
+            routes: previous.summary.routeCount,
+            vulnerabilities: previous.summary.vulnerablePackages,
+        },
+        current: {
+            scannedAt: current.scannedAt,
+            healthScore: current.health?.score ?? current.summary.healthScore,
+            routes: current.summary.routeCount,
+            vulnerabilities: current.summary.vulnerablePackages,
+        },
+        diff,
+    };
+    if (opts.json)
+        return payload;
+    title('Sublyzer Snapshot — compare');
+    info(`Previous: ${previous.scannedAt} → health ${previous.health?.score ?? '?'}/100`);
+    info(`Current:  ${current.scannedAt} → health ${current.health?.score ?? '?'}/100`);
+    console.log('');
+    if (healthDelta !== 0) {
+        console.log(`  Health score:  ${healthDelta > 0 ? '+' : ''}${healthDelta}`);
+    }
+    console.log(`  Vulnerabilities: ${diff.vulnDelta.total >= 0 ? '+' : ''}${diff.vulnDelta.total} (C:${diff.vulnDelta.critical >= 0 ? '+' : ''}${diff.vulnDelta.critical} H:${diff.vulnDelta.high >= 0 ? '+' : ''}${diff.vulnDelta.high})`);
+    console.log(`  Dependencies:  ${diff.depDelta >= 0 ? '+' : ''}${diff.depDelta}`);
+    if (diff.routesAdded.length) {
+        console.log(`  Routes added (${diff.routesAdded.length}):`);
+        for (const r of diff.routesAdded.slice(0, 12))
+            console.log(`    + ${r}`);
+    }
+    if (diff.routesRemoved.length) {
+        console.log(`  Routes removed (${diff.routesRemoved.length}):`);
+        for (const r of diff.routesRemoved.slice(0, 12))
+            console.log(`    - ${r}`);
+    }
+    console.log('');
+    return payload;
+}
+//# sourceMappingURL=compare.js.map

package/dist/commands/compare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare.js","sourceRoot":"","sources":["../../src/commands/compare.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAQ9C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB,EAAE;IACxD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEjD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM;QACzB,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3D,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAE3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,WAAW,GACf,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACtD,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;IAEjE,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE;YACR,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW;YACpE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;YACnC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,kBAAkB;SACrD;QACD,OAAO,EAAE;YACP,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW;YACjE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;YAClC,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,kBAAkB;SACpD;QACD,IAAI;KACL,CAAC;IAEF,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAE9B,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACrC,IAAI,CAAC,aAAa,QAAQ,CAAC,SAAS,aAAa,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,GAAG,MAAM,CAAC,CAAC;IACtF,IAAI,CAAC,aAAa,OAAO,CAAC,SAAS,aAAa,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,GAAG,MAAM,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,oBAAoB,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;IACzO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEjF,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/doctor.d.ts

@@ -0,0 +1,13 @@
+export type DoctorOptions = {
+    json?: boolean;
+};
+export type DoctorCheck = {
+    name: string;
+    ok: boolean;
+    message: string;
+};
+export declare function runDoctor(opts?: DoctorOptions): Promise<{
+    ok: boolean;
+    checks: DoctorCheck[];
+}>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/C,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAsB,SAAS,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC,CA+FzG"}

package/dist/commands/doctor.js

@@ -0,0 +1,100 @@
+import { spawnSync } from 'node:child_process';
+import { configExists, loadConfig, resolveReadKey } from '../config.js';
+import { fetchPublicSnapshot, validateIntegrationCode } from '../api/sublyzer.js';
+import { detectStack } from '../detect/stack.js';
+import { info, ok, title, warn } from '../utils/log.js';
+export async function runDoctor(opts = {}) {
+    const checks = [];
+    // Config
+    if (!configExists()) {
+        checks.push({ name: 'config', ok: false, message: 'Missing .sublyzer/snapshot.json — run init' });
+    }
+    else {
+        checks.push({ name: 'config', ok: true, message: 'Config file found' });
+    }
+    let config;
+    try {
+        config = loadConfig();
+    }
+    catch (e) {
+        checks.push({ name: 'config-parse', ok: false, message: e?.message || 'Invalid config' });
+    }
+    // Node version
+    const nodeMajor = parseInt(process.versions.node.split('.')[0] || '0', 10);
+    checks.push({
+        name: 'node',
+        ok: nodeMajor >= 18,
+        message: nodeMajor >= 18 ? `Node ${process.versions.node}` : `Node ${process.versions.node} — require 18+`,
+    });
+    // npm
+    const npm = spawnSync(process.platform === 'win32' ? 'npm.cmd' : 'npm', ['--version'], { encoding: 'utf8' });
+    checks.push({
+        name: 'npm',
+        ok: true,
+        message: npm.status === 0 ? `npm ${(npm.stdout || '').trim()}` : 'npm not found — audit will be skipped on run',
+    });
+    // Stack
+    const stack = detectStack(config?.projectRoot || process.cwd());
+    checks.push({
+        name: 'stack',
+        ok: stack.id !== 'unknown',
+        message: stack.id !== 'unknown' ? `${stack.label} (${stack.confidence})` : 'Could not detect stack',
+    });
+    if (config) {
+        try {
+            const validation = await validateIntegrationCode(config.apiUrl, config.integrationCode);
+            checks.push({
+                name: 'integration',
+                ok: Boolean(validation.valid),
+                message: validation.valid
+                    ? `${validation.integration?.name} (${validation.integration?.status})`
+                    : validation.message || 'Invalid integration code',
+            });
+        }
+        catch (e) {
+            checks.push({ name: 'integration', ok: false, message: e?.message || 'API unreachable' });
+        }
+        const readKey = resolveReadKey(config);
+        if (readKey) {
+            try {
+                const pull = await fetchPublicSnapshot(config.apiUrl, config.integrationCode, readKey, {
+                    limit: 1,
+                    include: ['stats'],
+                });
+                checks.push({
+                    name: 'read-key',
+                    ok: pull.ok,
+                    message: pull.ok ? 'Read key valid — pull enabled' : pull.error || `HTTP ${pull.status}`,
+                });
+            }
+            catch (e) {
+                checks.push({ name: 'read-key', ok: false, message: e?.message || 'Read key check failed' });
+            }
+        }
+        else {
+            checks.push({
+                name: 'read-key',
+                ok: true,
+                message: 'Not configured (optional — enables pull)',
+            });
+        }
+    }
+    const allOk = checks.every((c) => c.ok);
+    if (opts.json) {
+        return { ok: allOk, checks };
+    }
+    title('Sublyzer Snapshot — doctor');
+    for (const c of checks) {
+        if (c.ok)
+            ok(`${c.name}: ${c.message}`);
+        else
+            warn(`${c.name}: ${c.message}`);
+    }
+    console.log('');
+    if (allOk)
+        ok('All required checks passed');
+    else
+        info('Fix issues above, then re-run doctor');
+    return { ok: allOk, checks };
+}
+//# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAUxD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB,EAAE;IACtD,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,SAAS;IACT,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;IACpG,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,gBAAgB,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,eAAe;IACf,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,SAAS,IAAI,EAAE;QACnB,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,QAAQ,CAAC,IAAI,gBAAgB;KAC3G,CAAC,CAAC;IAEH,MAAM;IACN,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7G,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,8CAA8C;KAChH,CAAC,CAAC;IAEH,QAAQ;IACR,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,KAAK,CAAC,EAAE,KAAK,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,wBAAwB;KACpG,CAAC,CAAC;IAEH,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YACxF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,aAAa;gBACnB,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC7B,OAAO,EAAE,UAAU,CAAC,KAAK;oBACvB,CAAC,CAAC,GAAG,UAAU,CAAC,WAAW,EAAE,IAAI,KAAK,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG;oBACvE,CAAC,CAAC,UAAU,CAAC,OAAO,IAAI,0BAA0B;aACrD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,iBAAiB,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE;oBACrF,KAAK,EAAE,CAAC;oBACR,OAAO,EAAE,CAAC,OAAO,CAAC;iBACnB,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,UAAU;oBAChB,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE;iBACzF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,uBAAuB,EAAE,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,UAAU;gBAChB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAExC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,EAAE;YAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;;YACnC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,KAAK;QAAE,EAAE,CAAC,4BAA4B,CAAC,CAAC;;QACvC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAElD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,10 @@
+export type InitOptions = {
+    code?: string;
+    readKey?: string;
+    apiUrl?: string;
+    dashboardUrl?: string;
+    yes?: boolean;
+    skipGitignore?: boolean;
+};
+export declare function runInit(opts?: InitOptions): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,wBAAsB,OAAO,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyFnE"}

package/dist/commands/init.js

@@ -0,0 +1,88 @@
+import * as path from 'node:path';
+import { DEFAULT_API_URL, DEFAULT_DASHBOARD_URL, INTEGRATION_CODE_RE, } from '../constants.js';
+import { saveConfig } from '../config.js';
+import { detectStack, readProjectName } from '../detect/stack.js';
+import { validateIntegrationCode } from '../api/sublyzer.js';
+import { promptOptional, promptRequired } from '../utils/prompt.js';
+import { ensureGitignore, printSdkHint } from '../utils/gitignore.js';
+import { info, ok, title } from '../utils/log.js';
+export async function runInit(opts = {}) {
+    title('Sublyzer Snapshot — init');
+    const root = process.cwd();
+    const stack = detectStack(root);
+    const projectName = readProjectName(root);
+    info(`Project: ${projectName}`);
+    info(`Detected stack: ${stack.label} (${stack.confidence})`);
+    if (stack.hints.length) {
+        for (const h of stack.hints)
+            info(`  hint: ${h}`);
+    }
+    const apiUrl = (opts.apiUrl || process.env.SUBLYZER_API_URL || DEFAULT_API_URL).replace(/\/$/, '');
+    const dashboardUrl = (opts.dashboardUrl || process.env.SUBLYZER_DASHBOARD_URL || DEFAULT_DASHBOARD_URL).replace(/\/$/, '');
+    let code = (opts.code || process.env.SUBLYZER_INTEGRATION_CODE || process.env.SUBLYZER_CODE || '')
+        .trim()
+        .toUpperCase();
+    if (!code) {
+        console.log('');
+        console.log('  Get your integration code at: https://sublyzer.com/dashboard');
+        console.log('  (Integrations → copy the 24-character code)');
+        console.log('');
+        code = (await promptRequired('Integration code (24 chars)', (v) => {
+            const c = v.trim().toUpperCase();
+            if (!INTEGRATION_CODE_RE.test(c))
+                return 'Code must be 24 uppercase letters/digits (A-Z, 0-9)';
+            return null;
+        })).trim().toUpperCase();
+    }
+    else if (!INTEGRATION_CODE_RE.test(code)) {
+        throw new Error('Invalid integration code format (expected 24 uppercase alphanumeric characters)');
+    }
+    let readKey = (opts.readKey || process.env.SUBLYZER_READ_KEY || '').trim();
+    if (!readKey && !opts.yes) {
+        console.log('');
+        console.log('  Optional: apiReadKey enables `sublyzer-snapshot pull` (read data back).');
+        console.log('  Get it from: GET /integrations/{id}/read-access (dashboard JWT) or skip for now.');
+        console.log('');
+        readKey = (await promptOptional('Read key (optional, press Enter to skip)')) || '';
+    }
+    info(`Validating code against ${apiUrl}…`);
+    const validation = await validateIntegrationCode(apiUrl, code);
+    if (!validation.valid || !validation.integration) {
+        throw new Error(validation.message || 'Integration code not found or invalid');
+    }
+    ok(`Integration "${validation.integration.name}" (${validation.integration.status})`);
+    const now = new Date().toISOString();
+    const config = {
+        version: 1,
+        integrationCode: code,
+        apiUrl,
+        dashboardUrl,
+        integrationId: validation.integration.id,
+        integrationName: validation.integration.name,
+        projectName,
+        projectRoot: root,
+        stack: stack.id,
+        createdAt: now,
+        updatedAt: now,
+    };
+    if (readKey.length >= 32) {
+        config.readKey = readKey;
+        ok('Read key saved — `pull` command enabled');
+    }
+    saveConfig(config, root);
+    ok(`Wrote ${path.join('.sublyzer', 'snapshot.json')}`);
+    if (!opts.skipGitignore) {
+        ensureGitignore(root);
+    }
+    console.log('');
+    console.log('  Next steps:');
+    console.log('    sublyzer-snapshot run       Scan + push to Sublyzer');
+    console.log('    sublyzer-snapshot report    Markdown health report');
+    console.log('    sublyzer-snapshot compare   Diff vs previous scan');
+    console.log('    sublyzer-snapshot ci        GitHub Actions template');
+    console.log('    sublyzer-snapshot doctor    Verify setup');
+    console.log('    sublyzer-snapshot open      Open dashboard');
+    console.log('');
+    printSdkHint(stack.id, code, apiUrl);
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAuB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAWlD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoB,EAAE;IAClD,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAElC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAE1C,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,mBAAmB,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK;YAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnG,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,qBAAqB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE3H,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;SAC/F,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IAEjB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,GAAG,CAAC,MAAM,cAAc,CAAC,6BAA6B,EAAE,CAAC,CAAC,EAAE,EAAE;YAChE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,qDAAqD,CAAC;YAC/F,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;SAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,GAAG,CAAC,MAAM,cAAc,CAAC,0CAA0C,CAAC,CAAC,IAAI,EAAE,CAAC;IACrF,CAAC;IAED,IAAI,CAAC,2BAA2B,MAAM,GAAG,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE/D,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,IAAI,uCAAuC,CAAC,CAAC;IACjF,CAAC;IAED,EAAE,CAAC,gBAAgB,UAAU,CAAC,WAAW,CAAC,IAAI,MAAM,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IAEtF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAmB;QAC7B,OAAO,EAAE,CAAC;QACV,eAAe,EAAE,IAAI;QACrB,MAAM;QACN,YAAY;QACZ,aAAa,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE;QACxC,eAAe,EAAE,UAAU,CAAC,WAAW,CAAC,IAAI;QAC5C,WAAW;QACX,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,KAAK,CAAC,EAAE;QACf,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,EAAE,CAAC,yCAAyC,CAAC,CAAC;IAChD,CAAC;IAED,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzB,EAAE,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;IAEvD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,eAAe,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC"}

package/dist/commands/open.d.ts

@@ -0,0 +1,2 @@
+export declare function runOpen(): Promise<void>;
+//# sourceMappingURL=open.d.ts.map

package/dist/commands/open.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open.d.ts","sourceRoot":"","sources":["../../src/commands/open.ts"],"names":[],"mappings":"AAIA,wBAAsB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAc7C"}

package/dist/commands/open.js

@@ -0,0 +1,16 @@
+import { spawn } from 'node:child_process';
+import { dashboardIntegrationUrl, loadConfig } from '../config.js';
+import { info, ok } from '../utils/log.js';
+export async function runOpen() {
+    const config = loadConfig();
+    const url = dashboardIntegrationUrl(config);
+    info(`Opening ${url}`);
+    const cmd = process.platform === 'win32'
+        ? spawn('cmd', ['/c', 'start', '', url], { detached: true, stdio: 'ignore' })
+        : process.platform === 'darwin'
+            ? spawn('open', [url], { detached: true, stdio: 'ignore' })
+            : spawn('xdg-open', [url], { detached: true, stdio: 'ignore' });
+    cmd.unref();
+    ok('Browser launched (or copy the URL above)');
+}
+//# sourceMappingURL=open.js.map

package/dist/commands/open.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open.js","sourceRoot":"","sources":["../../src/commands/open.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,OAAO;IAC3B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;IAEvB,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC7E,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAC7B,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YAC3D,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEtE,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,EAAE,CAAC,0CAA0C,CAAC,CAAC;AACjD,CAAC"}

package/dist/commands/pull.d.ts

@@ -0,0 +1,9 @@
+export type PullOptions = {
+    readKey?: string;
+    limit?: number;
+    windowDays?: number;
+    include?: string;
+    json?: boolean;
+};
+export declare function runPull(opts?: PullOptions): Promise<unknown>;
+//# sourceMappingURL=pull.d.ts.map

package/dist/commands/pull.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.d.ts","sourceRoot":"","sources":["../../src/commands/pull.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,wBAAsB,OAAO,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAuCtE"}

package/dist/commands/pull.js

@@ -0,0 +1,34 @@
+import { loadConfig, resolveReadKey } from '../config.js';
+import { fetchPublicSnapshot } from '../api/sublyzer.js';
+import { info, ok, title } from '../utils/log.js';
+export async function runPull(opts = {}) {
+    const config = loadConfig();
+    const readKey = resolveReadKey(config, opts.readKey);
+    if (!readKey || readKey.length < 32) {
+        throw new Error('Read key required. Set SUBLYZER_READ_KEY, save in config via init, or pass --read-key. ' +
+            'Get it from GET /integrations/{id}/read-access (dashboard JWT).');
+    }
+    const include = opts.include
+        ? opts.include.split(',').map((s) => s.trim()).filter(Boolean)
+        : ['stats', 'events'];
+    if (!opts.json) {
+        title('Sublyzer Snapshot — pull');
+        info(`Fetching from ${config.apiUrl}…`);
+    }
+    const result = await fetchPublicSnapshot(config.apiUrl, config.integrationCode, readKey, {
+        limit: opts.limit ?? 50,
+        windowDays: opts.windowDays ?? 7,
+        include,
+    });
+    if (!result.ok) {
+        throw new Error(result.error || `Pull failed (HTTP ${result.status})`);
+    }
+    if (opts.json) {
+        return result.data;
+    }
+    ok('Data fetched');
+    console.log(JSON.stringify(result.data, null, 2));
+    console.log('');
+    return result.data;
+}
+//# sourceMappingURL=pull.js.map

package/dist/commands/pull.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.js","sourceRoot":"","sources":["../../src/commands/pull.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAUlD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoB,EAAE;IAClD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAErD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,yFAAyF;YACvF,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO;QAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9D,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAExB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAClC,IAAI,CAAC,iBAAiB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE;QACvF,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC;QAChC,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,qBAAqB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,EAAE,CAAC,cAAc,CAAC,CAAC;IACnB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/commands/report.d.ts

@@ -0,0 +1,8 @@
+export type ReportOptions = {
+    out?: string;
+    rescan?: boolean;
+    skipAudit?: boolean;
+    json?: boolean;
+};
+export declare function runReport(opts?: ReportOptions): Promise<string>;
+//# sourceMappingURL=report.d.ts.map

package/dist/commands/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/commands/report.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,wBAAsB,SAAS,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiDzE"}

package/dist/commands/report.js

@@ -0,0 +1,47 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { dashboardIntegrationUrl, loadConfig } from '../config.js';
+import { diffSnapshots, loadLastSnapshot, loadPreviousSnapshot } from '../scan/history.js';
+import { buildProjectSnapshot } from '../scan/snapshot.js';
+import { computeHealthScore } from '../scan/health-score.js';
+import { renderMarkdownReport } from '../report/markdown.js';
+import { info, ok, title } from '../utils/log.js';
+export async function runReport(opts = {}) {
+    const config = loadConfig();
+    const root = config.projectRoot || process.cwd();
+    let snapshot = opts.rescan
+        ? buildProjectSnapshot(root, { skipAudit: opts.skipAudit })
+        : loadLastSnapshot(root);
+    if (!snapshot) {
+        if (!opts.rescan) {
+            info('No cached scan — running fresh scan…');
+            snapshot = buildProjectSnapshot(root, { skipAudit: opts.skipAudit });
+        }
+        else {
+            throw new Error('Scan failed');
+        }
+    }
+    const health = snapshot.health ?? computeHealthScore(snapshot);
+    const previous = loadPreviousSnapshot(root);
+    const diff = previous
+        ? diffSnapshots(previous, snapshot, health.score - (previous.health?.score ?? previous.summary?.healthScore ?? 0))
+        : null;
+    const markdown = renderMarkdownReport(snapshot, health, diff, dashboardIntegrationUrl(config));
+    if (opts.json) {
+        return JSON.stringify({ markdown, health, snapshot: { scannedAt: snapshot.scannedAt, projectName: snapshot.projectName } }, null, 2);
+    }
+    if (opts.out) {
+        const outPath = path.resolve(root, opts.out);
+        fs.mkdirSync(path.dirname(outPath), { recursive: true });
+        fs.writeFileSync(outPath, markdown, 'utf8');
+        if (!opts.json) {
+            title('Sublyzer Snapshot — report');
+            ok(`Wrote ${outPath}`);
+        }
+        return markdown;
+    }
+    title('Sublyzer Snapshot — report');
+    console.log(markdown);
+    return markdown;
+}
+//# sourceMappingURL=report.js.map

package/dist/commands/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/commands/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AASlD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB,EAAE;IACtD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEjD,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM;QACxB,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3D,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAE3B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,sCAAsC,CAAC,CAAC;YAC7C,QAAQ,GAAG,oBAAoB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,IAAI,GACR,QAAQ;QACN,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;QAClH,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,QAAQ,GAAG,oBAAoB,CACnC,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,uBAAuB,CAAC,MAAM,CAAC,CAChC,CAAC;IAEF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvI,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACpC,EAAE,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/commands/run.d.ts

@@ -0,0 +1,21 @@
+import type { FailOnLevel } from '../constants.js';
+import { diffSnapshots } from '../scan/history.js';
+import { type ProjectSnapshot } from '../scan/snapshot.js';
+export type RunOptions = {
+    dryRun?: boolean;
+    skipAudit?: boolean;
+    skipOutdated?: boolean;
+    json?: boolean;
+    failOn?: FailOnLevel;
+};
+export type RunResult = {
+    success: boolean;
+    dryRun: boolean;
+    snapshot: ProjectSnapshot;
+    eventsSent?: number;
+    dashboardUrl?: string;
+    diff?: ReturnType<typeof diffSnapshots>;
+    policyFailed?: boolean;
+};
+export declare function runScan(opts?: RunOptions): Promise<RunResult>;
+//# sourceMappingURL=run.d.ts.map

package/dist/commands/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,aAAa,EAGd,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;IACxC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAuBF,wBAAsB,OAAO,CAAC,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAgFvE"}