sudeshi-code-review 0.0.0-stage → 1.0.0

package/dist/analyzer/rules/hardcodedSecret.js

@@ -0,0 +1,66 @@
+import ts from 'typescript';
+const SECRET_NAME_PATTERN = /^(apiKey|api_key|paymentApiKey|accessToken|access_token|internalToken|internal_token|databaseUrl|database_url|password|secret|clientSecret|client_secret|token)$/i;
+function isStaticSecretString(node) {
+    return ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node);
+}
+export const hardcodedSecretRule = (file) => {
+    const findings = [];
+    const sourceFile = ts.createSourceFile(file.path, file.content, ts.ScriptTarget.Latest, true, file.path.endsWith('.tsx') ? ts.ScriptKind.TSX : ts.ScriptKind.TS);
+    function visit(node) {
+        if (ts.isVariableDeclaration(node) &&
+            ts.isIdentifier(node.name) &&
+            SECRET_NAME_PATTERN.test(node.name.text) &&
+            node.initializer &&
+            isStaticSecretString(node.initializer)) {
+            const { line } = sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile));
+            const value = node.initializer.text;
+            if (value) {
+                findings.push({
+                    id: 'hardcoded-secret',
+                    category: 'security',
+                    severity: 'high',
+                    confidence: 1,
+                    file: file.path,
+                    line: line + 1,
+                    rule: 'hardcoded-secret',
+                    message: 'A hardcoded secret may be present',
+                    evidence: file.content.split('\n')[line]?.trim() ?? '',
+                    requiresAIReview: true,
+                });
+            }
+        }
+        if (ts.isPropertyAssignment(node) &&
+            ts.isIdentifier(node.name) &&
+            SECRET_NAME_PATTERN.test(node.name.text) &&
+            isStaticSecretString(node.initializer)) {
+            const propertyName = node.name.text;
+            const value = node.initializer.text;
+            if (!value) {
+                ts.forEachChild(node, visit);
+                return;
+            }
+            if (/^(databaseUrl|database_url)$/i.test(propertyName) &&
+                !/^[a-z][a-z0-9+.-]*:\/\/[^/@:]+:[^/@]+@/i.test(value)) {
+                ts.forEachChild(node, visit);
+                return;
+            }
+            const { line } = sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile));
+            findings.push({
+                id: 'hardcoded-secret',
+                category: 'security',
+                severity: 'high',
+                confidence: 1,
+                file: file.path,
+                line: line + 1,
+                rule: 'hardcoded-secret',
+                message: 'A hardcoded secret may be present',
+                evidence: file.content.split('\n')[line]?.trim() ?? '',
+                requiresAIReview: true,
+            });
+        }
+        ts.forEachChild(node, visit);
+    }
+    visit(sourceFile);
+    return findings;
+};
+//# sourceMappingURL=hardcodedSecret.js.map

package/dist/analyzer/rules/hardcodedSecret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardcodedSecret.js","sourceRoot":"","sources":["../../../src/analyzer/rules/hardcodedSecret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAI5B,MAAM,mBAAmB,GACvB,mKAAmK,CAAC;AAEtK,SAAS,oBAAoB,CAC3B,IAAmB;IAEnB,OAAO,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAS,CAAC,IAAI,EAAE,EAAE;IAChD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAClE,CAAC;IAEF,SAAS,KAAK,CAAC,IAAa;QAC1B,IACE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC9B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,IAAI,CAAC,WAAW;YAChB,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EACtC,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,6BAA6B,CACvD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC1B,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAEpC,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,kBAAkB;oBACtB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,CAAC;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,GAAG,CAAC;oBACd,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,mCAAmC;oBAC5C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;oBACtD,gBAAgB,EAAE,IAAI;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IACE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;YAC7B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EACtC,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,IACE,+BAA+B,CAAC,IAAI,CAAC,YAAY,CAAC;gBAClD,CAAC,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,EACtD,CAAC;gBACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,6BAA6B,CACvD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC1B,CAAC;YAEF,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,kBAAkB;gBACtB,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,CAAC;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,GAAG,CAAC;gBACd,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,mCAAmC;gBAC5C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;gBACtD,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;QACL,CAAC;QAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,CAAC;IAClB,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC"}

package/dist/analyzer/rules/unsafeLink.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from '../rule.js';
+export declare const unsafeLinkRule: Rule;
+//# sourceMappingURL=unsafeLink.d.ts.map

package/dist/analyzer/rules/unsafeLink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafeLink.d.ts","sourceRoot":"","sources":["../../../src/analyzer/rules/unsafeLink.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,eAAO,MAAM,cAAc,EAAE,IA4E5B,CAAC"}

package/dist/analyzer/rules/unsafeLink.js

@@ -0,0 +1,54 @@
+import ts from 'typescript';
+export const unsafeLinkRule = (file) => {
+    const findings = [];
+    const sourceFile = ts.createSourceFile(file.path, file.content, ts.ScriptTarget.Latest, true, file.path.endsWith('.tsx') ? ts.ScriptKind.TSX : ts.ScriptKind.TS);
+    const dangerousVariables = new Set();
+    function collectDangerousVariables(node) {
+        if (ts.isVariableDeclaration(node) &&
+            ts.isIdentifier(node.name) &&
+            node.initializer &&
+            ts.isStringLiteral(node.initializer) &&
+            /^\s*javascript\s*:/i.test(node.initializer.text)) {
+            dangerousVariables.add(node.name.text);
+        }
+        ts.forEachChild(node, collectDangerousVariables);
+    }
+    collectDangerousVariables(sourceFile);
+    function visit(node) {
+        if (ts.isJsxAttribute(node) &&
+            node.name.getText(sourceFile) === 'href' &&
+            node.initializer) {
+            let isDangerous = false;
+            if (ts.isStringLiteral(node.initializer)) {
+                isDangerous = /^\s*javascript\s*:/i.test(node.initializer.text);
+            }
+            else if (ts.isJsxExpression(node.initializer)) {
+                const expression = node.initializer.expression;
+                if (expression &&
+                    ts.isIdentifier(expression) &&
+                    dangerousVariables.has(expression.text)) {
+                    isDangerous = true;
+                }
+            }
+            if (isDangerous) {
+                const { line } = sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile));
+                findings.push({
+                    id: 'unsafe-link',
+                    category: 'security',
+                    severity: 'high',
+                    confidence: 1,
+                    file: file.path,
+                    line: line + 1,
+                    rule: 'unsafe-link',
+                    message: 'JavaScript URLs in links can execute code when activated.',
+                    evidence: file.content.split('\n')[line]?.trim() ?? '',
+                    requiresAIReview: true,
+                });
+            }
+        }
+        ts.forEachChild(node, visit);
+    }
+    visit(sourceFile);
+    return findings;
+};
+//# sourceMappingURL=unsafeLink.js.map

package/dist/analyzer/rules/unsafeLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafeLink.js","sourceRoot":"","sources":["../../../src/analyzer/rules/unsafeLink.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAI5B,MAAM,CAAC,MAAM,cAAc,GAAS,CAAC,IAAI,EAAE,EAAE;IAC3C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAClE,CAAC;IAEF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,SAAS,yBAAyB,CAAC,IAAa;QAC9C,IACE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC9B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,WAAW;YAChB,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;YACpC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EACjD,CAAC;YACD,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;IACnD,CAAC;IAED,yBAAyB,CAAC,UAAU,CAAC,CAAC;IAEtC,SAAS,KAAK,CAAC,IAAa;QAC1B,IACE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,MAAM;YACxC,IAAI,CAAC,WAAW,EAChB,CAAC;YACD,IAAI,WAAW,GAAG,KAAK,CAAC;YAExB,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzC,WAAW,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAClE,CAAC;iBAAM,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;gBAE/C,IACE,UAAU;oBACV,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC;oBAC3B,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EACvC,CAAC;oBACD,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC;YACH,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,6BAA6B,CACvD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC1B,CAAC;gBAEF,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,aAAa;oBACjB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,CAAC;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,GAAG,CAAC;oBACd,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,2DAA2D;oBACpE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;oBACtD,gBAAgB,EAAE,IAAI;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,CAAC;IAClB,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC"}

package/dist/analyzer/sourceFile.d.ts

@@ -0,0 +1,5 @@
+export type SourceFile = {
+    path: string;
+    content: string;
+};
+//# sourceMappingURL=sourceFile.d.ts.map

package/dist/analyzer/sourceFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceFile.d.ts","sourceRoot":"","sources":["../../src/analyzer/sourceFile.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/analyzer/sourceFile.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sourceFile.js.map

package/dist/analyzer/sourceFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceFile.js","sourceRoot":"","sources":["../../src/analyzer/sourceFile.ts"],"names":[],"mappings":""}

package/dist/cli.d.ts

@@ -0,0 +1,12 @@
+import { scanRepository as defaultScanRepository } from './scanner/scanRepository.js';
+import type { Finding } from './analyzer/finding.js';
+import type { SourceFile } from './analyzer/sourceFile.js';
+import type { ReviewEngine as ReviewEngineType } from './review/reviewEngine.js';
+type CLIDependencies = {
+    scanRepository: typeof defaultScanRepository;
+    analyze: (files: SourceFile[]) => Finding[];
+    reviewEngine?: Pick<ReviewEngineType, 'review'>;
+};
+export declare function runCLI(args: string[], dependencies?: CLIDependencies): Promise<void>;
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,IAAI,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAK3D,OAAO,KAAK,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAKjF,KAAK,eAAe,GAAG;IACrB,cAAc,EAAE,OAAO,qBAAqB,CAAC;IAC7C,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,CAAC;IAC5C,YAAY,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;CACjD,CAAC;AAEF,wBAAsB,MAAM,CAC1B,IAAI,EAAE,MAAM,EAAE,EACd,YAAY,GAAE,eAQb,GACA,OAAO,CAAC,IAAI,CAAC,CAmFf"}

package/dist/cli.js

@@ -0,0 +1,82 @@
+import { existsSync, statSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { scanRepository as defaultScanRepository } from './scanner/scanRepository.js';
+import { analyze as defaultAnalyze } from './analyzer/analyze.js';
+import { dangerousHtmlRule } from './analyzer/rules/dangerousHtml.js';
+import { hardcodedSecretRule } from './analyzer/rules/hardcodedSecret.js';
+import { unsafeLinkRule } from './analyzer/rules/unsafeLink.js';
+import { generateMarkdownReport } from './reporting/markdownReporter.js';
+import { SarvamProvider } from './ai/sarvamProvider.js';
+import { ReviewEngine } from './review/reviewEngine.js';
+export async function runCLI(args, dependencies = {
+    scanRepository: defaultScanRepository,
+    analyze: (files) => defaultAnalyze(files, [
+        dangerousHtmlRule,
+        hardcodedSecretRule,
+        unsafeLinkRule,
+    ]),
+}) {
+    if (args.includes('--help') || args.includes('-h')) {
+        process.stdout.write([
+            'Sudeshi Code Review',
+            '',
+            'Usage:',
+            '  sudeshi-code-review <repository-path>',
+            '',
+            'Options:',
+            '  -h, --help       Show this help message',
+            '  -v, --version    Show the installed version',
+            '',
+            'Environment:',
+            '  SARVAM_API_KEY   Optional API key for AI-assisted review',
+            '',
+        ].join('\n'));
+        return;
+    }
+    if (args.includes('--version') || args.includes('-v')) {
+        const packageJson = JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8'));
+        process.stdout.write(`${packageJson.version}\n`);
+        return;
+    }
+    const repositoryPath = args[0];
+    if (!repositoryPath) {
+        process.stderr.write('Error: repository path is required.\n');
+        process.exit(1);
+        return;
+    }
+    const absolutePath = resolve(repositoryPath);
+    if (!existsSync(absolutePath)) {
+        process.stderr.write('Error: repository path does not exist.\n');
+        process.exit(1);
+        return;
+    }
+    if (!statSync(absolutePath).isDirectory()) {
+        process.stderr.write('Error: repository path must be a directory.\n');
+        process.exit(1);
+        return;
+    }
+    const filePaths = await dependencies.scanRepository(absolutePath);
+    const files = await Promise.all(filePaths.map(async (filePath) => ({
+        path: filePath,
+        content: await readFile(resolve(absolutePath, filePath), 'utf8'),
+    })));
+    const findings = dependencies.analyze(files);
+    const apiKey = process.env.SARVAM_API_KEY;
+    const reviewEngine = dependencies.reviewEngine ??
+        (apiKey
+            ? new ReviewEngine({
+                provider: new SarvamProvider({ apiKey }),
+            })
+            : undefined);
+    const result = reviewEngine
+        ? await reviewEngine.review({ files, findings })
+        : {
+            findings,
+            filesScanned: files.length,
+            durationMs: 0,
+        };
+    const report = generateMarkdownReport(result);
+    process.stdout.write(`${report}\n`);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,IAAI,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGtF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEhE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAQxD,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAc,EACd,eAAgC;IAC9B,cAAc,EAAE,qBAAqB;IACrC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,cAAc,CAAC,KAAK,EAAE;QACpB,iBAAiB;QACjB,mBAAmB;QACnB,cAAc;KACf,CAAC;CACL;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;YACE,qBAAqB;YACrB,EAAE;YACF,QAAQ;YACR,yCAAyC;YACzC,EAAE;YACF,UAAU;YACV,2CAA2C;YAC3C,+CAA+C;YAC/C,EAAE;YACF,cAAc;YACd,4DAA4D;YAC5D,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAC5B,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC7C,CAAC;QAEzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,OAAO,IAAI,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAE/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAE7C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;IAElE,MAAM,KAAK,GAAiB,MAAM,OAAO,CAAC,GAAG,CAC3C,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;KACjE,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE1C,MAAM,YAAY,GAChB,YAAY,CAAC,YAAY;QACzB,CAAC,MAAM;YACL,CAAC,CAAC,IAAI,YAAY,CAAC;gBACf,QAAQ,EAAE,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;aACzC,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjB,MAAM,MAAM,GAAG,YAAY;QACzB,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAChD,CAAC,CAAC;YACE,QAAQ;YACR,YAAY,EAAE,KAAK,CAAC,MAAM;YAC1B,UAAU,EAAE,CAAC;SACd,CAAC;IAEN,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;AACtC,CAAC"}

package/dist/context/buildContext.d.ts

@@ -0,0 +1,11 @@
+import type { Finding } from '../analyzer/finding.js';
+import type { SourceFile } from '../analyzer/sourceFile.js';
+export type ReviewContext = {
+    finding: Finding;
+    code: string;
+    startLine: number;
+    endLine: number;
+    imports: string[];
+};
+export declare function buildContext(sourceFile: SourceFile, finding: Finding): ReviewContext;
+//# sourceMappingURL=buildContext.d.ts.map

package/dist/context/buildContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildContext.d.ts","sourceRoot":"","sources":["../../src/context/buildContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAIF,wBAAgB,YAAY,CAC1B,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,OAAO,GACf,aAAa,CAiBf"}

package/dist/context/buildContext.js

@@ -0,0 +1,17 @@
+const CONTEXT_LINES = 3;
+export function buildContext(sourceFile, finding) {
+    const lines = sourceFile.content.split('\n');
+    const startIndex = Math.max(0, finding.line - 1 - CONTEXT_LINES);
+    const endIndex = Math.min(lines.length, finding.line + CONTEXT_LINES);
+    const imports = lines
+        .map((line) => line.trim())
+        .filter((line) => line.startsWith('import '));
+    return {
+        finding,
+        code: lines.slice(startIndex, endIndex).join('\n'),
+        startLine: startIndex + 1,
+        endLine: endIndex,
+        imports,
+    };
+}
+//# sourceMappingURL=buildContext.js.map

package/dist/context/buildContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildContext.js","sourceRoot":"","sources":["../../src/context/buildContext.ts"],"names":[],"mappings":"AAWA,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,MAAM,UAAU,YAAY,CAC1B,UAAsB,EACtB,OAAgB;IAEhB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE7C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,GAAG,aAAa,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAG,KAAK;SAClB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhD,OAAO;QACL,OAAO;QACP,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAClD,SAAS,EAAE,UAAU,GAAG,CAAC;QACzB,OAAO,EAAE,QAAQ;QACjB,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { runCLI } from './cli.js';
+await runCLI(process.argv.slice(2));
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/reporting/markdownReporter.d.ts

@@ -0,0 +1,3 @@
+import type { ReviewResult } from '../review/reviewEngine.js';
+export declare function generateMarkdownReport(result: ReviewResult): string;
+//# sourceMappingURL=markdownReporter.d.ts.map

package/dist/reporting/markdownReporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdownReporter.d.ts","sourceRoot":"","sources":["../../src/reporting/markdownReporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CA0DnE"}

package/dist/reporting/markdownReporter.js

@@ -0,0 +1,40 @@
+export function generateMarkdownReport(result) {
+    const highCount = result.findings.filter((finding) => finding.severity === 'high').length;
+    const mediumCount = result.findings.filter((finding) => finding.severity === 'medium').length;
+    const lowCount = result.findings.filter((finding) => finding.severity === 'low').length;
+    const summary = [
+        '## Summary',
+        '',
+        `- Files scanned: ${result.filesScanned}`,
+        `- Total findings: ${result.findings.length}`,
+        `- High severity: ${highCount}`,
+        `- Medium severity: ${mediumCount}`,
+        `- Low severity: ${lowCount}`,
+    ].join('\n');
+    const findings = result.findings
+        .map((finding) => {
+        const sections = [
+            `### ${finding.severity.toUpperCase()} - ${finding.file}:${finding.line}`,
+            finding.message,
+            `**Rule confidence:** ${Math.round(finding.confidence * 100)}%`,
+        ];
+        if (finding.evidence) {
+            sections.push(`**Evidence:**\n\n\`\`\`tsx\n${finding.evidence}\n\`\`\``);
+        }
+        if (finding.aiReview) {
+            sections.push([
+                '### AI Review',
+                `- **Valid finding:** ${finding.aiReview.valid}`,
+                `- **AI confidence:** ${Math.round(finding.aiReview.confidence * 100)}%`,
+                `- **Reason:** ${finding.aiReview.reason}`,
+                `- **Recommendation:** ${finding.aiReview.recommendation}`,
+                `- **Assessment:** ${finding.aiReview.valid ? 'Valid finding' : 'False positive'}`,
+            ].join('\n'));
+        }
+        return sections.join('\n\n');
+    })
+        .join('\n\n');
+    const findingsSection = result.findings.length === 0 ? 'No findings detected.' : findings;
+    return `# Sudeshi Code Review\n\n${summary}\n\n${findingsSection}`;
+}
+//# sourceMappingURL=markdownReporter.js.map

package/dist/reporting/markdownReporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdownReporter.js","sourceRoot":"","sources":["../../src/reporting/markdownReporter.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,sBAAsB,CAAC,MAAoB;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACtC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CACzC,CAAC,MAAM,CAAC;IACT,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACxC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAC3C,CAAC,MAAM,CAAC;IACT,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACrC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CACxC,CAAC,MAAM,CAAC;IAET,MAAM,OAAO,GAAG;QACd,YAAY;QACZ,EAAE;QACF,oBAAoB,MAAM,CAAC,YAAY,EAAE;QACzC,qBAAqB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;QAC7C,oBAAoB,SAAS,EAAE;QAC/B,sBAAsB,WAAW,EAAE;QACnC,mBAAmB,QAAQ,EAAE;KAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ;SAC7B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG;YACf,OAAO,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE;YACzE,OAAO,CAAC,OAAO;YACf,wBAAwB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG;SAChE,CAAC;QAEF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CACX,+BAA+B,OAAO,CAAC,QAAQ,UAAU,CAC1D,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CACX;gBACE,eAAe;gBACf,wBAAwB,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE;gBAChD,wBAAwB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG;gBACxE,iBAAiB,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAC1C,yBAAyB,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE;gBAC1D,qBACE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAC7C,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhB,MAAM,eAAe,GACnB,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEpE,OAAO,4BAA4B,OAAO,OAAO,eAAe,EAAE,CAAC;AACrE,CAAC"}

package/dist/review/reviewEngine.d.ts

@@ -0,0 +1,24 @@
+import type { AIProvider } from '../ai/provider.js';
+import type { Finding } from '../analyzer/finding.js';
+import type { SourceFile } from '../analyzer/sourceFile.js';
+export type ReviewResult = {
+    findings: Finding[];
+    filesScanned: number;
+    durationMs: number;
+};
+type ReviewEngineConfig = {
+    provider: AIProvider;
+};
+type ReviewInput = {
+    files: SourceFile[];
+    findings: Finding[];
+};
+export declare class ReviewEngine {
+    private readonly config;
+    constructor(config: ReviewEngineConfig);
+    private redactHardcodedSecret;
+    private redactSecretValue;
+    review(input: ReviewInput): Promise<ReviewResult>;
+}
+export {};
+//# sourceMappingURL=reviewEngine.d.ts.map

package/dist/review/reviewEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewEngine.d.ts","sourceRoot":"","sources":["../../src/review/reviewEngine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAG5D,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,QAAQ,EAAE,UAAU,CAAC;CACtB,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,CAAC;AAaF,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,kBAAkB;IAEvD,OAAO,CAAC,qBAAqB;IAoE7B,OAAO,CAAC,iBAAiB;IAcnB,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CA8DxD"}

package/dist/review/reviewEngine.js

@@ -0,0 +1,116 @@
+import ts from 'typescript';
+import { buildContext } from '../context/buildContext.js';
+const SECRET_ASSIGNMENT_PATTERN = String.raw `\b([\w$]*(?:api[_-]?key|password|secret|client[_-]?secret|token|database[_-]?url))\s*(=|:)\s*(?:(['"])((?:\\.|[^\\])*?)\3|(\`)((?:\\.|(?!\$\{)[^\\])*?)\5)`;
+function createSecretAssignmentRegex(global = false) {
+    return new RegExp(SECRET_ASSIGNMENT_PATTERN, global ? 'gi' : 'i');
+}
+function extractSecretValue(evidence) {
+    const match = evidence?.match(createSecretAssignmentRegex());
+    return match?.[4] ?? match?.[6];
+}
+export class ReviewEngine {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    redactHardcodedSecret(source, filePath = 'source.ts') {
+        const scriptKind = filePath.endsWith('.tsx')
+            ? ts.ScriptKind.TSX
+            : filePath.endsWith('.jsx')
+                ? ts.ScriptKind.JSX
+                : filePath.endsWith('.js')
+                    ? ts.ScriptKind.JS
+                    : ts.ScriptKind.TS;
+        const sourceFile = ts.createSourceFile(filePath, source, ts.ScriptTarget.Latest, true, scriptKind);
+        const secretNamePattern = /(?:api[_-]?key|password|secret|client[_-]?secret|token|database[_-]?url)/i;
+        const edits = [];
+        function visit(node) {
+            let name;
+            let initializer;
+            if (ts.isVariableDeclaration(node) && ts.isIdentifier(node.name)) {
+                name = node.name.text;
+                initializer = node.initializer;
+            }
+            else if (ts.isPropertyAssignment(node) && ts.isIdentifier(node.name)) {
+                name = node.name.text;
+                initializer = node.initializer;
+            }
+            if (name &&
+                secretNamePattern.test(name) &&
+                initializer &&
+                (ts.isStringLiteral(initializer) ||
+                    ts.isNoSubstitutionTemplateLiteral(initializer) ||
+                    ts.isTemplateExpression(initializer))) {
+                edits.push({
+                    start: initializer.getStart(sourceFile),
+                    end: initializer.getEnd(),
+                });
+            }
+            ts.forEachChild(node, visit);
+        }
+        visit(sourceFile);
+        let redactedSource = source;
+        for (const edit of edits.sort((a, b) => b.start - a.start)) {
+            redactedSource =
+                redactedSource.slice(0, edit.start) +
+                    "'[REDACTED]'" +
+                    redactedSource.slice(edit.end);
+        }
+        return redactedSource;
+    }
+    redactSecretValue(source, finding) {
+        if (finding.rule !== 'hardcoded-secret') {
+            return source;
+        }
+        const secret = extractSecretValue(finding.evidence);
+        if (!secret) {
+            return source;
+        }
+        return source.replaceAll(secret, '[REDACTED]');
+    }
+    async review(input) {
+        const startTime = performance.now();
+        const findings = input.findings.map((finding) => ({ ...finding }));
+        for (const finding of findings) {
+            if (!finding.requiresAIReview) {
+                continue;
+            }
+            const sourceFile = input.files.find((file) => file.path === finding.file);
+            if (!sourceFile) {
+                continue;
+            }
+            if (finding.rule === 'hardcoded-secret' &&
+                !extractSecretValue(finding.evidence)) {
+                continue;
+            }
+            const safeSourceFile = {
+                ...sourceFile,
+                content: this.redactSecretValue(this.redactHardcodedSecret(sourceFile.content, sourceFile.path), finding),
+            };
+            const safeFinding = {
+                ...finding,
+                ...(finding.evidence !== undefined && {
+                    evidence: this.redactSecretValue(this.redactHardcodedSecret(finding.evidence, sourceFile.path), finding),
+                }),
+            };
+            const context = buildContext(safeSourceFile, safeFinding);
+            const aiResult = await this.config.provider.analyze({
+                ...context,
+                finding: { ...context.finding },
+            });
+            finding.aiReview = {
+                valid: aiResult.valid,
+                ...(aiResult.severity !== undefined && { severity: aiResult.severity }),
+                confidence: aiResult.confidence,
+                reason: aiResult.reason,
+                recommendation: aiResult.recommendation,
+            };
+        }
+        return {
+            findings,
+            filesScanned: input.files.length,
+            durationMs: performance.now() - startTime,
+        };
+    }
+}
+//# sourceMappingURL=reviewEngine.js.map

package/dist/review/reviewEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewEngine.js","sourceRoot":"","sources":["../../src/review/reviewEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAI5B,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAiB1D,MAAM,yBAAyB,GAAG,MAAM,CAAC,GAAG,CAAA,4JAA4J,CAAC;AAEzM,SAAS,2BAA2B,CAAC,MAAM,GAAG,KAAK;IACjD,OAAO,IAAI,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA4B;IACtD,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC,2BAA2B,EAAE,CAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,MAA0B;QAA1B,WAAM,GAAN,MAAM,CAAoB;IAAG,CAAC;IAEnD,qBAAqB,CAC3B,MAAc,EACd,QAAQ,GAAG,WAAW;QAEtB,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1C,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG;YACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACzB,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG;gBACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACxB,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE;oBAClB,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAEzB,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CACpC,QAAQ,EACR,MAAM,EACN,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,IAAI,EACJ,UAAU,CACX,CAAC;QAEF,MAAM,iBAAiB,GACrB,2EAA2E,CAAC;QAE9E,MAAM,KAAK,GAA0C,EAAE,CAAC;QAExD,SAAS,KAAK,CAAC,IAAa;YAC1B,IAAI,IAAwB,CAAC;YAC7B,IAAI,WAAsC,CAAC;YAE3C,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACjC,CAAC;iBAAM,IAAI,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACjC,CAAC;YAED,IACE,IAAI;gBACJ,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5B,WAAW;gBACX,CAAC,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC;oBAC9B,EAAE,CAAC,+BAA+B,CAAC,WAAW,CAAC;oBAC/C,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,EACvC,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;oBACvC,GAAG,EAAE,WAAW,CAAC,MAAM,EAAE;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,CAAC;QAElB,IAAI,cAAc,GAAG,MAAM,CAAC;QAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,cAAc;gBACZ,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC;oBACnC,cAAc;oBACd,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,iBAAiB,CAAC,MAAc,EAAE,OAAgB;QACxD,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;QAEnE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;YAE1E,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,IACE,OAAO,CAAC,IAAI,KAAK,kBAAkB;gBACnC,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,EACrC,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,cAAc,GAAG;gBACrB,GAAG,UAAU;gBACb,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAC7B,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,EAC/D,OAAO,CACR;aACF,CAAC;YAEF,MAAM,WAAW,GAAG;gBAClB,GAAG,OAAO;gBACV,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI;oBACpC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAC9B,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAC7D,OAAO,CACR;iBACF,CAAC;aACH,CAAC;YAEF,MAAM,OAAO,GAAG,YAAY,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAClD,GAAG,OAAO;gBACV,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;aAChC,CAAC,CAAC;YAEH,OAAO,CAAC,QAAQ,GAAG;gBACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACvE,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,cAAc,EAAE,QAAQ,CAAC,cAAc;aACxC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ;YACR,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAChC,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;SAC1C,CAAC;IACJ,CAAC;CACF"}

package/dist/scanner/scanRepository.d.ts

@@ -0,0 +1,2 @@
+export declare function scanRepository(repositoryPath: string): Promise<string[]>;
+//# sourceMappingURL=scanRepository.d.ts.map

package/dist/scanner/scanRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanRepository.d.ts","sourceRoot":"","sources":["../../src/scanner/scanRepository.ts"],"names":[],"mappings":"AAaA,wBAAsB,cAAc,CAClC,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,EAAE,CAAC,CAkCnB"}

package/dist/scanner/scanRepository.js

@@ -0,0 +1,44 @@
+import { readdir } from 'node:fs/promises';
+import path from 'node:path';
+const SOURCE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx']);
+const IGNORED_DIRECTORIES = new Set([
+    '.git',
+    'node_modules',
+    'dist',
+    'build',
+    '.next',
+    'coverage',
+]);
+export async function scanRepository(repositoryPath) {
+    const files = [];
+    function toRelativePath(repositoryPath, filePath) {
+        const relativePath = path.relative(repositoryPath, filePath);
+        return relativePath.replaceAll(path.sep, '/');
+    }
+    async function scanDirectory(directoryPath) {
+        const entries = await readdir(directoryPath, {
+            withFileTypes: true,
+        });
+        for (const entry of entries) {
+            const entryPath = path.join(directoryPath, entry.name);
+            if (entry.isDirectory()) {
+                if (IGNORED_DIRECTORIES.has(entry.name)) {
+                    continue;
+                }
+                await scanDirectory(entryPath);
+                continue;
+            }
+            if (entry.isFile()) {
+                const extension = path.extname(entry.name);
+                if (!SOURCE_EXTENSIONS.has(extension))
+                    continue;
+                if (/\.(test|spec)\.(ts|tsx|js|jsx)$/.test(entry.name))
+                    continue;
+                files.push(toRelativePath(repositoryPath, entryPath));
+            }
+        }
+    }
+    await scanDirectory(repositoryPath);
+    return files.sort();
+}
+//# sourceMappingURL=scanRepository.js.map

package/dist/scanner/scanRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanRepository.js","sourceRoot":"","sources":["../../src/scanner/scanRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAClE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,OAAO;IACP,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,cAAsB;IAEtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,SAAS,cAAc,CAAC,cAAsB,EAAE,QAAgB;QAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC7D,OAAO,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IACD,KAAK,UAAU,aAAa,CAAC,aAAqB;QAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE;YAC3C,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QAEH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEvD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxC,SAAS;gBACX,CAAC;gBACD,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;oBAAE,SAAS;gBAChD,IAAI,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACjE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,aAAa,CAAC,cAAc,CAAC,CAAC;IAEpC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}