sudeshi-code-review 0.0.0-stage → 1.1.0

package/dist/analyzer/rules/hardcodedSecret.js

@@ -0,0 +1,75 @@
+import ts from 'typescript';
+const SECRET_NAME_PATTERN = /^(apiKey|api_key|paymentApiKey|accessToken|access_token|internalToken|internal_token|databaseUrl|database_url|password|secret|clientSecret|client_secret|token)$/i;
+function isStaticSecretString(node) {
+    return ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node);
+}
+function redactSecretEvidence(line, value, literalText) {
+    if (!value) {
+        return line;
+    }
+    if (literalText) {
+        return line.replace(literalText, literalText[0] + '[REDACTED]' + literalText[0]);
+    }
+    return line.replace(value, '[REDACTED]');
+}
+export const hardcodedSecretRule = (file) => {
+    const findings = [];
+    const sourceFile = ts.createSourceFile(file.path, file.content, ts.ScriptTarget.Latest, true, file.path.endsWith('.tsx') ? ts.ScriptKind.TSX : ts.ScriptKind.TS);
+    function visit(node) {
+        if (ts.isVariableDeclaration(node) &&
+            ts.isIdentifier(node.name) &&
+            SECRET_NAME_PATTERN.test(node.name.text) &&
+            node.initializer &&
+            isStaticSecretString(node.initializer)) {
+            const { line } = sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile));
+            const value = node.initializer.text;
+            if (value) {
+                findings.push({
+                    id: 'hardcoded-secret',
+                    category: 'security',
+                    severity: 'high',
+                    confidence: 1,
+                    file: file.path,
+                    line: line + 1,
+                    rule: 'hardcoded-secret',
+                    message: 'A hardcoded secret may be present',
+                    evidence: redactSecretEvidence(file.content.split('\n')[line]?.trim() ?? '', value, node.initializer.getText(sourceFile)),
+                    requiresAIReview: true,
+                });
+            }
+        }
+        if (ts.isPropertyAssignment(node) &&
+            ts.isIdentifier(node.name) &&
+            SECRET_NAME_PATTERN.test(node.name.text) &&
+            isStaticSecretString(node.initializer)) {
+            const propertyName = node.name.text;
+            const value = node.initializer.text;
+            if (!value) {
+                ts.forEachChild(node, visit);
+                return;
+            }
+            if (/^(databaseUrl|database_url)$/i.test(propertyName) &&
+                !/^[a-z][a-z0-9+.-]*:\/\/[^/@:]+:[^/@]+@/i.test(value)) {
+                ts.forEachChild(node, visit);
+                return;
+            }
+            const { line } = sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile));
+            findings.push({
+                id: 'hardcoded-secret',
+                category: 'security',
+                severity: 'high',
+                confidence: 1,
+                file: file.path,
+                line: line + 1,
+                rule: 'hardcoded-secret',
+                message: 'A hardcoded secret may be present',
+                evidence: redactSecretEvidence(file.content.split('\n')[line]?.trim() ?? '', value, node.initializer.getText(sourceFile)),
+                requiresAIReview: true,
+            });
+        }
+        ts.forEachChild(node, visit);
+    }
+    visit(sourceFile);
+    return findings;
+};
+//# sourceMappingURL=hardcodedSecret.js.map

package/dist/analyzer/rules/hardcodedSecret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardcodedSecret.js","sourceRoot":"","sources":["../../../src/analyzer/rules/hardcodedSecret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAI5B,MAAM,mBAAmB,GACvB,mKAAmK,CAAC;AAEtK,SAAS,oBAAoB,CAC3B,IAAmB;IAEnB,OAAO,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAY,EACZ,KAAa,EACb,WAAoB;IAEpB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,OAAO,CACjB,WAAW,EACX,WAAW,CAAC,CAAC,CAAC,GAAG,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,CAC/C,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAS,CAAC,IAAI,EAAE,EAAE;IAChD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAClE,CAAC;IAEF,SAAS,KAAK,CAAC,IAAa;QAC1B,IACE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC9B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,IAAI,CAAC,WAAW;YAChB,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EACtC,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,6BAA6B,CACvD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC1B,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAEpC,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,kBAAkB;oBACtB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,CAAC;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,GAAG,CAAC;oBACd,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,mCAAmC;oBAC5C,QAAQ,EAAE,oBAAoB,CAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAC5C,KAAK,EACL,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CACrC;oBACD,gBAAgB,EAAE,IAAI;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IACE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;YAC7B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EACtC,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,IACE,+BAA+B,CAAC,IAAI,CAAC,YAAY,CAAC;gBAClD,CAAC,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,EACtD,CAAC;gBACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,6BAA6B,CACvD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC1B,CAAC;YAEF,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,kBAAkB;gBACtB,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,CAAC;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,GAAG,CAAC;gBACd,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,mCAAmC;gBAC5C,QAAQ,EAAE,oBAAoB,CAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAC5C,KAAK,EACL,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CACrC;gBACD,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;QACL,CAAC;QAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,CAAC;IAClB,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC"}

package/dist/analyzer/rules/unsafeLink.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from '../rule.js';
+export declare const unsafeLinkRule: Rule;
+//# sourceMappingURL=unsafeLink.d.ts.map

package/dist/analyzer/rules/unsafeLink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafeLink.d.ts","sourceRoot":"","sources":["../../../src/analyzer/rules/unsafeLink.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,eAAO,MAAM,cAAc,EAAE,IA+F5B,CAAC"}

package/dist/analyzer/rules/unsafeLink.js

@@ -0,0 +1,68 @@
+import ts from 'typescript';
+export const unsafeLinkRule = (file) => {
+    const findings = [];
+    const sourceFile = ts.createSourceFile(file.path, file.content, ts.ScriptTarget.Latest, true, file.path.endsWith('.tsx') ? ts.ScriptKind.TSX : ts.ScriptKind.TS);
+    function isDangerousString(node) {
+        return ((ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node)) &&
+            /^\s*javascript\s*:/i.test(node.text));
+    }
+    function findVisibleDeclaration(reference) {
+        let current = reference.parent;
+        while (current) {
+            if (ts.isBlock(current) || ts.isSourceFile(current)) {
+                for (const statement of current.statements) {
+                    if (!ts.isVariableStatement(statement))
+                        continue;
+                    for (const declaration of statement.declarationList.declarations) {
+                        if (ts.isIdentifier(declaration.name) &&
+                            declaration.name.text === reference.text &&
+                            declaration.initializer &&
+                            declaration.getStart(sourceFile) < reference.getStart(sourceFile)) {
+                            return declaration;
+                        }
+                    }
+                }
+            }
+            current = current.parent;
+        }
+        return undefined;
+    }
+    function visit(node) {
+        if (ts.isJsxAttribute(node) &&
+            ts.isIdentifier(node.name) &&
+            node.name.text === 'href' &&
+            node.initializer) {
+            let dangerous = false;
+            if (ts.isStringLiteral(node.initializer)) {
+                dangerous = /^\s*javascript\s*:/i.test(node.initializer.text);
+            }
+            else if (ts.isJsxExpression(node.initializer)) {
+                const expression = node.initializer.expression;
+                if (expression && ts.isIdentifier(expression)) {
+                    const declaration = findVisibleDeclaration(expression);
+                    dangerous = Boolean(declaration?.initializer &&
+                        isDangerousString(declaration.initializer));
+                }
+            }
+            if (dangerous) {
+                const { line } = sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile));
+                findings.push({
+                    id: 'unsafe-link',
+                    category: 'security',
+                    severity: 'high',
+                    confidence: 1,
+                    file: file.path,
+                    line: line + 1,
+                    rule: 'unsafe-link',
+                    message: 'JavaScript URLs in links can execute code when activated.',
+                    evidence: file.content.split('\n')[line]?.trim() ?? '',
+                    requiresAIReview: true,
+                });
+            }
+        }
+        ts.forEachChild(node, visit);
+    }
+    visit(sourceFile);
+    return findings;
+};
+//# sourceMappingURL=unsafeLink.js.map

package/dist/analyzer/rules/unsafeLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafeLink.js","sourceRoot":"","sources":["../../../src/analyzer/rules/unsafeLink.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAI5B,MAAM,CAAC,MAAM,cAAc,GAAS,CAAC,IAAI,EAAE,EAAE;IAC3C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CACpC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAClE,CAAC;IAEF,SAAS,iBAAiB,CAAC,IAAmB;QAC5C,OAAO,CACL,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC;YACtE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CACtC,CAAC;IACJ,CAAC;IACD,SAAS,sBAAsB,CAC7B,SAAwB;QAExB,IAAI,OAAO,GAAwB,SAAS,CAAC,MAAM,CAAC;QAEpD,OAAO,OAAO,EAAE,CAAC;YACf,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpD,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBAC3C,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC;wBAAE,SAAS;oBAEjD,KAAK,MAAM,WAAW,IAAI,SAAS,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC;wBACjE,IACE,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC;4BACjC,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;4BACxC,WAAW,CAAC,WAAW;4BACvB,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,EACjE,CAAC;4BACD,OAAO,WAAW,CAAC;wBACrB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,SAAS,KAAK,CAAC,IAAa;QAC1B,IACE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;YACvB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;YACzB,IAAI,CAAC,WAAW,EAChB,CAAC;YACD,IAAI,SAAS,GAAG,KAAK,CAAC;YAEtB,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzC,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAChE,CAAC;iBAAM,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;gBAE/C,IAAI,UAAU,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9C,MAAM,WAAW,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;oBAEvD,SAAS,GAAG,OAAO,CACjB,WAAW,EAAE,WAAW;wBACxB,iBAAiB,CAAC,WAAW,CAAC,WAAW,CAAC,CAC3C,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,6BAA6B,CACvD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC1B,CAAC;gBAEF,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,aAAa;oBACjB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,CAAC;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,GAAG,CAAC;oBACd,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,2DAA2D;oBACpE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;oBACtD,gBAAgB,EAAE,IAAI;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,CAAC;IAClB,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC"}

package/dist/analyzer/sourceFile.d.ts

@@ -0,0 +1,5 @@
+export type SourceFile = {
+    path: string;
+    content: string;
+};
+//# sourceMappingURL=sourceFile.d.ts.map

package/dist/analyzer/sourceFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceFile.d.ts","sourceRoot":"","sources":["../../src/analyzer/sourceFile.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/analyzer/sourceFile.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sourceFile.js.map

package/dist/analyzer/sourceFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceFile.js","sourceRoot":"","sources":["../../src/analyzer/sourceFile.ts"],"names":[],"mappings":""}

package/dist/cli.d.ts

@@ -0,0 +1,12 @@
+import { scanRepository as defaultScanRepository } from './scanner/scanRepository.js';
+import type { Finding } from './analyzer/finding.js';
+import type { SourceFile } from './analyzer/sourceFile.js';
+import type { ReviewEngine as ReviewEngineType } from './review/reviewEngine.js';
+type CLIDependencies = {
+    scanRepository: typeof defaultScanRepository;
+    analyze: (files: SourceFile[]) => Finding[];
+    reviewEngine?: Pick<ReviewEngineType, 'review'>;
+};
+export declare function runCLI(args: string[], dependencies?: CLIDependencies): Promise<void>;
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,IAAI,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAK3D,OAAO,KAAK,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAQjF,KAAK,eAAe,GAAG;IACrB,cAAc,EAAE,OAAO,qBAAqB,CAAC;IAC7C,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,CAAC;IAC5C,YAAY,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;CACjD,CAAC;AAQF,wBAAsB,MAAM,CAC1B,IAAI,EAAE,MAAM,EAAE,EACd,YAAY,GAAE,eAQb,GACA,OAAO,CAAC,IAAI,CAAC,CAwIf"}

package/dist/cli.js

@@ -0,0 +1,134 @@
+import { existsSync, statSync } from 'node:fs';
+import { readFile, writeFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { scanRepository as defaultScanRepository } from './scanner/scanRepository.js';
+import { analyze as defaultAnalyze } from './analyzer/analyze.js';
+import { dangerousHtmlRule } from './analyzer/rules/dangerousHtml.js';
+import { hardcodedSecretRule } from './analyzer/rules/hardcodedSecret.js';
+import { unsafeLinkRule } from './analyzer/rules/unsafeLink.js';
+import { generateMarkdownReport } from './reporting/markdownReporter.js';
+import { SarvamProvider } from './ai/sarvamProvider.js';
+import { ReviewEngine } from './review/reviewEngine.js';
+import { generateJsonReport } from './reporting/jsonReporter.js';
+import { generateTerminalReport } from './reporting/terminalReporter.js';
+function writeProgress(message) {
+    if (process.stderr.isTTY) {
+        process.stderr.write(`${message}\n`);
+    }
+}
+export async function runCLI(args, dependencies = {
+    scanRepository: defaultScanRepository,
+    analyze: (files) => defaultAnalyze(files, [
+        dangerousHtmlRule,
+        hardcodedSecretRule,
+        unsafeLinkRule,
+    ]),
+}) {
+    if (args.includes('--help') || args.includes('-h')) {
+        process.stdout.write([
+            'Sudeshi Code Review',
+            '',
+            'Usage:',
+            '  sudeshi-code-review <repository-path>',
+            '',
+            'Options:',
+            '  -h, --help       Show this help message',
+            '  -v, --version    Show the installed version',
+            '  --format <format>  Report format: markdown or json (default: markdown)',
+            '  --output <path>    Save the report to a file instead of stdout',
+            '',
+            'Environment:',
+            '  SARVAM_API_KEY   Optional API key for AI-assisted review',
+            '',
+        ].join('\n'));
+        return;
+    }
+    if (args.includes('--version') || args.includes('-v')) {
+        const packageJson = JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8'));
+        process.stdout.write(`${packageJson.version}\n`);
+        return;
+    }
+    const formatIndex = args.indexOf('--format');
+    const format = formatIndex === -1 ? 'markdown' : args[formatIndex + 1];
+    if (formatIndex !== -1 && (!format || format.startsWith('--'))) {
+        process.stderr.write('Error: --format requires a value.\n');
+        process.exit(1);
+        return;
+    }
+    if (format !== 'markdown' && format !== 'json') {
+        process.stderr.write('Error: --format must be either markdown or json.\n');
+        process.exit(1);
+        return;
+    }
+    const outputIndex = args.indexOf('--output');
+    const outputPath = outputIndex === -1 ? undefined : args[outputIndex + 1];
+    if (outputIndex !== -1 && (!outputPath || outputPath.startsWith('--'))) {
+        process.stderr.write('Error: --output requires a file path.\n');
+        process.exit(1);
+        return;
+    }
+    const repositoryPath = args[0];
+    if (!repositoryPath) {
+        process.stderr.write('Error: repository path is required.\n');
+        process.exit(1);
+        return;
+    }
+    const absolutePath = resolve(repositoryPath);
+    if (!existsSync(absolutePath)) {
+        process.stderr.write('Error: repository path does not exist.\n');
+        process.exit(1);
+        return;
+    }
+    if (!statSync(absolutePath).isDirectory()) {
+        process.stderr.write('Error: repository path must be a directory.\n');
+        process.exit(1);
+        return;
+    }
+    writeProgress('Scanning repository...');
+    const filePaths = await dependencies.scanRepository(absolutePath);
+    const files = await Promise.all(filePaths.map(async (filePath) => ({
+        path: filePath,
+        content: await readFile(resolve(absolutePath, filePath), 'utf8'),
+    })));
+    writeProgress('Analyzing files...');
+    const findings = dependencies.analyze(files);
+    const apiKey = process.env.SARVAM_API_KEY;
+    let reviewEngine = dependencies.reviewEngine;
+    if (!reviewEngine && apiKey) {
+        writeProgress('Initializing AI review...');
+        reviewEngine = new ReviewEngine({
+            provider: new SarvamProvider({ apiKey }),
+        });
+    }
+    let result;
+    if (reviewEngine) {
+        writeProgress('Running AI review...');
+        result = await reviewEngine.review({ files, findings });
+    }
+    else {
+        result = {
+            findings,
+            filesScanned: files.length,
+            durationMs: 0,
+        };
+    }
+    writeProgress('Generating report...');
+    if (outputPath) {
+        const report = format === 'json'
+            ? generateJsonReport(result)
+            : generateMarkdownReport(result);
+        await writeFile(resolve(outputPath), `${report}\n`, 'utf8');
+        return;
+    }
+    if (format === 'json') {
+        process.stdout.write(`${generateJsonReport(result)}\n`);
+        return;
+    }
+    if (process.stdout.isTTY) {
+        process.stdout.write(`${generateTerminalReport(result)}\n`);
+    }
+    else {
+        process.stdout.write(`${generateMarkdownReport(result)}\n`);
+    }
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,IAAI,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGtF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAGhE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAQzE,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAc,EACd,eAAgC;IAC9B,cAAc,EAAE,qBAAqB;IACrC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,cAAc,CAAC,KAAK,EAAE;QACpB,iBAAiB;QACjB,mBAAmB;QACnB,cAAc;KACf,CAAC;CACL;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;YACE,qBAAqB;YACrB,EAAE;YACF,QAAQ;YACR,yCAAyC;YACzC,EAAE;YACF,UAAU;YACV,2CAA2C;YAC3C,+CAA+C;YAC/C,0EAA0E;YAC1E,kEAAkE;YAClE,EAAE;YACF,cAAc;YACd,4DAA4D;YAC5D,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAC5B,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC7C,CAAC;QAEzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,OAAO,IAAI,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;IAEvE,IAAI,WAAW,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;IAE1E,IAAI,WAAW,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAE/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAE7C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,aAAa,CAAC,wBAAwB,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;IAElE,MAAM,KAAK,GAAiB,MAAM,OAAO,CAAC,GAAG,CAC3C,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;KACjE,CAAC,CAAC,CACJ,CAAC;IAEF,aAAa,CAAC,oBAAoB,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC1C,IAAI,YAAY,GAAG,YAAY,CAAC,YAAY,CAAC;IAE7C,IAAI,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;QAC5B,aAAa,CAAC,2BAA2B,CAAC,CAAC;QAC3C,YAAY,GAAG,IAAI,YAAY,CAAC;YAC9B,QAAQ,EAAE,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAoB,CAAC;IAEzB,IAAI,YAAY,EAAE,CAAC;QACjB,aAAa,CAAC,sBAAsB,CAAC,CAAC;QACtC,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,MAAM,GAAG;YACP,QAAQ;YACR,YAAY,EAAE,KAAK,CAAC,MAAM;YAC1B,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,sBAAsB,CAAC,CAAC;IAEtC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GACV,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAC5B,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAErC,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,MAAM,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/context/buildContext.d.ts

@@ -0,0 +1,11 @@
+import type { Finding } from '../analyzer/finding.js';
+import type { SourceFile } from '../analyzer/sourceFile.js';
+export type ReviewContext = {
+    finding: Finding;
+    code: string;
+    startLine: number;
+    endLine: number;
+    imports: string[];
+};
+export declare function buildContext(sourceFile: SourceFile, finding: Finding): ReviewContext;
+//# sourceMappingURL=buildContext.d.ts.map

package/dist/context/buildContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildContext.d.ts","sourceRoot":"","sources":["../../src/context/buildContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAIF,wBAAgB,YAAY,CAC1B,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,OAAO,GACf,aAAa,CAiBf"}

package/dist/context/buildContext.js

@@ -0,0 +1,17 @@
+const CONTEXT_LINES = 3;
+export function buildContext(sourceFile, finding) {
+    const lines = sourceFile.content.split('\n');
+    const startIndex = Math.max(0, finding.line - 1 - CONTEXT_LINES);
+    const endIndex = Math.min(lines.length, finding.line + CONTEXT_LINES);
+    const imports = lines
+        .map((line) => line.trim())
+        .filter((line) => line.startsWith('import '));
+    return {
+        finding,
+        code: lines.slice(startIndex, endIndex).join('\n'),
+        startLine: startIndex + 1,
+        endLine: endIndex,
+        imports,
+    };
+}
+//# sourceMappingURL=buildContext.js.map

package/dist/context/buildContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildContext.js","sourceRoot":"","sources":["../../src/context/buildContext.ts"],"names":[],"mappings":"AAWA,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,MAAM,UAAU,YAAY,CAC1B,UAAsB,EACtB,OAAgB;IAEhB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE7C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,GAAG,aAAa,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAG,KAAK;SAClB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhD,OAAO;QACL,OAAO;QACP,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAClD,SAAS,EAAE,UAAU,GAAG,CAAC;QACzB,OAAO,EAAE,QAAQ;QACjB,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { runCLI } from './cli.js';
+await runCLI(process.argv.slice(2));
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/reporting/jsonReporter.d.ts

@@ -0,0 +1,3 @@
+import type { ReviewResult } from '../review/reviewEngine.js';
+export declare function generateJsonReport(result: ReviewResult): string;
+//# sourceMappingURL=jsonReporter.d.ts.map

package/dist/reporting/jsonReporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonReporter.d.ts","sourceRoot":"","sources":["../../src/reporting/jsonReporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAE/D"}

package/dist/reporting/jsonReporter.js

@@ -0,0 +1,4 @@
+export function generateJsonReport(result) {
+    return JSON.stringify(result, null, 2);
+}
+//# sourceMappingURL=jsonReporter.js.map

package/dist/reporting/jsonReporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonReporter.js","sourceRoot":"","sources":["../../src/reporting/jsonReporter.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/reporting/markdownReporter.d.ts

@@ -0,0 +1,3 @@
+import type { ReviewResult } from '../review/reviewEngine.js';
+export declare function generateMarkdownReport(result: ReviewResult): string;
+//# sourceMappingURL=markdownReporter.d.ts.map

package/dist/reporting/markdownReporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdownReporter.d.ts","sourceRoot":"","sources":["../../src/reporting/markdownReporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CA0DnE"}

package/dist/reporting/markdownReporter.js

@@ -0,0 +1,40 @@
+export function generateMarkdownReport(result) {
+    const highCount = result.findings.filter((finding) => finding.severity === 'high').length;
+    const mediumCount = result.findings.filter((finding) => finding.severity === 'medium').length;
+    const lowCount = result.findings.filter((finding) => finding.severity === 'low').length;
+    const summary = [
+        '## Summary',
+        '',
+        `- Files scanned: ${result.filesScanned}`,
+        `- Total findings: ${result.findings.length}`,
+        `- High severity: ${highCount}`,
+        `- Medium severity: ${mediumCount}`,
+        `- Low severity: ${lowCount}`,
+    ].join('\n');
+    const findings = result.findings
+        .map((finding) => {
+        const sections = [
+            `### ${finding.severity.toUpperCase()} - ${finding.file}:${finding.line}`,
+            finding.message,
+            `**Rule confidence:** ${Math.round(finding.confidence * 100)}%`,
+        ];
+        if (finding.evidence) {
+            sections.push(`**Evidence:**\n\n\`\`\`tsx\n${finding.evidence}\n\`\`\``);
+        }
+        if (finding.aiReview) {
+            sections.push([
+                '### AI Review',
+                `- **Valid finding:** ${finding.aiReview.valid}`,
+                `- **AI confidence:** ${Math.round(finding.aiReview.confidence * 100)}%`,
+                `- **Reason:** ${finding.aiReview.reason}`,
+                `- **Recommendation:** ${finding.aiReview.recommendation}`,
+                `- **Assessment:** ${finding.aiReview.valid ? 'Valid finding' : 'False positive'}`,
+            ].join('\n'));
+        }
+        return sections.join('\n\n');
+    })
+        .join('\n\n');
+    const findingsSection = result.findings.length === 0 ? 'No findings detected.' : findings;
+    return `# Sudeshi Code Review\n\n${summary}\n\n${findingsSection}`;
+}
+//# sourceMappingURL=markdownReporter.js.map

package/dist/reporting/markdownReporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdownReporter.js","sourceRoot":"","sources":["../../src/reporting/markdownReporter.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,sBAAsB,CAAC,MAAoB;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACtC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CACzC,CAAC,MAAM,CAAC;IACT,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACxC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAC3C,CAAC,MAAM,CAAC;IACT,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACrC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CACxC,CAAC,MAAM,CAAC;IAET,MAAM,OAAO,GAAG;QACd,YAAY;QACZ,EAAE;QACF,oBAAoB,MAAM,CAAC,YAAY,EAAE;QACzC,qBAAqB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;QAC7C,oBAAoB,SAAS,EAAE;QAC/B,sBAAsB,WAAW,EAAE;QACnC,mBAAmB,QAAQ,EAAE;KAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ;SAC7B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG;YACf,OAAO,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE;YACzE,OAAO,CAAC,OAAO;YACf,wBAAwB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG;SAChE,CAAC;QAEF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CACX,+BAA+B,OAAO,CAAC,QAAQ,UAAU,CAC1D,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CACX;gBACE,eAAe;gBACf,wBAAwB,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE;gBAChD,wBAAwB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG;gBACxE,iBAAiB,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAC1C,yBAAyB,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE;gBAC1D,qBACE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAC7C,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhB,MAAM,eAAe,GACnB,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEpE,OAAO,4BAA4B,OAAO,OAAO,eAAe,EAAE,CAAC;AACrE,CAAC"}

package/dist/reporting/terminalReporter.d.ts

@@ -0,0 +1,3 @@
+import type { ReviewResult } from '../review/reviewEngine.js';
+export declare function generateTerminalReport(result: ReviewResult): string;
+//# sourceMappingURL=terminalReporter.d.ts.map

package/dist/reporting/terminalReporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminalReporter.d.ts","sourceRoot":"","sources":["../../src/reporting/terminalReporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CA2CnE"}

package/dist/reporting/terminalReporter.js

@@ -0,0 +1,30 @@
+export function generateTerminalReport(result) {
+    const counts = {
+        high: result.findings.filter((finding) => finding.severity === 'high')
+            .length,
+        medium: result.findings.filter((finding) => finding.severity === 'medium')
+            .length,
+        low: result.findings.filter((finding) => finding.severity === 'low').length,
+    };
+    const lines = [
+        'SUDESHI CODE REVIEW',
+        '===================',
+        '',
+        `Review complete in ${(result.durationMs / 1000).toFixed(2)}s`,
+        `${result.filesScanned} files scanned · ${result.findings.length} findings`,
+        '',
+        `Severity: ${counts.high} high · ${counts.medium} medium · ${counts.low} low`,
+    ];
+    if (result.findings.length === 0) {
+        lines.push('', 'No findings detected.');
+        return lines.join('\n');
+    }
+    for (const finding of result.findings) {
+        lines.push('', `[${finding.severity.toUpperCase()}] ${finding.rule}`, `  ${finding.file}:${finding.line}`, `  ${finding.message}`, `  Confidence: ${Math.round(finding.confidence * 100)}%`);
+        if (finding.aiReview) {
+            lines.push(`  AI assessment: ${finding.aiReview.valid ? 'Valid finding' : 'Possible false positive'}`, `  AI confidence: ${Math.round(finding.aiReview.confidence * 100)}%`, `  Recommendation: ${finding.aiReview.recommendation}`);
+        }
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=terminalReporter.js.map

package/dist/reporting/terminalReporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminalReporter.js","sourceRoot":"","sources":["../../src/reporting/terminalReporter.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,sBAAsB,CAAC,MAAoB;IACzD,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC;aACnE,MAAM;QACT,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;aACvE,MAAM;QACT,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;KAC5E,CAAC;IAEF,MAAM,KAAK,GAAG;QACZ,qBAAqB;QACrB,qBAAqB;QACrB,EAAE;QACF,sBAAsB,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;QAC9D,GAAG,MAAM,CAAC,YAAY,oBAAoB,MAAM,CAAC,QAAQ,CAAC,MAAM,WAAW;QAC3E,EAAE;QACF,aAAa,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,aAAa,MAAM,CAAC,GAAG,MAAM;KAC9E,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,IAAI,EAAE,EACrD,KAAK,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EACnC,KAAK,OAAO,CAAC,OAAO,EAAE,EACtB,iBAAiB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,CACzD,CAAC;QAEF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CACR,oBAAoB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,yBAAyB,EAAE,EAC1F,oBAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,EACpE,qBAAqB,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/review/reviewEngine.d.ts

@@ -0,0 +1,24 @@
+import type { AIProvider } from '../ai/provider.js';
+import type { Finding } from '../analyzer/finding.js';
+import type { SourceFile } from '../analyzer/sourceFile.js';
+export type ReviewResult = {
+    findings: Finding[];
+    filesScanned: number;
+    durationMs: number;
+};
+type ReviewEngineConfig = {
+    provider: AIProvider;
+};
+type ReviewInput = {
+    files: SourceFile[];
+    findings: Finding[];
+};
+export declare class ReviewEngine {
+    private readonly config;
+    constructor(config: ReviewEngineConfig);
+    private redactHardcodedSecret;
+    private redactSecretValue;
+    review(input: ReviewInput): Promise<ReviewResult>;
+}
+export {};
+//# sourceMappingURL=reviewEngine.d.ts.map

package/dist/review/reviewEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewEngine.d.ts","sourceRoot":"","sources":["../../src/review/reviewEngine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAG5D,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,QAAQ,EAAE,UAAU,CAAC;CACtB,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,CAAC;AAaF,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,kBAAkB;IAEvD,OAAO,CAAC,qBAAqB;IAoE7B,OAAO,CAAC,iBAAiB;IAcnB,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CA8DxD"}