trusta 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Trusta (trusta-dev)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,73 @@
+# trusta
+
+[![npm version](https://img.shields.io/npm/v/trusta)](https://www.npmjs.com/package/trusta)
+[![CI](https://github.com/trusta-dev/trusta-cli/actions/workflows/ci.yml/badge.svg)](https://github.com/trusta-dev/trusta-cli/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+
+Generate your trust page in minutes.
+
+```bash
+npx trusta init
+```
+
+## What it does
+
+1. Detects your project name, GitHub repo, and framework
+2. Creates a Trusta workspace and project at [trusta.dev](https://trusta.dev)
+3. Runs a local security scan across your codebase:
+   - Hardcoded secrets (API keys, tokens, credentials)
+   - Supabase RLS bypass vulnerabilities
+   - Exposed admin routes with client-side auth checks
+   - Unprotected API endpoints
+4. Submits findings as evidence — they contribute to your public trust score
+5. Links your GitHub repo so every push triggers an automatic re-scan
+6. Outputs a ready-to-paste GitHub Actions snippet
+
+## Requirements
+
+- Node.js 18 or later
+- A [Trusta](https://trusta.dev) account (free)
+
+## Usage
+
+```bash
+npx trusta init
+```
+
+You'll be prompted for:
+1. Your API token — get it at [app.trusta.dev/app/settings/tokens](https://app.trusta.dev/app/settings/tokens)
+2. Workspace name (your company or app name)
+3. Project name
+
+## Environment variables
+
+| Variable | Description |
+|---|---|
+| `TRUSTA_API_TOKEN` | Skip the token prompt in CI |
+| `TRUSTA_API_URL` | Override API base URL (default: `https://api.trusta.dev`) |
+| `TRUSTA_APP_URL` | Override app base URL (default: `https://app.trusta.dev`) |
+
+## How the security score works
+
+Each scan checks your codebase against four rules. Findings map directly to trust controls on your public trust page:
+
+| Rule | Trust control |
+|---|---|
+| No hardcoded secrets | `security.no_hardcoded_secrets` |
+| No RLS bypass | `security.rls_policies_enforced` |
+| No exposed admin routes | `security.no_exposed_admin_routes` |
+| No unprotected API endpoints | `security.no_unprotected_api_routes` |
+
+Security contributes 25% of the overall trust score.
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) — adding new scanning rules is a great first contribution.
+
+## Security
+
+See [SECURITY.md](SECURITY.md) for how to report vulnerabilities responsibly.
+
+## License
+
+[MIT](LICENSE) © [Trusta](https://trusta.dev)

package/dist/api.d.ts

@@ -0,0 +1,54 @@
+export interface CliApiTransport {
+    readonly baseUrl: string;
+    readonly token: string;
+}
+export interface BootstrapResult {
+    organization: {
+        id: string;
+        name: string;
+    };
+    project: {
+        id: string;
+        name: string;
+        slug: string;
+    };
+}
+export interface CollectorResult {
+    collector: {
+        id: string;
+        name: string;
+    };
+    secret: {
+        value: string;
+    };
+}
+export declare function bootstrapWorkspace(transport: CliApiTransport, input: {
+    workspaceName: string;
+    projectName: string;
+}): Promise<BootstrapResult>;
+export declare function createCollector(transport: CliApiTransport, projectId: string, name: string): Promise<CollectorResult>;
+export interface IngestEvidenceInput {
+    readonly projectId: string;
+    readonly evidenceType: string;
+    readonly sourceType: string;
+    readonly sourceRef: string;
+    readonly observedAt: string;
+    readonly payload: unknown;
+    readonly metadataJson?: unknown;
+}
+export declare function ingestEvidence(collectorTransport: CliApiTransport, input: IngestEvidenceInput): Promise<{
+    evidenceRecordId: string;
+}>;
+export declare function registerProjectRepo(transport: CliApiTransport, projectId: string, repoUrl: string): Promise<{
+    id: string;
+    projectId: string;
+    repoUrl: string;
+    createdAt: string;
+}>;
+export declare function getMe(transport: CliApiTransport): Promise<{
+    user: {
+        id: string;
+        name: string;
+    };
+}>;
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAmCD,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3B;AAED,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,eAAe,EAC1B,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAAC,eAAe,CAAC,CAQ1B;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,eAAe,EAC1B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,eAAe,CAAC,CAK1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,wBAAsB,cAAc,CAClC,kBAAkB,EAAE,eAAe,EACnC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC;IAAE,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAAC,CAOvC;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,eAAe,EAC1B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAEhF;AAED,wBAAsB,KAAK,CACzB,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC;IAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,CAEjD"}

package/dist/api.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bootstrapWorkspace = bootstrapWorkspace;
+exports.createCollector = createCollector;
+exports.ingestEvidence = ingestEvidence;
+exports.registerProjectRepo = registerProjectRepo;
+exports.getMe = getMe;
+async function apiRequest(transport, method, path, body) {
+    const init = {
+        method,
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${transport.token}`,
+        },
+    };
+    if (body !== undefined) {
+        init.body = JSON.stringify(body);
+    }
+    const response = await fetch(`${transport.baseUrl}${path}`, init);
+    const data = (await response.json());
+    if (!response.ok) {
+        const errorData = data;
+        const message = errorData.error?.message ?? `HTTP ${response.status}`;
+        throw new Error(message);
+    }
+    return data;
+}
+async function bootstrapWorkspace(transport, input) {
+    const result = await apiRequest(transport, 'POST', '/onboarding/bootstrap', input);
+    return result;
+}
+async function createCollector(transport, projectId, name) {
+    return apiRequest(transport, 'POST', `/projects/${projectId}/collectors`, {
+        name,
+        allowedActions: ['evidence:write', 'heartbeat:write'],
+    });
+}
+async function ingestEvidence(collectorTransport, input) {
+    return apiRequest(collectorTransport, 'POST', '/ingest/evidence', input);
+}
+async function registerProjectRepo(transport, projectId, repoUrl) {
+    return apiRequest(transport, 'POST', `/projects/${projectId}/repos`, { repoUrl });
+}
+async function getMe(transport) {
+    return apiRequest(transport, 'GET', '/me');
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;AAgDA,gDAWC;AAED,0CASC;AAYD,wCAUC;AAED,kDAMC;AAED,sBAIC;AAjGD,KAAK,UAAU,UAAU,CACvB,SAA0B,EAC1B,MAAgC,EAChC,IAAY,EACZ,IAAc;IAEd,MAAM,IAAI,GAAgB;QACxB,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,SAAS,CAAC,KAAK,EAAE;SAC3C;KACF,CAAC;IACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAElE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiB,CAAC;IAErD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,IAAgB,CAAC;QACnC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,IAAS,CAAC;AACnB,CAAC;AAYM,KAAK,UAAU,kBAAkB,CACtC,SAA0B,EAC1B,KAAqD;IAErD,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,SAAS,EACT,MAAM,EACN,uBAAuB,EACvB,KAAK,CACN,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,SAA0B,EAC1B,SAAiB,EACjB,IAAY;IAEZ,OAAO,UAAU,CAAkB,SAAS,EAAE,MAAM,EAAE,aAAa,SAAS,aAAa,EAAE;QACzF,IAAI;QACJ,cAAc,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAYM,KAAK,UAAU,cAAc,CAClC,kBAAmC,EACnC,KAA0B;IAE1B,OAAO,UAAU,CACf,kBAAkB,EAClB,MAAM,EACN,kBAAkB,EAClB,KAAK,CACN,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,SAA0B,EAC1B,SAAiB,EACjB,OAAe;IAEf,OAAO,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,SAAS,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AACpF,CAAC;AAEM,KAAK,UAAU,KAAK,CACzB,SAA0B;IAE1B,OAAO,UAAU,CAAyC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACrF,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,2 @@
+export declare function init(): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAuBA,wBAAsB,IAAI,kBAiJzB"}

package/dist/commands/init.js

@@ -0,0 +1,156 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.init = init;
+const detect_1 = require("../detect");
+const api_1 = require("../api");
+const scanner_1 = require("../scanner");
+const output_1 = require("../output");
+const prompt_1 = require("../prompt");
+const DEFAULT_API_URL = 'https://api.trusta.dev';
+const DEFAULT_APP_URL = 'https://app.trusta.dev';
+async function init() {
+    (0, output_1.printBanner)();
+    const detection = (0, detect_1.detectProject)();
+    const prompter = (0, prompt_1.createPrompter)();
+    try {
+        // Resolve API base URL
+        const apiUrl = (process.env['TRUSTA_API_URL'] ?? DEFAULT_API_URL).replace(/\/$/, '');
+        const appUrl = (process.env['TRUSTA_APP_URL'] ?? DEFAULT_APP_URL).replace(/\/$/, '');
+        // Resolve API token
+        let token = process.env['TRUSTA_API_TOKEN'] ?? '';
+        if (!token) {
+            (0, output_1.printStep)('Sign in at ' + appUrl + '/app/settings/tokens to get your API token.');
+            token = await prompter.ask('Paste your API token');
+            if (!token) {
+                throw new Error('API token is required. Set TRUSTA_API_TOKEN or enter it when prompted.');
+            }
+        }
+        const transport = { baseUrl: apiUrl, token };
+        // Workspace name
+        const defaultWorkspaceName = detection.projectName
+            ? toTitleCase(detection.projectName)
+            : undefined;
+        (0, output_1.printStep)('Name your workspace (your company or app name).');
+        const workspaceName = await prompter.ask('Workspace name', defaultWorkspaceName);
+        if (!workspaceName) {
+            throw new Error('Workspace name is required.');
+        }
+        // Project name
+        const defaultProjectName = detection.projectName ?? undefined;
+        const projectName = await prompter.ask('First project name', defaultProjectName);
+        if (!projectName) {
+            throw new Error('Project name is required.');
+        }
+        (0, output_1.printDivider)();
+        // Bootstrap workspace + project
+        (0, output_1.printStep)('Creating workspace and project...');
+        const { organization, project } = await (0, api_1.bootstrapWorkspace)(transport, {
+            workspaceName,
+            projectName,
+        });
+        (0, output_1.printSuccess)(`Workspace "${organization.name}" created`);
+        (0, output_1.printSuccess)(`Project "${project.name}" created`);
+        // Create GitHub Actions collector
+        (0, output_1.printStep)('Creating collector credential for GitHub Actions...');
+        const collector = await (0, api_1.createCollector)(transport, project.id, 'github-actions');
+        (0, output_1.printSuccess)('Collector "github-actions" created');
+        // Register the GitHub repo URL so push webhooks resolve to this project
+        if (detection.githubRepoUrl) {
+            try {
+                await (0, api_1.registerProjectRepo)(transport, project.id, detection.githubRepoUrl);
+                (0, output_1.printSuccess)(`GitHub repo linked: ${detection.githubRepoUrl}`);
+            }
+            catch {
+                (0, output_1.printWarning)('Could not link GitHub repo — you can add it later in the dashboard.');
+            }
+        }
+        (0, output_1.printDivider)();
+        // Run local security scan and push findings as evidence
+        (0, output_1.printStep)('Scanning local files for security issues...');
+        const cwd = process.cwd();
+        try {
+            const scanResult = await (0, scanner_1.scanLocalDirectory)(cwd);
+            const { summary, findings } = scanResult;
+            // Use collector secret as bearer token for evidence ingest
+            const collectorTransport = {
+                baseUrl: apiUrl,
+                token: collector.secret.value,
+            };
+            await (0, api_1.ingestEvidence)(collectorTransport, {
+                projectId: project.id,
+                evidenceType: 'security_scan',
+                sourceType: 'local_fs',
+                sourceRef: cwd,
+                observedAt: new Date().toISOString(),
+                payload: { findings: findings.slice(0, 100) }, // cap payload size
+                metadataJson: summary,
+            });
+            // Print scan summary
+            if (summary.criticalCount > 0 || summary.highCount > 0) {
+                (0, output_1.printWarning)(`Security scan found ${summary.criticalCount} critical, ${summary.highCount} high, ` +
+                    `${summary.mediumCount} medium issues across ${summary.filesScanned} files.`);
+                const topFindings = findings
+                    .filter((f) => f.severity === 'critical' || f.severity === 'high')
+                    .slice(0, 5);
+                for (const finding of topFindings) {
+                    process.stdout.write(`  [${finding.severity.toUpperCase()}] ${finding.filePath}:${finding.lineNumber} — ${finding.ruleId}\n`);
+                }
+                if (findings.length > 5) {
+                    process.stdout.write(`  ... and ${findings.length - 5} more. See dashboard for details.\n`);
+                }
+            }
+            else {
+                (0, output_1.printSuccess)(`Security scan passed — ${summary.filesScanned} files scanned, score: ${summary.securityScore}/100`);
+            }
+        }
+        catch {
+            (0, output_1.printWarning)('Security scan could not complete — you can trigger one from the dashboard.');
+        }
+        // Output summary
+        const trustUrl = `${DEFAULT_APP_URL}/trust/${project.slug}`;
+        (0, output_1.printSuccess)('Setup complete!');
+        (0, output_1.printDivider)();
+        (0, output_1.printInfo)('Trust page:', trustUrl);
+        (0, output_1.printInfo)('Dashboard:', `${appUrl}/app`);
+        (0, output_1.printDivider)();
+        // GitHub Actions YAML snippet
+        process.stdout.write('  Add this to your GitHub Actions workflow:\n');
+        (0, output_1.printCode)(buildGitHubActionsYaml(collector.secret.value, apiUrl, project.id, detection.githubRepoUrl ?? undefined));
+        // Agent setup prompt
+        if (detection.framework) {
+            process.stdout.write(`  Detected framework: ${detection.framework}\n\n`);
+        }
+        process.stdout.write('  To configure Trusta with an AI agent (Claude Code, Cursor, Windsurf):\n');
+        (0, output_1.printCode)(buildAgentPrompt(collector.secret.value, apiUrl, project.id));
+        process.stdout.write('  Save TRUSTA_COLLECTOR_SECRET as a GitHub Actions secret to keep it out of your repo.\n\n');
+    }
+    finally {
+        prompter.close();
+    }
+}
+function toTitleCase(name) {
+    return name
+        .replace(/[-_]/g, ' ')
+        .replace(/\b\w/g, (c) => c.toUpperCase());
+}
+function buildGitHubActionsYaml(secret, apiUrl, projectId, repoUrl) {
+    const repoLine = repoUrl ? `        repo_url: '${repoUrl}'\n` : '';
+    return `- name: Report to Trusta
+  uses: trusta/trusta-action@v1
+  with:
+    api_url: '${apiUrl}'
+    project_id: '${projectId}'
+${repoLine}  env:
+    TRUSTA_COLLECTOR_SECRET: \${{ secrets.TRUSTA_COLLECTOR_SECRET }}
+    # Secret value (save as GitHub Actions secret):
+    # ${secret}`;
+}
+function buildAgentPrompt(secret, apiUrl, projectId) {
+    return `Set up Trusta evidence collection for this project.
+API URL: ${apiUrl}
+Project ID: ${projectId}
+Collector secret: ${secret}
+Add TRUSTA_COLLECTOR_SECRET=${secret} to CI environment variables.
+Then call POST ${apiUrl}/ingest/evidence with Bearer auth on each deploy.`;
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":";;AAuBA,oBAiJC;AAxKD,sCAA0C;AAC1C,gCAMgB;AAChB,wCAAgD;AAChD,sCAQmB;AACnB,sCAA2C;AAE3C,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,eAAe,GAAG,wBAAwB,CAAC;AAE1C,KAAK,UAAU,IAAI;IACxB,IAAA,oBAAW,GAAE,CAAC;IAEd,MAAM,SAAS,GAAG,IAAA,sBAAa,GAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAA,uBAAc,GAAE,CAAC;IAElC,IAAI,CAAC;QACH,uBAAuB;QACvB,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAErF,oBAAoB;QACpB,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAA,kBAAS,EAAC,aAAa,GAAG,MAAM,GAAG,6CAA6C,CAAC,CAAC;YAClF,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAoB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAE9D,iBAAiB;QACjB,MAAM,oBAAoB,GAAG,SAAS,CAAC,WAAW;YAChD,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC;YACpC,CAAC,CAAC,SAAS,CAAC;QACd,IAAA,kBAAS,EAAC,iDAAiD,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;QACjF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,eAAe;QACf,MAAM,kBAAkB,GAAG,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC;QAC9D,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;QACjF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,IAAA,qBAAY,GAAE,CAAC;QAEf,gCAAgC;QAChC,IAAA,kBAAS,EAAC,mCAAmC,CAAC,CAAC;QAC/C,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,wBAAkB,EAAC,SAAS,EAAE;YACpE,aAAa;YACb,WAAW;SACZ,CAAC,CAAC;QACH,IAAA,qBAAY,EAAC,cAAc,YAAY,CAAC,IAAI,WAAW,CAAC,CAAC;QACzD,IAAA,qBAAY,EAAC,YAAY,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC;QAElD,kCAAkC;QAClC,IAAA,kBAAS,EAAC,qDAAqD,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,IAAA,qBAAe,EAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACjF,IAAA,qBAAY,EAAC,oCAAoC,CAAC,CAAC;QAEnD,wEAAwE;QACxE,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAA,yBAAmB,EAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;gBAC1E,IAAA,qBAAY,EAAC,uBAAuB,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,IAAA,qBAAY,EAAC,qEAAqE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,IAAA,qBAAY,GAAE,CAAC;QAEf,wDAAwD;QACxD,IAAA,kBAAS,EAAC,6CAA6C,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAA,4BAAkB,EAAC,GAAG,CAAC,CAAC;YACjD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;YAEzC,2DAA2D;YAC3D,MAAM,kBAAkB,GAAoB;gBAC1C,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK;aAC9B,CAAC;YAEF,MAAM,IAAA,oBAAc,EAAC,kBAAkB,EAAE;gBACvC,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,YAAY,EAAE,eAAe;gBAC7B,UAAU,EAAE,UAAU;gBACtB,SAAS,EAAE,GAAG;gBACd,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,mBAAmB;gBAClE,YAAY,EAAE,OAAO;aACtB,CAAC,CAAC;YAEH,qBAAqB;YACrB,IAAI,OAAO,CAAC,aAAa,GAAG,CAAC,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBACvD,IAAA,qBAAY,EACV,uBAAuB,OAAO,CAAC,aAAa,cAAc,OAAO,CAAC,SAAS,SAAS;oBACpF,GAAG,OAAO,CAAC,WAAW,yBAAyB,OAAO,CAAC,YAAY,SAAS,CAC7E,CAAC;gBACF,MAAM,WAAW,GAAG,QAAQ;qBACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;qBACjE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACf,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;oBAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,UAAU,MAAM,OAAO,CAAC,MAAM,IAAI,CACxG,CAAC;gBACJ,CAAC;gBACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,QAAQ,CAAC,MAAM,GAAG,CAAC,qCAAqC,CAAC,CAAC;gBAC9F,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAA,qBAAY,EACV,0BAA0B,OAAO,CAAC,YAAY,0BAA0B,OAAO,CAAC,aAAa,MAAM,CACpG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAA,qBAAY,EAAC,4EAA4E,CAAC,CAAC;QAC7F,CAAC;QAED,iBAAiB;QACjB,MAAM,QAAQ,GAAG,GAAG,eAAe,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;QAE5D,IAAA,qBAAY,EAAC,iBAAiB,CAAC,CAAC;QAChC,IAAA,qBAAY,GAAE,CAAC;QAEf,IAAA,kBAAS,EAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QACnC,IAAA,kBAAS,EAAC,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC;QACzC,IAAA,qBAAY,GAAE,CAAC;QAEf,8BAA8B;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACtE,IAAA,kBAAS,EAAC,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC,CAAC;QAEpH,qBAAqB;QACrB,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,SAAS,CAAC,SAAS,MAAM,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAClG,IAAA,kBAAS,EAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAExE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4FAA4F,CAC7F,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI;SACR,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAc,EACd,MAAc,EACd,SAAiB,EACjB,OAAgB;IAEhB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,sBAAsB,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,OAAO;;;gBAGO,MAAM;mBACH,SAAS;EAC1B,QAAQ;;;QAGF,MAAM,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,MAAc,EAAE,SAAiB;IACzE,OAAO;WACE,MAAM;cACH,SAAS;oBACH,MAAM;8BACI,MAAM;iBACnB,MAAM,mDAAmD,CAAC;AAC3E,CAAC"}

package/dist/detect.d.ts

@@ -0,0 +1,7 @@
+export interface ProjectDetection {
+    readonly projectName: string | null;
+    readonly githubRepoUrl: string | null;
+    readonly framework: string | null;
+}
+export declare function detectProject(cwd?: string): ProjectDetection;
+//# sourceMappingURL=detect.d.ts.map

package/dist/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../src/detect.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,wBAAgB,aAAa,CAAC,GAAG,GAAE,MAAsB,GAAG,gBAAgB,CAK3E"}

package/dist/detect.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectProject = detectProject;
+const node_fs_1 = require("node:fs");
+const node_child_process_1 = require("node:child_process");
+function detectProject(cwd = process.cwd()) {
+    const projectName = detectProjectName(cwd);
+    const githubRepoUrl = detectGitHubRepoUrl(cwd);
+    const framework = detectFramework(cwd);
+    return { projectName, githubRepoUrl, framework };
+}
+function detectProjectName(cwd) {
+    const pkgPath = `${cwd}/package.json`;
+    if ((0, node_fs_1.existsSync)(pkgPath)) {
+        try {
+            const pkg = JSON.parse((0, node_fs_1.readFileSync)(pkgPath, 'utf8'));
+            if (typeof pkg.name === 'string' && pkg.name.length > 0) {
+                return pkg.name.replace(/^@[^/]+\//, '');
+            }
+        }
+        catch {
+            // ignore
+        }
+    }
+    return cwd.split('/').at(-1) ?? null;
+}
+function detectGitHubRepoUrl(cwd) {
+    try {
+        const remote = (0, node_child_process_1.execSync)('git remote get-url origin', {
+            cwd,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        })
+            .toString()
+            .trim();
+        // SSH: git@github.com:owner/repo.git
+        const sshMatch = /^git@github\.com:([^/]+\/[^.]+)/.exec(remote);
+        if (sshMatch?.[1]) {
+            return `https://github.com/${sshMatch[1]}`;
+        }
+        // HTTPS: https://github.com/owner/repo.git
+        const httpsMatch = /^https:\/\/github\.com\/([^/]+\/[^.]+)/.exec(remote);
+        if (httpsMatch?.[1]) {
+            return `https://github.com/${httpsMatch[1]}`;
+        }
+    }
+    catch {
+        // not a git repo or no remote
+    }
+    return null;
+}
+function detectFramework(cwd) {
+    const pkgPath = `${cwd}/package.json`;
+    if (!(0, node_fs_1.existsSync)(pkgPath))
+        return null;
+    try {
+        const pkg = JSON.parse((0, node_fs_1.readFileSync)(pkgPath, 'utf8'));
+        const deps = { ...pkg.dependencies, ...pkg.devDependencies };
+        if ('next' in deps)
+            return 'Next.js';
+        if ('nuxt' in deps)
+            return 'Nuxt';
+        if ('remix' in deps || '@remix-run/node' in deps)
+            return 'Remix';
+        if ('astro' in deps)
+            return 'Astro';
+        if ('svelte' in deps)
+            return 'SvelteKit';
+        if ('react' in deps)
+            return 'React';
+        if ('vue' in deps)
+            return 'Vue';
+        if ('express' in deps)
+            return 'Express';
+        if ('fastify' in deps)
+            return 'Fastify';
+    }
+    catch {
+        // ignore
+    }
+    if ((0, node_fs_1.existsSync)(`${cwd}/requirements.txt`) || (0, node_fs_1.existsSync)(`${cwd}/pyproject.toml`)) {
+        return 'Python';
+    }
+    if ((0, node_fs_1.existsSync)(`${cwd}/go.mod`))
+        return 'Go';
+    if ((0, node_fs_1.existsSync)(`${cwd}/Cargo.toml`))
+        return 'Rust';
+    return null;
+}
+//# sourceMappingURL=detect.js.map

package/dist/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../src/detect.ts"],"names":[],"mappings":";;AASA,sCAKC;AAdD,qCAAmD;AACnD,2DAA8C;AAQ9C,SAAgB,aAAa,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IACvD,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,OAAO,GAAG,GAAG,GAAG,eAAe,CAAC;IACtC,IAAI,IAAA,oBAAU,EAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,OAAO,EAAE,MAAM,CAAC,CAAsB,CAAC;YAC3E,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,6BAAQ,EAAC,2BAA2B,EAAE;YACnD,GAAG;YACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC;aACC,QAAQ,EAAE;aACV,IAAI,EAAE,CAAC;QAEV,qCAAqC;QACrC,MAAM,QAAQ,GAAG,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,OAAO,sBAAsB,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,CAAC;QAED,2CAA2C;QAC3C,MAAM,UAAU,GAAG,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpB,OAAO,sBAAsB,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,OAAO,GAAG,GAAG,GAAG,eAAe,CAAC;IACtC,IAAI,CAAC,IAAA,oBAAU,EAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,OAAO,EAAE,MAAM,CAAC,CAGnD,CAAC;QACF,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;QAE7D,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QACrC,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC;QAClC,IAAI,OAAO,IAAI,IAAI,IAAI,iBAAiB,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC;QACjE,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC;QACpC,IAAI,QAAQ,IAAI,IAAI;YAAE,OAAO,WAAW,CAAC;QACzC,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC;QACpC,IAAI,KAAK,IAAI,IAAI;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,IAAI,IAAA,oBAAU,EAAC,GAAG,GAAG,mBAAmB,CAAC,IAAI,IAAA,oBAAU,EAAC,GAAG,GAAG,iBAAiB,CAAC,EAAE,CAAC;QACjF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,IAAA,oBAAU,EAAC,GAAG,GAAG,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,IAAA,oBAAU,EAAC,GAAG,GAAG,aAAa,CAAC;QAAE,OAAO,MAAM,CAAC;IAEnD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const init_1 = require("./commands/init");
+const [, , command = 'init'] = process.argv;
+if (command === 'init') {
+    (0, init_1.init)().catch((error) => {
+        const message = error instanceof Error ? error.message : String(error);
+        process.stderr.write(`\nError: ${message}\n`);
+        process.exit(1);
+    });
+}
+else {
+    process.stderr.write(`Unknown command: ${command}\nUsage: npx trusta init\n`);
+    process.exit(1);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,0CAAuC;AAEvC,MAAM,CAAC,EAAE,AAAD,EAAG,OAAO,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;AAE5C,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;IACvB,IAAA,WAAI,GAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,4BAA4B,CAAC,CAAC;IAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/output.d.ts

@@ -0,0 +1,8 @@
+export declare function printBanner(): void;
+export declare function printStep(step: string): void;
+export declare function printSuccess(message: string): void;
+export declare function printWarning(message: string): void;
+export declare function printInfo(label: string, value: string): void;
+export declare function printCode(code: string): void;
+export declare function printDivider(): void;
+//# sourceMappingURL=output.d.ts.map

package/dist/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAQA,wBAAgB,WAAW,SAE1B;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,QAErC;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,QAE3C;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,QAE3C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAErD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,QAOrC;AAED,wBAAgB,YAAY,SAE3B"}

package/dist/output.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.printBanner = printBanner;
+exports.printStep = printStep;
+exports.printSuccess = printSuccess;
+exports.printWarning = printWarning;
+exports.printInfo = printInfo;
+exports.printCode = printCode;
+exports.printDivider = printDivider;
+const RESET = '\x1b[0m';
+const BOLD = '\x1b[1m';
+const DIM = '\x1b[2m';
+const GREEN = '\x1b[32m';
+const CYAN = '\x1b[36m';
+const YELLOW = '\x1b[33m';
+const BLUE = '\x1b[34m';
+function printBanner() {
+    process.stdout.write(`\n${BOLD}${CYAN}  trusta${RESET}  — generate your trust page in minutes\n\n`);
+}
+function printStep(step) {
+    process.stdout.write(`${DIM}→${RESET} ${step}\n`);
+}
+function printSuccess(message) {
+    process.stdout.write(`${GREEN}✓${RESET} ${message}\n`);
+}
+function printWarning(message) {
+    process.stdout.write(`${YELLOW}⚠${RESET}  ${message}\n`);
+}
+function printInfo(label, value) {
+    process.stdout.write(`  ${DIM}${label}${RESET}  ${BOLD}${value}${RESET}\n`);
+}
+function printCode(code) {
+    const lines = code.split('\n');
+    process.stdout.write(`\n${DIM}${'─'.repeat(60)}${RESET}\n`);
+    for (const line of lines) {
+        process.stdout.write(`  ${BLUE}${line}${RESET}\n`);
+    }
+    process.stdout.write(`${DIM}${'─'.repeat(60)}${RESET}\n\n`);
+}
+function printDivider() {
+    process.stdout.write(`\n${DIM}${'─'.repeat(60)}${RESET}\n\n`);
+}
+//# sourceMappingURL=output.js.map

package/dist/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":";;AAQA,kCAEC;AAED,8BAEC;AAED,oCAEC;AAED,oCAEC;AAED,8BAEC;AAED,8BAOC;AAED,oCAEC;AAvCD,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,IAAI,GAAG,UAAU,CAAC;AAExB,SAAgB,WAAW;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,IAAI,WAAW,KAAK,6CAA6C,CAAC,CAAC;AACtG,CAAC;AAED,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,YAAY,CAAC,OAAe;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,KAAK,IAAI,OAAO,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAgB,YAAY,CAAC,OAAe;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,SAAgB,SAAS,CAAC,KAAa,EAAE,KAAa;IACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,KAAK,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,GAAG,KAAK,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,SAAgB,SAAS,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED,SAAgB,YAAY;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;AAChE,CAAC"}

package/dist/prompt.d.ts

@@ -0,0 +1,5 @@
+export declare function createPrompter(): {
+    ask: (question: string, defaultValue?: string) => Promise<string>;
+    close: () => void;
+};
+//# sourceMappingURL=prompt.d.ts.map

package/dist/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAEA,wBAAgB,cAAc;oBAMC,MAAM,iBAAiB,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC;;EAc7E"}

package/dist/prompt.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPrompter = createPrompter;
+const node_readline_1 = require("node:readline");
+function createPrompter() {
+    const rl = (0, node_readline_1.createInterface)({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    async function ask(question, defaultValue) {
+        const suffix = defaultValue ? ` [${defaultValue}]` : '';
+        return new Promise((resolve) => {
+            rl.question(`  ${question}${suffix}: `, (answer) => {
+                resolve(answer.trim() || defaultValue || '');
+            });
+        });
+    }
+    function close() {
+        rl.close();
+    }
+    return { ask, close };
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":";;AAEA,wCAoBC;AAtBD,iDAAgD;AAEhD,SAAgB,cAAc;IAC5B,MAAM,EAAE,GAAG,IAAA,+BAAe,EAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,KAAK,UAAU,GAAG,CAAC,QAAgB,EAAE,YAAqB;QACxD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,EAAE,CAAC,QAAQ,CAAC,KAAK,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACjD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,KAAK;QACZ,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC"}

package/dist/scanner.d.ts

@@ -0,0 +1,27 @@
+export type SecurityFindingSeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';
+export interface SecurityFinding {
+    readonly findingId: string;
+    readonly ruleId: string;
+    readonly severity: SecurityFindingSeverity;
+    readonly filePath: string;
+    readonly lineNumber: number;
+    readonly snippet: string;
+    readonly fix: string;
+}
+export interface LocalScanSummary {
+    readonly criticalCount: number;
+    readonly highCount: number;
+    readonly mediumCount: number;
+    readonly lowCount: number;
+    readonly rlsBypassCount: number;
+    readonly apiAuthCount: number;
+    readonly securityScore: number;
+    readonly filesScanned: number;
+}
+export interface LocalScanResult {
+    readonly findings: SecurityFinding[];
+    readonly summary: LocalScanSummary;
+}
+/** Scans local source files in `dir` and returns findings + summary. No network I/O. */
+export declare function scanLocalDirectory(dir: string): Promise<LocalScanResult>;
+//# sourceMappingURL=scanner.d.ts.map

package/dist/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAEtF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC;AAwND,wFAAwF;AACxF,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA8C9E"}

package/dist/scanner.js

@@ -0,0 +1,232 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanLocalDirectory = scanLocalDirectory;
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+// --- Scanning rules (mirrors packages/domain — pure, no I/O) ---
+const SECRET_PATTERNS = [
+    {
+        ruleId: 'hardcoded_stripe_secret_key',
+        pattern: /\bsk_(live|test)_[a-zA-Z0-9]{24,}\b/g,
+        severity: 'critical',
+        fix: 'Move this Stripe secret key to an environment variable (e.g. process.env.STRIPE_SECRET_KEY) and add it to your .env file. Never commit secret keys to source control.',
+    },
+    {
+        ruleId: 'hardcoded_supabase_service_role_key',
+        pattern: /\beyJ[a-zA-Z0-9+/]{50,}={0,2}\b/g,
+        severity: 'critical',
+        fix: 'Move this Supabase service role key to a server-only environment variable. Never use the service role key in client-side code — it bypasses all Row Level Security policies.',
+    },
+    {
+        ruleId: 'hardcoded_openai_api_key',
+        pattern: /\bsk-(?:proj-)?[a-zA-Z0-9]{32,}\b/g,
+        severity: 'critical',
+        fix: 'Move this OpenAI API key to an environment variable (e.g. process.env.OPENAI_API_KEY). Exposed API keys can result in unauthorized charges.',
+    },
+    {
+        ruleId: 'hardcoded_anthropic_api_key',
+        pattern: /\bsk-ant-[a-zA-Z0-9_-]{32,}\b/g,
+        severity: 'critical',
+        fix: 'Move this Anthropic API key to an environment variable (e.g. process.env.ANTHROPIC_API_KEY). Exposed API keys can result in unauthorized charges.',
+    },
+    {
+        ruleId: 'hardcoded_aws_secret_access_key',
+        pattern: /(?:AWS_SECRET_ACCESS_KEY|aws_secret_access_key)\s*[=:]\s*["']?([a-zA-Z0-9/+]{40})["']?/g,
+        severity: 'critical',
+        fix: 'Remove this AWS secret access key from source code. Use IAM roles, environment variables, or AWS Secrets Manager instead.',
+    },
+];
+const CLIENT_SIDE_PATH_PATTERNS = [
+    /^(src\/)?components\//,
+    /^(src\/)?pages\//,
+    /^(src\/)?app\//,
+    /^(src\/)?hooks\//,
+    /^(src\/)?lib\//,
+    /\.(tsx|jsx)$/,
+];
+const SERVER_SIDE_PATH_EXCLUSIONS = [
+    /route\.(ts|js)$/,
+    /server\.(ts|js)$/,
+    /api\//,
+    /actions\.(ts|js)$/,
+    /middleware\.(ts|js)$/,
+];
+function isClientSidePath(filePath) {
+    const isClientLike = CLIENT_SIDE_PATH_PATTERNS.some((p) => p.test(filePath));
+    const isServerExcluded = SERVER_SIDE_PATH_EXCLUSIONS.some((p) => p.test(filePath));
+    return isClientLike && !isServerExcluded;
+}
+function scanForHardcodedSecrets(fileContent, filePath) {
+    const findings = [];
+    const lines = fileContent.split('\n');
+    for (const rule of SECRET_PATTERNS) {
+        rule.pattern.lastIndex = 0;
+        let match;
+        while ((match = rule.pattern.exec(fileContent)) !== null) {
+            const before = fileContent.slice(0, match.index);
+            const lineNumber = before.split('\n').length;
+            const line = lines[lineNumber - 1] ?? '';
+            const snippet = line.trim().slice(0, 120);
+            findings.push({
+                findingId: `${rule.ruleId}:${filePath}:${lineNumber}`,
+                ruleId: rule.ruleId,
+                severity: rule.severity,
+                filePath,
+                lineNumber,
+                snippet,
+                fix: rule.fix,
+            });
+        }
+        rule.pattern.lastIndex = 0;
+    }
+    return findings;
+}
+function scanForRlsBypassVulnerabilities(fileContent, filePath) {
+    if (!isClientSidePath(filePath))
+        return [];
+    const findings = [];
+    const lines = fileContent.split('\n');
+    const serviceRolePattern = /createClient\s*\([^)]*(?:SERVICE_ROLE|service_role|serviceRole)[^)]*\)/g;
+    let match;
+    while ((match = serviceRolePattern.exec(fileContent)) !== null) {
+        const before = fileContent.slice(0, match.index);
+        const lineNumber = before.split('\n').length;
+        const snippet = (lines[lineNumber - 1] ?? '').trim().slice(0, 120);
+        findings.push({
+            findingId: `rls_bypass_client_service_role:${filePath}:${lineNumber}`,
+            ruleId: 'rls_bypass_client_service_role',
+            severity: 'critical',
+            filePath,
+            lineNumber,
+            snippet,
+            fix: 'Never use the Supabase service role key in client-side code. It bypasses all Row Level Security policies and exposes all your data. Use the anon key for client code and keep the service role key server-side only.',
+        });
+    }
+    return findings;
+}
+function scanForExposedAdminRoutes(fileContent, filePath) {
+    if (!isClientSidePath(filePath))
+        return [];
+    const findings = [];
+    const lines = fileContent.split('\n');
+    const localStorageAuthPattern = /localStorage\.getItem\s*\(\s*["'](?:role|isAdmin|admin|is_admin|userRole|user_role)["']\s*\)/g;
+    let match;
+    while ((match = localStorageAuthPattern.exec(fileContent)) !== null) {
+        const before = fileContent.slice(0, match.index);
+        const lineNumber = before.split('\n').length;
+        const snippet = (lines[lineNumber - 1] ?? '').trim().slice(0, 120);
+        findings.push({
+            findingId: `exposed_admin_route_localstorage:${filePath}:${lineNumber}`,
+            ruleId: 'exposed_admin_route_localstorage',
+            severity: 'high',
+            filePath,
+            lineNumber,
+            snippet,
+            fix: 'Do not use localStorage for admin access control. localStorage can be modified by any user in their browser. Implement server-side role checks using your auth provider (Supabase RLS, session middleware, etc.).',
+        });
+    }
+    return findings;
+}
+function scanForUnprotectedApiEndpoints(fileContent, filePath) {
+    if (!/(route\.(ts|js)|api\/|handler\.(ts|js))/.test(filePath))
+        return [];
+    const findings = [];
+    const lines = fileContent.split('\n');
+    const firstLines = lines.slice(0, 30).join('\n');
+    const hasAuthCheck = /\b(?:getServerSession|auth\(\)|verifyJwt|authenticate|requireAuth|withAuth|getSession|supabase\.auth|createServerClient)\b/.test(firstLines);
+    const exportedHandlerPattern = /export\s+(?:async\s+)?function\s+(GET|POST|PUT|PATCH|DELETE|handler)\b/g;
+    let match;
+    while ((match = exportedHandlerPattern.exec(fileContent)) !== null) {
+        if (!hasAuthCheck) {
+            const before = fileContent.slice(0, match.index);
+            const lineNumber = before.split('\n').length;
+            const snippet = (lines[lineNumber - 1] ?? '').trim().slice(0, 120);
+            findings.push({
+                findingId: `unprotected_api_endpoint:${filePath}:${lineNumber}`,
+                ruleId: 'unprotected_api_endpoint',
+                severity: 'high',
+                filePath,
+                lineNumber,
+                snippet,
+                fix: 'Add authentication to this API route. Verify the user session at the start of the handler before processing any data.',
+            });
+        }
+    }
+    return findings;
+}
+function computeSecurityScore(findings) {
+    const weights = {
+        critical: 25,
+        high: 10,
+        medium: 3,
+        low: 1,
+        info: 0,
+    };
+    const penalty = findings.reduce((acc, f) => acc + (weights[f.severity] ?? 0), 0);
+    return Math.max(0, Math.min(100, 100 - penalty));
+}
+// --- Local directory walker ---
+const SOURCE_EXTENSIONS = /\.(ts|tsx|js|jsx|mjs|cjs|py|rb|go|java|php|cs)$/;
+const EXCLUDED_DIRS = new Set(['node_modules', '.git', 'dist', 'build', '.next', 'out', '.turbo', 'coverage']);
+async function walkDir(dir, root) {
+    const entries = await (0, promises_1.readdir)(dir, { withFileTypes: true });
+    const files = [];
+    for (const entry of entries) {
+        if (entry.name.startsWith('.') && entry.isDirectory())
+            continue;
+        if (entry.isDirectory() && EXCLUDED_DIRS.has(entry.name))
+            continue;
+        const fullPath = (0, node_path_1.join)(dir, entry.name);
+        if (entry.isDirectory()) {
+            const nested = await walkDir(fullPath, root);
+            files.push(...nested);
+        }
+        else if (entry.isFile() && SOURCE_EXTENSIONS.test(entry.name)) {
+            files.push(fullPath);
+        }
+    }
+    return files;
+}
+/** Scans local source files in `dir` and returns findings + summary. No network I/O. */
+async function scanLocalDirectory(dir) {
+    const allFiles = await walkDir(dir, dir);
+    const findings = [];
+    await Promise.all(allFiles.map(async (absolutePath) => {
+        const relPath = (0, node_path_1.relative)(dir, absolutePath).replace(/\\/g, '/');
+        let content;
+        try {
+            content = await (0, promises_1.readFile)(absolutePath, 'utf8');
+        }
+        catch {
+            return;
+        }
+        const fileFindings = [
+            ...scanForHardcodedSecrets(content, relPath),
+            ...scanForRlsBypassVulnerabilities(content, relPath),
+            ...scanForExposedAdminRoutes(content, relPath),
+            ...scanForUnprotectedApiEndpoints(content, relPath),
+        ];
+        findings.push(...fileFindings);
+    }));
+    const criticalCount = findings.filter((f) => f.severity === 'critical').length;
+    const highCount = findings.filter((f) => f.severity === 'high').length;
+    const mediumCount = findings.filter((f) => f.severity === 'medium').length;
+    const lowCount = findings.filter((f) => f.severity === 'low').length;
+    const rlsBypassCount = findings.filter((f) => f.ruleId.startsWith('rls_bypass')).length;
+    const apiAuthCount = findings.filter((f) => f.ruleId.startsWith('unprotected_api')).length;
+    const securityScore = computeSecurityScore(findings);
+    return {
+        findings,
+        summary: {
+            criticalCount,
+            highCount,
+            mediumCount,
+            lowCount,
+            rlsBypassCount,
+            apiAuthCount,
+            securityScore,
+            filesScanned: allFiles.length,
+        },
+    };
+}
+//# sourceMappingURL=scanner.js.map

package/dist/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":";;AAwPA,gDA8CC;AAtSD,+CAAqD;AACrD,yCAA2C;AAgC3C,kEAAkE;AAElE,MAAM,eAAe,GAKhB;IACH;QACE,MAAM,EAAE,6BAA6B;QACrC,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,UAAU;QACpB,GAAG,EAAE,uKAAuK;KAC7K;IACD;QACE,MAAM,EAAE,qCAAqC;QAC7C,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,UAAU;QACpB,GAAG,EAAE,8KAA8K;KACpL;IACD;QACE,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,UAAU;QACpB,GAAG,EAAE,6IAA6I;KACnJ;IACD;QACE,MAAM,EAAE,6BAA6B;QACrC,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,UAAU;QACpB,GAAG,EAAE,mJAAmJ;KACzJ;IACD;QACE,MAAM,EAAE,iCAAiC;QACzC,OAAO,EAAE,yFAAyF;QAClG,QAAQ,EAAE,UAAU;QACpB,GAAG,EAAE,2HAA2H;KACjI;CACF,CAAC;AAEF,MAAM,yBAAyB,GAAG;IAChC,uBAAuB;IACvB,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,cAAc;CACf,CAAC;AAEF,MAAM,2BAA2B,GAAG;IAClC,iBAAiB;IACjB,kBAAkB;IAClB,OAAO;IACP,mBAAmB;IACnB,sBAAsB;CACvB,CAAC;AAEF,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,YAAY,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnF,OAAO,YAAY,IAAI,CAAC,gBAAgB,CAAC;AAC3C,CAAC;AAED,SAAS,uBAAuB,CAAC,WAAmB,EAAE,QAAgB;IACpE,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3B,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,IAAI,UAAU,EAAE;gBACrD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ;gBACR,UAAU;gBACV,OAAO;gBACP,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,+BAA+B,CAAC,WAAmB,EAAE,QAAgB;IAC5E,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,kBAAkB,GAAG,yEAAyE,CAAC;IACrG,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAC7C,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,kCAAkC,QAAQ,IAAI,UAAU,EAAE;YACrE,MAAM,EAAE,gCAAgC;YACxC,QAAQ,EAAE,UAAU;YACpB,QAAQ;YACR,UAAU;YACV,OAAO;YACP,GAAG,EAAE,sNAAsN;SAC5N,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAmB,EAAE,QAAgB;IACtE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,uBAAuB,GAC3B,+FAA+F,CAAC;IAClG,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAC7C,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,oCAAoC,QAAQ,IAAI,UAAU,EAAE;YACvE,MAAM,EAAE,kCAAkC;YAC1C,QAAQ,EAAE,MAAM;YAChB,QAAQ;YACR,UAAU;YACV,OAAO;YACP,GAAG,EAAE,mNAAmN;SACzN,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,8BAA8B,CAAC,WAAmB,EAAE,QAAgB;IAC3E,IAAI,CAAC,yCAAyC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzE,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,YAAY,GAChB,4HAA4H,CAAC,IAAI,CAC/H,UAAU,CACX,CAAC;IAEJ,MAAM,sBAAsB,GAAG,yEAAyE,CAAC;IACzG,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAC7C,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,4BAA4B,QAAQ,IAAI,UAAU,EAAE;gBAC/D,MAAM,EAAE,0BAA0B;gBAClC,QAAQ,EAAE,MAAM;gBAChB,QAAQ;gBACR,UAAU;gBACV,OAAO;gBACP,GAAG,EAAE,uHAAuH;aAC7H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAA2B;IACvD,MAAM,OAAO,GAA4C;QACvD,QAAQ,EAAE,EAAE;QACZ,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,iCAAiC;AAEjC,MAAM,iBAAiB,GAAG,iDAAiD,CAAC;AAC5E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAE/G,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,IAAY;IAC9C,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QAChE,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAEnE,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wFAAwF;AACjF,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,IAAA,oBAAQ,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG;YACnB,GAAG,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC;YAC5C,GAAG,+BAA+B,CAAC,OAAO,EAAE,OAAO,CAAC;YACpD,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC;YAC9C,GAAG,8BAA8B,CAAC,OAAO,EAAE,OAAO,CAAC;SACpD,CAAC;QAEF,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;IACjC,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC/E,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;IACxF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3F,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAErD,OAAO;QACL,QAAQ;QACR,OAAO,EAAE;YACP,aAAa;YACb,SAAS;YACT,WAAW;YACX,QAAQ;YACR,cAAc;YACd,YAAY;YACZ,aAAa;YACb,YAAY,EAAE,QAAQ,CAAC,MAAM;SAC9B;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "trusta",
+  "version": "0.1.0",
+  "description": "Generate your trust page in minutes — npx trusta init",
+  "license": "MIT",
+  "bin": {
+    "trusta": "dist/index.js"
+  },
+  "main": "dist/index.js",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "eslint src --max-warnings=0",
+    "prepublishOnly": "npm run build"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "trust",
+    "security",
+    "compliance",
+    "trusta"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/trusta-dev/trusta-cli.git"
+  },
+  "homepage": "https://trusta.dev",
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
+    "@typescript-eslint/parser": "^8.0.0",
+    "eslint": "^9.0.0",
+    "typescript": "^5.5.0"
+  }
+}