verification-layer 0.24.4 → 0.25.0

package/README.md

@@ -10,7 +10,9 @@
 
 ---
 
-## 🚀 Quick Start
+**[Start Here in 2 Minutes](docs/start-here.md)** — Get your first scan running with zero setup.
+
+## Quick Start
 
 ```bash
 # Install globally
@@ -182,6 +184,7 @@ vlayer scan <path> -f html -o report.html   # HTML report
 vlayer scan <path> -f markdown -o report.md # Markdown report
 vlayer scan <path> --fix                     # Auto-fix issues
 vlayer scan <path> -c phi-exposure encryption # Specific categories
+vlayer scan <path> --include-own-artifacts   # Also scan vlayer's own reports/baseline/samples (excluded by default)
 
 # Compliance Score
 vlayer score <path>                     # Calculate compliance score (0-100)
@@ -192,10 +195,15 @@ vlayer watch <path>                     # Watch for changes
 vlayer watch <path> -c phi-exposure     # Watch specific categories
 
 # Audit Reports
-vlayer report <path>                    # Generate auditor-ready report
+vlayer report <path>                    # Generate auditor-ready report (HTML)
+vlayer report <path> -f pdf             # Generate as PDF
 vlayer report <path> -o report.html     # Custom output path
 vlayer report <path> --org "Company"    # Set organization name
 
+# White-label branding (agencies / resellers)
+vlayer report <path> --brand-name "Acme Health" --brand-logo ./logo.png
+vlayer scan <path> -f html --brand-name "Acme Health" --brand-logo ./logo.svg
+
 # Training
 vlayer train                            # Start interactive training
 vlayer train --module 2                 # Specific module
@@ -336,12 +344,44 @@ Create `.vlayerrc.json` in your project root:
     "enabled": true,
     "enableTriage": true,
     "budgetCents": 50
+  },
+  "branding": {
+    "name": "Acme Health Devs",
+    "logo": "./assets/logo.png"
   }
 }
 ```
 
 ---
 
+## 🏷️ White-Label Reports
+
+Agencies and resellers can put **their own brand** on the HTML and PDF reports.
+
+```bash
+vlayer report ./src --brand-name "Acme Health Devs" --brand-logo ./logo.png
+vlayer report ./src -f pdf --brand-name "Acme Health Devs" --brand-logo ./logo.png
+vlayer scan   ./src -f html --brand-name "Acme Health Devs" --brand-logo ./logo.svg
+```
+
+Or set it once in `.vlayerrc.json`:
+
+```json
+{ "branding": { "name": "Acme Health Devs", "logo": "./logo.png" } }
+```
+
+Behavior:
+
+- **Cover / header**: your logo on top, your name shown as **"Prepared by …"**.
+- **Page footer**: `Prepared by {brand} · Powered by VLayer` (repeats on every printed/PDF page).
+- **Precedence**: CLI flags (`--brand-name`, `--brand-logo`) override the config block.
+- **Logos**: `.png`, `.jpg`/`.jpeg`, `.svg` are accepted (PDF embeds PNG/JPG; SVG is used in HTML only).
+- **Safe by default**: a missing or unsupported logo prints a warning and the report
+  still generates without it — the scan never breaks. Brand names are HTML-escaped.
+- **No branding** → reports render exactly as before (default VLayer presentation).
+
+---
+
 ## 🏗️ Auto-Fix
 
 Automatically remediate common vulnerabilities:

package/dist/ai/cache.js

@@ -16,7 +16,7 @@ export class AICache {
         try {
             await fs.mkdir(this.cacheDir, { recursive: true });
         }
-        catch (error) {
+        catch {
             // Directory might already exist
         }
     }
@@ -45,7 +45,7 @@ export class AICache {
             }
             return entry.result;
         }
-        catch (error) {
+        catch {
             return null;
         }
     }

package/dist/ai/cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/ai/cache.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAUxC,MAAM,OAAO,OAAO;IACV,QAAQ,CAAS;IACjB,KAAK,CAAS;IAEtB;QACE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gCAAgC;QAClC,CAAC;IACH,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,WAAW,CAAC,QAAgB,EAAE,MAAc;QAC1C,OAAO,GAAG,QAAQ,IAAI,MAAM,OAAO,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,MAAc;QAEd,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,KAAK,GAAe,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAE3C,4BAA4B;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;YACzC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;gBACnD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,MAAc,EACd,MAAW;QAEX,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAErD,MAAM,KAAK,GAAe;YACxB,QAAQ;YACR,MAAM;YACN,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,GAAG,EAAE,IAAI,CAAC,KAAK;SAChB,CAAC;QAEF,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAC/D,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/ai/cache.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAUxC,MAAM,OAAO,OAAO;IACV,QAAQ,CAAS;IACjB,KAAK,CAAS;IAEtB;QACE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;IACH,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,WAAW,CAAC,QAAgB,EAAE,MAAc;QAC1C,OAAO,GAAG,QAAQ,IAAI,MAAM,OAAO,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,MAAc;QAEd,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,KAAK,GAAe,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAE3C,4BAA4B;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;YACzC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;gBACnD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,MAAc,EACd,MAAW;QAEX,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAErD,MAAM,KAAK,GAAe;YACxB,QAAQ;YACR,MAAM;YACN,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,GAAG,EAAE,IAAI,CAAC,KAAK;SAChB,CAAC;QAEF,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAC/D,CAAC;IACJ,CAAC;CACF"}

package/dist/ai/config.d.ts

@@ -2,7 +2,7 @@
  * AI Configuration
  */
 export declare const AI_CONFIG: {
-    readonly model: "claude-sonnet-4-20250514";
+    readonly model: "claude-sonnet-4-6";
     readonly maxTokens: 2048;
     readonly temperature: 0.1;
     readonly maxFileSizeBytes: 50000;

package/dist/ai/config.js

@@ -2,7 +2,7 @@
  * AI Configuration
  */
 export const AI_CONFIG = {
-    model: 'claude-sonnet-4-20250514',
+    model: 'claude-sonnet-4-6',
     maxTokens: 2048,
     temperature: 0.1, // Deterministic for security
     maxFileSizeBytes: 50_000, // Don't send files > 50KB

package/dist/ai/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/ai/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,KAAK,EAAE,0BAAmC;IAC1C,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,GAAG,EAAE,6BAA6B;IAC/C,gBAAgB,EAAE,MAAM,EAAE,0BAA0B;IACpD,kBAAkB,EAAE,CAAC;IACrB,SAAS,EAAE;QACT,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,EAAE;KACpB;IACD,MAAM,EAAE;QACN,sBAAsB,EAAE,EAAE,EAAE,gBAAgB;QAC5C,oBAAoB,EAAE,GAAG,EAAE,+BAA+B;KAC3D;IACD,KAAK,EAAE;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,kBAAkB;QAC7B,QAAQ,EAAE,EAAE;KACb;IACD,OAAO,EAAE;QACP,+CAA+C;QAC/C,mBAAmB,EAAE,GAAG;QACxB,oBAAoB,EAAE,IAAI;KAC3B;CACO,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/ai/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,KAAK,EAAE,mBAA4B;IACnC,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,GAAG,EAAE,6BAA6B;IAC/C,gBAAgB,EAAE,MAAM,EAAE,0BAA0B;IACpD,kBAAkB,EAAE,CAAC;IACrB,SAAS,EAAE;QACT,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,EAAE;KACpB;IACD,MAAM,EAAE;QACN,sBAAsB,EAAE,EAAE,EAAE,gBAAgB;QAC5C,oBAAoB,EAAE,GAAG,EAAE,+BAA+B;KAC3D;IACD,KAAK,EAAE;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,kBAAkB;QAC7B,QAAQ,EAAE,EAAE;KACb;IACD,OAAO,EAAE;QACP,+CAA+C;QAC/C,mBAAmB,EAAE,GAAG;QACxB,oBAAoB,EAAE,IAAI;KAC3B;CACO,CAAC"}

package/dist/ai/rules/prompts/audit-logging.js

@@ -52,7 +52,7 @@ Respond in JSON:
       "line": number,
       "severity": "high" | "medium",
       "message": "Brief description of the violation",
-      "suggestion": "How to fix (be specific - e.g., 'Add auditLog.record({ userId, action: \"PHI_READ\", resourceId: patientId })')",
+      "suggestion": "How to fix (be specific - e.g., 'Add auditLog.record({ userId, action: "PHI_READ", resourceId: patientId })')",
       "hipaaReference": "§164.308(a)(1)(ii)(D) - Audit Controls",
       "confidence": 0.0-1.0
     }

package/dist/ai/rules/rule-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rule-runner.d.ts","sourceRoot":"","sources":["../../../src/ai/rules/rule-runner.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,YAAY,CAAC;AAG7D,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;CACzE;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAAc;gBAG/B,WAAW,EAAE,WAAW,EACxB,KAAK,CAAC,EAAE,OAAO,EACf,WAAW,CAAC,EAAE,WAAW;IAOrB,OAAO,CACX,IAAI,EAAE,OAAO,EACb,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,EAAE,CAAC;IA4EvB,OAAO,CAAC,mBAAmB;IAgCrB,cAAc,CAClB,KAAK,EAAE,OAAO,EAAE,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,EAAE,CAAC;IAmBvB,QAAQ;;;;;;;;;;;;CAMT"}
+{"version":3,"file":"rule-runner.d.ts","sourceRoot":"","sources":["../../../src/ai/rules/rule-runner.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,YAAY,CAAC;AAE7D,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;CACzE;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAAc;gBAG/B,WAAW,EAAE,WAAW,EACxB,KAAK,CAAC,EAAE,OAAO,EACf,WAAW,CAAC,EAAE,WAAW;IAOrB,OAAO,CACX,IAAI,EAAE,OAAO,EACb,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,EAAE,CAAC;IA4EvB,OAAO,CAAC,mBAAmB;IAgCrB,cAAc,CAClB,KAAK,EAAE,OAAO,EAAE,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,EAAE,CAAC;IAmBvB,QAAQ;;;;;;;;;;;;CAMT"}

package/dist/ai/rules/rule-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"rule-runner.js","sourceRoot":"","sources":["../../../src/ai/rules/rule-runner.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAYjD,MAAM,OAAO,UAAU;IACb,KAAK,CAAU;IACf,WAAW,CAAc;IACzB,WAAW,CAAc;IAEjC,YACE,WAAwB,EACxB,KAAe,EACf,WAAyB;QAEzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,IAAI,WAAW,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAAa,EACb,WAAmB,EACnB,QAAgB;QAEhB,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QAEtC,eAAe;QACf,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CACV,2BAA2B,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE,CACrG,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,sCAAsC;QACtC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAC9D,WAAW,EACX,QAAQ,CACT,CAAC;QAEF,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YAEpE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;YAE9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5C,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,UAAU,EAAE,SAAS,CAAC,SAAS;gBAC/B,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,IAAI,CAAC,YAAY;gBACzB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;aAClD,CAAC,CAAC;YAEH,aAAa;YACb,IAAI,CAAC,WAAW,CAAC,UAAU,CACzB,QAAQ,CAAC,KAAK,CAAC,YAAY,EAC3B,QAAQ,CAAC,KAAK,CAAC,aAAa,CAC7B,CAAC;YAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,MAAM,GAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAEzD,mBAAmB;YACnB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAEnD,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,0BAA0B,IAAI,CAAC,IAAI,GAAG,EACtC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC/C,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,mBAAmB,CACzB,MAAuB,EACvB,QAAgB,EAChB,IAAa;QAEb,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;YACtC,gDAAgD;YAChD,IAAI,UAAU,GAA8B,QAAQ,CAAC;YACrD,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBACxB,UAAU,GAAG,MAAM,CAAC;YACtB,CAAC;iBAAM,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBAC/B,UAAU,GAAG,QAAQ,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;YAED,OAAO;gBACL,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,EAAE;gBAC/C,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,IAAI,CAAC,QAAe;gBAC9B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE;gBACnC,WAAW,EAAE,CAAC,CAAC,OAAO;gBACtB,cAAc,EAAE,CAAC,CAAC,UAAU;gBAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,MAAM,EAAE,IAAa;gBACrB,UAAU;aACX,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAgB,EAChB,WAAmB,EACnB,QAAgB;QAEhB,MAAM,WAAW,GAAgB,EAAE,CAAC;QAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;YACjE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YAE9B,sBAAsB;YACtB,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CACV,qCAAqC,WAAW,CAAC,MAAM,mBAAmB,CAC3E,CAAC;gBACF,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;YACjC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;SACvC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"rule-runner.js","sourceRoot":"","sources":["../../../src/ai/rules/rule-runner.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAWjD,MAAM,OAAO,UAAU;IACb,KAAK,CAAU;IACf,WAAW,CAAc;IACzB,WAAW,CAAc;IAEjC,YACE,WAAwB,EACxB,KAAe,EACf,WAAyB;QAEzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,IAAI,WAAW,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAAa,EACb,WAAmB,EACnB,QAAgB;QAEhB,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QAEtC,eAAe;QACf,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CACV,2BAA2B,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE,CACrG,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,sCAAsC;QACtC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAC9D,WAAW,EACX,QAAQ,CACT,CAAC;QAEF,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YAEpE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;YAE9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5C,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,UAAU,EAAE,SAAS,CAAC,SAAS;gBAC/B,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,IAAI,CAAC,YAAY;gBACzB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;aAClD,CAAC,CAAC;YAEH,aAAa;YACb,IAAI,CAAC,WAAW,CAAC,UAAU,CACzB,QAAQ,CAAC,KAAK,CAAC,YAAY,EAC3B,QAAQ,CAAC,KAAK,CAAC,aAAa,CAC7B,CAAC;YAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,MAAM,GAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAEzD,mBAAmB;YACnB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAEnD,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,0BAA0B,IAAI,CAAC,IAAI,GAAG,EACtC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC/C,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,mBAAmB,CACzB,MAAuB,EACvB,QAAgB,EAChB,IAAa;QAEb,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;YACtC,gDAAgD;YAChD,IAAI,UAAU,GAA8B,QAAQ,CAAC;YACrD,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBACxB,UAAU,GAAG,MAAM,CAAC;YACtB,CAAC;iBAAM,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBAC/B,UAAU,GAAG,QAAQ,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;YAED,OAAO;gBACL,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,EAAE;gBAC/C,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,IAAI,CAAC,QAAe;gBAC9B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE;gBACnC,WAAW,EAAE,CAAC,CAAC,OAAO;gBACtB,cAAc,EAAE,CAAC,CAAC,UAAU;gBAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,MAAM,EAAE,IAAa;gBACrB,UAAU;aACX,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAgB,EAChB,WAAmB,EACnB,QAAgB;QAEhB,MAAM,WAAW,GAAgB,EAAE,CAAC;QAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;YACjE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YAE9B,sBAAsB;YACtB,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CACV,qCAAqC,WAAW,CAAC,MAAM,mBAAmB,CAC3E,CAAC;gBACF,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;YACjC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;SACvC,CAAC;IACJ,CAAC;CACF"}

package/dist/ai/rules/triage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"triage.d.ts","sourceRoot":"","sources":["../../../src/ai/rules/triage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAwC,cAAc,EAAE,MAAM,YAAY,CAAC;AAkBvF,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAmEzB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,OAAO,EAAE,EACnB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC,cAAc,EAAE,CAAC,CAsB3B"}
+{"version":3,"file":"triage.d.ts","sourceRoot":"","sources":["../../../src/ai/rules/triage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAkB,cAAc,EAAE,MAAM,YAAY,CAAC;AAkBjE,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAmEzB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,OAAO,EAAE,EACnB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC,cAAc,EAAE,CAAC,CAsB3B"}

package/dist/ai/rules/triage.js

@@ -22,7 +22,7 @@ Be conservative - when in doubt, classify as "likely" rather than "false_positiv
 export async function triageFinding(finding, fileContent, filePath) {
     const client = getAIClient();
     // Sanitize code before sending
-    const { sanitizedCode, warnings } = sanitizeCodeForLLM(fileContent, filePath);
+    const { sanitizedCode } = sanitizeCodeForLLM(fileContent, filePath);
     // Get context around the finding (±10 lines)
     const lines = sanitizedCode.split('\n');
     const line = finding.line || 1;

package/dist/ai/rules/triage.js.map

@@ -1 +1 @@
-{"version":3,"file":"triage.js","sourceRoot":"","sources":["../../../src/ai/rules/triage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAIrD,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;oFAcuD,CAAC;AAErF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,WAAmB,EACnB,QAAgB;IAEhB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAE7B,+BAA+B;IAC/B,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAE9E,6CAA6C;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjE,MAAM,UAAU,GAAG;QACb,QAAQ;QACR,OAAO,CAAC,IAAI;YACR,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,QAAQ;SACnB,OAAO,CAAC,KAAK;eACP,OAAO,CAAC,WAAW;;sBAEZ,YAAY,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC;;EAEtD,OAAO;;;;;;;;;EASP,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,UAAU,EAAE,SAAS,CAAC,SAAS;YAC/B,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;SAClD,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,YAAY,GAAmB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAE9D,OAAO;YACL,GAAG,OAAO;YACV,gBAAgB,EAAE,YAAY,CAAC,cAAc;YAC7C,YAAY,EAAE,YAAY,CAAC,UAAU;YACrC,WAAW,EAAE,YAAY,CAAC,SAAS;YACnC,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qDAAqD;QACrD,OAAO;YACL,GAAG,OAAO;YACV,gBAAgB,EAAE,QAAQ;YAC1B,YAAY,EAAE,GAAG;YACjB,WAAW,EAAE,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;YACzF,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAmB,EACnB,YAAiC;IAEjC,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,2CAA2C;YAC3C,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,OAAO;gBACV,gBAAgB,EAAE,QAAQ;gBAC1B,YAAY,EAAE,GAAG;gBACjB,WAAW,EAAE,uCAAuC;gBACpD,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"triage.js","sourceRoot":"","sources":["../../../src/ai/rules/triage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAIrD,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;oFAcuD,CAAC;AAErF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,WAAmB,EACnB,QAAgB;IAEhB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAE7B,+BAA+B;IAC/B,MAAM,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEpE,6CAA6C;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjE,MAAM,UAAU,GAAG;QACb,QAAQ;QACR,OAAO,CAAC,IAAI;YACR,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,QAAQ;SACnB,OAAO,CAAC,KAAK;eACP,OAAO,CAAC,WAAW;;sBAEZ,YAAY,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC;;EAEtD,OAAO;;;;;;;;;EASP,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,UAAU,EAAE,SAAS,CAAC,SAAS;YAC/B,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;SAClD,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,YAAY,GAAmB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAE9D,OAAO;YACL,GAAG,OAAO;YACV,gBAAgB,EAAE,YAAY,CAAC,cAAc;YAC7C,YAAY,EAAE,YAAY,CAAC,UAAU;YACrC,WAAW,EAAE,YAAY,CAAC,SAAS;YACnC,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qDAAqD;QACrD,OAAO;YACL,GAAG,OAAO;YACV,gBAAgB,EAAE,QAAQ;YAC1B,YAAY,EAAE,GAAG;YACjB,WAAW,EAAE,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;YACzF,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAmB,EACnB,YAAiC;IAEjC,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,2CAA2C;YAC3C,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,OAAO;gBACV,gBAAgB,EAAE,QAAQ;gBAC1B,YAAY,EAAE,GAAG;gBACjB,WAAW,EAAE,uCAAuC;gBACpD,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/ai/scanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/ai/scanner.ts"],"names":[],"mappings":"AAAA;;GAEG;AAWH,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,kBAAkB,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CA+EvB;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,OAAO,EAAE,EACnB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC,cAAc,EAAE,CAAC,CAwB3B"}
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/ai/scanner.ts"],"names":[],"mappings":"AAAA;;GAEG;AAWH,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,kBAAkB,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CA8EvB;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,OAAO,EAAE,EACnB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC,cAAc,EAAE,CAAC,CAwB3B"}

package/dist/ai/scanner.js

@@ -14,7 +14,7 @@ import { triageFindings } from './rules/triage.js';
  * Run AI-powered HIPAA scanning on target files
  */
 export async function runAIScan(targetDir, options = {}) {
-    const { enableTriage = true, enableLLMRules = true, budgetCents = AI_CONFIG.budget.defaultMaxCentsPerScan, targetFiles = [], } = options;
+    const { enableLLMRules = true, budgetCents = AI_CONFIG.budget.defaultMaxCentsPerScan, targetFiles = [], } = options;
     if (!isAIAvailable()) {
         console.warn('⚠️  AI scanning disabled: ANTHROPIC_API_KEY or VLAYER_AI_KEY not found');
         return {

package/dist/ai/scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/ai/scanner.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAuBnD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAiB,EACjB,UAAyB,EAAE;IAE3B,MAAM,EACJ,YAAY,GAAG,IAAI,EACnB,cAAc,GAAG,IAAI,EACrB,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,sBAAsB,EACrD,WAAW,GAAG,EAAE,GACjB,GAAG,OAAO,CAAC;IAEZ,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACV,wEAAwE,CACzE,CAAC;QACF,OAAO;YACL,UAAU,EAAE,EAAE;YACd,eAAe,EAAE,EAAE;YACnB,KAAK,EAAE;gBACL,YAAY,EAAE,CAAC;gBACf,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,CAAC;gBACZ,kBAAkB,EAAE,CAAC;aACtB;SACF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAEpD,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,OAAO,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAEnE,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,gBAAgB;IAChB,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,uBAAuB,CAAC,CAAC;QAElE,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAEzD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,CAC9C,QAAQ,EACR,WAAW,EACX,QAAQ,CACT,CAAC;gBAEF,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBAC7B,YAAY,EAAE,CAAC;gBAEf,IAAI,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC;oBAC/B,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;oBAC1D,MAAM;gBACR,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,kBAAkB,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CACT,uBAAuB,YAAY,WAAW,UAAU,CAAC,MAAM,cAAc,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CACzG,CAAC;IAEF,OAAO;QACL,UAAU;QACV,eAAe,EAAE,EAAE;QACnB,KAAK,EAAE;YACL,YAAY;YACZ,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,UAAU;YACvC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa;YACnC,SAAS,EAAE,CAAC,EAAE,yBAAyB;YACvC,kBAAkB,EAAE,CAAC,EAAE,+BAA+B;SACvD;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAmB,EACnB,YAAiC;IAEjC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,GAAG,CAAC;YACJ,gBAAgB,EAAE,QAAiB;YACnC,YAAY,EAAE,GAAG;YACjB,WAAW,EAAE,kBAAkB;YAC/B,MAAM,EAAE,QAAiB;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE7D,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,gBAAgB,CAC/C,CAAC,MAAM,CAAC;IAET,OAAO,CAAC,GAAG,CACT,sBAAsB,cAAc,2BAA2B,CAChE,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/ai/scanner.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAuBnD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAiB,EACjB,UAAyB,EAAE;IAE3B,MAAM,EACJ,cAAc,GAAG,IAAI,EACrB,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,sBAAsB,EACrD,WAAW,GAAG,EAAE,GACjB,GAAG,OAAO,CAAC;IAEZ,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACV,wEAAwE,CACzE,CAAC;QACF,OAAO;YACL,UAAU,EAAE,EAAE;YACd,eAAe,EAAE,EAAE;YACnB,KAAK,EAAE;gBACL,YAAY,EAAE,CAAC;gBACf,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,CAAC;gBACZ,kBAAkB,EAAE,CAAC;aACtB;SACF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAEpD,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,OAAO,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAEnE,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,gBAAgB;IAChB,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,uBAAuB,CAAC,CAAC;QAElE,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAEzD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,CAC9C,QAAQ,EACR,WAAW,EACX,QAAQ,CACT,CAAC;gBAEF,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBAC7B,YAAY,EAAE,CAAC;gBAEf,IAAI,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC;oBAC/B,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;oBAC1D,MAAM;gBACR,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,kBAAkB,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CACT,uBAAuB,YAAY,WAAW,UAAU,CAAC,MAAM,cAAc,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CACzG,CAAC;IAEF,OAAO;QACL,UAAU;QACV,eAAe,EAAE,EAAE;QACnB,KAAK,EAAE;YACL,YAAY;YACZ,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,UAAU;YACvC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa;YACnC,SAAS,EAAE,CAAC,EAAE,yBAAyB;YACvC,kBAAkB,EAAE,CAAC,EAAE,+BAA+B;SACvD;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAmB,EACnB,YAAiC;IAEjC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,GAAG,CAAC;YACJ,gBAAgB,EAAE,QAAiB;YACnC,YAAY,EAAE,GAAG;YACjB,WAAW,EAAE,kBAAkB;YAC/B,MAAM,EAAE,QAAiB;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE7D,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,gBAAgB,CAC/C,CAAC,MAAM,CAAC;IAET,OAAO,CAAC,GAAG,CACT,sBAAsB,cAAc,2BAA2B,CAChE,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli.js

@@ -12,7 +12,25 @@ import { generateAuditReport, generateTextAuditReport } from './reporters/audit-
 import { loadCustomRules, validateRulesFile } from './rules/index.js';
 import { formatScore, getScoreColor } from './compliance-score.js';
 import { generateAuditorReport } from './reporters/auditor-report.js';
+import { generateScanPdf } from './reporters/scan-pdf-report.js';
+import { loadConfig } from './config.js';
+import { resolveBranding } from './reporters/branding.js';
 import { writeFile } from 'fs/promises';
+/**
+ * Build branding from CLI flags (precedence) + config, and print any warnings
+ * (missing/invalid logo) without aborting. Returns undefined when nothing was
+ * supplied, so reports keep their default VLayer presentation.
+ */
+async function buildBranding(targetPath, configFile, flags) {
+    const config = await loadConfig(resolve(targetPath), configFile);
+    const branding = resolveBranding({ name: flags.brandName, logo: flags.brandLogo }, config.branding, resolve(targetPath));
+    for (const warning of branding.warnings) {
+        console.warn(chalk.yellow(`⚠ ${warning}`));
+    }
+    if (!branding.name && !branding.logoPath)
+        return undefined;
+    return branding;
+}
 const program = new Command();
 program
     .name('vlayer')
@@ -25,7 +43,7 @@ program
     .option('-c, --categories <categories...>', 'Compliance categories to check')
     .option('-e, --exclude <patterns>', 'Glob patterns to exclude (comma-separated or space-separated)')
     .option('-o, --output <path>', 'Output file path for the report')
-    .option('-f, --format <format>', 'Report format: json, html, markdown', 'json')
+    .option('-f, --format <format>', 'Report format: json, html, markdown, pdf', 'json')
     .option('--config <path>', 'Path to configuration file')
     .option('--rules <path>', 'Path to custom rules YAML file')
     .option('--baseline <path>', 'Path to baseline file for comparison')
@@ -34,6 +52,9 @@ program
     .option('--no-ai', 'Disable AI-powered triage and analysis')
     .option('--audit', 'Run npm audit and include dependency vulnerabilities in report')
     .option('--verbose', 'Show all individual findings instead of grouped summary')
+    .option('--brand-name <name>', 'White-label: name shown as report author (html/pdf reports)')
+    .option('--brand-logo <path>', 'White-label: logo image (png/jpg/svg) for cover and header')
+    .option('--include-own-artifacts', "Also scan vlayer's own outputs (reports, baseline, samples/) — excluded by default")
     .action(async (path, options) => {
     const spinner = ora('Scanning repository...').start();
     const absolutePath = resolve(path);
@@ -70,6 +91,7 @@ program
             configFile: options.config,
             baselineFile: options.baseline,
             minConfidence: options.minConfidence,
+            includeOwnArtifacts: options.includeOwnArtifacts,
         });
         spinner.succeed(`Scan complete. Found ${result.groupedFindings.length} unique issues (${result.rawFindingsCount} total occurrences).`);
         // Run npm audit if --audit flag is provided
@@ -107,11 +129,16 @@ program
         const comparison = result.complianceScore
             ? compareScan(result.complianceScore.score, result.findings, previousScan)
             : null;
+        // Branding only affects the rendered html/pdf reports.
+        const branding = options.format === 'html' || options.format === 'pdf'
+            ? await buildBranding(path, options.config, options)
+            : undefined;
         const reportOptions = {
             format: options.format,
             outputPath: options.output,
             vulnerabilities,
             scanComparison: comparison,
+            branding,
         };
         await generateReport(result, path, reportOptions);
         // Save current scan to history
@@ -682,7 +709,8 @@ program
     .command('report')
     .description('Generate auditor-ready compliance report with SHA256 hash')
     .argument('<path>', 'Path to the repository')
-    .option('-o, --output <path>', 'Output file path for the report', 'vlayer-audit-report.html')
+    .option('-o, --output <path>', 'Output file path (default: vlayer-audit-report.<html|pdf>)')
+    .option('-f, --format <format>', 'Report format: html, pdf', 'html')
     .option('--org <name>', 'Organization name for the report')
     .option('--period <period>', 'Report period (e.g., "January 2024")')
     .option('--auditor <name>', 'Auditor name')
@@ -691,7 +719,15 @@ program
     .option('--config <path>', 'Path to configuration file')
     .option('--baseline <path>', 'Path to baseline file')
     .option('--include-baseline', 'Include baseline comparison in report')
+    .option('--brand-name <name>', 'White-label: name shown as report author')
+    .option('--brand-logo <path>', 'White-label: logo image (png/jpg/svg) for cover and header')
+    .option('--include-own-artifacts', "Also scan vlayer's own outputs (reports, baseline, samples/) — excluded by default")
     .action(async (path, options) => {
+    const format = (options.format || 'html').toLowerCase();
+    if (format !== 'html' && format !== 'pdf') {
+        console.error(chalk.red(`Invalid format "${options.format}". Use "html" or "pdf".`));
+        process.exit(1);
+    }
     const spinner = ora('Generating auditor report...').start();
     try {
         const categories = options.categories;
@@ -713,21 +749,44 @@ program
             exclude: excludePatterns,
             configFile: options.config,
             baselineFile: options.baseline,
+            includeOwnArtifacts: options.includeOwnArtifacts,
         });
         if (!result.complianceScore) {
             spinner.fail('Failed to calculate compliance score');
             process.exit(1);
         }
-        const { html, hash } = generateAuditorReport(result, path, {
-            organizationName: options.org,
-            reportPeriod: options.period,
-            auditorName: options.auditor,
-            includeBaseline: options.includeBaseline,
-        });
-        await writeFile(options.output, html, 'utf-8');
-        spinner.succeed(`Auditor report generated: ${options.output}`);
+        const branding = await buildBranding(path, options.config, options);
+        const outputPath = options.output || (format === 'pdf' ? 'vlayer-audit-report.pdf' : 'vlayer-audit-report.html');
+        let hash;
+        if (format === 'pdf') {
+            const pdf = await generateScanPdf(result, path, {
+                organizationName: options.org,
+                reportPeriod: options.period,
+                auditorName: options.auditor,
+                includeBaseline: options.includeBaseline,
+                branding,
+            });
+            await writeFile(outputPath, pdf.buffer);
+            hash = pdf.hash;
+        }
+        else {
+            const report = generateAuditorReport(result, path, {
+                organizationName: options.org,
+                reportPeriod: options.period,
+                auditorName: options.auditor,
+                includeBaseline: options.includeBaseline,
+                branding,
+            });
+            await writeFile(outputPath, report.html, 'utf-8');
+            hash = report.hash;
+        }
+        spinner.succeed(`Auditor report generated: ${outputPath}`);
         console.log(chalk.bold('\n📄 Report Details:\n'));
-        console.log(`${chalk.cyan('Location:')} ${options.output}`);
+        console.log(`${chalk.cyan('Location:')} ${outputPath}`);
+        console.log(`${chalk.cyan('Format:')} ${format.toUpperCase()}`);
+        if (branding?.name) {
+            console.log(`${chalk.cyan('Prepared by:')} ${branding.name}`);
+        }
         console.log(`${chalk.cyan('SHA256 Hash:')} ${chalk.gray(hash)}`);
         console.log(`${chalk.cyan('Compliance Score:')} ${formatScore(result.complianceScore)}`);
         console.log(`${chalk.cyan('Total Findings:')} ${result.complianceScore.breakdown.total}`);
@@ -738,7 +797,12 @@ program
         console.log(chalk.gray('   • Detailed findings with HIPAA references'));
         console.log(chalk.gray('   • Suppression and acknowledgment audit trails'));
         console.log(chalk.gray('   • SHA256 hash for document integrity verification'));
-        console.log(chalk.gray('   • Print-friendly CSS for PDF export\n'));
+        if (format === 'html') {
+            console.log(chalk.gray('   • Print-friendly CSS for PDF export\n'));
+        }
+        else {
+            console.log('');
+        }
     }
     catch (error) {
         spinner.fail('Report generation failed');
@@ -1091,7 +1155,7 @@ marketplaceCommand
     .command('update')
     .description('Update installed rules to latest versions')
     .option('--dry-run', 'Show what would be updated without installing')
-    .action(async (options) => {
+    .action(async (_options) => {
     const spinner = ora('Checking for updates...').start();
     try {
         const { RulesInstaller } = await import('./marketplace/index.js');