vibe-checking 1.0.0

package/README.md

@@ -0,0 +1,53 @@
+# vibecheck
+
+Audit AI-generated codebases — trace security findings back to the prompts that caused them.
+
+## Quick start
+
+```bash
+npx vibecheck --with-claude-history
+```
+
+No account. No upload. Everything stays local.
+
+## What it does
+
+1. **Scans** your repo for secrets (gitleaks), SAST issues (semgrep), missing Supabase RLS, and vulnerable dependencies (npm audit)
+2. **Reads** your Claude Code session history and **correlates** each finding to the prompt that generated it
+3. **Shows** rewritten prompts that would have produced secure code the first time
+4. **Generates** a shareable HTML report
+
+## Requirements
+
+- Node.js ≥ 18
+- For full scanning: [gitleaks](https://github.com/gitleaks/gitleaks) and [semgrep](https://semgrep.dev) installed
+- Degrades gracefully if scanners are missing
+
+## Usage
+
+```bash
+npx vibecheck                             # scan current directory
+npx vibecheck --with-claude-history       # scan + trace prompt origins
+npx vibecheck --db-url postgres://...     # include live RLS check
+npx vibecheck ~/projects/my-app           # scan a specific directory
+```
+
+## Interactive commands
+
+| Command | Action |
+|---------|--------|
+| `1-N` | Inspect a finding |
+| `fix` / `f` | Show the secure prompt rewrite |
+| `ignore` / `i` | Dismiss the current finding |
+| `next` / `n` | Jump to the next open finding |
+| `list` / `l` | Reprint findings |
+| `help` / `?` | Show commands |
+| `q` | Finish and write report |
+
+## Privacy
+
+No code, prompts, or secrets leave this machine. Ever.
+
+---
+
+*vibecheck looked back at what happened. It can't stop the next insecure prompt — [Symbiotic](https://www.symbioticsec.ai) does that at generation time, continuously.*

package/dist/claude/correlator.d.ts

@@ -0,0 +1,2 @@
+import type { Finding, ClaudeSession } from "../types.js";
+export declare function correlateFindings(findings: Finding[], sessions: ClaudeSession[], repoPath: string): void;

package/dist/claude/correlator.js

@@ -0,0 +1,179 @@
+import { basename, resolve } from "node:path";
+export function correlateFindings(findings, sessions, repoPath) {
+    for (const finding of findings) {
+        if (finding.trace || finding.manual)
+            continue;
+        const correlation = findCorrelation(finding, sessions, repoPath);
+        if (correlation) {
+            finding.trace = correlation.trace;
+            finding.fix = correlation.fix;
+        }
+        else if (!finding.manual) {
+            finding.manual = guessManualNote(finding);
+        }
+    }
+}
+function findCorrelation(finding, sessions, repoPath) {
+    const findingPath = extractFilePath(finding.path);
+    if (!findingPath)
+        return null;
+    for (const session of sessions) {
+        for (const prompt of session.prompts) {
+            const matchedFile = prompt.filesGenerated.find((f) => {
+                const resolved = f.startsWith("/") ? f : resolve(repoPath, f);
+                return (resolved.endsWith(findingPath) ||
+                    basename(resolved) === basename(findingPath) ||
+                    f === findingPath ||
+                    f.endsWith(findingPath));
+            });
+            if (matchedFile) {
+                const trace = buildTrace(finding, prompt, session, matchedFile);
+                const fix = generateFix(finding, prompt);
+                return { trace, fix };
+            }
+        }
+    }
+    return null;
+}
+function extractFilePath(path) {
+    // "git history · commit abc1234" → no file path for correlation
+    if (path.startsWith("git history"))
+        return null;
+    if (path.startsWith("database ·"))
+        return null;
+    if (path.startsWith("package.json"))
+        return null;
+    // "supabase/migrations/0007_orgs.sql" or "app/api/upload/route.ts"
+    return path;
+}
+function buildTrace(finding, prompt, session, matchedFile) {
+    const ts = formatTimestamp(prompt.timestamp || session.timestamp);
+    const lineCount = estimateLineCount(prompt, matchedFile);
+    return {
+        prompt: `"${truncate(prompt.text, 120)}"`,
+        session: `${ts} · claude code`,
+        file: `${matchedFile}${lineCount ? ` (+${lineCount} lines)` : ""}`,
+        result: inferResult(finding),
+    };
+}
+function inferResult(finding) {
+    const title = finding.title.toLowerCase();
+    const meta = finding.meta.toLowerCase();
+    if (title.includes("rls") || title.includes("row level security")) {
+        return "RLS was never enabled — the prompt asked for the schema, not the access rules.";
+    }
+    if (title.includes("validation") || title.includes("upload")) {
+        return "No validation generated. The prompt never mentioned constraints, so none were added.";
+    }
+    if (title.includes("injection") || title.includes("interpolat")) {
+        return "Raw query params concatenated into the query. No parameterization requested.";
+    }
+    if (title.includes("webhook") || title.includes("signature")) {
+        return "Handler trusts the payload directly. Signature verification was never requested.";
+    }
+    if (title.includes("xss") || title.includes("cross-site")) {
+        return "User input rendered without sanitization. The prompt didn't mention output encoding.";
+    }
+    if (meta.includes("auth") || title.includes("auth")) {
+        return "No authentication check generated. The prompt didn't specify access control.";
+    }
+    if (title.includes("service-role") || title.includes("service_role")) {
+        return "The service-role client was placed in a client-accessible module. The prompt didn't specify server-only.";
+    }
+    return `The prompt produced this code without the security constraint. The omission led to ${finding.title.toLowerCase()}.`;
+}
+function generateFix(finding, prompt) {
+    const originalPrompt = prompt.text.toLowerCase();
+    const title = finding.title.toLowerCase();
+    if (title.includes("rls") || title.includes("row level security")) {
+        return [
+            `"${truncate(prompt.text, 80)}.`,
+            `Enable row level security and add a policy so a user can only select rows`,
+            `for their own records. Deny anon access by default."`,
+        ];
+    }
+    if (title.includes("upload") || title.includes("validation")) {
+        return [
+            `"${truncate(prompt.text, 80)}.`,
+            `Validate MIME type (images only), cap size at 5MB, sanitize the filename`,
+            `against path traversal, require an authenticated session, and enforce an`,
+            `RLS policy so a user can only write to their own folder."`,
+        ];
+    }
+    if (title.includes("injection") || title.includes("interpolat")) {
+        return [
+            `"${truncate(prompt.text, 80)}.`,
+            `Validate the params as ISO dates and use parameterized Supabase filters —`,
+            `never string-concatenate user input into the query."`,
+        ];
+    }
+    if (title.includes("webhook") || title.includes("signature")) {
+        return [
+            `"${truncate(prompt.text, 80)}.`,
+            `Verify the Stripe-Signature header against the webhook secret and reject`,
+            `any event that fails verification."`,
+        ];
+    }
+    if (title.includes("xss") || title.includes("cross-site")) {
+        return [
+            `"${truncate(prompt.text, 80)}.`,
+            `Sanitize all user-provided content before rendering. Use proper encoding`,
+            `and never set innerHTML with unescaped user data."`,
+        ];
+    }
+    if (title.includes("auth") && !title.includes("webhook")) {
+        return [
+            `"${truncate(prompt.text, 80)}.`,
+            `Add authentication middleware that verifies the session token before`,
+            `processing the request. Reject unauthenticated requests with 401."`,
+        ];
+    }
+    // Generic fallback fix
+    return [
+        `"${truncate(prompt.text, 80)}.`,
+        `Add security constraints: validate inputs, enforce authentication,`,
+        `and follow least-privilege defaults."`,
+    ];
+}
+function formatTimestamp(ts) {
+    if (!ts)
+        return "unknown date";
+    try {
+        const d = new Date(ts);
+        if (isNaN(d.getTime()))
+            return ts;
+        return d.toISOString().replace("T", " ").slice(0, 16);
+    }
+    catch {
+        return ts;
+    }
+}
+function truncate(s, max) {
+    const clean = s.replace(/\n/g, " ").trim();
+    if (clean.length <= max)
+        return clean;
+    return clean.slice(0, max - 1) + "…";
+}
+function estimateLineCount(prompt, matchedFile) {
+    for (const tc of prompt.toolCalls) {
+        if (tc.filePath && tc.filePath.endsWith(basename(matchedFile))) {
+            if (tc.content) {
+                return tc.content.split("\n").length;
+            }
+        }
+    }
+    return null;
+}
+function guessManualNote(finding) {
+    if (finding.source === "gitleaks") {
+        return "Not a generation issue — a leaked credential. Rotate the key in the relevant service, then purge it from git history. No prompt rewrite applies.";
+    }
+    if (finding.source === "deps") {
+        return "Not a generation issue — a vulnerable dependency. Update or replace the package. No prompt rewrite applies.";
+    }
+    if (finding.title.toLowerCase().includes("service-role")) {
+        return "Move the service-role client to a server-only module. Architectural fix, not a prompt rewrite.";
+    }
+    return null;
+}
+//# sourceMappingURL=correlator.js.map

package/dist/claude/correlator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlator.js","sourceRoot":"","sources":["../../src/claude/correlator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAa9C,MAAM,UAAU,iBAAiB,CAC/B,QAAmB,EACnB,QAAyB,EACzB,QAAgB;IAEhB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM;YAAE,SAAS;QAE9C,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;YAClC,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC;QAChC,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,OAAgB,EAChB,QAAyB,EACzB,QAAgB;IAEhB,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACnD,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC9D,OAAO,CACL,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAC9B,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,WAAW,CAAC;oBAC5C,CAAC,KAAK,WAAW;oBACjB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CACxB,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;gBAChE,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACzC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,gEAAgE;IAChE,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjD,mEAAmE;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,OAAgB,EAChB,MAAoB,EACpB,OAAsB,EACtB,WAAmB;IAEnB,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEzD,OAAO;QACL,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG;QACzC,OAAO,EAAE,GAAG,EAAE,gBAAgB;QAC9B,IAAI,EAAE,GAAG,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;QAClE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAExC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAClE,OAAO,gFAAgF,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,OAAO,sFAAsF,CAAC;IAChG,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,OAAO,8EAA8E,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,OAAO,kFAAkF,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1D,OAAO,sFAAsF,CAAC;IAChG,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,OAAO,8EAA8E,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,OAAO,0GAA0G,CAAC;IACpH,CAAC;IAED,OAAO,sFAAsF,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC;AAC9H,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB,EAAE,MAAoB;IACzD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAE1C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAClE,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,2EAA2E;YAC3E,sDAAsD;SACvD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,0EAA0E;YAC1E,0EAA0E;YAC1E,2DAA2D;SAC5D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,2EAA2E;YAC3E,sDAAsD;SACvD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,0EAA0E;YAC1E,qCAAqC;SACtC,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,0EAA0E;YAC1E,oDAAoD;SACrD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;YAChC,sEAAsE;YACtE,oEAAoE;SACrE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,OAAO;QACL,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG;QAChC,oEAAoE;QACpE,uCAAuC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,IAAI,CAAC,EAAE;QAAE,OAAO,cAAc,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAoB,EACpB,WAAmB;IAEnB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,kJAAkJ,CAAC;IAC5J,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,6GAA6G,CAAC;IACvH,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzD,OAAO,gGAAgG,CAAC;IAC1G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/claude/reader.d.ts

@@ -0,0 +1,5 @@
+import type { ClaudeSession } from "../types.js";
+export declare function readClaudeHistory(repoPath: string): Promise<{
+    sessions: ClaudeSession[];
+    sessionCount: number;
+}>;

package/dist/claude/reader.js

@@ -0,0 +1,191 @@
+import { readdir, readFile, stat } from "node:fs/promises";
+import { join, resolve, basename } from "node:path";
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+const CLAUDE_DIRS = [
+    join(homedir(), ".claude", "projects"),
+    join(homedir(), ".claude"),
+];
+export async function readClaudeHistory(repoPath) {
+    const resolvedRepo = resolve(repoPath);
+    const allSessions = [];
+    for (const dir of CLAUDE_DIRS) {
+        if (!existsSync(dir))
+            continue;
+        const sessions = await findSessionFiles(dir, resolvedRepo);
+        allSessions.push(...sessions);
+    }
+    // Sort by timestamp, newest first
+    allSessions.sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime());
+    return { sessions: allSessions, sessionCount: allSessions.length };
+}
+async function findSessionFiles(baseDir, repoPath) {
+    const sessions = [];
+    async function walk(dir) {
+        let entries;
+        try {
+            entries = await readdir(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const fullPath = join(dir, entry.name);
+            if (entry.isDirectory()) {
+                // Look inside project-specific directories
+                await walk(fullPath);
+            }
+            else if (entry.name.endsWith(".jsonl") || entry.name.endsWith(".json")) {
+                try {
+                    const session = await parseSessionFile(fullPath, repoPath);
+                    if (session && session.prompts.length > 0) {
+                        sessions.push(session);
+                    }
+                }
+                catch {
+                    // Skip unparseable files
+                }
+            }
+        }
+    }
+    await walk(baseDir);
+    return sessions;
+}
+async function parseSessionFile(filePath, repoPath) {
+    const content = await readFile(filePath, "utf-8");
+    const lines = content.split("\n").filter(Boolean);
+    let sessionTimestamp = "";
+    const prompts = [];
+    // Check if this session is related to the repo
+    let isRelevant = false;
+    for (const line of lines) {
+        let entry;
+        try {
+            entry = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        // Detect relevance from the session's working directory or file paths
+        if (!isRelevant) {
+            const cwd = (entry.cwd || entry.workingDirectory || "");
+            if (cwd && resolve(cwd).startsWith(repoPath)) {
+                isRelevant = true;
+            }
+        }
+        // Extract user messages as prompts
+        const role = entry.role || entry.type;
+        if (role === "human" || role === "user") {
+            const text = extractText(entry);
+            if (text) {
+                const ts = entry.timestamp ||
+                    entry.createdAt ||
+                    sessionTimestamp;
+                if (!sessionTimestamp)
+                    sessionTimestamp = ts;
+                prompts.push({
+                    text,
+                    timestamp: ts,
+                    filesGenerated: [],
+                    toolCalls: [],
+                });
+            }
+        }
+        // Extract assistant responses with tool usage to find generated files
+        if (role === "assistant") {
+            const toolCalls = extractToolCalls(entry);
+            if (toolCalls.length > 0 && prompts.length > 0) {
+                const lastPrompt = prompts[prompts.length - 1];
+                lastPrompt.toolCalls.push(...toolCalls);
+                for (const tc of toolCalls) {
+                    if (tc.filePath) {
+                        lastPrompt.filesGenerated.push(tc.filePath);
+                    }
+                }
+            }
+        }
+    }
+    // If file path hints at the project
+    if (!isRelevant) {
+        const repoName = basename(repoPath).toLowerCase();
+        if (filePath.toLowerCase().includes(repoName)) {
+            isRelevant = true;
+        }
+    }
+    if (!isRelevant && prompts.length > 0) {
+        // Check if any generated files match repo files
+        for (const p of prompts) {
+            for (const f of p.filesGenerated) {
+                if (resolve(f).startsWith(repoPath) || !f.startsWith("/")) {
+                    isRelevant = true;
+                    break;
+                }
+            }
+            if (isRelevant)
+                break;
+        }
+    }
+    if (!isRelevant)
+        return null;
+    // Try to get session timestamp from file stat if not found in content
+    if (!sessionTimestamp) {
+        try {
+            const s = await stat(filePath);
+            sessionTimestamp = s.mtime.toISOString();
+        }
+        catch {
+            sessionTimestamp = new Date().toISOString();
+        }
+    }
+    return { timestamp: sessionTimestamp, prompts };
+}
+function extractText(entry) {
+    if (typeof entry.content === "string")
+        return entry.content;
+    if (typeof entry.message === "string")
+        return entry.message;
+    if (Array.isArray(entry.content)) {
+        const texts = entry.content
+            .filter((c) => c.type === "text" && typeof c.text === "string")
+            .map((c) => c.text);
+        return texts.join("\n");
+    }
+    if (entry.message &&
+        typeof entry.message === "object" &&
+        entry.message.content) {
+        return extractText(entry.message);
+    }
+    return "";
+}
+function extractToolCalls(entry) {
+    const calls = [];
+    const content = entry.content;
+    if (Array.isArray(content)) {
+        for (const block of content) {
+            if (block.type === "tool_use" || block.type === "tool_call") {
+                const tc = {
+                    tool: (block.name || block.function?.name || "unknown"),
+                    args: (block.input || block.function?.arguments || {}),
+                };
+                // Extract file paths from write/create tool calls
+                const toolName = tc.tool.toLowerCase();
+                if (toolName.includes("write") ||
+                    toolName.includes("create") ||
+                    toolName.includes("edit") ||
+                    toolName.includes("file")) {
+                    const path = tc.args.file_path ||
+                        tc.args.path ||
+                        tc.args.filePath ||
+                        tc.args.file;
+                    if (path) {
+                        tc.filePath = path;
+                        tc.content = tc.args.content || undefined;
+                    }
+                }
+                calls.push(tc);
+            }
+        }
+    }
+    return calls;
+}
+//# sourceMappingURL=reader.js.map

package/dist/claude/reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader.js","sourceRoot":"","sources":["../../src/claude/reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,MAAM,WAAW,GAAG;IAClB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC;CAC3B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB;IAEhB,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,WAAW,GAAoB,EAAE,CAAC;IAExC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC3D,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,kCAAkC;IAClC,WAAW,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAC5E,CAAC;IAEF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAe,EACf,QAAgB;IAEhB,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,2CAA2C;gBAC3C,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzE,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAC3D,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAID,KAAK,UAAU,gBAAgB,CAC7B,QAAgB,EAChB,QAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAElD,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,+CAA+C;IAC/C,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,KAA8B,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,sEAAsE;QACtE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAW,CAAC;YAClE,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7C,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;QACtC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,EAAE,GACL,KAAK,CAAC,SAAoB;oBAC1B,KAAK,CAAC,SAAoB;oBAC3B,gBAAgB,CAAC;gBACnB,IAAI,CAAC,gBAAgB;oBAAE,gBAAgB,GAAG,EAAE,CAAC;gBAE7C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,SAAS,EAAE,EAAE;oBACb,cAAc,EAAE,EAAE;oBAClB,SAAS,EAAE,EAAE;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC/C,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;gBACxC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;oBAC3B,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;wBAChB,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;oBAC9C,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,gDAAgD;QAChD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1D,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,UAAU;gBAAE,MAAM;QACxB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,sEAAsE;IACtE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B;IACjD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAE5D,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAE5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO;aACxB,MAAM,CACL,CAAC,CAA0B,EAAE,EAAE,CAC7B,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAClD;aACA,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,IAAc,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,IACE,KAAK,CAAC,OAAO;QACb,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAChC,KAAK,CAAC,OAAmC,CAAC,OAAO,EAClD,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,CAAC,OAAkC,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA8B;IACtD,MAAM,KAAK,GAAe,EAAE,CAAC;IAE7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC5D,MAAM,EAAE,GAAa;oBACnB,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS,CAAW;oBACjE,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAGpD;iBACF,CAAC;gBAEF,kDAAkD;gBAClD,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACvC,IACE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAC1B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC3B,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACzB,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EACzB,CAAC;oBACD,MAAM,IAAI,GACP,EAAE,CAAC,IAAI,CAAC,SAAoB;wBAC5B,EAAE,CAAC,IAAI,CAAC,IAAe;wBACvB,EAAE,CAAC,IAAI,CAAC,QAAmB;wBAC3B,EAAE,CAAC,IAAI,CAAC,IAAe,CAAC;oBAC3B,IAAI,IAAI,EAAE,CAAC;wBACT,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC;wBACnB,EAAE,CAAC,OAAO,GAAI,EAAE,CAAC,IAAI,CAAC,OAAkB,IAAI,SAAS,CAAC;oBACxD,CAAC;gBACH,CAAC;gBAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,102 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import pc from "picocolors";
+import { runAllScanners } from "./scanners/aggregator.js";
+import { readClaudeHistory } from "./claude/reader.js";
+import { correlateFindings } from "./claude/correlator.js";
+import { printBoot, printNoFindings } from "./repl/display.js";
+import { startRepl } from "./repl/repl.js";
+async function main() {
+    const args = process.argv.slice(2);
+    const withClaudeHistory = args.includes("--with-claude-history");
+    const dbUrlIdx = args.indexOf("--db-url");
+    const dbUrl = dbUrlIdx !== -1 ? args[dbUrlIdx + 1] : undefined;
+    const helpFlag = args.includes("--help") || args.includes("-h");
+    if (helpFlag) {
+        printUsage();
+        process.exit(0);
+    }
+    // Determine repo path: first non-flag arg, or cwd
+    let repoPath = process.cwd();
+    for (const arg of args) {
+        if (!arg.startsWith("-") && arg !== dbUrl) {
+            repoPath = resolve(arg);
+            break;
+        }
+    }
+    // Banner
+    console.log(`$ npx vibecheck ${withClaudeHistory ? pc.magenta("--with-claude-history") : ""}`);
+    console.log();
+    // Run scanners
+    const result = await runAllScanners({ repoPath, dbUrl, withClaudeHistory }, (msg) => console.log(pc.dim(msg)));
+    // Read Claude history if requested
+    if (withClaudeHistory) {
+        try {
+            const { sessions, sessionCount } = await readClaudeHistory(repoPath);
+            result.stats.claudeSessions = sessionCount;
+            if (sessions.length > 0 && result.findings.length > 0) {
+                correlateFindings(result.findings, sessions, repoPath);
+            }
+        }
+        catch (err) {
+            console.log(pc.dim(pc.yellow(`  ⚠ could not read claude history: ${String(err)}`)));
+        }
+    }
+    // Fill in manual notes for findings that weren't correlated
+    for (const f of result.findings) {
+        if (!f.trace && !f.manual) {
+            if (f.source === "rls") {
+                f.manual =
+                    "Enable row level security on this table and add appropriate policies. Without RLS, any client with the anon key can read and write all rows.";
+            }
+            else if (f.source === "semgrep") {
+                f.manual =
+                    "This is a code-level issue found by static analysis. Review the flagged code and apply the recommended fix.";
+            }
+        }
+    }
+    // Boot line
+    printBoot(result.stats, withClaudeHistory);
+    if (result.findings.length === 0) {
+        printNoFindings();
+        return;
+    }
+    // Start interactive REPL
+    await startRepl(result.findings, result.stats, repoPath);
+}
+function printUsage() {
+    console.log(`
+${pc.bold("vibecheck")} — audit AI-generated codebases
+
+${pc.dim("USAGE")}
+  npx vibecheck [options] [path]
+
+${pc.dim("OPTIONS")}
+  --with-claude-history   Read Claude Code session history and correlate
+                          findings to the prompts that generated them
+  --db-url <url>          Live Supabase RLS check via a postgres connection
+  -h, --help              Show this help
+
+${pc.dim("EXAMPLES")}
+  npx vibecheck                             scan current directory
+  npx vibecheck --with-claude-history       scan + trace prompt origins
+  npx vibecheck --db-url postgres://...     include live RLS check
+  npx vibecheck ~/projects/my-app           scan a specific directory
+
+${pc.dim("COMMANDS (interactive)")}
+  1-N        inspect a finding
+  fix / f    show the secure prompt rewrite
+  ignore / i dismiss the current finding
+  next / n   jump to the next open finding
+  list / l   reprint findings
+  help / ?   show commands
+  q          finish and write report
+
+${pc.dim(pc.gray("local only — no code, prompts, or secrets leave this machine."))}
+`);
+}
+main().catch((err) => {
+    console.error(pc.red(`fatal: ${err.message || err}`));
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEhE,IAAI,QAAQ,EAAE,CAAC;QACb,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,kDAAkD;IAClD,IAAI,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAC1C,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YACxB,MAAM;QACR,CAAC;IACH,CAAC;IAED,SAAS;IACT,OAAO,CAAC,GAAG,CACT,mBAAmB,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAClF,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,eAAe;IACf,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,EAAE,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,EACtC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAClC,CAAC;IAEF,mCAAmC;IACnC,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAC9B,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,YAAY,CAAC;YAE3C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,EAAE,CAAC,MAAM,CACP,sCAAsC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpD,CACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACvB,CAAC,CAAC,MAAM;oBACN,8IAA8I,CAAC;YACnJ,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAClC,CAAC,CAAC,MAAM;oBACN,6GAA6G,CAAC;YAClH,CAAC;QACH,CAAC;IACH,CAAC;IAED,YAAY;IACZ,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAE3C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,eAAe,EAAE,CAAC;QAClB,OAAO;IACT,CAAC;IAED,yBAAyB;IACzB,MAAM,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CAAC;EACZ,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;;EAEpB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;;;EAGf,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;;;;;;EAMjB,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;;;;;;EAMlB,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC;;;;;;;;;EAShC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;CACjF,CAAC,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/repl/display.d.ts

@@ -0,0 +1,16 @@
+import type { Finding, FindingStatus } from "../types.js";
+export declare function printBoot(stats: {
+    gitHistory: boolean;
+    sourceScanned: boolean;
+    supabaseMigrations: boolean;
+    claudeSessions: number;
+    stack: string[];
+    contributors: number;
+}, withClaude: boolean): void;
+export declare function printList(findings: Finding[], statuses: FindingStatus[]): void;
+export declare function printInspect(finding: Finding, index: number): void;
+export declare function printFix(finding: Finding): void;
+export declare function printIgnore(index: number, ignored: boolean): void;
+export declare function printHelp(findingCount: number): void;
+export declare function printFinish(findings: Finding[], statuses: FindingStatus[], reportPath: string): void;
+export declare function printNoFindings(): void;