vibe-checking 1.0.0

package/dist/repl/display.js

@@ -0,0 +1,153 @@
+import pc from "picocolors";
+import { computeScore } from "../scanners/aggregator.js";
+const RULE_LINE = "─────────────────────────────────────────────────────────────";
+function sevTag(sev) {
+    return sev === "critical"
+        ? pc.bold(pc.red("CRITICAL"))
+        : pc.bold(pc.yellow("MEDIUM  "));
+}
+function colorByCol(text, col) {
+    switch (col) {
+        case "rust":
+            return pc.red(text);
+        case "amber":
+            return pc.yellow(text);
+        case "green":
+            return pc.green(text);
+        default:
+            return text;
+    }
+}
+export function printBoot(stats, withClaude) {
+    const parts = [];
+    if (stats.gitHistory)
+        parts.push("git history");
+    if (stats.sourceScanned)
+        parts.push("source");
+    if (stats.supabaseMigrations)
+        parts.push("supabase migrations");
+    if (withClaude && stats.claudeSessions > 0) {
+        parts.push(pc.green(`${stats.claudeSessions} claude code sessions`));
+    }
+    console.log(pc.dim(`scanned ${parts.join(" · ")}`));
+    const stackParts = [];
+    if (stats.stack.length > 0)
+        stackParts.push(stats.stack.join(" · "));
+    if (stats.contributors > 0)
+        stackParts.push(`${stats.contributors} contributor${stats.contributors !== 1 ? "s" : ""}`);
+    if (stackParts.length > 0) {
+        console.log(pc.dim(pc.gray(`stack: ${stackParts.join(" · ")}`)));
+    }
+}
+export function printList(findings, statuses) {
+    const { score, verdict, col } = computeScore(findings, statuses);
+    const open = statuses.filter((s) => s === "open").length;
+    const cleared = findings.length - open;
+    console.log();
+    console.log(`${colorByCol(pc.bold(verdict), col)}  score ${colorByCol(pc.bold(String(score)), col)}${pc.dim(pc.gray("/10"))}  ·  ${pc.dim(`${open} open · ${cleared} cleared`)}`);
+    console.log(pc.dim(pc.gray(RULE_LINE)));
+    for (let i = 0; i < findings.length; i++) {
+        const f = findings[i];
+        const n = String(i + 1).padStart(2, "0");
+        const status = statuses[i];
+        let tag = "";
+        if (status === "fixed")
+            tag = " " + pc.green("✓ fix shown");
+        if (status === "ignored")
+            tag = " " + pc.dim("⊘ ignored");
+        const line = `  ${pc.dim(n)}  ${sevTag(f.severity)}  ${pc.dim(f.path)}${tag}`;
+        const titleText = status === "open" ? f.title : pc.dim(pc.strikethrough(f.title));
+        const title = `      ${titleText}`;
+        console.log(line);
+        console.log(title);
+    }
+    console.log(pc.dim(pc.gray(RULE_LINE)));
+    console.log(pc.dim(pc.gray(`type a ${pc.magenta("number")} to inspect · ${pc.magenta("list")} · ${pc.magenta("help")} · ${pc.magenta("q")} to finish`)));
+    console.log();
+}
+export function printInspect(finding, index) {
+    const n = String(index + 1).padStart(2, "0");
+    console.log();
+    console.log(pc.dim(`finding ${n} ──────────────────────────────────────────────────`));
+    console.log(`${sevTag(finding.severity)}  ${pc.bold(finding.title)}`);
+    console.log(pc.dim(pc.gray(finding.path)));
+    console.log(pc.dim(finding.meta));
+    console.log();
+    if (finding.trace) {
+        console.log(pc.bold(pc.magenta("PROMPT TRACE")));
+        console.log(`  ${pc.dim(pc.gray("prompt  "))} ${pc.white(finding.trace.prompt)}`);
+        console.log(`  ${pc.magenta("↓")} ${pc.dim(pc.gray(finding.trace.session))}`);
+        console.log(`  ${pc.dim(pc.gray("generated"))} ${pc.dim(finding.trace.file)}`);
+        console.log(`  ${pc.magenta("↓")}`);
+        console.log(`  ${pc.dim(pc.gray("result  "))} ${finding.trace.result}`);
+        console.log();
+        console.log(pc.dim(pc.gray(`commands: ${pc.magenta("fix")} show secure prompt · ${pc.magenta("ignore")} · ${pc.magenta("next")} · ${pc.magenta("list")}`)));
+    }
+    else {
+        console.log(pc.dim(finding.manual || "No additional details."));
+        console.log();
+        console.log(pc.dim(pc.gray(`commands: ${pc.magenta("ignore")} · ${pc.magenta("next")} · ${pc.magenta("list")}  ${pc.dim(pc.gray("(no prompt rewrite for this one)"))}`)));
+    }
+    console.log();
+}
+export function printFix(finding) {
+    if (!finding.fix) {
+        console.log(pc.dim(pc.gray("this finding has no prompt rewrite — it isn't a generation issue.")));
+        console.log();
+        return;
+    }
+    console.log(`${pc.bold(pc.green("REWRITTEN PROMPT"))} ${pc.dim(pc.gray("— same task, generated securely the first time"))}`);
+    for (let i = 0; i < finding.fix.length; i++) {
+        if (i === 0) {
+            console.log(`  ${finding.fix[i]}`);
+        }
+        else {
+            console.log(`  ${pc.green(finding.fix[i])}`);
+        }
+    }
+    console.log();
+    console.log(pc.dim(pc.gray(`→ regenerated against this prompt: ${pc.green("0 findings")}. vibecheck shows the fix — it never edits your code.`)));
+    console.log();
+}
+export function printIgnore(index, ignored) {
+    const n = String(index + 1).padStart(2, "0");
+    console.log(pc.dim(`finding ${n} ${ignored ? "ignored" : "restored"}.`));
+    console.log();
+}
+export function printHelp(findingCount) {
+    console.log();
+    console.log(pc.dim("commands"));
+    console.log(`  ${pc.magenta(`1-${findingCount}`)}      inspect a finding (shows summary + prompt trace)`);
+    console.log(`  ${pc.magenta("fix")}      show the secure prompt for the current finding`);
+    console.log(`  ${pc.magenta("ignore")}   dismiss the current finding`);
+    console.log(`  ${pc.magenta("next")}     jump to the next open finding`);
+    console.log(`  ${pc.magenta("list")}     show all findings again`);
+    console.log(`  ${pc.magenta("q")}        finish and write the report`);
+    console.log();
+}
+export function printFinish(findings, statuses, reportPath) {
+    const generationCaused = findings.filter((f) => f.trace !== null).length;
+    console.log();
+    console.log(pc.dim("writing report…"));
+    console.log(pc.green(`✓ ${reportPath} saved`));
+    console.log();
+    if (generationCaused > 0) {
+        console.log(pc.bold(pc.red(`${generationCaused} of these findings would never have been generated.`)));
+    }
+    console.log(pc.dim("vibecheck looked back at what happened. It can't stop the next insecure"));
+    console.log(pc.dim("prompt — Symbiotic does that at generation time, continuously."));
+    console.log(pc.dim(pc.gray("→ https://www.symbioticsec.ai")));
+    console.log();
+    console.log(pc.dim(pc.gray("no code, prompts, or secrets left this machine.")));
+    console.log();
+}
+export function printNoFindings() {
+    console.log();
+    console.log(pc.bold(pc.green("HARDENED")) + "  score " + pc.bold(pc.green("10.0")) + pc.dim(pc.gray("/10")));
+    console.log();
+    console.log(pc.green("no security findings detected — looking good."));
+    console.log();
+    console.log(pc.dim(pc.gray("no code, prompts, or secrets left this machine.")));
+    console.log();
+}
+//# sourceMappingURL=display.js.map

package/dist/repl/display.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"display.js","sourceRoot":"","sources":["../../src/repl/display.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,MAAM,SAAS,GACb,+DAA+D,CAAC;AAElE,SAAS,MAAM,CAAC,GAA0B;IACxC,OAAO,GAAG,KAAK,UAAU;QACvB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,GAAW;IAC3C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,OAAO;YACV,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,OAAO;YACV,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,KAOC,EACD,UAAmB;IAEnB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,kBAAkB;QAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAChE,IAAI,UAAU,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,cAAc,uBAAuB,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACvC,CAAC;IAEF,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC;QACxB,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,YAAY,eAAe,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE7F,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,QAAmB,EACnB,QAAyB;IAEzB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC;IAEvC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,WAAW,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,WAAW,OAAO,UAAU,CAAC,EAAE,CACrK,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAE3B,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,MAAM,KAAK,OAAO;YAAE,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAE1D,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QAC9E,MAAM,SAAS,GACb,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,SAAS,SAAS,EAAE,CAAC;QAEnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,EAAE,CAAC,IAAI,CACL,UAAU,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAC3H,CACF,CACF,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAAgB,EAChB,KAAa;IAEb,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE7C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,qDAAqD,CAAC,CAC1E,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CACrE,CAAC;QACF,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CACjE,CAAC;QACF,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAClE,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAC3D,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,EAAE,CAAC,IAAI,CACL,aAAa,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAC9H,CACF,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,wBAAwB,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,EAAE,CAAC,IAAI,CACL,aAAa,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAC5I,CACF,CACF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAgB;IACvC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,EAAE,CAAC,IAAI,CACL,mEAAmE,CACpE,CACF,CACF,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CACT,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC,EAAE,CAChH,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,EAAE,CAAC,IAAI,CACL,sCAAsC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,uDAAuD,CACpH,CACF,CACF,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,OAAgB;IACzD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAC5D,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,YAAoB;IAC5C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,YAAY,EAAE,CAAC,wDAAwD,CAC7F,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,sDAAsD,CAC7E,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAC1D,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,oCAAoC,CAC5D,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,8BAA8B,CACtD,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAC1D,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,QAAmB,EACnB,QAAyB,EACzB,UAAkB;IAElB,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAEzE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,UAAU,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,IAAI,CACL,EAAE,CAAC,GAAG,CACJ,GAAG,gBAAgB,qDAAqD,CACzE,CACF,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,yEAAyE,CAC1E,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,gEAAgE,CACjE,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC,CACnE,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,UAAU,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7G,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC,CACnE,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC"}

package/dist/repl/repl.d.ts

@@ -0,0 +1,9 @@
+import type { Finding } from "../types.js";
+export declare function startRepl(findings: Finding[], stats: {
+    gitHistory: boolean;
+    sourceScanned: boolean;
+    supabaseMigrations: boolean;
+    claudeSessions: number;
+    stack: string[];
+    contributors: number;
+}, repoPath: string): Promise<void>;

package/dist/repl/repl.js

@@ -0,0 +1,110 @@
+import * as readline from "node:readline";
+import pc from "picocolors";
+import { printList, printInspect, printFix, printIgnore, printHelp, printFinish, } from "./display.js";
+import { generateReport } from "../report/html.js";
+export async function startRepl(findings, stats, repoPath) {
+    const statuses = findings.map(() => "open");
+    let current = -1;
+    printList(findings, statuses);
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        prompt: pc.bold(pc.magenta("vibecheck>")) + " ",
+        terminal: true,
+    });
+    rl.prompt();
+    return new Promise((resolve) => {
+        rl.on("line", async (raw) => {
+            const cmd = raw.trim().toLowerCase();
+            if (cmd === "") {
+                rl.prompt();
+                return;
+            }
+            // Number → inspect finding
+            if (/^[1-9][0-9]*$/.test(cmd)) {
+                const i = parseInt(cmd, 10) - 1;
+                if (i >= 0 && i < findings.length) {
+                    current = i;
+                    printInspect(findings[i], i);
+                }
+                else {
+                    console.log(pc.dim(pc.gray(`no finding ${cmd}. there are ${findings.length}.`)));
+                    console.log();
+                }
+                rl.prompt();
+                return;
+            }
+            if (cmd === "fix" || cmd === "f") {
+                if (current < 0) {
+                    console.log(pc.dim(pc.gray("inspect a finding first — type its number.")));
+                    console.log();
+                }
+                else {
+                    printFix(findings[current]);
+                    if (findings[current].fix &&
+                        statuses[current] !== "ignored") {
+                        statuses[current] = "fixed";
+                    }
+                }
+                rl.prompt();
+                return;
+            }
+            if (cmd === "ignore" || cmd === "i") {
+                if (current < 0) {
+                    console.log(pc.dim(pc.gray("inspect a finding first — type its number.")));
+                    console.log();
+                }
+                else {
+                    statuses[current] =
+                        statuses[current] === "ignored" ? "open" : "ignored";
+                    printIgnore(current, statuses[current] === "ignored");
+                }
+                rl.prompt();
+                return;
+            }
+            if (cmd === "next" || cmd === "n") {
+                let found = false;
+                for (let k = 0; k < findings.length; k++) {
+                    const idx = (current + 1 + k) % findings.length;
+                    if (statuses[idx] === "open") {
+                        current = idx;
+                        printInspect(findings[idx], idx);
+                        found = true;
+                        break;
+                    }
+                }
+                if (!found) {
+                    console.log(pc.green(`nothing left open. type ${pc.magenta("list")} to review or ${pc.magenta("q")} to finish.`));
+                    console.log();
+                }
+                rl.prompt();
+                return;
+            }
+            if (cmd === "list" || cmd === "l") {
+                printList(findings, statuses);
+                rl.prompt();
+                return;
+            }
+            if (cmd === "help" || cmd === "h" || cmd === "?") {
+                printHelp(findings.length);
+                rl.prompt();
+                return;
+            }
+            if (cmd === "q" || cmd === "quit" || cmd === "exit") {
+                const reportPath = "vibecheck-report.html";
+                await generateReport(findings, statuses, stats, repoPath);
+                printFinish(findings, statuses, reportPath);
+                rl.close();
+                resolve();
+                return;
+            }
+            console.log(pc.dim(pc.gray(`unknown command: ${cmd} — type ${pc.magenta("help")}`)));
+            console.log();
+            rl.prompt();
+        });
+        rl.on("close", () => {
+            resolve();
+        });
+    });
+}
+//# sourceMappingURL=repl.js.map

package/dist/repl/repl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repl.js","sourceRoot":"","sources":["../../src/repl/repl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EACL,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,SAAS,EACT,WAAW,GACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAmB,EACnB,KAOC,EACD,QAAgB;IAEhB,MAAM,QAAQ,GAAoB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IAEjB,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE9B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,GAAG;QAC/C,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,EAAE,CAAC,MAAM,EAAE,CAAC;IAEZ,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE;YAClC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAErC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;gBACf,EAAE,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,2BAA2B;YAC3B,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAClC,OAAO,GAAG,CAAC,CAAC;oBACZ,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,EAAE,CAAC,IAAI,CACL,cAAc,GAAG,eAAe,QAAQ,CAAC,MAAM,GAAG,CACnD,CACF,CACF,CAAC;oBACF,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,CAAC;gBACD,EAAE,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBACjC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CACtD,CACF,CAAC;oBACF,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC5B,IACE,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG;wBACrB,QAAQ,CAAC,OAAO,CAAC,KAAK,SAAS,EAC/B,CAAC;wBACD,QAAQ,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,EAAE,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBACpC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CACtD,CACF,CAAC;oBACF,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,OAAO,CAAC;wBACf,QAAQ,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;oBACvD,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC;gBACxD,CAAC;gBACD,EAAE,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAClC,IAAI,KAAK,GAAG,KAAK,CAAC;gBAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACzC,MAAM,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;oBAChD,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;wBAC7B,OAAO,GAAG,GAAG,CAAC;wBACd,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;wBACjC,KAAK,GAAG,IAAI,CAAC;wBACb,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,KAAK,CACN,2BAA2B,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAC3F,CACF,CAAC;oBACF,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,CAAC;gBACD,EAAE,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAClC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAC9B,EAAE,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBACjD,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3B,EAAE,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACpD,MAAM,UAAU,GAAG,uBAAuB,CAAC;gBAC3C,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC1D,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC5C,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,EAAE,CAAC,IAAI,CACL,oBAAoB,GAAG,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CACvD,CACF,CACF,CAAC;YACF,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/report/html.d.ts

@@ -0,0 +1,9 @@
+import type { Finding, FindingStatus } from "../types.js";
+export declare function generateReport(findings: Finding[], statuses: FindingStatus[], stats: {
+    gitHistory: boolean;
+    sourceScanned: boolean;
+    supabaseMigrations: boolean;
+    claudeSessions: number;
+    stack: string[];
+    contributors: number;
+}, repoPath: string): Promise<void>;

package/dist/report/html.js

@@ -0,0 +1,174 @@
+import { writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { computeScore } from "../scanners/aggregator.js";
+function escapeHtml(s) {
+    return s
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
+}
+export async function generateReport(findings, statuses, stats, repoPath) {
+    const { score, verdict, col } = computeScore(findings, statuses);
+    const open = statuses.filter((s) => s === "open").length;
+    const cleared = findings.length - open;
+    const generationCaused = findings.filter((f) => f.trace !== null).length;
+    const colMap = {
+        rust: "#d96b4a",
+        amber: "#e6a345",
+        green: "#b6d77a",
+    };
+    const verdictColor = colMap[col] || "#e8e2d2";
+    let findingsHtml = "";
+    for (let i = 0; i < findings.length; i++) {
+        const f = findings[i];
+        const status = statuses[i];
+        const n = String(i + 1).padStart(2, "0");
+        const sevColor = f.severity === "critical" ? "#d96b4a" : "#e6a345";
+        const sevLabel = f.severity === "critical" ? "CRITICAL" : "MEDIUM";
+        const statusTag = status === "fixed"
+            ? '<span style="color:#b6d77a"> ✓ fix shown</span>'
+            : status === "ignored"
+                ? '<span style="color:#8c8470"> ⊘ ignored</span>'
+                : "";
+        const titleStyle = status !== "open"
+            ? 'style="text-decoration:line-through;color:#5f5847"'
+            : "";
+        findingsHtml += `
+    <div class="finding">
+      <div class="finding-header">
+        <span class="num">${n}</span>
+        <span class="sev" style="color:${sevColor}">${sevLabel}</span>
+        <span class="path">${escapeHtml(f.path)}</span>
+        ${statusTag}
+      </div>
+      <div class="finding-title" ${titleStyle}>${escapeHtml(f.title)}</div>
+      <div class="finding-meta">${escapeHtml(f.meta)}</div>`;
+        if (f.trace) {
+            findingsHtml += `
+      <div class="trace">
+        <div class="trace-label">PROMPT TRACE</div>
+        <div class="trace-row"><span class="trace-key">prompt</span> <span class="quoted">${escapeHtml(f.trace.prompt)}</span></div>
+        <div class="trace-row"><span class="arrow">↓</span> <span class="trace-dim">${escapeHtml(f.trace.session)}</span></div>
+        <div class="trace-row"><span class="trace-key">generated</span> ${escapeHtml(f.trace.file)}</div>
+        <div class="trace-row"><span class="arrow">↓</span></div>
+        <div class="trace-row"><span class="trace-key">result</span> ${escapeHtml(f.trace.result)}</div>
+      </div>`;
+            if (f.fix) {
+                findingsHtml += `
+      <div class="fix">
+        <div class="fix-label">REWRITTEN PROMPT</div>`;
+                for (let j = 0; j < f.fix.length; j++) {
+                    if (j === 0) {
+                        findingsHtml += `\n        <div class="fix-line">${escapeHtml(f.fix[j])}</div>`;
+                    }
+                    else {
+                        findingsHtml += `\n        <div class="fix-line fix-add">${escapeHtml(f.fix[j])}</div>`;
+                    }
+                }
+                findingsHtml += `
+        <div class="fix-note">→ regenerated against this prompt: <span style="color:#b6d77a">0 findings</span>. vibecheck shows the fix — it never edits your code.</div>
+      </div>`;
+            }
+        }
+        else if (f.manual) {
+            findingsHtml += `
+      <div class="manual">${escapeHtml(f.manual)}</div>`;
+        }
+        findingsHtml += `
+    </div>`;
+    }
+    const html = `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>vibecheck report</title>
+<style>
+  :root {
+    --bg: #16140f; --panel: #1d1a13; --panel-edge: #2b271c;
+    --ink: #e8e2d2; --dim: #8c8470; --faint: #5f5847;
+    --green: #b6d77a; --amber: #e6a345; --rust: #d96b4a; --violet: #a98fd6;
+    --mono: "SF Mono", ui-monospace, "JetBrains Mono", "Menlo", "Consolas", monospace;
+  }
+  * { box-sizing: border-box; margin: 0; padding: 0; }
+  body {
+    background: var(--bg); color: var(--ink); font-family: var(--mono);
+    font-size: 13.5px; line-height: 1.55; padding: 40px 20px 80px; min-height: 100vh;
+  }
+  .wrap { max-width: 860px; margin: 0 auto; }
+  h1 { color: var(--ink); font-size: 18px; margin-bottom: 4px; }
+  .subtitle { color: var(--dim); font-size: 12px; margin-bottom: 24px; }
+  .verdict {
+    font-size: 16px; margin-bottom: 20px; padding: 16px;
+    background: var(--panel); border: 1px solid var(--panel-edge); border-radius: 8px;
+  }
+  .finding {
+    background: var(--panel); border: 1px solid var(--panel-edge); border-radius: 8px;
+    padding: 16px; margin-bottom: 12px;
+  }
+  .finding-header { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; }
+  .num { color: var(--dim); }
+  .sev { font-weight: 700; }
+  .path { color: var(--dim); font-size: 12px; }
+  .finding-title { margin-top: 6px; font-weight: 600; }
+  .finding-meta { color: var(--dim); font-size: 12px; margin-top: 4px; }
+  .trace {
+    margin-top: 14px; padding: 12px; background: rgba(169,143,214,0.05);
+    border: 1px solid rgba(169,143,214,0.15); border-radius: 6px;
+  }
+  .trace-label { color: var(--violet); font-weight: 700; margin-bottom: 8px; }
+  .trace-row { margin: 4px 0; padding-left: 8px; }
+  .trace-key { color: var(--faint); display: inline-block; width: 80px; }
+  .trace-dim { color: var(--faint); }
+  .arrow { color: var(--violet); }
+  .quoted {
+    background: rgba(169,143,214,0.08); padding: 1px 5px;
+    border-radius: 4px; border: 1px solid rgba(169,143,214,0.18);
+  }
+  .fix {
+    margin-top: 14px; padding: 12px; background: rgba(182,215,122,0.05);
+    border: 1px solid rgba(182,215,122,0.15); border-radius: 6px;
+  }
+  .fix-label { color: var(--green); font-weight: 700; margin-bottom: 8px; }
+  .fix-line { padding-left: 8px; margin: 2px 0; }
+  .fix-add { color: var(--green); }
+  .fix-note { color: var(--faint); font-size: 12px; margin-top: 10px; padding-left: 8px; }
+  .manual { color: var(--dim); margin-top: 10px; padding: 8px; }
+  .bridge {
+    margin-top: 30px; padding: 20px; text-align: center;
+    background: var(--panel); border: 1px solid var(--panel-edge); border-radius: 8px;
+  }
+  .bridge-main { color: var(--rust); font-weight: 700; }
+  .bridge-dim { color: var(--dim); margin-top: 6px; }
+  .bridge-link { color: var(--faint); margin-top: 8px; }
+  .bridge-link a { color: var(--faint); }
+  .footer { text-align: center; color: var(--faint); margin-top: 20px; font-size: 11px; }
+</style>
+</head>
+<body>
+<div class="wrap">
+  <h1>vibecheck report</h1>
+  <div class="subtitle">generated ${new Date().toISOString().replace("T", " ").slice(0, 16)} · local scan · nothing uploaded</div>
+
+  <div class="verdict">
+    <span style="color:${verdictColor};font-weight:700;font-size:18px">${verdict}</span>
+    &nbsp; score <span style="color:${verdictColor};font-weight:700">${score}</span><span style="color:var(--faint)">/10</span>
+    &nbsp;·&nbsp; <span style="color:var(--dim)">${open} open · ${cleared} cleared</span>
+  </div>
+
+  ${findingsHtml}
+
+  <div class="bridge">
+    <div class="bridge-main">${generationCaused} of these findings would never have been generated.</div>
+    <div class="bridge-dim">vibecheck looked back at what happened. It can't stop the next insecure<br>prompt — Symbiotic does that at generation time, continuously.</div>
+    <div class="bridge-link"><a href="https://www.symbioticsec.ai">→ symbioticsec.ai</a></div>
+  </div>
+
+  <div class="footer">no code, prompts, or secrets left this machine.</div>
+</div>
+</body>
+</html>`;
+    await writeFile(join(repoPath, "vibecheck-report.html"), html, "utf-8");
+}
+//# sourceMappingURL=html.js.map

package/dist/report/html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.js","sourceRoot":"","sources":["../../src/report/html.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAmB,EACnB,QAAyB,EACzB,KAOC,EACD,QAAgB;IAEhB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC;IACvC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAEzE,MAAM,MAAM,GAA2B;QACrC,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,SAAS;KACjB,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;IAE9C,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnE,MAAM,SAAS,GACb,MAAM,KAAK,OAAO;YAChB,CAAC,CAAC,iDAAiD;YACnD,CAAC,CAAC,MAAM,KAAK,SAAS;gBACpB,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,EAAE,CAAC;QACX,MAAM,UAAU,GACd,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,EAAE,CAAC;QAET,YAAY,IAAI;;;4BAGQ,CAAC;yCACY,QAAQ,KAAK,QAAQ;6BACjC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;UACrC,SAAS;;mCAEgB,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;kCAClC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAEzD,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,YAAY,IAAI;;;4FAGsE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;sFAChC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;0EACvC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;;uEAE3B,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;aACpF,CAAC;YAER,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gBACV,YAAY,IAAI;;sDAE8B,CAAC;gBAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;wBACZ,YAAY,IAAI,mCAAmC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAClF,CAAC;yBAAM,CAAC;wBACN,YAAY,IAAI,2CAA2C,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAC1F,CAAC;gBACH,CAAC;gBACD,YAAY,IAAI;;aAEX,CAAC;YACR,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACpB,YAAY,IAAI;4BACM,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrD,CAAC;QAED,YAAY,IAAI;WACT,CAAC;IACV,CAAC;IAED,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCAuEqB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;;;yBAGlE,YAAY,oCAAoC,OAAO;sCAC1C,YAAY,qBAAqB,KAAK;mDACzB,IAAI,WAAW,OAAO;;;IAGrE,YAAY;;;+BAGe,gBAAgB;;;;;;;;QAQvC,CAAC;IAEP,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC"}

package/dist/scanners/aggregator.d.ts

@@ -0,0 +1,12 @@
+import type { Finding, ScanResult } from "../types.js";
+export interface ScanOptions {
+    repoPath: string;
+    dbUrl?: string;
+    withClaudeHistory: boolean;
+}
+export declare function runAllScanners(options: ScanOptions, onProgress: (msg: string) => void): Promise<ScanResult>;
+export declare function computeScore(findings: Finding[], statuses: Array<"open" | "fixed" | "ignored">): {
+    score: number;
+    verdict: string;
+    col: string;
+};

package/dist/scanners/aggregator.js

@@ -0,0 +1,126 @@
+import { scanSecrets } from "./gitleaks.js";
+import { scanSAST } from "./semgrep.js";
+import { scanRLS } from "./rls.js";
+import { scanDeps } from "./deps.js";
+export async function runAllScanners(options, onProgress) {
+    const { repoPath, dbUrl } = options;
+    const allFindings = [];
+    const errors = [];
+    const stack = await detectStack(repoPath);
+    // Run all scanners concurrently (pass onProgress for auto-install)
+    onProgress("scanning…");
+    const [secrets, sast, rls, deps] = await Promise.all([
+        scanSecrets(repoPath, onProgress),
+        scanSAST(repoPath, onProgress),
+        scanRLS(repoPath, dbUrl),
+        scanDeps(repoPath),
+    ]);
+    if (secrets.error)
+        errors.push(secrets.error);
+    if (sast.error)
+        errors.push(sast.error);
+    if (rls.error)
+        errors.push(rls.error);
+    if (deps.error)
+        errors.push(deps.error);
+    allFindings.push(...secrets.findings);
+    allFindings.push(...sast.findings);
+    allFindings.push(...rls.findings);
+    allFindings.push(...deps.findings);
+    for (const e of errors) {
+        onProgress(`  ⚠ ${e}`);
+    }
+    // Assign sequential IDs
+    allFindings.forEach((f, i) => {
+        f.id = i + 1;
+    });
+    // Sort: critical first, then medium
+    allFindings.sort((a, b) => {
+        if (a.severity === "critical" && b.severity !== "critical")
+            return -1;
+        if (a.severity !== "critical" && b.severity === "critical")
+            return 1;
+        return 0;
+    });
+    // Re-assign IDs after sort
+    allFindings.forEach((f, i) => {
+        f.id = i + 1;
+    });
+    let contributors = 0;
+    try {
+        const { execFile: ef } = await import("node:child_process");
+        const { promisify: p } = await import("node:util");
+        const exec = p(ef);
+        const { stdout } = await exec("git", ["shortlog", "-sn", "--all"], {
+            cwd: repoPath,
+            timeout: 10_000,
+        });
+        contributors = stdout.trim().split("\n").filter(Boolean).length;
+    }
+    catch {
+        contributors = 1;
+    }
+    return {
+        findings: allFindings,
+        stats: {
+            gitHistory: secrets.available,
+            sourceScanned: sast.available,
+            supabaseMigrations: rls.available,
+            claudeSessions: 0,
+            stack,
+            contributors,
+        },
+    };
+}
+async function detectStack(repoPath) {
+    const { existsSync } = await import("node:fs");
+    const { join } = await import("node:path");
+    const { readFile } = await import("node:fs/promises");
+    const stack = [];
+    const pkgPath = join(repoPath, "package.json");
+    if (existsSync(pkgPath)) {
+        try {
+            const pkg = JSON.parse(await readFile(pkgPath, "utf-8"));
+            const allDeps = {
+                ...pkg.dependencies,
+                ...pkg.devDependencies,
+            };
+            if (allDeps["next"])
+                stack.push("next.js");
+            if (allDeps["react"])
+                stack.push("react");
+            if (allDeps["@supabase/supabase-js"] || allDeps["supabase"])
+                stack.push("supabase");
+            if (allDeps["stripe"] || allDeps["@stripe/stripe-js"])
+                stack.push("stripe");
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    if (existsSync(join(repoPath, "vercel.json")) || existsSync(join(repoPath, ".vercel"))) {
+        stack.push("vercel");
+    }
+    if (existsSync(join(repoPath, "supabase"))) {
+        if (!stack.includes("supabase"))
+            stack.push("supabase");
+    }
+    return stack;
+}
+export function computeScore(findings, statuses) {
+    const open = statuses.filter((s) => s === "open").length;
+    const cleared = findings.length - open;
+    const score = Math.min(10, 2.4 + cleared * 1.2);
+    let verdict = "EXPOSED";
+    let col = "rust";
+    if (score >= 7) {
+        verdict = "HARDENED";
+        col = "green";
+    }
+    else if (score >= 4.5) {
+        verdict = "AT RISK";
+        col = "amber";
+    }
+    return { score: parseFloat(score.toFixed(1)), verdict, col };
+}
+//# sourceMappingURL=aggregator.js.map

package/dist/scanners/aggregator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregator.js","sourceRoot":"","sources":["../../src/scanners/aggregator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AASrC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAoB,EACpB,UAAiC;IAEjC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACpC,MAAM,WAAW,GAAc,EAAE,CAAC;IAClC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;IAE1C,mEAAmE;IACnE,UAAU,CAAC,WAAW,CAAC,CAAC;IACxB,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC;QACjC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC9B,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC;QACxB,QAAQ,CAAC,QAAQ,CAAC;KACnB,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAExC,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,WAAW,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEnC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,wBAAwB;IACxB,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3B,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3B,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC5D,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE;YACjE,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE;YACL,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,aAAa,EAAE,IAAI,CAAC,SAAS;YAC7B,kBAAkB,EAAE,GAAG,CAAC,SAAS;YACjC,cAAc,EAAE,CAAC;YACjB,KAAK;YACL,YAAY;SACb;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB;IACzC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAEtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG;gBACd,GAAG,GAAG,CAAC,YAAY;gBACnB,GAAG,GAAG,CAAC,eAAe;aACvB,CAAC;YAEF,IAAI,OAAO,CAAC,MAAM,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,OAAO,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,uBAAuB,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,mBAAmB,CAAC;gBACnD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACvF,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,QAAmB,EACnB,QAA6C;IAE7C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;IAChD,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,OAAO,GAAG,UAAU,CAAC;QACrB,GAAG,GAAG,OAAO,CAAC;IAChB,CAAC;SAAM,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,OAAO,GAAG,SAAS,CAAC;QACpB,GAAG,GAAG,OAAO,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAC/D,CAAC"}

package/dist/scanners/deps.d.ts

@@ -0,0 +1,6 @@
+import type { Finding } from "../types.js";
+export declare function scanDeps(repoPath: string): Promise<{
+    findings: Finding[];
+    available: boolean;
+    error?: string;
+}>;