vibecheck-score 0.1.0

package/dist/scanners/orchestration.js

@@ -0,0 +1,99 @@
+import { readdir } from "node:fs/promises";
+import { classify } from "../taxonomy/classifier.js";
+import { fileExists, shellOutput, expandHome } from "./utils.js";
+export class OrchestrationScanner {
+    name = "orchestration";
+    async scan() {
+        const start = performance.now();
+        const findings = [];
+        // tmux
+        const tmux = await shellOutput("which tmux");
+        if (tmux) {
+            const hasTmuxConf = await fileExists("~/.tmux.conf");
+            findings.push({
+                id: "tmux",
+                source: hasTmuxConf ? "~/.tmux.conf" : "which tmux",
+                confidence: hasTmuxConf ? "high" : "medium",
+            });
+        }
+        // git worktrees
+        const worktrees = await shellOutput("git worktree list");
+        if (worktrees) {
+            const count = worktrees.split("\n").length;
+            if (count > 1) {
+                findings.push({
+                    id: "git-worktrees",
+                    source: "git worktree list",
+                    confidence: "high",
+                    details: { worktreeCount: count },
+                });
+            }
+        }
+        // Orchestrator CLIs
+        const orchestrators = [
+            { cmd: "which gt", id: "orchestrator-gastown" },
+            { cmd: "which claude-flow", id: "orchestrator-claudeflow" },
+            { cmd: "which openclaw", id: "orchestrator-openclaw" },
+            { cmd: "which devswarm", id: "orchestrator-devswarm" },
+        ];
+        const orchResults = await Promise.all(orchestrators.map(({ cmd }) => shellOutput(cmd)));
+        for (let i = 0; i < orchestrators.length; i++) {
+            if (orchResults[i]) {
+                findings.push({
+                    id: orchestrators[i].id,
+                    source: orchestrators[i].cmd,
+                    confidence: "high",
+                });
+            }
+        }
+        // HEARTBEAT.md
+        const heartbeatPaths = ["HEARTBEAT.md", "~/HEARTBEAT.md"];
+        for (const path of heartbeatPaths) {
+            if (await fileExists(path)) {
+                findings.push({
+                    id: "heartbeat",
+                    source: path,
+                    confidence: "high",
+                });
+                break;
+            }
+        }
+        // Crontab for agent-related entries
+        const crontab = await shellOutput("crontab -l");
+        if (crontab) {
+            const agentPatterns = /claude|agent|heartbeat|sweep|cron.*ai/i;
+            if (agentPatterns.test(crontab)) {
+                findings.push({
+                    id: "parallel-scripts",
+                    source: "crontab",
+                    confidence: "medium",
+                    details: { type: "crontab" },
+                });
+            }
+        }
+        // macOS LaunchAgents
+        try {
+            const launchAgentsDir = expandHome("~/Library/LaunchAgents");
+            const plists = await readdir(launchAgentsDir);
+            const agentPlists = plists.filter((p) => /claude|claude-?flow|openclaw|devswarm|heartbeat|ai-?agent/i.test(p) &&
+                p.endsWith(".plist"));
+            if (agentPlists.length > 0) {
+                findings.push({
+                    id: "parallel-scripts",
+                    source: "~/Library/LaunchAgents/",
+                    confidence: "medium",
+                    details: { plists: agentPlists },
+                });
+            }
+        }
+        catch {
+            // directory doesn't exist or not macOS
+        }
+        return {
+            scanner: this.name,
+            detections: classify(findings),
+            duration: Math.round(performance.now() - start),
+        };
+    }
+}
+//# sourceMappingURL=orchestration.js.map

package/dist/scanners/orchestration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestration.js","sourceRoot":"","sources":["../../src/scanners/orchestration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAG3C,OAAO,EAAE,QAAQ,EAAmB,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEjE,MAAM,OAAO,oBAAoB;IAC/B,IAAI,GAAG,eAAe,CAAC;IAEvB,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAElC,OAAO;QACP,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,MAAM;gBACV,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY;gBACnD,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,gBAAgB;QAChB,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC,CAAC;QACzD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAC3C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,eAAe;oBACnB,MAAM,EAAE,mBAAmB;oBAC3B,UAAU,EAAE,MAAM;oBAClB,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,aAAa,GAAG;YACpB,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,sBAAsB,EAAE;YAC/C,EAAE,GAAG,EAAE,mBAAmB,EAAE,EAAE,EAAE,yBAAyB,EAAE;YAC3D,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,uBAAuB,EAAE;YACtD,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,uBAAuB,EAAE;SAC9C,CAAC;QAEX,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACnC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CACjD,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;oBACvB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG;oBAC5B,UAAU,EAAE,MAAM;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,eAAe;QACf,MAAM,cAAc,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC1D,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,WAAW;oBACf,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,MAAM;iBACnB,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,aAAa,GACjB,wCAAwC,CAAC;YAC3C,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,kBAAkB;oBACtB,MAAM,EAAE,SAAS;oBACjB,UAAU,EAAE,QAAQ;oBACpB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,UAAU,CAChC,wBAAwB,CACzB,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;YAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,EAAE,CACJ,4DAA4D,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACvB,CAAC;YACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,kBAAkB;oBACtB,MAAM,EAAE,yBAAyB;oBACjC,UAAU,EAAE,QAAQ;oBACpB,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;SAChD,CAAC;IACJ,CAAC;CACF"}

package/dist/scanners/repositories.d.ts

@@ -0,0 +1,7 @@
+import type { ScanResult } from "../types.js";
+import type { Scanner } from "./index.js";
+export declare class RepositoriesScanner implements Scanner {
+    name: string;
+    scan(): Promise<ScanResult>;
+}
+//# sourceMappingURL=repositories.d.ts.map

package/dist/scanners/repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositories.d.ts","sourceRoot":"","sources":["../../src/scanners/repositories.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AA8D1C,qBAAa,mBAAoB,YAAW,OAAO;IACjD,IAAI,SAAkB;IAEhB,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;CAgSlC"}

package/dist/scanners/repositories.js

@@ -0,0 +1,301 @@
+import { readdir } from "node:fs/promises";
+import { classify } from "../taxonomy/classifier.js";
+import { fileExists, readJsonIfExists, readFileIfExists } from "./utils.js";
+const SKIP_DIRS = new Set(["node_modules", ".git", "dist", "build", ".next", ".turbo"]);
+const CODE_QUALITY_CONFIGS = [
+    { globs: ["eslint.config.js", "eslint.config.mjs", "eslint.config.cjs", "eslint.config.ts", ".eslintrc", ".eslintrc.js", ".eslintrc.json", ".eslintrc.yml"], id: "eslint" },
+    { globs: ["prettier.config.js", "prettier.config.mjs", "prettier.config.cjs", ".prettierrc", ".prettierrc.js", ".prettierrc.json", ".prettierrc.yml"], id: "prettier" },
+    { globs: ["biome.json", "biome.jsonc"], id: "biome" },
+];
+const TEST_CONFIGS = [
+    { glob: "vitest.config", id: "vitest" },
+    { glob: "jest.config", id: "jest" },
+    { glob: "pytest.ini", id: "pytest" },
+];
+const E2E_CONFIGS = [
+    { glob: "playwright.config", id: "playwright" },
+    { glob: "cypress.config", id: "cypress" },
+];
+const MONOREPO_TOOLS = [
+    { file: "turbo.json", id: "turbo" },
+    { file: "nx.json", id: "nx" },
+    { file: "pnpm-workspace.yaml", id: "pnpm-workspace" },
+    { file: "lerna.json", id: "lerna" },
+];
+async function findSubProjects() {
+    const dirs = [];
+    try {
+        const level1 = await readdir(".", { withFileTypes: true });
+        for (const d of level1) {
+            if (!d.isDirectory() || SKIP_DIRS.has(d.name))
+                continue;
+            if (await fileExists(`${d.name}/package.json`))
+                dirs.push(d.name);
+            try {
+                const level2 = await readdir(d.name, { withFileTypes: true });
+                for (const d2 of level2) {
+                    if (!d2.isDirectory() || SKIP_DIRS.has(d2.name))
+                        continue;
+                    const path = `${d.name}/${d2.name}`;
+                    if (await fileExists(`${path}/package.json`))
+                        dirs.push(path);
+                }
+            }
+            catch { /* not readable */ }
+        }
+    }
+    catch { /* cwd not readable */ }
+    return dirs;
+}
+export class RepositoriesScanner {
+    name = "repositories";
+    async scan() {
+        const start = performance.now();
+        const findings = [];
+        // GitHub Actions workflows
+        try {
+            const workflows = await readdir(".github/workflows");
+            const ymlFiles = workflows.filter((f) => f.endsWith(".yml") || f.endsWith(".yaml"));
+            if (ymlFiles.length > 0) {
+                findings.push({
+                    id: "github-actions",
+                    source: ".github/workflows/",
+                    confidence: "high",
+                    details: { workflowCount: ymlFiles.length },
+                });
+            }
+        }
+        catch {
+            // no workflows dir
+        }
+        // Test framework configs
+        for (const { glob, id } of TEST_CONFIGS) {
+            const extensions = ["", ".ts", ".js", ".mjs", ".cjs"];
+            for (const ext of extensions) {
+                if (await fileExists(`${glob}${ext}`)) {
+                    findings.push({ id, source: `${glob}${ext}`, confidence: "high" });
+                    break;
+                }
+            }
+        }
+        // E2E test framework configs
+        for (const { glob, id } of E2E_CONFIGS) {
+            const extensions = ["", ".ts", ".js", ".mjs", ".cjs"];
+            for (const ext of extensions) {
+                if (await fileExists(`${glob}${ext}`)) {
+                    findings.push({ id, source: `${glob}${ext}`, confidence: "high" });
+                    break;
+                }
+            }
+        }
+        // Code quality configs
+        for (const { globs, id } of CODE_QUALITY_CONFIGS) {
+            for (const file of globs) {
+                if (await fileExists(file)) {
+                    findings.push({ id, source: file, confidence: "high" });
+                    break;
+                }
+            }
+        }
+        // TypeScript strict mode
+        const tsconfig = await readJsonIfExists("tsconfig.json");
+        if (tsconfig?.compilerOptions?.strict === true) {
+            findings.push({
+                id: "typescript-strict",
+                source: "tsconfig.json",
+                confidence: "high",
+            });
+        }
+        // Also check pyproject.toml for pytest
+        const pyproject = await readFileIfExists("pyproject.toml");
+        if (pyproject && /\[tool\.pytest/i.test(pyproject)) {
+            const hasPytest = findings.some((f) => f.id === "pytest");
+            if (!hasPytest) {
+                findings.push({
+                    id: "pytest",
+                    source: "pyproject.toml",
+                    confidence: "high",
+                });
+            }
+        }
+        // Package.json scripts analysis
+        const pkg = await readJsonIfExists("package.json");
+        if (pkg?.scripts) {
+            const scriptNames = Object.keys(pkg.scripts);
+            const scriptValues = Object.values(pkg.scripts);
+            // npm-scripts detection
+            const hasDevOps = scriptNames.some((s) => /^(build|dev|lint|start|test|format|typecheck)$/.test(s));
+            if (hasDevOps) {
+                findings.push({
+                    id: "npm-scripts",
+                    source: "package.json",
+                    confidence: "high",
+                    details: { scripts: scriptNames },
+                });
+            }
+            // Maintenance scripts
+            const hasMaintenance = scriptNames.some((s) => /clean|migrate|seed|reset|setup|postinstall/.test(s));
+            if (hasMaintenance) {
+                findings.push({
+                    id: "maintenance-scripts",
+                    source: "package.json",
+                    confidence: "medium",
+                });
+            }
+            // Kanban integration
+            const hasKanban = scriptValues.some((v) => /linear|jira|notion|asana/i.test(v));
+            if (hasKanban) {
+                findings.push({
+                    id: "kanban-integration",
+                    source: "package.json",
+                    confidence: "medium",
+                });
+            }
+            // Automated docs
+            const hasDocs = scriptValues.some((v) => /typedoc|jsdoc|storybook|docusaurus/i.test(v));
+            if (hasDocs) {
+                findings.push({
+                    id: "automated-docs",
+                    source: "package.json",
+                    confidence: "high",
+                });
+            }
+            // Monitoring config
+            const hasMonitoring = scriptValues.some((v) => /sentry|datadog|newrelic/i.test(v));
+            const deps = {
+                ...(pkg.dependencies ?? {}),
+                ...(pkg.devDependencies ?? {}),
+            };
+            const hasMonitoringDep = Object.keys(deps).some((d) => /sentry|datadog|newrelic/i.test(d));
+            if (hasMonitoring || hasMonitoringDep) {
+                findings.push({
+                    id: "monitoring-config",
+                    source: "package.json",
+                    confidence: "medium",
+                });
+            }
+        }
+        // Makefile / scripts directory
+        if (await fileExists("Makefile")) {
+            const hasMaintenance = findings.some((f) => f.id === "maintenance-scripts");
+            if (!hasMaintenance) {
+                findings.push({
+                    id: "maintenance-scripts",
+                    source: "Makefile",
+                    confidence: "medium",
+                });
+            }
+        }
+        try {
+            await readdir("scripts");
+            const hasMaintenance = findings.some((f) => f.id === "maintenance-scripts");
+            if (!hasMaintenance) {
+                findings.push({
+                    id: "maintenance-scripts",
+                    source: "scripts/",
+                    confidence: "medium",
+                });
+            }
+        }
+        catch {
+            // no scripts dir
+        }
+        // Documentation
+        if (await fileExists("README.md")) {
+            findings.push({
+                id: "documentation",
+                source: "README.md",
+                confidence: "high",
+            });
+        }
+        // Task tracking
+        const claudeMd = await readFileIfExists("CLAUDE.md");
+        if (claudeMd && /todo|task|backlog/i.test(claudeMd)) {
+            findings.push({
+                id: "task-tracking",
+                source: "CLAUDE.md",
+                confidence: "medium",
+            });
+        }
+        // Monitoring config files
+        const monitorConfigs = [
+            "sentry.client.config.ts",
+            "sentry.server.config.ts",
+            "sentry.config.ts",
+            "datadog.config.ts",
+        ];
+        for (const cfg of monitorConfigs) {
+            if (await fileExists(cfg)) {
+                const hasMonitoring = findings.some((f) => f.id === "monitoring-config");
+                if (!hasMonitoring) {
+                    findings.push({
+                        id: "monitoring-config",
+                        source: cfg,
+                        confidence: "high",
+                    });
+                }
+                break;
+            }
+        }
+        // Monorepo orchestration tools
+        for (const { file, id } of MONOREPO_TOOLS) {
+            if (await fileExists(file)) {
+                findings.push({ id, source: file, confidence: "high" });
+            }
+        }
+        // Sub-project scanning: walk 2 levels deep for package.json dirs
+        const seenIds = new Set(findings.map((f) => f.id));
+        const subProjects = await findSubProjects();
+        for (const dir of subProjects) {
+            // Config-based checks in sub-projects
+            const extensions = ["", ".ts", ".js", ".mjs", ".cjs"];
+            for (const { glob, id } of TEST_CONFIGS) {
+                if (seenIds.has(id))
+                    continue;
+                for (const ext of extensions) {
+                    if (await fileExists(`${dir}/${glob}${ext}`)) {
+                        findings.push({ id, source: `${dir}/${glob}${ext}`, confidence: "high" });
+                        seenIds.add(id);
+                        break;
+                    }
+                }
+            }
+            for (const { glob, id } of E2E_CONFIGS) {
+                if (seenIds.has(id))
+                    continue;
+                for (const ext of extensions) {
+                    if (await fileExists(`${dir}/${glob}${ext}`)) {
+                        findings.push({ id, source: `${dir}/${glob}${ext}`, confidence: "high" });
+                        seenIds.add(id);
+                        break;
+                    }
+                }
+            }
+            for (const { globs, id } of CODE_QUALITY_CONFIGS) {
+                if (seenIds.has(id))
+                    continue;
+                for (const file of globs) {
+                    if (await fileExists(`${dir}/${file}`)) {
+                        findings.push({ id, source: `${dir}/${file}`, confidence: "high" });
+                        seenIds.add(id);
+                        break;
+                    }
+                }
+            }
+            // TypeScript strict in sub-project
+            if (!seenIds.has("typescript-strict")) {
+                const subTsconfig = await readJsonIfExists(`${dir}/tsconfig.json`);
+                if (subTsconfig?.compilerOptions?.strict === true) {
+                    findings.push({ id: "typescript-strict", source: `${dir}/tsconfig.json`, confidence: "high" });
+                    seenIds.add("typescript-strict");
+                }
+            }
+        }
+        return {
+            scanner: this.name,
+            detections: classify(findings),
+            duration: Math.round(performance.now() - start),
+        };
+    }
+}
+//# sourceMappingURL=repositories.js.map

package/dist/scanners/repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositories.js","sourceRoot":"","sources":["../../src/scanners/repositories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAG3C,OAAO,EAAE,QAAQ,EAAmB,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAc5E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAExF,MAAM,oBAAoB,GAAG;IAC3B,EAAE,KAAK,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE;IAC3K,EAAE,KAAK,EAAE,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,aAAa,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE;IACvK,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE;CAC7C,CAAC;AAEX,MAAM,YAAY,GAAG;IACnB,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE;IACvC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE;IACnC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE;CAC5B,CAAC;AAEX,MAAM,WAAW,GAAG;IAClB,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,YAAY,EAAE;IAC/C,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,SAAS,EAAE;CACjC,CAAC;AAEX,MAAM,cAAc,GAAG;IACrB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE;IACnC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE;IAC7B,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,gBAAgB,EAAE;IACrD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE;CAC3B,CAAC;AAEX,KAAK,UAAU,eAAe;IAC5B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxD,IAAI,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,eAAe,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;oBACxB,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;oBACpC,IAAI,MAAM,UAAU,CAAC,GAAG,IAAI,eAAe,CAAC;wBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,mBAAmB;IAC9B,IAAI,GAAG,cAAc,CAAC;IAEtB,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAElC,2BAA2B;QAC3B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CACjD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,gBAAgB;oBACpB,MAAM,EAAE,oBAAoB;oBAC5B,UAAU,EAAE,MAAM;oBAClB,OAAO,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE;iBAC5C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QAED,yBAAyB;QACzB,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,YAAY,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACtD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,IAAI,MAAM,UAAU,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;oBACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;oBACnE,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACtD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,IAAI,MAAM,UAAU,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;oBACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;oBACnE,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;oBACxD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAW,eAAe,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,eAAe,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,mBAAmB;gBACvB,MAAM,EAAE,eAAe;gBACvB,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;QACL,CAAC;QAED,uCAAuC;QACvC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,QAAQ;oBACZ,MAAM,EAAE,gBAAgB;oBACxB,UAAU,EAAE,MAAM;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAc,cAAc,CAAC,CAAC;QAChE,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;YACjB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAEhD,wBAAwB;YACxB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,gDAAgD,CAAC,IAAI,CAAC,CAAC,CAAC,CACzD,CAAC;YACF,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,aAAa;oBACjB,MAAM,EAAE,cAAc;oBACtB,UAAU,EAAE,MAAM;oBAClB,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;iBAClC,CAAC,CAAC;YACL,CAAC;YAED,sBAAsB;YACtB,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5C,4CAA4C,CAAC,IAAI,CAAC,CAAC,CAAC,CACrD,CAAC;YACF,IAAI,cAAc,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,qBAAqB;oBACzB,MAAM,EAAE,cAAc;oBACtB,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;YAED,qBAAqB;YACrB,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACxC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CACpC,CAAC;YACF,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,oBAAoB;oBACxB,MAAM,EAAE,cAAc;oBACtB,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;YAED,iBAAiB;YACjB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,qCAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,CAC9C,CAAC;YACF,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,gBAAgB;oBACpB,MAAM,EAAE,cAAc;oBACtB,UAAU,EAAE,MAAM;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,oBAAoB;YACpB,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5C,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CACnC,CAAC;YACF,MAAM,IAAI,GAAG;gBACX,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;gBAC3B,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;aAC/B,CAAC;YACF,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACpD,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CACnC,CAAC;YACF,IAAI,aAAa,IAAI,gBAAgB,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,mBAAmB;oBACvB,MAAM,EAAE,cAAc;oBACtB,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,IAAI,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,qBAAqB,CACtC,CAAC;YACF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,qBAAqB;oBACzB,MAAM,EAAE,UAAU;oBAClB,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;YACzB,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,qBAAqB,CACtC,CAAC;YACF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,qBAAqB;oBACzB,MAAM,EAAE,UAAU;oBAClB,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QAED,gBAAgB;QAChB,IAAI,MAAM,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;QACL,CAAC;QAED,gBAAgB;QAChB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;QACL,CAAC;QAED,0BAA0B;QAC1B,MAAM,cAAc,GAAG;YACrB,yBAAyB;YACzB,yBAAyB;YACzB,kBAAkB;YAClB,mBAAmB;SACpB,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,IAAI,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,mBAAmB,CACpC,CAAC;gBACF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,mBAAmB;wBACvB,MAAM,EAAE,GAAG;wBACX,UAAU,EAAE,MAAM;qBACnB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,cAAc,EAAE,CAAC;YAC1C,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,eAAe,EAAE,CAAC;QAE5C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,sCAAsC;YACtC,MAAM,UAAU,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAEtD,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,YAAY,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC9B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;oBAC7B,IAAI,MAAM,UAAU,CAAC,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;wBAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;wBAC1E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAChB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC;gBACvC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC9B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;oBAC7B,IAAI,MAAM,UAAU,CAAC,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;wBAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;wBAC1E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAChB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,KAAK,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,oBAAoB,EAAE,CAAC;gBACjD,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,MAAM,UAAU,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;wBACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;wBACpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAChB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,mCAAmC;YACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACtC,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAW,GAAG,GAAG,gBAAgB,CAAC,CAAC;gBAC7E,IAAI,WAAW,EAAE,eAAe,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;oBAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,GAAG,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC/F,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;SAChD,CAAC;IACJ,CAAC;CACF"}

package/dist/scanners/security.d.ts

@@ -0,0 +1,7 @@
+import type { ScanResult } from "../types.js";
+import type { Scanner } from "./index.js";
+export declare class SecurityScanner implements Scanner {
+    name: string;
+    scan(): Promise<ScanResult>;
+}
+//# sourceMappingURL=security.d.ts.map

package/dist/scanners/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/scanners/security.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAgB1C,qBAAa,eAAgB,YAAW,OAAO;IAC7C,IAAI,SAAc;IAEZ,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;CAuHlC"}

package/dist/scanners/security.js

@@ -0,0 +1,113 @@
+import { stat } from "node:fs/promises";
+import { classify } from "../taxonomy/classifier.js";
+import { readFileIfExists, readJsonIfExists, expandHome, } from "./utils.js";
+export class SecurityScanner {
+    name = "security";
+    async scan() {
+        const start = performance.now();
+        const findings = [];
+        // .gitignore covers .env
+        const gitignore = await readFileIfExists(".gitignore");
+        if (gitignore) {
+            const envPatterns = /^\.env/m;
+            if (envPatterns.test(gitignore)) {
+                findings.push({
+                    id: "gitignore-env",
+                    source: ".gitignore",
+                    confidence: "high",
+                });
+            }
+        }
+        // Environment variable secrets (just presence detection)
+        const shellFiles = [
+            "~/.zshrc",
+            "~/.bashrc",
+            "~/.zprofile",
+            "~/.bash_profile",
+        ];
+        for (const file of shellFiles) {
+            const content = await readFileIfExists(file);
+            if (content && /export\s+\w*(KEY|SECRET|TOKEN|PASSWORD)\w*\s*=/i.test(content)) {
+                findings.push({
+                    id: "env-vars",
+                    source: file,
+                    confidence: "high",
+                });
+                break;
+            }
+        }
+        // Agent permission scoping
+        const settings = await readJsonIfExists(".claude/settings.json");
+        if (settings) {
+            const hasPermissions = settings.allowedTools ||
+                settings.blockedCommands ||
+                settings.permissions;
+            if (hasPermissions) {
+                findings.push({
+                    id: "agent-permissions",
+                    source: ".claude/settings.json",
+                    confidence: "medium",
+                });
+            }
+        }
+        // File permissions on sensitive files
+        const sensitiveFiles = [
+            "~/.ssh/id_rsa",
+            "~/.ssh/id_ed25519",
+            "~/.env",
+            ".env",
+        ];
+        for (const file of sensitiveFiles) {
+            try {
+                const s = await stat(expandHome(file));
+                const perms = s.mode & 0o777;
+                // Owner-only read/write is secure (0o600 or 0o400)
+                if (perms <= 0o600) {
+                    findings.push({
+                        id: "file-permissions",
+                        source: file,
+                        confidence: "high",
+                        details: { permissions: `0o${perms.toString(8)}` },
+                    });
+                    break;
+                }
+            }
+            catch {
+                // file doesn't exist
+            }
+        }
+        // Canary tokens
+        const configFiles = ["CLAUDE.md", "AGENTS.md", ".claude/settings.json"];
+        for (const file of configFiles) {
+            const content = await readFileIfExists(file);
+            if (content && /canary|honeypot|tripwire/i.test(content)) {
+                findings.push({
+                    id: "canary-tokens",
+                    source: file,
+                    confidence: "medium",
+                });
+                break;
+            }
+        }
+        // Prompt injection defense
+        const defenseFiles = ["CLAUDE.md", "AGENTS.md"];
+        for (const file of defenseFiles) {
+            const content = await readFileIfExists(file);
+            if (content &&
+                /prompt.?injection|safety.?boundar|injection.?defense|do not execute/i.test(content)) {
+                findings.push({
+                    id: "prompt-injection-defense",
+                    source: file,
+                    confidence: "medium",
+                });
+                break;
+            }
+        }
+        return {
+            scanner: this.name,
+            detections: classify(findings),
+            duration: Math.round(performance.now() - start),
+        };
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/scanners/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/scanners/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAGxC,OAAO,EAAE,QAAQ,EAAmB,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAEL,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,GACX,MAAM,YAAY,CAAC;AASpB,MAAM,OAAO,eAAe;IAC1B,IAAI,GAAG,UAAU,CAAC;IAElB,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAElC,yBAAyB;QACzB,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,WAAW,GAAG,SAAS,CAAC;YAC9B,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,eAAe;oBACnB,MAAM,EAAE,YAAY;oBACpB,UAAU,EAAE,MAAM;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,MAAM,UAAU,GAAG;YACjB,UAAU;YACV,WAAW;YACX,aAAa;YACb,iBAAiB;SAClB,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO,IAAI,iDAAiD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/E,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,UAAU;oBACd,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,MAAM;iBACnB,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,uBAAuB,CACxB,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,cAAc,GAClB,QAAQ,CAAC,YAAY;gBACrB,QAAQ,CAAC,eAAe;gBACxB,QAAQ,CAAC,WAAW,CAAC;YACvB,IAAI,cAAc,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,mBAAmB;oBACvB,MAAM,EAAE,uBAAuB;oBAC/B,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,cAAc,GAAG;YACrB,eAAe;YACf,mBAAmB;YACnB,QAAQ;YACR,MAAM;SACP,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;gBAC7B,mDAAmD;gBACnD,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;oBACnB,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,kBAAkB;wBACtB,MAAM,EAAE,IAAI;wBACZ,UAAU,EAAE,MAAM;wBAClB,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE;qBACnD,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzD,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,eAAe;oBACnB,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7C,IACE,OAAO;gBACP,sEAAsE,CAAC,IAAI,CACzE,OAAO,CACR,EACD,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,0BAA0B;oBAC9B,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;SAChD,CAAC;IACJ,CAAC;CACF"}

package/dist/scanners/social.d.ts

@@ -0,0 +1,7 @@
+import type { ScanResult } from "../types.js";
+import type { Scanner } from "./index.js";
+export declare class SocialScanner implements Scanner {
+    name: string;
+    scan(): Promise<ScanResult>;
+}
+//# sourceMappingURL=social.d.ts.map

package/dist/scanners/social.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social.d.ts","sourceRoot":"","sources":["../../src/scanners/social.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAU1C,qBAAa,aAAc,YAAW,OAAO;IAC3C,IAAI,SAAY;IAEV,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;CAmElC"}

package/dist/scanners/social.js

@@ -0,0 +1,68 @@
+import { classify } from "../taxonomy/classifier.js";
+import { shellOutput, readJsonIfExists, readFileIfExists } from "./utils.js";
+export class SocialScanner {
+    name = "social";
+    async scan() {
+        const start = performance.now();
+        const findings = [];
+        // git remote for github.com
+        const remotes = await shellOutput("git remote -v");
+        if (remotes && /github\.com/i.test(remotes)) {
+            findings.push({
+                id: "github-repos",
+                source: "git remote -v",
+                confidence: "medium",
+            });
+        }
+        // package.json private field
+        const pkg = await readJsonIfExists("package.json");
+        if (pkg && pkg.private === false) {
+            findings.push({
+                id: "npm-public",
+                source: "package.json",
+                confidence: "high",
+                details: { packageName: pkg.name },
+            });
+        }
+        // Slack/Discord webhook patterns in configs
+        const configFiles = [
+            ".env",
+            ".env.local",
+            "package.json",
+        ];
+        for (const file of configFiles) {
+            const content = await readFileIfExists(file);
+            if (!content)
+                continue;
+            if (/SLACK_WEBHOOK|slack.*webhook/i.test(content)) {
+                findings.push({
+                    id: "slack-webhook",
+                    source: file,
+                    confidence: "medium",
+                });
+            }
+            if (/DISCORD_WEBHOOK|DISCORD_BOT_TOKEN|discord.*webhook/i.test(content)) {
+                findings.push({
+                    id: "discord-bot",
+                    source: file,
+                    confidence: "medium",
+                });
+            }
+        }
+        // npm org scope in package name
+        if (pkg?.name && pkg.name.startsWith("@") && pkg.private !== true) {
+            findings.push({
+                id: "npm-public",
+                source: "package.json",
+                confidence: "medium",
+                details: { scope: pkg.name.split("/")[0] },
+            });
+        }
+        return {
+            scanner: this.name,
+            detections: classify(findings),
+            duration: Math.round(performance.now() - start),
+        };
+    }
+}
+//# sourceMappingURL=social.js.map

package/dist/scanners/social.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social.js","sourceRoot":"","sources":["../../src/scanners/social.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAmB,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAQ7E,MAAM,OAAO,aAAa;IACxB,IAAI,GAAG,QAAQ,CAAC;IAEhB,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAElC,4BAA4B;QAC5B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,eAAe,CAAC,CAAC;QACnD,IAAI,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,cAAc;gBAClB,MAAM,EAAE,eAAe;gBACvB,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;QACL,CAAC;QAED,6BAA6B;QAC7B,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAc,cAAc,CAAC,CAAC;QAChE,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,YAAY;gBAChB,MAAM,EAAE,cAAc;gBACtB,UAAU,EAAE,MAAM;gBAClB,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE;aACnC,CAAC,CAAC;QACL,CAAC;QAED,4CAA4C;QAC5C,MAAM,WAAW,GAAG;YAClB,MAAM;YACN,YAAY;YACZ,cAAc;SACf,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClD,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,eAAe;oBACnB,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxE,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,aAAa;oBACjB,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,GAAG,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,YAAY;gBAChB,MAAM,EAAE,cAAc;gBACtB,UAAU,EAAE,QAAQ;gBACpB,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;SAChD,CAAC;IACJ,CAAC;CACF"}