Returns Sieve service health and finding counts.

Verifies scanner rules and transcript source coverage are healthy.

Lists findings from the most recent scan. Previews are redacted — no plaintext secret values.

Lists scanner health issues: unreadable sources, permission errors, parse failures.

Returns past scan job summaries.

Returns status of the current or most recent scan: idle, running, completed, or failed.

Checks whether text contains secrets. Returns boolean only — never echoes input or detected values.

Redacts secrets from text, replacing values with sieve:// placeholders. Raw values are never returned.

Executes a command with macOS Keychain-resolved secrets injected as env vars. Returns exit code and line counts only — stdout/stderr content is never returned.