Integrate AppLens inventory and local diagnostics

.gitattributes

@@ -0,0 +1 @@
+Run-AppLens.sh text eol=lf

.github/workflows/linux.yml

@@ -0,0 +1,19 @@
+name: Linux CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+      - name: Test inventory, diagnostics, and redaction
+        run: python3 -B -m unittest discover -s tests/linux -v

.gitignore

@@ -20,6 +20,7 @@ TestResults/
 *.user
 *.suo
 desktop.ini
+__pycache__/
 
 # Local report exports
 /AppLens-*.md

AppLens.py

@@ -1,9 +1,7 @@
 #!/usr/bin/env python3
 """
-AppLens app inventory scanner for macOS and Linux.
-
-Read-only. Writes a categorized plain-text report to the user's Desktop when
-available, or to the home directory when no Desktop folder exists.
+Local AppLens scanner. Linux emits redacted JSON and supports opt-in diagnostics.
+macOS retains its plain-text inventory.
 """
 
 from __future__ import annotations
@@ -304,6 +302,12 @@ def build_report() -> str:
 
 
 def main() -> int:
+    if platform.system() == "Linux":
+        sys.dont_write_bytecode = True
+        from applens_linux import main as linux_main
+
+        return linux_main(TOOL_CHECKS, is_runtime)
+
     report = build_report()
     path = output_path(f"AppLens_Results_{socket.gethostname()}.txt")
     path.write_text(report, encoding="utf-8")

PRIVACY.md

@@ -3,11 +3,14 @@
 Installed scans PC specifications and installed applications locally. It collects
 OS/device details, CPU/GPU names, memory/disk readings, app identities and locations,
 computer name, and Windows username. Optional workflow notes are user-supplied.
+Running diagnostics also collects local process and startup names, system status,
+and hardware and runtime readings.
 There are no accounts, telemetry, automatic uploads, or background monitoring.
 
 Reports contain the full capture, notes, and action history, including rows hidden
 by filters. Known computer/user identifiers and profile paths are redacted by
-default, with explicit raw-detail opt-in. App names and notes may still be sensitive.
+default, with explicit raw-detail opt-in. App names, diagnostic readings, and
+notes may still be sensitive.
 
 Download report saves a readable file to the chosen location. Send report reviews
 a frozen file before handing it to Windows sharing; the user selects the app and