@aisdlc/core 2.0.2 → 2.2.1

package/README.md

@@ -137,9 +137,9 @@ This separation allows the core functionality to be reused by different interfac
 
 | Capability | Description | Primary Exports |
 | --- | --- | --- |
-| **License Compliance & SCA** | Scans direct and transitive dependencies, maps SPDX identifiers against `license-policy.yaml`, and flags restricted/blocked licenses. | `verifyLicenses`, `scanInstalledLicenses`, `scanWithNativeFs`, `scanWithTrivy`, `scanWithSyft` |
+| **License Compliance & SCA** | Scans direct and transitive dependencies, maps SPDX identifiers against `license-policy.yaml`, flags restricted/blocked licenses, and evaluates vulnerability thresholds. | `verifyLicenses`, `scanInstalledLicenses`, `scanWithNativeFs`, `scanWithTrivy`, `scanWithSyft`, `evaluateVulnerabilityThresholds` |
 | **SBOM & Third-Party Notices** | Generates enterprise-ready CycloneDX 1.5 JSON SBOMs and compiles complete markdown third-party license notices. | `generateCycloneDxSbom`, `writeCycloneDxSbom`, `generateThirdPartyNotices`, `writeThirdPartyNotices` |
-| **Secret Scanning & Entropy Auditing** | Scans git diffs and codebase files for exposed API keys, private credentials, and high-entropy strings (Shannon entropy $\ge 4.3$). Supports Gitleaks CLI integration. | `verifySecrets`, `calculateShannonEntropy`, `runGitleaksCli`, `generateSecretsReportMarkdown` |
+| **Secret Scanning & Entropy Auditing** | Scans git diffs and codebase files for exposed API keys, private credentials, and high-entropy strings (Shannon entropy $\ge 4.3$). Audits structured exception suppressions. | `verifySecrets`, `calculateShannonEntropy`, `runGitleaksCli`, `generateSecretsReportMarkdown`, `parseSecuritySuppression`, `generateSuppressionsAuditReport` |
 | **Static Application Security (SAST)** | AST and pattern analysis for OWASP Top 10 vulnerabilities (SQLi, command injection, SSRF, path traversal, prompt injection). Supports Semgrep CLI. | `verifySast`, `scanFileForSast`, `runSemgrepCli`, `detectPromptInjection` |
 | **Data Protection & Privacy-by-Design (PII-SAST & RoPA)** | Audits Personal Data Assets (`DATA-ASSET-*`), GDPR Art. 30 Records (`PRIV-ROPA-*`), Privacy Requirements (`PRIV-REQ-*`), DPIA gates (`DPIA-*`), and static PII-SAST rules (`PRIV-001`–`PRIV-008`) against `privacy-policy.yaml`. | `verifyPrivacy`, `loadPrivacyPolicy`, `scanFileForPrivacyViolations`, `generateRopaInventoryMarkdown`, `generatePrivacyReportMarkdown` |
 
@@ -157,7 +157,7 @@ This separation allows the core functionality to be reused by different interfac
 
 | Capability | Description | Primary Exports |
 | --- | --- | --- |
-| **Interactive Offline Dashboard** | Generates a 100% self-contained offline HTML dashboard with Cytoscape.js interactive graph for visualizing the full PDaC and RTM network (including `DATA-ASSET-*`, `PRIV-ROPA-*`, and `PRIV-REQ-*`). | `generateDashboardReport`, `buildGraphElements`, `renderDashboardHtml` |
+| **Interactive Offline Dashboard** | Generates a 100% self-contained offline HTML dashboard with Cytoscape.js interactive graph for visualizing the full PDaC and RTM network (including `ARCH-INTRO-*`, Bounded Contexts `BC-*`, `DATA-ASSET-*`, `PRIV-ROPA-*`, and `PRIV-REQ-*`). | `generateDashboardReport`, `buildGraphElements`, `renderDashboardHtml` |
 | **Formal Code Quality Reporting** | Compiles granular polyglot code quality analysis into structured Markdown reports (`reports/QUALITY_REPORT.md`). | `generateQualityReport`, `writeQualityReport`, `calculateRating` |
 | **Code Coverage Ingestion** | Passively ingests test coverage summaries from standard formats (`coverage/lcov.info`, `coverage/coverage-summary.json`) across polyglot stacks (.NET via Coverlet & ReportGenerator, Node.js, Python). | `readCodeCoverageSummary` |
 | **Pull Request KPIs & Telemetry** | Calculates human vs. AI agent contribution ratios, review cycle duration, and token usage, formatting them for PR templates. | `aggregatePrKpis`, `formatPrKpiMarkdown`, `injectKpisIntoPrBody` |
@@ -167,8 +167,8 @@ This separation allows the core functionality to be reused by different interfac
 
 | Capability | Description | Primary Exports |
 | --- | --- | --- |
-| **AI-SDLC Project Bootstrapping** | Configures policies (`quality-policy.yaml`, `license-policy.yaml`, `privacy-policy.yaml`), all 33 schemas, 37 starter templates, arc42 architecture templates, CI workflows, and AI agent rules (11 specialized agents). Injects standard npm scripts into consumer `package.json`. | `initProject`, `resolveAgentTargets`, `collectAgentFiles` |
-| **Canonical Starter Templates & Schemas** | Pre-bundled, typed constants for all 33 Draft 2020-12 JSON schemas and 37 base templates (Product, Security, Privacy, Safety, Manuals, Compliance, SDD, CI/CD). Provides automatic in-memory fallback during schema validation. | `STARTER_BASE_TEMPLATES`, `STARTER_SCHEMAS`, `STARTER_SCHEMAS_MAP`, `STARTER_QUALITY_POLICY`, `STARTER_LICENSE_POLICY`, `STARTER_PRIVACY_POLICY`, `STARTER_PULL_REQUEST_TEMPLATE`, `STARTER_GITHUB_PULL_REQUEST_TEMPLATE` |
+| **AI-SDLC Project Bootstrapping** | Configures policies (`quality-policy.yaml`, `license-policy.yaml`, `privacy-policy.yaml`), all 34 schemas, 38 starter templates, arc42 architecture templates, CI workflows, and AI agent rules (11 specialized agents). Injects standard npm scripts into consumer `package.json`. | `initProject`, `resolveAgentTargets`, `collectAgentFiles` |
+| **Canonical Starter Templates & Schemas** | Pre-bundled, typed constants for all 34 Draft 2020-12 JSON schemas and 38 base templates (Product, Security, Privacy, Safety, Manuals, Compliance, SDD, CI/CD). Provides automatic in-memory fallback during schema validation. | `STARTER_BASE_TEMPLATES`, `STARTER_SCHEMAS`, `STARTER_SCHEMAS_MAP`, `STARTER_QUALITY_POLICY`, `STARTER_LICENSE_POLICY`, `STARTER_PRIVACY_POLICY`, `STARTER_PULL_REQUEST_TEMPLATE`, `STARTER_GITHUB_PULL_REQUEST_TEMPLATE` |
 | **Universal MCP Scaffolding** | Pre-bundled Model Context Protocol server configuration files for immediate IDE integration without manual setup. | `STARTER_CURSOR_MCP`, `STARTER_ANTIGRAVITY_MCP`, `STARTER_VSCODE_MCP` |
 | **Multi-Provider CI/CD Pipelines** | Production-ready pipeline definitions using `npx @aisdlc/cli` across GitHub Actions (including automated PR KPI aggregation), GitLab CI, Azure DevOps, and Bitbucket Pipelines. | `STARTER_GITHUB_CI`, `STARTER_GITHUB_SDD_INTEGRATE`, `STARTER_GITHUB_PR_KPI`, `STARTER_GITHUB_DEPLOY_DASHBOARD`, `STARTER_GITLAB_CI`, `STARTER_AZURE_PIPELINES`, `STARTER_BITBUCKET_PIPELINES` |