@anhcodo13/lattice 0.3.0 → 0.4.0

package/dist/index.d.ts

@@ -30,6 +30,28 @@ interface AssessmentPolicy {
         blockedRuleIds: string[];
         analysis: AnalysisConfig;
     };
+    evidence?: {
+        maximumAgeHours: number;
+        dependencySecurity: {
+            maximumHigh: number;
+            maximumCritical: number;
+        };
+        codeQuality: {
+            maximumLintErrors: number;
+            minimumLineCoverage: number;
+            requireTypecheck: boolean;
+            requireTests: boolean;
+        };
+        codeSecurity: {
+            maximumHigh: number;
+            maximumCritical: number;
+            maximumSecrets: number;
+        };
+        compatibility: {
+            requiredProjects: string[];
+            minimumTestsPerProject: number;
+        };
+    };
 }
 interface VersionPolicy {
     schemaVersion: 2;
@@ -90,6 +112,124 @@ interface ScoreBreakdown {
     }>;
 }
 
+type EvidenceStatus = "pass" | "fail" | "incomplete";
+interface EvidenceDomain {
+    status: EvidenceStatus;
+    issues: string[];
+    tool?: string;
+    version?: string;
+    scanned?: number;
+    findings?: EvidenceFinding[];
+    metrics?: Record<string, string | number | boolean>;
+    matrix?: Array<{
+        name: string;
+        passed: number;
+        failed: number;
+        skipped: number;
+        engine?: string;
+        mobile?: boolean;
+        browserVersion?: string;
+        device?: string;
+        viewportWidths?: number[];
+    }>;
+}
+interface EvidenceFinding {
+    id: string;
+    severity: string;
+    subject: string;
+    message: string;
+    remediation?: string;
+}
+interface AppScanEvidence {
+    path: string;
+    profile: string;
+    dependencySecurity: {
+        tool: string;
+        version: string;
+        complete: boolean;
+        packagesScanned: number;
+        advisories: EvidenceFinding[];
+        errors: string[];
+    };
+    codeQuality: {
+        lint: {
+            tool: string;
+            version: string;
+            complete: boolean;
+            filesScanned: number;
+            errorCount: number;
+            warnings: number;
+            errorsDetail: string[];
+        };
+        typecheck: {
+            tool: string;
+            version: string;
+            applicable?: boolean;
+            complete: boolean;
+            passed: boolean;
+            errors: string[];
+        };
+        tests: {
+            tool: string;
+            version: string;
+            complete: boolean;
+            passed: number;
+            failed: number;
+            errors: string[];
+        };
+        coverage: {
+            tool: string;
+            version: string;
+            complete: boolean;
+            linesPercent: number;
+            errors: string[];
+        };
+    };
+    codeSecurity: {
+        sast: {
+            tool: string;
+            version: string;
+            complete: boolean;
+            filesScanned: number;
+            findings: EvidenceFinding[];
+            errors: string[];
+        };
+        secrets: {
+            tool: string;
+            version: string;
+            complete: boolean;
+            filesScanned: number;
+            findings: EvidenceFinding[];
+            errors: string[];
+        };
+    };
+    compatibility: {
+        tool: string;
+        version: string;
+        complete: boolean;
+        projects: Array<{
+            name: string;
+            passed: number;
+            failed: number;
+            skipped: number;
+            engine?: string;
+            mobile?: boolean;
+            browserVersion?: string;
+            device?: string;
+            viewportWidths?: number[];
+        }>;
+        errors: string[];
+    };
+}
+interface ScanEvidence {
+    schemaVersion: 1;
+    generatedAt: string;
+    policySha256: string;
+    inputSha256: string;
+    commit: string;
+    apps: AppScanEvidence[];
+}
+
 type Status = "pass" | "fail" | "incomplete";
 interface Domain {
     status: Status;
@@ -104,6 +244,12 @@ interface AssessmentReport {
         source: string;
         sha256: string;
     };
+    evidence?: {
+        source: string;
+        generatedAt: string;
+        commit: string;
+        inputSha256: string;
+    };
     inventory: {
         source: string;
         sha256?: string;
@@ -134,6 +280,10 @@ interface AssessmentReport {
                 findings: Finding[];
                 diagnostics: string[];
             };
+            dependencySecurity?: EvidenceDomain;
+            codeQuality?: EvidenceDomain;
+            codeSecurity?: EvidenceDomain;
+            compatibility?: EvidenceDomain;
         };
     }>;
 }
@@ -143,6 +293,8 @@ interface AssessOptions {
     inventory?: string;
     expectedApps?: number;
     outputDirectory?: string;
+    evidence?: string;
+    trustedEvidence?: ScanEvidence;
     policy: VersionPolicy;
 }
 declare function renderAssessmentHtml(report: AssessmentReport): string;