@anhcodo13/lattice 0.3.0 → 0.5.0

package/dist/index.d.ts

@@ -30,11 +30,45 @@ interface AssessmentPolicy {
         blockedRuleIds: string[];
         analysis: AnalysisConfig;
     };
+    evidence?: {
+        maximumAgeHours: number;
+        dependencySecurity: {
+            maximumHigh: number;
+            maximumCritical: number;
+        };
+        codeQuality: {
+            maximumLintErrors: number;
+            minimumLineCoverage: number;
+            requireTypecheck: boolean;
+            requireTests: boolean;
+        };
+        codeSecurity: {
+            maximumHigh: number;
+            maximumCritical: number;
+            maximumSecrets: number;
+        };
+        compatibility: {
+            requiredProjects: string[];
+            minimumTestsPerProject: number;
+            minimumTestedBrowserVersions?: Record<string, string>;
+            minimumEmulatedOsVersions?: Record<string, string>;
+        };
+        accessibility?: {
+            requiredProjects: string[];
+            minimumScansPerProject: number;
+            minimumChecksPerScan: number;
+            minimumAxeVersion: string;
+            maximumViolations: number;
+            maximumNeedsReview: number;
+            requiredTags: string[];
+        };
+    };
 }
 interface VersionPolicy {
     schemaVersion: 2;
     policyVersion: string;
     profiles: Record<string, Record<string, string>>;
+    managedPackages?: Record<string, string>;
     assessment?: AssessmentPolicy;
     source: string;
     sha256: string;
@@ -90,6 +124,136 @@ interface ScoreBreakdown {
     }>;
 }
 
+type EvidenceStatus = "pass" | "fail" | "incomplete";
+interface CompatibilityProject {
+    name: string;
+    passed: number;
+    failed: number;
+    skipped: number;
+    engine?: string;
+    mobile?: boolean;
+    browserVersion?: string;
+    device?: string;
+    emulatedOs?: string;
+    emulatedOsVersion?: string;
+    viewportWidths?: number[];
+    minimumTestedBrowserVersion?: string;
+    minimumEmulatedOsVersion?: string;
+}
+interface EvidenceDomain {
+    status: EvidenceStatus;
+    issues: string[];
+    tool?: string;
+    version?: string;
+    scanned?: number;
+    findings?: EvidenceFinding[];
+    metrics?: Record<string, string | number | boolean>;
+    matrix?: CompatibilityProject[];
+    routes?: Array<Pick<AccessibilityScan, "project" | "route" | "axeVersion" | "checks" | "needsReview">>;
+}
+interface EvidenceFinding {
+    id: string;
+    severity: string;
+    subject: string;
+    message: string;
+    remediation?: string;
+}
+interface AccessibilityScan {
+    project: string;
+    route: string;
+    axeVersion: string;
+    tags: string[];
+    checks: number;
+    violations: EvidenceFinding[];
+    needsReview: number;
+}
+interface AppScanEvidence {
+    path: string;
+    profile: string;
+    dependencySecurity: {
+        tool: string;
+        version: string;
+        complete: boolean;
+        packagesScanned: number;
+        advisories: EvidenceFinding[];
+        errors: string[];
+    };
+    codeQuality: {
+        lint: {
+            tool: string;
+            version: string;
+            complete: boolean;
+            filesScanned: number;
+            errorCount: number;
+            warnings: number;
+            errorsDetail: string[];
+        };
+        typecheck: {
+            tool: string;
+            version: string;
+            applicable?: boolean;
+            complete: boolean;
+            passed: boolean;
+            errors: string[];
+        };
+        tests: {
+            tool: string;
+            version: string;
+            complete: boolean;
+            passed: number;
+            failed: number;
+            errors: string[];
+        };
+        coverage: {
+            tool: string;
+            version: string;
+            complete: boolean;
+            linesPercent: number;
+            errors: string[];
+        };
+    };
+    codeSecurity: {
+        sast: {
+            tool: string;
+            version: string;
+            complete: boolean;
+            filesScanned: number;
+            findings: EvidenceFinding[];
+            errors: string[];
+        };
+        secrets: {
+            tool: string;
+            version: string;
+            complete: boolean;
+            filesScanned: number;
+            findings: EvidenceFinding[];
+            errors: string[];
+        };
+    };
+    compatibility: {
+        tool: string;
+        version: string;
+        complete: boolean;
+        projects: CompatibilityProject[];
+        errors: string[];
+    };
+    accessibility?: {
+        tool: string;
+        version: string;
+        complete: boolean;
+        scans: AccessibilityScan[];
+        errors: string[];
+    };
+}
+interface ScanEvidence {
+    schemaVersion: 1;
+    generatedAt: string;
+    policySha256: string;
+    inputSha256: string;
+    commit: string;
+    apps: AppScanEvidence[];
+}
+
 type Status = "pass" | "fail" | "incomplete";
 interface Domain {
     status: Status;
@@ -104,6 +268,12 @@ interface AssessmentReport {
         source: string;
         sha256: string;
     };
+    evidence?: {
+        source: string;
+        generatedAt: string;
+        commit: string;
+        inputSha256: string;
+    };
     inventory: {
         source: string;
         sha256?: string;
@@ -134,6 +304,11 @@ interface AssessmentReport {
                 findings: Finding[];
                 diagnostics: string[];
             };
+            dependencySecurity?: EvidenceDomain;
+            codeQuality?: EvidenceDomain;
+            codeSecurity?: EvidenceDomain;
+            compatibility?: EvidenceDomain;
+            accessibility?: EvidenceDomain;
         };
     }>;
 }
@@ -143,6 +318,8 @@ interface AssessOptions {
     inventory?: string;
     expectedApps?: number;
     outputDirectory?: string;
+    evidence?: string;
+    trustedEvidence?: ScanEvidence;
     policy: VersionPolicy;
 }
 declare function renderAssessmentHtml(report: AssessmentReport): string;