@avi770/testteam 3.0.0 → 3.2.0

package/dist/core/security-audit/sentinel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.js","sourceRoot":"","sources":["../../../core/security-audit/sentinel.ts"],"names":[],"mappings":"AA4BA,OAAO,EACL,aAAa,GAoBd,MAAM,SAAS,CAAC;AAEjB,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,CAAU,CAAC;AAE5B,yEAAyE;AACzE,MAAM,SAAS,GAA2C;IACxD,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,CAAC;IACd,eAAe,EAAE,CAAC;IAClB,QAAQ,EAAE,CAAC;IACX,cAAc,EAAE,CAAC;IACjB,cAAc,EAAE,EAAE;IAClB,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,6DAA6D;AAC7D,MAAM,eAAe,GAA8C;IACjE,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,GAAG;CACV,CAAC;AAEF,yDAAyD;AACzD,MAAM,mBAAmB,GAA4D;IACnF,MAAM,EAAE,GAAG;IACX,QAAQ,EAAE,GAAG;IACb,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,OAAO,EAAE,GAAG;CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,yBAAyB,GAAgD;IAC7E,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACnE,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,SAAS,CAAC;IACxE,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,gBAAgB,EAAE,SAAS,CAAC;IAC1D,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC;IACzD,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;IAC7D,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,WAAW,CAAC;IACvE,KAAK,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;CACjC,CAAC;AAEF,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,2FAA2F;AAC3F,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,iBAAiB,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,sEAAsE;AACtE,MAAM,cAAc,GAA+B,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAEjG,SAAS,WAAW,CAAC,CAAkB,EAAE,CAAkB;IACzD,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,KAA4B;IACvD,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAChD,MAAM,CACP,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,SAAS,aAAa,CACpB,OAAgB,EAChB,IAAY,EACZ,iBAAyB;IAEzB,MAAM,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,gEAAgE;IAChE,OAAO,EAAE,GAAG,IAAI,GAAG,iBAAiB,CAAC;AACvC,CAAC;AAED,+DAA+D;AAC/D,SAAS,cAAc,CAAC,OAAgB;IACtC,OAAO,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACzD,CAAC;AAED,mDAAmD;AACnD,SAAS,KAAK,CAAC,QAA4B;IACzC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,qFAAqF;AACrF,SAAS,aAAa,CACpB,QAA4B,EAC5B,QAAsC;IAEtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC3D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,iFAAiF;AACjF,SAAS,uBAAuB,CAC9B,MAAkB,EAClB,YAAsC;IAEtC,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,IAAI,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAiB,CAAC,CAAC;IAClB,KAAK,CAAe;IAC7B,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,UAAwB;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,KAAmB;QAC5B,IAAI,IAAI,CAAC,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YAC1C,aAAa,EAAE,IAAI,CAAC,QAAQ;YAC5B,cAAc;YACd,MAAM;SACP,CAAC;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAyB;IAInE,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,UAAU,GAAe,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,GAAa;IACxC,IAAI,QAAyB,CAAC;IAC9B,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG;QAAE,QAAQ,GAAG,UAAU,CAAC;SAC3C,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG;QAAE,QAAQ,GAAG,MAAM,CAAC;SAC5C,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG;QAAE,QAAQ,GAAG,QAAQ,CAAC;;QAC9C,QAAQ,GAAG,KAAK,CAAC;IAEtB,+EAA+E;IAC/E,OAAO;QACL,EAAE,EAAE,GAAG,QAAQ,QAAQ,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE;QACrD,IAAI,EAAE,mBAAmB;QACzB,QAAQ;QACR,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,aAAa,CAAC,kBAAkB;QACxC,WAAW,EAAE,4BAA4B,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,WAAW,WAAW,GAAG,CAAC,SAAS,UAAU,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE;QACvJ,6FAA6F;QAC7F,0EAA0E;QAC1E,IAAI,EAAE,OAAO,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,cAAc,IAAI,SAAS,EAAE;QACjE,UAAU,EAAE,GAAG,CAAC,IAAI;QACpB,UAAU,EAAE,mBAAmB;QAC/B,UAAU,EAAE,WAAW,EAAE,kDAAkD;KAC5E,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,MAA8B,EAC9B,eAAuB,EACvB,MAAc,EACd,KAAa;IAEb,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,KAAK;gBAClB,MAAM;aACP,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA4B;IAC3D,mDAAmD;IACnD,qEAAqE;IACrE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,gBAAgB;QAC3C,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC/C,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5C,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAChD,CAAC;IACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,WAAW;QACtC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,WAAW;QACtC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,WAAW;QACtC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACjD,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3C,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC7C,CAAC;IAEF,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,sCAAsC;YACtC,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE;gBAAE,SAAS;YAExC,sFAAsF;YACtF,iFAAiF;YACjF,mFAAmF;YACnF,sFAAsF;YACtF,kDAAkD;YAClD,IACE,OAAO,CAAC,IAAI,KAAK,SAAS;gBAC1B,OAAO,CAAC,IAAI,KAAK,SAAS;gBAC1B,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAC7B,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAiB;gBAC1B,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;aACtC,CAAC;YACF,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAEpD,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,QAAQ,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,EAAE,EAAE;gBACnD,KAAK;gBACL,gBAAgB;gBAChB,WAAW,EACT,WAAW,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACjD,IAAI,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,gBAAgB,CAAC,WAAW,EAAE,aAAa;aACzF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,6CAA6C;AAC7C,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,QAA0C;IAE1C,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,IAAI,GAAG,GAAG,CAAC,CAAC;IAeZ,MAAM,IAAI,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACjE,MAAM,eAAe,GAAG,CAAC,CAAS,EAAW,EAAE,CAC7C,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACzF,MAAM,YAAY,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/F,MAAM,iBAAiB,GAAG,CAAC,CAAS,EAAW,EAAE,CAC/C,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzF,MAAM,KAAK,GAAuB;QAChC,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,yCAAyC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE;QAC5J,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,qCAAqC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE;QACjK,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,2DAA2D,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE;QAC1L,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,uCAAuC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE;QAC7J,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE;QAClJ,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,mDAAmD,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE;KAC7K,CAAC;IAEF,KAAK,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;gBAAE,SAAS,CAAC,4CAA4C;YACrF,MAAM,GAAG,GACP,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5F,IAAI,GAAG,EAAE,CAAC;gBACR,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,QAAQ,QAAQ,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,EAAE;oBACxC,QAAQ,EAAE,YAAY;oBACtB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,WAAW,EAAE,kBAAkB,CAAC,CAAC,WAAW,QAAQ,YAAY,GAAG;oBACnE,QAAQ,EAAE,CAAC,CAAC,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,kDAAkD;AAClD,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAgB,EAChB,cAAsB,EACtB,KAAa,EACb,WAAoB;IAEpB,wEAAwE;IACxE,2EAA2E;IAC3E,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CACb,+EAA+E,cAAc,MAAM;YACnG,kFAAkF,CACnF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,WAAW,EAAE,SAAS;QACtB,aAAa,EAAE,6BAA6B,OAAO,CAAC,WAAW,aAAa,cAAc,0BAA0B;QACpH,cAAc,EAAE,iCAAiC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG;QAClF,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,IAAI,YAAoB,CAAC;IAEzB,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,gBAAgB,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC;QACnG,YAAY,GAAG,oEAAoE,MAAM,mBAAmB,CAAC;IAC/G,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,WAAW,EAAE,CAAC;QACxD,YAAY,GAAG,2IAA2I,CAAC;IAC7J,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,WAAW,EAAE,CAAC;QACxD,YAAY,GAAG,qHAAqH,CAAC;IACvI,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,WAAW,EAAE,CAAC;QACxD,YAAY,GAAG,8FAA8F,CAAC;IAChH,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,wBAAwB,OAAO,CAAC,EAAE,qDAAqD,CAAC;IACzG,CAAC;IAED,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,YAAY;QACZ,SAAS,EAAE,cAAc,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,qEAAqE;KAC/H,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,2FAA2F;AAC3F,MAAM,UAAU,oBAAoB,CAClC,OAAgB,EAChB,cAA8B;IAE9B,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7C,KAAK,EAAE;YACL,gFAAgF;YAChF,uDAAuD;YACvD,0EAA0E;YAC1E,iEAAiE;YACjE,6EAA6E;YAC7E,6FAA6F;YAC7F,yBAAyB,OAAO,CAAC,EAAE,OAAO,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,UAAU,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI;SACxH;QACD,cAAc;KACf,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gEAAgE;AAChE,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAA4B,EAC5B,WAAkC,EAClC,KAAa;IAEb,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,IAAI,GAAG,GAAG,GAAG,CAAC;IAEd,6BAA6B;IAC7B,MAAM,MAAM,GAAoC;QAC9C,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;KACjD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,SAAS,eAAe,CAAC,KAAa,EAAE,UAAkB;QACxD,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;QACD,OAAO,UAAU,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,uDAAuD;IACvD,oFAAoF;IACpF,MAAM,cAAc,GAAsD;QACxE,CAAC,UAAU,EAAE,EAAE,CAAC;QAChB,CAAC,MAAM,EAAE,CAAC,CAAC;QACX,CAAC,QAAQ,EAAE,CAAC,CAAC;QACb,CAAC,KAAK,EAAE,CAAC,CAAC;KACX,CAAC;IAEF,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,cAAc,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC/C,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,GAAG,KAAK,IAAI,QAAQ,uCAAuC,UAAU,WAAW,KAAK,IAAI;gBACjG,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;YACH,GAAG,IAAI,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,eAAe,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpD,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,qDAAqD,WAAW,CAAC,MAAM,IAAI;YACxG,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QACH,GAAG,IAAI,GAAG,CAAC;IACb,CAAC;IAED,kFAAkF;IAClF,kFAAkF;IAClF,mFAAmF;IACnF,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAE1C,IAAI,KAA4B,CAAC;IACjC,IAAI,KAAK,IAAI,EAAE;QAAE,KAAK,GAAG,GAAG,CAAC;SACxB,IAAI,KAAK,IAAI,EAAE;QAAE,KAAK,GAAG,GAAG,CAAC;SAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,KAAK,GAAG,GAAG,CAAC;SAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,KAAK,GAAG,GAAG,CAAC;;QAC7B,KAAK,GAAG,GAAG,CAAC;IAEjB,OAAO;QACL,KAAK;QACL,KAAK;QACL,UAAU;QACV,YAAY,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC1B,QAA4B,EAC5B,QAAuC,EACvC,iBAAyB;IAEzB,MAAM,MAAM,GAAoB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjD,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE5C,4EAA4E;QAC5E,0EAA0E;QAC1E,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,kCAAkC;QAClD,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,+CAA+C;YAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,8EAA8E;YAC9E,mFAAmF;YACnF,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpC,IAAI,GAAG,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;oBAChC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;oBACrD,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAErD,OAAO;YACL,OAAO,EAAE,CAAC;YACV,aAAa,EAAE,EAAE;YACjB,cAAc,EAAE,EAAE;YAClB,IAAI;YACJ,iBAAiB;YACjB,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;SAClC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;QAC/C,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,gBAAgB;IACV,MAAM,CAAiB;IACvB,GAAG,CAAe;IAEnC,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,IAAI,CACF,MAAkB,EAClB,cAAkC,EAClC,IAAyB,EACzB,aAAqB,EACrB,YAAoB;QAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,wFAAwF;QACxF,sFAAsF;QACtF,mFAAmF;QACnF,IAAI,MAAM,CAAC,WAAW,KAAK,EAAE,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CACb,4EAA4E;gBAC5E,KAAK,MAAM,CAAC,cAAc,+DAA+D,CAC1F,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAChE,MAAM,aAAa,GAAa,EAAE,CAAC;QAEnC,0EAA0E;QAC1E,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAEnF,qDAAqD;QACrD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;YACzB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAE,CAAC,EAAE,CAAC;gBAChD,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBACzC,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,eAAe,CACpB,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAC9B,aAAa,EACb,YAAY,EACZ,KAAK,CACN,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;QAEL,4BAA4B;QAC5B,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,yBAAyB,EAAE,GAAG,CAAC,GAAG,EAAE;YAChF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,iBAAiB,CAAE,CAAC,EAAE,CAAC;gBACxD,aAAa,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAC5C,OAAO,EAAE,SAAS,EAAE,EAAgB,EAAE,UAAU,EAAE,EAAgB,EAAE,CAAC;YACvE,CAAC;YACD,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,EAAE,CAAC;QAEL,wEAAwE;QACxE,MAAM,WAAW,GAAc,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE/D,wBAAwB;QACxB,MAAM,WAAW,GAA0B,CAAC,GAAG,EAAE;YAC/C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAE,CAAC,EAAE,CAAC;gBACjD,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACxC,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,EAAE,CAAC;QAEL,iDAAiD;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAExE,6BAA6B;QAC7B,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAElD,oBAAoB;QACpB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAmB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,cAAc,GAAG,YAAY,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAExE,yEAAyE;QACzE,kDAAkD;QAClD,gFAAgF;QAChF,MAAM,eAAe,GAAqB,EAAE,CAAC;QAC7C,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM;gBAAE,SAAS;YACnF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,gBAAgB,CAAE,CAAC,EAAE,CAAC;gBACvD,aAAa,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvD,SAAS,CAAC,oDAAoD;YAChE,CAAC;YACD,eAAe,CAAC,IAAI,CAClB,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAClF,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,MAAM,cAAc,GAAwB,WAAW;aACpD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACZ,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,gBAAgB,CAClG;aACA,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAE1B,sEAAsE;QACtE,MAAM,gBAAgB,GAA4B,WAAW;aAC1D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,eAAe,CAAC;aACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAE7C,4CAA4C;QAC5C,MAAM,YAAY,GAAG,mBAAmB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QAE1E,6BAA6B;QAC7B,MAAM,eAAe,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC3C,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CACpC,eAAe;YACb,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,8BAA8B,CACnC,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;YACzB,OAAO,EAAE,QAAQ,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,CAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACzE,eAAe;YACf,QAAQ,EAAE,WAAW;YACrB,cAAc;YACd,WAAW;YACX,yBAAyB;YACzB,YAAY;YACZ,WAAW;YACX,eAAe;YACf,cAAc;YACd,gBAAgB;YAChB,YAAY;YACZ,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC;YACvC,aAAa;YACb,cAAc;YACd,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,MAA0B;QAChC,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC5B,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAChC,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC/B,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC/B,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;YACnC,CAAC,MAAM,CAAC,eAAe,CACxB,CAAC;IACJ,CAAC;CACF"}

package/dist/core/security-audit/types.d.ts

@@ -0,0 +1,240 @@
+/**
+ * Security Audit (The Sentinel) — module-local types (agent #8).
+ * Composite/operational layer: orchestrates engine agents 07, 34, 35, 36, 37, 38.
+ * Spec: blueprint/agents/08-security-audit.md.
+ * Do NOT import from or modify core/types.ts — all engine Finding shapes come from there.
+ */
+import type { Finding, FindingSeverity } from '../types.js';
+export declare const ENGINE_MODULE: {
+    /** Agent 07 – SecurityScoutAgent: security headers + pnpm audit */
+    readonly SECURITY_SCOUT: "security-scout";
+    /** Agent 07 – SecurityScoutAgent: header-check sub-module */
+    readonly SECURITY_HEADERS: "security-headers";
+    /** Agent 34 – XssScannerAgent */
+    readonly XSS_SCANNER: "xss-scanner";
+    /** Agent 35 – CsrfTesterAgent */
+    readonly CSRF_TESTER: "csrf-tester";
+    /** Agent 36 – AuthFuzzerAgent */
+    readonly AUTH_FUZZER: "auth-fuzzer";
+    /** Agent 37 – DependencyScannerAgent */
+    readonly DEPENDENCY_SCANNER: "dependency-scanner";
+    /** Agent 38 – SecretsScannerAgent */
+    readonly SECRETS_SCANNER: "secrets-scanner";
+};
+export type EngineModuleName = (typeof ENGINE_MODULE)[keyof typeof ENGINE_MODULE];
+/**
+ * The real engine agents this Sentinel composes — the engine "security" squad.
+ * These ids are registered engine agents (bridge/agent-registry, squad 'security');
+ * an integration test asserts they still exist and are grouped as 'security', so an
+ * engine renumber/regroup breaks the build. The Sentinel ingests their Finding[]
+ * output verbatim — it does NOT invoke them (each engine agent owns its own I/O).
+ */
+export declare const COMPOSED_ENGINE_AGENTS: {
+    readonly securityScout: 7;
+    readonly xssScanner: 34;
+    readonly csrfTester: 35;
+    readonly authFuzzer: 36;
+    readonly dependencyScanner: 37;
+    readonly secretsScanner: 38;
+};
+/** An endpoint the Sentinel can scan. */
+export interface ScanEndpoint {
+    readonly id: string;
+    readonly url: string;
+    /** Opaque hash of the route/code snapshot; used for diff-aware incremental scans. */
+    readonly contentHash: string;
+}
+/** Full target description passed to a sentinel scan. */
+export interface ScanTarget {
+    readonly prodBaseUrl: string;
+    readonly stagingBaseUrl: string;
+    /** All endpoints available for scanning. */
+    readonly endpoints: readonly ScanEndpoint[];
+    /** Dependency manifest snapshot (name→version) for CVE correlation. */
+    readonly dependencyManifest: Readonly<Record<string, string>>;
+    /** IaC/config blobs keyed by resource name (e.g. "terraform/main.tf"). */
+    readonly iacBlobs: Readonly<Record<string, string>>;
+    /** Data-sensitivity tier (from Data Integrity #9). Affects blast-radius weighting. */
+    readonly dataSensitivity: 'public' | 'internal' | 'pii' | 'phi' | 'payment';
+}
+/** A single CVE entry enriched with CISA KEV + EPSS data. */
+export interface CveEntry {
+    readonly cveId: string;
+    /** CVSS base score 0–10. */
+    readonly cvssScore: number;
+    /** EPSS exploit-probability 0–1 (from FIRST). */
+    readonly epss: number;
+    /** True if this CVE is in the CISA Known Exploited Vulnerabilities catalogue. */
+    readonly inKev: boolean;
+    /** Package name affected (exact name, e.g. "lodash", "express"). */
+    readonly packageName: string;
+    /** Package version affected (e.g. "4.17.20"). Used for structured correlation. */
+    readonly packageVersion?: string;
+    /** Whether the vulnerable code path is actually reachable in this project's call graph. */
+    readonly reachable: boolean;
+}
+export interface CanaryToken {
+    readonly tokenId: string;
+    /** Human-readable label ("prod-db-password-canary"). */
+    readonly label: string;
+    /** The fake credential/URL string planted in the system. */
+    readonly value: string;
+    readonly plantedAt: number;
+}
+export interface CanaryAlert {
+    readonly tokenId: string;
+    readonly label: string;
+    readonly triggeredAt: number;
+    /** Where the use was detected (e.g. IP, service name). */
+    readonly source: string;
+}
+export type IacMisconfigSeverity = 'critical' | 'high' | 'medium' | 'low';
+export interface IacMisconfigFinding {
+    readonly id: string;
+    readonly resource: string;
+    readonly rule: string;
+    readonly description: string;
+    readonly severity: IacMisconfigSeverity;
+}
+/** A single step in a chained attack path. */
+export interface AttackStep {
+    /** The engine Finding at this step. */
+    readonly finding: Finding;
+    readonly role: string;
+}
+/** A chained attack path derived from ≥2 low/medium findings. */
+export interface AttackPath {
+    readonly id: string;
+    /** All steps in order; len ≥ 2 per spec. */
+    readonly steps: readonly AttackStep[];
+    /** Combined severity = worst step severity × path-length weight. */
+    readonly combinedSeverity: FindingSeverity;
+    readonly description: string;
+}
+/** Environment in which proof-of-exploit ran. MUST be 'staging'. */
+export type ExploitEnvironment = 'staging';
+export interface ProofOfExploit {
+    readonly findingId: string;
+    readonly environment: ExploitEnvironment;
+    /** The exact HTTP request / payload used. */
+    readonly requestDetail: string;
+    /** HTTP status or observable result. */
+    readonly observedResult: string;
+    /** Confirmed exploitable in sandbox. */
+    readonly confirmed: boolean;
+    readonly ranAtMs: number;
+}
+export interface VirtualPatchDraft {
+    readonly findingId: string;
+    /** WAF rule / response header / detection signature text — to be applied by a human. */
+    readonly patchContent: string;
+    readonly rationale: string;
+}
+export interface SecretRotationRunbook {
+    readonly secretLabel: string;
+    /** Steps for the human to execute. */
+    readonly steps: readonly string[];
+    /** Whether the leaked key was confirmed still-active at time of triage. */
+    readonly keyStillActive: boolean | null;
+}
+/**
+ * Security posture score — 0..100 (never rounded up; show-the-math).
+ * Deductions are itemised so the caller can see exactly why the score is what it is.
+ */
+export interface PostureScore {
+    /** Numeric score 0..100, truncated to 2 decimals (never rounded up). */
+    readonly score: number;
+    readonly grade: 'A' | 'B' | 'C' | 'D' | 'F';
+    readonly deductions: readonly ScoreDeduction[];
+    /** ISO timestamp of calculation. */
+    readonly calculatedAt: string;
+}
+export interface ScoreDeduction {
+    readonly reason: string;
+    readonly points: number;
+}
+/**
+ * Accepted baseline: findings from the prior run that have been reviewed and
+ * suppressed. The Sentinel reports only *new* findings vs this baseline.
+ */
+export type AcceptedBaseline = ReadonlySet<string>;
+/** Hashes of endpoint contentHash values from the last successful scan. */
+export type ScanBaseline = Readonly<Record<string, string>>;
+/** Cost unit used by the frugal governor (dimensionless; caller calibrates). */
+export type ScanCostUnit = number;
+export interface ScanBudget {
+    /** Total units available for the security scan session. */
+    readonly totalUnits: number;
+}
+export type GovernorDecision = 'proceed' | 'halt';
+export interface GovernorResult {
+    readonly decision: GovernorDecision;
+    readonly unitsConsumed: ScanCostUnit;
+    readonly unitsRemaining: ScanCostUnit;
+    readonly reason: string;
+}
+export interface SecurityScanResult {
+    readonly scanId: string;
+    readonly runMode: 'passive' | 'active' | 'deep';
+    /**
+     * True if the budget was exhausted before all checks completed.
+     * A budget-truncated scan MUST NOT be treated as "clean" — unknown findings
+     * may exist in the unscanned surface.
+     */
+    readonly budgetTruncated: boolean;
+    /** All raw findings from engine agents (post-baseline-diff, post-dedup). */
+    readonly findings: readonly Finding[];
+    /** Findings ranked by severity × EPSS × blast-radius (descending). */
+    readonly rankedFindings: readonly RankedFinding[];
+    /** Chained attack paths from exploit-chain analysis. */
+    readonly attackPaths: readonly AttackPath[];
+    /** CVEs suppressed because the vulnerable function is not reachable. */
+    readonly suppressedUnreachableCves: readonly CveEntry[];
+    /** Canary alerts fired during this scan window. */
+    readonly canaryAlerts: readonly CanaryAlert[];
+    /** IaC posture findings. */
+    readonly iacFindings: readonly IacMisconfigFinding[];
+    /** Proof-of-exploit records (staging only). */
+    readonly proofOfExploits: readonly ProofOfExploit[];
+    /** Virtual patch drafts — for human apply only. */
+    readonly virtualPatches: readonly VirtualPatchDraft[];
+    /** Secret rotation runbooks — for human apply only. */
+    readonly rotationRunbooks: readonly SecretRotationRunbook[];
+    readonly postureScore: PostureScore;
+    /** Endpoints skipped because their contentHash matched the last scan baseline. */
+    readonly skippedEndpoints: readonly string[];
+    /**
+     * Check phases skipped because the budget was exhausted before they ran.
+     * Populated on every budget-halted step so callers know what was NOT checked.
+     */
+    readonly skippedChecks: readonly string[];
+    readonly governorResult: GovernorResult;
+    readonly completedAt: string;
+}
+export interface RankedFinding {
+    readonly finding: Finding;
+    /** Raw priority score = severityWeight × EPSS × blastRadiusWeight. Show-the-math. */
+    readonly priorityScore: number;
+    /** Severity weight (critical=4, high=3, medium=2, low=1, info=0.5). */
+    readonly severityWeight: number;
+    /** EPSS probability 0–1; 0.5 if unknown. */
+    readonly epss: number;
+    /** Blast-radius multiplier based on data sensitivity. */
+    readonly blastRadiusWeight: number;
+    /** Compliance tags (SOC2 / OWASP ASVS / PCI / GDPR / CWE). */
+    readonly complianceTags: readonly string[];
+}
+export interface SentinelConfig {
+    /** Agent id (always 8). */
+    readonly agentId: 8;
+    readonly budget: ScanBudget;
+    /** If provided, reports only findings not in this baseline. */
+    readonly acceptedBaseline?: AcceptedBaseline;
+    /** If provided, skips endpoints whose contentHash matches. */
+    readonly scanBaseline?: ScanBaseline;
+    /** Canary tokens in active deployment. */
+    readonly canaryTokens?: readonly CanaryToken[];
+    /** Clock override for deterministic tests. */
+    readonly clock?: () => number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/security-audit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../core/security-audit/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAazD,eAAO,MAAM,aAAa;IACxB,mEAAmE;;IAEnE,6DAA6D;;IAE7D,iCAAiC;;IAEjC,iCAAiC;;IAEjC,iCAAiC;;IAEjC,wCAAwC;;IAExC,qCAAqC;;CAE7B,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAElF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;;;;;CAOzB,CAAC;AAMX,yCAAyC;AACzC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,yDAAyD;AACzD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,uEAAuE;IACvE,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,sFAAsF;IACtF,QAAQ,CAAC,eAAe,EAAE,QAAQ,GAAG,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;CAC7E;AAMD,6DAA6D;AAC7D,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAMD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAMD,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE1E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;CACzC;AAMD,8CAA8C;AAC9C,MAAM,WAAW,UAAU;IACzB,uCAAuC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,oEAAoE;IACpE,QAAQ,CAAC,gBAAgB,EAAE,eAAe,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAMD,oEAAoE;AACpE,MAAM,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,6CAA6C;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,wCAAwC;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wFAAwF;IACxF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,sCAAsC;IACtC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;CACzC;AAMD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;IAC/C,oCAAoC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAMD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;AAEnD,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAM5D,gFAAgF;AAChF,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAElC,MAAM,WAAW,UAAU;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAMD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChD;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,sEAAsE;IACtE,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IAClD,wDAAwD;IACxD,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,yBAAyB,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxD,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9C,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACrD,+CAA+C;IAC/C,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACtD,uDAAuD;IACvD,QAAQ,CAAC,gBAAgB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC5D,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,kFAAkF;IAClF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,qFAAqF;IACrF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,8DAA8D;IAC9D,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAMD,MAAM,WAAW,cAAc;IAC7B,2BAA2B;IAC3B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,0CAA0C;IAC1C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAC/C,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CAC/B"}

package/dist/core/security-audit/types.js

@@ -0,0 +1,42 @@
+// ---------------------------------------------------------------------------
+// Engine-agent module-name constants
+// ---------------------------------------------------------------------------
+// These constants mirror the `module` string literals that engine agents 07, 34–38
+// emit on their findings. The Sentinel uses them for module-based routing (compliance
+// tags, virtual-patch templates, attack-path classification). This is a BEST-EFFORT
+// string contract: the engine agents do not export shared constants, so a rename there
+// is NOT caught by the compiler here. The real coupling that IS enforced is the
+// integration test asserting COMPOSED_ENGINE_AGENTS exist as registered 'security'-squad
+// agents (a renumber/regroup breaks the build).
+export const ENGINE_MODULE = {
+    /** Agent 07 – SecurityScoutAgent: security headers + pnpm audit */
+    SECURITY_SCOUT: 'security-scout',
+    /** Agent 07 – SecurityScoutAgent: header-check sub-module */
+    SECURITY_HEADERS: 'security-headers',
+    /** Agent 34 – XssScannerAgent */
+    XSS_SCANNER: 'xss-scanner',
+    /** Agent 35 – CsrfTesterAgent */
+    CSRF_TESTER: 'csrf-tester',
+    /** Agent 36 – AuthFuzzerAgent */
+    AUTH_FUZZER: 'auth-fuzzer',
+    /** Agent 37 – DependencyScannerAgent */
+    DEPENDENCY_SCANNER: 'dependency-scanner',
+    /** Agent 38 – SecretsScannerAgent */
+    SECRETS_SCANNER: 'secrets-scanner',
+};
+/**
+ * The real engine agents this Sentinel composes — the engine "security" squad.
+ * These ids are registered engine agents (bridge/agent-registry, squad 'security');
+ * an integration test asserts they still exist and are grouped as 'security', so an
+ * engine renumber/regroup breaks the build. The Sentinel ingests their Finding[]
+ * output verbatim — it does NOT invoke them (each engine agent owns its own I/O).
+ */
+export const COMPOSED_ENGINE_AGENTS = {
+    securityScout: 7,
+    xssScanner: 34,
+    csrfTester: 35,
+    authFuzzer: 36,
+    dependencyScanner: 37,
+    secretsScanner: 38,
+};
+//# sourceMappingURL=types.js.map

package/dist/core/security-audit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../core/security-audit/types.ts"],"names":[],"mappings":"AAQA,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAC9E,mFAAmF;AACnF,sFAAsF;AACtF,oFAAoF;AACpF,uFAAuF;AACvF,gFAAgF;AAChF,yFAAyF;AACzF,gDAAgD;AAEhD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,mEAAmE;IACnE,cAAc,EAAE,gBAAgB;IAChC,6DAA6D;IAC7D,gBAAgB,EAAE,kBAAkB;IACpC,iCAAiC;IACjC,WAAW,EAAE,aAAa;IAC1B,iCAAiC;IACjC,WAAW,EAAE,aAAa;IAC1B,iCAAiC;IACjC,WAAW,EAAE,aAAa;IAC1B,wCAAwC;IACxC,kBAAkB,EAAE,oBAAoB;IACxC,qCAAqC;IACrC,eAAe,EAAE,iBAAiB;CAC1B,CAAC;AAIX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,aAAa,EAAE,CAAC;IAChB,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,iBAAiB,EAAE,EAAE;IACrB,cAAc,EAAE,EAAE;CACV,CAAC"}

package/dist/core/tech-debt/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Technical Debt Tracker (#20) — public surface (barrel).
+ *
+ * Composite operational layer that composes engine agents #68/#69/#70/#83
+ * into a continuous tech-debt tracking module.
+ *
+ * Spec: blueprint/agents/20-technical-debt-tracker.md
+ */
+export type { EngineFindings, ChurnRecord, Hotspot, DebtCategory, DebtItem, RefactorProposal, RefactoringRoadmap, DebtBudget, BudgetCheckResult, DiffScope, DebtSnapshot, DebtTrend, BugHistoryRecord, TechDebtReport, TechDebtTrackerInput, } from './types.js';
+export { runTechDebtTracker, computeTrend, isRefactorApproved } from './tech-debt-tracker.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/tech-debt/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/tech-debt/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,YAAY,EAEV,cAAc,EAEd,WAAW,EACX,OAAO,EAEP,YAAY,EACZ,QAAQ,EAER,gBAAgB,EAChB,kBAAkB,EAElB,UAAU,EACV,iBAAiB,EAEjB,SAAS,EAET,YAAY,EACZ,SAAS,EAET,gBAAgB,EAEhB,cAAc,EACd,oBAAoB,GACrB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/core/tech-debt/index.js

@@ -0,0 +1,11 @@
+/**
+ * Technical Debt Tracker (#20) — public surface (barrel).
+ *
+ * Composite operational layer that composes engine agents #68/#69/#70/#83
+ * into a continuous tech-debt tracking module.
+ *
+ * Spec: blueprint/agents/20-technical-debt-tracker.md
+ */
+// ── Implementation ───────────────────────────────────────────────
+export { runTechDebtTracker, computeTrend, isRefactorApproved } from './tech-debt-tracker.js';
+//# sourceMappingURL=index.js.map

package/dist/core/tech-debt/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../core/tech-debt/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA8BH,oEAAoE;AACpE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/core/tech-debt/tech-debt-tracker.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Technical Debt Tracker (#20) — implementation.
+ *
+ * This is a COMPOSITE operational layer: it composes, aggregates, and annotates
+ * findings from engine agents #68/#69/#70/#83.  It never calls external tools
+ * or re-scans the codebase — all analysis is derived from the pre-collected
+ * engine outputs supplied in `TechDebtTrackerInput`.
+ *
+ * Design contract:
+ *   - Pure + deterministic given fixed inputs (and an optional clock override).
+ *   - Read-only by default; refactors are PROPOSED, never applied.
+ *   - No swallowed errors; every path is explicit.
+ *   - No gameable scoring: ROI = interest/effort (transparent math).
+ *   - Never rounds up (Avi's QA standard): fractional hours are preserved.
+ *
+ * Spec: blueprint/agents/20-technical-debt-tracker.md
+ * Improvements folded in: #1 (diff-aware), #2 (hotspot), #3 (debt ROI),
+ *   #4 (bug/incident correlation via BugHistoryRecord), #5 (sequenced roadmap),
+ *   #6 (coverage gaps), #10 (safe-refactor gate), #12 (knowledge risk),
+ *   #13 (debt budget), #15 (trend), #16 (explainable prioritization).
+ */
+import type { DebtItem, DebtSnapshot, DebtTrend, RefactorProposal, TechDebtReport, TechDebtTrackerInput } from './types.js';
+declare function computeTrend(priorSnapshots: readonly DebtSnapshot[] | undefined, currentItems: readonly DebtItem[], clock: (() => string) | undefined): DebtTrend;
+/**
+ * Run the Technical Debt Tracker.
+ *
+ * Compose engine findings, compute hotspots, rank debt items by ROI, build a
+ * sequenced refactoring roadmap, check the debt budget, and return a full
+ * `TechDebtReport`.  Pure function — no side effects, no file I/O.
+ */
+export declare function runTechDebtTracker(input: Readonly<TechDebtTrackerInput>): TechDebtReport;
+export { computeTrend };
+/**
+ * Returns true if a RefactorProposal is allowed to proceed — ONLY if
+ * `gateStatus === 'approved'` (set externally by the human-gate harness).
+ *
+ * This function is intentionally typed against the full `RefactorProposal`
+ * interface (not `{ gateStatus: string }`) so that the TypeScript compiler
+ * catches callers passing proposals that can never have gateStatus='approved'
+ * due to a missing union arm (must-fix #1).
+ *
+ * Auto-merge check: 'proposed' and 'gated-awaiting-human' always return false,
+ * enforcing the "never auto-merges a refactor" operating rule.
+ */
+export declare function isRefactorApproved(proposal: Readonly<RefactorProposal>): boolean;
+//# sourceMappingURL=tech-debt-tracker.d.ts.map

package/dist/core/tech-debt/tech-debt-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tech-debt-tracker.d.ts","sourceRoot":"","sources":["../../../core/tech-debt/tech-debt-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAMV,QAAQ,EACR,YAAY,EACZ,SAAS,EAGT,gBAAgB,EAEhB,cAAc,EACd,oBAAoB,EACrB,MAAM,SAAS,CAAC;AAwejB,iBAAS,YAAY,CACnB,cAAc,EAAE,SAAS,YAAY,EAAE,GAAG,SAAS,EACnD,YAAY,EAAE,SAAS,QAAQ,EAAE,EACjC,KAAK,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,GAChC,SAAS,CAyBX;AAMD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC,GAAG,cAAc,CAgFxF;AAMD,OAAO,EAAE,YAAY,EAAE,CAAC;AAMxB;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAEhF"}