@backendkit-labs/agent-core 0.14.0

package/dist/orchestration/audit/audit-ci-blocker.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @description AuditCiBlocker — Bloqueo de deploys en CI/CD.
+ *
+ * Verifica si hay hallazgos críticos/altos sin resolver y genera
+ * reportes de estado para pipelines de CI/CD.
+ *
+ * Útil para:
+ * - `audit check --block-on-critical` en CI
+ * - Generar reportes de estado para GitHub Actions / GitLab CI
+ * - Fallar el pipeline si hay issues abiertos
+ */
+import { GateRecord, CiReport } from './types';
+export declare class AuditCiBlocker {
+    private docsDir;
+    constructor(docsDir: string);
+    /**
+     * @description Verifica si hay hallazgos críticos/altos sin resolver.
+     * Busca tanto en memoria como en disco.
+     * Si retorna true, el pipeline CI/CD debe fallar.
+     *
+     * @param gates - Gates en memoria para verificar
+     */
+    hasCriticalOpenFindings(gates: GateRecord[]): Promise<boolean>;
+    /**
+     * @description Genera reporte de estado para CI/CD.
+     *
+     * @param gates - Gates en memoria para analizar
+     */
+    generateCiReport(gates: GateRecord[]): Promise<CiReport>;
+}
+//# sourceMappingURL=audit-ci-blocker.d.ts.map

package/dist/orchestration/audit/audit-ci-blocker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-ci-blocker.d.ts","sourceRoot":"","sources":["../../../src/orchestration/audit/audit-ci-blocker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,UAAU,EAAgB,QAAQ,EAAE,MAAM,SAAS,CAAC;AAI7D,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,MAAM;IAI3B;;;;;;OAMG;IACG,uBAAuB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IA2BpE;;;;OAIG;IACG,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;CA0B/D"}

package/dist/orchestration/audit/audit-ci-blocker.js

@@ -0,0 +1,120 @@
+"use strict";
+/**
+ * @description AuditCiBlocker — Bloqueo de deploys en CI/CD.
+ *
+ * Verifica si hay hallazgos críticos/altos sin resolver y genera
+ * reportes de estado para pipelines de CI/CD.
+ *
+ * Útil para:
+ * - `audit check --block-on-critical` en CI
+ * - Generar reportes de estado para GitHub Actions / GitLab CI
+ * - Fallar el pipeline si hay issues abiertos
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditCiBlocker = void 0;
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs/promises"));
+// ── AuditCiBlocker ───────────────────────────────────────────────────────────
+class AuditCiBlocker {
+    docsDir;
+    constructor(docsDir) {
+        this.docsDir = docsDir;
+    }
+    /**
+     * @description Verifica si hay hallazgos críticos/altos sin resolver.
+     * Busca tanto en memoria como en disco.
+     * Si retorna true, el pipeline CI/CD debe fallar.
+     *
+     * @param gates - Gates en memoria para verificar
+     */
+    async hasCriticalOpenFindings(gates) {
+        try {
+            const files = await fs.readdir(this.docsDir);
+            // Buscar pending issues activos
+            if (files.some(f => f.startsWith('pending-issues') && f.endsWith('.md')))
+                return true;
+            // Buscar en informes finales y gates persistidos
+            for (const file of files) {
+                if (!file.endsWith('.md') || file.startsWith('auto-gates'))
+                    continue;
+                const content = await fs.readFile(path.join(this.docsDir, file), 'utf-8');
+                const criticalMatches = (content.match(/\*\*(Crítica|Alta)\*\*/g) ?? []).length;
+                const resolvedMatches = (content.match(/Resuelto en commit/g) ?? []).length;
+                if (criticalMatches > resolvedMatches)
+                    return true;
+            }
+            // Buscar en memoria
+            if (gates.some(g => g.hallazgos.some(h => (h.severidad === 'critical' || h.severidad === 'high') && !h.resolvedByCommit)))
+                return true;
+            return false;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * @description Genera reporte de estado para CI/CD.
+     *
+     * @param gates - Gates en memoria para analizar
+     */
+    async generateCiReport(gates) {
+        const criticalOpen = [];
+        const highOpen = [];
+        for (const gate of gates) {
+            for (const h of gate.hallazgos) {
+                if (!h.resolvedByCommit) {
+                    if (h.severidad === 'critical')
+                        criticalOpen.push(h);
+                    else if (h.severidad === 'high')
+                        highOpen.push(h);
+                }
+            }
+        }
+        const ok = criticalOpen.length === 0 && highOpen.length === 0;
+        const message = ok
+            ? '✅ No hay hallazgos críticos o altos abiertos. Deploy permitido.'
+            : `❌ ${criticalOpen.length} crítico(s) y ${highOpen.length} alto(s) sin resolver. Deploy bloqueado.`;
+        return {
+            ok,
+            criticalCount: criticalOpen.length,
+            highCount: highOpen.length,
+            findings: [...criticalOpen, ...highOpen],
+            message,
+        };
+    }
+}
+exports.AuditCiBlocker = AuditCiBlocker;
+//# sourceMappingURL=audit-ci-blocker.js.map

package/dist/orchestration/audit/audit-ci-blocker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-ci-blocker.js","sourceRoot":"","sources":["../../../src/orchestration/audit/audit-ci-blocker.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2CAA6B;AAC7B,gDAAkC;AAGlC,gFAAgF;AAEhF,MAAa,cAAc;IACjB,OAAO,CAAS;IAExB,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,uBAAuB,CAAC,KAAmB;QAC/C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE7C,gCAAgC;YAChC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEtF,iDAAiD;YACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;oBAAE,SAAS;gBACrE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC1E,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBAChF,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC5E,IAAI,eAAe,GAAG,eAAe;oBAAE,OAAO,IAAI,CAAC;YACrD,CAAC;YAED,oBAAoB;YACpB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACvC,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAC9E,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEhB,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAmB;QACxC,MAAM,YAAY,GAAmB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAmB,EAAE,CAAC;QAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;oBACxB,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU;wBAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;yBAChD,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM;wBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,EAAE;YAChB,CAAC,CAAC,iEAAiE;YACnE,CAAC,CAAC,KAAK,YAAY,CAAC,MAAM,iBAAiB,QAAQ,CAAC,MAAM,0CAA0C,CAAC;QAEvG,OAAO;YACL,EAAE;YACF,aAAa,EAAE,YAAY,CAAC,MAAM;YAClC,SAAS,EAAE,QAAQ,CAAC,MAAM;YAC1B,QAAQ,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,QAAQ,CAAC;YACxC,OAAO;SACR,CAAC;IACJ,CAAC;CACF;AAxED,wCAwEC"}

package/dist/orchestration/audit/audit-finding-tracer.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @description AuditFindingTracer — Trazabilidad hallazgo → commit.
+ *
+ * Permite marcar hallazgos de auditoría como resueltos, asociándolos
+ * con un commit SHA específico. Busca tanto en memoria como en disco
+ * para actualizar los registros persistidos.
+ */
+import { GateRecord } from './types';
+export declare class AuditFindingTracer {
+    private docsDir;
+    constructor(docsDir: string);
+    /**
+     * @description Marca un hallazgo como resuelto en memoria y en disco.
+     *
+     * @param gates - Lista de gates en memoria donde buscar
+     * @param findingId - ID del hallazgo a marcar
+     * @param commitHash - SHA del commit que lo resuelve
+     * @param commitMessage - Mensaje del commit (opcional)
+     * @returns true si se encontró y marcó el hallazgo
+     */
+    markResolved(gates: GateRecord[], findingId: string, commitHash: string, commitMessage?: string): Promise<boolean>;
+    /**
+     * @description Marca hallazgos como resueltos buscando por archivos modificados
+     * en el commit. Útil para hook post-commit.
+     *
+     * @param gates - Lista de gates en memoria
+     * @param commitHash - SHA del commit
+     * @param modifiedFiles - Archivos modificados en el commit
+     * @returns Cantidad de hallazgos resueltos
+     */
+    markResolvedByFiles(gates: GateRecord[], commitHash: string, modifiedFiles: string[]): Promise<number>;
+}
+//# sourceMappingURL=audit-finding-tracer.d.ts.map

package/dist/orchestration/audit/audit-finding-tracer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-finding-tracer.d.ts","sourceRoot":"","sources":["../../../src/orchestration/audit/audit-finding-tracer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,UAAU,EAAgB,MAAM,SAAS,CAAC;AAanD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,MAAM;IAI3B;;;;;;;;OAQG;IACG,YAAY,CAChB,KAAK,EAAE,UAAU,EAAE,EACnB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC;IAqCnB;;;;;;;;OAQG;IACG,mBAAmB,CACvB,KAAK,EAAE,UAAU,EAAE,EACnB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EAAE,GACtB,OAAO,CAAC,MAAM,CAAC;CAanB"}

package/dist/orchestration/audit/audit-finding-tracer.js

@@ -0,0 +1,126 @@
+"use strict";
+/**
+ * @description AuditFindingTracer — Trazabilidad hallazgo → commit.
+ *
+ * Permite marcar hallazgos de auditoría como resueltos, asociándolos
+ * con un commit SHA específico. Busca tanto en memoria como en disco
+ * para actualizar los registros persistidos.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditFindingTracer = void 0;
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs/promises"));
+// ── Helpers ──────────────────────────────────────────────────────────────────
+function getFormattedDate() {
+    return new Date()
+        .toISOString()
+        .replace('T', ' ')
+        .replace(/\.\d{3}Z/, ' UTC');
+}
+// ── AuditFindingTracer ───────────────────────────────────────────────────────
+class AuditFindingTracer {
+    docsDir;
+    constructor(docsDir) {
+        this.docsDir = docsDir;
+    }
+    /**
+     * @description Marca un hallazgo como resuelto en memoria y en disco.
+     *
+     * @param gates - Lista de gates en memoria donde buscar
+     * @param findingId - ID del hallazgo a marcar
+     * @param commitHash - SHA del commit que lo resuelve
+     * @param commitMessage - Mensaje del commit (opcional)
+     * @returns true si se encontró y marcó el hallazgo
+     */
+    async markResolved(gates, findingId, commitHash, commitMessage) {
+        let found = false;
+        const resolvedAt = getFormattedDate();
+        // En memoria
+        for (const gate of gates) {
+            for (const hallazgo of gate.hallazgos) {
+                if (hallazgo.id === findingId) {
+                    hallazgo.resolvedByCommit = commitHash;
+                    hallazgo.resolvedAt = resolvedAt;
+                    found = true;
+                }
+            }
+        }
+        // En disco
+        try {
+            const files = await fs.readdir(this.docsDir);
+            for (const file of files) {
+                if (!file.endsWith('.md') || file.startsWith('auto-gates') || file.startsWith('pending-issues'))
+                    continue;
+                const filePath = path.join(this.docsDir, file);
+                let content = await fs.readFile(filePath, 'utf-8');
+                const pattern = new RegExp(`\\|\\s*${findingId}\\s*\\|`);
+                if (pattern.test(content)) {
+                    const marker = `*(Resuelto en commit \`${commitHash}\`${commitMessage ? `: ${commitMessage}` : ''} — ${resolvedAt})*`;
+                    content = content.replace(pattern, `$& ${marker}`);
+                    await fs.writeFile(filePath, content, 'utf-8');
+                    found = true;
+                }
+            }
+        }
+        catch {
+            // Si no existe directorio, no hay archivos que actualizar
+        }
+        return found;
+    }
+    /**
+     * @description Marca hallazgos como resueltos buscando por archivos modificados
+     * en el commit. Útil para hook post-commit.
+     *
+     * @param gates - Lista de gates en memoria
+     * @param commitHash - SHA del commit
+     * @param modifiedFiles - Archivos modificados en el commit
+     * @returns Cantidad de hallazgos resueltos
+     */
+    async markResolvedByFiles(gates, commitHash, modifiedFiles) {
+        let resolved = 0;
+        for (const gate of gates) {
+            for (const hallazgo of gate.hallazgos) {
+                if (!hallazgo.resolvedByCommit && modifiedFiles.some(f => hallazgo.evidencia.includes(f) || hallazgo.hallazgo.includes(f))) {
+                    if (await this.markResolved(gates, hallazgo.id, commitHash))
+                        resolved++;
+                }
+            }
+        }
+        return resolved;
+    }
+}
+exports.AuditFindingTracer = AuditFindingTracer;
+//# sourceMappingURL=audit-finding-tracer.js.map

package/dist/orchestration/audit/audit-finding-tracer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-finding-tracer.js","sourceRoot":"","sources":["../../../src/orchestration/audit/audit-finding-tracer.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2CAA6B;AAC7B,gDAAkC;AAGlC,gFAAgF;AAEhF,SAAS,gBAAgB;IACvB,OAAO,IAAI,IAAI,EAAE;SACd,WAAW,EAAE;SACb,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC;SACjB,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,gFAAgF;AAEhF,MAAa,kBAAkB;IACrB,OAAO,CAAS;IAExB,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAChB,KAAmB,EACnB,SAAiB,EACjB,UAAkB,EAClB,aAAsB;QAEtB,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;QAEtC,aAAa;QACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtC,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;oBAC9B,QAAQ,CAAC,gBAAgB,GAAG,UAAU,CAAC;oBACvC,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;oBACjC,KAAK,GAAG,IAAI,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;QAED,WAAW;QACX,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;oBAAE,SAAS;gBAC1G,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC/C,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,UAAU,SAAS,SAAS,CAAC,CAAC;gBACzD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,0BAA0B,UAAU,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,UAAU,IAAI,CAAC;oBACtH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;oBACnD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC/C,KAAK,GAAG,IAAI,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,mBAAmB,CACvB,KAAmB,EACnB,UAAkB,EAClB,aAAuB;QAEvB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACvD,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAChE,EAAE,CAAC;oBACF,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;wBAAE,QAAQ,EAAE,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AApFD,gDAoFC"}

package/dist/orchestration/audit/audit-lessons-learned.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @description AuditLessonsLearned — Analiza y genera lecciones aprendidas
+ * a partir de los gates de auditoría ejecutados.
+ *
+ * Responsabilidades:
+ * - Detectar patrones de severidad (críticos/altos)
+ * - Identificar dimensiones con más hallazgos
+ * - Encontrar keywords recurrentes en hallazgos
+ * - Calcular tasa de aprobación QA
+ * - Generar memo Markdown de lecciones aprendidas
+ */
+import { GateRecord } from './types';
+export declare class AuditLessonsLearned {
+    private docsDir;
+    constructor(docsDir: string);
+    /**
+     * @description Analiza los gates y extrae lecciones aprendidas.
+     * Retorna un array de strings con las lecciones detectadas.
+     */
+    analyze(gates: GateRecord[]): string[];
+    /**
+     * @description Genera un memo Markdown de lecciones aprendidas y lo persiste.
+     * Retorna la ruta del archivo, o null si no hay lecciones.
+     */
+    generateMemo(gates: GateRecord[]): Promise<string | null>;
+}
+//# sourceMappingURL=audit-lessons-learned.d.ts.map

package/dist/orchestration/audit/audit-lessons-learned.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-lessons-learned.d.ts","sourceRoot":"","sources":["../../../src/orchestration/audit/audit-lessons-learned.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,UAAU,EAAgB,MAAM,SAAS,CAAC;AAanD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,MAAM;IAI3B;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE;IAoDtC;;;OAGG;IACG,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAuChE"}

package/dist/orchestration/audit/audit-lessons-learned.js

@@ -0,0 +1,155 @@
+"use strict";
+/**
+ * @description AuditLessonsLearned — Analiza y genera lecciones aprendidas
+ * a partir de los gates de auditoría ejecutados.
+ *
+ * Responsabilidades:
+ * - Detectar patrones de severidad (críticos/altos)
+ * - Identificar dimensiones con más hallazgos
+ * - Encontrar keywords recurrentes en hallazgos
+ * - Calcular tasa de aprobación QA
+ * - Generar memo Markdown de lecciones aprendidas
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditLessonsLearned = void 0;
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs/promises"));
+// ── Helpers ──────────────────────────────────────────────────────────────────
+function getFormattedDate() {
+    return new Date()
+        .toISOString()
+        .replace('T', ' ')
+        .replace(/\.\d{3}Z/, ' UTC');
+}
+// ── AuditLessonsLearned ──────────────────────────────────────────────────────
+class AuditLessonsLearned {
+    docsDir;
+    constructor(docsDir) {
+        this.docsDir = docsDir;
+    }
+    /**
+     * @description Analiza los gates y extrae lecciones aprendidas.
+     * Retorna un array de strings con las lecciones detectadas.
+     */
+    analyze(gates) {
+        const lessons = [];
+        const qaGates = gates.filter(g => g.hallazgos.length > 0 && (g.gate === 'qa' || g.gate === 'security' || g.gate === 'architecture'));
+        if (qaGates.length === 0)
+            return [];
+        // Patrones de severidad
+        const criticalCount = qaGates.filter(g => g.hallazgos.some(h => h.severidad === 'critical' || h.severidad === 'high')).length;
+        if (criticalCount > 0) {
+            lessons.push(`⚠️ Se detectaron ${criticalCount} gate(s) con hallazgos críticos/altos. Revisar antes de proceder con nuevos cambios.`);
+        }
+        // Patrones por dimensión
+        const dimensiones = new Map();
+        for (const gate of qaGates) {
+            for (const h of gate.hallazgos) {
+                dimensiones.set(h.dimension, (dimensiones.get(h.dimension) || 0) + 1);
+            }
+        }
+        const topDimension = [...dimensiones.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
+        if (topDimension.length > 0) {
+            lessons.push(`📊 Dimensiones con más hallazgos: ${topDimension.map(([d, c]) => `${d} (${c})`).join(', ')}`);
+        }
+        // Keywords recurrentes
+        const keywordCount = new Map();
+        const keywords = ['test', 'error', 'edge case', 'caso borde', 'seguridad', 'security', 'perf',
+            'documentación', 'validación', 'validation', 'cobertura', 'coverage', 'tipado'];
+        for (const gate of qaGates) {
+            for (const h of gate.hallazgos) {
+                const lower = `${h.hallazgo} ${h.dimension} ${h.evidencia}`.toLowerCase();
+                for (const kw of keywords) {
+                    if (lower.includes(kw))
+                        keywordCount.set(kw, (keywordCount.get(kw) || 0) + 1);
+                }
+            }
+        }
+        const topKeywords = [...keywordCount.entries()]
+            .filter(([_, c]) => c >= 2).sort((a, b) => b[1] - a[1]).slice(0, 5);
+        if (topKeywords.length > 0) {
+            lessons.push(`🔄 Patrones recurrentes: ${topKeywords.map(([kw, c]) => `"${kw}" (${c})`).join(', ')}`);
+        }
+        // Tasa de aprobación
+        const goCount = qaGates.filter(g => g.veredicto === 'GO').length;
+        lessons.push(`📈 Tasa de aprobación QA: ${Math.round((goCount / qaGates.length) * 100)}% (${goCount}/${qaGates.length})`);
+        return lessons;
+    }
+    /**
+     * @description Genera un memo Markdown de lecciones aprendidas y lo persiste.
+     * Retorna la ruta del archivo, o null si no hay lecciones.
+     */
+    async generateMemo(gates) {
+        const lessons = this.analyze(gates);
+        if (lessons.length === 0)
+            return null;
+        const content = [
+            '---',
+            'tags: [auditoria, lecciones-aprendidas, memoria]',
+            `fecha: ${getFormattedDate()}`,
+            `total_gates: ${gates.length}`,
+            `gates_con_hallazgos: ${gates.filter(g => g.hallazgos.length > 0).length}`,
+            '---',
+            '',
+            `# 🧠 Lecciones Aprendidas — Auditorías`,
+            '',
+            `> Generado automáticamente por DeepSeek Code — Audit Reporter`,
+            `> Fecha: ${getFormattedDate()}`,
+            '',
+            '---',
+            '',
+            ...lessons.map(l => `- ${l}`),
+            '',
+            '---',
+            '',
+            '## 📋 Detalle de Gates Revisados',
+            '',
+            '| Gate | Auditor | Veredicto | Hallazgos |',
+            '|------|---------|-----------|-----------|',
+            ...gates.filter(g => g.hallazgos.length > 0).map(g => `| ${g.gate} | ${g.agente} | ${g.veredicto} | ${g.hallazgos.length} |`),
+            '',
+            '---',
+            '',
+            '*Este memo se actualiza cada vez que se genera un informe final.*',
+        ].join('\n');
+        await fs.mkdir(this.docsDir, { recursive: true });
+        const filePath = path.join(this.docsDir, 'lecciones-aprendidas.md');
+        await fs.writeFile(filePath, content, 'utf-8');
+        return filePath;
+    }
+}
+exports.AuditLessonsLearned = AuditLessonsLearned;
+//# sourceMappingURL=audit-lessons-learned.js.map

package/dist/orchestration/audit/audit-lessons-learned.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-lessons-learned.js","sourceRoot":"","sources":["../../../src/orchestration/audit/audit-lessons-learned.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2CAA6B;AAC7B,gDAAkC;AAGlC,gFAAgF;AAEhF,SAAS,gBAAgB;IACvB,OAAO,IAAI,IAAI,EAAE;SACd,WAAW,EAAE;SACb,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC;SACjB,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,gFAAgF;AAEhF,MAAa,mBAAmB;IACtB,OAAO,CAAS;IAExB,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAmB;QACzB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAClG,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,wBAAwB;QACxB,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACvC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAC5E,CAAC,MAAM,CAAC;QACT,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,oBAAoB,aAAa,sFAAsF,CAAC,CAAC;QACxI,CAAC;QAED,yBAAyB;QACzB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC/B,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QACD,MAAM,YAAY,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,qCAAqC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC;QAED,uBAAuB;QACvB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM;YAC3F,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC1E,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC1B,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAAE,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC;aAC5C,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,4BAA4B,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;QAED,qBAAqB;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAE1H,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,KAAmB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,OAAO,GAAG;YACd,KAAK;YACL,kDAAkD;YAClD,UAAU,gBAAgB,EAAE,EAAE;YAC9B,gBAAgB,KAAK,CAAC,MAAM,EAAE;YAC9B,wBAAwB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE;YAC1E,KAAK;YACL,EAAE;YACF,wCAAwC;YACxC,EAAE;YACF,+DAA+D;YAC/D,YAAY,gBAAgB,EAAE,EAAE;YAChC,EAAE;YACF,KAAK;YACL,EAAE;YACF,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,EAAE;YACF,KAAK;YACL,EAAE;YACF,kCAAkC;YAClC,EAAE;YACF,4CAA4C;YAC5C,4CAA4C;YAC5C,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC;YAC7H,EAAE;YACF,KAAK;YACL,EAAE;YACF,mEAAmE;SACpE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QACpE,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AA1GD,kDA0GC"}

package/dist/orchestration/audit/audit-pending-issues.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @description AuditPendingIssues — Persiste issues pendientes (críticos/altos)
+ * cuando un sprint finaliza con veredicto NO-GO o NO-GO condicional.
+ *
+ * Estos issues deben resolverse antes de proceder con el deploy.
+ */
+import { AuditFinding, SprintInfo, GateVeredict } from './types';
+export declare class AuditPendingIssues {
+    private docsDir;
+    constructor(docsDir: string);
+    /**
+     * @description Filtra los hallazgos críticos o altos de una lista de gates.
+     */
+    extractCritical(issues: AuditFinding[]): AuditFinding[];
+    /**
+     * @description Persiste un archivo Markdown con los issues pendientes.
+     * Retorna la ruta del archivo generado.
+     */
+    persist(issues: AuditFinding[], sprint: SprintInfo, veredicto: GateVeredict): Promise<string>;
+}
+//# sourceMappingURL=audit-pending-issues.d.ts.map

package/dist/orchestration/audit/audit-pending-issues.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-pending-issues.d.ts","sourceRoot":"","sources":["../../../src/orchestration/audit/audit-pending-issues.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAcjE,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,MAAM;IAI3B;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE;IAIvD;;;OAGG;IACG,OAAO,CACX,MAAM,EAAE,YAAY,EAAE,EACtB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,MAAM,CAAC;CAyCnB"}