@devshub198211/devguard 2.0.2 → 2.0.3

package/dist/security.d.cts

@@ -1,114 +0,0 @@
-interface LockfileEntry {
-    file: string;
-    hash: string;
-    size: number;
-    mtime: number;
-}
-interface LockfileReport {
-    valid: boolean;
-    tampered: string[];
-    missing: string[];
-    added: string[];
-    entries: LockfileEntry[];
-    scannedAt: string;
-}
-interface LockfileSnapshot {
-    version: 2;
-    createdAt: string;
-    host: string;
-    entries: Record<string, {
-        hash: string;
-        size: number;
-    }>;
-}
-declare function hashFile(filePath: string): string;
-declare function verifyLockfile(root?: string, snapshotPath?: string): LockfileReport;
-declare function createSnapshot(root?: string, snapshotPath?: string): LockfileSnapshot;
-/** Parse package-lock.json and extract all transitive dependency versions */
-declare function extractTransitiveDeps(root?: string): Record<string, string>;
-
-interface ScanRule {
-    id: string;
-    label: string;
-    severity: "critical" | "high" | "medium" | "low";
-    test: (script: string, decoded?: string) => boolean;
-}
-interface HookFinding {
-    package: string;
-    version: string;
-    script: string;
-    ruleId: string;
-    pattern: string;
-    severity: "critical" | "high" | "medium" | "low";
-    raw: string;
-    deobfuscated?: string;
-}
-declare function scanPackage(pkgJsonPath: string): HookFinding[];
-declare function scanNodeModules(root?: string): HookFinding[];
-declare function scanProject(root?: string): HookFinding[];
-
-interface TokenConfig {
-    name: string;
-    value: string;
-    provider: "github" | "npm" | "generic";
-    maxAgeDays?: number;
-    createdAt?: number;
-}
-interface TokenStatus {
-    name: string;
-    provider: string;
-    status: "ok" | "expiring_soon" | "stale" | "invalid" | "unknown";
-    ageDays: number | null;
-    maxAgeDays: number;
-    message: string;
-}
-interface RotationResult {
-    success: boolean;
-    newToken?: string;
-    error?: string;
-}
-declare function inspectGitHubToken(token: string, name?: string): Promise<TokenStatus>;
-declare function inspectNpmToken(token: string, name?: string): Promise<TokenStatus>;
-/**
- * Create a new npm token using an existing token.
- * WARNING: This uses the existing token for authentication. The caller should
- * revoke the old token after successful rotation.
- */
-declare function createNpmToken(existingToken: string, opts?: {
-    readonly?: boolean;
-    cidr?: string[];
-}): Promise<RotationResult>;
-declare function checkTokenAge(configs: TokenConfig[]): TokenStatus[];
-declare function maskToken(token: string): string;
-declare function loadTokensFromEnv(names: string[], maxAgeDays?: number): TokenConfig[];
-
-interface PinViolation {
-    name: string;
-    specifier: string;
-    field: "dependencies" | "devDependencies" | "peerDependencies" | "optionalDependencies";
-    suggestion: string;
-}
-interface SRICheck {
-    name: string;
-    version: string;
-    lockfileHash: string;
-    registryHash: string | null;
-    match: boolean | null;
-}
-declare function enforceExactPins(pkgJsonPath: string): PinViolation[];
-declare function extractLockfileSRI(root?: string): Record<string, {
-    version: string;
-    integrity: string;
-}>;
-declare function fetchRegistrySRI(name: string, version: string): Promise<string | null>;
-/**
- * Deterministic alphabetical sampling instead of Math.random().
- * Samples the first N packages alphabetically — reproducible across runs.
- */
-declare function verifySRI(root?: string, sampleSize?: number): Promise<SRICheck[]>;
-declare function autoPin(pkgJsonPath: string, dryRun?: boolean): {
-    fixed: number;
-    content?: string;
-};
-
-export { type HookFinding, type LockfileEntry, type LockfileReport, type LockfileSnapshot, type PinViolation, type RotationResult, type SRICheck, type ScanRule, type TokenConfig, type TokenStatus, autoPin, checkTokenAge, createNpmToken, createSnapshot, enforceExactPins, extractLockfileSRI, extractTransitiveDeps, fetchRegistrySRI, hashFile, inspectGitHubToken, inspectNpmToken, loadTokensFromEnv, maskToken, scanNodeModules, scanPackage, scanProject, verifyLockfile, verifySRI };