@devtrack-solution/codesdd 1.2.3 → 1.2.4

package/dist/core/sdd/plugin-policy.js

@@ -191,7 +191,12 @@ function isProtectedStatePath(value) {
 }
 function isSecretPath(value) {
     const lowerValue = value.toLowerCase();
-    return lowerValue.split(/[\\/]+/).some((segment) => SECRET_PATH_SEGMENTS.some((token) => segment.includes(token)));
+    return lowerValue.split(/[\\/]+/).some((segment) => {
+        if (segment === '.env.example') {
+            return false;
+        }
+        return SECRET_PATH_SEGMENTS.some((token) => segment.includes(token));
+    });
 }
 function deny(code, message, issuePath) {
     return {

package/dist/core/sdd/plugin-registry.d.ts

@@ -27,6 +27,74 @@ export declare const pluginRegistryEntrySchema: z.ZodObject<{
             package_manager: z.ZodOptional<z.ZodString>;
             min_versions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
         }, z.core.$strip>;
+        package_governance: z.ZodOptional<z.ZodObject<{
+            package_name: z.ZodString;
+            sdk_package: z.ZodDefault<z.ZodString>;
+            sdk_version: z.ZodDefault<z.ZodString>;
+            package_kind: z.ZodEnum<{
+                frontend: "frontend";
+                backend: "backend";
+                "full-stack": "full-stack";
+                generator: "generator";
+                validator: "validator";
+                evidence: "evidence";
+                "agent-adapter": "agent-adapter";
+                "policy-pack": "policy-pack";
+            }>;
+            versioning: z.ZodDefault<z.ZodLiteral<"semver">>;
+            registry: z.ZodDefault<z.ZodEnum<{
+                custom: "custom";
+                workspace: "workspace";
+                npm: "npm";
+                "private-npm": "private-npm";
+                "artifact-registry": "artifact-registry";
+            }>>;
+            keywords: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            internal_package: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        language_runtime: z.ZodOptional<z.ZodObject<{
+            language: z.ZodEnum<{
+                shell: "shell";
+                other: "other";
+                typescript: "typescript";
+                javascript: "javascript";
+                python: "python";
+                java: "java";
+                go: "go";
+                rust: "rust";
+                csharp: "csharp";
+                php: "php";
+                ruby: "ruby";
+            }>;
+            runtime: z.ZodString;
+            bridge: z.ZodEnum<{
+                "node-library": "node-library";
+                "stdio-json": "stdio-json";
+                "process-cli": "process-cli";
+                "http-local": "http-local";
+                container: "container";
+                wasm: "wasm";
+            }>;
+            input_transport: z.ZodEnum<{
+                "sdk-call": "sdk-call";
+                "stdin-json": "stdin-json";
+                "stdout-json": "stdout-json";
+                "file-envelope": "file-envelope";
+                "http-json": "http-json";
+            }>;
+            output_transport: z.ZodEnum<{
+                "sdk-call": "sdk-call";
+                "stdin-json": "stdin-json";
+                "stdout-json": "stdout-json";
+                "file-envelope": "file-envelope";
+                "http-json": "http-json";
+            }>;
+            command: z.ZodOptional<z.ZodString>;
+            args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            package_manager: z.ZodOptional<z.ZodString>;
+            min_versions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+            env_allowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
         capabilities: z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             description: z.ZodString;
@@ -58,8 +126,8 @@ export declare const pluginRegistryEntrySchema: z.ZodObject<{
             env_allowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
             network: z.ZodDefault<z.ZodEnum<{
                 disabled: "disabled";
-                restricted: "restricted";
                 enabled: "enabled";
+                restricted: "restricted";
             }>>;
             process_spawn: z.ZodDefault<z.ZodEnum<{
                 forbidden: "forbidden";
@@ -160,6 +228,74 @@ export declare const pluginRegistryStateSchema: z.ZodObject<{
                 package_manager: z.ZodOptional<z.ZodString>;
                 min_versions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
             }, z.core.$strip>;
+            package_governance: z.ZodOptional<z.ZodObject<{
+                package_name: z.ZodString;
+                sdk_package: z.ZodDefault<z.ZodString>;
+                sdk_version: z.ZodDefault<z.ZodString>;
+                package_kind: z.ZodEnum<{
+                    frontend: "frontend";
+                    backend: "backend";
+                    "full-stack": "full-stack";
+                    generator: "generator";
+                    validator: "validator";
+                    evidence: "evidence";
+                    "agent-adapter": "agent-adapter";
+                    "policy-pack": "policy-pack";
+                }>;
+                versioning: z.ZodDefault<z.ZodLiteral<"semver">>;
+                registry: z.ZodDefault<z.ZodEnum<{
+                    custom: "custom";
+                    workspace: "workspace";
+                    npm: "npm";
+                    "private-npm": "private-npm";
+                    "artifact-registry": "artifact-registry";
+                }>>;
+                keywords: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                internal_package: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            language_runtime: z.ZodOptional<z.ZodObject<{
+                language: z.ZodEnum<{
+                    shell: "shell";
+                    other: "other";
+                    typescript: "typescript";
+                    javascript: "javascript";
+                    python: "python";
+                    java: "java";
+                    go: "go";
+                    rust: "rust";
+                    csharp: "csharp";
+                    php: "php";
+                    ruby: "ruby";
+                }>;
+                runtime: z.ZodString;
+                bridge: z.ZodEnum<{
+                    "node-library": "node-library";
+                    "stdio-json": "stdio-json";
+                    "process-cli": "process-cli";
+                    "http-local": "http-local";
+                    container: "container";
+                    wasm: "wasm";
+                }>;
+                input_transport: z.ZodEnum<{
+                    "sdk-call": "sdk-call";
+                    "stdin-json": "stdin-json";
+                    "stdout-json": "stdout-json";
+                    "file-envelope": "file-envelope";
+                    "http-json": "http-json";
+                }>;
+                output_transport: z.ZodEnum<{
+                    "sdk-call": "sdk-call";
+                    "stdin-json": "stdin-json";
+                    "stdout-json": "stdout-json";
+                    "file-envelope": "file-envelope";
+                    "http-json": "http-json";
+                }>;
+                command: z.ZodOptional<z.ZodString>;
+                args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                package_manager: z.ZodOptional<z.ZodString>;
+                min_versions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+                env_allowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>;
             capabilities: z.ZodArray<z.ZodObject<{
                 name: z.ZodString;
                 description: z.ZodString;
@@ -191,8 +327,8 @@ export declare const pluginRegistryStateSchema: z.ZodObject<{
                 env_allowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 network: z.ZodDefault<z.ZodEnum<{
                     disabled: "disabled";
-                    restricted: "restricted";
                     enabled: "enabled";
+                    restricted: "restricted";
                 }>>;
                 process_spawn: z.ZodDefault<z.ZodEnum<{
                     forbidden: "forbidden";

package/dist/core/sdd/plugin-sdk-contract.d.ts

@@ -0,0 +1,363 @@
+import { z } from 'zod';
+export declare const CODESDD_PLUGIN_SDK_PACKAGE_NAME = "@devtrack-solution/codesdd-plugin-sdk";
+export declare const CODESDD_PLUGIN_PACKAGE_PREFIX = "@devtrack-solution/codesdd-plugin-";
+export declare const pluginRuntimeLanguageSchema: z.ZodEnum<{
+    shell: "shell";
+    other: "other";
+    typescript: "typescript";
+    javascript: "javascript";
+    python: "python";
+    java: "java";
+    go: "go";
+    rust: "rust";
+    csharp: "csharp";
+    php: "php";
+    ruby: "ruby";
+}>;
+export declare const pluginRuntimeBridgeSchema: z.ZodEnum<{
+    "node-library": "node-library";
+    "stdio-json": "stdio-json";
+    "process-cli": "process-cli";
+    "http-local": "http-local";
+    container: "container";
+    wasm: "wasm";
+}>;
+export declare const pluginRuntimeTransportSchema: z.ZodEnum<{
+    "sdk-call": "sdk-call";
+    "stdin-json": "stdin-json";
+    "stdout-json": "stdout-json";
+    "file-envelope": "file-envelope";
+    "http-json": "http-json";
+}>;
+export declare const pluginPackageKindSchema: z.ZodEnum<{
+    frontend: "frontend";
+    backend: "backend";
+    "full-stack": "full-stack";
+    generator: "generator";
+    validator: "validator";
+    evidence: "evidence";
+    "agent-adapter": "agent-adapter";
+    "policy-pack": "policy-pack";
+}>;
+export declare const pluginPackageGovernanceSchema: z.ZodObject<{
+    package_name: z.ZodString;
+    sdk_package: z.ZodDefault<z.ZodString>;
+    sdk_version: z.ZodDefault<z.ZodString>;
+    package_kind: z.ZodEnum<{
+        frontend: "frontend";
+        backend: "backend";
+        "full-stack": "full-stack";
+        generator: "generator";
+        validator: "validator";
+        evidence: "evidence";
+        "agent-adapter": "agent-adapter";
+        "policy-pack": "policy-pack";
+    }>;
+    versioning: z.ZodDefault<z.ZodLiteral<"semver">>;
+    registry: z.ZodDefault<z.ZodEnum<{
+        custom: "custom";
+        workspace: "workspace";
+        npm: "npm";
+        "private-npm": "private-npm";
+        "artifact-registry": "artifact-registry";
+    }>>;
+    keywords: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    internal_package: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const pluginLanguageRuntimeSchema: z.ZodObject<{
+    language: z.ZodEnum<{
+        shell: "shell";
+        other: "other";
+        typescript: "typescript";
+        javascript: "javascript";
+        python: "python";
+        java: "java";
+        go: "go";
+        rust: "rust";
+        csharp: "csharp";
+        php: "php";
+        ruby: "ruby";
+    }>;
+    runtime: z.ZodString;
+    bridge: z.ZodEnum<{
+        "node-library": "node-library";
+        "stdio-json": "stdio-json";
+        "process-cli": "process-cli";
+        "http-local": "http-local";
+        container: "container";
+        wasm: "wasm";
+    }>;
+    input_transport: z.ZodEnum<{
+        "sdk-call": "sdk-call";
+        "stdin-json": "stdin-json";
+        "stdout-json": "stdout-json";
+        "file-envelope": "file-envelope";
+        "http-json": "http-json";
+    }>;
+    output_transport: z.ZodEnum<{
+        "sdk-call": "sdk-call";
+        "stdin-json": "stdin-json";
+        "stdout-json": "stdout-json";
+        "file-envelope": "file-envelope";
+        "http-json": "http-json";
+    }>;
+    command: z.ZodOptional<z.ZodString>;
+    args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    package_manager: z.ZodOptional<z.ZodString>;
+    min_versions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    env_allowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const pluginArtifactLayerSchema: z.ZodEnum<{
+    sdd: "sdd";
+    config: "config";
+    domain: "domain";
+    docs: "docs";
+    root: "root";
+    application: "application";
+    infrastructure: "infrastructure";
+    presentation: "presentation";
+    shared: "shared";
+    tests: "tests";
+    assets: "assets";
+}>;
+export declare const pluginArtifactKindSchema: z.ZodEnum<{
+    documentation: "documentation";
+    schema: "schema";
+    configuration: "configuration";
+    source: "source";
+    migration: "migration";
+    evidence: "evidence";
+    test: "test";
+    asset: "asset";
+    "package-metadata": "package-metadata";
+}>;
+export declare const pluginArtifactRoleSchema: z.ZodEnum<{
+    documentation: "documentation";
+    type: "type";
+    validator: "validator";
+    evidence: "evidence";
+    test: "test";
+    interface: "interface";
+    implementation: "implementation";
+    abstraction: "abstraction";
+    "business-object": "business-object";
+    "value-object": "value-object";
+    entity: "entity";
+    "repository-port": "repository-port";
+    "use-case": "use-case";
+    service: "service";
+    handler: "handler";
+    adapter: "adapter";
+    mapper: "mapper";
+    module: "module";
+    controller: "controller";
+    dto: "dto";
+    policy: "policy";
+    manifest: "manifest";
+    fixture: "fixture";
+}>;
+export declare const pluginArtifactOperationSchema: z.ZodEnum<{
+    created: "created";
+    planned: "planned";
+    modified: "modified";
+    deleted: "deleted";
+    unchanged: "unchanged";
+    validated: "validated";
+}>;
+export declare const pluginArtifactMapEntrySchema: z.ZodObject<{
+    path: z.ZodString;
+    operation: z.ZodEnum<{
+        created: "created";
+        planned: "planned";
+        modified: "modified";
+        deleted: "deleted";
+        unchanged: "unchanged";
+        validated: "validated";
+    }>;
+    artifact_kind: z.ZodEnum<{
+        documentation: "documentation";
+        schema: "schema";
+        configuration: "configuration";
+        source: "source";
+        migration: "migration";
+        evidence: "evidence";
+        test: "test";
+        asset: "asset";
+        "package-metadata": "package-metadata";
+    }>;
+    role: z.ZodEnum<{
+        documentation: "documentation";
+        type: "type";
+        validator: "validator";
+        evidence: "evidence";
+        test: "test";
+        interface: "interface";
+        implementation: "implementation";
+        abstraction: "abstraction";
+        "business-object": "business-object";
+        "value-object": "value-object";
+        entity: "entity";
+        "repository-port": "repository-port";
+        "use-case": "use-case";
+        service: "service";
+        handler: "handler";
+        adapter: "adapter";
+        mapper: "mapper";
+        module: "module";
+        controller: "controller";
+        dto: "dto";
+        policy: "policy";
+        manifest: "manifest";
+        fixture: "fixture";
+    }>;
+    layer: z.ZodEnum<{
+        sdd: "sdd";
+        config: "config";
+        domain: "domain";
+        docs: "docs";
+        root: "root";
+        application: "application";
+        infrastructure: "infrastructure";
+        presentation: "presentation";
+        shared: "shared";
+        tests: "tests";
+        assets: "assets";
+    }>;
+    content_type: z.ZodString;
+    reason: z.ZodString;
+    language: z.ZodOptional<z.ZodEnum<{
+        shell: "shell";
+        other: "other";
+        typescript: "typescript";
+        javascript: "javascript";
+        python: "python";
+        java: "java";
+        go: "go";
+        rust: "rust";
+        csharp: "csharp";
+        php: "php";
+        ruby: "ruby";
+    }>>;
+    context: z.ZodOptional<z.ZodString>;
+    implementation: z.ZodDefault<z.ZodEnum<{
+        contract: "contract";
+        manual: "manual";
+        concrete: "concrete";
+        abstract: "abstract";
+        generated: "generated";
+    }>>;
+    decision_refs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    source_refs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    tags: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const pluginArtifactMapSchema: z.ZodObject<{
+    schema_version: z.ZodLiteral<1>;
+    sdk_package: z.ZodDefault<z.ZodLiteral<"@devtrack-solution/codesdd-plugin-sdk">>;
+    feature_ref: z.ZodOptional<z.ZodString>;
+    operation_id: z.ZodOptional<z.ZodString>;
+    plugin_ref: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodString;
+    }, z.core.$strip>>;
+    generated_at: z.ZodString;
+    artifacts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        operation: z.ZodEnum<{
+            created: "created";
+            planned: "planned";
+            modified: "modified";
+            deleted: "deleted";
+            unchanged: "unchanged";
+            validated: "validated";
+        }>;
+        artifact_kind: z.ZodEnum<{
+            documentation: "documentation";
+            schema: "schema";
+            configuration: "configuration";
+            source: "source";
+            migration: "migration";
+            evidence: "evidence";
+            test: "test";
+            asset: "asset";
+            "package-metadata": "package-metadata";
+        }>;
+        role: z.ZodEnum<{
+            documentation: "documentation";
+            type: "type";
+            validator: "validator";
+            evidence: "evidence";
+            test: "test";
+            interface: "interface";
+            implementation: "implementation";
+            abstraction: "abstraction";
+            "business-object": "business-object";
+            "value-object": "value-object";
+            entity: "entity";
+            "repository-port": "repository-port";
+            "use-case": "use-case";
+            service: "service";
+            handler: "handler";
+            adapter: "adapter";
+            mapper: "mapper";
+            module: "module";
+            controller: "controller";
+            dto: "dto";
+            policy: "policy";
+            manifest: "manifest";
+            fixture: "fixture";
+        }>;
+        layer: z.ZodEnum<{
+            sdd: "sdd";
+            config: "config";
+            domain: "domain";
+            docs: "docs";
+            root: "root";
+            application: "application";
+            infrastructure: "infrastructure";
+            presentation: "presentation";
+            shared: "shared";
+            tests: "tests";
+            assets: "assets";
+        }>;
+        content_type: z.ZodString;
+        reason: z.ZodString;
+        language: z.ZodOptional<z.ZodEnum<{
+            shell: "shell";
+            other: "other";
+            typescript: "typescript";
+            javascript: "javascript";
+            python: "python";
+            java: "java";
+            go: "go";
+            rust: "rust";
+            csharp: "csharp";
+            php: "php";
+            ruby: "ruby";
+        }>>;
+        context: z.ZodOptional<z.ZodString>;
+        implementation: z.ZodDefault<z.ZodEnum<{
+            contract: "contract";
+            manual: "manual";
+            concrete: "concrete";
+            abstract: "abstract";
+            generated: "generated";
+        }>>;
+        decision_refs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        source_refs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        tags: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type PluginPackageGovernance = z.infer<typeof pluginPackageGovernanceSchema>;
+export type PluginLanguageRuntime = z.infer<typeof pluginLanguageRuntimeSchema>;
+export type PluginArtifactKind = z.infer<typeof pluginArtifactKindSchema>;
+export type PluginArtifactRole = z.infer<typeof pluginArtifactRoleSchema>;
+export type PluginArtifactLayer = z.infer<typeof pluginArtifactLayerSchema>;
+export type PluginArtifactMapEntry = z.infer<typeof pluginArtifactMapEntrySchema>;
+export type PluginArtifactMap = z.infer<typeof pluginArtifactMapSchema>;
+export declare function buildPluginPackageName(pluginId: string): string;
+export declare function validatePluginPackageGovernance(value: unknown, sourceLabel?: string): PluginPackageGovernance;
+export declare function validatePluginArtifactMap(value: unknown, sourceLabel?: string): PluginArtifactMap;
+export declare function buildPluginSdkJsonSchemas(): Record<string, unknown>;
+//# sourceMappingURL=plugin-sdk-contract.d.ts.map