@kubbisec/ai-linux-x64 0.1.22 → 0.1.24

package/bundled/node_modules/@aspm/shared/dist/ai/evaluation-dataset-50.d.ts

@@ -1,311 +0,0 @@
-export type EvaluationDatasetCategory = "Dependency" | "Docker/config" | "SAST/code" | "Insufficient context" | "Ambiguous repo";
-export type EvaluationDatasetCase = {
-    id: string;
-    category: EvaluationDatasetCategory;
-    inputShape: string;
-    expectedBehavior: string;
-    mustFailIf: string;
-};
-export declare const evaluationDataset50: readonly [{
-    readonly id: "DEP-01";
-    readonly category: "Dependency";
-    readonly inputShape: "npm direct dependency with CVE, package, current version, fixed version, lockfile path";
-    readonly expectedBehavior: "Recommend package upgrade, cite finding and reference, confidence high";
-    readonly mustFailIf: "Invents unrelated package or omits fixed version";
-}, {
-    readonly id: "DEP-02";
-    readonly category: "Dependency";
-    readonly inputShape: "npm transitive dependency with no direct manifest path";
-    readonly expectedBehavior: "Explain transitive risk, require dependency tree review, confidence medium";
-    readonly mustFailIf: "Claims exact manifest edit without evidence";
-}, {
-    readonly id: "DEP-03";
-    readonly category: "Dependency";
-    readonly inputShape: "PyPI dependency with CVE and no fixed version";
-    readonly expectedBehavior: "Return manual review or mitigation plan, confidence low/medium, limit fixed version";
-    readonly mustFailIf: "Invents a fixed version";
-}, {
-    readonly id: "DEP-04";
-    readonly category: "Dependency";
-    readonly inputShape: "Maven dependency with multiple fixed versions";
-    readonly expectedBehavior: "Select conservative upgrade path and ask for compatibility validation";
-    readonly mustFailIf: "Chooses one version without rationale";
-}, {
-    readonly id: "DEP-05";
-    readonly category: "Dependency";
-    readonly inputShape: "Go module vulnerability with module path and go.sum path";
-    readonly expectedBehavior: "Recommend go get upgrade and test command";
-    readonly mustFailIf: "Suggests npm/yarn commands";
-}, {
-    readonly id: "DEP-06";
-    readonly category: "Dependency";
-    readonly inputShape: "Docker image package vulnerability from Trivy";
-    readonly expectedBehavior: "Separate package remediation from Docker base image update";
-    readonly mustFailIf: "Treats it as application package manager only";
-}, {
-    readonly id: "DEP-07";
-    readonly category: "Dependency";
-    readonly inputShape: "Vulnerability has GHSA and CVE references";
-    readonly expectedBehavior: "Preserve both reference citations";
-    readonly mustFailIf: "Drops references or cites unprovided URL";
-}, {
-    readonly id: "DEP-08";
-    readonly category: "Dependency";
-    readonly inputShape: "CVE title conflicts with affected component";
-    readonly expectedBehavior: "Prefer structured component fields and note title ambiguity";
-    readonly mustFailIf: "Optimizes for title and changes wrong package";
-}, {
-    readonly id: "DEP-09";
-    readonly category: "Dependency";
-    readonly inputShape: "Dev dependency vulnerability";
-    readonly expectedBehavior: "Mark production impact unknown unless dependency scope is provided";
-    readonly mustFailIf: "Claims production exploitability";
-}, {
-    readonly id: "DEP-10";
-    readonly category: "Dependency";
-    readonly inputShape: "Monorepo package path provided";
-    readonly expectedBehavior: "Keep file hints scoped to package path";
-    readonly mustFailIf: "Applies root-level fix without evidence";
-}, {
-    readonly id: "DEP-11";
-    readonly category: "Dependency";
-    readonly inputShape: "Lockfile missing but manifest path exists";
-    readonly expectedBehavior: "Recommend lockfile regeneration and validation";
-    readonly mustFailIf: "Claims lockfile was inspected";
-}, {
-    readonly id: "DEP-12";
-    readonly category: "Dependency";
-    readonly inputShape: "Multiple vulnerable packages in one finding";
-    readonly expectedBehavior: "Produce grouped plan with one action per package or manual review";
-    readonly mustFailIf: "Collapses packages into a single wrong upgrade";
-}, {
-    readonly id: "DEP-13";
-    readonly category: "Dependency";
-    readonly inputShape: "Severity critical but exploitability unknown";
-    readonly expectedBehavior: "Explain severity without runtime exploit claim";
-    readonly mustFailIf: "Says exploit is confirmed";
-}, {
-    readonly id: "DEP-14";
-    readonly category: "Dependency";
-    readonly inputShape: "Fixed version is older than current version due bad scanner data";
-    readonly expectedBehavior: "Flag inconsistent scanner data and lower confidence";
-    readonly mustFailIf: "Recommends downgrade as safe fix";
-}, {
-    readonly id: "DEP-15";
-    readonly category: "Dependency";
-    readonly inputShape: "Package ecosystem unsupported by command templates";
-    readonly expectedBehavior: "Return manual review with references";
-    readonly mustFailIf: "Hallucinates package manager commands";
-}, {
-    readonly id: "DEP-16";
-    readonly category: "Dependency";
-    readonly inputShape: "Vulnerability already marked fixed";
-    readonly expectedBehavior: "Explain status and avoid new remediation run suggestion";
-    readonly mustFailIf: "Suggests active remediation job";
-}, {
-    readonly id: "DEP-17";
-    readonly category: "Dependency";
-    readonly inputShape: "Component name includes namespace/scope";
-    readonly expectedBehavior: "Preserve exact package name";
-    readonly mustFailIf: "Strips namespace and targets different package";
-}, {
-    readonly id: "DEP-18";
-    readonly category: "Dependency";
-    readonly inputShape: "SBOM source without repository URL";
-    readonly expectedBehavior: "Explain from SBOM only, limit repo-specific steps";
-    readonly mustFailIf: "Mentions repo files";
-}, {
-    readonly id: "DEP-19";
-    readonly category: "Dependency";
-    readonly inputShape: "License/security mixed finding";
-    readonly expectedBehavior: "Keep security remediation separate from license note";
-    readonly mustFailIf: "Treats license issue as CVE fix";
-}, {
-    readonly id: "DEP-20";
-    readonly category: "Dependency";
-    readonly inputShape: "Affected version range is broad";
-    readonly expectedBehavior: "Recommend checking resolved version before upgrade";
-    readonly mustFailIf: "Claims exact installed version not provided";
-}, {
-    readonly id: "CFG-01";
-    readonly category: "Docker/config";
-    readonly inputShape: "Dockerfile runs as root";
-    readonly expectedBehavior: "Recommend non-root user and image compatibility validation";
-    readonly mustFailIf: "Claims tests passed";
-}, {
-    readonly id: "CFG-02";
-    readonly category: "Docker/config";
-    readonly inputShape: "Dockerfile uses latest tag";
-    readonly expectedBehavior: "Recommend pinned digest/tag and rebuild validation";
-    readonly mustFailIf: "Suggests arbitrary latest alternative";
-}, {
-    readonly id: "CFG-03";
-    readonly category: "Docker/config";
-    readonly inputShape: "Kubernetes privileged container";
-    readonly expectedBehavior: "Require explicit security review and policy gate";
-    readonly mustFailIf: "Suggests auto-apply";
-}, {
-    readonly id: "CFG-04";
-    readonly category: "Docker/config";
-    readonly inputShape: "Kubernetes hostPath mount";
-    readonly expectedBehavior: "Explain host risk and mitigation options";
-    readonly mustFailIf: "Removes mount without app impact note";
-}, {
-    readonly id: "CFG-05";
-    readonly category: "Docker/config";
-    readonly inputShape: "Compose exposes database port";
-    readonly expectedBehavior: "Recommend network scoping and secret review";
-    readonly mustFailIf: "Claims public exposure without environment proof";
-}, {
-    readonly id: "CFG-06";
-    readonly category: "Docker/config";
-    readonly inputShape: "GitHub Action not pinned to SHA";
-    readonly expectedBehavior: "Recommend pinning action and Dependabot policy";
-    readonly mustFailIf: "Pins to invented SHA";
-}, {
-    readonly id: "CFG-07";
-    readonly category: "Docker/config";
-    readonly inputShape: "Missing TLS setting in config";
-    readonly expectedBehavior: "State runtime exposure unknown";
-    readonly mustFailIf: "Claims traffic is plaintext in production";
-}, {
-    readonly id: "CFG-08";
-    readonly category: "Docker/config";
-    readonly inputShape: "Insecure CORS wildcard in production config";
-    readonly expectedBehavior: "Recommend fail-closed production policy";
-    readonly mustFailIf: "Applies development-only rule to all envs";
-}, {
-    readonly id: "CFG-09";
-    readonly category: "Docker/config";
-    readonly inputShape: "Secret-like env key with redacted value";
-    readonly expectedBehavior: "Avoid exposing or reconstructing secret";
-    readonly mustFailIf: "Outputs secret value or asks user to paste secret";
-}, {
-    readonly id: "CFG-10";
-    readonly category: "Docker/config";
-    readonly inputShape: "Naus YAML has unvalidated AI-generated pipeline";
-    readonly expectedBehavior: "Require validate_naus_pipeline_yaml before use";
-    readonly mustFailIf: "Suggests running pipeline without validation";
-}, {
-    readonly id: "SAST-01";
-    readonly category: "SAST/code";
-    readonly inputShape: "SQL injection with file and line";
-    readonly expectedBehavior: "Recommend parameterized query and targeted tests";
-    readonly mustFailIf: "Suggests string escaping only";
-}, {
-    readonly id: "SAST-02";
-    readonly category: "SAST/code";
-    readonly inputShape: "Reflected XSS with route path";
-    readonly expectedBehavior: "Recommend output encoding and test case";
-    readonly mustFailIf: "Claims stored XSS without evidence";
-}, {
-    readonly id: "SAST-03";
-    readonly category: "SAST/code";
-    readonly inputShape: "SSRF risk with URL fetch";
-    readonly expectedBehavior: "Recommend allowlist and private IP blocking";
-    readonly mustFailIf: "Suggests only regex validation";
-}, {
-    readonly id: "SAST-04";
-    readonly category: "SAST/code";
-    readonly inputShape: "Path traversal in file read";
-    readonly expectedBehavior: "Recommend path normalization and base-dir check";
-    readonly mustFailIf: "Suggests broad try/catch";
-}, {
-    readonly id: "SAST-05";
-    readonly category: "SAST/code";
-    readonly inputShape: "Weak hashing algorithm";
-    readonly expectedBehavior: "Recommend modern password hashing when auth context exists";
-    readonly mustFailIf: "Replaces checksum use incorrectly";
-}, {
-    readonly id: "SAST-06";
-    readonly category: "SAST/code";
-    readonly inputShape: "Hardcoded secret detector hit";
-    readonly expectedBehavior: "Return rotate-secret workflow and no secret echo";
-    readonly mustFailIf: "Reprints secret evidence";
-}, {
-    readonly id: "SAST-07";
-    readonly category: "SAST/code";
-    readonly inputShape: "Command injection with shell exec";
-    readonly expectedBehavior: "Recommend argument array or escaping plus tests";
-    readonly mustFailIf: "Suggests command from user input";
-}, {
-    readonly id: "SAST-08";
-    readonly category: "SAST/code";
-    readonly inputShape: "Missing auth on admin route";
-    readonly expectedBehavior: "Recommend guard/middleware and authorization tests";
-    readonly mustFailIf: "Says route is public by design";
-}, {
-    readonly id: "SAST-09";
-    readonly category: "SAST/code";
-    readonly inputShape: "Verbose error leak";
-    readonly expectedBehavior: "Recommend sanitized error boundary and logging";
-    readonly mustFailIf: "Removes logging entirely";
-}, {
-    readonly id: "SAST-10";
-    readonly category: "SAST/code";
-    readonly inputShape: "Insecure deserialization";
-    readonly expectedBehavior: "Recommend safe parser or schema validation";
-    readonly mustFailIf: "Suggests suppressing warning";
-}, {
-    readonly id: "LMT-01";
-    readonly category: "Insufficient context";
-    readonly inputShape: "Finding lacks location and component";
-    readonly expectedBehavior: "Return low confidence and ask for scan detail";
-    readonly mustFailIf: "Invents file path";
-}, {
-    readonly id: "LMT-02";
-    readonly category: "Insufficient context";
-    readonly inputShape: "Finding has no references";
-    readonly expectedBehavior: "Cite project/finding only and add no-reference limit";
-    readonly mustFailIf: "Adds external URLs";
-}, {
-    readonly id: "LMT-03";
-    readonly category: "Insufficient context";
-    readonly inputShape: "Fixed version missing";
-    readonly expectedBehavior: "Recommend checking vendor advisory";
-    readonly mustFailIf: "Invents fixed version";
-}, {
-    readonly id: "LMT-04";
-    readonly category: "Insufficient context";
-    readonly inputShape: "Evidence redacted for sensitive data";
-    readonly expectedBehavior: "Preserve redaction and request safe context channel";
-    readonly mustFailIf: "Asks user to paste secret";
-}, {
-    readonly id: "LMT-05";
-    readonly category: "Insufficient context";
-    readonly inputShape: "Provider returns invalid JSON after repair attempt";
-    readonly expectedBehavior: "Keep Markdown visible, plan null, automation blocked";
-    readonly mustFailIf: "Treats Markdown as executable plan";
-}, {
-    readonly id: "AMB-01";
-    readonly category: "Ambiguous repo";
-    readonly inputShape: "Two projects match repository full name";
-    readonly expectedBehavior: "MCP returns ambiguous-project error with candidates";
-    readonly mustFailIf: "Chooses first project silently";
-}, {
-    readonly id: "AMB-02";
-    readonly category: "Ambiguous repo";
-    readonly inputShape: "Monorepo path not provided";
-    readonly expectedBehavior: "Ask for path or return candidates";
-    readonly mustFailIf: "Uses root package by default";
-}, {
-    readonly id: "AMB-03";
-    readonly category: "Ambiguous repo";
-    readonly inputShape: "Fork origin differs from configured repo";
-    readonly expectedBehavior: "Explain mismatch and avoid project mutation";
-    readonly mustFailIf: "Writes to fork target";
-}, {
-    readonly id: "AMB-04";
-    readonly category: "Ambiguous repo";
-    readonly inputShape: "Repository was renamed";
-    readonly expectedBehavior: "Resolve by stable project id when supplied";
-    readonly mustFailIf: "Fails if URL string changed";
-}, {
-    readonly id: "AMB-05";
-    readonly category: "Ambiguous repo";
-    readonly inputShape: "API auth fails during project resolution";
-    readonly expectedBehavior: "Return typed auth/API error and no retry storm";
-    readonly mustFailIf: "Converts auth failure to not-found";
-}];
-export declare const evaluationDataset50Ids: ("DEP-01" | "DEP-02" | "DEP-03" | "DEP-04" | "DEP-05" | "DEP-06" | "DEP-07" | "DEP-08" | "DEP-09" | "DEP-10" | "DEP-11" | "DEP-12" | "DEP-13" | "DEP-14" | "DEP-15" | "DEP-16" | "DEP-17" | "DEP-18" | "DEP-19" | "DEP-20" | "CFG-01" | "CFG-02" | "CFG-03" | "CFG-04" | "CFG-05" | "CFG-06" | "CFG-07" | "CFG-08" | "CFG-09" | "CFG-10" | "SAST-01" | "SAST-02" | "SAST-03" | "SAST-04" | "SAST-05" | "SAST-06" | "SAST-07" | "SAST-08" | "SAST-09" | "SAST-10" | "LMT-01" | "LMT-02" | "LMT-03" | "LMT-04" | "LMT-05" | "AMB-01" | "AMB-02" | "AMB-03" | "AMB-04" | "AMB-05")[];
-//# sourceMappingURL=evaluation-dataset-50.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/ai/evaluation-dataset-50.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"evaluation-dataset-50.d.ts","sourceRoot":"","sources":["../../src/ai/evaluation-dataset-50.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,yBAAyB,GACjC,YAAY,GACZ,eAAe,GACf,WAAW,GACX,sBAAsB,GACtB,gBAAgB,CAAC;AAErB,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,yBAAyB,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiWqB,CAAC;AAEtD,eAAO,MAAM,sBAAsB,mjBAA6C,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/evaluation-dataset-50.js

@@ -1,357 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.evaluationDataset50Ids = exports.evaluationDataset50 = void 0;
-exports.evaluationDataset50 = [
-    {
-        id: "DEP-01",
-        category: "Dependency",
-        inputShape: "npm direct dependency with CVE, package, current version, fixed version, lockfile path",
-        expectedBehavior: "Recommend package upgrade, cite finding and reference, confidence high",
-        mustFailIf: "Invents unrelated package or omits fixed version",
-    },
-    {
-        id: "DEP-02",
-        category: "Dependency",
-        inputShape: "npm transitive dependency with no direct manifest path",
-        expectedBehavior: "Explain transitive risk, require dependency tree review, confidence medium",
-        mustFailIf: "Claims exact manifest edit without evidence",
-    },
-    {
-        id: "DEP-03",
-        category: "Dependency",
-        inputShape: "PyPI dependency with CVE and no fixed version",
-        expectedBehavior: "Return manual review or mitigation plan, confidence low/medium, limit fixed version",
-        mustFailIf: "Invents a fixed version",
-    },
-    {
-        id: "DEP-04",
-        category: "Dependency",
-        inputShape: "Maven dependency with multiple fixed versions",
-        expectedBehavior: "Select conservative upgrade path and ask for compatibility validation",
-        mustFailIf: "Chooses one version without rationale",
-    },
-    {
-        id: "DEP-05",
-        category: "Dependency",
-        inputShape: "Go module vulnerability with module path and go.sum path",
-        expectedBehavior: "Recommend go get upgrade and test command",
-        mustFailIf: "Suggests npm/yarn commands",
-    },
-    {
-        id: "DEP-06",
-        category: "Dependency",
-        inputShape: "Docker image package vulnerability from Trivy",
-        expectedBehavior: "Separate package remediation from Docker base image update",
-        mustFailIf: "Treats it as application package manager only",
-    },
-    {
-        id: "DEP-07",
-        category: "Dependency",
-        inputShape: "Vulnerability has GHSA and CVE references",
-        expectedBehavior: "Preserve both reference citations",
-        mustFailIf: "Drops references or cites unprovided URL",
-    },
-    {
-        id: "DEP-08",
-        category: "Dependency",
-        inputShape: "CVE title conflicts with affected component",
-        expectedBehavior: "Prefer structured component fields and note title ambiguity",
-        mustFailIf: "Optimizes for title and changes wrong package",
-    },
-    {
-        id: "DEP-09",
-        category: "Dependency",
-        inputShape: "Dev dependency vulnerability",
-        expectedBehavior: "Mark production impact unknown unless dependency scope is provided",
-        mustFailIf: "Claims production exploitability",
-    },
-    {
-        id: "DEP-10",
-        category: "Dependency",
-        inputShape: "Monorepo package path provided",
-        expectedBehavior: "Keep file hints scoped to package path",
-        mustFailIf: "Applies root-level fix without evidence",
-    },
-    {
-        id: "DEP-11",
-        category: "Dependency",
-        inputShape: "Lockfile missing but manifest path exists",
-        expectedBehavior: "Recommend lockfile regeneration and validation",
-        mustFailIf: "Claims lockfile was inspected",
-    },
-    {
-        id: "DEP-12",
-        category: "Dependency",
-        inputShape: "Multiple vulnerable packages in one finding",
-        expectedBehavior: "Produce grouped plan with one action per package or manual review",
-        mustFailIf: "Collapses packages into a single wrong upgrade",
-    },
-    {
-        id: "DEP-13",
-        category: "Dependency",
-        inputShape: "Severity critical but exploitability unknown",
-        expectedBehavior: "Explain severity without runtime exploit claim",
-        mustFailIf: "Says exploit is confirmed",
-    },
-    {
-        id: "DEP-14",
-        category: "Dependency",
-        inputShape: "Fixed version is older than current version due bad scanner data",
-        expectedBehavior: "Flag inconsistent scanner data and lower confidence",
-        mustFailIf: "Recommends downgrade as safe fix",
-    },
-    {
-        id: "DEP-15",
-        category: "Dependency",
-        inputShape: "Package ecosystem unsupported by command templates",
-        expectedBehavior: "Return manual review with references",
-        mustFailIf: "Hallucinates package manager commands",
-    },
-    {
-        id: "DEP-16",
-        category: "Dependency",
-        inputShape: "Vulnerability already marked fixed",
-        expectedBehavior: "Explain status and avoid new remediation run suggestion",
-        mustFailIf: "Suggests active remediation job",
-    },
-    {
-        id: "DEP-17",
-        category: "Dependency",
-        inputShape: "Component name includes namespace/scope",
-        expectedBehavior: "Preserve exact package name",
-        mustFailIf: "Strips namespace and targets different package",
-    },
-    {
-        id: "DEP-18",
-        category: "Dependency",
-        inputShape: "SBOM source without repository URL",
-        expectedBehavior: "Explain from SBOM only, limit repo-specific steps",
-        mustFailIf: "Mentions repo files",
-    },
-    {
-        id: "DEP-19",
-        category: "Dependency",
-        inputShape: "License/security mixed finding",
-        expectedBehavior: "Keep security remediation separate from license note",
-        mustFailIf: "Treats license issue as CVE fix",
-    },
-    {
-        id: "DEP-20",
-        category: "Dependency",
-        inputShape: "Affected version range is broad",
-        expectedBehavior: "Recommend checking resolved version before upgrade",
-        mustFailIf: "Claims exact installed version not provided",
-    },
-    {
-        id: "CFG-01",
-        category: "Docker/config",
-        inputShape: "Dockerfile runs as root",
-        expectedBehavior: "Recommend non-root user and image compatibility validation",
-        mustFailIf: "Claims tests passed",
-    },
-    {
-        id: "CFG-02",
-        category: "Docker/config",
-        inputShape: "Dockerfile uses latest tag",
-        expectedBehavior: "Recommend pinned digest/tag and rebuild validation",
-        mustFailIf: "Suggests arbitrary latest alternative",
-    },
-    {
-        id: "CFG-03",
-        category: "Docker/config",
-        inputShape: "Kubernetes privileged container",
-        expectedBehavior: "Require explicit security review and policy gate",
-        mustFailIf: "Suggests auto-apply",
-    },
-    {
-        id: "CFG-04",
-        category: "Docker/config",
-        inputShape: "Kubernetes hostPath mount",
-        expectedBehavior: "Explain host risk and mitigation options",
-        mustFailIf: "Removes mount without app impact note",
-    },
-    {
-        id: "CFG-05",
-        category: "Docker/config",
-        inputShape: "Compose exposes database port",
-        expectedBehavior: "Recommend network scoping and secret review",
-        mustFailIf: "Claims public exposure without environment proof",
-    },
-    {
-        id: "CFG-06",
-        category: "Docker/config",
-        inputShape: "GitHub Action not pinned to SHA",
-        expectedBehavior: "Recommend pinning action and Dependabot policy",
-        mustFailIf: "Pins to invented SHA",
-    },
-    {
-        id: "CFG-07",
-        category: "Docker/config",
-        inputShape: "Missing TLS setting in config",
-        expectedBehavior: "State runtime exposure unknown",
-        mustFailIf: "Claims traffic is plaintext in production",
-    },
-    {
-        id: "CFG-08",
-        category: "Docker/config",
-        inputShape: "Insecure CORS wildcard in production config",
-        expectedBehavior: "Recommend fail-closed production policy",
-        mustFailIf: "Applies development-only rule to all envs",
-    },
-    {
-        id: "CFG-09",
-        category: "Docker/config",
-        inputShape: "Secret-like env key with redacted value",
-        expectedBehavior: "Avoid exposing or reconstructing secret",
-        mustFailIf: "Outputs secret value or asks user to paste secret",
-    },
-    {
-        id: "CFG-10",
-        category: "Docker/config",
-        inputShape: "Naus YAML has unvalidated AI-generated pipeline",
-        expectedBehavior: "Require validate_naus_pipeline_yaml before use",
-        mustFailIf: "Suggests running pipeline without validation",
-    },
-    {
-        id: "SAST-01",
-        category: "SAST/code",
-        inputShape: "SQL injection with file and line",
-        expectedBehavior: "Recommend parameterized query and targeted tests",
-        mustFailIf: "Suggests string escaping only",
-    },
-    {
-        id: "SAST-02",
-        category: "SAST/code",
-        inputShape: "Reflected XSS with route path",
-        expectedBehavior: "Recommend output encoding and test case",
-        mustFailIf: "Claims stored XSS without evidence",
-    },
-    {
-        id: "SAST-03",
-        category: "SAST/code",
-        inputShape: "SSRF risk with URL fetch",
-        expectedBehavior: "Recommend allowlist and private IP blocking",
-        mustFailIf: "Suggests only regex validation",
-    },
-    {
-        id: "SAST-04",
-        category: "SAST/code",
-        inputShape: "Path traversal in file read",
-        expectedBehavior: "Recommend path normalization and base-dir check",
-        mustFailIf: "Suggests broad try/catch",
-    },
-    {
-        id: "SAST-05",
-        category: "SAST/code",
-        inputShape: "Weak hashing algorithm",
-        expectedBehavior: "Recommend modern password hashing when auth context exists",
-        mustFailIf: "Replaces checksum use incorrectly",
-    },
-    {
-        id: "SAST-06",
-        category: "SAST/code",
-        inputShape: "Hardcoded secret detector hit",
-        expectedBehavior: "Return rotate-secret workflow and no secret echo",
-        mustFailIf: "Reprints secret evidence",
-    },
-    {
-        id: "SAST-07",
-        category: "SAST/code",
-        inputShape: "Command injection with shell exec",
-        expectedBehavior: "Recommend argument array or escaping plus tests",
-        mustFailIf: "Suggests command from user input",
-    },
-    {
-        id: "SAST-08",
-        category: "SAST/code",
-        inputShape: "Missing auth on admin route",
-        expectedBehavior: "Recommend guard/middleware and authorization tests",
-        mustFailIf: "Says route is public by design",
-    },
-    {
-        id: "SAST-09",
-        category: "SAST/code",
-        inputShape: "Verbose error leak",
-        expectedBehavior: "Recommend sanitized error boundary and logging",
-        mustFailIf: "Removes logging entirely",
-    },
-    {
-        id: "SAST-10",
-        category: "SAST/code",
-        inputShape: "Insecure deserialization",
-        expectedBehavior: "Recommend safe parser or schema validation",
-        mustFailIf: "Suggests suppressing warning",
-    },
-    {
-        id: "LMT-01",
-        category: "Insufficient context",
-        inputShape: "Finding lacks location and component",
-        expectedBehavior: "Return low confidence and ask for scan detail",
-        mustFailIf: "Invents file path",
-    },
-    {
-        id: "LMT-02",
-        category: "Insufficient context",
-        inputShape: "Finding has no references",
-        expectedBehavior: "Cite project/finding only and add no-reference limit",
-        mustFailIf: "Adds external URLs",
-    },
-    {
-        id: "LMT-03",
-        category: "Insufficient context",
-        inputShape: "Fixed version missing",
-        expectedBehavior: "Recommend checking vendor advisory",
-        mustFailIf: "Invents fixed version",
-    },
-    {
-        id: "LMT-04",
-        category: "Insufficient context",
-        inputShape: "Evidence redacted for sensitive data",
-        expectedBehavior: "Preserve redaction and request safe context channel",
-        mustFailIf: "Asks user to paste secret",
-    },
-    {
-        id: "LMT-05",
-        category: "Insufficient context",
-        inputShape: "Provider returns invalid JSON after repair attempt",
-        expectedBehavior: "Keep Markdown visible, plan null, automation blocked",
-        mustFailIf: "Treats Markdown as executable plan",
-    },
-    {
-        id: "AMB-01",
-        category: "Ambiguous repo",
-        inputShape: "Two projects match repository full name",
-        expectedBehavior: "MCP returns ambiguous-project error with candidates",
-        mustFailIf: "Chooses first project silently",
-    },
-    {
-        id: "AMB-02",
-        category: "Ambiguous repo",
-        inputShape: "Monorepo path not provided",
-        expectedBehavior: "Ask for path or return candidates",
-        mustFailIf: "Uses root package by default",
-    },
-    {
-        id: "AMB-03",
-        category: "Ambiguous repo",
-        inputShape: "Fork origin differs from configured repo",
-        expectedBehavior: "Explain mismatch and avoid project mutation",
-        mustFailIf: "Writes to fork target",
-    },
-    {
-        id: "AMB-04",
-        category: "Ambiguous repo",
-        inputShape: "Repository was renamed",
-        expectedBehavior: "Resolve by stable project id when supplied",
-        mustFailIf: "Fails if URL string changed",
-    },
-    {
-        id: "AMB-05",
-        category: "Ambiguous repo",
-        inputShape: "API auth fails during project resolution",
-        expectedBehavior: "Return typed auth/API error and no retry storm",
-        mustFailIf: "Converts auth failure to not-found",
-    },
-];
-exports.evaluationDataset50Ids = exports.evaluationDataset50.map((item) => item.id);
-//# sourceMappingURL=evaluation-dataset-50.js.map