@oculum/scanner 1.0.12 → 1.0.13

package/dist/postprocess/suppression/config-loader.js

@@ -0,0 +1,424 @@
+"use strict";
+/**
+ * Suppression Config Loader
+ * Loads and validates suppression configuration from various file formats
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findConfigFile = findConfigFile;
+exports.loadConfigFromPath = loadConfigFromPath;
+exports.loadSuppressionConfig = loadSuppressionConfig;
+exports.writeSuppressionConfig = writeSuppressionConfig;
+exports.addFindingSuppression = addFindingSuppression;
+exports.removeFindingSuppression = removeFindingSuppression;
+exports.addRuleSuppression = addRuleSuppression;
+exports.listSuppressions = listSuppressions;
+exports.isExpired = isExpired;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const yaml = __importStar(require("js-yaml"));
+const types_1 = require("./types");
+/**
+ * Find the config file by walking up the directory tree
+ */
+function findConfigFile(startPath) {
+    let currentDir = startPath;
+    // Walk up directory tree looking for config file
+    while (currentDir !== (0, path_1.dirname)(currentDir)) {
+        for (const filename of types_1.SUPPRESSION_CONFIG_FILES) {
+            const configPath = (0, path_1.join)(currentDir, filename);
+            if ((0, fs_1.existsSync)(configPath)) {
+                return configPath;
+            }
+        }
+        currentDir = (0, path_1.dirname)(currentDir);
+    }
+    // Check root directory one more time
+    for (const filename of types_1.SUPPRESSION_CONFIG_FILES) {
+        const configPath = (0, path_1.join)(currentDir, filename);
+        if ((0, fs_1.existsSync)(configPath)) {
+            return configPath;
+        }
+    }
+    return null;
+}
+/**
+ * Parse config file content based on extension
+ */
+function parseConfigContent(content, filePath) {
+    const isYaml = filePath.endsWith('.yaml') || filePath.endsWith('.yml');
+    if (isYaml) {
+        return yaml.load(content);
+    }
+    // JSON or .oculumrc (treat as JSON)
+    return JSON.parse(content);
+}
+/**
+ * Validate suppression config structure
+ */
+function validateConfig(data) {
+    const errors = [];
+    if (!data || typeof data !== 'object') {
+        return { valid: false, errors: ['Config must be an object'] };
+    }
+    const config = data;
+    // Validate version
+    if (config.version !== undefined && config.version !== 1) {
+        errors.push(`Unsupported config version: ${config.version}. Only version 1 is supported.`);
+    }
+    // Validate suppressions
+    if (config.suppressions !== undefined) {
+        if (typeof config.suppressions !== 'object' || config.suppressions === null) {
+            errors.push('suppressions must be an object');
+        }
+        else {
+            const suppressions = config.suppressions;
+            // Validate rules
+            if (suppressions.rules !== undefined) {
+                if (!Array.isArray(suppressions.rules)) {
+                    errors.push('suppressions.rules must be an array');
+                }
+                else {
+                    suppressions.rules.forEach((rule, i) => {
+                        if (!rule || typeof rule !== 'object') {
+                            errors.push(`suppressions.rules[${i}] must be an object`);
+                        }
+                        else {
+                            const r = rule;
+                            if (!r.category || typeof r.category !== 'string') {
+                                errors.push(`suppressions.rules[${i}].category is required`);
+                            }
+                            if (!r.reason || typeof r.reason !== 'string') {
+                                errors.push(`suppressions.rules[${i}].reason is required`);
+                            }
+                            if (r.expires && typeof r.expires !== 'string') {
+                                errors.push(`suppressions.rules[${i}].expires must be a string (ISO date)`);
+                            }
+                            if (r.paths && !Array.isArray(r.paths)) {
+                                errors.push(`suppressions.rules[${i}].paths must be an array`);
+                            }
+                        }
+                    });
+                }
+            }
+            // Validate findings
+            if (suppressions.findings !== undefined) {
+                if (!Array.isArray(suppressions.findings)) {
+                    errors.push('suppressions.findings must be an array');
+                }
+                else {
+                    suppressions.findings.forEach((finding, i) => {
+                        if (!finding || typeof finding !== 'object') {
+                            errors.push(`suppressions.findings[${i}] must be an object`);
+                        }
+                        else {
+                            const f = finding;
+                            if (!f.hash || typeof f.hash !== 'string') {
+                                errors.push(`suppressions.findings[${i}].hash is required`);
+                            }
+                            if (!f.file || typeof f.file !== 'string') {
+                                errors.push(`suppressions.findings[${i}].file is required`);
+                            }
+                            if (!f.reason || typeof f.reason !== 'string') {
+                                errors.push(`suppressions.findings[${i}].reason is required`);
+                            }
+                            if (f.expires && typeof f.expires !== 'string') {
+                                errors.push(`suppressions.findings[${i}].expires must be a string (ISO date)`);
+                            }
+                        }
+                    });
+                }
+            }
+        }
+    }
+    // Validate ignore patterns
+    if (config.ignore !== undefined) {
+        if (!Array.isArray(config.ignore)) {
+            errors.push('ignore must be an array of strings');
+        }
+        else {
+            config.ignore.forEach((pattern, i) => {
+                if (typeof pattern !== 'string') {
+                    errors.push(`ignore[${i}] must be a string`);
+                }
+            });
+        }
+    }
+    return { valid: errors.length === 0, errors };
+}
+/**
+ * Load suppression config from a specific path
+ */
+function loadConfigFromPath(configPath) {
+    const errors = [];
+    try {
+        const content = (0, fs_1.readFileSync)(configPath, 'utf-8');
+        const data = parseConfigContent(content, configPath);
+        const validation = validateConfig(data);
+        if (!validation.valid) {
+            return {
+                config: types_1.DEFAULT_SUPPRESSION_CONFIG,
+                configPath,
+                found: true,
+                errors: validation.errors,
+            };
+        }
+        // Cast to config type (after validation)
+        const config = data;
+        // Ensure defaults
+        return {
+            config: {
+                version: config.version || 1,
+                suppressions: {
+                    rules: config.suppressions?.rules || [],
+                    findings: config.suppressions?.findings || [],
+                },
+                ignore: config.ignore || [],
+            },
+            configPath,
+            found: true,
+            errors,
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            config: types_1.DEFAULT_SUPPRESSION_CONFIG,
+            configPath,
+            found: true,
+            errors: [`Failed to parse config: ${message}`],
+        };
+    }
+}
+/**
+ * Load suppression config from a project directory
+ * Searches up the directory tree for a config file
+ */
+function loadSuppressionConfig(projectPath) {
+    const configPath = findConfigFile(projectPath);
+    if (!configPath) {
+        return {
+            config: types_1.DEFAULT_SUPPRESSION_CONFIG,
+            found: false,
+            errors: [],
+        };
+    }
+    return loadConfigFromPath(configPath);
+}
+/**
+ * Write suppression config to a file
+ */
+function writeSuppressionConfig(configPath, config) {
+    const isYaml = configPath.endsWith('.yaml') || configPath.endsWith('.yml');
+    let content;
+    if (isYaml) {
+        content = yaml.dump(config, {
+            indent: 2,
+            lineWidth: 100,
+            noRefs: true,
+            sortKeys: false,
+        });
+    }
+    else {
+        content = JSON.stringify(config, null, 2) + '\n';
+    }
+    (0, fs_1.writeFileSync)(configPath, content, 'utf-8');
+}
+/**
+ * Add a finding suppression to the config file
+ */
+function addFindingSuppression(projectPath, suppression) {
+    // Find or create config file
+    let configPath = findConfigFile(projectPath);
+    let config;
+    if (configPath) {
+        const result = loadConfigFromPath(configPath);
+        if (result.errors.length > 0) {
+            return {
+                success: false,
+                configPath: configPath,
+                error: result.errors.join(', '),
+            };
+        }
+        config = result.config;
+    }
+    else {
+        // Create new config file in project root
+        configPath = (0, path_1.join)(projectPath, '.oculum.yaml');
+        config = { ...types_1.DEFAULT_SUPPRESSION_CONFIG };
+    }
+    // Initialize suppressions if needed
+    if (!config.suppressions) {
+        config.suppressions = {};
+    }
+    if (!config.suppressions.findings) {
+        config.suppressions.findings = [];
+    }
+    // Check for duplicate
+    const existingIndex = config.suppressions.findings.findIndex(f => f.hash === suppression.hash);
+    if (existingIndex >= 0) {
+        // Update existing suppression
+        config.suppressions.findings[existingIndex] = suppression;
+    }
+    else {
+        // Add new suppression
+        config.suppressions.findings.push(suppression);
+    }
+    // Write config
+    try {
+        writeSuppressionConfig(configPath, config);
+        return { success: true, configPath };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { success: false, configPath, error: message };
+    }
+}
+/**
+ * Remove a finding suppression from the config file
+ */
+function removeFindingSuppression(projectPath, hash) {
+    const configPath = findConfigFile(projectPath);
+    if (!configPath) {
+        return { success: true, removed: false };
+    }
+    const result = loadConfigFromPath(configPath);
+    if (result.errors.length > 0) {
+        return {
+            success: false,
+            configPath,
+            error: result.errors.join(', '),
+            removed: false,
+        };
+    }
+    const config = result.config;
+    if (!config.suppressions?.findings) {
+        return { success: true, configPath, removed: false };
+    }
+    const initialLength = config.suppressions.findings.length;
+    config.suppressions.findings = config.suppressions.findings.filter(f => f.hash !== hash);
+    const removed = config.suppressions.findings.length < initialLength;
+    if (removed) {
+        try {
+            writeSuppressionConfig(configPath, config);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return { success: false, configPath, error: message, removed: false };
+        }
+    }
+    return { success: true, configPath, removed };
+}
+/**
+ * Add a rule suppression to the config file
+ */
+function addRuleSuppression(projectPath, suppression) {
+    // Find or create config file
+    let configPath = findConfigFile(projectPath);
+    let config;
+    if (configPath) {
+        const result = loadConfigFromPath(configPath);
+        if (result.errors.length > 0) {
+            return {
+                success: false,
+                configPath: configPath,
+                error: result.errors.join(', '),
+            };
+        }
+        config = result.config;
+    }
+    else {
+        // Create new config file in project root
+        configPath = (0, path_1.join)(projectPath, '.oculum.yaml');
+        config = { ...types_1.DEFAULT_SUPPRESSION_CONFIG };
+    }
+    // Initialize suppressions if needed
+    if (!config.suppressions) {
+        config.suppressions = {};
+    }
+    if (!config.suppressions.rules) {
+        config.suppressions.rules = [];
+    }
+    // Check for duplicate (same category and paths)
+    const existingIndex = config.suppressions.rules.findIndex(r => r.category === suppression.category &&
+        JSON.stringify(r.paths || []) === JSON.stringify(suppression.paths || []));
+    if (existingIndex >= 0) {
+        // Update existing suppression
+        config.suppressions.rules[existingIndex] = suppression;
+    }
+    else {
+        // Add new suppression
+        config.suppressions.rules.push(suppression);
+    }
+    // Write config
+    try {
+        writeSuppressionConfig(configPath, config);
+        return { success: true, configPath };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { success: false, configPath, error: message };
+    }
+}
+/**
+ * List all suppressions in the config
+ */
+function listSuppressions(projectPath) {
+    const result = loadSuppressionConfig(projectPath);
+    return {
+        rules: result.config.suppressions?.rules || [],
+        findings: result.config.suppressions?.findings || [],
+        configPath: result.configPath,
+        errors: result.errors,
+    };
+}
+/**
+ * Check if a date string is expired
+ */
+function isExpired(dateString) {
+    if (!dateString) {
+        return false;
+    }
+    try {
+        const expirationDate = new Date(dateString);
+        const now = new Date();
+        return expirationDate < now;
+    }
+    catch {
+        // Invalid date format - treat as not expired
+        return false;
+    }
+}
+//# sourceMappingURL=config-loader.js.map

package/dist/postprocess/suppression/config-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-loader.js","sourceRoot":"","sources":["../../../src/postprocess/suppression/config-loader.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCH,wCAuBC;AAmHD,gDA2CC;AAMD,sDAYC;AAKD,wDAmBC;AAKD,sDAqDC;AAKD,4DA2CC;AAKD,gDAsDC;AAKD,4CAcC;AAKD,8BAaC;AAxcD,2BAA4D;AAC5D,+BAAoC;AACpC,8CAA+B;AAM/B,mCAGgB;AAiBhB;;GAEG;AACH,SAAgB,cAAc,CAAC,SAAiB;IAC9C,IAAI,UAAU,GAAG,SAAS,CAAA;IAE1B,iDAAiD;IACjD,OAAO,UAAU,KAAK,IAAA,cAAO,EAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,KAAK,MAAM,QAAQ,IAAI,gCAAwB,EAAE,CAAC;YAChD,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;YAC7C,IAAI,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,OAAO,UAAU,CAAA;YACnB,CAAC;QACH,CAAC;QACD,UAAU,GAAG,IAAA,cAAO,EAAC,UAAU,CAAC,CAAA;IAClC,CAAC;IAED,qCAAqC;IACrC,KAAK,MAAM,QAAQ,IAAI,gCAAwB,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QAC7C,IAAI,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,OAAO,UAAU,CAAA;QACnB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,OAAe,EAAE,QAAgB;IAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAEtE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3B,CAAC;IAED,oCAAoC;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAa;IACnC,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAA;IAC/D,CAAC;IAED,MAAM,MAAM,GAAG,IAA+B,CAAA;IAE9C,mBAAmB;IACnB,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,OAAO,gCAAgC,CAAC,CAAA;IAC5F,CAAC;IAED,wBAAwB;IACxB,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,MAAM,CAAC,YAAuC,CAAA;YAEnE,iBAAiB;YACjB,IAAI,YAAY,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;gBACpD,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;wBACrC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACtC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,CAAA;wBAC3D,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,GAAG,IAA+B,CAAA;4BACzC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gCAClD,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,CAAA;4BAC9D,CAAC;4BACD,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gCAC9C,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,CAAA;4BAC5D,CAAC;4BACD,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gCAC/C,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,uCAAuC,CAAC,CAAA;4BAC7E,CAAC;4BACD,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gCACvC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,CAAA;4BAChE,CAAC;wBACH,CAAC;oBACH,CAAC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAED,oBAAoB;YACpB,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAA;gBACvD,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;wBAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;4BAC5C,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,qBAAqB,CAAC,CAAA;wBAC9D,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,GAAG,OAAkC,CAAA;4BAC5C,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gCAC1C,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,oBAAoB,CAAC,CAAA;4BAC7D,CAAC;4BACD,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gCAC1C,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,oBAAoB,CAAC,CAAA;4BAC7D,CAAC;4BACD,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gCAC9C,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CAAA;4BAC/D,CAAC;4BACD,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gCAC/C,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,uCAAuC,CAAC,CAAA;4BAChF,CAAC;wBACH,CAAC;oBACH,CAAC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;gBACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAA;gBAC9C,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC/C,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,UAAkB;IACnD,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAEpD,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,kCAA0B;gBAClC,UAAU;gBACV,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAA;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,MAAM,GAAG,IAAyB,CAAA;QAExC,kBAAkB;QAClB,OAAO;YACL,MAAM,EAAE;gBACN,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;gBAC5B,YAAY,EAAE;oBACZ,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;oBACvC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE;iBAC9C;gBACD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;aAC5B;YACD,UAAU;YACV,KAAK,EAAE,IAAI;YACX,MAAM;SACP,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,OAAO;YACL,MAAM,EAAE,kCAA0B;YAClC,UAAU;YACV,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,CAAC,2BAA2B,OAAO,EAAE,CAAC;SAC/C,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,WAAmB;IACvD,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;IAE9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,kCAA0B;YAClC,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,EAAE;SACX,CAAA;IACH,CAAC;IAED,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAA;AACvC,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CACpC,UAAkB,EAClB,MAAyB;IAEzB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAE1E,IAAI,OAAe,CAAA;IACnB,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,CAAC;YACT,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;IAClD,CAAC;IAED,IAAA,kBAAa,EAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;AAC7C,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CACnC,WAAmB,EACnB,WAA+B;IAE/B,6BAA6B;IAC7B,IAAI,UAAU,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;IAC5C,IAAI,MAAyB,CAAA;IAE7B,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;QAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,UAAU;gBACtB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;aAChC,CAAA;QACH,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IACxB,CAAC;SAAM,CAAC;QACN,yCAAyC;QACzC,UAAU,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAA;QAC9C,MAAM,GAAG,EAAE,GAAG,kCAA0B,EAAE,CAAA;IAC5C,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,CAAC,YAAY,GAAG,EAAE,CAAA;IAC1B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,YAAY,CAAC,QAAQ,GAAG,EAAE,CAAA;IACnC,CAAC;IAED,sBAAsB;IACtB,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAC1D,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,CACjC,CAAA;IAED,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACvB,8BAA8B;QAC9B,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,WAAW,CAAA;IAC3D,CAAC;SAAM,CAAC;QACN,sBAAsB;QACtB,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAChD,CAAC;IAED,eAAe;IACf,IAAI,CAAC;QACH,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IACvD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB,CACtC,WAAmB,EACnB,IAAY;IAEZ,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;IAE9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU;YACV,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,OAAO,EAAE,KAAK;SACf,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAE5B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACtD,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAA;IACzD,MAAM,CAAC,YAAY,CAAC,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAChE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CACrB,CAAA;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,GAAG,aAAa,CAAA;IAEnE,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QACvE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;AAC/C,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAChC,WAAmB,EACnB,WAA4B;IAE5B,6BAA6B;IAC7B,IAAI,UAAU,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;IAC5C,IAAI,MAAyB,CAAA;IAE7B,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;QAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,UAAU;gBACtB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;aAChC,CAAA;QACH,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IACxB,CAAC;SAAM,CAAC;QACN,yCAAyC;QACzC,UAAU,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAA;QAC9C,MAAM,GAAG,EAAE,GAAG,kCAA0B,EAAE,CAAA;IAC5C,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,CAAC,YAAY,GAAG,EAAE,CAAA;IAC1B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,CAAC,YAAY,CAAC,KAAK,GAAG,EAAE,CAAA;IAChC,CAAC;IAED,gDAAgD;IAChD,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CACvD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ;QACtC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC,CAC5E,CAAA;IAED,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACvB,8BAA8B;QAC9B,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,WAAW,CAAA;IACxD,CAAC;SAAM,CAAC;QACN,sBAAsB;QACtB,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC7C,CAAC;IAED,eAAe;IACf,IAAI,CAAC;QACH,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IACvD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,WAAmB;IAMlD,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAA;IAEjD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;QAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE;QACpD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,SAAS,CAAC,UAA8B;IACtD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAA;QAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,OAAO,cAAc,GAAG,GAAG,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;QAC7C,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/postprocess/suppression/hash.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Finding Hash Computation
+ * Creates stable, reproducible hashes for identifying specific findings
+ */
+import type { Vulnerability } from '../../shared/types';
+/**
+ * Normalize a file path for hashing
+ * - Removes leading ./ or /
+ * - Converts backslashes to forward slashes
+ * - Lowercases (for case-insensitive matching)
+ */
+export declare function normalizePathForHash(filePath: string): string;
+/**
+ * Normalize line content for hashing
+ * - Trims whitespace
+ * - Collapses multiple whitespace to single space
+ * - Removes common noise (line numbers, etc.)
+ */
+export declare function normalizeContentForHash(content: string): string;
+/**
+ * Compute a stable hash for a vulnerability finding
+ *
+ * Hash = SHA256(normalizedPath:normalizedContent:category).slice(0,16)
+ *
+ * This creates a 16-character hex hash that:
+ * - Stays stable across whitespace changes
+ * - Changes when the actual code changes
+ * - Changes when the finding category changes
+ * - Is unique enough for practical use
+ *
+ * @param finding - The vulnerability to hash
+ * @returns A 16-character hex hash string
+ */
+export declare function computeFindingHash(finding: Vulnerability): string;
+/**
+ * Compute hash from raw components (for testing or manual construction)
+ */
+export declare function computeHashFromComponents(filePath: string, lineContent: string, category: string): string;
+/**
+ * Validate a hash format
+ * Must be 16 hexadecimal characters
+ */
+export declare function isValidHash(hash: string): boolean;
+/**
+ * Format a hash for display (with truncation indicator)
+ */
+export declare function formatHashForDisplay(hash: string): string;
+//# sourceMappingURL=hash.d.ts.map

package/dist/postprocess/suppression/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../../src/postprocess/suppression/hash.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM7D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK/D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAUjE;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,MAAM,CAQR;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKzD"}

package/dist/postprocess/suppression/hash.js

@@ -0,0 +1,88 @@
+"use strict";
+/**
+ * Finding Hash Computation
+ * Creates stable, reproducible hashes for identifying specific findings
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizePathForHash = normalizePathForHash;
+exports.normalizeContentForHash = normalizeContentForHash;
+exports.computeFindingHash = computeFindingHash;
+exports.computeHashFromComponents = computeHashFromComponents;
+exports.isValidHash = isValidHash;
+exports.formatHashForDisplay = formatHashForDisplay;
+const crypto_1 = require("crypto");
+/**
+ * Normalize a file path for hashing
+ * - Removes leading ./ or /
+ * - Converts backslashes to forward slashes
+ * - Lowercases (for case-insensitive matching)
+ */
+function normalizePathForHash(filePath) {
+    return filePath
+        .replace(/^\.\//, '') // Remove leading ./
+        .replace(/^\//, '') // Remove leading /
+        .replace(/\\/g, '/') // Normalize backslashes
+        .toLowerCase();
+}
+/**
+ * Normalize line content for hashing
+ * - Trims whitespace
+ * - Collapses multiple whitespace to single space
+ * - Removes common noise (line numbers, etc.)
+ */
+function normalizeContentForHash(content) {
+    return content
+        .trim()
+        .replace(/\s+/g, ' ') // Collapse whitespace
+        .replace(/^\d+:\s*/, ''); // Remove line number prefix if present
+}
+/**
+ * Compute a stable hash for a vulnerability finding
+ *
+ * Hash = SHA256(normalizedPath:normalizedContent:category).slice(0,16)
+ *
+ * This creates a 16-character hex hash that:
+ * - Stays stable across whitespace changes
+ * - Changes when the actual code changes
+ * - Changes when the finding category changes
+ * - Is unique enough for practical use
+ *
+ * @param finding - The vulnerability to hash
+ * @returns A 16-character hex hash string
+ */
+function computeFindingHash(finding) {
+    const normalizedPath = normalizePathForHash(finding.filePath);
+    const normalizedContent = normalizeContentForHash(finding.lineContent);
+    const category = finding.category;
+    const input = `${normalizedPath}:${normalizedContent}:${category}`;
+    const hash = (0, crypto_1.createHash)('sha256').update(input).digest('hex');
+    // Return first 16 characters (64 bits of entropy - sufficient for uniqueness)
+    return hash.slice(0, 16);
+}
+/**
+ * Compute hash from raw components (for testing or manual construction)
+ */
+function computeHashFromComponents(filePath, lineContent, category) {
+    const normalizedPath = normalizePathForHash(filePath);
+    const normalizedContent = normalizeContentForHash(lineContent);
+    const input = `${normalizedPath}:${normalizedContent}:${category}`;
+    const hash = (0, crypto_1.createHash)('sha256').update(input).digest('hex');
+    return hash.slice(0, 16);
+}
+/**
+ * Validate a hash format
+ * Must be 16 hexadecimal characters
+ */
+function isValidHash(hash) {
+    return /^[0-9a-f]{16}$/i.test(hash);
+}
+/**
+ * Format a hash for display (with truncation indicator)
+ */
+function formatHashForDisplay(hash) {
+    if (hash.length <= 16) {
+        return hash;
+    }
+    return `${hash.slice(0, 12)}...`;
+}
+//# sourceMappingURL=hash.js.map

package/dist/postprocess/suppression/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../src/postprocess/suppression/hash.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAWH,oDAMC;AAQD,0DAKC;AAgBD,gDAUC;AAKD,8DAYC;AAMD,kCAEC;AAKD,oDAKC;AAzFD,mCAAmC;AAGnC;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,QAAgB;IACnD,OAAO,QAAQ;SACZ,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,oBAAoB;SACzC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,mBAAmB;SACtC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,wBAAwB;SAC5C,WAAW,EAAE,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,OAAe;IACrD,OAAO,OAAO;SACX,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,sBAAsB;SAC3C,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA,CAAC,uCAAuC;AACpE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,kBAAkB,CAAC,OAAsB;IACvD,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7D,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IAEjC,MAAM,KAAK,GAAG,GAAG,cAAc,IAAI,iBAAiB,IAAI,QAAQ,EAAE,CAAA;IAClE,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAE7D,8EAA8E;IAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAC1B,CAAC;AAED;;GAEG;AACH,SAAgB,yBAAyB,CACvC,QAAgB,EAChB,WAAmB,EACnB,QAAgB;IAEhB,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IACrD,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAA;IAE9D,MAAM,KAAK,GAAG,GAAG,cAAc,IAAI,iBAAiB,IAAI,QAAQ,EAAE,CAAA;IAClE,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAE7D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,IAAY;IACtC,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACrC,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAA;AAClC,CAAC"}

package/dist/postprocess/suppression/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Suppression System
+ * Allows users to suppress findings via config files and inline comments
+ */
+export { SuppressionManager, type SuppressionManagerOptions } from './manager';
+export type { SuppressionConfig, RuleSuppression, FindingSuppression, InlineSuppression, SuppressionMatch, SuppressedVulnerability, SuppressionResult, } from './types';
+export { SUPPRESSION_CONFIG_FILES, DEFAULT_SUPPRESSION_CONFIG } from './types';
+export { computeFindingHash, computeHashFromComponents, normalizePathForHash, normalizeContentForHash, isValidHash, formatHashForDisplay, } from './hash';
+export { loadSuppressionConfig, loadConfigFromPath, findConfigFile, writeSuppressionConfig, addFindingSuppression, removeFindingSuppression, addRuleSuppression, listSuppressions, isExpired, type ConfigLoadResult, } from './config-loader';
+export { parseInlineSuppressions, isLineSuppressed, extractSuppressionReasons, generateSuppressionComment, } from './inline-parser';
+//# sourceMappingURL=index.d.ts.map

package/dist/postprocess/suppression/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/postprocess/suppression/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAG9E,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAA;AAG9E,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,WAAW,EACX,oBAAoB,GACrB,MAAM,QAAQ,CAAA;AAGf,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EACT,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAA"}

package/dist/postprocess/suppression/index.js

@@ -0,0 +1,39 @@
+"use strict";
+/**
+ * Suppression System
+ * Allows users to suppress findings via config files and inline comments
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateSuppressionComment = exports.extractSuppressionReasons = exports.isLineSuppressed = exports.parseInlineSuppressions = exports.isExpired = exports.listSuppressions = exports.addRuleSuppression = exports.removeFindingSuppression = exports.addFindingSuppression = exports.writeSuppressionConfig = exports.findConfigFile = exports.loadConfigFromPath = exports.loadSuppressionConfig = exports.formatHashForDisplay = exports.isValidHash = exports.normalizeContentForHash = exports.normalizePathForHash = exports.computeHashFromComponents = exports.computeFindingHash = exports.DEFAULT_SUPPRESSION_CONFIG = exports.SUPPRESSION_CONFIG_FILES = exports.SuppressionManager = void 0;
+// Main exports
+var manager_1 = require("./manager");
+Object.defineProperty(exports, "SuppressionManager", { enumerable: true, get: function () { return manager_1.SuppressionManager; } });
+var types_1 = require("./types");
+Object.defineProperty(exports, "SUPPRESSION_CONFIG_FILES", { enumerable: true, get: function () { return types_1.SUPPRESSION_CONFIG_FILES; } });
+Object.defineProperty(exports, "DEFAULT_SUPPRESSION_CONFIG", { enumerable: true, get: function () { return types_1.DEFAULT_SUPPRESSION_CONFIG; } });
+// Hash utilities
+var hash_1 = require("./hash");
+Object.defineProperty(exports, "computeFindingHash", { enumerable: true, get: function () { return hash_1.computeFindingHash; } });
+Object.defineProperty(exports, "computeHashFromComponents", { enumerable: true, get: function () { return hash_1.computeHashFromComponents; } });
+Object.defineProperty(exports, "normalizePathForHash", { enumerable: true, get: function () { return hash_1.normalizePathForHash; } });
+Object.defineProperty(exports, "normalizeContentForHash", { enumerable: true, get: function () { return hash_1.normalizeContentForHash; } });
+Object.defineProperty(exports, "isValidHash", { enumerable: true, get: function () { return hash_1.isValidHash; } });
+Object.defineProperty(exports, "formatHashForDisplay", { enumerable: true, get: function () { return hash_1.formatHashForDisplay; } });
+// Config utilities
+var config_loader_1 = require("./config-loader");
+Object.defineProperty(exports, "loadSuppressionConfig", { enumerable: true, get: function () { return config_loader_1.loadSuppressionConfig; } });
+Object.defineProperty(exports, "loadConfigFromPath", { enumerable: true, get: function () { return config_loader_1.loadConfigFromPath; } });
+Object.defineProperty(exports, "findConfigFile", { enumerable: true, get: function () { return config_loader_1.findConfigFile; } });
+Object.defineProperty(exports, "writeSuppressionConfig", { enumerable: true, get: function () { return config_loader_1.writeSuppressionConfig; } });
+Object.defineProperty(exports, "addFindingSuppression", { enumerable: true, get: function () { return config_loader_1.addFindingSuppression; } });
+Object.defineProperty(exports, "removeFindingSuppression", { enumerable: true, get: function () { return config_loader_1.removeFindingSuppression; } });
+Object.defineProperty(exports, "addRuleSuppression", { enumerable: true, get: function () { return config_loader_1.addRuleSuppression; } });
+Object.defineProperty(exports, "listSuppressions", { enumerable: true, get: function () { return config_loader_1.listSuppressions; } });
+Object.defineProperty(exports, "isExpired", { enumerable: true, get: function () { return config_loader_1.isExpired; } });
+// Inline comment utilities
+var inline_parser_1 = require("./inline-parser");
+Object.defineProperty(exports, "parseInlineSuppressions", { enumerable: true, get: function () { return inline_parser_1.parseInlineSuppressions; } });
+Object.defineProperty(exports, "isLineSuppressed", { enumerable: true, get: function () { return inline_parser_1.isLineSuppressed; } });
+Object.defineProperty(exports, "extractSuppressionReasons", { enumerable: true, get: function () { return inline_parser_1.extractSuppressionReasons; } });
+Object.defineProperty(exports, "generateSuppressionComment", { enumerable: true, get: function () { return inline_parser_1.generateSuppressionComment; } });
+//# sourceMappingURL=index.js.map

package/dist/postprocess/suppression/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/postprocess/suppression/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,eAAe;AACf,qCAA8E;AAArE,6GAAA,kBAAkB,OAAA;AAY3B,iCAA8E;AAArE,iHAAA,wBAAwB,OAAA;AAAE,mHAAA,0BAA0B,OAAA;AAE7D,iBAAiB;AACjB,+BAOe;AANb,0GAAA,kBAAkB,OAAA;AAClB,iHAAA,yBAAyB,OAAA;AACzB,4GAAA,oBAAoB,OAAA;AACpB,+GAAA,uBAAuB,OAAA;AACvB,mGAAA,WAAW,OAAA;AACX,4GAAA,oBAAoB,OAAA;AAGtB,mBAAmB;AACnB,iDAWwB;AAVtB,sHAAA,qBAAqB,OAAA;AACrB,mHAAA,kBAAkB,OAAA;AAClB,+GAAA,cAAc,OAAA;AACd,uHAAA,sBAAsB,OAAA;AACtB,sHAAA,qBAAqB,OAAA;AACrB,yHAAA,wBAAwB,OAAA;AACxB,mHAAA,kBAAkB,OAAA;AAClB,iHAAA,gBAAgB,OAAA;AAChB,0GAAA,SAAS,OAAA;AAIX,2BAA2B;AAC3B,iDAKwB;AAJtB,wHAAA,uBAAuB,OAAA;AACvB,iHAAA,gBAAgB,OAAA;AAChB,0HAAA,yBAAyB,OAAA;AACzB,2HAAA,0BAA0B,OAAA"}