@oculum/scanner 1.0.12 → 1.0.13

package/dist/score/confidence.js

@@ -0,0 +1,52 @@
+"use strict";
+/**
+ * Confidence Score Computation
+ *
+ * Single function that computes a finding's confidence score from
+ * baseConfidence + sum(applicable adjustments), then routes by thresholds.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeConfidence = computeConfidence;
+/** Default base confidence when detector doesn't set baseConfidence */
+const DEFAULT_BASE_CONFIDENCE = 0.35;
+/**
+ * Compute confidence score for a single finding.
+ *
+ * Logic: score = clamp(base + sum(applicable deltas), 0.0, 1.0)
+ * Then route by depth thresholds:
+ *   - score >= surfaceThreshold → 'surface'
+ *   - score >= validateThreshold && aiEnabled → 'validate'
+ *   - otherwise → 'suppress'
+ */
+function computeConfidence(finding, context, rules, depthConfig) {
+    const base = finding.baseConfidence ?? DEFAULT_BASE_CONFIDENCE;
+    // Evaluate all rules and collect applicable adjustments
+    const adjustments = [];
+    for (const rule of rules) {
+        if (rule.applies(finding, context)) {
+            adjustments.push({
+                factor: rule.name,
+                delta: rule.delta,
+                reason: rule.reason,
+                source: rule.source,
+            });
+        }
+    }
+    // Compute final score: base + sum(deltas), clamped to [0.0, 1.0]
+    const totalDelta = adjustments.reduce((sum, adj) => sum + adj.delta, 0);
+    const rawScore = base + totalDelta;
+    const score = Math.max(0.0, Math.min(1.0, rawScore));
+    // Route by thresholds
+    let routing;
+    if (score >= depthConfig.surfaceThreshold) {
+        routing = 'surface';
+    }
+    else if (score >= depthConfig.validateThreshold && depthConfig.aiEnabled) {
+        routing = 'validate';
+    }
+    else {
+        routing = 'suppress';
+    }
+    return { score, base, adjustments, routing };
+}
+//# sourceMappingURL=confidence.js.map

package/dist/score/confidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confidence.js","sourceRoot":"","sources":["../../src/score/confidence.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAuBH,8CAqCC;AAjDD,uEAAuE;AACvE,MAAM,uBAAuB,GAAG,IAAI,CAAA;AAEpC;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAC/B,OAAsB,EACtB,OAA0B,EAC1B,KAAuB,EACvB,WAAwB;IAExB,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAAA;IAE9D,wDAAwD;IACxD,MAAM,WAAW,GAA2B,EAAE,CAAA;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YACnC,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,UAAU,CAAA;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAA;IAEpD,sBAAsB;IACtB,IAAI,OAAyC,CAAA;IAC7C,IAAI,KAAK,IAAI,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAC1C,OAAO,GAAG,SAAS,CAAA;IACrB,CAAC;SAAM,IAAI,KAAK,IAAI,WAAW,CAAC,iBAAiB,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QAC3E,OAAO,GAAG,UAAU,CAAA;IACtB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,UAAU,CAAA;IACtB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;AAC9C,CAAC"}

package/dist/score/index.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Confidence Scoring System
+ *
+ * Entry point for the confidence scoring system. Provides:
+ * - scoreFindings() — score a batch of findings
+ * - buildConfidenceLog() — structured logging for debugging/tuning
+ * - buildAdjustmentContext() — build context for adjustment rules
+ * - DEPTH_CONFIGS — threshold configs for each scan depth
+ */
+import type { Vulnerability, ScanDepth } from '../shared/types';
+import type { ScoredFinding, ConfidenceLog, AdjustmentContext, DepthConfig } from './types';
+import type { ContextEngineResult } from '../model/taint-types';
+/**
+ * Score thresholds per scan depth.
+ *
+ * - local:    Only high-confidence findings surface. No AI.
+ * - verified: High-confidence surface directly; medium goes to AI.
+ * - deep:     High-confidence surface; nearly everything goes to AI.
+ */
+export declare const DEPTH_CONFIGS: Record<ScanDepth, DepthConfig>;
+/**
+ * Build adjustment context for a finding from file + project info.
+ */
+export declare function buildAdjustmentContext(finding: Vulnerability, ceResult: ContextEngineResult): AdjustmentContext;
+/**
+ * Score a batch of findings with confidence scoring.
+ *
+ * Each finding gets a ConfidenceComputation attached as `confidence_score`.
+ * The routing field indicates whether the finding should be surfaced,
+ * validated by AI, or suppressed.
+ */
+export interface ScoringDiagnostics {
+    /** How many times each adjustment rule fired */
+    ruleHitCounts: Record<string, number>;
+    /** Score distribution buckets */
+    scoreDistribution: {
+        '0.0-0.2': number;
+        '0.2-0.4': number;
+        '0.4-0.6': number;
+        '0.6-0.8': number;
+        '0.8-1.0': number;
+    };
+    /** Average score per category */
+    categoryAvgScores: Record<string, {
+        avg: number;
+        count: number;
+    }>;
+    /** Taint rule hits specifically */
+    taintRuleHits: Record<string, number>;
+}
+export declare function scoreFindings(findings: Vulnerability[], depth: ScanDepth, ceResult: ContextEngineResult): {
+    scored: ScoredFinding[];
+    diagnostics: ScoringDiagnostics;
+};
+/**
+ * Build structured confidence logs for a batch of scored findings.
+ * Used for debugging, tuning, and comparing with tier-based routing.
+ */
+export declare function buildConfidenceLog(scored: ScoredFinding[]): ConfidenceLog[];
+export type { ScoredFinding, ConfidenceComputation, ConfidenceAdjustment, ConfidenceLog, AdjustmentRule, AdjustmentContext, DepthConfig, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/score/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/score/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC/D,OAAO,KAAK,EACV,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,WAAW,EACZ,MAAM,SAAS,CAAA;AAChB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAkB/D;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAgBxD,CAAA;AAMD;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,mBAAmB,GAC5B,iBAAiB,CA0HnB;AAoBD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACrC,iCAAiC;IACjC,iBAAiB,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IACpH,iCAAiC;IACjC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjE,mCAAmC;IACnC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACtC;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,aAAa,EAAE,EACzB,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,mBAAmB,GAC5B;IAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAAC,WAAW,EAAE,kBAAkB,CAAA;CAAE,CAgD9D;AAMD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,aAAa,EAAE,CAY3E;AAGD,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,SAAS,CAAA"}

package/dist/score/index.js

@@ -0,0 +1,250 @@
+"use strict";
+/**
+ * Confidence Scoring System
+ *
+ * Entry point for the confidence scoring system. Provides:
+ * - scoreFindings() — score a batch of findings
+ * - buildConfidenceLog() — structured logging for debugging/tuning
+ * - buildAdjustmentContext() — build context for adjustment rules
+ * - DEPTH_CONFIGS — threshold configs for each scan depth
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEPTH_CONFIGS = void 0;
+exports.buildAdjustmentContext = buildAdjustmentContext;
+exports.scoreFindings = scoreFindings;
+exports.buildConfidenceLog = buildConfidenceLog;
+const utils_1 = require("../model/route-discovery/utils");
+const confidence_1 = require("./confidence");
+const adjustments_1 = require("./adjustments");
+const file_classifier_1 = require("../parse/file-classifier");
+// ============================================================================
+// Depth Configurations
+// ============================================================================
+/**
+ * Score thresholds per scan depth.
+ *
+ * - local:    Only high-confidence findings surface. No AI.
+ * - verified: High-confidence surface directly; medium goes to AI.
+ * - deep:     High-confidence surface; nearly everything goes to AI.
+ */
+exports.DEPTH_CONFIGS = {
+    local: {
+        surfaceThreshold: 0.70,
+        validateThreshold: 1.0, // Effectively no validation (nothing reaches 1.0)
+        aiEnabled: false,
+    },
+    verified: {
+        surfaceThreshold: 0.70,
+        validateThreshold: 0.20,
+        aiEnabled: true,
+    },
+    deep: {
+        surfaceThreshold: 0.70,
+        validateThreshold: 0.10,
+        aiEnabled: true,
+    },
+};
+// ============================================================================
+// Context Builder
+// ============================================================================
+/**
+ * Build adjustment context for a finding from file + project info.
+ */
+function buildAdjustmentContext(finding, ceResult) {
+    // Look up taint data for this finding's file
+    let taint = undefined;
+    const fileAnalysis = ceResult.fileTaintAnalyses?.get(finding.filePath);
+    if (fileAnalysis) {
+        // Check if any taint path has a sink at the finding's line number
+        const matchingPaths = fileAnalysis.taintPaths.filter(tp => tp.sink.line === finding.lineNumber);
+        if (matchingPaths.length > 0) {
+            // Pick the highest-confidence unsanitised path, or any path
+            const bestPath = matchingPaths.find(p => !p.sanitised) ?? matchingPaths[0];
+            taint = {
+                confirmed: true,
+                sources: matchingPaths.map(p => p.source.sourceType),
+                sinkType: bestPath.sink.sinkType,
+                sanitised: bestPath.sanitised,
+                confidence: bestPath.confidence,
+            };
+        }
+        else {
+            // Check cross-file taint paths (CE Phase 4) — sink-side match
+            const crossFilePaths = findCrossFileTaintMatch(ceResult, finding);
+            if (crossFilePaths.length > 0) {
+                const bestPath = crossFilePaths.find(p => !p.sanitised) ?? crossFilePaths[0];
+                taint = {
+                    confirmed: true,
+                    sources: crossFilePaths.map(p => p.source.sourceType),
+                    sinkType: bestPath.sink.sinkType,
+                    sanitised: bestPath.sanitised,
+                    confidence: bestPath.confidence,
+                };
+            }
+            else {
+                // File has taint analysis but no path to this finding's line
+                taint = {
+                    confirmed: false,
+                    sources: [],
+                    sinkType: null,
+                    sanitised: false,
+                    confidence: null,
+                };
+            }
+        }
+    }
+    else {
+        // No intra-file taint analysis — still check cross-file taint paths (call-site match)
+        const crossFilePaths = findCrossFileTaintMatch(ceResult, finding);
+        if (crossFilePaths.length > 0) {
+            const bestPath = crossFilePaths.find(p => !p.sanitised) ?? crossFilePaths[0];
+            taint = {
+                confirmed: true,
+                sources: crossFilePaths.map(p => p.source.sourceType),
+                sinkType: bestPath.sink.sinkType,
+                sanitised: bestPath.sanitised,
+                confidence: bestPath.confidence,
+            };
+        }
+    }
+    // Look up route data for this finding's file
+    let route = undefined;
+    const fileRoutes = ceResult.routeMap?.fileToRoutes.get(finding.filePath);
+    if (fileRoutes && fileRoutes.length > 0) {
+        // Find the closest route to the finding's line number
+        const closestRoute = (0, utils_1.findClosestRoute)(fileRoutes, finding.lineNumber);
+        if (closestRoute) {
+            route = {
+                hasAuth: closestRoute.authMiddleware.length > 0,
+                isPublic: closestRoute.isPublic,
+                middleware: closestRoute.authMiddleware,
+                methods: closestRoute.methods,
+                hasRateLimiting: closestRoute.rateLimiting,
+            };
+        }
+    }
+    // Look up framework analysis for this finding's file
+    let framework = undefined;
+    const fileFramework = ceResult.frameworkAnalyses?.get(finding.filePath);
+    if (fileFramework) {
+        const safeLinePatterns = fileFramework.safeLines.get(finding.lineNumber);
+        const unsafeLinePatterns = fileFramework.unsafeLines.get(finding.lineNumber);
+        const safeLine = safeLinePatterns?.[0];
+        const unsafeLine = unsafeLinePatterns?.[0];
+        if (safeLine || unsafeLine) {
+            const activeFrameworks = [];
+            const pc2 = ceResult.projectContext;
+            if (pc2.frameworks.primary)
+                activeFrameworks.push(pc2.frameworks.primary);
+            if (pc2.frameworks.frontend && !activeFrameworks.includes(pc2.frameworks.frontend)) {
+                activeFrameworks.push(pc2.frameworks.frontend);
+            }
+            framework = {
+                safePatternMatch: safeLine ? { id: safeLine.id, reason: safeLine.reason } : null,
+                unsafePatternMatch: unsafeLine ? { id: unsafeLine.id, reason: unsafeLine.reason } : null,
+                activeFrameworks,
+                orm: ceResult.projectContext.dataAccess.orm ?? null,
+            };
+        }
+    }
+    const pc = ceResult.projectContext;
+    return {
+        file: {
+            isTestFile: (0, file_classifier_1.isTestOrMockFile)(finding.filePath),
+            isExampleFile: (0, file_classifier_1.isExampleFile)(finding.filePath),
+            isDocFile: /\.(md|mdx|txt|rst)$/i.test(finding.filePath),
+            isScannerCode: (0, file_classifier_1.isScannerOrFixtureFile)(finding.filePath),
+            isToolingDir: (0, file_classifier_1.isToolingDirectory)(finding.filePath),
+            isServerOnly: (0, file_classifier_1.isServerOnlyFile)(finding.filePath),
+            isClientBundled: (0, file_classifier_1.isClientBundledFile)(finding.filePath),
+        },
+        project: {
+            hasAuthMiddleware: pc.auth.hasGlobalMiddleware,
+            hasTypeScript: pc.frameworks.usesTypeScript,
+            orm: pc.dataAccess.orm ?? null,
+            validationLib: pc.dataAccess.validationLibrary ?? null,
+        },
+        lineContent: finding.lineContent,
+        filePath: finding.filePath,
+        taint,
+        route,
+        framework,
+    };
+}
+/**
+ * Find cross-file taint paths matching a finding — both sink-side and call-site.
+ * Mirrors the matching logic in request-builder.ts for AI annotations.
+ */
+function findCrossFileTaintMatch(ceResult, finding) {
+    return ceResult.crossFileTaintPaths?.filter(cfp => (cfp.sinkFile === finding.filePath && cfp.sink.line === finding.lineNumber) ||
+        (cfp.sourceFile === finding.filePath && cfp.importLink.callLine === finding.lineNumber)) ?? [];
+}
+function scoreFindings(findings, depth, ceResult) {
+    const depthConfig = exports.DEPTH_CONFIGS[depth];
+    const ruleHitCounts = {};
+    const taintRuleHits = {};
+    const scoreDistribution = { '0.0-0.2': 0, '0.2-0.4': 0, '0.4-0.6': 0, '0.6-0.8': 0, '0.8-1.0': 0 };
+    const categoryScoreSums = {};
+    const scored = findings.map(finding => {
+        const context = buildAdjustmentContext(finding, ceResult);
+        const computation = (0, confidence_1.computeConfidence)(finding, context, adjustments_1.ALL_ADJUSTMENT_RULES, depthConfig);
+        // Collect diagnostics
+        for (const adj of computation.adjustments) {
+            ruleHitCounts[adj.factor] = (ruleHitCounts[adj.factor] || 0) + 1;
+            if (adj.source === 'taint') {
+                taintRuleHits[adj.factor] = (taintRuleHits[adj.factor] || 0) + 1;
+            }
+        }
+        // Score distribution
+        const s = computation.score;
+        if (s < 0.2)
+            scoreDistribution['0.0-0.2']++;
+        else if (s < 0.4)
+            scoreDistribution['0.2-0.4']++;
+        else if (s < 0.6)
+            scoreDistribution['0.4-0.6']++;
+        else if (s < 0.8)
+            scoreDistribution['0.6-0.8']++;
+        else
+            scoreDistribution['0.8-1.0']++;
+        // Per-category avg
+        const cat = finding.category;
+        if (!categoryScoreSums[cat])
+            categoryScoreSums[cat] = { sum: 0, count: 0 };
+        categoryScoreSums[cat].sum += computation.score;
+        categoryScoreSums[cat].count++;
+        return {
+            ...finding,
+            confidence_score: computation,
+        };
+    });
+    const categoryAvgScores = {};
+    for (const [cat, data] of Object.entries(categoryScoreSums)) {
+        categoryAvgScores[cat] = { avg: data.sum / data.count, count: data.count };
+    }
+    return {
+        scored,
+        diagnostics: { ruleHitCounts, scoreDistribution, categoryAvgScores, taintRuleHits },
+    };
+}
+// ============================================================================
+// Confidence Log
+// ============================================================================
+/**
+ * Build structured confidence logs for a batch of scored findings.
+ * Used for debugging, tuning, and comparing with tier-based routing.
+ */
+function buildConfidenceLog(scored) {
+    return scored.map(f => ({
+        findingId: `${f.filePath}:${f.lineNumber}:${f.category}`,
+        category: f.category,
+        detectorGroup: f.source ?? 'unknown',
+        base: f.confidence_score.base,
+        adjustments: f.confidence_score.adjustments,
+        final: f.confidence_score.score,
+        routing: f.confidence_score.routing,
+        filePath: f.filePath,
+        severity: f.severity,
+    }));
+}
+//# sourceMappingURL=index.js.map

package/dist/score/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/score/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AA2DH,wDA6HC;AAsCD,sCAoDC;AAUD,gDAYC;AA7RD,0DAAiE;AACjE,6CAAgD;AAChD,+CAAoD;AACpD,8DAOiC;AAEjC,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;;;;;GAMG;AACU,QAAA,aAAa,GAAmC;IAC3D,KAAK,EAAE;QACL,gBAAgB,EAAE,IAAI;QACtB,iBAAiB,EAAE,GAAG,EAAI,kDAAkD;QAC5E,SAAS,EAAE,KAAK;KACjB;IACD,QAAQ,EAAE;QACR,gBAAgB,EAAE,IAAI;QACtB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,IAAI;KAChB;IACD,IAAI,EAAE;QACJ,gBAAgB,EAAE,IAAI;QACtB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,IAAI;KAChB;CACF,CAAA;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,sBAAsB,CACpC,OAAsB,EACtB,QAA6B;IAE7B,6CAA6C;IAC7C,IAAI,KAAK,GAA+B,SAAS,CAAA;IACjD,MAAM,YAAY,GAAG,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtE,IAAI,YAAY,EAAE,CAAC;QACjB,kEAAkE;QAClE,MAAM,aAAa,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,CAClD,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,CAC1C,CAAA;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,4DAA4D;YAC5D,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAA;YAC1E,KAAK,GAAG;gBACN,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACpD,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;gBAChC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAA;QACH,CAAC;aAAM,CAAC;YACN,8DAA8D;YAC9D,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAEjE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAA;gBAC5E,KAAK,GAAG;oBACN,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;oBACrD,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;oBAChC,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;iBAChC,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,6DAA6D;gBAC7D,KAAK,GAAG;oBACN,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,EAAE;oBACX,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,IAAI;iBACjB,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,sFAAsF;QACtF,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACjE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAA;YAC5E,KAAK,GAAG;gBACN,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACrD,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;gBAChC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAA;QACH,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,KAAK,GAA+B,SAAS,CAAA;IACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACxE,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,sDAAsD;QACtD,MAAM,YAAY,GAAG,IAAA,wBAAgB,EAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;QACrE,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,GAAG;gBACN,OAAO,EAAE,YAAY,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;gBAC/C,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,UAAU,EAAE,YAAY,CAAC,cAAc;gBACvC,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,eAAe,EAAE,YAAY,CAAC,YAAY;aAC3C,CAAA;QACH,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,IAAI,SAAS,GAAmC,SAAS,CAAA;IACzD,MAAM,aAAa,GAAG,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACvE,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,gBAAgB,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACxE,MAAM,kBAAkB,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAC5E,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAA;QACtC,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAA;QAC1C,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,gBAAgB,GAAa,EAAE,CAAA;YACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,cAAc,CAAA;YACnC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO;gBAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;YACzE,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnF,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAChD,CAAC;YACD,SAAS,GAAG;gBACV,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;gBAChF,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;gBACxF,gBAAgB;gBAChB,GAAG,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI;aACpD,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAA;IAClC,OAAO;QACL,IAAI,EAAE;YACJ,UAAU,EAAE,IAAA,kCAAgB,EAAC,OAAO,CAAC,QAAQ,CAAC;YAC9C,aAAa,EAAE,IAAA,+BAAa,EAAC,OAAO,CAAC,QAAQ,CAAC;YAC9C,SAAS,EAAE,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxD,aAAa,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC,QAAQ,CAAC;YACvD,YAAY,EAAE,IAAA,oCAAkB,EAAC,OAAO,CAAC,QAAQ,CAAC;YAClD,YAAY,EAAE,IAAA,kCAAgB,EAAC,OAAO,CAAC,QAAQ,CAAC;YAChD,eAAe,EAAE,IAAA,qCAAmB,EAAC,OAAO,CAAC,QAAQ,CAAC;SACvD;QACD,OAAO,EAAE;YACP,iBAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB;YAC9C,aAAa,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc;YAC3C,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI;YAC9B,aAAa,EAAE,EAAE,CAAC,UAAU,CAAC,iBAAiB,IAAI,IAAI;SACvD;QACD,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK;QACL,KAAK;QACL,SAAS;KACV,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,QAA6B,EAC7B,OAAsB;IAEtB,OAAO,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CACzC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC;QAC3E,CAAC,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,UAAU,CAAC,CAC/F,IAAI,EAAE,CAAA;AACT,CAAC;AAwBD,SAAgB,aAAa,CAC3B,QAAyB,EACzB,KAAgB,EAChB,QAA6B;IAE7B,MAAM,WAAW,GAAG,qBAAa,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,aAAa,GAA2B,EAAE,CAAA;IAChD,MAAM,aAAa,GAA2B,EAAE,CAAA;IAChD,MAAM,iBAAiB,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;IAClG,MAAM,iBAAiB,GAAmD,EAAE,CAAA;IAE5E,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QACpC,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QACzD,MAAM,WAAW,GAAG,IAAA,8BAAiB,EAAC,OAAO,EAAE,OAAO,EAAE,kCAAoB,EAAE,WAAW,CAAC,CAAA;QAE1F,sBAAsB;QACtB,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;YAC1C,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YAChE,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC3B,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YAClE,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAA;QAC3B,IAAI,CAAC,GAAG,GAAG;YAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAA;aACtC,IAAI,CAAC,GAAG,GAAG;YAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAA;aAC3C,IAAI,CAAC,GAAG,GAAG;YAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAA;aAC3C,IAAI,CAAC,GAAG,GAAG;YAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAA;;YAC3C,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAA;QAEnC,mBAAmB;QACnB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAA;QAC5B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;YAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;QAC1E,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,WAAW,CAAC,KAAK,CAAA;QAC/C,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAA;QAE9B,OAAO;YACL,GAAG,OAAO;YACV,gBAAgB,EAAE,WAAW;SAC9B,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,iBAAiB,GAAmD,EAAE,CAAA;IAC5E,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5D,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAA;IAC5E,CAAC;IAED,OAAO;QACL,MAAM;QACN,WAAW,EAAE,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE;KACpF,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,MAAuB;IACxD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtB,SAAS,EAAE,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,EAAE;QACxD,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,aAAa,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;QACpC,IAAI,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI;QAC7B,WAAW,EAAE,CAAC,CAAC,gBAAgB,CAAC,WAAW;QAC3C,KAAK,EAAE,CAAC,CAAC,gBAAgB,CAAC,KAAK;QAC/B,OAAO,EAAE,CAAC,CAAC,gBAAgB,CAAC,OAAO;QACnC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CAAA;AACL,CAAC"}

package/dist/score/types.d.ts

@@ -0,0 +1,160 @@
+/**
+ * Confidence Scoring Types
+ *
+ * Per-finding continuous confidence scoring (0.0–1.0) that replaces
+ * the tier-based routing system. Each finding gets a numeric score
+ * computed from baseConfidence + sum(adjustments), and routing
+ * decisions use score thresholds instead of tier membership.
+ *
+ * The adjustment system is extensible for the future Context Engine
+ * (taint, route, framework data).
+ */
+import type { Vulnerability } from '../shared/types';
+/**
+ * A single adjustment applied to a finding's confidence score.
+ * Records what changed the score, by how much, and why.
+ */
+export interface ConfidenceAdjustment {
+    /** Which adjustment rule produced this */
+    factor: string;
+    /** Numeric change to score (positive = more confident, negative = less) */
+    delta: number;
+    /** Human-readable explanation */
+    reason: string;
+    /** Origin of this adjustment */
+    source: 'file_context' | 'auto_dismiss' | 'taint' | 'route' | 'framework' | 'detector';
+}
+/**
+ * Full computation result for a single finding's confidence score.
+ */
+export interface ConfidenceComputation {
+    /** Final clamped score (0.0–1.0) */
+    score: number;
+    /** Base confidence from the detector */
+    base: number;
+    /** All adjustments applied */
+    adjustments: ConfidenceAdjustment[];
+    /** Routing decision based on score thresholds */
+    routing: 'surface' | 'validate' | 'suppress';
+}
+/**
+ * A vulnerability enriched with confidence scoring data.
+ * Extends the base Vulnerability with computed confidence information.
+ */
+export interface ScoredFinding extends Vulnerability {
+    /** Confidence computation result */
+    confidence_score: ConfidenceComputation;
+}
+/**
+ * Score thresholds for each scan depth level.
+ * Determines how findings are routed based on their confidence score.
+ */
+export interface DepthConfig {
+    /** Minimum score to surface directly without AI validation */
+    surfaceThreshold: number;
+    /** Minimum score to send to AI validation (below this = suppress) */
+    validateThreshold: number;
+    /** Whether AI validation is available at this depth */
+    aiEnabled: boolean;
+}
+/**
+ * Structured log entry for confidence scoring decisions.
+ * Used for debugging, tuning, and audit trails.
+ */
+export interface ConfidenceLog {
+    /** Finding identifier (filePath:lineNumber:category) */
+    findingId: string;
+    /** Vulnerability category */
+    category: string;
+    /** Detector group that produced the finding */
+    detectorGroup: string;
+    /** Base confidence from detector */
+    base: number;
+    /** All adjustments applied */
+    adjustments: ConfidenceAdjustment[];
+    /** Final computed score */
+    final: number;
+    /** Routing decision */
+    routing: 'surface' | 'validate' | 'suppress';
+    /** File path */
+    filePath: string;
+    /** Severity */
+    severity: string;
+}
+/**
+ * Context available to adjustment rules for evaluating findings.
+ *
+ * Starts minimal (file classification + basic project info).
+ * When Context Engine lands, add optional taint?, route?, framework?
+ * fields — existing rules ignore them; new rules check for presence.
+ */
+export interface AdjustmentContext {
+    /** File-level classification */
+    file: {
+        isTestFile: boolean;
+        isExampleFile: boolean;
+        isDocFile: boolean;
+        isScannerCode: boolean;
+        isToolingDir: boolean;
+        isServerOnly: boolean;
+        isClientBundled: boolean;
+    };
+    /** Project-level context */
+    project: {
+        hasAuthMiddleware: boolean;
+        hasTypeScript: boolean;
+        orm: string | null;
+        validationLib: string | null;
+    };
+    /** The raw line content of the finding */
+    lineContent: string;
+    /** The file path of the finding */
+    filePath: string;
+    taint?: {
+        confirmed: boolean;
+        sources: string[];
+        sinkType: string | null;
+        sanitised: boolean;
+        confidence: 'high' | 'medium' | 'low' | null;
+    };
+    route?: {
+        hasAuth: boolean;
+        isPublic: boolean;
+        middleware: string[];
+        methods: string[];
+        hasRateLimiting: boolean;
+    };
+    framework?: {
+        /** A safe-by-design pattern matches this finding's line */
+        safePatternMatch: {
+            id: string;
+            reason: string;
+        } | null;
+        /** An unsafe-despite-framework pattern matches this finding's line */
+        unsafePatternMatch: {
+            id: string;
+            reason: string;
+        } | null;
+        /** Which frameworks are active in the project */
+        activeFrameworks: string[];
+        /** ORM in use */
+        orm: string | null;
+    };
+}
+/**
+ * A single adjustment rule that can modify a finding's confidence score.
+ * Rules are evaluated in order; all matching rules contribute their delta.
+ */
+export interface AdjustmentRule {
+    /** Unique name for this rule */
+    name: string;
+    /** Origin category */
+    source: ConfidenceAdjustment['source'];
+    /** Whether this rule applies to the given finding + context */
+    applies: (finding: Vulnerability, context: AdjustmentContext) => boolean;
+    /** Score delta when rule applies (negative = less confident) */
+    delta: number;
+    /** Human-readable reason */
+    reason: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/score/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/score/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAa,MAAM,iBAAiB,CAAA;AAM/D;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAA;IACb,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,gCAAgC;IAChC,MAAM,EAAE,cAAc,GAAG,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,CAAA;CACvF;AAMD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAA;IACZ,8BAA8B;IAC9B,WAAW,EAAE,oBAAoB,EAAE,CAAA;IACnC,iDAAiD;IACjD,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;CAC7C;AAMD;;;GAGG;AACH,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,oCAAoC;IACpC,gBAAgB,EAAE,qBAAqB,CAAA;CACxC;AAMD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,8DAA8D;IAC9D,gBAAgB,EAAE,MAAM,CAAA;IACxB,qEAAqE;IACrE,iBAAiB,EAAE,MAAM,CAAA;IACzB,uDAAuD;IACvD,SAAS,EAAE,OAAO,CAAA;CACnB;AAMD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAA;IACrB,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,8BAA8B;IAC9B,WAAW,EAAE,oBAAoB,EAAE,CAAA;IACnC,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,uBAAuB;IACvB,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;IAC5C,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe;IACf,QAAQ,EAAE,MAAM,CAAA;CACjB;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,gCAAgC;IAChC,IAAI,EAAE;QACJ,UAAU,EAAE,OAAO,CAAA;QACnB,aAAa,EAAE,OAAO,CAAA;QACtB,SAAS,EAAE,OAAO,CAAA;QAClB,aAAa,EAAE,OAAO,CAAA;QACtB,YAAY,EAAE,OAAO,CAAA;QACrB,YAAY,EAAE,OAAO,CAAA;QACrB,eAAe,EAAE,OAAO,CAAA;KACzB,CAAA;IACD,4BAA4B;IAC5B,OAAO,EAAE;QACP,iBAAiB,EAAE,OAAO,CAAA;QAC1B,aAAa,EAAE,OAAO,CAAA;QACtB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;QAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAC7B,CAAA;IACD,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAA;IACnB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAA;IAGhB,KAAK,CAAC,EAAE;QACN,SAAS,EAAE,OAAO,CAAA;QAClB,OAAO,EAAE,MAAM,EAAE,CAAA;QACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;QACvB,SAAS,EAAE,OAAO,CAAA;QAClB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAA;KAC7C,CAAA;IACD,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,OAAO,CAAA;QAChB,QAAQ,EAAE,OAAO,CAAA;QACjB,UAAU,EAAE,MAAM,EAAE,CAAA;QACpB,OAAO,EAAE,MAAM,EAAE,CAAA;QACjB,eAAe,EAAE,OAAO,CAAA;KACzB,CAAA;IACD,SAAS,CAAC,EAAE;QACV,2DAA2D;QAC3D,gBAAgB,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;QACvD,sEAAsE;QACtE,kBAAkB,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;QACzD,iDAAiD;QACjD,gBAAgB,EAAE,MAAM,EAAE,CAAA;QAC1B,iBAAiB;QACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KACnB,CAAA;CACF;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,sBAAsB;IACtB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IACtC,+DAA+D;IAC/D,OAAO,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAA;IACxE,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAA;IACb,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAA;CACf"}

package/dist/score/types.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Confidence Scoring Types
+ *
+ * Per-finding continuous confidence scoring (0.0–1.0) that replaces
+ * the tier-based routing system. Each finding gets a numeric score
+ * computed from baseConfidence + sum(adjustments), and routing
+ * decisions use score thresholds instead of tier membership.
+ *
+ * The adjustment system is extensible for the future Context Engine
+ * (taint, route, framework data).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/score/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/score/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG"}

package/dist/shared/ai-context/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * AI Context Module
+ * Exports for AI context management functionality
+ */
+export { AIContextManager, AI_CONTEXT_FILE, AI_CONTEXT_PATH, OCULUM_DIR, type AIContextManagerOptions, type SaveContextResult, type LoadContextResult, type ClearContextResult, } from './manager';
+//# sourceMappingURL=index.d.ts.map

package/dist/shared/ai-context/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/ai-context/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,UAAU,EACV,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,WAAW,CAAA"}

package/dist/shared/ai-context/index.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * AI Context Module
+ * Exports for AI context management functionality
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OCULUM_DIR = exports.AI_CONTEXT_PATH = exports.AI_CONTEXT_FILE = exports.AIContextManager = void 0;
+var manager_1 = require("./manager");
+Object.defineProperty(exports, "AIContextManager", { enumerable: true, get: function () { return manager_1.AIContextManager; } });
+Object.defineProperty(exports, "AI_CONTEXT_FILE", { enumerable: true, get: function () { return manager_1.AI_CONTEXT_FILE; } });
+Object.defineProperty(exports, "AI_CONTEXT_PATH", { enumerable: true, get: function () { return manager_1.AI_CONTEXT_PATH; } });
+Object.defineProperty(exports, "OCULUM_DIR", { enumerable: true, get: function () { return manager_1.OCULUM_DIR; } });
+//# sourceMappingURL=index.js.map

package/dist/shared/ai-context/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/shared/ai-context/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,qCASkB;AARhB,2GAAA,gBAAgB,OAAA;AAChB,0GAAA,eAAe,OAAA;AACf,0GAAA,eAAe,OAAA;AACf,qGAAA,UAAU,OAAA"}