@oculum/scanner 1.0.12 → 1.0.13

package/dist/validate/request-builder.js

@@ -0,0 +1,346 @@
+"use strict";
+/**
+ * Request Builders for AI Validation
+ *
+ * Functions for building validation requests with full or scoped file context.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildHighContextValidationRequest = buildHighContextValidationRequest;
+exports.buildMultiFileValidationRequest = buildMultiFileValidationRequest;
+exports.buildFileTaintSummary = buildFileTaintSummary;
+exports.buildFindingTaintAnnotation = buildFindingTaintAnnotation;
+exports.buildFindingRouteAnnotation = buildFindingRouteAnnotation;
+exports.buildFileRouteSummary = buildFileRouteSummary;
+exports.buildCrossFileTaintAnnotation = buildCrossFileTaintAnnotation;
+exports.buildFindingFrameworkAnnotation = buildFindingFrameworkAnnotation;
+const project_context_1 = require("../model/project-context");
+const utils_1 = require("../model/route-discovery/utils");
+const path_helpers_1 = require("./utils/path-helpers");
+const context_extractor_1 = require("./utils/context-extractor");
+// ============================================================================
+// Single-File Request Builder
+// ============================================================================
+/**
+ * Build a high-context validation request with full or scoped file content
+ */
+function buildHighContextValidationRequest(file, findings, projectContext, options, fileTaintAnalyses, routeMap, crossFileTaintPaths, frameworkAnalyses) {
+    const mode = options?.contextMode ?? 'scoped';
+    // Get file content (full or scoped)
+    const { numberedContent, contextNote } = getFileContent(file, findings, mode, options?.extractionConfig);
+    // Build file-level taint summary
+    const taintSummary = fileTaintAnalyses ? buildFileTaintSummary(file.path, fileTaintAnalyses) : '';
+    // Build file-level route summary
+    const routeSummary = routeMap ? buildFileRouteSummary(file.path, routeMap) : '';
+    // Build candidate findings list with taint, route, and framework annotations
+    const candidatesText = findings.map((f, idx) => {
+        const taintAnnotation = fileTaintAnalyses
+            ? buildFindingTaintAnnotation(f, file.path, fileTaintAnalyses)
+            : '';
+        const crossFileAnnotation = crossFileTaintPaths
+            ? buildCrossFileTaintAnnotation(f, file.path, crossFileTaintPaths)
+            : '';
+        const routeAnnotation = routeMap
+            ? buildFindingRouteAnnotation(f, file.path, routeMap)
+            : '';
+        const frameworkAnnotation = frameworkAnalyses
+            ? buildFindingFrameworkAnnotation(f, file.path, frameworkAnalyses)
+            : '';
+        return `### Candidate ${idx}
+- **Rule**: ${f.title}
+- **Category**: ${f.category}
+- **Original Severity**: ${f.severity}
+- **Line**: ${f.lineNumber}
+- **Detection Layer**: ${f.layer}
+- **Description**: ${f.description}
+- **Flagged Code**: \`${f.lineContent.trim()}\`${taintAnnotation}${crossFileAnnotation}${routeAnnotation}${frameworkAnnotation}`;
+    }).join('\n\n');
+    // Get file-specific context
+    const fileContext = (0, project_context_1.getFileValidationContext)(file, projectContext);
+    return `## Project Context
+${projectContext.summary}
+
+${fileContext}
+${taintSummary}${routeSummary}
+## Full File Content${contextNote}
+\`\`\`${file.language || (0, path_helpers_1.getLanguageFromPath)(file.path)}
+${numberedContent}
+\`\`\`
+
+## Candidate Findings to Validate (${findings.length} total)
+
+${candidatesText}
+
+---
+
+Please validate each candidate finding. Return a JSON array with your decision for each.
+Remember: Be AGGRESSIVE in rejecting false positives. Use the full file context and project architecture to make informed decisions.`;
+}
+// ============================================================================
+// Multi-File Request Builder (Phase 2 Optimization)
+// ============================================================================
+/**
+ * Build a multi-file validation request (Phase 2 optimization)
+ * Batches multiple files into a single API call to reduce overhead
+ */
+function buildMultiFileValidationRequest(fileDataList, projectContext, options, fileTaintAnalyses, routeMap, crossFileTaintPaths, frameworkAnalyses) {
+    const mode = options?.contextMode ?? 'scoped';
+    const filesContent = fileDataList.map(({ file, findings }, fileIndex) => {
+        // Get file content (full or scoped)
+        const { numberedContent, contextNote } = getFileContent(file, findings, mode, options?.extractionConfig);
+        // Build file-level taint summary
+        const taintSummary = fileTaintAnalyses ? buildFileTaintSummary(file.path, fileTaintAnalyses) : '';
+        // Build file-level route summary
+        const routeSummary = routeMap ? buildFileRouteSummary(file.path, routeMap) : '';
+        // Build candidate findings list with file-specific indices, taint, route, and framework annotations
+        const candidatesText = findings.map((f, idx) => {
+            const taintAnnotation = fileTaintAnalyses
+                ? buildFindingTaintAnnotation(f, file.path, fileTaintAnalyses)
+                : '';
+            const crossFileAnnotation = crossFileTaintPaths
+                ? buildCrossFileTaintAnnotation(f, file.path, crossFileTaintPaths)
+                : '';
+            const routeAnnotation = routeMap
+                ? buildFindingRouteAnnotation(f, file.path, routeMap)
+                : '';
+            const frameworkAnnotation = frameworkAnalyses
+                ? buildFindingFrameworkAnnotation(f, file.path, frameworkAnalyses)
+                : '';
+            return `### Candidate ${idx}
+- **Rule**: ${f.title}
+- **Category**: ${f.category}
+- **Original Severity**: ${f.severity}
+- **Line**: ${f.lineNumber}
+- **Detection Layer**: ${f.layer}
+- **Description**: ${f.description}
+- **Flagged Code**: \`${f.lineContent.trim()}\`${taintAnnotation}${crossFileAnnotation}${routeAnnotation}${frameworkAnnotation}`;
+        }).join('\n\n');
+        // Get file-specific context
+        const fileContext = (0, project_context_1.getFileValidationContext)(file, projectContext);
+        return `
+================================================================================
+FILE ${fileIndex + 1}: ${file.path}
+================================================================================
+
+${fileContext}
+${taintSummary}${routeSummary}
+### Full File Content${contextNote}
+\`\`\`${file.language || (0, path_helpers_1.getLanguageFromPath)(file.path)}
+${numberedContent}
+\`\`\`
+
+### Candidate Findings to Validate (${findings.length} total)
+
+${candidatesText}`;
+    }).join('\n\n');
+    return `## Project Context
+${projectContext.summary}
+
+${filesContent}
+
+---
+
+## Response Format
+
+For EACH file, provide a JSON object with the file path and validation results.
+Return a JSON array where each element has:
+- "file": the file path (e.g., "${fileDataList[0]?.file.path || 'path/to/file.ts'}")
+- "validations": array of validation results for that file's candidates
+
+Example response format:
+\`\`\`json
+[
+  {
+    "file": "src/auth.ts",
+    "validations": [
+      { "index": 0, "keep": true, "adjustedSeverity": "medium", "notes": "Protected by middleware" },
+      { "index": 1, "keep": false }
+    ]
+  },
+  {
+    "file": "src/api.ts",
+    "validations": [
+      { "index": 0, "keep": true, "notes": "User input flows to SQL query" }
+    ]
+  }
+]
+\`\`\`
+
+Remember: Be AGGRESSIVE in rejecting false positives. Use the full file context and project architecture to make informed decisions.`;
+}
+// ============================================================================
+// Annotation Helpers
+// ============================================================================
+/**
+ * Build a file-level taint summary for the AI prompt.
+ * Returns empty string if no taint analysis exists for the file.
+ */
+function buildFileTaintSummary(filePath, fileTaintAnalyses) {
+    const analysis = fileTaintAnalyses.get(filePath);
+    if (!analysis || analysis.sources.length === 0)
+        return '';
+    const sourceTypes = [...new Set(analysis.sources.map(s => s.sourceType))].join(', ');
+    const totalPaths = analysis.taintPaths.length;
+    const unsanitised = analysis.taintPaths.filter(p => !p.sanitised).length;
+    const sanitiserNames = [...new Set(analysis.sanitisers.map(s => s.name))];
+    const lines = [
+        `### Data Flow Analysis`,
+        `- User input sources: ${sourceTypes}`,
+        `- Taint paths: ${totalPaths} (${unsanitised} unsanitised)`,
+    ];
+    if (sanitiserNames.length > 0) {
+        lines.push(`- Sanitisers detected: ${sanitiserNames.join(', ')}`);
+    }
+    return lines.join('\n') + '\n';
+}
+/**
+ * Build a per-finding taint annotation for the AI prompt.
+ * Returns a string to append after the "Flagged Code" line.
+ */
+function buildFindingTaintAnnotation(finding, filePath, fileTaintAnalyses) {
+    const analysis = fileTaintAnalyses.get(filePath);
+    if (!analysis)
+        return '';
+    // Check if any taint path has a sink at the finding's line number
+    const matchingPaths = analysis.taintPaths.filter(tp => tp.sink.line === finding.lineNumber);
+    if (matchingPaths.length > 0) {
+        // Pick the best path (unsanitised first, then highest confidence)
+        const bestPath = matchingPaths.find(p => !p.sanitised) ?? matchingPaths[0];
+        const chainStr = bestPath.chain
+            .map(v => `${v.name}(L${v.taintedAt})`)
+            .join(' → ');
+        const fullChain = chainStr
+            ? `${bestPath.source.variable}(L${bestPath.source.line}) → ${chainStr} → sink(L${bestPath.sink.line})`
+            : `${bestPath.source.variable}(L${bestPath.source.line}) → sink(L${bestPath.sink.line})`;
+        const lines = [
+            `\n- **Taint Analysis**: User input reaches this sink`,
+            `  - Source: \`${bestPath.source.expression}\` (${bestPath.source.sourceType}, L${bestPath.source.line})`,
+            `  - Chain: ${fullChain}`,
+            `  - Sink type: ${bestPath.sink.sinkType}`,
+            `  - Sanitised: ${bestPath.sanitised ? 'Yes' : 'No'}`,
+            `  - Confidence: ${bestPath.confidence}`,
+        ];
+        return lines.join('\n');
+    }
+    // File has taint analysis with sources but no path reaches this finding's line
+    if (analysis.sources.length > 0) {
+        return '\n- **Taint Analysis**: No user-input data flow reaches this line';
+    }
+    return '';
+}
+// ============================================================================
+// Route Annotation Helpers
+// ============================================================================
+/**
+ * Build a per-finding route annotation for the AI prompt.
+ * Returns a string to append after taint annotations.
+ */
+function buildFindingRouteAnnotation(finding, filePath, routeMap) {
+    const fileRoutes = routeMap.fileToRoutes.get(filePath);
+    if (!fileRoutes || fileRoutes.length === 0)
+        return '';
+    // Find the closest route to the finding's line
+    const route = (0, utils_1.findClosestRoute)(fileRoutes, finding.lineNumber);
+    if (!route)
+        return '';
+    const framework = route.framework.replace(/_/g, ' ');
+    const methods = route.methods.join(', ');
+    const authStr = route.authMiddleware.length > 0
+        ? route.authMiddleware.join(', ')
+        : 'NONE';
+    const rateLimitStr = route.rateLimiting ? 'Yes' : 'NONE';
+    const lines = [
+        `\n- **Route Context:**`,
+        `  - Handler: ${framework} ${methods} \`${route.path}\``,
+        `  - Auth middleware: ${authStr}`,
+        `  - Rate limiting: ${rateLimitStr}`,
+    ];
+    if (route.isPublic) {
+        lines.push(`  - Public endpoint: Yes`);
+    }
+    return lines.join('\n');
+}
+/**
+ * Build a file-level route summary for the AI prompt.
+ * Returns empty string if no routes exist for the file.
+ */
+function buildFileRouteSummary(filePath, routeMap) {
+    const fileRoutes = routeMap.fileToRoutes.get(filePath);
+    if (!fileRoutes || fileRoutes.length === 0)
+        return '';
+    const routeDescriptions = fileRoutes.map(r => {
+        const methods = r.methods.join('|');
+        const auth = r.authMiddleware.length > 0 ? ` [auth: ${r.authMiddleware.join(', ')}]` : ' [no auth]';
+        const rateLimit = r.rateLimiting ? ' [rate-limited]' : '';
+        const pub = r.isPublic ? ' [public]' : '';
+        return `  - ${methods} \`${r.path}\` (L${r.handlerLine})${auth}${rateLimit}${pub}`;
+    });
+    return `### Route Map\n${routeDescriptions.join('\n')}\n`;
+}
+// ============================================================================
+// Cross-File Taint Annotation Helpers
+// ============================================================================
+/**
+ * Build a per-finding cross-file taint annotation for the AI prompt.
+ * Appended after intra-file taint annotations when cross-file paths exist.
+ */
+function buildCrossFileTaintAnnotation(finding, filePath, crossFileTaintPaths) {
+    // Check if any cross-file taint path has a sink at the finding's line
+    const matchingPaths = crossFileTaintPaths.filter(cfp => (cfp.sinkFile === filePath && cfp.sink.line === finding.lineNumber) ||
+        (cfp.sourceFile === filePath && cfp.importLink.callLine === finding.lineNumber));
+    if (matchingPaths.length === 0)
+        return '';
+    const bestPath = matchingPaths.find(p => !p.sanitised) ?? matchingPaths[0];
+    const lines = [
+        `\n- **Cross-File Taint**: User input crosses file boundary`,
+        `  - Source: \`${bestPath.source.expression}\` in \`${bestPath.sourceFile}\` (L${bestPath.source.line})`,
+        `  - Via: \`${bestPath.importLink.symbolName}()\` imported from \`${bestPath.importLink.toFile}\``,
+        `  - Sink: ${bestPath.sink.sinkType} in \`${bestPath.sinkFile}\` (L${bestPath.sink.line})`,
+        `  - Sanitised: ${bestPath.sanitised ? 'Yes' : 'No'}`,
+    ];
+    return lines.join('\n');
+}
+// ============================================================================
+// Framework Annotation Helpers
+// ============================================================================
+/**
+ * Build a per-finding framework annotation for the AI prompt.
+ * Returns a string to append after route annotations.
+ */
+function buildFindingFrameworkAnnotation(finding, filePath, frameworkAnalyses) {
+    const analysis = frameworkAnalyses.get(filePath);
+    if (!analysis)
+        return '';
+    const safePatterns = analysis.safeLines.get(finding.lineNumber);
+    const unsafePatterns = analysis.unsafeLines.get(finding.lineNumber);
+    if (!safePatterns?.length && !unsafePatterns?.length)
+        return '';
+    const lines = [];
+    if (safePatterns) {
+        for (const pattern of safePatterns) {
+            lines.push(`\n- **Framework Context**: ${pattern.reason}`);
+        }
+    }
+    if (unsafePatterns) {
+        for (const pattern of unsafePatterns) {
+            lines.push(`\n- **Framework Context**: ${pattern.reason}`);
+        }
+    }
+    return lines.join('');
+}
+function getFileContent(file, findings, mode, extractionConfig) {
+    if (mode === 'full') {
+        const numberedContent = file.content
+            .split('\n')
+            .map((line, i) => `${String(i + 1).padStart(4, ' ')} | ${line}`)
+            .join('\n');
+        return { numberedContent, contextNote: '' };
+    }
+    // Scoped mode: extract relevant regions
+    const findingLineNumbers = findings.map(f => f.lineNumber);
+    const extracted = (0, context_extractor_1.extractRelevantContext)(file.content, findingLineNumbers, extractionConfig);
+    const contextNote = extracted.isFullFile
+        ? ''
+        : ` (Showing ${extracted.linesSent} of ${extracted.totalLines} lines — relevant regions around findings)`;
+    return { numberedContent: extracted.content, contextNote };
+}
+//# sourceMappingURL=request-builder.js.map

package/dist/validate/request-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-builder.js","sourceRoot":"","sources":["../../src/validate/request-builder.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAgCH,8EAkEC;AAUD,0EAmGC;AAUD,sDAsBC;AAMD,kEAwCC;AAUD,kEA+BC;AAMD,sDAgBC;AAUD,sEAwBC;AAUD,0EA0BC;AA9ZD,8DAAmE;AAKnE,0DAAiE;AACjE,uDAA0D;AAC1D,iEAAkE;AAclE,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,iCAAiC,CAC/C,IAAc,EACd,QAAyB,EACzB,cAA8B,EAC9B,OAA+B,EAC/B,iBAAkD,EAClD,QAAmB,EACnB,mBAA0C,EAC1C,iBAAsD;IAEtD,MAAM,IAAI,GAAG,OAAO,EAAE,WAAW,IAAI,QAAQ,CAAA;IAE7C,oCAAoC;IACpC,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAA;IAExG,iCAAiC;IACjC,MAAM,YAAY,GAAG,iBAAiB,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAEjG,iCAAiC;IACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAE/E,6EAA6E;IAC7E,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,eAAe,GAAG,iBAAiB;YACvC,CAAC,CAAC,2BAA2B,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;YAC9D,CAAC,CAAC,EAAE,CAAA;QACN,MAAM,mBAAmB,GAAG,mBAAmB;YAC7C,CAAC,CAAC,6BAA6B,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAClE,CAAC,CAAC,EAAE,CAAA;QACN,MAAM,eAAe,GAAG,QAAQ;YAC9B,CAAC,CAAC,2BAA2B,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YACrD,CAAC,CAAC,EAAE,CAAA;QACN,MAAM,mBAAmB,GAAG,iBAAiB;YAC3C,CAAC,CAAC,+BAA+B,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;YAClE,CAAC,CAAC,EAAE,CAAA;QACN,OAAO,iBAAiB,GAAG;cACjB,CAAC,CAAC,KAAK;kBACH,CAAC,CAAC,QAAQ;2BACD,CAAC,CAAC,QAAQ;cACvB,CAAC,CAAC,UAAU;yBACD,CAAC,CAAC,KAAK;qBACX,CAAC,CAAC,WAAW;wBACV,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,eAAe,GAAG,mBAAmB,GAAG,eAAe,GAAG,mBAAmB,EAAE,CAAA;IAC9H,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAEf,4BAA4B;IAC5B,MAAM,WAAW,GAAG,IAAA,0CAAwB,EAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAElE,OAAO;EACP,cAAc,CAAC,OAAO;;EAEtB,WAAW;EACX,YAAY,GAAG,YAAY;sBACP,WAAW;QACzB,IAAI,CAAC,QAAQ,IAAI,IAAA,kCAAmB,EAAC,IAAI,CAAC,IAAI,CAAC;EACrD,eAAe;;;qCAGoB,QAAQ,CAAC,MAAM;;EAElD,cAAc;;;;;qIAKqH,CAAA;AACrI,CAAC;AAED,+EAA+E;AAC/E,oDAAoD;AACpD,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,+BAA+B,CAC7C,YAAkE,EAClE,cAA8B,EAC9B,OAA+B,EAC/B,iBAAkD,EAClD,QAAmB,EACnB,mBAA0C,EAC1C,iBAAsD;IAEtD,MAAM,IAAI,GAAG,OAAO,EAAE,WAAW,IAAI,QAAQ,CAAA;IAE7C,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE;QACtE,oCAAoC;QACpC,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAA;QAExG,iCAAiC;QACjC,MAAM,YAAY,GAAG,iBAAiB,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEjG,iCAAiC;QACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAE/E,oGAAoG;QACpG,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,eAAe,GAAG,iBAAiB;gBACvC,CAAC,CAAC,2BAA2B,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;gBAC9D,CAAC,CAAC,EAAE,CAAA;YACN,MAAM,mBAAmB,GAAG,mBAAmB;gBAC7C,CAAC,CAAC,6BAA6B,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC;gBAClE,CAAC,CAAC,EAAE,CAAA;YACN,MAAM,eAAe,GAAG,QAAQ;gBAC9B,CAAC,CAAC,2BAA2B,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACrD,CAAC,CAAC,EAAE,CAAA;YACN,MAAM,mBAAmB,GAAG,iBAAiB;gBAC3C,CAAC,CAAC,+BAA+B,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;gBAClE,CAAC,CAAC,EAAE,CAAA;YACN,OAAO,iBAAiB,GAAG;cACnB,CAAC,CAAC,KAAK;kBACH,CAAC,CAAC,QAAQ;2BACD,CAAC,CAAC,QAAQ;cACvB,CAAC,CAAC,UAAU;yBACD,CAAC,CAAC,KAAK;qBACX,CAAC,CAAC,WAAW;wBACV,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,eAAe,GAAG,mBAAmB,GAAG,eAAe,GAAG,mBAAmB,EAAE,CAAA;QAC5H,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAEf,4BAA4B;QAC5B,MAAM,WAAW,GAAG,IAAA,0CAAwB,EAAC,IAAI,EAAE,cAAc,CAAC,CAAA;QAElE,OAAO;;OAEJ,SAAS,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI;;;EAGhC,WAAW;EACX,YAAY,GAAG,YAAY;uBACN,WAAW;QAC1B,IAAI,CAAC,QAAQ,IAAI,IAAA,kCAAmB,EAAC,IAAI,CAAC,IAAI,CAAC;EACrD,eAAe;;;sCAGqB,QAAQ,CAAC,MAAM;;EAEnD,cAAc,EAAE,CAAA;IAChB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAEf,OAAO;EACP,cAAc,CAAC,OAAO;;EAEtB,YAAY;;;;;;;;kCAQoB,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,iBAAiB;;;;;;;;;;;;;;;;;;;;;;qIAsBoD,CAAA;AACrI,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,qBAAqB,CACnC,QAAgB,EAChB,iBAAiD;IAEjD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAChD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEzD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpF,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAA;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAA;IACxE,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAEzE,MAAM,KAAK,GAAG;QACZ,wBAAwB;QACxB,yBAAyB,WAAW,EAAE;QACtC,kBAAkB,UAAU,KAAK,WAAW,eAAe;KAC5D,CAAA;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,0BAA0B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAChC,CAAC;AAED;;;GAGG;AACH,SAAgB,2BAA2B,CACzC,OAAsB,EACtB,QAAgB,EAChB,iBAAiD;IAEjD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAA;IAExB,kEAAkE;IAClE,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAC9C,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,CAC1C,CAAA;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,kEAAkE;QAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAA;QAC1E,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK;aAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC;aACtC,IAAI,CAAC,KAAK,CAAC,CAAA;QACd,MAAM,SAAS,GAAG,QAAQ;YACxB,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,QAAQ,YAAY,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG;YACtG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,MAAM,CAAC,IAAI,aAAa,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAA;QAE1F,MAAM,KAAK,GAAG;YACZ,sDAAsD;YACtD,iBAAiB,QAAQ,CAAC,MAAM,CAAC,UAAU,OAAO,QAAQ,CAAC,MAAM,CAAC,UAAU,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG;YACzG,cAAc,SAAS,EAAE;YACzB,kBAAkB,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1C,kBAAkB,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACrD,mBAAmB,QAAQ,CAAC,UAAU,EAAE;SACzC,CAAA;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAED,+EAA+E;IAC/E,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,mEAAmE,CAAA;IAC5E,CAAC;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,2BAA2B,CACzC,OAAsB,EACtB,QAAgB,EAChB,QAAkB;IAElB,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACtD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAErD,+CAA+C;IAC/C,MAAM,KAAK,GAAG,IAAA,wBAAgB,EAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IAErB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAC7C,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,CAAC,CAAC,MAAM,CAAA;IACV,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;IAExD,MAAM,KAAK,GAAG;QACZ,wBAAwB;QACxB,gBAAgB,SAAS,IAAI,OAAO,MAAM,KAAK,CAAC,IAAI,IAAI;QACxD,wBAAwB,OAAO,EAAE;QACjC,sBAAsB,YAAY,EAAE;KACrC,CAAA;IAED,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACxC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CACnC,QAAgB,EAChB,QAAkB;IAElB,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACtD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAErD,MAAM,iBAAiB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAA;QACnG,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAA;QACzD,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAA;QACzC,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,WAAW,IAAI,IAAI,GAAG,SAAS,GAAG,GAAG,EAAE,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,OAAO,kBAAkB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;AAC3D,CAAC;AAED,+EAA+E;AAC/E,sCAAsC;AACtC,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,6BAA6B,CAC3C,OAAsB,EACtB,QAAgB,EAChB,mBAAyC;IAEzC,sEAAsE;IACtE,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAC9C,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC;QACnE,CAAC,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,UAAU,CAAC,CACvF,CAAA;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEzC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAA;IAE1E,MAAM,KAAK,GAAG;QACZ,4DAA4D;QAC5D,iBAAiB,QAAQ,CAAC,MAAM,CAAC,UAAU,WAAW,QAAQ,CAAC,UAAU,QAAQ,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG;QACxG,cAAc,QAAQ,CAAC,UAAU,CAAC,UAAU,wBAAwB,QAAQ,CAAC,UAAU,CAAC,MAAM,IAAI;QAClG,aAAa,QAAQ,CAAC,IAAI,CAAC,QAAQ,SAAS,QAAQ,CAAC,QAAQ,QAAQ,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG;QAC1F,kBAAkB,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;KACtD,CAAA;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,+BAA+B,CAC7C,OAAsB,EACtB,QAAgB,EAChB,iBAAqD;IAErD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAA;IAExB,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAC/D,MAAM,cAAc,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAEnE,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,cAAc,EAAE,MAAM;QAAE,OAAO,EAAE,CAAA;IAE/D,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,8BAA8B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,8BAA8B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACvB,CAAC;AAED,SAAS,cAAc,CACrB,IAAc,EACd,QAAyB,EACzB,IAAuB,EACvB,gBAA4C;IAE5C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO;aACjC,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,EAAE,EAAE,CAAA;IAC7C,CAAC;IAED,wCAAwC;IACxC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IAC1D,MAAM,SAAS,GAAG,IAAA,0CAAsB,EAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAA;IAE5F,MAAM,WAAW,GAAG,SAAS,CAAC,UAAU;QACtC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,aAAa,SAAS,CAAC,SAAS,OAAO,SAAS,CAAC,UAAU,4CAA4C,CAAA;IAE3G,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,CAAA;AAC5D,CAAC"}

package/dist/validate/types.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Type definitions for AI validation module
+ */
+import type { Vulnerability, VulnerabilitySeverity, VulnerabilityCategory } from '../shared/types';
+export interface ValidationStats {
+    /** Total findings processed (input) */
+    totalFindings: number;
+    /** Findings that went through AI validation */
+    validatedFindings: number;
+    /** Findings confirmed as true positives */
+    confirmedFindings: number;
+    /** Findings dismissed as false positives */
+    dismissedFindings: number;
+    /** Findings with severity adjusted down */
+    downgradedFindings: number;
+    /** Findings auto-dismissed before AI (test files, etc.) */
+    autoDismissedFindings: number;
+    /** Estimated input tokens used */
+    estimatedInputTokens: number;
+    /** Estimated output tokens used */
+    estimatedOutputTokens: number;
+    /** Estimated cost in USD (based on Haiku pricing) */
+    estimatedCost: number;
+    /** Number of API calls made */
+    apiCalls: number;
+    /** Cache creation tokens (first write to cache) */
+    cacheCreationTokens: number;
+    /** Cache read tokens (subsequent reads from cache) */
+    cacheReadTokens: number;
+    /** Cache hit rate (0-1) */
+    cacheHitRate: number;
+}
+export interface AIValidationResult {
+    vulnerabilities: Vulnerability[];
+    stats: ValidationStats;
+}
+export interface ValidationResult {
+    index: number;
+    keep: boolean;
+    notes?: string;
+    adjustedSeverity?: VulnerabilitySeverity | null;
+    reason?: string;
+    validationNotes?: string;
+    impact?: string;
+    fixSuggestion?: string;
+}
+export interface AIFinding {
+    lineNumber: number;
+    severity: VulnerabilitySeverity;
+    category: VulnerabilityCategory;
+    title: string;
+    description: string;
+    suggestedFix: string;
+}
+export interface Layer3Context {
+    /** Middleware configuration from project scan */
+    middlewareConfig?: {
+        hasAuthMiddleware: boolean;
+        authType?: string;
+        protectedPaths: string[];
+    };
+    /** Auth helper context */
+    authHelpers?: {
+        hasThrowingHelpers: boolean;
+        summary: string;
+    };
+    /** Additional context string */
+    additionalContext?: string;
+}
+export interface AutoDismissRule {
+    name: string;
+    check: (finding: Vulnerability, fileContent?: string) => boolean;
+    reason: string;
+}
+export interface StatsAccumulator {
+    apiCalls: number;
+    estimatedInputTokens: number;
+    estimatedOutputTokens: number;
+    cacheReadTokens: number;
+    estimatedCost: number;
+    validatedFindings: number;
+    confirmedFindings: number;
+    dismissedFindings: number;
+    downgradedFindings: number;
+}
+export declare function createStatsAccumulator(): StatsAccumulator;
+export declare function createInitialStats(totalFindings: number): ValidationStats;
+//# sourceMappingURL=types.d.ts.map

package/dist/validate/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/validate/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,qBAAqB,EAAE,qBAAqB,EAAoB,MAAM,iBAAiB,CAAA;AAMpH,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,aAAa,EAAE,MAAM,CAAA;IACrB,+CAA+C;IAC/C,iBAAiB,EAAE,MAAM,CAAA;IACzB,2CAA2C;IAC3C,iBAAiB,EAAE,MAAM,CAAA;IACzB,4CAA4C;IAC5C,iBAAiB,EAAE,MAAM,CAAA;IACzB,2CAA2C;IAC3C,kBAAkB,EAAE,MAAM,CAAA;IAC1B,2DAA2D;IAC3D,qBAAqB,EAAE,MAAM,CAAA;IAC7B,kCAAkC;IAClC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,mCAAmC;IACnC,qBAAqB,EAAE,MAAM,CAAA;IAC7B,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAA;IACrB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,mDAAmD;IACnD,mBAAmB,EAAE,MAAM,CAAA;IAC3B,sDAAsD;IACtD,eAAe,EAAE,MAAM,CAAA;IACvB,2BAA2B;IAC3B,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,aAAa,EAAE,CAAA;IAChC,KAAK,EAAE,eAAe,CAAA;CACvB;AAMD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,OAAO,CAAA;IAEb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gBAAgB,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAA;IAE/C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;CACrB;AAMD,MAAM,WAAW,aAAa;IAC5B,iDAAiD;IACjD,gBAAgB,CAAC,EAAE;QACjB,iBAAiB,EAAE,OAAO,CAAA;QAC1B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,EAAE,CAAA;KACzB,CAAA;IACD,0BAA0B;IAC1B,WAAW,CAAC,EAAE;QACZ,kBAAkB,EAAE,OAAO,CAAA;QAC3B,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,gCAAgC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAMD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAA;IAChE,MAAM,EAAE,MAAM,CAAA;CACf;AAMD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED,wBAAgB,sBAAsB,IAAI,gBAAgB,CAYzD;AAED,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,eAAe,CAgBzE"}

package/dist/validate/types.js

@@ -0,0 +1,38 @@
+"use strict";
+/**
+ * Type definitions for AI validation module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createStatsAccumulator = createStatsAccumulator;
+exports.createInitialStats = createInitialStats;
+function createStatsAccumulator() {
+    return {
+        apiCalls: 0,
+        estimatedInputTokens: 0,
+        estimatedOutputTokens: 0,
+        cacheReadTokens: 0,
+        estimatedCost: 0,
+        validatedFindings: 0,
+        confirmedFindings: 0,
+        dismissedFindings: 0,
+        downgradedFindings: 0,
+    };
+}
+function createInitialStats(totalFindings) {
+    return {
+        totalFindings,
+        validatedFindings: 0,
+        confirmedFindings: 0,
+        dismissedFindings: 0,
+        downgradedFindings: 0,
+        autoDismissedFindings: 0,
+        estimatedInputTokens: 0,
+        estimatedOutputTokens: 0,
+        estimatedCost: 0,
+        apiCalls: 0,
+        cacheCreationTokens: 0,
+        cacheReadTokens: 0,
+        cacheHitRate: 0,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/validate/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/validate/types.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAmHH,wDAYC;AAED,gDAgBC;AA9BD,SAAgB,sBAAsB;IACpC,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,oBAAoB,EAAE,CAAC;QACvB,qBAAqB,EAAE,CAAC;QACxB,eAAe,EAAE,CAAC;QAClB,aAAa,EAAE,CAAC;QAChB,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,kBAAkB,EAAE,CAAC;KACtB,CAAA;AACH,CAAC;AAED,SAAgB,kBAAkB,CAAC,aAAqB;IACtD,OAAO;QACL,aAAa;QACb,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,kBAAkB,EAAE,CAAC;QACrB,qBAAqB,EAAE,CAAC;QACxB,oBAAoB,EAAE,CAAC;QACvB,qBAAqB,EAAE,CAAC;QACxB,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,CAAC;QACX,mBAAmB,EAAE,CAAC;QACtB,eAAe,EAAE,CAAC;QAClB,YAAY,EAAE,CAAC;KAChB,CAAA;AACH,CAAC"}

package/dist/validate/utils/context-extractor.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Context Extractor
+ *
+ * Extracts only relevant regions of file content around findings,
+ * reducing token usage by ~40-60% for large files while preserving
+ * imports and sufficient context for AI validation.
+ */
+export interface LineRange {
+    /** 1-based inclusive start line */
+    start: number;
+    /** 1-based inclusive end line */
+    end: number;
+}
+export interface ExtractedContext {
+    /** Formatted content with line numbers and omission markers */
+    content: string;
+    /** Whether the full file was sent (no omissions) */
+    isFullFile: boolean;
+    /** Number of lines included in the output */
+    linesSent: number;
+    /** Total lines in the original file */
+    totalLines: number;
+}
+export interface ExtractionConfig {
+    /** Lines of context around each finding (default: 30) */
+    padding: number;
+    /** Always include first N lines for imports (default: 15) */
+    importLines: number;
+    /** Send full file if merged ranges cover >60% of lines (default: 0.6) */
+    fullFileThreshold: number;
+    /** Files with this many lines or fewer always get full content (default: 100) */
+    smallFileThreshold: number;
+}
+/**
+ * Extract relevant context regions from file content around finding locations.
+ *
+ * Algorithm:
+ * 1. Small files (<=smallFileThreshold lines) -> send full content
+ * 2. Build ranges: imports (1-importLines) + padding around each finding
+ * 3. Merge overlapping/adjacent ranges
+ * 4. If merged coverage > fullFileThreshold of file -> send full content
+ * 5. Format with omission markers between gaps
+ *
+ * @param fileContent - The full file content as a string
+ * @param findingLineNumbers - 1-based line numbers of findings
+ * @param config - Optional extraction configuration overrides
+ * @returns Extracted context with metadata
+ */
+export declare function extractRelevantContext(fileContent: string, findingLineNumbers: number[], config?: Partial<ExtractionConfig>): ExtractedContext;
+/**
+ * Merge overlapping or adjacent line ranges.
+ * Sorts by start line, then merges any ranges that overlap or are adjacent.
+ */
+export declare function mergeRanges(ranges: LineRange[]): LineRange[];
+//# sourceMappingURL=context-extractor.d.ts.map

package/dist/validate/utils/context-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-extractor.d.ts","sourceRoot":"","sources":["../../../src/validate/utils/context-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,SAAS;IACxB,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAA;IACb,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAA;IACf,oDAAoD;IACpD,UAAU,EAAE,OAAO,CAAA;IACnB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAA;IACjB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAA;IACf,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAA;IACnB,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAA;IACzB,iFAAiF;IACjF,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAaD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,EAAE,EAC5B,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GACjC,gBAAgB,CAmElB;AAMD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAqB5D"}