@owasp-aghast/aghast 0.8.0-beta.0

package/dist/types.d.ts

@@ -0,0 +1,321 @@
+/**
+ * Core type definitions for aghast.
+ * Based on SPECIFICATION.md Appendix A.
+ */
+export declare const DEFAULT_MODEL = "haiku";
+export declare const MOCK_MODEL_NAME = "mock";
+export interface TokenUsage {
+    inputTokens: number;
+    outputTokens: number;
+    cacheCreationInputTokens?: number;
+    cacheReadInputTokens?: number;
+    /** OpenCode-only; billed at output rate by the calculator fallback. */
+    reasoningTokens?: number;
+    totalTokens: number;
+    reportedCost?: {
+        amountUsd: number;
+        source: 'claude-agent-sdk' | 'opencode';
+        /**
+         * true when AGHAST_LOCAL_CLAUDE=true — user didn't pay this amount via API.
+         * Populated exclusively by ClaudeCodeProvider; other providers should leave it absent.
+         */
+        coveredBySubscription?: boolean;
+    };
+}
+export interface CheckRegistryEntry {
+    id: string;
+    repositories: string[];
+    excludeRepositories?: string[];
+    enabled?: boolean;
+}
+export interface CheckDefinition {
+    id: string;
+    name: string;
+    instructionsFile?: string;
+    severity?: 'critical' | 'high' | 'medium' | 'low' | 'informational';
+    confidence?: 'high' | 'medium' | 'low';
+    model?: string;
+    checkTarget?: CheckTargetDefinition;
+    applicablePaths?: string[];
+    excludedPaths?: string[];
+}
+export interface SecurityCheck {
+    id: string;
+    name: string;
+    repositories: string[];
+    excludeRepositories?: string[];
+    checkTarget?: CheckTargetDefinition;
+    instructionsFile?: string;
+    applicablePaths?: string[];
+    excludedPaths?: string[];
+    enabled?: boolean;
+    severity?: 'critical' | 'high' | 'medium' | 'low' | 'informational';
+    confidence?: 'high' | 'medium' | 'low';
+    /** AI model override for this specific check. */
+    model?: string;
+    /** Path to the check folder (set during resolution). */
+    checkDir?: string;
+}
+export interface OpenAntFilterConfig {
+    unitTypes?: string[];
+    excludeUnitTypes?: string[];
+    securityClassifications?: string[];
+    reachableOnly?: boolean;
+    entryPointsOnly?: boolean;
+    minConfidence?: number;
+}
+export interface CheckTargetDefinition {
+    type: 'targeted' | 'static' | 'repository';
+    discovery?: 'semgrep' | 'openant' | 'sarif';
+    rules?: string | string[];
+    config?: string;
+    sarifFile?: string;
+    maxTargets?: number;
+    concurrency?: number;
+    /** Cap on issues returned per target; omit for unlimited. See docs/configuration.md. */
+    maxIssuesPerTarget?: number;
+    /** Analysis mode: determines the AI's approach to each target. */
+    analysisMode?: 'custom' | 'false-positive-validation' | 'general-vuln-discovery';
+    openant?: OpenAntFilterConfig;
+    /**
+     * Opt-out for post-discovery diff filtering. Set to `false` to skip the
+     * filter for this check even when a diff source is available at scan time.
+     * When unset (or `true`), filtering is applied automatically whenever a
+     * diff source is present and the discovery supports diff filtering.
+     */
+    diffFilter?: boolean;
+    /**
+     * Git ref to diff against for this check (e.g. 'main', 'HEAD~1').
+     *
+     * Overridden by any runtime diff source. Precedence, highest to lowest:
+     *   1. CLI `--diff-file <path>` (CLI only; no AGHAST_DIFF_FILE env var
+     *      equivalent) — when present, bypasses all ref sources including
+     *      this field; the file is used directly.
+     *   2. CLI `--diff-ref <ref>`
+     *   3. `AGHAST_DIFF_REF` env var
+     *   4. Runtime config `diffRef`
+     *   5. This field (check-level fallback).
+     */
+    diffRef?: string;
+}
+export interface CheckTarget {
+    file: string;
+    startLine: number;
+    endLine: number;
+    message: string;
+    snippet?: string;
+}
+export interface DataFlowStep {
+    file: string;
+    lineNumber: number;
+    label: string;
+}
+export interface SecurityIssue {
+    checkId: string;
+    checkName: string;
+    file: string;
+    startLine: number;
+    endLine: number;
+    description: string;
+    codeSnippet?: string;
+    severity?: string;
+    confidence?: string;
+    recommendation?: string;
+    dataFlow?: DataFlowStep[];
+}
+export interface CheckResponse {
+    issues: AIIssue[];
+    flagged?: boolean;
+    summary?: string;
+    analysisNotes?: string;
+}
+/** Raw issue as returned by the AI (before enrichment). */
+export interface AIIssue {
+    file: string;
+    startLine: number;
+    endLine: number;
+    description: string;
+    dataFlow?: DataFlowStep[];
+}
+export interface CheckExecutionSummary {
+    checkId: string;
+    checkName: string;
+    status: 'PASS' | 'FAIL' | 'FLAG' | 'ERROR';
+    issuesFound: number;
+    executionTime: number;
+    targetsAnalyzed?: number;
+    error?: string;
+    /**
+     * Raw text body of the agent provider's response, included in ERROR results
+     * for debugging. Field name retains "AI" (rather than "Agent") because the
+     * stored content is the LLM's raw text output — same rationale as
+     * AGHAST_MOCK_AI / AGHAST_AI_MODEL: the model and its output are AI/LLM
+     * concerns, the harness around them is the agent.
+     */
+    rawAiResponse?: string;
+    tokenUsage?: TokenUsage;
+}
+export interface ScanResults {
+    scanId: string;
+    timestamp: string;
+    version: string;
+    repository: RepositoryInfo;
+    issues: SecurityIssue[];
+    checks: CheckExecutionSummary[];
+    summary: ScanSummary;
+    executionTime: number;
+    startTime: string;
+    endTime: string;
+    agentProvider: {
+        name: string;
+        models: string[];
+    };
+    tokenUsage?: TokenUsage;
+    metadata?: Record<string, unknown>;
+}
+export interface RepositoryInfo {
+    path: string;
+    remoteUrl?: string;
+    branch?: string;
+    commit?: string;
+    isGitRepository: boolean;
+}
+export interface ScanSummary {
+    totalChecks: number;
+    passedChecks: number;
+    failedChecks: number;
+    flaggedChecks: number;
+    errorChecks: number;
+    totalIssues: number;
+}
+export interface RuntimeBudgetConfig {
+    perScan?: {
+        maxTokens?: number;
+        maxCostUsd?: number;
+    };
+    perPeriod?: {
+        window?: 'day' | 'week' | 'month';
+        maxCostUsd?: number;
+    };
+    thresholds?: {
+        warnAt?: number;
+        abortAt?: number;
+    };
+}
+export interface RuntimePricingConfig {
+    currency?: string;
+    models?: Record<string, {
+        inputPerMillion: number;
+        outputPerMillion: number;
+        cacheReadPerMillion?: number;
+        cacheWritePerMillion?: number;
+    }>;
+}
+export interface RuntimeConfig {
+    agentProvider?: {
+        name?: string;
+        model?: string;
+    };
+    reporting?: {
+        outputDirectory?: string;
+        outputFormat?: string;
+    };
+    logging?: {
+        logFile?: string;
+        logType?: string;
+        level?: string;
+    };
+    genericPrompt?: string;
+    failOnCheckFailure?: boolean;
+    /**
+     * Git ref to diff against. Auto-activates diff filtering on every check
+     * whose discovery supports it, unless the check opts out via diffFilter: false.
+     */
+    diffRef?: string;
+    budget?: RuntimeBudgetConfig;
+    pricing?: RuntimePricingConfig;
+}
+export interface AggregatedReport {
+    timestamp: string;
+    projectsScanned: number;
+    repositories: string[];
+    issues: AggregatedIssue[];
+    checks: AggregatedCheckSummary[];
+    projectSummaries: ProjectSummary[];
+    summary: ScanSummary;
+}
+export interface AggregatedIssue extends SecurityIssue {
+    projectName: string;
+    repositoryUrl?: string;
+}
+export interface AggregatedCheckSummary extends CheckExecutionSummary {
+    projectName: string;
+    timestamp: string;
+    jobUrl?: string;
+    branch?: string;
+    pipelineSource?: string;
+}
+export interface ProjectSummary {
+    projectName: string;
+    totalChecks: number;
+    passedChecks: number;
+    failedChecks: number;
+    errorChecks: number;
+    issuesFound: number;
+    timestamp: string;
+    jobUrl?: string;
+    branch?: string;
+    pipelineSource?: string;
+}
+export interface CheckDetails {
+    id: string;
+    name: string;
+    overview: string;
+    content: string;
+}
+export interface ProviderConfig {
+    apiKey?: string;
+    model?: string;
+    [key: string]: unknown;
+}
+export interface AgentResponse {
+    raw: string;
+    parsed?: CheckResponse;
+    tokenUsage?: TokenUsage;
+}
+/** Describes a single model exposed by a provider's `listModels()`. */
+export interface ProviderModelInfo {
+    /** Model identifier as accepted by the provider (stored in runtime config). */
+    id: string;
+    /** Optional human-readable label shown in selection UIs. */
+    label?: string;
+    /** Optional one-line description shown in selection UIs. */
+    description?: string;
+}
+export interface AgentProvider {
+    initialize(config: ProviderConfig): Promise<void>;
+    executeCheck(instructions: string, repositoryPath: string, logPrefix?: string, options?: {
+        maxTurns?: number;
+    }): Promise<AgentResponse>;
+    validateConfig(): Promise<boolean>;
+    /**
+     * Check that required prerequisites (API keys, binaries, etc.) are available.
+     * Called before initialize() to give early feedback. Throws with a descriptive
+     * error message if a prerequisite is missing.
+     */
+    checkPrerequisites?(): void;
+    getModelName?(): string;
+    setModel?(model: string): void;
+    cleanup?(): Promise<void>;
+    /** Closed list of models this provider accepts. Used by `aghast build-config`. */
+    listModels?(): Promise<readonly ProviderModelInfo[]>;
+}
+/**
+ * Error thrown by agent providers for unrecoverable failures (e.g. 401 auth, rate limits).
+ * When caught by the scan runner, this signals that the entire scan should abort —
+ * no further checks or targets should be attempted.
+ */
+export declare class FatalProviderError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,eAAO,MAAM,aAAa,UAAU,CAAC;AACrC,eAAO,MAAM,eAAe,SAAS,CAAC;AAItC,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,kBAAkB,GAAG,UAAU,CAAC;QACxC;;;WAGG;QACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;KACjC,CAAC;CACH;AAID,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAID,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,eAAe,CAAC;IACpE,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAID,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,eAAe,CAAC;IACpE,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACvC,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAC;IAC3C,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IAC5C,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,YAAY,CAAC,EAAE,QAAQ,GAAG,2BAA2B,GAAG,wBAAwB,CAAC;IACjF,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;CAC3B;AAID,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,2DAA2D;AAC3D,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;CAC3B;AAID,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAID,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,cAAc,CAAC;IAC3B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAChC,OAAO,EAAE,WAAW,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;IACF,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;QAClC,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,UAAU,CAAC,EAAE;QACX,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7I;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,EAAE;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC;AAID,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjC,gBAAgB,EAAE,cAAc,EAAE,CAAC;IACnC,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,EAAE,EAAE,MAAM,CAAC;IACX,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,YAAY,CACV,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9B,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1B,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC;;;;OAIG;IACH,kBAAkB,CAAC,IAAI,IAAI,CAAC;IAC5B,YAAY,CAAC,IAAI,MAAM,CAAC;IACxB,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,kFAAkF;IAClF,UAAU,CAAC,IAAI,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC;CACtD;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B"}

package/dist/types.js

@@ -0,0 +1,19 @@
+/**
+ * Core type definitions for aghast.
+ * Based on SPECIFICATION.md Appendix A.
+ */
+// --- Default Model ---
+export const DEFAULT_MODEL = 'haiku';
+export const MOCK_MODEL_NAME = 'mock';
+/**
+ * Error thrown by agent providers for unrecoverable failures (e.g. 401 auth, rate limits).
+ * When caught by the scan runner, this signals that the entire scan should abort —
+ * no further checks or targets should be attempted.
+ */
+export class FatalProviderError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'FatalProviderError';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wBAAwB;AAExB,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AA2WtC;;;;GAIG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF"}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@owasp-aghast/aghast",
+  "version": "0.8.0-beta.0",
+  "description": "AI Guided Hybrid Application Static Testing",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/owasp-aghast/aghast.git"
+  },
+  "bin": {
+    "aghast": "dist/cli.js"
+  },
+  "files": [
+    "dist/",
+    "config/",
+    "assets/"
+  ],
+  "scripts": {
+    "prepare": "tsc",
+    "build": "tsc",
+    "test": "node --import tsx --test tests/*.test.ts",
+    "test:coverage": "node --experimental-test-coverage --import tsx --test tests/*.test.ts",
+    "test:ci": "node --import tsx --test --test-reporter=spec --test-reporter-destination=stdout --test-reporter=junit --test-reporter-destination=test-results.xml tests/*.test.ts",
+    "test:semgrep": "node --import tsx --test tests/semgrep-integration.itest.ts",
+    "test:openant": "node --import tsx --test tests/openant-integration.itest.ts",
+    "test:opencode": "node --import tsx --test --test-force-exit tests/opencode-integration.itest.ts",
+    "lint": "eslint src/ tests/",
+    "lint:fix": "eslint --fix src/ tests/",
+    "scan": "tsx src/cli.ts scan",
+    "new-check": "tsx src/cli.ts new-check",
+    "build-config": "tsx src/cli.ts build-config"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "AGPL-3.0-or-later",
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "packageManager": "npm@10.9.2",
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^25.5.0",
+    "@types/picomatch": "^4.0.2",
+    "eslint": "^10.0.3",
+    "fast-check": "^4.6.0",
+    "tsx": "^4.21.0",
+    "typescript": "~6.0.2",
+    "typescript-eslint": "^8.57.1"
+  },
+  "dependencies": {
+    "@anthropic-ai/claude-agent-sdk": "^0.3.144",
+    "@opencode-ai/sdk": "^1.4.6",
+    "dotenv": "^17.3.1",
+    "picocolors": "^1.1.1",
+    "picomatch": "^4.0.4"
+  },
+  "overrides": {
+    "minimatch@<10.2.3": ">=10.2.3",
+    "@anthropic-ai/sdk@<0.91.1": ">=0.91.1"
+  }
+}