@shrkcrft/inspector 0.1.0-alpha.2

package/dist/rule-scaffold.js

@@ -0,0 +1,258 @@
+/**
+ * Rule authoring scaffold.
+ *
+ * Pure, deterministic generator that returns a rule scaffold (TS source +
+ * JSON manifest + a markdown explainer) so an agent does not have to
+ * guess the schema fields. Preview-only: this module never writes — the
+ * CLI adapter materialises the preview under `.sharkcraft/fixes/`.
+ *
+ * Hard rules:
+ *   - No mutation of `sharkcraft/rules.ts`.
+ *   - Generated content must reference real, deterministic schema fields.
+ *   - Advisory rules opt out of `verificationCommands` requirements via
+ *     `metadata: { advisory: true }`.
+ */
+export const RULE_SCAFFOLD_SCHEMA = 'sharkcraft.rule-scaffold/v1';
+export var RuleScaffoldKind;
+(function (RuleScaffoldKind) {
+    RuleScaffoldKind["Architecture"] = "architecture";
+    RuleScaffoldKind["Safety"] = "safety";
+    RuleScaffoldKind["Style"] = "style";
+    RuleScaffoldKind["Governance"] = "governance";
+    RuleScaffoldKind["Migration"] = "migration";
+    RuleScaffoldKind["Testing"] = "testing";
+    RuleScaffoldKind["Advisory"] = "advisory";
+})(RuleScaffoldKind || (RuleScaffoldKind = {}));
+const ID_RE = /^[a-z][a-z0-9]*(\.[a-z0-9-]+)+$/;
+function deriveTitle(id) {
+    const tail = id.split('.').slice(-1)[0] ?? id;
+    return tail
+        .split('-')
+        .map((w) => w.charAt(0).toUpperCase() + w.slice(1))
+        .join(' ');
+}
+function defaultsForKind(kind) {
+    switch (kind) {
+        case RuleScaffoldKind.Safety:
+            return {
+                priority: 'critical',
+                tags: ['safety'],
+                appliesWhen: ['generate-code', 'review-code', 'agent-action'],
+                forbiddenActions: ['Bypass the safety guard.'],
+                verification: ['shrk safety audit --deep'],
+                advisory: false,
+            };
+        case RuleScaffoldKind.Architecture:
+            return {
+                priority: 'high',
+                tags: ['architecture', 'boundaries'],
+                appliesWhen: ['generate-code', 'create-feature', 'review-code'],
+                forbiddenActions: ['Cross the declared layer boundary.'],
+                verification: ['shrk check boundaries'],
+                advisory: false,
+            };
+        case RuleScaffoldKind.Style:
+            return {
+                priority: 'medium',
+                tags: ['style'],
+                appliesWhen: ['generate-code', 'review-code'],
+                forbiddenActions: [],
+                verification: ['bun x tsc -p tsconfig.base.json --noEmit'],
+                advisory: false,
+            };
+        case RuleScaffoldKind.Governance:
+            return {
+                priority: 'high',
+                tags: ['governance'],
+                appliesWhen: ['agent-action', 'review-code'],
+                forbiddenActions: ['Skip the governance gate.'],
+                verification: ['shrk doctor', 'shrk safety audit --deep'],
+                advisory: false,
+            };
+        case RuleScaffoldKind.Migration:
+            return {
+                priority: 'medium',
+                tags: ['migration'],
+                appliesWhen: ['generate-code', 'create-feature'],
+                forbiddenActions: ['Land partial migrations without a plan.'],
+                verification: ['shrk audit project-coupling audit --fail-on engine'],
+                advisory: false,
+            };
+        case RuleScaffoldKind.Testing:
+            return {
+                priority: 'high',
+                tags: ['testing'],
+                appliesWhen: ['generate-test', 'create-feature', 'review-code'],
+                forbiddenActions: ['Disable a test instead of fixing the cause.'],
+                verification: ['bun test'],
+                advisory: false,
+            };
+        case RuleScaffoldKind.Advisory:
+        default:
+            return {
+                priority: 'medium',
+                tags: ['advisory'],
+                appliesWhen: ['review-code'],
+                forbiddenActions: [],
+                verification: [],
+                advisory: true,
+            };
+    }
+}
+function tsArrayLiteral(items) {
+    if (items.length === 0)
+        return '[]';
+    return '[\n' + items.map((s) => `      ${JSON.stringify(s)},`).join('\n') + '\n    ]';
+}
+function buildTsBody(input, defaults) {
+    const id = input.id;
+    const title = input.title ?? deriveTitle(id);
+    const priority = input.priority ?? defaults.priority;
+    const rationale = (input.rationale ?? `Document why "${id}" matters in one paragraph.`).trim();
+    const tags = defaults.tags.slice();
+    const appliesWhen = defaults.appliesWhen.slice();
+    const forbidden = (input.forbiddenActions && input.forbiddenActions.length > 0
+        ? input.forbiddenActions
+        : defaults.forbiddenActions).slice();
+    const verification = (input.verificationCommands && input.verificationCommands.length > 0
+        ? input.verificationCommands
+        : defaults.verification).slice();
+    const examples = [];
+    if (input.goodExample) {
+        examples.push(`      { title: 'Good', code: ${JSON.stringify(input.goodExample)}, language: 'typescript' },`);
+    }
+    if (input.badExample) {
+        examples.push(`      { title: 'Bad', code: ${JSON.stringify(input.badExample)}, language: 'typescript' },`);
+    }
+    const examplesBlock = examples.length > 0 ? `\n  examples: [\n${examples.join('\n')}\n  ],` : '';
+    const ownerBlock = input.owner
+        ? `\n  source: { origin: ${JSON.stringify(input.owner)}, loader: 'sharkcraft' },`
+        : '';
+    const advisoryBlock = defaults.advisory ? `\n  metadata: { advisory: true },` : '';
+    const verificationLine = verification.length > 0 ? `\n      verificationCommands: ${tsArrayLiteral(verification)},` : '';
+    const forbiddenLine = forbidden.length > 0 ? `\n      forbiddenActions: ${tsArrayLiteral(forbidden)},` : '';
+    return `import { defineRule } from '@shrkcrft/rules';
+import { KnowledgePriority } from '@shrkcrft/knowledge';
+
+// Generated by \`shrk rules scaffold --id ${id}\`. Preview-only — review,
+// then move into \`sharkcraft/rules.ts\` (or your pack's rules file).
+export const ${idToConst(id)} = defineRule({
+  id: ${JSON.stringify(id)},
+  title: ${JSON.stringify(title)},
+  priority: KnowledgePriority.${capitalize(priority)},
+  scope: ${tsArrayLiteral([id.split('.')[0] ?? 'project'])},
+  tags: ${tsArrayLiteral(tags)},
+  appliesWhen: ${tsArrayLiteral(appliesWhen)},
+  content: ${JSON.stringify(rationale)},${examplesBlock}${ownerBlock}${advisoryBlock}
+  actionHints: {${forbiddenLine}${verificationLine}
+  },
+});
+`;
+}
+function buildJsonManifest(input, defaults) {
+    const obj = {
+        schema: RULE_SCAFFOLD_SCHEMA,
+        id: input.id,
+        title: input.title ?? deriveTitle(input.id),
+        kind: input.kind,
+        priority: input.priority ?? defaults.priority,
+        advisory: defaults.advisory,
+        tags: defaults.tags,
+        appliesWhen: defaults.appliesWhen,
+        rationale: input.rationale ?? '',
+        forbiddenActions: input.forbiddenActions ?? defaults.forbiddenActions,
+        verificationCommands: input.verificationCommands ?? defaults.verification,
+        examples: {
+            good: input.goodExample ?? null,
+            bad: input.badExample ?? null,
+        },
+        owner: input.owner ?? null,
+    };
+    return JSON.stringify(obj, null, 2) + '\n';
+}
+function buildExplainer(input, defaults) {
+    const advisoryNote = defaults.advisory
+        ? '- This rule is **advisory**: `shrk rules doctor` will not require `verificationCommands`.\n'
+        : '- This rule is enforceable: `shrk rules doctor` will require `verificationCommands` and `forbiddenActions`.\n';
+    return `# Rule scaffold — ${input.id}
+
+This is a **preview** generated by \`shrk rules scaffold\`. Nothing has
+been written into \`sharkcraft/rules.ts\`. Move the TypeScript scaffold
+into the right rules file, fill in the rationale and verification
+commands, then run the validations below.
+
+## Next commands
+
+1. Edit the scaffold under \`.sharkcraft/fixes/\` or copy it into
+   \`sharkcraft/rules.ts\`.
+2. \`shrk rules doctor --id ${input.id}\` — checks the new rule for
+   missing actionHints / verificationCommands / forbiddenActions.
+3. \`shrk doctor\` — confirms the workspace still loads cleanly.
+
+## Notes
+
+${advisoryNote}- Kind: \`${input.kind}\`
+- Default tags: ${defaults.tags.map((t) => '`' + t + '`').join(', ') || '_(none)_'}
+- Default appliesWhen: ${defaults.appliesWhen.map((t) => '`' + t + '`').join(', ') || '_(none)_'}
+
+## Owner
+
+${input.owner ? '`' + input.owner + '`' : '_(unset — set with `--owner <name>`)_'}
+`;
+}
+function idToConst(id) {
+    return id
+        .split(/[.\-]/)
+        .map((p, i) => (i === 0 ? p : p.charAt(0).toUpperCase() + p.slice(1)))
+        .join('');
+}
+function capitalize(s) {
+    return s.charAt(0).toUpperCase() + s.slice(1);
+}
+function fileSafeId(id) {
+    return id.replace(/[^a-zA-Z0-9]+/g, '-');
+}
+export function buildRuleScaffold(input) {
+    const warnings = [];
+    if (!ID_RE.test(input.id)) {
+        warnings.push(`id "${input.id}" does not match the recommended pattern <namespace>.<kebab-id>; got "${input.id}".`);
+    }
+    const defaults = defaultsForKind(input.kind);
+    if (!defaults.advisory && (input.verificationCommands?.length ?? 0) === 0 && defaults.verification.length === 0) {
+        warnings.push('Enforceable rules should declare verificationCommands. Default kind suggestion was empty — fill before adopting.');
+    }
+    if (!input.rationale) {
+        warnings.push('No rationale provided; the scaffold contains a placeholder line.');
+    }
+    const safeId = fileSafeId(input.id);
+    const tsScaffold = {
+        path: `.sharkcraft/fixes/rule-${safeId}.preview.ts`,
+        body: buildTsBody(input, defaults),
+        language: 'typescript',
+    };
+    const jsonManifest = {
+        path: `.sharkcraft/fixes/rule-${safeId}.preview.json`,
+        body: buildJsonManifest(input, defaults),
+        language: 'json',
+    };
+    const explainer = {
+        path: `.sharkcraft/fixes/rule-${safeId}.preview.md`,
+        body: buildExplainer(input, defaults),
+        language: 'markdown',
+    };
+    const nextCommands = [
+        `shrk rules doctor --id ${input.id}`,
+        'shrk doctor',
+    ];
+    return {
+        schema: RULE_SCAFFOLD_SCHEMA,
+        generatedAt: new Date().toISOString(),
+        ruleId: input.id,
+        kind: input.kind,
+        tsScaffold,
+        jsonManifest,
+        explainer,
+        warnings,
+        nextCommands,
+    };
+}

package/dist/safety-audit-deep.d.ts

@@ -0,0 +1,38 @@
+import type { ISharkcraftInspection } from './sharkcraft-inspector.js';
+/**
+ * Schema bumped to v2: adds `infoOnlyFindings` so an agent can read
+ * the dev-sig disposition without parsing checks[].
+ */
+export declare const SAFETY_AUDIT_DEEP_SCHEMA = "sharkcraft.safety-audit-deep/v2";
+export interface ISafetyAuditDeepCheck {
+    id: string;
+    severity: 'info' | 'warning' | 'error';
+    message: string;
+    evidence?: string;
+}
+export interface ISafetyAuditDeepReport {
+    schema: typeof SAFETY_AUDIT_DEEP_SCHEMA;
+    generatedAt: string;
+    reportSiteExternalJs: readonly string[];
+    demoDestructiveLines: readonly string[];
+    ciGeneratedWorkflowPermissions: readonly {
+        file: string;
+        permissions: string;
+    }[];
+    /** Packs whose latest signature is a dev signature (subset of valid packs). */
+    devSignedPacks: readonly {
+        packageName: string;
+        packageVersion: string;
+        signedAt?: string;
+    }[];
+    checks: readonly ISafetyAuditDeepCheck[];
+    /**
+     * Count of info-level findings. The verdict (`passed`) ignores
+     * info findings by design; this field surfaces them next to the verdict
+     * so the text rendering can be honest without an agent parsing checks[].
+     */
+    infoOnlyFindings: number;
+    passed: boolean;
+}
+export declare function buildSafetyAuditDeep(inspection: ISharkcraftInspection): Promise<ISafetyAuditDeepReport>;
+//# sourceMappingURL=safety-audit-deep.d.ts.map

package/dist/safety-audit-deep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-audit-deep.d.ts","sourceRoot":"","sources":["../src/safety-audit-deep.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,oCAAoC,CAAC;AAE1E,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,wBAAwB,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,8BAA8B,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjF,+EAA+E;IAC/E,cAAc,EAAE,SAAS;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9F,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACzC;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;CACjB;AAkDD,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC,sBAAsB,CAAC,CA2FjC"}

package/dist/safety-audit-deep.js

@@ -0,0 +1,162 @@
+/**
+ * Deep safety audit.
+ *
+ * Augments the existing buildSafetyAudit output with read-only
+ * structural checks: report site external JS scan, demo destructive
+ * lines, CI permissions summary, release readiness state.
+ *
+ * Includes dev-signed pack enumeration. Dev signatures verify locally
+ * (`shrk packs sign --dev`) but are never release-trusted — `safety
+ * audit --deep` surfaces them so a release engineer sees them.
+ *
+ * The deep audit is purely additive — it does not change the canonical
+ * safety audit output, it returns an extended object.
+ */
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
+import * as nodePath from 'node:path';
+import { buildPackSignatureStatusReport } from "./pack-signature-status.js";
+/**
+ * Schema bumped to v2: adds `infoOnlyFindings` so an agent can read
+ * the dev-sig disposition without parsing checks[].
+ */
+export const SAFETY_AUDIT_DEEP_SCHEMA = 'sharkcraft.safety-audit-deep/v2';
+const DESTRUCTIVE_RE = [/\brm\s+-rf\b/, /\bdd\s+if=/, /\bmkfs\b/];
+const EXTERNAL_JS_RE = [/<script\s+[^>]*src=["']https?:/i, /from\s+['"]https?:/i];
+function scanFile(file, patterns) {
+    try {
+        const lines = readFileSync(file, 'utf8').split('\n');
+        const hits = [];
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i] ?? '';
+            for (const p of patterns) {
+                if (p.test(line)) {
+                    hits.push({ line: i + 1, text: line });
+                    break;
+                }
+            }
+        }
+        return hits;
+    }
+    catch {
+        return [];
+    }
+}
+function walkPattern(dir, ext, max) {
+    const out = [];
+    const stack = [dir];
+    while (stack.length && out.length < max) {
+        const cur = stack.pop();
+        let entries = [];
+        try {
+            entries = readdirSync(cur);
+        }
+        catch {
+            continue;
+        }
+        for (const f of entries) {
+            if (f.startsWith('.') || f === 'node_modules' || f === 'dist')
+                continue;
+            const full = nodePath.join(cur, f);
+            try {
+                const st = statSync(full);
+                if (st.isDirectory())
+                    stack.push(full);
+                else if (full.endsWith(ext))
+                    out.push(full);
+            }
+            catch {
+                continue;
+            }
+        }
+    }
+    return out;
+}
+export async function buildSafetyAuditDeep(inspection) {
+    const projectRoot = inspection.projectRoot;
+    const checks = [];
+    // 1. Report site external JS scan — scan the generator file.
+    const reportSitePath = nodePath.join(projectRoot, 'packages/inspector/src/report-site.ts');
+    const externalHits = existsSync(reportSitePath) ? scanFile(reportSitePath, EXTERNAL_JS_RE) : [];
+    const reportSiteExternalJs = externalHits.map((h) => `report-site.ts:${h.line}`);
+    if (externalHits.length > 0) {
+        checks.push({
+            id: 'report-site-external-js',
+            severity: 'warning',
+            message: `Report site source references external JS (${externalHits.length} hit(s)).`,
+            evidence: externalHits.map((h) => `${h.line}: ${h.text.trim()}`).join('\n'),
+        });
+    }
+    // 2. Demo destructive lines — scan docs/demo/ and demo-script output files.
+    const demoDir = nodePath.join(projectRoot, 'docs/demo');
+    const demoFiles = existsSync(demoDir) ? walkPattern(demoDir, '.sh', 50).concat(walkPattern(demoDir, '.md', 50)) : [];
+    const destructive = [];
+    for (const f of demoFiles) {
+        const hits = scanFile(f, DESTRUCTIVE_RE);
+        for (const h of hits)
+            destructive.push(`${nodePath.relative(projectRoot, f)}:${h.line}`);
+    }
+    if (destructive.length > 0) {
+        checks.push({
+            id: 'demo-destructive-lines',
+            severity: 'error',
+            message: `Found ${destructive.length} destructive line(s) in docs/demo/.`,
+            evidence: destructive.join('\n'),
+        });
+    }
+    // 3. CI generated workflow permissions — best-effort scan for .github/workflows.
+    const ciPerms = [];
+    const workflowsDir = nodePath.join(projectRoot, '.github/workflows');
+    if (existsSync(workflowsDir)) {
+        const yml = walkPattern(workflowsDir, '.yml', 50).concat(walkPattern(workflowsDir, '.yaml', 50));
+        for (const f of yml) {
+            try {
+                const t = readFileSync(f, 'utf8');
+                const m = /^permissions\s*:\s*([\s\S]*?)(?=\n\S|$)/m.exec(t);
+                ciPerms.push({ file: nodePath.relative(projectRoot, f), permissions: m ? (m[1] ?? '').trim() : '(none)' });
+            }
+            catch {
+                continue;
+            }
+        }
+    }
+    // Dev-signed packs. One info-level line per dev-signed pack so a
+    // release engineer running `safety audit --deep` sees them without
+    // having to run a separate `packs signature-status`.
+    let devSignedPacks = [];
+    try {
+        const sigReport = buildPackSignatureStatusReport(inspection);
+        devSignedPacks = sigReport.packs
+            .filter((p) => p.dev === true)
+            .map((p) => ({
+            packageName: p.packageName,
+            packageVersion: p.packageVersion,
+            ...(p.signatureSignedAt ? { signedAt: p.signatureSignedAt } : {}),
+        }));
+        for (const d of devSignedPacks) {
+            checks.push({
+                id: `dev-signed-pack:${d.packageName}`,
+                severity: 'info',
+                message: `Pack ${d.packageName}@${d.packageVersion} carries a dev signature.` +
+                    ' Dev signatures verify locally but are NOT release-trusted — re-sign with' +
+                    ' SHARKCRAFT_PACK_SECRET before tagging.',
+                ...(d.signedAt ? { evidence: `signed-at: ${d.signedAt}` } : {}),
+            });
+        }
+    }
+    catch {
+        // Best-effort — pack discovery failure shouldn't break the audit.
+    }
+    const passed = checks.every((c) => c.severity !== 'error');
+    const infoOnlyFindings = checks.filter((c) => c.severity === 'info').length;
+    return {
+        schema: SAFETY_AUDIT_DEEP_SCHEMA,
+        generatedAt: new Date().toISOString(),
+        reportSiteExternalJs,
+        demoDestructiveLines: destructive,
+        ciGeneratedWorkflowPermissions: ciPerms,
+        devSignedPacks,
+        checks,
+        infoOnlyFindings,
+        passed,
+    };
+}

package/dist/safety-audit.d.ts

@@ -0,0 +1,91 @@
+import type { ISharkcraftInspection } from './sharkcraft-inspector.js';
+export interface ISafetyAuditCommand {
+    command: string;
+    description: string;
+    category: string;
+    safetyLevel: string;
+}
+export interface ISafetyAuditMcpTool {
+    name: string;
+    description: string;
+    /** Whether the tool could ever cause a write. SharkCraft's contract is `false`. */
+    canWrite: boolean;
+}
+export interface ISafetyAuditVerification {
+    id: string;
+    command: string;
+    trusted: boolean;
+    source: 'local' | 'pack';
+    packPackageName?: string;
+}
+export interface ISafetyAuditPack {
+    packageName: string;
+    packageVersion: string;
+    valid: boolean;
+    signatureStatus: string;
+}
+export interface ISafetyAuditReport {
+    commands: {
+        writesSource: readonly ISafetyAuditCommand[];
+        writesDrafts: readonly ISafetyAuditCommand[];
+        writesSession: readonly ISafetyAuditCommand[];
+        runsShell: readonly ISafetyAuditCommand[];
+        requiresReview: readonly ISafetyAuditCommand[];
+        readOnly: readonly ISafetyAuditCommand[];
+    };
+    mcp: {
+        tools: readonly ISafetyAuditMcpTool[];
+        /** True if any MCP tool has canWrite=true. SharkCraft never flips this. */
+        anyWritable: boolean;
+    };
+    verifications: {
+        trusted: readonly ISafetyAuditVerification[];
+        pack: readonly ISafetyAuditVerification[];
+        untrusted: readonly ISafetyAuditVerification[];
+    };
+    packs: {
+        discovered: number;
+        signedAndVerified: number;
+        signedNotVerified: number;
+        unsigned: number;
+        invalid: number;
+        items: readonly ISafetyAuditPack[];
+    };
+    planSigning: {
+        secretConfigured: boolean;
+        secretEnv: string;
+    };
+    recommendations: readonly string[];
+}
+export interface IBuildSafetyAuditInput {
+    inspection: ISharkcraftInspection;
+    /** CLI-side command catalog. Pass the same array that backs `shrk commands`. */
+    catalog: readonly {
+        command: string;
+        description: string;
+        category: string;
+        safetyLevel: string;
+        writesFiles: boolean;
+        writesSource: boolean;
+        runsShell: boolean;
+        requiresReview: boolean;
+        mcpAvailable: boolean;
+    }[];
+    /** MCP tool definitions (name + description). */
+    mcpTools: readonly {
+        name: string;
+        description: string;
+    }[];
+    /** Plan signing secret env var name. */
+    planSecretEnv?: string;
+    /** Pre-resolved presence of the plan secret in the environment. */
+    planSecretConfigured?: boolean;
+}
+/**
+ * Build a deterministic safety audit report from an inspection + the CLI
+ * command catalog + the MCP tool list. Pure — no IO. The catalog/tool
+ * inputs are passed in to avoid creating a CLI → MCP-server import
+ * dependency.
+ */
+export declare function buildSafetyAudit(input: IBuildSafetyAuditInput): ISafetyAuditReport;
+//# sourceMappingURL=safety-audit.d.ts.map

package/dist/safety-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-audit.d.ts","sourceRoot":"","sources":["../src/safety-audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE;QACR,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;QAC7C,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;QAC7C,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;QAC9C,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;QAC1C,cAAc,EAAE,SAAS,mBAAmB,EAAE,CAAC;QAC/C,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;KAC1C,CAAC;IACF,GAAG,EAAE;QACH,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAC;QACtC,2EAA2E;QAC3E,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,aAAa,EAAE;QACb,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;QAC7C,IAAI,EAAE,SAAS,wBAAwB,EAAE,CAAC;QAC1C,SAAS,EAAE,SAAS,wBAAwB,EAAE,CAAC;KAChD,CAAC;IACF,KAAK,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;KACpC,CAAC;IACF,WAAW,EAAE;QACX,gBAAgB,EAAE,OAAO,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,qBAAqB,CAAC;IAClC,gFAAgF;IAChF,OAAO,EAAE,SAAS;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,OAAO,CAAC;QACrB,YAAY,EAAE,OAAO,CAAC;QACtB,SAAS,EAAE,OAAO,CAAC;QACnB,cAAc,EAAE,OAAO,CAAC;QACxB,YAAY,EAAE,OAAO,CAAC;KACvB,EAAE,CAAC;IACJ,iDAAiD;IACjD,QAAQ,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3D,wCAAwC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,sBAAsB,GAAG,kBAAkB,CA8IlF"}