@xenos1996/usa 2.0.0

package/dist/evolution/types.d.ts

@@ -0,0 +1,174 @@
+/**
+ * Types for the evolution layer: coverage, blind spots, capability gaps,
+ * capabilities/candidates, benchmarks, releases, audit runs, and re-audit deltas.
+ * All are plain JSON-serializable data so they can be content-addressed by the
+ * Store and reproduced byte-for-byte.
+ */
+import type { RulePack, Status } from '../types.js';
+/** A place where USA measurably cannot (yet) analyze something. */
+export interface BlindSpot {
+    kind: 'unsupported-language' | 'unverifiable-section';
+    /** Stable id, e.g. `lang:lua` or `section:S7`. */
+    id: string;
+    detail: string;
+    /** Traceable evidence backing the claim (facts, pack list, counts). */
+    evidence: string;
+}
+/**
+ * Multi-axis coverage: what USA actually examined, not what it claims it can
+ * examine. Derived solely from the audit result and detected facts — a
+ * capability that merely exists in the registry but does not apply is *not*
+ * counted as coverage.
+ */
+export interface CoverageModel {
+    /** Share of applicable checks the engine resolved without a human (0..100). */
+    automationCoverage: number;
+    /** Share of detected languages that a shipped pack actually covers (0..100). */
+    languageCoverage: number;
+    detectedLanguages: string[];
+    coveredLanguages: string[];
+    /** Detected languages with no production capability (bootstrap-at-best). */
+    unsupportedLanguages: string[];
+    /** Sections the engine could not verify automatically (null score). */
+    unverifiableSections: string[];
+    /** Count of open judgements requiring a human/agent. */
+    unknownFindings: number;
+    blindSpots: BlindSpot[];
+}
+export type GapKind = 'unsupported-technology' | 'missing-detector' | 'unverifiable-property' | 'uncertain-capability';
+/**
+ * A measurable limitation discovered from audit evidence. A gap is *not* LLM
+ * intuition: it carries the evidence (facts, pack list, audit/snapshot ids)
+ * that explains why it exists.
+ */
+export interface CapabilityGap {
+    id: string;
+    kind: GapKind;
+    /** The technology/component/section the gap concerns. */
+    target: string;
+    problem: string;
+    /** Ordered, traceable evidence strings. */
+    evidence: string[];
+    /** The capability that would close the gap (e.g. `stacks/lua`). */
+    requiredCapability: string;
+    priority: 'low' | 'medium' | 'high';
+    auditRunId: string;
+    snapshotId: string;
+    createdAt: string;
+    state: 'open' | 'accepted' | 'closed';
+}
+export type CapabilityKind = 'data' | 'executor' | 'composite' | 'oracle';
+/** A shipped, versioned capability. The data kind carries a rule pack. */
+export interface Capability {
+    id: string;
+    version: string;
+    kind: CapabilityKind;
+    description: string;
+    /** The rule pack this capability contributes (signature for `data` capabilities). */
+    pack?: RulePack;
+    /** Languages this capability analyzes — used for honest coverage accounting. */
+    languages?: string[];
+    status: 'stable' | 'deprecated';
+    provenance: {
+        createdAt: string;
+        createdBy: string;
+    };
+}
+export type CandidateStatus = 'PROPOSED' | 'IMPLEMENTED' | 'TESTED' | 'BENCHMARKED' | 'REVIEWED' | 'RELEASED' | 'REJECTED';
+/** A capability that is *not* production yet. Never in the active set. */
+export interface CandidateCapability {
+    id: string;
+    capability: Capability;
+    gapIds: string[];
+    status: CandidateStatus;
+    createdAt: string;
+    release?: ReleaseDecision;
+}
+export type BenchmarkKind = 'known-positive' | 'known-negative' | 'regression';
+export interface BenchmarkCase {
+    id: string;
+    kind: BenchmarkKind;
+    description: string;
+    /** Files to materialize as a fixture tree. */
+    fixture: Record<string, string>;
+    /** Ground truth: expected status per rule id in a full-fixture audit. */
+    expected: {
+        ruleId: string;
+        status: Status;
+    }[];
+}
+export interface BenchmarkCaseResult {
+    caseId: string;
+    kind: BenchmarkKind;
+    tp: number;
+    tn: number;
+    fp: number;
+    fn: number;
+    precision: number;
+    recall: number;
+    regressions: string[];
+    elapsedMs: number;
+}
+export interface BenchmarkResult {
+    capability: {
+        id: string;
+        version: string;
+    };
+    cases: BenchmarkCaseResult[];
+    summary: {
+        tp: number;
+        tn: number;
+        fp: number;
+        fn: number;
+        precision: number;
+        recall: number;
+        regressions: number;
+    };
+}
+export interface ReleaseGate {
+    minPrecision: number;
+    minRecall: number;
+    requireNoRegressions: boolean;
+}
+export interface ReleaseDecision {
+    decision: 'ACCEPT' | 'REJECT';
+    reasons: string[];
+    testsPassed: boolean;
+    benchmarkPassed: boolean;
+    precision: number;
+    recall: number;
+    regressions: number;
+}
+export interface AuditRun {
+    id: string;
+    repository: string;
+    snapshotId: string;
+    capabilitySetId: string;
+    engineVersion: string;
+    status: 'running' | 'completed' | 'failed';
+    startedAt: string;
+    endedAt?: string;
+    /** Content address of the stored result (report trailer data). */
+    resultId?: string;
+    provenance: {
+        modelBundleId?: string;
+    };
+}
+export interface ReAuditDelta {
+    before: {
+        automationCoverage: number;
+        languageCoverage: number;
+        unsupported: string[];
+    };
+    after: {
+        automationCoverage: number;
+        languageCoverage: number;
+        unsupported: string[];
+    };
+    coverageDelta: number;
+    findingsAdded: string[];
+    findingsRemoved: string[];
+    gapReduced: boolean;
+    intendedFindingDetectable: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/evolution/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/evolution/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEpD,mEAAmE;AACnE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,sBAAsB,GAAG,sBAAsB,CAAC;IACtD,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,+EAA+E;IAC/E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,4EAA4E;IAC5E,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,uEAAuE;IACvE,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,wDAAwD;IACxD,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB;AAED,MAAM,MAAM,OAAO,GACjB,wBAAwB,GAAG,kBAAkB,GAAG,uBAAuB,GAAG,sBAAsB,CAAC;AAEnG;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,CAAC;IACd,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mEAAmE;IACnE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;CACvC;AAID,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE1E,0EAA0E;AAC1E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,QAAQ,GAAG,YAAY,CAAC;IAChC,UAAU,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAED,MAAM,MAAM,eAAe,GACzB,UAAU,GAAG,aAAa,GAAG,QAAQ,GAAG,aAAa,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;AAE/F,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AAID,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,YAAY,CAAC;AAE/E,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,yEAAyE;IACzE,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAID,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACxC;AAID,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE;QAAE,kBAAkB,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACxF,KAAK,EAAE;QAAE,kBAAkB,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACvF,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,yBAAyB,EAAE,OAAO,CAAC;CACpC"}

package/dist/evolution/types.js

@@ -0,0 +1,8 @@
+/**
+ * Types for the evolution layer: coverage, blind spots, capability gaps,
+ * capabilities/candidates, benchmarks, releases, audit runs, and re-audit deltas.
+ * All are plain JSON-serializable data so they can be content-addressed by the
+ * Store and reproduced byte-for-byte.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/evolution/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/evolution/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/index.d.ts

@@ -0,0 +1,36 @@
+/**
+ * USA — Universal Software Auditor
+ * Programmatic API. Everything the CLI does is available here.
+ */
+export { Project } from './util/project.js';
+export { detect, loadDetectors, classifyMaturity, loadDetectorFile } from './detect/index.js';
+export { loadRulePacks, loadPackFile, parsePackText, applyRuleOverrides, validatePredicate, DEFAULT_WEIGHT, SEVERITY_LADDER, } from './engine/loader.js';
+export { loadSections, DEFAULT_SECTIONS } from './engine/sections.js';
+export { loadProfiles, dampen } from './engine/maturity.js';
+export { runAudit } from './engine/audit.js';
+export { score } from './engine/score.js';
+export { evaluateRule, evalPredicate, ruleApplies, packApplies } from './engine/evaluate.js';
+export { renderMarkdown, parseTrailer, trailer } from './report/markdown.js';
+export { diffReports } from './engine/diff.js';
+export { evaluateGate, blockingFindings } from './engine/gate.js';
+export { loadConfig, EXAMPLE_CONFIG, CONFIG_FILE } from './config.js';
+export { snapshotOfProject, snapshotOfDir, identityFromFiles, canonicalJson, hashText, } from './snapshot/index.js';
+export { Store } from './store/index.js';
+export { computeCoverage } from './evolution/coverage.js';
+export { deriveGaps } from './evolution/gap.js';
+export { resolveCapabilitySetId, capabilityFromPack, basePackIds } from './evolution/capability.js';
+export { runBenchmark } from './evolution/benchmark.js';
+export { evaluateRelease, DEFAULT_RELEASE_GATE } from './evolution/release.js';
+export { proposeCandidate, proposeCandidates, proposeFromSuggestions, } from './evolution/propose.js';
+export { GapQueue } from './evolution/queue.js';
+export { scheduleCandidates } from './evolution/schedule.js';
+export { runEvolutionCycle } from './evolution/run.js';
+export type * from './types.js';
+export type * from './snapshot/index.js';
+export type * from './evolution/types.js';
+export type { SectionDef } from './engine/sections.js';
+export type { MaturityProfile } from './engine/maturity.js';
+export type { AuditOutcome, AuditOptions } from './engine/audit.js';
+export type { ScoredRule } from './engine/score.js';
+export type { EvalContext } from './engine/evaluate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC9F,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAItE,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,QAAQ,GACT,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,mBAAmB,YAAY,CAAC;AAChC,mBAAmB,qBAAqB,CAAC;AACzC,mBAAmB,sBAAsB,CAAC;AAC1C,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACpE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,30 @@
+/**
+ * USA — Universal Software Auditor
+ * Programmatic API. Everything the CLI does is available here.
+ */
+export { Project } from './util/project.js';
+export { detect, loadDetectors, classifyMaturity, loadDetectorFile } from './detect/index.js';
+export { loadRulePacks, loadPackFile, parsePackText, applyRuleOverrides, validatePredicate, DEFAULT_WEIGHT, SEVERITY_LADDER, } from './engine/loader.js';
+export { loadSections, DEFAULT_SECTIONS } from './engine/sections.js';
+export { loadProfiles, dampen } from './engine/maturity.js';
+export { runAudit } from './engine/audit.js';
+export { score } from './engine/score.js';
+export { evaluateRule, evalPredicate, ruleApplies, packApplies } from './engine/evaluate.js';
+export { renderMarkdown, parseTrailer, trailer } from './report/markdown.js';
+export { diffReports } from './engine/diff.js';
+export { evaluateGate, blockingFindings } from './engine/gate.js';
+export { loadConfig, EXAMPLE_CONFIG, CONFIG_FILE } from './config.js';
+// Evolution layer: the deterministic audit → gap → candidate → benchmark →
+// release → re-audit loop.
+export { snapshotOfProject, snapshotOfDir, identityFromFiles, canonicalJson, hashText, } from './snapshot/index.js';
+export { Store } from './store/index.js';
+export { computeCoverage } from './evolution/coverage.js';
+export { deriveGaps } from './evolution/gap.js';
+export { resolveCapabilitySetId, capabilityFromPack, basePackIds } from './evolution/capability.js';
+export { runBenchmark } from './evolution/benchmark.js';
+export { evaluateRelease, DEFAULT_RELEASE_GATE } from './evolution/release.js';
+export { proposeCandidate, proposeCandidates, proposeFromSuggestions, } from './evolution/propose.js';
+export { GapQueue } from './evolution/queue.js';
+export { scheduleCandidates } from './evolution/schedule.js';
+export { runEvolutionCycle } from './evolution/run.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC9F,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtE,2EAA2E;AAC3E,2BAA2B;AAC3B,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,QAAQ,GACT,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/learn/index.d.ts

@@ -0,0 +1,27 @@
+export interface LearnOptions {
+    reportPath: string;
+    out?: string;
+    minSeverity?: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'FUTURE';
+    verbose?: boolean;
+}
+export interface Suggestion {
+    id: string;
+    title: string;
+    section: string;
+    sectionTitle: string;
+    severity: 'HIGH' | 'MEDIUM' | 'LOW';
+    ruleClass: string;
+    check: {
+        kind: string;
+        pattern?: string;
+        files?: string[];
+    };
+    why: string;
+    remediation: string;
+    evidence?: string;
+    references?: string[];
+    triggeredBy: string;
+}
+export declare function learnFromReport(options: LearnOptions): Suggestion[];
+export declare function renderSuggestions(suggestions: Suggestion[]): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/learn/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/learn/index.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;IAChE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC5D,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAuHD,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,UAAU,EAAE,CAuBnE;AAqCD,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,CAmCnE"}

package/dist/learn/index.js

@@ -0,0 +1,196 @@
+import fs from 'node:fs';
+import { parse as parseYaml } from 'yaml';
+import { parseTrailer } from '../report/markdown.js';
+import { isMap } from '../util/yaml.js';
+const SEVERITY_ORDER = {
+    CRITICAL: 0,
+    HIGH: 1,
+    MEDIUM: 2,
+    LOW: 3,
+    FUTURE: 4,
+};
+function isTrailerRuleInfo(v) {
+    return typeof v === 'object' && v !== null;
+}
+/**
+ * Parse the machine-readable trailer into its YAML mapping. Returns null when
+ * there is no trailer or it is not a mapping. The trailer is untrusted input:
+ * a malformed one must produce a clear error, not a stack trace.
+ */
+function parseReportTrailer(reportPath) {
+    const text = fs.readFileSync(reportPath, 'utf8');
+    const yamlText = parseTrailer(text);
+    if (yamlText === null)
+        return null;
+    try {
+        const doc = parseYaml(yamlText);
+        return isMap(doc) ? doc : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Findings recorded directly in the trailer, if it carries a full array. */
+function findingsFromTrailerField(doc) {
+    return Array.isArray(doc.findings) ? doc.findings : [];
+}
+/** Compact `rules` mapping → findings-like rows (the common trailer shape). */
+function findingsFromTrailerRules(doc) {
+    const rules = doc.rules;
+    if (!isMap(rules))
+        return [];
+    const out = [];
+    for (const [ruleId, raw] of Object.entries(rules)) {
+        const info = isTrailerRuleInfo(raw) ? raw : {};
+        const severity = info.severity ?? 'MEDIUM';
+        out.push({
+            ruleId,
+            title: `Rule ${ruleId}`,
+            section: info.section ?? 'S0',
+            sectionTitle: info.sectionTitle ?? '',
+            severity,
+            baseSeverity: severity,
+            status: info.status ?? 'UNKNOWN',
+            ruleClass: 'maintainability',
+            message: `Rule ${ruleId} was ${info.status ?? 'UNKNOWN'}`,
+            locations: [],
+            why: '',
+            remediation: '',
+            evidenceHint: 'Manual review required.',
+            references: [],
+            dampened: false,
+            suppressedReason: undefined,
+        });
+    }
+    return out;
+}
+function logVerbose(options, findings, relevant) {
+    if (!options.verbose)
+        return;
+    console.error(`Found ${findings.length} findings in report.`);
+    console.error('Statuses:', findings
+        .map((f) => f.status)
+        .filter(Boolean)
+        .join(', '));
+    console.error(`Found ${relevant.length} relevant findings after filtering.`);
+    relevant.forEach((f) => console.error(`  - ${f.ruleId} ${f.status} ${f.severity}`));
+}
+function groupBySection(findings) {
+    const bySection = new Map();
+    for (const f of findings) {
+        const key = f.section || 'S0';
+        const group = bySection.get(key);
+        if (group)
+            group.push(f);
+        else
+            bySection.set(key, [f]);
+    }
+    return bySection;
+}
+/** Findings worth acting on: open status AND at/above the severity threshold. */
+function selectRelevant(findings, minScore) {
+    return findings.filter((f) => {
+        if (f.status === 'PASS' || f.status === 'NOT_APPLICABLE')
+            return false;
+        if (!f.status)
+            return false;
+        return (SEVERITY_ORDER[f.severity] ?? 9) <= minScore;
+    });
+}
+/** Extract findings from the trailer: full `findings` array, else compact `rules`. */
+function extractFindings(doc, verbose) {
+    const direct = findingsFromTrailerField(doc);
+    if (direct.length > 0)
+        return direct;
+    const converted = findingsFromTrailerRules(doc);
+    if (verbose && converted.length > 0) {
+        console.error(`Converted ${converted.length} rules from trailer.`);
+    }
+    return converted;
+}
+export function learnFromReport(options) {
+    const doc = parseReportTrailer(options.reportPath);
+    if (!doc) {
+        throw new Error(`Could not parse report trailer from ${options.reportPath}. Ensure the report was generated by USA.`);
+    }
+    const findings = extractFindings(doc, options.verbose ?? false);
+    const minScore = SEVERITY_ORDER[options.minSeverity ?? 'MEDIUM'] ?? 2;
+    const relevant = selectRelevant(findings, minScore);
+    logVerbose(options, findings, relevant);
+    const suggestions = [];
+    let idCounter = 1;
+    for (const [section, items] of groupBySection(relevant)) {
+        const sectionTitle = items[0]?.sectionTitle ?? section;
+        for (const f of items) {
+            suggestions.push(generateSuggestion(f, section, sectionTitle, idCounter++));
+        }
+    }
+    return suggestions;
+}
+function generateSuggestion(finding, section, sectionTitle, idCounter) {
+    const id = `LEARN-${String(idCounter).padStart(3, '0')}`;
+    const severity = mapSeverity(finding.severity);
+    const ruleClass = finding.ruleClass ?? 'maintainability';
+    return {
+        id,
+        title: finding.title || `Missing check: ${finding.ruleId}`,
+        section,
+        sectionTitle,
+        severity,
+        ruleClass,
+        check: { kind: 'manual' },
+        why: finding.why ??
+            finding.message ??
+            'This requirement was flagged as missing or requiring review.',
+        remediation: finding.remediation ?? 'Define and implement the required control.',
+        evidence: finding.evidenceHint ?? 'Manual evidence: file:line + reasoning.',
+        references: finding.references ?? [],
+        triggeredBy: finding.ruleId,
+    };
+}
+function mapSeverity(sev) {
+    if (sev === 'CRITICAL' || sev === 'HIGH')
+        return 'HIGH';
+    if (sev === 'MEDIUM')
+        return 'MEDIUM';
+    return 'LOW';
+}
+export function renderSuggestions(suggestions) {
+    const lines = [];
+    lines.push('# =============================================================================');
+    lines.push('# GENERATED by `usa learn` — REVIEW REQUIRED before use.');
+    lines.push('# This pack contains suggested rules based on gaps found in the audit report.');
+    lines.push('# =============================================================================');
+    lines.push(`id: learn-suggestions`);
+    lines.push(`title: Suggestions from USA Learn`);
+    lines.push(`section: S0`);
+    lines.push(`section_title: Generated Suggestions`);
+    lines.push(`description: >`);
+    lines.push(`  These rules were proposed by \`usa learn\` based on the audit findings.`);
+    lines.push(`  They are not yet verified; review each and register in rules/index.yaml.`);
+    lines.push(`version: '0.1.0-learn'`);
+    lines.push('');
+    lines.push('rules:');
+    for (const s of suggestions) {
+        lines.push(`  - id: ${s.id}`);
+        lines.push(`    title: ${s.title}`);
+        lines.push(`    section: ${s.section}`);
+        lines.push(`    section_title: ${s.sectionTitle}`);
+        lines.push(`    severity: ${s.severity}`);
+        lines.push(`    class: ${s.ruleClass}`);
+        lines.push(`    check:`);
+        lines.push(`      kind: manual`);
+        lines.push(`    why: ${s.why}`);
+        if (s.remediation)
+            lines.push(`    remediation: ${s.remediation}`);
+        if (s.evidence)
+            lines.push(`    evidence: ${s.evidence}`);
+        if (s.references && s.references.length) {
+            lines.push(`    references: [${s.references.map((r) => `'${r}'`).join(', ')}]`);
+        }
+        lines.push(`    # Triggered by: ${s.triggeredBy}`);
+        lines.push('');
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=index.js.map

package/dist/learn/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/learn/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAwBxC,MAAM,cAAc,GAA2B;IAC7C,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;CACV,CAAC;AAUF,SAAS,iBAAiB,CAAC,CAAU;IACnC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAY,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,wBAAwB,CAAC,GAA4B;IAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,QAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,+EAA+E;AAC/E,SAAS,wBAAwB,CAAC,GAA4B;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAoB,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC;YACP,MAAM;YACN,KAAK,EAAE,QAAQ,MAAM,EAAE;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;YACrC,QAAQ;YACR,YAAY,EAAE,QAAQ;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;YAChC,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE,QAAQ,MAAM,QAAQ,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE;YACzD,SAAS,EAAE,EAAE;YACb,GAAG,EAAE,EAAE;YACP,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,yBAAyB;YACvC,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,KAAK;YACf,gBAAgB,EAAE,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,OAAqB,EAAE,QAAmB,EAAE,QAAmB;IACjF,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO;IAC7B,OAAO,CAAC,KAAK,CAAC,SAAS,QAAQ,CAAC,MAAM,sBAAsB,CAAC,CAAC;IAC9D,OAAO,CAAC,KAAK,CACX,WAAW,EACX,QAAQ;SACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,SAAS,QAAQ,CAAC,MAAM,qCAAqC,CAAC,CAAC;IAC7E,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,cAAc,CAAC,QAAmB;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YACpB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iFAAiF;AACjF,SAAS,cAAc,CAAC,QAAmB,EAAE,QAAgB;IAC3D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB;YAAE,OAAO,KAAK,CAAC;QACvE,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC5B,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sFAAsF;AACtF,SAAS,eAAe,CAAC,GAA4B,EAAE,OAAgB;IACrE,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,OAAO,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,KAAK,CAAC,aAAa,SAAS,CAAC,MAAM,sBAAsB,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAqB;IACnD,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,uCAAuC,OAAO,CAAC,UAAU,2CAA2C,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpD,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAExC,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,OAAO,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAgB,EAChB,OAAe,EACf,YAAoB,EACpB,SAAiB;IAEjB,MAAM,EAAE,GAAG,SAAS,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC;IAEzD,OAAO;QACL,EAAE;QACF,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,kBAAkB,OAAO,CAAC,MAAM,EAAE;QAC1D,OAAO;QACP,YAAY;QACZ,QAAQ;QACR,SAAS;QACT,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,GAAG,EACD,OAAO,CAAC,GAAG;YACX,OAAO,CAAC,OAAO;YACf,8DAA8D;QAChE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,4CAA4C;QAChF,QAAQ,EAAE,OAAO,CAAC,YAAY,IAAI,yCAAyC;QAC3E,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;QACpC,WAAW,EAAE,OAAO,CAAC,MAAM;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACxD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAyB;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAC9F,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAC9F,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1B,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACzF,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/report/markdown.d.ts

@@ -0,0 +1,16 @@
+import type { AuditReport, Finding } from '../types.js';
+import type { MaturityProfile } from '../engine/maturity.js';
+/** Renders the Section 14 report template from USA.md. */
+export declare function renderMarkdown(report: AuditReport, profile: MaturityProfile): string;
+export declare function primaryLocation(f: Finding): string;
+/**
+ * Compact, stable YAML used by `usa diff`. Kept in the Markdown on purpose —
+ * the report stays a single self-contained artifact you can commit, email, or
+ * paste into a PR.
+ */
+export declare const TRAILER_BEGIN = "<!-- USA:TRAILER:BEGIN -->";
+export declare const TRAILER_END = "<!-- USA:TRAILER:END -->";
+export declare function trailer(report: AuditReport): string;
+/** Extracts the machine-readable trailer from a previously rendered report. */
+export declare function parseTrailer(markdown: string): string | null;
+//# sourceMappingURL=markdown.d.ts.map

package/dist/report/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../src/report/markdown.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAoB,MAAM,aAAa,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA0C7D,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,GAAG,MAAM,CAuBpF;AAwaD,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAGlD;AA8CD;;;;GAIG;AACH,eAAO,MAAM,aAAa,+BAA+B,CAAC;AAC1D,eAAO,MAAM,WAAW,6BAA6B,CAAC;AAEtD,wBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAqBnD;AAWD,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAyB5D"}