@xenos1996/usat 1.0.0

package/dist/engine/score.d.ts

@@ -0,0 +1,19 @@
+import type { Finding, Rule, ScoreCard } from '../types.js';
+import type { SectionDef } from './sections.js';
+import type { MaturityProfile } from './maturity.js';
+export interface ScoredRule {
+    rule: Rule;
+    finding: Finding;
+}
+/**
+ * Deterministic, reproducible scoring.
+ *
+ *   credit_i   = weight_i × CREDIT[status_i]
+ *   section    = 10 × Σcredit_i / Σweight_i        (resolved applicable rules)
+ *   overall    = 100 × Σ(credit_i × sectionWeight) / Σ(weight_i × sectionWeight)
+ *
+ * Rule-level weighting (rather than averaging section scores) means a section
+ * with three rules cannot swing the total as hard as one with thirty.
+ */
+export declare function score(evaluated: ScoredRule[], sections: SectionDef[], profile: MaturityProfile): ScoreCard;
+//# sourceMappingURL=score.d.ts.map

package/dist/engine/score.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.d.ts","sourceRoot":"","sources":["../../src/engine/score.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAkC,MAAM,aAAa,CAAC;AAE5F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;CAClB;AAkCD;;;;;;;;;GASG;AACH,wBAAgB,KAAK,CACnB,SAAS,EAAE,UAAU,EAAE,EACvB,QAAQ,EAAE,UAAU,EAAE,EACtB,OAAO,EAAE,eAAe,GACvB,SAAS,CAgCX"}

package/dist/engine/score.js

@@ -0,0 +1,141 @@
+import { ruleWeight } from './evaluate.js';
+/** How much credit a rule earns for a given outcome. */
+const CREDIT = {
+    PASS: 1,
+    EXPERIMENTAL: 0.5,
+    DEPRECATED: 0.4,
+    WRONG: 0.15,
+    MISSING: 0,
+    FAIL: 0,
+    // Not counted: unresolved judgement or deliberately skipped.
+    UNKNOWN: 0,
+    NOT_APPLICABLE: 0,
+};
+const EMPTY_COUNTS = () => ({
+    PASS: 0,
+    FAIL: 0,
+    WRONG: 0,
+    MISSING: 0,
+    DEPRECATED: 0,
+    EXPERIMENTAL: 0,
+    UNKNOWN: 0,
+    NOT_APPLICABLE: 0,
+});
+const EMPTY_SEVERITY = () => ({
+    CRITICAL: 0,
+    HIGH: 0,
+    MEDIUM: 0,
+    LOW: 0,
+    FUTURE: 0,
+});
+/**
+ * Deterministic, reproducible scoring.
+ *
+ *   credit_i   = weight_i × CREDIT[status_i]
+ *   section    = 10 × Σcredit_i / Σweight_i        (resolved applicable rules)
+ *   overall    = 100 × Σ(credit_i × sectionWeight) / Σ(weight_i × sectionWeight)
+ *
+ * Rule-level weighting (rather than averaging section scores) means a section
+ * with three rules cannot swing the total as hard as one with thirty.
+ */
+export function score(evaluated, sections, profile) {
+    const counts = EMPTY_COUNTS();
+    const severityCounts = EMPTY_SEVERITY();
+    const sectionMap = new Map(sections.map((s) => [s.id, s]));
+    const acc = {
+        bySection: new Map(),
+        counts,
+        severityCounts,
+        totalW: 0,
+        totalCredit: 0,
+        applicableAll: 0,
+        resolvedAll: 0,
+    };
+    for (const { rule, finding } of evaluated) {
+        accumulateScoredRule(acc, sectionMap, rule, finding);
+    }
+    const sectionScores = sections
+        .filter((s) => acc.bySection.has(s.id))
+        .map((s) => buildSectionScore(s, acc.bySection.get(s.id)));
+    return {
+        overall: acc.totalW > 0 ? round1((100 * acc.totalCredit) / acc.totalW) : 0,
+        sections: sectionScores,
+        counts,
+        severityCounts,
+        automationCoverage: acc.applicableAll > 0 ? round1((100 * acc.resolvedAll) / acc.applicableAll) : 0,
+        expectedBand: profile.expectedBand,
+    };
+}
+function emptyBucket() {
+    return { w: 0, credit: 0, applicable: 0, resolved: 0, passed: 0, failed: 0, unknown: 0 };
+}
+function bucketFor(bySection, id) {
+    let bucket = bySection.get(id);
+    if (!bucket) {
+        bucket = emptyBucket();
+        bySection.set(id, bucket);
+    }
+    return bucket;
+}
+function accumulateScoredRule(acc, sectionMap, rule, finding) {
+    if (finding.status === 'NOT_APPLICABLE')
+        return;
+    const sec = sectionMap.get(finding.section) ?? {
+        id: finding.section,
+        title: finding.sectionTitle,
+        weight: 1,
+    };
+    const bucket = bucketFor(acc.bySection, sec.id);
+    bucket.applicable++;
+    acc.applicableAll++;
+    // Suppressed findings live under Accepted Risk only: counting them as open
+    // once produced "HIGH: 1" next to "No CRITICAL or HIGH findings. Nice."
+    // in the same report. Unsuppressed UNKNOWN still counts — the report
+    // narrative ("N checks need a human") is driven by counts.UNKNOWN.
+    if (finding.suppressedReason) {
+        if (finding.status === 'UNKNOWN')
+            bucket.unknown++;
+        return;
+    }
+    acc.counts[finding.status]++;
+    if (finding.status !== 'PASS' && finding.status !== 'UNKNOWN') {
+        acc.severityCounts[finding.severity]++;
+    }
+    if (finding.status === 'UNKNOWN') {
+        bucket.unknown++;
+        return;
+    }
+    applyRuleCredit(acc, bucket, rule, finding, sec.weight);
+}
+function applyRuleCredit(acc, bucket, rule, finding, sectionWeight) {
+    const w = ruleWeight(rule) * sectionWeight;
+    const credit = w * CREDIT[finding.status];
+    bucket.w += w;
+    bucket.credit += credit;
+    bucket.resolved++;
+    acc.resolvedAll++;
+    if (finding.status === 'PASS')
+        bucket.passed++;
+    else
+        bucket.failed++;
+    acc.totalW += w;
+    acc.totalCredit += credit;
+}
+function buildSectionScore(s, b) {
+    return {
+        id: s.id,
+        title: s.title,
+        score: b.w > 0 ? round1((10 * b.credit) / b.w) : null,
+        weight: s.weight,
+        applicable: b.applicable,
+        resolved: b.resolved,
+        passed: b.passed,
+        failed: b.failed,
+        unknown: b.unknown,
+        confidence: b.applicable > 0 ? round1((100 * b.resolved) / b.applicable) : 100,
+    };
+}
+function round1(n) {
+    return Math.round(n * 10) / 10;
+}
+//# sourceMappingURL=score.js.map

package/dist/engine/score.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.js","sourceRoot":"","sources":["../../src/engine/score.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAS3C,wDAAwD;AACxD,MAAM,MAAM,GAA2B;IACrC,IAAI,EAAE,CAAC;IACP,YAAY,EAAE,GAAG;IACjB,UAAU,EAAE,GAAG;IACf,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,CAAC;IACP,6DAA6D;IAC7D,OAAO,EAAE,CAAC;IACV,cAAc,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,YAAY,GAAG,GAA2B,EAAE,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,CAAC;IACV,UAAU,EAAE,CAAC;IACb,YAAY,EAAE,CAAC;IACf,OAAO,EAAE,CAAC;IACV,cAAc,EAAE,CAAC;CAClB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,GAA6B,EAAE,CAAC,CAAC;IACtD,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;CACV,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,KAAK,CACnB,SAAuB,EACvB,QAAsB,EACtB,OAAwB;IAExB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAG,cAAc,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/E,MAAM,GAAG,GAAe;QACtB,SAAS,EAAE,IAAI,GAAG,EAAE;QACpB,MAAM;QACN,cAAc;QACd,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;KACf,CAAC;IAEF,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;QAC1C,oBAAoB,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,aAAa,GAAmB,QAAQ;SAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;IAE9D,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,QAAQ,EAAE,aAAa;QACvB,MAAM;QACN,cAAc;QACd,kBAAkB,EAChB,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC;AACJ,CAAC;AAsBD,SAAS,WAAW;IAClB,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,SAAS,SAAS,CAAC,SAAqC,EAAE,EAAU;IAClE,IAAI,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,WAAW,EAAE,CAAC;QACvB,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAe,EACf,UAAmC,EACnC,IAAU,EACV,OAAgB;IAEhB,IAAI,OAAO,CAAC,MAAM,KAAK,gBAAgB;QAAE,OAAO;IAChD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI;QAC7C,EAAE,EAAE,OAAO,CAAC,OAAO;QACnB,KAAK,EAAE,OAAO,CAAC,YAAY;QAC3B,MAAM,EAAE,CAAC;KACV,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAChD,MAAM,CAAC,UAAU,EAAE,CAAC;IACpB,GAAG,CAAC,aAAa,EAAE,CAAC;IAEpB,2EAA2E;IAC3E,wEAAwE;IACxE,qEAAqE;IACrE,mEAAmE;IACnE,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACnD,OAAO;IACT,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9D,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CACtB,GAAe,EACf,MAAqB,EACrB,IAAU,EACV,OAAgB,EAChB,aAAqB;IAErB,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC;IACxB,MAAM,CAAC,QAAQ,EAAE,CAAC;IAClB,GAAG,CAAC,WAAW,EAAE,CAAC;IAClB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,MAAM,CAAC,MAAM,EAAE,CAAC;;QAC1C,MAAM,CAAC,MAAM,EAAE,CAAC;IACrB,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;IAChB,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAa,EAAE,CAAgB;IACxD,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QACrD,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,UAAU,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;AACjC,CAAC"}

package/dist/engine/sections.d.ts

@@ -0,0 +1,14 @@
+export interface SectionDef {
+    id: string;
+    title: string;
+    /** Multiplier applied to every rule in the section when computing the total. */
+    weight: number;
+}
+/**
+ * Section registry. Security, supply chain and testing carry the heaviest
+ * multipliers: a repo that fails an auth control is worse than one with a
+ * slightly untidy README, and the score should say so.
+ */
+export declare const DEFAULT_SECTIONS: SectionDef[];
+export declare function loadSections(rulesDir: string): SectionDef[];
+//# sourceMappingURL=sections.d.ts.map

package/dist/engine/sections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sections.d.ts","sourceRoot":"","sources":["../../src/engine/sections.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,UAAU,EAiBxC,CAAC;AAEF,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CAkB3D"}

package/dist/engine/sections.js

@@ -0,0 +1,50 @@
+import { parse as parseYaml } from 'yaml';
+import { asMap, isMap, list, num, str } from '../util/yaml.js';
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * Section registry. Security, supply chain and testing carry the heaviest
+ * multipliers: a repo that fails an auth control is worse than one with a
+ * slightly untidy README, and the score should say so.
+ */
+export const DEFAULT_SECTIONS = [
+    { id: 'S1', title: 'Repository & Project Structure', weight: 0.7 },
+    { id: 'S2', title: 'Security', weight: 1.7 },
+    { id: 'S3', title: 'Supply Chain & Build Provenance', weight: 1.3 },
+    { id: 'S4', title: 'Architecture & Design', weight: 1.0 },
+    { id: 'S5', title: 'Code Quality', weight: 1.0 },
+    { id: 'S6', title: 'Data & Database', weight: 1.0 },
+    { id: 'S7', title: 'Testing & Quality Assurance', weight: 1.3 },
+    { id: 'S8', title: 'CI/CD, Infrastructure & Observability', weight: 1.0 },
+    { id: 'S9', title: 'Release & Change Management', weight: 0.7 },
+    { id: 'S10', title: 'Dependencies & Third-Party', weight: 1.2 },
+    { id: 'S11', title: 'Performance & Resilience', weight: 0.8 },
+    { id: 'S12', title: 'Documentation & Knowledge', weight: 0.7 },
+    { id: 'S13', title: 'Accessibility, i18n & Compliance', weight: 0.9 },
+    { id: 'S14', title: 'AI / LLM-Era Risks', weight: 1.1 },
+    { id: 'S15', title: 'Platform-Specific', weight: 1.0 },
+    { id: 'S16', title: 'Future Readiness', weight: 0.4 },
+];
+export function loadSections(rulesDir) {
+    const file = path.join(rulesDir, 'sections.yaml');
+    if (!fs.existsSync(file))
+        return DEFAULT_SECTIONS;
+    try {
+        const doc = asMap(parseYaml(fs.readFileSync(file, 'utf8')));
+        const raw = list(doc.sections);
+        if (!raw)
+            return DEFAULT_SECTIONS;
+        const parsed = raw.filter(isMap).map((s) => ({
+            id: str(s.id) ?? 'S0',
+            title: str(s.title) ?? str(s.id) ?? 'Untitled',
+            weight: num(s.weight) ?? 1,
+        }));
+        // Keep defaults for any section the override file omits.
+        const ids = new Set(parsed.map((s) => s.id));
+        return [...parsed, ...DEFAULT_SECTIONS.filter((s) => !ids.has(s.id))];
+    }
+    catch {
+        return DEFAULT_SECTIONS;
+    }
+}
+//# sourceMappingURL=sections.js.map

package/dist/engine/sections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sections.js","sourceRoot":"","sources":["../../src/engine/sections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC5C,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,gCAAgC,EAAE,MAAM,EAAE,GAAG,EAAE;IAClE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE;IAC5C,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,iCAAiC,EAAE,MAAM,EAAE,GAAG,EAAE;IACnE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,GAAG,EAAE;IACzD,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE;IAChD,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,EAAE;IACnD,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,MAAM,EAAE,GAAG,EAAE;IAC/D,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,uCAAuC,EAAE,MAAM,EAAE,GAAG,EAAE;IACzE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,MAAM,EAAE,GAAG,EAAE;IAC/D,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,GAAG,EAAE;IAC/D,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE;IAC7D,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,GAAG,EAAE;IAC9D,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,MAAM,EAAE,GAAG,EAAE;IACrE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,EAAE;IACvD,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE;IACtD,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE;CACtD,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,OAAO,gBAAgB,CAAC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI;YACrB,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,UAAU;YAC9C,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC,CAAC;QACJ,yDAAyD;QACzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gBAAgB,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * USAT — Universal Software Audit Template
+ * Programmatic API. Everything the CLI does is available here.
+ */
+export { Project } from './util/project.js';
+export { detect, loadDetectors, classifyMaturity, loadDetectorFile } from './detect/index.js';
+export { loadRulePacks, applyRuleOverrides, validatePredicate, DEFAULT_WEIGHT, SEVERITY_LADDER, } from './engine/loader.js';
+export { loadSections, DEFAULT_SECTIONS } from './engine/sections.js';
+export { loadProfiles, dampen } from './engine/maturity.js';
+export { runAudit } from './engine/audit.js';
+export { score } from './engine/score.js';
+export { evaluateRule, evalPredicate, ruleApplies, packApplies } from './engine/evaluate.js';
+export { renderMarkdown, parseTrailer, trailer } from './report/markdown.js';
+export { diffReports } from './engine/diff.js';
+export { evaluateGate, blockingFindings } from './engine/gate.js';
+export { loadConfig, EXAMPLE_CONFIG, CONFIG_FILE } from './config.js';
+export type * from './types.js';
+export type { SectionDef } from './engine/sections.js';
+export type { MaturityProfile } from './engine/maturity.js';
+export type { AuditOutcome, AuditOptions } from './engine/audit.js';
+export type { ScoredRule } from './engine/score.js';
+export type { EvalContext } from './engine/evaluate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC9F,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtE,mBAAmB,YAAY,CAAC;AAChC,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACpE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+/**
+ * USAT — Universal Software Audit Template
+ * Programmatic API. Everything the CLI does is available here.
+ */
+export { Project } from './util/project.js';
+export { detect, loadDetectors, classifyMaturity, loadDetectorFile } from './detect/index.js';
+export { loadRulePacks, applyRuleOverrides, validatePredicate, DEFAULT_WEIGHT, SEVERITY_LADDER, } from './engine/loader.js';
+export { loadSections, DEFAULT_SECTIONS } from './engine/sections.js';
+export { loadProfiles, dampen } from './engine/maturity.js';
+export { runAudit } from './engine/audit.js';
+export { score } from './engine/score.js';
+export { evaluateRule, evalPredicate, ruleApplies, packApplies } from './engine/evaluate.js';
+export { renderMarkdown, parseTrailer, trailer } from './report/markdown.js';
+export { diffReports } from './engine/diff.js';
+export { evaluateGate, blockingFindings } from './engine/gate.js';
+export { loadConfig, EXAMPLE_CONFIG, CONFIG_FILE } from './config.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC9F,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/report/markdown.d.ts

@@ -0,0 +1,16 @@
+import type { AuditReport, Finding } from '../types.js';
+import type { MaturityProfile } from '../engine/maturity.js';
+/** Renders the Section 14 report template from USAT.md. */
+export declare function renderMarkdown(report: AuditReport, profile: MaturityProfile): string;
+export declare function primaryLocation(f: Finding): string;
+/**
+ * Compact, stable YAML used by `usat diff`. Kept in the Markdown on purpose —
+ * the report stays a single self-contained artifact you can commit, email, or
+ * paste into a PR.
+ */
+export declare const TRAILER_BEGIN = "<!-- USAT:TRAILER:BEGIN -->";
+export declare const TRAILER_END = "<!-- USAT:TRAILER:END -->";
+export declare function trailer(report: AuditReport): string;
+/** Extracts the machine-readable trailer from a previously rendered report. */
+export declare function parseTrailer(markdown: string): string | null;
+//# sourceMappingURL=markdown.d.ts.map

package/dist/report/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../src/report/markdown.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAoB,MAAM,aAAa,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA0C7D,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,GAAG,MAAM,CAuBpF;AAwaD,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAGlD;AA8CD;;;;GAIG;AACH,eAAO,MAAM,aAAa,gCAAgC,CAAC;AAC3D,eAAO,MAAM,WAAW,8BAA8B,CAAC;AAEvD,wBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAqBnD;AAWD,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAyB5D"}