@zhuma4/sdk 4.0.0-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/README.md +20 -0
  2. package/dist/index.d.ts +272 -0
  3. package/dist/index.d.ts.map +1 -0
  4. package/dist/index.js +12 -0
  5. package/dist/index.js.map +1 -0
  6. package/package.json +21 -0
package/README.md ADDED
@@ -0,0 +1,20 @@
1
+ # @zhuma4/sdk
2
+
3
+ 逐码 (ZhuMa) — 共享类型定义和工具函数 SDK
4
+
5
+ ## 安装
6
+
7
+ ```bash
8
+ npm install @zhuma4/sdk
9
+ ```
10
+
11
+ ## 主要导出
12
+
13
+ - `Finding` / `Severity` / `RuleCategory` — SAST 漏洞发现类型
14
+ - `ScanOptions` / `ScanResult` — 扫描配置与结果
15
+ - `ScaFinding` — SCA 组件发现类型
16
+ - `ManifestEntry` — 包清单类型
17
+
18
+ ## 许可
19
+
20
+ Apache-2.0 — 众安天下 · 猎鹰情报威胁中心
package/dist/index.d.ts ADDED
@@ -0,0 +1,272 @@
1
+ /**
2
+ * 逐码 SDK — 共享类型定义
3
+ *
4
+ * V4.1 Sprint 1 | 众安天下 · 猎鹰情报威胁中心
5
+ *
6
+ * 本文件是整个项目的接口契约 —— 所有包 (cli / rules / web-api) 都依赖这些类型。
7
+ * 修改前必须通知 A1/A4/A6/A8 四人评审。
8
+ *
9
+ * BASELINE_FROZEN: 2026-06-28 (Sprint 1 W1 D1)
10
+ */
11
+ /** 单个安全发现 */
12
+ export interface Finding {
13
+ /** 规则 ID，如 zm-java-sqli-001 */
14
+ ruleId: string;
15
+ severity: Severity;
16
+ /** 人类可读的漏洞描述 */
17
+ message: string;
18
+ /** 相对项目根的文件路径 */
19
+ file: string;
20
+ line: number;
21
+ column: number;
22
+ /** CWE 编号，如 CWE-89 */
23
+ cwe: string;
24
+ /** Semgrep 置信度: very-high / high / medium / low */
25
+ precision: string;
26
+ /** 含行号的代码片段 */
27
+ codeSnippet?: string;
28
+ /** 修复建议文本 */
29
+ remediation?: string;
30
+ /** OWASP Top 10 分类 */
31
+ owasp?: string;
32
+ /** 规则所属类别 */
33
+ category?: RuleCategory;
34
+ }
35
+ export type Severity = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW';
36
+ export type RuleCategory = 'sql-injection' | 'xss' | 'command-injection' | 'code-injection' | 'path-traversal' | 'ssrf' | 'xxe' | 'deserialization' | 'auth' | 'crypto' | 'data-exposure' | 'file-upload' | 'csrf' | 'redirect' | 'config' | 'cloud-native';
37
+ export interface ScanOptions {
38
+ target: string;
39
+ output?: 'html' | 'json' | 'sarif';
40
+ rules?: string;
41
+ quick?: boolean;
42
+ only?: Severity;
43
+ incremental?: boolean;
44
+ sca?: boolean;
45
+ 'no-color'?: boolean;
46
+ }
47
+ export interface ScanResult {
48
+ target: string;
49
+ findings: Finding[];
50
+ bySeverity: Record<Severity, number>;
51
+ total: number;
52
+ outputPath: string;
53
+ /** 扫描耗时 (ms) */
54
+ durationMs: number;
55
+ /** 扫描时间 ISO-8601 */
56
+ scannedAt: string;
57
+ /** SCA 结果 (仅 --sca 模式) */
58
+ sca?: SCAResult;
59
+ /** 增量模式信息 */
60
+ incremental?: {
61
+ filesChanged: number;
62
+ filesTotal: number;
63
+ filesReused: number;
64
+ };
65
+ }
66
+ export interface ProjectConfig {
67
+ version: string;
68
+ created: string;
69
+ project: {
70
+ name: string;
71
+ root: string;
72
+ language: Language;
73
+ framework: string;
74
+ };
75
+ scan: {
76
+ rules: string[];
77
+ exclude: string[];
78
+ timeout: number;
79
+ };
80
+ report: {
81
+ format: 'html' | 'json' | 'sarif';
82
+ template?: string;
83
+ };
84
+ }
85
+ export type Language = 'java' | 'javascript' | 'typescript' | 'python' | 'go' | 'kotlin' | 'unknown';
86
+ export interface ProjectDetection {
87
+ language: Language;
88
+ framework: string;
89
+ buildTool: BuildTool;
90
+ testFramework: string;
91
+ confidence: number;
92
+ /** 检测依据的文件 */
93
+ detectedBy: string[];
94
+ }
95
+ export type BuildTool = 'maven' | 'gradle' | 'npm' | 'pnpm' | 'yarn' | 'pip' | 'poetry' | 'go-mod' | 'unknown';
96
+ export type Ecosystem = 'maven' | 'npm' | 'pypi' | 'pip' | 'go' | 'nuget' | 'unknown';
97
+ export type DependencyScope = 'runtime' | 'development' | 'test' | 'optional' | 'provided';
98
+ export interface Dependency {
99
+ /** groupId:artifactId (Maven) 或 package name (NPM/PyPI) */
100
+ name: string;
101
+ version: string;
102
+ ecosystem: Ecosystem;
103
+ scope: DependencyScope;
104
+ /** 许可证 SPDX 标识，如 MIT / Apache-2.0 */
105
+ licenses: string[];
106
+ /** 是否为直接依赖 (vs 传递依赖) */
107
+ direct: boolean;
108
+ /** 最新可用版本 (来自 Central/NPM/PyPI registry) */
109
+ latest?: string;
110
+ /** 依赖深度: 0=直接, 1=一级传递, ... */
111
+ depth: number;
112
+ }
113
+ export interface Vulnerability {
114
+ /** CVE 编号，如 CVE-2021-44228 */
115
+ cveId: string;
116
+ /** CVSS 3.1 分数 */
117
+ cvss: number;
118
+ /** 逐码映射的严重等级 */
119
+ severity: Severity;
120
+ /** CVE 描述 */
121
+ description: string;
122
+ /** 修复版本，如 >=2.17.0 */
123
+ fixedVersion?: string;
124
+ /** 参考链接 */
125
+ references: string[];
126
+ /** 数据来源 */
127
+ source: 'NVD' | 'OSS_INDEX' | 'GITHUB_ADVISORY' | 'CHINA_COMPONENT_DB';
128
+ /** CWE 关联 */
129
+ cwe?: string;
130
+ }
131
+ export interface SCAResult {
132
+ /** 解析到的全部依赖 */
133
+ dependencies: Dependency[];
134
+ /** 匹配到的已知漏洞 */
135
+ vulnerabilities: Vulnerability[];
136
+ /** 各生态依赖数量 */
137
+ ecosystemCount: Record<Ecosystem, number>;
138
+ /** 依赖总数 */
139
+ totalDependencies: number;
140
+ /** 有已知漏洞的依赖数 */
141
+ vulnerableCount: number;
142
+ }
143
+ export type SBOMFormat = 'cyclonedx-1.5' | 'cyclonedx-1.6' | 'spdx-2.3';
144
+ export interface SBOMComponent {
145
+ name: string;
146
+ version: string;
147
+ purl: string;
148
+ licenses: string[];
149
+ supplier?: string;
150
+ hashes?: {
151
+ algorithm: string;
152
+ value: string;
153
+ }[];
154
+ }
155
+ export interface SBOM {
156
+ format: SBOMFormat;
157
+ specVersion: string;
158
+ serialNumber: string;
159
+ createdAt: string;
160
+ components: SBOMComponent[];
161
+ dependencies?: {
162
+ ref: string;
163
+ dependsOn: string[];
164
+ }[];
165
+ }
166
+ export interface IncrementalState {
167
+ /** 最近一次扫描的 commit SHA */
168
+ lastCommit: string;
169
+ /** 上次扫描的文件清单 */
170
+ filesScanned: string[];
171
+ /** 文件 → findings 缓存 */
172
+ findingsCache: Record<string, Finding[]>;
173
+ /** 缓存时间戳 */
174
+ timestamp: string;
175
+ /** 缓存版本 (用于检测格式变更) */
176
+ cacheVersion: number;
177
+ }
178
+ export interface IncrementalDiff {
179
+ added: string[];
180
+ modified: string[];
181
+ deleted: string[];
182
+ }
183
+ export interface ProjectSummary {
184
+ id: string;
185
+ name: string;
186
+ language: Language;
187
+ framework: string;
188
+ lastScanAt?: string;
189
+ scanCount: number;
190
+ createdAt: string;
191
+ }
192
+ export interface ScanTask {
193
+ id: string;
194
+ projectId: string;
195
+ status: ScanTaskStatus;
196
+ progress: number;
197
+ findings: number;
198
+ createdAt: string;
199
+ completedAt?: string;
200
+ }
201
+ export type ScanTaskStatus = 'queued' | 'running' | 'completed' | 'failed' | 'cancelled';
202
+ export interface PaginatedResponse<T> {
203
+ data: T[];
204
+ total: number;
205
+ page: number;
206
+ pageSize: number;
207
+ }
208
+ export interface HealthCheck {
209
+ status: 'ok' | 'degraded' | 'down';
210
+ version: string;
211
+ uptime: number;
212
+ checks: {
213
+ semgrep: boolean;
214
+ database: boolean;
215
+ redis: boolean;
216
+ scaCache: boolean;
217
+ };
218
+ }
219
+ /** Semgrep SARIF 原始输出 (部分字段，按需扩展) */
220
+ export interface SemgrepSarif {
221
+ version: string;
222
+ runs: {
223
+ results: {
224
+ ruleId: string;
225
+ level: string;
226
+ message: {
227
+ text: string;
228
+ };
229
+ locations: {
230
+ physicalLocation: {
231
+ artifactLocation: {
232
+ uri: string;
233
+ };
234
+ region: {
235
+ startLine: number;
236
+ startColumn: number;
237
+ snippet?: {
238
+ text: string;
239
+ };
240
+ };
241
+ };
242
+ }[];
243
+ properties?: {
244
+ precision?: string;
245
+ cwe?: string[];
246
+ owasp?: string;
247
+ };
248
+ }[];
249
+ tool: {
250
+ driver: {
251
+ name: string;
252
+ rules: {
253
+ id: string;
254
+ name: string;
255
+ fullDescription?: {
256
+ text: string;
257
+ };
258
+ defaultConfiguration?: {
259
+ level: string;
260
+ };
261
+ }[];
262
+ };
263
+ };
264
+ }[];
265
+ }
266
+ /** .zhuma-cache 目录下的配置缓存 */
267
+ export interface ConfigCache {
268
+ /** 项目根路径 → 检测结果 */
269
+ projects: Record<string, ProjectDetection>;
270
+ updatedAt: string;
271
+ }
272
+ //# sourceMappingURL=index.d.ts.map
package/dist/index.d.ts.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,aAAa;AACb,MAAM,WAAW,OAAO;IACtB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,gBAAgB;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sBAAsB;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa;IACb,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB;AAED,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE9D,MAAM,MAAM,YAAY,GACpB,eAAe,GACf,KAAK,GACL,mBAAmB,GACnB,gBAAgB,GAChB,gBAAgB,GAChB,MAAM,GACN,KAAK,GACL,iBAAiB,GACjB,MAAM,GACN,QAAQ,GACR,eAAe,GACf,aAAa,GACb,MAAM,GACN,UAAU,GACV,QAAQ,GACR,cAAc,CAAC;AAMnB,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,aAAa;IACb,WAAW,CAAC,EAAE;QACZ,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAMD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,QAAQ,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;QAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,MAAM,QAAQ,GAChB,MAAM,GACN,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,IAAI,GACJ,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc;IACd,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,MAAM,SAAS,GACjB,OAAO,GACP,QAAQ,GACR,KAAK,GACL,MAAM,GACN,MAAM,GACN,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,SAAS,CAAC;AAMd,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC;AAEtF,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;AAE3F,MAAM,WAAW,UAAU;IACzB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,wBAAwB;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,aAAa;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW;IACX,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW;IACX,MAAM,EAAE,KAAK,GAAG,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;IACvE,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,SAAS;IACxB,eAAe;IACf,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,eAAe;IACf,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,cAAc;IACd,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC1C,WAAW;IACX,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB;IAChB,eAAe,EAAE,MAAM,CAAC;CACzB;AAMD,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,eAAe,GAAG,UAAU,CAAC;AAExE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,IAAI;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;CACvD;AAMD,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,uBAAuB;IACvB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACzC,YAAY;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAMD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,MAAM,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QACN,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAMD,qCAAqC;AACrC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QACJ,OAAO,EAAE;YACP,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;YACd,OAAO,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC;YAC1B,SAAS,EAAE;gBACT,gBAAgB,EAAE;oBAChB,gBAAgB,EAAE;wBAAE,GAAG,EAAE,MAAM,CAAA;qBAAE,CAAC;oBAClC,MAAM,EAAE;wBACN,SAAS,EAAE,MAAM,CAAC;wBAClB,WAAW,EAAE,MAAM,CAAC;wBACpB,OAAO,CAAC,EAAE;4BAAE,IAAI,EAAE,MAAM,CAAA;yBAAE,CAAC;qBAC5B,CAAC;iBACH,CAAC;aACH,EAAE,CAAC;YACJ,UAAU,CAAC,EAAE;gBACX,SAAS,CAAC,EAAE,MAAM,CAAC;gBACnB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;gBACf,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;SACH,EAAE,CAAC;QACJ,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC;gBACb,KAAK,EAAE;oBACL,EAAE,EAAE,MAAM,CAAC;oBACX,IAAI,EAAE,MAAM,CAAC;oBACb,eAAe,CAAC,EAAE;wBAAE,IAAI,EAAE,MAAM,CAAA;qBAAE,CAAC;oBACnC,oBAAoB,CAAC,EAAE;wBAAE,KAAK,EAAE,MAAM,CAAA;qBAAE,CAAC;iBAC1C,EAAE,CAAC;aACL,CAAC;SACH,CAAC;KACH,EAAE,CAAC;CACL;AAED,4BAA4B;AAC5B,MAAM,WAAW,WAAW;IAC1B,mBAAmB;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;CACnB"}
package/dist/index.js ADDED
@@ -0,0 +1,12 @@
1
+ /**
2
+ * 逐码 SDK — 共享类型定义
3
+ *
4
+ * V4.1 Sprint 1 | 众安天下 · 猎鹰情报威胁中心
5
+ *
6
+ * 本文件是整个项目的接口契约 —— 所有包 (cli / rules / web-api) 都依赖这些类型。
7
+ * 修改前必须通知 A1/A4/A6/A8 四人评审。
8
+ *
9
+ * BASELINE_FROZEN: 2026-06-28 (Sprint 1 W1 D1)
10
+ */
11
+ export {};
12
+ //# sourceMappingURL=index.js.map
package/dist/index.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}
package/package.json ADDED
@@ -0,0 +1,21 @@
1
+ {
2
+ "name": "@zhuma4/sdk",
3
+ "version": "4.0.0-alpha.1",
4
+ "description": "逐码 SDK — 共享类型定义和工具函数",
5
+ "main": "dist/index.js",
6
+ "types": "dist/index.d.ts",
7
+ "type": "module",
8
+ "files": ["dist", "README.md"],
9
+ "scripts": {
10
+ "build": "tsc -b",
11
+ "clean": "rm -rf dist",
12
+ "prepublishOnly": "echo SDK pre-compiled"
13
+ },
14
+ "dependencies": {},
15
+ "repository": {
16
+ "type": "git",
17
+ "url": "https://github.com/zeracker/zhuma-v4"
18
+ },
19
+ "keywords": ["sast", "security", "code-analysis", "zhuma"],
20
+ "license": "Apache-2.0"
21
+ }