agentic-qe 3.14.2 → 3.14.4

package/dist/domains/code-intelligence/services/metric-collector/test-counter.js

@@ -185,29 +185,21 @@ export function checkTestRunners(projectPath) {
  */
 function countVitestTests(projectPath, config) {
     try {
-        // Use vitest list for safe enumeration (NO execution)
-        // --reporter=json gives structured output we can parse
-        const output = execSync('npx vitest list --reporter=json', {
+        // Use vitest list for safe enumeration (NO execution). --json emits one
+        // entry per discovered test in Vitest 4 and 5; --reporter=json does not.
+        const output = execSync('npx vitest list --json', {
             cwd: projectPath,
             encoding: 'utf-8',
             timeout: Math.min(config.timeout, 30000), // Cap at 30s for listing
             maxBuffer: 10 * 1024 * 1024, // 10MB buffer (reduced from 50MB)
         });
-        // Parse JSON output from vitest list
         try {
             const data = safeJsonParse(output);
-            // vitest list --reporter=json returns array of test files with tests
-            if (Array.isArray(data)) {
-                let total = 0;
-                for (const file of data) {
-                    // Each file entry has a `tests` array
-                    if (file.tests && Array.isArray(file.tests)) {
-                        total += countTestsRecursive(file.tests);
-                    }
-                }
-                return classifyTests(total, 'vitest', projectPath);
+            // Vitest list --json returns a flat array of { name, file, location? }.
+            if (Array.isArray(data) && data.every(test => test && typeof test.name === 'string' && typeof test.file === 'string')) {
+                return classifyTests(data.length, 'vitest', projectPath);
             }
-            // Alternative format: object with numTotalTests
+            // Preserve compatibility with older structured runner output.
             if (data && typeof data.numTotalTests === 'number') {
                 return classifyTests(data.numTotalTests, 'vitest', projectPath);
             }
@@ -228,34 +220,11 @@ function countVitestTests(projectPath, config) {
         // If vitest list produced no usable output, fall back to file pattern
         return countTestsByFilePattern(projectPath, config);
     }
-    catch (error) {
+    catch {
         // vitest list failed (not installed, timeout, etc.) - fall back to file pattern
         return countTestsByFilePattern(projectPath, config);
     }
 }
-/**
- * Recursively count tests in vitest's nested test structure
- */
-function countTestsRecursive(tests) {
-    let count = 0;
-    for (const test of tests) {
-        if (typeof test === 'object' && test !== null) {
-            const t = test;
-            // Count this test if it has a name (actual test, not describe block)
-            if (t.type === 'test' || t.mode === 'run' || t.mode === 'skip') {
-                count++;
-            }
-            // Recurse into children (nested describes)
-            if (Array.isArray(t.tests)) {
-                count += countTestsRecursive(t.tests);
-            }
-            if (Array.isArray(t.children)) {
-                count += countTestsRecursive(t.children);
-            }
-        }
-    }
-    return count;
-}
 /**
  * Count tests using Jest
  * Uses `jest --listTests` for accurate test file discovery WITHOUT execution.
@@ -286,7 +255,7 @@ function countJestTests(projectPath, config) {
         // If jest --listTests produced no files, fall back to file pattern
         return countTestsByFilePattern(projectPath, config);
     }
-    catch (error) {
+    catch {
         // jest --listTests failed - fall back to file pattern
         return countTestsByFilePattern(projectPath, config);
     }

package/dist/domains/constants.d.ts

@@ -460,12 +460,7 @@ export declare const LLM_ANALYSIS_CONSTANTS: {
     /**
      * Model tier mapping.
      */
-    readonly MODEL_TIERS: {
-        readonly 1: "claude-haiku-4-5";
-        readonly 2: "claude-sonnet-4-6";
-        readonly 3: "claude-sonnet-4-6";
-        readonly 4: "claude-opus-4-7";
-    };
+    readonly MODEL_TIERS: Readonly<Record<1 | 4 | 2 | 3, string>>;
 };
 export type TestExecutionConstants = typeof TEST_EXECUTION_CONSTANTS;
 export type E2EConstants = typeof E2E_CONSTANTS;

package/dist/domains/constants.js

@@ -7,6 +7,7 @@
  *
  * @see ADR-051: LLM-Powered Analysis
  */
+import { CLAUDE_TIER_MODELS } from '../shared/llm/model-registry.js';
 // ============================================================================
 // Test Execution Constants
 // ============================================================================
@@ -493,11 +494,6 @@ export const LLM_ANALYSIS_CONSTANTS = {
     /**
      * Model tier mapping.
      */
-    MODEL_TIERS: {
-        1: 'claude-haiku-4-5',
-        2: 'claude-sonnet-4-6',
-        3: 'claude-sonnet-4-6',
-        4: 'claude-opus-4-7',
-    },
+    MODEL_TIERS: CLAUDE_TIER_MODELS,
 };
 //# sourceMappingURL=constants.js.map

package/dist/domains/contract-testing/services/contract-validator.js

@@ -8,6 +8,7 @@ import { createSafeRegex } from '../../../shared/security/regex-safety-validator
 import { CONTRACT_CONSTANTS, LLM_ANALYSIS_CONSTANTS } from '../../constants.js';
 import { toError } from '../../../shared/error-utils.js';
 import { safeJsonParse } from '../../../shared/safe-json.js';
+import { getClaudeModelForTier } from '../../../shared/llm/model-registry.js';
 const DEFAULT_CONFIG = {
     strictMode: true,
     validateExamples: true,
@@ -46,13 +47,7 @@ export class ContractValidatorService {
      * ADR-051: Get model name for tier
      */
     getModelForTier(tier) {
-        const models = {
-            1: 'claude-haiku-4-5',
-            2: 'claude-sonnet-4-6',
-            3: 'claude-sonnet-4-6',
-            4: 'claude-opus-4-7',
-        };
-        return models[tier] || models[2];
+        return getClaudeModelForTier(tier);
     }
     /**
      * ADR-051: LLM-powered contract analysis

package/dist/domains/coverage-analysis/services/coverage-analyzer.js

@@ -9,6 +9,7 @@ import { ok, err } from '../../../shared/types/index.js';
 import { toError } from '../../../shared/error-utils.js';
 import { safeJsonParse } from '../../../shared/safe-json.js';
 import { writeQualityEvidence } from '../../quality-assessment/quality-evidence.js';
+import { getClaudeModelForTier } from '../../../shared/llm/model-registry.js';
 const DEFAULT_CONFIG = {
     defaultThreshold: 80,
     enableLLMAnalysis: true, // On by default - opt-out
@@ -182,18 +183,7 @@ export class CoverageAnalyzerService {
      * Get model ID for the configured tier
      */
     getModelForTier(tier) {
-        switch (tier) {
-            case 1:
-                return 'claude-haiku-4-5-20251001';
-            case 2:
-                return 'claude-sonnet-4-6';
-            case 3:
-                return 'claude-sonnet-4-6';
-            case 4:
-                return 'claude-opus-4-7';
-            default:
-                return 'claude-sonnet-4-6';
-        }
+        return getClaudeModelForTier(tier);
     }
     /**
      * Analyze coverage gaps using LLM for intelligent insights

package/dist/domains/coverage-analysis/services/gap-detector.js

@@ -8,6 +8,7 @@ import { LoggerFactory } from '../../../logging/index.js';
 import { ok, err } from '../../../shared/types/index.js';
 import { toError } from '../../../shared/error-utils.js';
 import { safeJsonParse } from '../../../shared/safe-json.js';
+import { getClaudeModelForTier } from '../../../shared/llm/model-registry.js';
 const DEFAULT_CONFIG = {
     minCoverage: 80,
     enableLLMAnalysis: true, // On by default - opt-out
@@ -59,13 +60,7 @@ export class GapDetectorService {
      * Get model ID for the configured tier
      */
     getModelForTier(tier) {
-        switch (tier) {
-            case 1: return 'claude-haiku-4-5-20251001';
-            case 2: return 'claude-sonnet-4-6';
-            case 3: return 'claude-sonnet-4-6';
-            case 4: return 'claude-opus-4-7';
-            default: return 'claude-sonnet-4-6';
-        }
+        return getClaudeModelForTier(tier);
     }
     /**
      * Analyze coverage gaps using LLM for intelligent prioritization

package/dist/domains/defect-intelligence/services/defect-predictor.js

@@ -13,6 +13,7 @@ import { FileReader } from '../../../shared/io/index.js';
 import { TypeScriptParser } from '../../../shared/parsers/index.js';
 import { toError } from '../../../shared/error-utils.js';
 import { safeJsonParse } from '../../../shared/safe-json.js';
+import { getClaudeModelForTier } from '../../../shared/llm/model-registry.js';
 // LLMDefectAnalysis is imported from ../interfaces
 const DEFAULT_CONFIG = {
     defaultThreshold: 0.5,
@@ -111,18 +112,7 @@ export class DefectPredictorService {
      * Get model ID for the configured tier
      */
     getModelForTier(tier) {
-        switch (tier) {
-            case 1:
-                return 'claude-haiku-4-5-20251001';
-            case 2:
-                return 'claude-sonnet-4-6';
-            case 3:
-                return 'claude-sonnet-4-6';
-            case 4:
-                return 'claude-opus-4-7';
-            default:
-                return 'claude-sonnet-4-6';
-        }
+        return getClaudeModelForTier(tier);
     }
     /**
      * Analyze defect risk using LLM for enhanced insights

package/dist/domains/defect-intelligence/services/root-cause-analyzer.js

@@ -8,6 +8,7 @@ import { LoggerFactory } from '../../../logging/index.js';
 import { ok, err } from '../../../shared/types/index.js';
 import { toError } from '../../../shared/error-utils.js';
 import { safeJsonParse } from '../../../shared/safe-json.js';
+import { getClaudeModelForTier } from '../../../shared/llm/model-registry.js';
 const DEFAULT_CONFIG = {
     maxTimelineEvents: 20,
     maxRelatedFiles: 10,
@@ -193,13 +194,7 @@ export class RootCauseAnalyzerService {
      * Get model ID for the configured tier
      */
     getModelForTier(tier) {
-        switch (tier) {
-            case 1: return 'claude-haiku-4-5-20251001';
-            case 2: return 'claude-sonnet-4-6';
-            case 3: return 'claude-sonnet-4-6';
-            case 4: return 'claude-opus-4-7';
-            default: return 'claude-sonnet-4-6';
-        }
+        return getClaudeModelForTier(tier);
     }
     /**
      * Analyze root cause using LLM for deeper insights

package/dist/domains/learning-optimization/services/learning-coordinator.js

@@ -8,6 +8,7 @@ import { ok, err } from '../../../shared/types/index.js';
 import { rehydrateDates } from '../../../shared/utils/kv-date-rehydrate.js';
 import { toError } from '../../../shared/error-utils.js';
 import { createQEFlashAttention, } from '../../../integrations/ruvector/wrappers.js';
+import { getClaudeModelForTier } from '../../../shared/llm/model-registry.js';
 const DEFAULT_CONFIG = {
     minExperiencesForPattern: 5,
     patternConfidenceThreshold: 0.7,
@@ -162,13 +163,7 @@ export class LearningCoordinatorService {
      * @returns Model ID string
      */
     getModelForTier(tier) {
-        const models = {
-            1: 'claude-haiku-4-5',
-            2: 'claude-sonnet-4-6',
-            3: 'claude-sonnet-4-6',
-            4: 'claude-opus-4-7',
-        };
-        return models[tier] || models[2];
+        return getClaudeModelForTier(tier);
     }
     /**
      * ADR-051: LLM-powered pattern synthesis

package/dist/domains/quality-assessment/services/deployment-advisor.js

@@ -9,6 +9,7 @@ import { v4 as uuidv4 } from 'uuid';
 import { ok, err } from '../../../shared/types/index.js';
 import { toError } from '../../../shared/error-utils.js';
 import { safeJsonParse } from '../../../shared/safe-json.js';
+import { getClaudeModelForTier } from '../../../shared/llm/model-registry.js';
 const DEFAULT_CONFIG = {
     riskWeights: {
         coverage: 0.15,
@@ -68,13 +69,7 @@ export class DeploymentAdvisorService {
      * Get model ID for the configured tier
      */
     getModelForTier(tier) {
-        switch (tier) {
-            case 1: return 'claude-haiku-4-5-20251001';
-            case 2: return 'claude-sonnet-4-6';
-            case 3: return 'claude-sonnet-4-6';
-            case 4: return 'claude-opus-4-7';
-            default: return 'claude-sonnet-4-6';
-        }
+        return getClaudeModelForTier(tier);
     }
     /**
      * Generate deployment advice using LLM for deeper insights

package/dist/domains/quality-assessment/services/quality-analyzer.js

@@ -8,6 +8,7 @@ import { ok, err } from '../../../shared/types/index.js';
 import { getCodeMetricsAnalyzer } from '../../../shared/metrics/index.js';
 import { toError } from '../../../shared/error-utils.js';
 import { safeJsonParse } from '../../../shared/safe-json.js';
+import { getClaudeModelForTier } from '../../../shared/llm/model-registry.js';
 const DEFAULT_CONFIG = {
     enableTrendAnalysis: true,
     trendDataPointsMin: 3,
@@ -77,13 +78,7 @@ export class QualityAnalyzerService {
      * Get model ID for the configured tier
      */
     getModelForTier(tier) {
-        switch (tier) {
-            case 1: return 'claude-haiku-4-5-20251001';
-            case 2: return 'claude-sonnet-4-6';
-            case 3: return 'claude-sonnet-4-6';
-            case 4: return 'claude-opus-4-7';
-            default: return 'claude-sonnet-4-6';
-        }
+        return getClaudeModelForTier(tier);
     }
     /**
      * Generate quality insights using LLM

package/dist/domains/requirements-validation/services/requirements-validator.js

@@ -9,6 +9,7 @@ import { LoggerFactory } from '../../../logging/index.js';
 import { ok, err } from '../../../shared/types/index.js';
 import { toError } from '../../../shared/error-utils.js';
 import { safeJsonParse } from '../../../shared/safe-json.js';
+import { getClaudeModelForTier } from '../../../shared/llm/model-registry.js';
 const DEFAULT_CONFIG = {
     enableAmbiguityDetection: true,
     minAcceptanceCriteria: 1,
@@ -83,13 +84,7 @@ export class RequirementsValidatorService {
      * Get model ID for the configured tier
      */
     getModelForTier(tier) {
-        switch (tier) {
-            case 1: return 'claude-haiku-4-5-20251001';
-            case 2: return 'claude-sonnet-4-6';
-            case 3: return 'claude-sonnet-4-6';
-            case 4: return 'claude-opus-4-7';
-            default: return 'claude-sonnet-4-6';
-        }
+        return getClaudeModelForTier(tier);
     }
     /**
      * Analyze requirements with LLM for deeper insights

package/dist/domains/security-compliance/interfaces.d.ts

@@ -1,3 +1,4 @@
+import type { SecurityScanEvidence } from './scan-evidence.js';
 /**
  * Agentic QE v3 - Security & Compliance Domain Interfaces
  *
@@ -133,6 +134,8 @@ export interface SASTResult {
     readonly vulnerabilities: Vulnerability[];
     readonly summary: ScanSummary;
     readonly coverage: SecurityCoverage;
+    /** Absent on legacy adapters; absence does not prove completed analysis. */
+    readonly evidence?: SecurityScanEvidence;
 }
 export interface RuleSet {
     readonly id: string;
@@ -147,6 +150,8 @@ export interface FalsePositiveCheck {
     readonly reason?: string;
 }
 export interface SecurityCoverage {
+    /** Counter scope; external engine rule coverage is described in evidence. */
+    readonly rulesAppliedScope?: 'built-in-patterns';
     readonly filesScanned: number;
     readonly linesScanned: number;
     readonly rulesApplied: number;

package/dist/domains/security-compliance/interfaces.js

@@ -1,8 +1,2 @@
-/**
- * Agentic QE v3 - Security & Compliance Domain Interfaces
- *
- * Bounded Context: Security & Compliance
- * Responsibility: SAST/DAST scanning, vulnerability analysis, compliance validation
- */
 export {};
 //# sourceMappingURL=interfaces.js.map

package/dist/domains/security-compliance/scan-discovery.d.ts

@@ -0,0 +1,12 @@
+import type { SecurityDiscoveryEvidence } from './scan-evidence.js';
+export declare function isSecuritySourceFile(filePath: string): boolean;
+export interface SecurityDiscoveryOptions {
+    readonly maxFiles?: number;
+    readonly maxDepth?: number;
+}
+/** Discover source inputs without turning failures or truncation into empty success. */
+export declare function discoverSecurityFiles(target: string, options?: SecurityDiscoveryOptions): Promise<{
+    files: string[];
+    discovery: SecurityDiscoveryEvidence;
+}>;
+//# sourceMappingURL=scan-discovery.d.ts.map

package/dist/domains/security-compliance/scan-discovery.js

@@ -0,0 +1,105 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+// The established security task's source-language scope. A direct file target
+// is retained even when unsupported, so its scanner disposition is observable.
+const SOURCE_EXTENSIONS = new Set([
+    '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs', '.py', '.pyw', '.go', '.rs',
+    '.java', '.kt', '.kts', '.rb', '.cs', '.php', '.swift', '.c', '.h', '.cpp',
+    '.hpp', '.cc', '.scala',
+]);
+const EXCLUDED_DIRECTORIES = new Set([
+    'node_modules', '.git', 'dist', 'build', 'coverage', '.nyc_output',
+    '__pycache__', '.venv', 'venv', '.tox', '.mypy_cache', 'target', '.gradle',
+    'vendor', '.bundle', '.agentic-qe', '.claude', '.cache', '.npm', '.yarn',
+    '.next', '.nuxt', '.svelte-kit', 'out', '.turbo', 'tmp', 'temp', '.tmp',
+]);
+export function isSecuritySourceFile(filePath) {
+    return SOURCE_EXTENSIONS.has(path.extname(filePath).toLowerCase());
+}
+/** Discover source inputs without turning failures or truncation into empty success. */
+export async function discoverSecurityFiles(target, options = {}) {
+    const maxFiles = options.maxFiles ?? 5000;
+    const maxDepth = options.maxDepth ?? 64;
+    if (!Number.isSafeInteger(maxFiles) || maxFiles < 1
+        || !Number.isSafeInteger(maxDepth) || maxDepth < 0) {
+        throw new Error('Security discovery requires a positive file limit and non-negative depth limit.');
+    }
+    const files = [];
+    const issues = [];
+    const excludedPaths = [];
+    const root = path.resolve(target);
+    let rootFailed = false;
+    let truncated = false;
+    function recordError(location, error) {
+        const code = error?.code;
+        // Raw errors can include source text, arguments, URLs, or credentials.
+        issues.push({ path: location, reason: typeof code === 'string' && /^[A-Z0-9_]{1,32}$/.test(code)
+                ? code : 'DISCOVERY_FAILED' });
+    }
+    async function walk(directory, depth) {
+        if (depth > maxDepth) {
+            issues.push({ path: directory, reason: 'DEPTH_LIMIT' });
+            return;
+        }
+        let entries;
+        try {
+            entries = await fs.readdir(directory, { withFileTypes: true });
+        }
+        catch (error) {
+            recordError(directory, error);
+            if (directory === root)
+                rootFailed = true;
+            return;
+        }
+        entries.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+        for (const entry of entries) {
+            if (truncated)
+                return;
+            const entryPath = path.join(directory, entry.name);
+            if (entry.isSymbolicLink()) {
+                // Observed symlinks are explicitly excluded; their targets are not
+                // claimed as scanned. Discovery does not guarantee an atomic snapshot.
+                excludedPaths.push(entryPath);
+            }
+            else if (entry.isDirectory()) {
+                if (EXCLUDED_DIRECTORIES.has(entry.name))
+                    excludedPaths.push(entryPath);
+                else
+                    await walk(entryPath, depth + 1);
+            }
+            else if (entry.isFile() && isSecuritySourceFile(entry.name)) {
+                if (files.length === maxFiles) {
+                    issues.push({ path: entryPath, reason: 'FILE_LIMIT' });
+                    truncated = true;
+                    return;
+                }
+                files.push(entryPath);
+            }
+        }
+    }
+    try {
+        const stat = await fs.lstat(root);
+        if (stat.isFile())
+            files.push(root);
+        else if (stat.isDirectory())
+            await walk(root, 0);
+        else {
+            rootFailed = true;
+            issues.push({ path: root, reason: stat.isSymbolicLink() ? 'SYMLINK_TARGET' : 'NOT_REGULAR_INPUT' });
+        }
+    }
+    catch (error) {
+        rootFailed = true;
+        recordError(root, error);
+    }
+    return {
+        files,
+        discovery: {
+            status: rootFailed ? 'failed' : issues.length > 0 ? 'partial' : 'complete',
+            policy: 'aqe-security-source-files@1',
+            issues,
+            excludedPaths,
+        },
+    };
+}
+//# sourceMappingURL=scan-discovery.js.map

package/dist/domains/security-compliance/scan-evidence.d.ts

@@ -0,0 +1,57 @@
+/** Evidence of executed security analysis; findings alone do not establish coverage. */
+export type SecurityFileDisposition = 'analyzed' | 'unsupported' | 'unreadable' | 'excluded' | 'failed' | 'unavailable' | 'not-run';
+export interface SecurityFileEvidence {
+    /** Normalized absolute path; normalization does not resolve symlinks. */
+    readonly path: string;
+    readonly engineId: string;
+    readonly status: SecurityFileDisposition;
+    /** SHA-256 of the exact source bytes read by this engine. */
+    readonly sourceDigest?: string;
+    readonly readLines: number;
+    readonly analyzedLines: number;
+    /** A bounded error code or static description; never source contents. */
+    readonly reason?: string;
+}
+export interface SecurityEngineEvidence {
+    readonly id: string;
+    readonly requested: boolean;
+    /** Whether this engine is required for the declared analysis scope. */
+    readonly required: boolean;
+    readonly status: 'completed' | 'partial' | 'failed' | 'unavailable' | 'disabled' | 'unverified' | 'not-run';
+    readonly scope: 'requested-files' | 'parent-directory' | 'url';
+    readonly target?: string;
+    /** Only populated when input membership was actually established. */
+    readonly analyzedFiles?: number;
+    readonly ruleIds?: readonly string[];
+    /** SHA-256 of selected rule definitions, when these are locally known. */
+    readonly rulesetDigest?: string;
+    readonly ruleCoverage: 'known' | 'unknown';
+    readonly version?: string;
+    readonly errors: readonly string[];
+    readonly limitations: readonly string[];
+}
+export interface SecurityScanEvidence {
+    readonly schemaVersion: 1;
+    /** Completeness of required declared scope, not absence of vulnerabilities. */
+    readonly completeness: 'complete' | 'partial' | 'none';
+    /** Unique normalized absolute requested paths, without resolving symlinks. */
+    readonly requestedFiles: number;
+    readonly requestedPaths: readonly string[];
+    readonly duplicateInputs: number;
+    /** A path may have separate receipts for independently executed engines. */
+    readonly files: readonly SecurityFileEvidence[];
+    readonly engines: readonly SecurityEngineEvidence[];
+    readonly limitations: readonly string[];
+    /** Discovery describes the declared source-file policy, not every repository file. */
+    readonly discovery?: SecurityDiscoveryEvidence;
+}
+export interface SecurityDiscoveryEvidence {
+    readonly status: 'complete' | 'partial' | 'failed';
+    readonly policy: 'aqe-security-source-files@1';
+    readonly issues: readonly {
+        readonly path: string;
+        readonly reason: string;
+    }[];
+    readonly excludedPaths: readonly string[];
+}
+//# sourceMappingURL=scan-evidence.d.ts.map

package/dist/domains/security-compliance/scan-evidence.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scan-evidence.js.map

package/dist/domains/security-compliance/services/scanners/sast-scanner.d.ts

@@ -2,8 +2,8 @@
  * Agentic QE v3 - SAST (Static Application Security Testing) Scanner
  * Performs static code analysis to detect security vulnerabilities
  */
+import { FilePath } from '@shared/value-objects/index.js';
 import { Result } from '@shared/types/index.js';
-import type { FilePath } from '@shared/value-objects/index.js';
 import type { SecurityScannerConfig, Vulnerability, RemediationAdvice, SASTResult, RuleSet, FalsePositiveCheck, MemoryBackend, HybridRouter, ScanStatus } from './scanner-types.js';
 export declare class SASTScanner {
     private readonly config;
@@ -27,7 +27,7 @@ export declare class SASTScanner {
     private runPatternScanning;
     /**
      * Run semgrep scanning when enabled and available.
-     * Returns converted vulnerabilities or empty array on failure/unavailability.
+     * Optional engine failure preserves completed pattern analysis and its findings.
      */
     private runSemgrepScanning;
     /**
@@ -54,6 +54,7 @@ export declare class SASTScanner {
     /**
      * Analyze a file for security vulnerabilities using pattern-based detection
      */
+    private getApplicablePatterns;
     private analyzeFile;
     /**
      * Find all matches of a security pattern in the file content