agentic-qe 3.6.7 → 3.6.9

package/v3/dist/domains/security-compliance/services/scanners/scanner-orchestrator.js

@@ -2,11 +2,12 @@
  * Agentic QE v3 - Scanner Orchestrator
  * Coordinates SAST, DAST, and Dependency scanning activities
  */
-import { ok, err } from '../../../../shared/types/index.js';
+import { ok, err } from '@shared/types/index.js';
 import { DEFAULT_CONFIG } from './scanner-types.js';
 import { SASTScanner } from './sast-scanner.js';
 import { DASTScanner } from './dast-scanner.js';
 import { DependencyScanner } from './dependency-scanner.js';
+import { toError } from '@shared/error-utils.js';
 // ============================================================================
 // Scanner Orchestrator Service
 // ============================================================================
@@ -132,7 +133,7 @@ export class SecurityScannerService {
             });
         }
         catch (error) {
-            return err(error instanceof Error ? error : new Error(String(error)));
+            return err(toError(error));
         }
     }
     // ==========================================================================

package/v3/dist/domains/security-compliance/services/scanners/scanner-orchestrator.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanner-orchestrator.js","sourceRoot":"","sources":["../../../../../src/domains/security-compliance/services/scanners/scanner-orchestrator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAU,EAAE,EAAE,GAAG,EAAE,MAAM,mCAAmC,CAAC;AAoBpE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAAwB;IAC9B,MAAM,CAAgB;IACtB,SAAS,CAAgB;IACzB,WAAW,GAA4B,IAAI,GAAG,EAAE,CAAC;IAElE,eAAe;IACE,WAAW,CAAc;IACzB,WAAW,CAAc;IACzB,iBAAiB,CAAoB;IAEtD,YACE,YAAyD,EACzD,SAAyC,EAAE;QAE3C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAE/C,kDAAkD;QAClD,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;YAClC,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC7B,CAAC;QAED,4CAA4C;QAC5C,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAChC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,WAAW,CACjB,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAChC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAC5C,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,0CAA0C;IAC1C,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAiB;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,KAAiB,EACjB,UAAoB;QAEpB,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,aAA4B;QAE5B,OAAO,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAC5D,CAAC;IAED,6EAA6E;IAC7E,0CAA0C;IAC1C,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,OAAqB;QAErB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,SAAiB,EACjB,WAA4B,EAC5B,OAAqB;QAErB,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IACnD,CAAC;IAED,6EAA6E;IAC7E,+DAA+D;IAC/D,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,YAAoC;QAEpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,eAAuB;QAC3C,OAAO,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;IACjE,CAAC;IAED,6EAA6E;IAC7E,oBAAoB;IACpB,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,KAAiB,EACjB,SAAkB,EAClB,OAAqB;QAErB,IAAI,CAAC;YACH,gBAAgB;YAChB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAChF,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBACjC,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YAED,uCAAuC;YACvC,IAAI,UAAkC,CAAC;YACvC,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACxD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC;gBAC9B,CAAC;gBACD,yCAAyC;YAC3C,CAAC;YAED,oBAAoB;YACpB,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAC3C,UAAU,CAAC,KAAK,CAAC,OAAO,EACxB,UAAU,EAAE,OAAO,CACpB,CAAC;YAEF,OAAO,EAAE,CAAC;gBACR,UAAU,EAAE,UAAU,CAAC,KAAK;gBAC5B,UAAU;gBACV,eAAe;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,+DAA+D;IAC/D,6EAA6E;IAE7E;;OAEG;IACH,sBAAsB;QACpB,OAAO,IAAI,CAAC,WAAW,CAAC,sBAAsB,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAAY;QAC1B,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAC/B,IAAmB,EACnB,WAAmB;QAEnB,OAAO,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzE,CAAC;IAED,6EAA6E;IAC7E,kBAAkB;IAClB,6EAA6E;IAE7E;;OAEG;IACK,gBAAgB,CACtB,IAAiB,EACjB,IAAkB;QAElB,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ;YACvC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG;YACxB,aAAa,EAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa;YACtD,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;YAC7C,cAAc,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc;SAC1D,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"scanner-orchestrator.js","sourceRoot":"","sources":["../../../../../src/domains/security-compliance/services/scanners/scanner-orchestrator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAU,EAAE,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAoBzD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAAwB;IAC9B,MAAM,CAAgB;IACtB,SAAS,CAAgB;IACzB,WAAW,GAA4B,IAAI,GAAG,EAAE,CAAC;IAElE,eAAe;IACE,WAAW,CAAc;IACzB,WAAW,CAAc;IACzB,iBAAiB,CAAoB;IAEtD,YACE,YAAyD,EACzD,SAAyC,EAAE;QAE3C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAE/C,kDAAkD;QAClD,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;YAClC,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC7B,CAAC;QAED,4CAA4C;QAC5C,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAChC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,WAAW,CACjB,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAChC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAC5C,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,0CAA0C;IAC1C,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAiB;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,KAAiB,EACjB,UAAoB;QAEpB,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,aAA4B;QAE5B,OAAO,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAC5D,CAAC;IAED,6EAA6E;IAC7E,0CAA0C;IAC1C,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,OAAqB;QAErB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,SAAiB,EACjB,WAA4B,EAC5B,OAAqB;QAErB,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IACnD,CAAC;IAED,6EAA6E;IAC7E,+DAA+D;IAC/D,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,YAAoC;QAEpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,eAAuB;QAC3C,OAAO,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;IACjE,CAAC;IAED,6EAA6E;IAC7E,oBAAoB;IACpB,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,KAAiB,EACjB,SAAkB,EAClB,OAAqB;QAErB,IAAI,CAAC;YACH,gBAAgB;YAChB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAChF,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBACjC,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YAED,uCAAuC;YACvC,IAAI,UAAkC,CAAC;YACvC,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACxD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC;gBAC9B,CAAC;gBACD,yCAAyC;YAC3C,CAAC;YAED,oBAAoB;YACpB,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAC3C,UAAU,CAAC,KAAK,CAAC,OAAO,EACxB,UAAU,EAAE,OAAO,CACpB,CAAC;YAEF,OAAO,EAAE,CAAC;gBACR,UAAU,EAAE,UAAU,CAAC,KAAK;gBAC5B,UAAU;gBACV,eAAe;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,+DAA+D;IAC/D,6EAA6E;IAE7E;;OAEG;IACH,sBAAsB;QACpB,OAAO,IAAI,CAAC,WAAW,CAAC,sBAAsB,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAAY;QAC1B,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAC/B,IAAmB,EACnB,WAAmB;QAEnB,OAAO,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzE,CAAC;IAED,6EAA6E;IAC7E,kBAAkB;IAClB,6EAA6E;IAE7E;;OAEG;IACK,gBAAgB,CACtB,IAAiB,EACjB,IAAkB;QAElB,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ;YACvC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG;YACxB,aAAa,EAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa;YACtD,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;YAC7C,cAAc,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc;SAC1D,CAAC;IACJ,CAAC;CACF"}

package/v3/dist/domains/security-compliance/services/scanners/scanner-types.d.ts

@@ -2,9 +2,9 @@
  * Agentic QE v3 - Security Scanner Shared Types
  * Common types, interfaces, and patterns used across all scanner modules
  */
-import type { MemoryBackend } from '../../../../kernel/interfaces.js';
+import type { MemoryBackend } from '@kernel/interfaces.js';
 import type { Vulnerability, VulnerabilitySeverity, VulnerabilityCategory, VulnerabilityLocation, RemediationAdvice, ScanSummary, SecurityCoverage, ScanStatus, SASTResult, DASTResult, DASTOptions, AuthCredentials, RuleSet, FalsePositiveCheck } from '../../interfaces.js';
-import type { HybridRouter, ChatResponse } from '../../../../shared/llm/index.js';
+import type { HybridRouter, ChatResponse } from '@shared/llm/index.js';
 /**
  * Combined security scanner configuration
  */

package/v3/dist/domains/security-compliance/services/scanners/scanner-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanner-types.d.ts","sourceRoot":"","sources":["../../../../../src/domains/security-compliance/services/scanners/scanner-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,KAAK,EACV,aAAa,EACb,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,eAAe,EACf,OAAO,EACP,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAMlF;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B,EAAE,OAAO,CAAC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,yDAAyD;IACzD,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAED,eAAO,MAAM,cAAc,EAAE,qBAS5B,CAAC;AAMF;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,aAAa,EAAE,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IAEtC,SAAS,CAAC,KAAK,EAAE,OAAO,2CAA2C,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1J,aAAa,CAAC,KAAK,EAAE,OAAO,2CAA2C,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACpL,oBAAoB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,kBAAkB,CAAC,aAAa,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAGlI,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3H,iBAAiB,CACf,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,eAAe,EAC5B,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3E,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAGnD,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC1I,eAAe,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAG5H,WAAW,CACT,KAAK,EAAE,OAAO,2CAA2C,EAAE,QAAQ,EAAE,EACrE,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;CAChF;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAMD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,eAAe,EACf,OAAO,EACP,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,YAAY,GACb,CAAC"}
+{"version":3,"file":"scanner-types.d.ts","sourceRoot":"","sources":["../../../../../src/domains/security-compliance/services/scanners/scanner-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EACV,aAAa,EACb,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,eAAe,EACf,OAAO,EACP,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAMvE;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B,EAAE,OAAO,CAAC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,yDAAyD;IACzD,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAED,eAAO,MAAM,cAAc,EAAE,qBAS5B,CAAC;AAMF;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,aAAa,EAAE,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IAEtC,SAAS,CAAC,KAAK,EAAE,OAAO,2CAA2C,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1J,aAAa,CAAC,KAAK,EAAE,OAAO,2CAA2C,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACpL,oBAAoB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,kBAAkB,CAAC,aAAa,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAGlI,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3H,iBAAiB,CACf,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,eAAe,EAC5B,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3E,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAGnD,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC1I,eAAe,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAG5H,WAAW,CACT,KAAK,EAAE,OAAO,2CAA2C,EAAE,QAAQ,EAAE,EACrE,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,OAAO,mCAAmC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;CAChF;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAMD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,eAAe,EACf,OAAO,EACP,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,YAAY,GACb,CAAC"}

package/v3/dist/domains/security-compliance/services/security-auditor-dast.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Agentic QE v3 - Security Auditor DAST Scanner
+ * Extracted from security-auditor.ts - Dynamic Application Security Testing
+ */
+import type { DASTResult } from '../interfaces.js';
+/**
+ * Perform DAST scan using HTTP requests to test for vulnerabilities
+ * Tests for common web vulnerabilities: XSS, SQL injection, security headers, etc.
+ */
+export declare function performDASTScan(targetUrl: string): Promise<DASTResult>;
+//# sourceMappingURL=security-auditor-dast.d.ts.map

package/v3/dist/domains/security-compliance/services/security-auditor-dast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-auditor-dast.d.ts","sourceRoot":"","sources":["../../../../src/domains/security-compliance/services/security-auditor-dast.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAGV,UAAU,EACX,MAAM,kBAAkB,CAAC;AAM1B;;;GAGG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAwR5E"}

package/v3/dist/domains/security-compliance/services/security-auditor-dast.js

@@ -0,0 +1,284 @@
+/**
+ * Agentic QE v3 - Security Auditor DAST Scanner
+ * Extracted from security-auditor.ts - Dynamic Application Security Testing
+ */
+import { v4 as uuidv4 } from 'uuid';
+import { toErrorMessage } from '../../../shared/error-utils.js';
+// ============================================================================
+// DAST Scanning
+// ============================================================================
+/**
+ * Perform DAST scan using HTTP requests to test for vulnerabilities
+ * Tests for common web vulnerabilities: XSS, SQL injection, security headers, etc.
+ */
+export async function performDASTScan(targetUrl) {
+    const scanId = uuidv4();
+    const startTime = Date.now();
+    const vulnerabilities = [];
+    let crawledUrls = 0;
+    try {
+        // Validate URL
+        let parsedUrl;
+        try {
+            parsedUrl = new URL(targetUrl);
+        }
+        catch {
+            return {
+                scanId,
+                targetUrl,
+                vulnerabilities: [{
+                        id: uuidv4(),
+                        title: 'Invalid Target URL',
+                        description: 'The provided target URL is not valid',
+                        severity: 'informational',
+                        category: 'security-misconfiguration',
+                        location: { file: targetUrl },
+                        remediation: { description: 'Provide a valid URL', estimatedEffort: 'trivial', automatable: false },
+                        references: [],
+                    }],
+                summary: { critical: 0, high: 0, medium: 0, low: 0, informational: 1, totalFiles: 0, scanDurationMs: Date.now() - startTime },
+                crawledUrls: 0,
+            };
+        }
+        // Perform HTTP request to check security headers and response characteristics
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), 30000); // 30s timeout
+        try {
+            const response = await fetch(targetUrl, {
+                method: 'GET',
+                headers: {
+                    'User-Agent': 'AgenticQE-SecurityScanner/3.0',
+                    'Accept': 'text/html,application/json,*/*',
+                },
+                signal: controller.signal,
+                redirect: 'follow',
+            });
+            clearTimeout(timeoutId);
+            crawledUrls = 1;
+            // Check security headers
+            const headers = response.headers;
+            // Check for missing security headers
+            const securityHeaderChecks = [
+                {
+                    header: 'strict-transport-security',
+                    title: 'Missing HTTP Strict Transport Security (HSTS)',
+                    description: 'HSTS header is missing, allowing downgrade attacks',
+                    severity: 'medium',
+                    remediation: 'Add Strict-Transport-Security header with appropriate max-age',
+                },
+                {
+                    header: 'x-content-type-options',
+                    title: 'Missing X-Content-Type-Options Header',
+                    description: 'X-Content-Type-Options header is missing, allowing MIME sniffing attacks',
+                    severity: 'low',
+                    remediation: 'Add X-Content-Type-Options: nosniff header',
+                },
+                {
+                    header: 'x-frame-options',
+                    title: 'Missing X-Frame-Options Header',
+                    description: 'X-Frame-Options header is missing, allowing clickjacking attacks',
+                    severity: 'medium',
+                    remediation: 'Add X-Frame-Options: DENY or SAMEORIGIN header',
+                },
+                {
+                    header: 'content-security-policy',
+                    title: 'Missing Content Security Policy',
+                    description: 'CSP header is missing, increasing XSS attack surface',
+                    severity: 'medium',
+                    remediation: 'Implement a Content-Security-Policy header',
+                },
+                {
+                    header: 'x-xss-protection',
+                    title: 'Missing X-XSS-Protection Header',
+                    description: 'X-XSS-Protection header is missing (legacy XSS filter)',
+                    severity: 'low',
+                    remediation: 'Add X-XSS-Protection: 1; mode=block header',
+                },
+            ];
+            for (const check of securityHeaderChecks) {
+                if (!headers.get(check.header)) {
+                    vulnerabilities.push({
+                        id: uuidv4(),
+                        title: check.title,
+                        description: check.description,
+                        severity: check.severity,
+                        category: 'security-misconfiguration',
+                        location: {
+                            file: targetUrl,
+                            snippet: `Response Headers: ${check.header} not present`,
+                        },
+                        remediation: {
+                            description: check.remediation,
+                            estimatedEffort: 'minor',
+                            automatable: true,
+                        },
+                        references: [
+                            'https://owasp.org/www-project-secure-headers/',
+                        ],
+                    });
+                }
+            }
+            // Check for insecure cookies
+            const cookies = headers.get('set-cookie');
+            if (cookies) {
+                if (!cookies.toLowerCase().includes('secure')) {
+                    vulnerabilities.push({
+                        id: uuidv4(),
+                        title: 'Cookie Without Secure Flag',
+                        description: 'Session cookie is set without the Secure flag',
+                        severity: 'medium',
+                        category: 'sensitive-data',
+                        location: { file: targetUrl, snippet: `Set-Cookie: ${cookies.substring(0, 50)}...` },
+                        remediation: { description: 'Add Secure flag to cookies', estimatedEffort: 'trivial', automatable: true },
+                        references: ['https://owasp.org/www-community/controls/SecureCookieAttribute'],
+                    });
+                }
+                if (!cookies.toLowerCase().includes('httponly')) {
+                    vulnerabilities.push({
+                        id: uuidv4(),
+                        title: 'Cookie Without HttpOnly Flag',
+                        description: 'Session cookie is set without the HttpOnly flag, making it accessible to JavaScript',
+                        severity: 'medium',
+                        category: 'sensitive-data',
+                        location: { file: targetUrl, snippet: `Set-Cookie: ${cookies.substring(0, 50)}...` },
+                        remediation: { description: 'Add HttpOnly flag to session cookies', estimatedEffort: 'trivial', automatable: true },
+                        references: ['https://owasp.org/www-community/HttpOnly'],
+                    });
+                }
+                if (!cookies.toLowerCase().includes('samesite')) {
+                    vulnerabilities.push({
+                        id: uuidv4(),
+                        title: 'Cookie Without SameSite Attribute',
+                        description: 'Cookie is set without the SameSite attribute, potentially vulnerable to CSRF',
+                        severity: 'low',
+                        category: 'broken-auth',
+                        location: { file: targetUrl, snippet: `Set-Cookie: ${cookies.substring(0, 50)}...` },
+                        remediation: { description: 'Add SameSite=Strict or SameSite=Lax to cookies', estimatedEffort: 'trivial', automatable: true },
+                        references: ['https://owasp.org/www-community/SameSite'],
+                    });
+                }
+            }
+            // Check for server information disclosure
+            const server = headers.get('server');
+            if (server && /[0-9]+\.[0-9]+/.test(server)) {
+                vulnerabilities.push({
+                    id: uuidv4(),
+                    title: 'Server Version Disclosure',
+                    description: `Server header reveals version information: ${server}`,
+                    severity: 'low',
+                    category: 'security-misconfiguration',
+                    location: { file: targetUrl, snippet: `Server: ${server}` },
+                    remediation: { description: 'Remove or obfuscate server version information', estimatedEffort: 'trivial', automatable: true },
+                    references: ['https://owasp.org/www-project-web-security-testing-guide/'],
+                });
+            }
+            // Check for HTTPS
+            if (parsedUrl.protocol === 'http:') {
+                vulnerabilities.push({
+                    id: uuidv4(),
+                    title: 'Insecure HTTP Protocol',
+                    description: 'Target is using HTTP instead of HTTPS, exposing data in transit',
+                    severity: 'high',
+                    category: 'sensitive-data',
+                    location: { file: targetUrl },
+                    remediation: { description: 'Use HTTPS with valid TLS certificate', estimatedEffort: 'moderate', automatable: false },
+                    references: ['https://owasp.org/www-project-web-security-testing-guide/'],
+                });
+            }
+            // Try common test endpoints for additional checks
+            const testEndpoints = [
+                { path: '/.git/config', vuln: 'Git Repository Exposed', severity: 'high' },
+                { path: '/.env', vuln: 'Environment File Exposed', severity: 'critical' },
+                { path: '/phpinfo.php', vuln: 'PHP Info Exposed', severity: 'medium' },
+                { path: '/wp-config.php.bak', vuln: 'WordPress Config Backup Exposed', severity: 'critical' },
+            ];
+            for (const endpoint of testEndpoints) {
+                try {
+                    const testUrl = new URL(endpoint.path, parsedUrl.origin).toString();
+                    const testResponse = await fetch(testUrl, {
+                        method: 'GET',
+                        signal: AbortSignal.timeout(5000),
+                    });
+                    if (testResponse.ok && testResponse.status === 200) {
+                        const text = await testResponse.text();
+                        // Verify it's actually the sensitive content, not a custom 404
+                        if (text.length > 10 && !text.toLowerCase().includes('not found')) {
+                            crawledUrls++;
+                            vulnerabilities.push({
+                                id: uuidv4(),
+                                title: endpoint.vuln,
+                                description: `Sensitive file found at ${endpoint.path}`,
+                                severity: endpoint.severity,
+                                category: 'sensitive-data',
+                                location: { file: testUrl },
+                                remediation: { description: 'Remove or restrict access to sensitive files', estimatedEffort: 'trivial', automatable: true },
+                                references: ['https://owasp.org/www-project-web-security-testing-guide/'],
+                            });
+                        }
+                    }
+                }
+                catch {
+                    // Endpoint not accessible, which is expected/good
+                }
+            }
+        }
+        catch (fetchError) {
+            clearTimeout(timeoutId);
+            const errorMessage = toErrorMessage(fetchError);
+            // Network errors might indicate issues
+            if (errorMessage.includes('certificate') || errorMessage.includes('SSL') || errorMessage.includes('TLS')) {
+                vulnerabilities.push({
+                    id: uuidv4(),
+                    title: 'TLS/SSL Certificate Issue',
+                    description: `Certificate error: ${errorMessage}`,
+                    severity: 'high',
+                    category: 'security-misconfiguration',
+                    location: { file: targetUrl },
+                    remediation: { description: 'Fix TLS certificate configuration', estimatedEffort: 'moderate', automatable: false },
+                    references: ['https://owasp.org/www-project-web-security-testing-guide/'],
+                });
+            }
+        }
+    }
+    catch (error) {
+        console.error('DAST scan failed:', error);
+    }
+    const scanDurationMs = Date.now() - startTime;
+    // Calculate summary
+    let critical = 0, high = 0, medium = 0, low = 0, informational = 0;
+    for (const vuln of vulnerabilities) {
+        switch (vuln.severity) {
+            case 'critical':
+                critical++;
+                break;
+            case 'high':
+                high++;
+                break;
+            case 'medium':
+                medium++;
+                break;
+            case 'low':
+                low++;
+                break;
+            case 'informational':
+                informational++;
+                break;
+        }
+    }
+    return {
+        scanId,
+        targetUrl,
+        vulnerabilities,
+        summary: {
+            critical,
+            high,
+            medium,
+            low,
+            informational,
+            totalFiles: 1,
+            scanDurationMs,
+        },
+        crawledUrls,
+    };
+}
+//# sourceMappingURL=security-auditor-dast.js.map

package/v3/dist/domains/security-compliance/services/security-auditor-dast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-auditor-dast.js","sourceRoot":"","sources":["../../../../src/domains/security-compliance/services/security-auditor-dast.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAOhE,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,eAAe,GAAoB,EAAE,CAAC;IAC5C,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,IAAI,CAAC;QACH,eAAe;QACf,IAAI,SAAc,CAAC;QACnB,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,MAAM;gBACN,SAAS;gBACT,eAAe,EAAE,CAAC;wBAChB,EAAE,EAAE,MAAM,EAAE;wBACZ,KAAK,EAAE,oBAAoB;wBAC3B,WAAW,EAAE,sCAAsC;wBACnD,QAAQ,EAAE,eAAe;wBACzB,QAAQ,EAAE,2BAA2B;wBACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC7B,WAAW,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE;wBACnG,UAAU,EAAE,EAAE;qBACf,CAAC;gBACF,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;gBAC7H,WAAW,EAAE,CAAC;aACf,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc;QAE7E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBACtC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,YAAY,EAAE,+BAA+B;oBAC7C,QAAQ,EAAE,gCAAgC;iBAC3C;gBACD,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,WAAW,GAAG,CAAC,CAAC;YAEhB,yBAAyB;YACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YAEjC,qCAAqC;YACrC,MAAM,oBAAoB,GAMrB;gBACH;oBACE,MAAM,EAAE,2BAA2B;oBACnC,KAAK,EAAE,+CAA+C;oBACtD,WAAW,EAAE,oDAAoD;oBACjE,QAAQ,EAAE,QAAQ;oBAClB,WAAW,EAAE,+DAA+D;iBAC7E;gBACD;oBACE,MAAM,EAAE,wBAAwB;oBAChC,KAAK,EAAE,uCAAuC;oBAC9C,WAAW,EAAE,0EAA0E;oBACvF,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,4CAA4C;iBAC1D;gBACD;oBACE,MAAM,EAAE,iBAAiB;oBACzB,KAAK,EAAE,gCAAgC;oBACvC,WAAW,EAAE,kEAAkE;oBAC/E,QAAQ,EAAE,QAAQ;oBAClB,WAAW,EAAE,gDAAgD;iBAC9D;gBACD;oBACE,MAAM,EAAE,yBAAyB;oBACjC,KAAK,EAAE,iCAAiC;oBACxC,WAAW,EAAE,sDAAsD;oBACnE,QAAQ,EAAE,QAAQ;oBAClB,WAAW,EAAE,4CAA4C;iBAC1D;gBACD;oBACE,MAAM,EAAE,kBAAkB;oBAC1B,KAAK,EAAE,iCAAiC;oBACxC,WAAW,EAAE,wDAAwD;oBACrE,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,4CAA4C;iBAC1D;aACF,CAAC;YAEF,KAAK,MAAM,KAAK,IAAI,oBAAoB,EAAE,CAAC;gBACzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/B,eAAe,CAAC,IAAI,CAAC;wBACnB,EAAE,EAAE,MAAM,EAAE;wBACZ,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,QAAQ,EAAE,2BAA2B;wBACrC,QAAQ,EAAE;4BACR,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,qBAAqB,KAAK,CAAC,MAAM,cAAc;yBACzD;wBACD,WAAW,EAAE;4BACX,WAAW,EAAE,KAAK,CAAC,WAAW;4BAC9B,eAAe,EAAE,OAAO;4BACxB,WAAW,EAAE,IAAI;yBAClB;wBACD,UAAU,EAAE;4BACV,+CAA+C;yBAChD;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,6BAA6B;YAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9C,eAAe,CAAC,IAAI,CAAC;wBACnB,EAAE,EAAE,MAAM,EAAE;wBACZ,KAAK,EAAE,4BAA4B;wBACnC,WAAW,EAAE,+CAA+C;wBAC5D,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,gBAAgB;wBAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE;wBACpF,WAAW,EAAE,EAAE,WAAW,EAAE,4BAA4B,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE;wBACzG,UAAU,EAAE,CAAC,gEAAgE,CAAC;qBAC/E,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChD,eAAe,CAAC,IAAI,CAAC;wBACnB,EAAE,EAAE,MAAM,EAAE;wBACZ,KAAK,EAAE,8BAA8B;wBACrC,WAAW,EAAE,qFAAqF;wBAClG,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,gBAAgB;wBAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE;wBACpF,WAAW,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE;wBACnH,UAAU,EAAE,CAAC,0CAA0C,CAAC;qBACzD,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChD,eAAe,CAAC,IAAI,CAAC;wBACnB,EAAE,EAAE,MAAM,EAAE;wBACZ,KAAK,EAAE,mCAAmC;wBAC1C,WAAW,EAAE,8EAA8E;wBAC3F,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,aAAa;wBACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE;wBACpF,WAAW,EAAE,EAAE,WAAW,EAAE,gDAAgD,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE;wBAC7H,UAAU,EAAE,CAAC,0CAA0C,CAAC;qBACzD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,0CAA0C;YAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,MAAM,EAAE;oBACZ,KAAK,EAAE,2BAA2B;oBAClC,WAAW,EAAE,8CAA8C,MAAM,EAAE;oBACnE,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,2BAA2B;oBACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,MAAM,EAAE,EAAE;oBAC3D,WAAW,EAAE,EAAE,WAAW,EAAE,gDAAgD,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE;oBAC7H,UAAU,EAAE,CAAC,2DAA2D,CAAC;iBAC1E,CAAC,CAAC;YACL,CAAC;YAED,kBAAkB;YAClB,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACnC,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,MAAM,EAAE;oBACZ,KAAK,EAAE,wBAAwB;oBAC/B,WAAW,EAAE,iEAAiE;oBAC9E,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,gBAAgB;oBAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC7B,WAAW,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE;oBACrH,UAAU,EAAE,CAAC,2DAA2D,CAAC;iBAC1E,CAAC,CAAC;YACL,CAAC;YAED,kDAAkD;YAClD,MAAM,aAAa,GAAG;gBACpB,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAA+B,EAAE;gBACnG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,UAAmC,EAAE;gBAClG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAiC,EAAE;gBAC/F,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,iCAAiC,EAAE,QAAQ,EAAE,UAAmC,EAAE;aACvH,CAAC;YAEF,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACpE,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;wBACxC,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;qBAClC,CAAC,CAAC;oBAEH,IAAI,YAAY,CAAC,EAAE,IAAI,YAAY,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACnD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;wBACvC,+DAA+D;wBAC/D,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;4BAClE,WAAW,EAAE,CAAC;4BACd,eAAe,CAAC,IAAI,CAAC;gCACnB,EAAE,EAAE,MAAM,EAAE;gCACZ,KAAK,EAAE,QAAQ,CAAC,IAAI;gCACpB,WAAW,EAAE,2BAA2B,QAAQ,CAAC,IAAI,EAAE;gCACvD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gCAC3B,QAAQ,EAAE,gBAAgB;gCAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;gCAC3B,WAAW,EAAE,EAAE,WAAW,EAAE,8CAA8C,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE;gCAC3H,UAAU,EAAE,CAAC,2DAA2D,CAAC;6BAC1E,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,kDAAkD;gBACpD,CAAC;YACH,CAAC;QAEH,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,MAAM,YAAY,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;YAEhD,uCAAuC;YACvC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzG,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,MAAM,EAAE;oBACZ,KAAK,EAAE,2BAA2B;oBAClC,WAAW,EAAE,sBAAsB,YAAY,EAAE;oBACjD,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,2BAA2B;oBACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC7B,WAAW,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE;oBAClH,UAAU,EAAE,CAAC,2DAA2D,CAAC;iBAC1E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IAEH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAE9C,oBAAoB;IACpB,IAAI,QAAQ,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,aAAa,GAAG,CAAC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,UAAU;gBAAE,QAAQ,EAAE,CAAC;gBAAC,MAAM;YACnC,KAAK,MAAM;gBAAE,IAAI,EAAE,CAAC;gBAAC,MAAM;YAC3B,KAAK,QAAQ;gBAAE,MAAM,EAAE,CAAC;gBAAC,MAAM;YAC/B,KAAK,KAAK;gBAAE,GAAG,EAAE,CAAC;gBAAC,MAAM;YACzB,KAAK,eAAe;gBAAE,aAAa,EAAE,CAAC;gBAAC,MAAM;QAC/C,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,SAAS;QACT,eAAe;QACf,OAAO,EAAE;YACP,QAAQ;YACR,IAAI;YACJ,MAAM;YACN,GAAG;YACH,aAAa;YACb,UAAU,EAAE,CAAC;YACb,cAAc;SACf;QACD,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/v3/dist/domains/security-compliance/services/security-auditor-reports.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Agentic QE v3 - Security Auditor Report Generation
+ * Extracted from security-auditor.ts - Risk calculation, posture, recommendations
+ */
+import type { RiskScore } from '../../../shared/value-objects/index.js';
+import type { Vulnerability, DependencyScanResult, ScanSummary, SASTResult, DASTResult, SecretScanResult, SecurityAuditReport } from '../interfaces.js';
+import type { TriagedVulnerabilities } from './security-auditor-types.js';
+/**
+ * Calculate overall risk score from scan results
+ */
+export declare function calculateOverallRisk(sast?: SASTResult, dast?: DASTResult, deps?: DependencyScanResult, secrets?: SecretScanResult): RiskScore;
+/**
+ * Calculate risk from a scan summary
+ */
+export declare function calculateScanRisk(summary: ScanSummary): number;
+/**
+ * Generate recommendations based on scan results
+ */
+export declare function generateRecommendations(sast?: SASTResult, dast?: DASTResult, deps?: DependencyScanResult, secrets?: SecretScanResult): string[];
+/**
+ * Count vulnerabilities by severity in an audit report
+ */
+export declare function countBySeverity(audit: SecurityAuditReport | undefined, severity: 'critical' | 'high'): number;
+/**
+ * Count total open vulnerabilities in an audit
+ */
+export declare function countOpenVulnerabilities(audit: SecurityAuditReport | undefined): number;
+/**
+ * Calculate security trend between two audits
+ */
+export declare function calculateTrend(latest: SecurityAuditReport | undefined, previous: SecurityAuditReport | undefined): 'improving' | 'stable' | 'declining';
+/**
+ * Calculate posture score (0-100)
+ */
+export declare function calculatePostureScore(critical: number, high: number, open: number): number;
+/**
+ * Generate posture recommendations
+ */
+export declare function generatePostureRecommendations(critical: number, high: number, score: number): string[];
+/**
+ * Determine priority bucket for a vulnerability
+ */
+export declare function determinePriorityBucket(vuln: Vulnerability): keyof TriagedVulnerabilities;
+//# sourceMappingURL=security-auditor-reports.d.ts.map

package/v3/dist/domains/security-compliance/services/security-auditor-reports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-auditor-reports.d.ts","sourceRoot":"","sources":["../../../../src/domains/security-compliance/services/security-auditor-reports.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,KAAK,EACV,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAM1E;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,CAAC,EAAE,UAAU,EACjB,IAAI,CAAC,EAAE,UAAU,EACjB,IAAI,CAAC,EAAE,oBAAoB,EAC3B,OAAO,CAAC,EAAE,gBAAgB,GACzB,SAAS,CAqCX;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CA0B9D;AAMD;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,CAAC,EAAE,UAAU,EACjB,IAAI,CAAC,EAAE,UAAU,EACjB,IAAI,CAAC,EAAE,oBAAoB,EAC3B,OAAO,CAAC,EAAE,gBAAgB,GACzB,MAAM,EAAE,CAgCV;AAMD;;GAEG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,mBAAmB,GAAG,SAAS,EACtC,QAAQ,EAAE,UAAU,GAAG,MAAM,GAC5B,MAAM,CASR;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,mBAAmB,GAAG,SAAS,GAAG,MAAM,CASvF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,QAAQ,EAAE,mBAAmB,GAAG,SAAS,GACxC,WAAW,GAAG,QAAQ,GAAG,WAAW,CAStC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,MAAM,CAMR;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ,MAAM,EAAE,CAsBV;AAMD;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,aAAa,GAClB,MAAM,sBAAsB,CAoB9B"}

package/v3/dist/domains/security-compliance/services/security-auditor-reports.js

@@ -0,0 +1,193 @@
+/**
+ * Agentic QE v3 - Security Auditor Report Generation
+ * Extracted from security-auditor.ts - Risk calculation, posture, recommendations
+ */
+// ============================================================================
+// Risk Calculation
+// ============================================================================
+/**
+ * Calculate overall risk score from scan results
+ */
+export function calculateOverallRisk(sast, dast, deps, secrets) {
+    let riskValue = 0;
+    let weights = 0;
+    if (sast) {
+        riskValue +=
+            calculateScanRisk(sast.summary) * 0.35;
+        weights += 0.35;
+    }
+    if (dast) {
+        riskValue +=
+            calculateScanRisk(dast.summary) * 0.25;
+        weights += 0.25;
+    }
+    if (deps) {
+        riskValue +=
+            calculateScanRisk(deps.summary) * 0.25;
+        weights += 0.25;
+    }
+    if (secrets) {
+        const secretRisk = secrets.secretsFound.length > 0 ? 0.9 : 0.1;
+        riskValue += secretRisk * 0.15;
+        weights += 0.15;
+    }
+    const normalizedRisk = weights > 0 ? riskValue / weights : 0;
+    return {
+        value: Math.min(1, normalizedRisk),
+        percentage: normalizedRisk * 100,
+        level: normalizedRisk >= 0.8 ? 'critical' :
+            normalizedRisk >= 0.6 ? 'high' :
+                normalizedRisk >= 0.3 ? 'medium' : 'low',
+    };
+}
+/**
+ * Calculate risk from a scan summary
+ */
+export function calculateScanRisk(summary) {
+    const weights = {
+        critical: 1.0,
+        high: 0.7,
+        medium: 0.4,
+        low: 0.1,
+        informational: 0.02,
+    };
+    const totalIssues = summary.critical +
+        summary.high +
+        summary.medium +
+        summary.low +
+        summary.informational;
+    if (totalIssues === 0)
+        return 0;
+    const weightedSum = summary.critical * weights.critical +
+        summary.high * weights.high +
+        summary.medium * weights.medium +
+        summary.low * weights.low +
+        summary.informational * weights.informational;
+    return Math.min(1, weightedSum / 10);
+}
+// ============================================================================
+// Recommendations
+// ============================================================================
+/**
+ * Generate recommendations based on scan results
+ */
+export function generateRecommendations(sast, dast, deps, secrets) {
+    const recommendations = [];
+    if (sast && sast.summary.critical > 0) {
+        recommendations.push(`Address ${sast.summary.critical} critical vulnerabilities found in static analysis`);
+    }
+    if (dast && dast.summary.high > 0) {
+        recommendations.push(`Fix ${dast.summary.high} high-severity issues found in dynamic testing`);
+    }
+    if (deps && deps.outdatedPackages.length > 5) {
+        recommendations.push(`Update ${deps.outdatedPackages.length} outdated dependencies`);
+    }
+    if (secrets && secrets.secretsFound.length > 0) {
+        recommendations.push(`Remove ${secrets.secretsFound.length} exposed secrets and rotate credentials`);
+    }
+    if (recommendations.length === 0) {
+        recommendations.push('Security posture is good. Continue regular scanning.');
+    }
+    return recommendations;
+}
+// ============================================================================
+// Posture Calculations
+// ============================================================================
+/**
+ * Count vulnerabilities by severity in an audit report
+ */
+export function countBySeverity(audit, severity) {
+    if (!audit)
+        return 0;
+    let count = 0;
+    if (audit.sastResults)
+        count += audit.sastResults.summary[severity];
+    if (audit.dastResults)
+        count += audit.dastResults.summary[severity];
+    if (audit.dependencyResults)
+        count += audit.dependencyResults.summary[severity];
+    return count;
+}
+/**
+ * Count total open vulnerabilities in an audit
+ */
+export function countOpenVulnerabilities(audit) {
+    if (!audit)
+        return 0;
+    let count = 0;
+    if (audit.sastResults)
+        count += audit.sastResults.vulnerabilities.length;
+    if (audit.dastResults)
+        count += audit.dastResults.vulnerabilities.length;
+    if (audit.dependencyResults)
+        count += audit.dependencyResults.vulnerabilities.length;
+    return count;
+}
+/**
+ * Calculate security trend between two audits
+ */
+export function calculateTrend(latest, previous) {
+    if (!latest || !previous)
+        return 'stable';
+    const latestScore = countOpenVulnerabilities(latest);
+    const previousScore = countOpenVulnerabilities(previous);
+    if (latestScore < previousScore * 0.9)
+        return 'improving';
+    if (latestScore > previousScore * 1.1)
+        return 'declining';
+    return 'stable';
+}
+/**
+ * Calculate posture score (0-100)
+ */
+export function calculatePostureScore(critical, high, open) {
+    let score = 100;
+    score -= critical * 20;
+    score -= high * 10;
+    score -= open * 2;
+    return Math.max(0, Math.min(100, score));
+}
+/**
+ * Generate posture recommendations
+ */
+export function generatePostureRecommendations(critical, high, score) {
+    const recommendations = [];
+    if (critical > 0) {
+        recommendations.push('Immediately address all critical vulnerabilities');
+    }
+    if (high > 3) {
+        recommendations.push('Prioritize fixing high-severity issues');
+    }
+    if (score < 50) {
+        recommendations.push('Consider a comprehensive security review');
+        recommendations.push('Implement automated security scanning in CI/CD');
+    }
+    if (score >= 80) {
+        recommendations.push('Maintain current security practices');
+        recommendations.push('Consider penetration testing for deeper analysis');
+    }
+    return recommendations;
+}
+// ============================================================================
+// Triage
+// ============================================================================
+/**
+ * Determine priority bucket for a vulnerability
+ */
+export function determinePriorityBucket(vuln) {
+    const effort = vuln.remediation.estimatedEffort;
+    if (vuln.severity === 'critical') {
+        return 'immediate';
+    }
+    if (vuln.severity === 'high') {
+        return effort === 'trivial' || effort === 'minor' ? 'immediate' : 'shortTerm';
+    }
+    if (vuln.severity === 'medium') {
+        return effort === 'major' ? 'longTerm' : 'mediumTerm';
+    }
+    if (vuln.severity === 'low' || vuln.severity === 'informational') {
+        return 'longTerm';
+    }
+    return 'accepted';
+}
+//# sourceMappingURL=security-auditor-reports.js.map

package/v3/dist/domains/security-compliance/services/security-auditor-reports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-auditor-reports.js","sourceRoot":"","sources":["../../../../src/domains/security-compliance/services/security-auditor-reports.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAiB,EACjB,IAAiB,EACjB,IAA2B,EAC3B,OAA0B;IAE1B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,IAAI,EAAE,CAAC;QACT,SAAS;YACP,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACzC,OAAO,IAAI,IAAI,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,SAAS;YACP,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACzC,OAAO,IAAI,IAAI,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,SAAS;YACP,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACzC,OAAO,IAAI,IAAI,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/D,SAAS,IAAI,UAAU,GAAG,IAAI,CAAC;QAC/B,OAAO,IAAI,IAAI,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7D,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC;QAClC,UAAU,EAAE,cAAc,GAAG,GAAG;QAChC,KAAK,EAAE,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACpC,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAChC,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;KACxB,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAoB;IACpD,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,GAAG;QACb,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,GAAG;QACX,GAAG,EAAE,GAAG;QACR,aAAa,EAAE,IAAI;KACpB,CAAC;IAEF,MAAM,WAAW,GACf,OAAO,CAAC,QAAQ;QAChB,OAAO,CAAC,IAAI;QACZ,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,GAAG;QACX,OAAO,CAAC,aAAa,CAAC;IAExB,IAAI,WAAW,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEhC,MAAM,WAAW,GACf,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;QACnC,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;QAC3B,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;QAC/B,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG;QACzB,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAEhD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAiB,EACjB,IAAiB,EACjB,IAA2B,EAC3B,OAA0B;IAE1B,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACtC,eAAe,CAAC,IAAI,CAClB,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,oDAAoD,CACrF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAClC,eAAe,CAAC,IAAI,CAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,gDAAgD,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,eAAe,CAAC,IAAI,CAClB,UAAU,IAAI,CAAC,gBAAgB,CAAC,MAAM,wBAAwB,CAC/D,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,eAAe,CAAC,IAAI,CAClB,UAAU,OAAO,CAAC,YAAY,CAAC,MAAM,yCAAyC,CAC/E,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,eAAe,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAsC,EACtC,QAA6B;IAE7B,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC;IAErB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,CAAC,WAAW;QAAE,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,WAAW;QAAE,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,iBAAiB;QAAE,KAAK,IAAI,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEhF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAsC;IAC7E,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC;IAErB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,CAAC,WAAW;QAAE,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC;IACzE,IAAI,KAAK,CAAC,WAAW;QAAE,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC;IACzE,IAAI,KAAK,CAAC,iBAAiB;QAAE,KAAK,IAAI,KAAK,CAAC,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC;IAErF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAuC,EACvC,QAAyC;IAEzC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE1C,MAAM,WAAW,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAEzD,IAAI,WAAW,GAAG,aAAa,GAAG,GAAG;QAAE,OAAO,WAAW,CAAC;IAC1D,IAAI,WAAW,GAAG,aAAa,GAAG,GAAG;QAAE,OAAO,WAAW,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,IAAY,EACZ,IAAY;IAEZ,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,KAAK,IAAI,QAAQ,GAAG,EAAE,CAAC;IACvB,KAAK,IAAI,IAAI,GAAG,EAAE,CAAC;IACnB,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,IAAY,EACZ,KAAa;IAEb,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,eAAe,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,eAAe,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,eAAe,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACjE,eAAe,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,eAAe,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC5D,eAAe,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;IAEhD,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IAChF,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;IACxD,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;QACjE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}