agentrinse 0.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Vincent Koc
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,153 @@
+# AgentRinse
+
+Safe, local-first cleanup for agentic development.
+
+AgentRinse inventories agent state and developer residue, explains why
+resources are protected, produces content-addressed cleanup plans, and applies
+only actions that still pass every safety check.
+
+> [!IMPORTANT]
+> `0.0.0` is a package-reservation release. It is not supported for cleanup
+> against real developer state. The first supported release will be `0.1.0`.
+
+## Reservation Release
+
+The implemented mutation boundary under development is intentionally narrow:
+
+- removes only exact rebuildable artifact directories declared in config
+- supports `node_modules`, `dist`, `dist-runtime`, `build`, `.next`, `.turbo`,
+  `.cache`, `coverage`, `target`, and `.venv`
+- revalidates path, realpath, inode, device, recursive metadata fingerprint,
+  newest descendant mtime, measured bytes, configured scope, current working
+  directory, and process ownership after acquiring the apply lock
+- rejects artifact roots and descendants that cross filesystem mount
+  boundaries
+- rejects sockets, pipes, devices, and other non-regular filesystem entries
+- rechecks size, age, and plan expiration immediately before each mutation
+- atomically renames an artifact to a same-parent tombstone before recursive
+  removal, repeats fingerprint and process checks on the isolated tree, and
+  performs a final synchronous inode check at the deletion boundary
+- journals every transition and records the recovery path for partial actions
+
+Codex, Claude Code, Cursor, GitHub Copilot CLI, Zed, OpenCode, Grok Build, Git,
+and Docker are report-only. Provider state, worktrees, images, containers,
+volumes, branches, stashes, credentials, configuration, plugins, skills, and
+memories are not cleanup targets.
+
+## Install
+
+Do not install `0.0.0` for operational cleanup. Maintainers may verify the
+reservation package with:
+
+```bash
+npm install --global agentrinse
+agentrinse --version
+```
+
+The command must report `0.0.0`. Node.js 22 or newer is required.
+
+## Configure
+
+Artifact cleanup is disabled until project roots are explicitly declared.
+
+```json
+{
+  "schemaVersion": 1,
+  "artifacts": {
+    "projects": [
+      {
+        "root": "/absolute/path/to/project",
+        "names": ["node_modules", "dist", ".cache"]
+      }
+    ],
+    "minAgeMinutes": 1440,
+    "minBytes": 67108864,
+    "processCheck": "required"
+  },
+  "plan": {
+    "ttlMinutes": 30,
+    "maxRisk": "safe"
+  }
+}
+```
+
+Project roots must be unique canonical absolute real directories inside the
+audited home; paths reached through symlinked ancestors are rejected. Artifact
+targets cannot overlap. AgentRinse never discovers arbitrary projects or
+expands wildcards.
+
+## Use
+
+Audit and save immutable evidence:
+
+```bash
+agentrinse audit \
+  --home "$HOME" \
+  --config agentrinse.json \
+  --json \
+  --output audit.json
+```
+
+Create a bounded cleanup plan:
+
+```bash
+agentrinse plan \
+  --audit audit.json \
+  --config agentrinse.json \
+  --output plan.json
+```
+
+Review `plan.json`, then apply it:
+
+```bash
+agentrinse apply \
+  --plan plan.json \
+  --config agentrinse.json \
+  --yes
+```
+
+Without `--yes`, apply requires an interactive terminal confirmation. JSON
+output requires `--yes` so prompts can never corrupt stdout. A plan is rejected
+when it expires, changes, no longer matches the config, or contains inconsistent
+action totals. An action whose authorization expires during a run is recorded
+as `skipped-stale`, not deleted.
+
+Run journals are stored under `$XDG_STATE_HOME/agentrinse/runs` or
+`$HOME/.local/state/agentrinse/runs`. Use `--state-dir` to select another
+location.
+
+## Safety
+
+- discovery and planning never mutate
+- unknown state is protected
+- symlinks are not followed
+- no process is killed
+- no `sudo`
+- no Docker volume deletion
+- no generic `--force`
+- no wildcard deletion
+- one apply run holds the exclusive state lock
+- AgentRinse never removes its own working directory, lock, or journal
+
+AgentRinse fails closed around ordinary concurrent developer tools. It does not
+claim isolation from a hostile process already running as the same OS user;
+that process can directly alter the user's files and AgentRinse state.
+
+See `docs/safety.md` for the complete mutation contract.
+
+## Development
+
+```bash
+pnpm install
+pnpm check
+pnpm smoke
+pnpm pack:check
+```
+
+Development, tests, smoke runs, and destructive proof use temporary synthetic
+homes only. Never point `0.0.0` or an unreleased development build at a
+workstation home.
+
+## License
+
+MIT

package/dist/adapters/artifacts/adapter.d.ts

@@ -0,0 +1,24 @@
+import type { AgentRinseConfig } from "../../config/schema.js";
+import type { AuditAdapter, AuditContext, CollectionResult } from "../../contracts/adapter.js";
+import type { Finding } from "../../contracts/finding.js";
+import type { AdapterProbe } from "../../contracts/report.js";
+import type { ResourceSnapshot } from "../../contracts/resource.js";
+import { type MountBoundaryResult } from "../../core/mount-boundaries.js";
+import { type ProcessOwnershipResult } from "../../core/process-ownership.js";
+type ArtifactOptions = AgentRinseConfig["artifacts"] & AgentRinseConfig["audit"];
+export type ProcessProbe = (path: string) => Promise<ProcessOwnershipResult>;
+export type MountProbe = (path: string) => Promise<MountBoundaryResult>;
+export declare class ArtifactAuditAdapter implements AuditAdapter {
+    private readonly options;
+    private readonly processProbe;
+    private readonly mountProbe;
+    readonly id = "artifacts";
+    constructor(options: ArtifactOptions, processProbe?: ProcessProbe, mountProbe?: MountProbe);
+    private validProjects;
+    probe(context: AuditContext): Promise<AdapterProbe>;
+    collect(context: AuditContext, probe: AdapterProbe): Promise<CollectionResult>;
+    classify(context: AuditContext, resource: ResourceSnapshot): Promise<Finding>;
+    private actionFor;
+}
+export {};
+//# sourceMappingURL=adapter.d.ts.map

package/dist/adapters/artifacts/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/adapters/artifacts/adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAG/F,OAAO,KAAK,EAAE,OAAO,EAAgB,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,OAAO,EAAuB,KAAK,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC/F,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,iCAAiC,CAAC;AAGzC,KAAK,eAAe,GAAG,gBAAgB,CAAC,WAAW,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAEjF,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAC7E,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAiBxE,qBAAa,oBAAqB,YAAW,YAAY;IAIrD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAL7B,QAAQ,CAAC,EAAE,eAAe;IAE1B,YACmB,OAAO,EAAE,eAAe,EACxB,YAAY,GAAE,YAAqC,EACnD,UAAU,GAAE,UAAgC,EAC3D;YAEU,aAAa;IAqDrB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAqBxD;IAEK,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6GnF;IAEK,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CA6IlF;IAED,OAAO,CAAC,SAAS;CAyBlB"}

package/dist/adapters/artifacts/adapter.js

@@ -0,0 +1,342 @@
+import { lstat, realpath } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { artifactNameSchema } from "../../contracts/action.js";
+import { sha256 } from "../../core/digest.js";
+import { measurePath } from "../../core/measure.js";
+import { findMountBoundaries } from "../../core/mount-boundaries.js";
+import { findProcessesUsingPath, } from "../../core/process-ownership.js";
+import { isPathInside } from "../../core/safety.js";
+function isMissing(error) {
+    return (error instanceof Error && "code" in error && error.code === "ENOENT");
+}
+function rootEvidence(context, code, detail) {
+    return {
+        code,
+        source: "artifacts",
+        observedAt: context.now.toISOString(),
+        detail,
+    };
+}
+export class ArtifactAuditAdapter {
+    options;
+    processProbe;
+    mountProbe;
+    id = "artifacts";
+    constructor(options, processProbe = findProcessesUsingPath, mountProbe = findMountBoundaries) {
+        this.options = options;
+        this.processProbe = processProbe;
+        this.mountProbe = mountProbe;
+    }
+    async validProjects(context) {
+        const roots = [];
+        const diagnostics = [];
+        for (const project of this.options.projects) {
+            const root = resolve(project.root);
+            if (!isPathInside(context.home, root)) {
+                diagnostics.push({
+                    severity: "error",
+                    code: "ARTIFACT_PROJECT_OUTSIDE_HOME",
+                    message: `Configured project is outside the audited home: ${root}`,
+                    adapter: this.id,
+                });
+                continue;
+            }
+            try {
+                const stats = await lstat(root);
+                if (!stats.isDirectory() || stats.isSymbolicLink()) {
+                    diagnostics.push({
+                        severity: "error",
+                        code: "ARTIFACT_PROJECT_INVALID",
+                        message: `Configured project must be a real directory: ${root}`,
+                        adapter: this.id,
+                    });
+                    continue;
+                }
+                if ((await realpath(root)) !== root) {
+                    diagnostics.push({
+                        severity: "error",
+                        code: "ARTIFACT_PROJECT_NONCANONICAL",
+                        message: `Configured project path must not contain symlink aliases: ${root}`,
+                        adapter: this.id,
+                    });
+                    continue;
+                }
+                roots.push(root);
+            }
+            catch (error) {
+                diagnostics.push({
+                    severity: isMissing(error) ? "warning" : "error",
+                    code: isMissing(error) ? "ARTIFACT_PROJECT_MISSING" : "ARTIFACT_PROJECT_UNREADABLE",
+                    message: error instanceof Error ? error.message : String(error),
+                    adapter: this.id,
+                });
+            }
+        }
+        return { roots, diagnostics };
+    }
+    async probe(context) {
+        const validation = await this.validProjects(context);
+        if (validation.roots.length === 0) {
+            return {
+                adapter: this.id,
+                status: this.options.projects.length === 0 ? "disabled" : "degraded",
+                detail: this.options.projects.length === 0
+                    ? "No artifact project roots configured"
+                    : "No configured artifact project root is safe to inspect",
+                diagnostics: validation.diagnostics,
+            };
+        }
+        return {
+            adapter: this.id,
+            status: validation.diagnostics.length === 0 ? "available" : "degraded",
+            root: context.home,
+            detail: `${validation.roots.length} explicit artifact project root(s) available`,
+            diagnostics: validation.diagnostics,
+        };
+    }
+    async collect(context, probe) {
+        if (!["available", "degraded"].includes(probe.status)) {
+            return { resources: [], diagnostics: [] };
+        }
+        const validation = await this.validProjects(context);
+        const resources = [];
+        const diagnostics = [];
+        for (const project of this.options.projects) {
+            const projectRoot = resolve(project.root);
+            if (!validation.roots.includes(projectRoot)) {
+                continue;
+            }
+            const projectStats = await lstat(projectRoot);
+            for (const name of project.names) {
+                context.signal?.throwIfAborted();
+                const path = resolve(join(projectRoot, name));
+                if (!isPathInside(projectRoot, path)) {
+                    diagnostics.push({
+                        severity: "error",
+                        code: "ARTIFACT_PATH_ESCAPE",
+                        message: `Artifact path escaped its project root: ${path}`,
+                        adapter: this.id,
+                    });
+                    continue;
+                }
+                try {
+                    const stats = await lstat(path);
+                    const isDirectory = stats.isDirectory();
+                    const isSymlink = stats.isSymbolicLink();
+                    const measurement = isDirectory && !isSymlink && this.options.measureBytes
+                        ? await measurePath(path, {
+                            maxEntries: this.options.maxEntries,
+                            ...(context.signal === undefined ? {} : { signal: context.signal }),
+                        })
+                        : undefined;
+                    const ownership = isDirectory && !isSymlink
+                        ? await this.processProbe(path)
+                        : {
+                            status: "unknown",
+                            matches: [],
+                            reason: "resource is not a real directory",
+                        };
+                    const mounts = isDirectory && !isSymlink
+                        ? await this.mountProbe(path)
+                        : {
+                            status: "unknown",
+                            paths: [],
+                            reason: "resource is not a real directory",
+                        };
+                    const canonicalKey = `artifacts:build-artifact:${path}`;
+                    resources.push({
+                        resource: {
+                            id: `artifacts:build-artifact:${sha256(canonicalKey)}`,
+                            adapter: this.id,
+                            kind: "build-artifact",
+                            canonicalKey,
+                            displayName: name,
+                            path,
+                        },
+                        observedAt: context.now.toISOString(),
+                        exists: true,
+                        ...(measurement === undefined ? {} : { measuredBytes: measurement.bytes }),
+                        facts: {
+                            projectRoot,
+                            name,
+                            device: stats.dev,
+                            inode: stats.ino,
+                            mtimeMs: stats.mtimeMs,
+                            newestMtimeMs: measurement?.newestMtimeMs ?? stats.mtimeMs,
+                            fingerprint: measurement?.fingerprint,
+                            ageMinutes: Math.max(0, (context.now.getTime() - (measurement?.newestMtimeMs ?? stats.mtimeMs)) / 60_000),
+                            isDirectory,
+                            isSymlink,
+                            measurementTruncated: measurement?.truncated ?? false,
+                            specialEntries: measurement?.specialEntries ?? 0,
+                            mountBoundaries: measurement?.mountBoundaries ?? 0,
+                            isMountRoot: stats.dev !== projectStats.dev,
+                            entries: measurement?.entries,
+                            processOwnership: ownership,
+                            mountBoundaryStatus: mounts.status,
+                            mountBoundaryPaths: mounts.paths,
+                            mountBoundaryReason: mounts.status === "unknown" ? mounts.reason : undefined,
+                        },
+                    });
+                }
+                catch (error) {
+                    if (!isMissing(error)) {
+                        diagnostics.push({
+                            severity: "warning",
+                            code: "ARTIFACT_INSPECTION_FAILED",
+                            message: error instanceof Error ? error.message : String(error),
+                            adapter: this.id,
+                        });
+                    }
+                }
+            }
+        }
+        return { resources, diagnostics };
+    }
+    async classify(context, resource) {
+        const facts = resource.facts;
+        const roots = [];
+        const warnings = [];
+        let state = "eligible";
+        let confidence = "certain";
+        if (facts.isSymlink === true) {
+            state = "blocked";
+            confidence = "certain";
+            warnings.push({
+                severity: "warning",
+                code: "ARTIFACT_SYMLINK_BLOCKED",
+                message: "Artifact symlinks are never cleanup candidates.",
+                adapter: this.id,
+                resourceId: resource.resource.id,
+            });
+        }
+        else if (facts.isDirectory !== true) {
+            state = "blocked";
+            confidence = "certain";
+            warnings.push({
+                severity: "warning",
+                code: "ARTIFACT_NOT_DIRECTORY",
+                message: "Only declared artifact directories are supported.",
+                adapter: this.id,
+                resourceId: resource.resource.id,
+            });
+        }
+        else if (facts.measurementTruncated === true) {
+            state = "blocked";
+            confidence = "unknown";
+            warnings.push({
+                severity: "warning",
+                code: "ARTIFACT_MEASUREMENT_TRUNCATED",
+                message: "The entry budget was exhausted before measurement completed.",
+                adapter: this.id,
+                resourceId: resource.resource.id,
+            });
+        }
+        else if (typeof facts.specialEntries === "number" && facts.specialEntries > 0) {
+            state = "blocked";
+            confidence = "certain";
+            warnings.push({
+                severity: "warning",
+                code: "ARTIFACT_SPECIAL_ENTRY",
+                message: "Artifact cleanup only supports directories, regular files, and skipped symlinks.",
+                adapter: this.id,
+                resourceId: resource.resource.id,
+            });
+        }
+        else if (facts.isMountRoot === true ||
+            facts.mountBoundaryStatus === "blocked" ||
+            (typeof facts.mountBoundaries === "number" && facts.mountBoundaries > 0)) {
+            state = "blocked";
+            confidence = "certain";
+            warnings.push({
+                severity: "warning",
+                code: "ARTIFACT_MOUNT_BOUNDARY",
+                message: "Artifact cleanup never crosses a filesystem mount boundary.",
+                adapter: this.id,
+                resourceId: resource.resource.id,
+            });
+        }
+        else if (facts.mountBoundaryStatus !== "clear") {
+            state = "blocked";
+            confidence = "unknown";
+            warnings.push({
+                severity: "warning",
+                code: "ARTIFACT_MOUNT_INSPECTION_UNKNOWN",
+                message: "Filesystem mount boundaries could not be proven absent.",
+                adapter: this.id,
+                resourceId: resource.resource.id,
+            });
+        }
+        else if (resource.measuredBytes === undefined ||
+            resource.measuredBytes < this.options.minBytes) {
+            state = "protected";
+            roots.push(rootEvidence(context, "artifact-below-size-threshold", `Artifact is smaller than ${this.options.minBytes} bytes.`));
+        }
+        else if (typeof facts.ageMinutes !== "number" ||
+            facts.ageMinutes < this.options.minAgeMinutes) {
+            state = "protected";
+            roots.push(rootEvidence(context, "recent-resource", `Artifact is newer than ${this.options.minAgeMinutes} minutes.`));
+        }
+        const ownership = facts.processOwnership;
+        if (state === "eligible" && ownership?.status === "busy") {
+            state = "protected";
+            roots.push(rootEvidence(context, "live-process", "A same-user process owns a cwd or file descriptor under the artifact."));
+        }
+        else if (state === "eligible" && ownership?.status !== "idle") {
+            state = "blocked";
+            confidence = "unknown";
+            warnings.push({
+                severity: "warning",
+                code: "PROCESS_OWNERSHIP_UNKNOWN",
+                message: "Process ownership could not be proven idle.",
+                adapter: this.id,
+                resourceId: resource.resource.id,
+            });
+        }
+        const candidateActions = state === "eligible" ? [this.actionFor(resource)] : [];
+        return {
+            schemaVersion: 1,
+            findingId: `${resource.resource.id}:${sha256(context.auditId)}`,
+            auditId: context.auditId,
+            observedAt: context.now.toISOString(),
+            resource: resource.resource,
+            state,
+            confidence,
+            roots,
+            facts,
+            candidateActions,
+            ...(resource.measuredBytes === undefined
+                ? {}
+                : {
+                    measuredBytes: resource.measuredBytes,
+                    estimatedReclaimBytes: state === "eligible" ? resource.measuredBytes : 0,
+                }),
+            warnings,
+        };
+    }
+    actionFor(resource) {
+        const facts = resource.facts;
+        const target = {
+            path: resource.resource.path,
+            projectRoot: String(facts.projectRoot),
+            name: artifactNameSchema.parse(facts.name),
+            device: Number(facts.device),
+            inode: Number(facts.inode),
+            mtimeMs: Number(facts.mtimeMs),
+            measuredBytes: resource.measuredBytes,
+            newestMtimeMs: Number(facts.newestMtimeMs),
+            fingerprint: String(facts.fingerprint),
+        };
+        return {
+            actionId: `artifacts.remove:${sha256(JSON.stringify(target))}`,
+            type: "artifacts.remove",
+            adapter: "artifacts",
+            resourceId: resource.resource.id,
+            risk: "safe",
+            description: `Remove rebuildable ${target.name} from ${target.projectRoot}`,
+            expectedReclaimBytes: target.measuredBytes,
+            target,
+        };
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/adapters/artifacts/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/adapters/artifacts/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAI1C,OAAO,EAAE,kBAAkB,EAA6B,MAAM,2BAA2B,CAAC;AAK1F,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAA4B,MAAM,gCAAgC,CAAC;AAC/F,OAAO,EACL,sBAAsB,GAEvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAOpD,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAqB,EAAE,IAAY,EAAE,MAAc;IACvE,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,WAAW;QACnB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE;QACrC,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,oBAAoB;IAIZ,OAAO;IACP,YAAY;IACZ,UAAU;IALpB,EAAE,GAAG,WAAW,CAAC;IAE1B,YACmB,OAAwB,EACxB,YAAY,GAAiB,sBAAsB,EACnD,UAAU,GAAe,mBAAmB;uBAF5C,OAAO;4BACP,YAAY;0BACZ,UAAU;IAC1B,CAAC;IAEI,KAAK,CAAC,aAAa,CAAC,OAAqB;QAI/C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACtC,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,+BAA+B;oBACrC,OAAO,EAAE,mDAAmD,IAAI,EAAE;oBAClE,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;oBACnD,WAAW,CAAC,IAAI,CAAC;wBACf,QAAQ,EAAE,OAAO;wBACjB,IAAI,EAAE,0BAA0B;wBAChC,OAAO,EAAE,gDAAgD,IAAI,EAAE;wBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;qBACjB,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBACpC,WAAW,CAAC,IAAI,CAAC;wBACf,QAAQ,EAAE,OAAO;wBACjB,IAAI,EAAE,+BAA+B;wBACrC,OAAO,EAAE,6DAA6D,IAAI,EAAE;wBAC5E,OAAO,EAAE,IAAI,CAAC,EAAE;qBACjB,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;oBAChD,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,6BAA6B;oBACnF,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;gBACpE,MAAM,EACJ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAChC,CAAC,CAAC,sCAAsC;oBACxC,CAAC,CAAC,wDAAwD;gBAC9D,WAAW,EAAE,UAAU,CAAC,WAAW;aACpC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;YACtE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,8CAA8C;YAChF,WAAW,EAAE,UAAU,CAAC,WAAW;SACpC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB,EAAE,KAAmB;QACtD,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,SAAS,GAAuB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;YAE9C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC9C,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;oBACrC,WAAW,CAAC,IAAI,CAAC;wBACf,QAAQ,EAAE,OAAO;wBACjB,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,2CAA2C,IAAI,EAAE;wBAC1D,OAAO,EAAE,IAAI,CAAC,EAAE;qBACjB,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;oBAChC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;oBACxC,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;oBACzC,MAAM,WAAW,GACf,WAAW,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY;wBACpD,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE;4BACtB,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;4BACnC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;yBACpE,CAAC;wBACJ,CAAC,CAAC,SAAS,CAAC;oBAChB,MAAM,SAAS,GACb,WAAW,IAAI,CAAC,SAAS;wBACvB,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;wBAC/B,CAAC,CAAE;4BACC,MAAM,EAAE,SAAS;4BACjB,OAAO,EAAE,EAAE;4BACX,MAAM,EAAE,kCAAkC;yBACT,CAAC;oBAC1C,MAAM,MAAM,GACV,WAAW,IAAI,CAAC,SAAS;wBACvB,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;wBAC7B,CAAC,CAAE;4BACC,MAAM,EAAE,SAAS;4BACjB,KAAK,EAAE,EAAE;4BACT,MAAM,EAAE,kCAAkC;yBACZ,CAAC;oBACvC,MAAM,YAAY,GAAG,4BAA4B,IAAI,EAAE,CAAC;oBAExD,SAAS,CAAC,IAAI,CAAC;wBACb,QAAQ,EAAE;4BACR,EAAE,EAAE,4BAA4B,MAAM,CAAC,YAAY,CAAC,EAAE;4BACtD,OAAO,EAAE,IAAI,CAAC,EAAE;4BAChB,IAAI,EAAE,gBAAgB;4BACtB,YAAY;4BACZ,WAAW,EAAE,IAAI;4BACjB,IAAI;yBACL;wBACD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE;wBACrC,MAAM,EAAE,IAAI;wBACZ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;wBAC1E,KAAK,EAAE;4BACL,WAAW;4BACX,IAAI;4BACJ,MAAM,EAAE,KAAK,CAAC,GAAG;4BACjB,KAAK,EAAE,KAAK,CAAC,GAAG;4BAChB,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,aAAa,EAAE,WAAW,EAAE,aAAa,IAAI,KAAK,CAAC,OAAO;4BAC1D,WAAW,EAAE,WAAW,EAAE,WAAW;4BACrC,UAAU,EAAE,IAAI,CAAC,GAAG,CAClB,CAAC,EACD,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,MAAM,CACjF;4BACD,WAAW;4BACX,SAAS;4BACT,oBAAoB,EAAE,WAAW,EAAE,SAAS,IAAI,KAAK;4BACrD,cAAc,EAAE,WAAW,EAAE,cAAc,IAAI,CAAC;4BAChD,eAAe,EAAE,WAAW,EAAE,eAAe,IAAI,CAAC;4BAClD,WAAW,EAAE,KAAK,CAAC,GAAG,KAAK,YAAY,CAAC,GAAG;4BAC3C,OAAO,EAAE,WAAW,EAAE,OAAO;4BAC7B,gBAAgB,EAAE,SAAS;4BAC3B,mBAAmB,EAAE,MAAM,CAAC,MAAM;4BAClC,kBAAkB,EAAE,MAAM,CAAC,KAAK;4BAChC,mBAAmB,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;yBAC7E;qBACF,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;wBACtB,WAAW,CAAC,IAAI,CAAC;4BACf,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,4BAA4B;4BAClC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;4BAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;yBACjB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAqB,EAAE,QAA0B;QAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7B,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAClC,IAAI,KAAK,GAAqB,UAAU,CAAC;QACzC,IAAI,UAAU,GAA0B,SAAS,CAAC;QAElD,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,KAAK,GAAG,SAAS,CAAC;YAClB,UAAU,GAAG,SAAS,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,iDAAiD;gBAC1D,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YACtC,KAAK,GAAG,SAAS,CAAC;YAClB,UAAU,GAAG,SAAS,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,mDAAmD;gBAC5D,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;YAC/C,KAAK,GAAG,SAAS,CAAC;YAClB,UAAU,GAAG,SAAS,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,8DAA8D;gBACvE,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAChF,KAAK,GAAG,SAAS,CAAC;YAClB,UAAU,GAAG,SAAS,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,kFAAkF;gBAC3F,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;aAAM,IACL,KAAK,CAAC,WAAW,KAAK,IAAI;YAC1B,KAAK,CAAC,mBAAmB,KAAK,SAAS;YACvC,CAAC,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,EACxE,CAAC;YACD,KAAK,GAAG,SAAS,CAAC;YAClB,UAAU,GAAG,SAAS,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,6DAA6D;gBACtE,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,OAAO,EAAE,CAAC;YACjD,KAAK,GAAG,SAAS,CAAC;YAClB,UAAU,GAAG,SAAS,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,mCAAmC;gBACzC,OAAO,EAAE,yDAAyD;gBAClE,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;aAAM,IACL,QAAQ,CAAC,aAAa,KAAK,SAAS;YACpC,QAAQ,CAAC,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAC9C,CAAC;YACD,KAAK,GAAG,WAAW,CAAC;YACpB,KAAK,CAAC,IAAI,CACR,YAAY,CACV,OAAO,EACP,+BAA+B,EAC/B,4BAA4B,IAAI,CAAC,OAAO,CAAC,QAAQ,SAAS,CAC3D,CACF,CAAC;QACJ,CAAC;aAAM,IACL,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;YACpC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAC7C,CAAC;YACD,KAAK,GAAG,WAAW,CAAC;YACpB,KAAK,CAAC,IAAI,CACR,YAAY,CACV,OAAO,EACP,iBAAiB,EACjB,0BAA0B,IAAI,CAAC,OAAO,CAAC,aAAa,WAAW,CAChE,CACF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,gBAAsD,CAAC;QAC/E,IAAI,KAAK,KAAK,UAAU,IAAI,SAAS,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;YACzD,KAAK,GAAG,WAAW,CAAC;YACpB,KAAK,CAAC,IAAI,CACR,YAAY,CACV,OAAO,EACP,cAAc,EACd,uEAAuE,CACxE,CACF,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,KAAK,UAAU,IAAI,SAAS,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;YAChE,KAAK,GAAG,SAAS,CAAC;YAClB,UAAU,GAAG,SAAS,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,6CAA6C;gBACtD,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,gBAAgB,GACpB,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEzD,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAC/D,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE;YACrC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK;YACL,UAAU;YACV,KAAK;YACL,KAAK;YACL,gBAAgB;YAChB,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACrC,qBAAqB,EAAE,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;iBACzE,CAAC;YACN,QAAQ;SACT,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,QAA0B;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAK;YAC7B,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1C,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,aAAa,EAAE,QAAQ,CAAC,aAAc;YACtC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;YAC1C,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;SACvC,CAAC;QAEF,OAAO;YACL,QAAQ,EAAE,oBAAoB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE;YAC9D,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAChC,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,sBAAsB,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,WAAW,EAAE;YAC3E,oBAAoB,EAAE,MAAM,CAAC,aAAa;YAC1C,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}

package/dist/adapters/docker/adapter.d.ts

@@ -0,0 +1,15 @@
+import type { AuditAdapter, AuditContext, CollectionResult } from "../../contracts/adapter.js";
+import type { Finding } from "../../contracts/finding.js";
+import type { AdapterProbe } from "../../contracts/report.js";
+import type { ResourceSnapshot } from "../../contracts/resource.js";
+export type DockerRunner = (args: string[]) => Promise<string>;
+export declare class DockerAuditAdapter implements AuditAdapter {
+    private readonly runDocker;
+    readonly id = "docker";
+    constructor(runDocker?: DockerRunner);
+    probe(_context: AuditContext): Promise<AdapterProbe>;
+    collect(context: AuditContext, probe: AdapterProbe): Promise<CollectionResult>;
+    private toResource;
+    classify(context: AuditContext, resource: ResourceSnapshot): Promise<Finding>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/adapters/docker/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/adapters/docker/adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAgB,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAKlF,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAwB/D,qBAAa,kBAAmB,YAAW,YAAY;IAGzC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAFtC,QAAQ,CAAC,EAAE,YAAY;IAEvB,YAA6B,SAAS,GAAE,YAAkC,EAAI;IAExE,KAAK,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CA2BzD;IAEK,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuBnF;IAED,OAAO,CAAC,UAAU;IAiCZ,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAsBlF;CACF"}