ai-dev-analytics 2.0.0 → 2.0.2

package/dist/services/project-health.js

@@ -0,0 +1,19 @@
+import { inspectProjectHealth, normalizeProjectTruthSources } from '../utils/project-health.js';
+import { findSimilarRules, loadRegistry } from '../utils/rules.js';
+import { auditPackageSecurity, auditSkillSecurity } from './security-audit.js';
+export function inspectProject(projectRoot) {
+    return {
+        report: inspectProjectHealth(projectRoot),
+        similarRules: findSimilarRules(loadRegistry(projectRoot)).slice(0, 10),
+    };
+}
+export function normalizeProject(projectRoot) {
+    return normalizeProjectTruthSources(projectRoot);
+}
+export function inspectSecurity(projectRoot, mode = 'all') {
+    return {
+        packageAudit: mode === 'all' || mode === 'npm' ? auditPackageSecurity(projectRoot) : null,
+        skillAudit: mode === 'all' || mode === 'skills' ? auditSkillSecurity(projectRoot) : null,
+    };
+}
+//# sourceMappingURL=project-health.js.map

package/dist/services/project-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-health.js","sourceRoot":"","sources":["../../src/services/project-health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE/E,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,OAAO;QACL,MAAM,EAAE,oBAAoB,CAAC,WAAW,CAAC;QACzC,YAAY,EAAE,gBAAgB,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,4BAA4B,CAAC,WAAW,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,OAAiC,KAAK;IACzF,OAAO;QACL,YAAY,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QACzF,UAAU,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;KACzF,CAAC;AACJ,CAAC"}

package/dist/services/security-audit.d.ts

@@ -0,0 +1,59 @@
+export declare function defaultSkillScanPaths(): string[];
+export type SecurityCommandRunner = (command: string, args: string[], cwd: string) => {
+    stdout: string;
+    stderr: string;
+    status: number;
+    error?: string;
+};
+export interface PackageAuditFinding {
+    source: 'npm-audit' | 'pnpm-audit' | 'yarn-audit' | 'osv';
+    packageManager: 'npm' | 'pnpm' | 'yarn' | 'osv';
+    packageName: string;
+    severity: string;
+    title: string;
+    id: string;
+    dependencyPath?: string;
+    fixAvailable: boolean;
+    direct: boolean;
+    workspacePath: string;
+}
+export interface PackageAuditWarning {
+    type: 'missing-lockfile' | 'multiple-lockfiles' | 'command-missing' | 'command-failed' | 'osv-unavailable' | 'empty-project';
+    message: string;
+    workspacePath?: string;
+}
+export interface PackageAuditResult {
+    findings: PackageAuditFinding[];
+    warnings: PackageAuditWarning[];
+    scannedTargets: Array<{
+        packageManager: 'npm' | 'pnpm' | 'yarn';
+        workspacePath: string;
+    }>;
+    osvScanned: boolean;
+}
+export interface SkillAuditIssue {
+    type: 'script-file' | 'command-exec' | 'network-request' | 'download-remote' | 'tool-instruction';
+    filePath: string;
+    signal: string;
+    sample?: string;
+}
+export interface SkillAuditFinding {
+    skillName: string;
+    sourcePath: string;
+    issues: SkillAuditIssue[];
+}
+export interface SkillAuditWarning {
+    type: 'empty-scan-paths' | 'missing-path';
+    message: string;
+    path?: string;
+}
+export interface SkillAuditResult {
+    configuredPaths: string[];
+    scannedPaths: string[];
+    warnings: SkillAuditWarning[];
+    findings: SkillAuditFinding[];
+    scannedSkills: number;
+}
+export declare function auditPackageSecurity(projectRoot: string, runner?: SecurityCommandRunner): PackageAuditResult;
+export declare function auditSkillSecurity(projectRoot: string): SkillAuditResult;
+//# sourceMappingURL=security-audit.d.ts.map

package/dist/services/security-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit.d.ts","sourceRoot":"","sources":["../../src/services/security-audit.ts"],"names":[],"mappings":"AAkBA,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAEhD;AAoDD,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,KACR;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,KAAK,CAAA;IACzD,cAAc,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAA;IAC/C,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,EAAE,MAAM,CAAA;IACV,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,OAAO,CAAA;IACrB,MAAM,EAAE,OAAO,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,kBAAkB,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,eAAe,CAAA;IAC5H,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,cAAc,EAAE,KAAK,CAAC;QAAE,cAAc,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzF,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,GAAG,cAAc,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,kBAAkB,CAAA;IACjG,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,eAAe,EAAE,CAAA;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,kBAAkB,GAAG,cAAc,CAAA;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,QAAQ,EAAE,iBAAiB,EAAE,CAAA;IAC7B,QAAQ,EAAE,iBAAiB,EAAE,CAAA;IAC7B,aAAa,EAAE,MAAM,CAAA;CACtB;AAiSD,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,qBAA4C,GACnD,kBAAkB,CAsFpB;AAyJD,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAiFxE"}