auditor-lambda 0.1.0

package/audit-code.mjs

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+
+import { runAuditCodeWrapper } from "./audit-code-wrapper-lib.mjs";
+
+try {
+  await runAuditCodeWrapper({
+    usageName: "audit-code.mjs",
+    ensureArtifactsDir: true,
+  });
+} catch (error) {
+  console.error(error instanceof Error ? error.message : String(error));
+  process.exitCode = 1;
+}

package/dist/adapters/coverageSummary.d.ts

@@ -0,0 +1,8 @@
+import type { ExternalAnalyzerResults } from "../types/externalAnalyzer.js";
+interface CoverageFileSummary {
+    path: string;
+    lines_pct: number;
+    branches_pct?: number;
+}
+export declare function normalizeCoverageSummary(files: CoverageFileSummary[]): ExternalAnalyzerResults;
+export {};

package/dist/adapters/coverageSummary.js

@@ -0,0 +1,13 @@
+import { normalizeGenericExternalResults } from "./normalizeExternal.js";
+export function normalizeCoverageSummary(files) {
+    return normalizeGenericExternalResults("coverage-summary", files
+        .filter((file) => file.lines_pct < 80)
+        .map((file, index) => ({
+        id: `coverage-${index + 1}`,
+        category: "tests",
+        severity: file.lines_pct < 50 ? "high" : "medium",
+        path: file.path,
+        summary: `Low line coverage: ${file.lines_pct}%${typeof file.branches_pct === "number" ? `, branch coverage ${file.branches_pct}%` : ""}.`,
+        raw: file,
+    })));
+}

package/dist/adapters/eslint.d.ts

@@ -0,0 +1,13 @@
+import type { ExternalAnalyzerResults } from "../types/externalAnalyzer.js";
+interface EslintResult {
+    filePath?: string;
+    messages?: Array<{
+        ruleId?: string | null;
+        severity?: number;
+        line?: number;
+        endLine?: number;
+        message?: string;
+    }>;
+}
+export declare function normalizeEslintJson(input: EslintResult[]): ExternalAnalyzerResults;
+export {};

package/dist/adapters/eslint.js

@@ -0,0 +1,21 @@
+import { normalizeGenericExternalResults } from "./normalizeExternal.js";
+function mapSeverity(value) {
+    if (value === 2)
+        return "medium";
+    if (value === 1)
+        return "low";
+    return "info";
+}
+export function normalizeEslintJson(input) {
+    return normalizeGenericExternalResults("eslint", input.flatMap((file) => (file.messages ?? []).map((message, index) => ({
+        id: `${file.filePath ?? "unknown"}:${index + 1}`,
+        category: "maintainability",
+        severity: mapSeverity(message.severity),
+        path: file.filePath,
+        line_start: message.line,
+        line_end: message.endLine,
+        summary: message.message,
+        rule: message.ruleId ?? undefined,
+        raw: message,
+    }))));
+}

package/dist/adapters/normalizeExternal.d.ts

@@ -0,0 +1,12 @@
+import type { ExternalAnalyzerResults } from "../types/externalAnalyzer.js";
+export declare function normalizeGenericExternalResults(tool: string, items: Array<{
+    id?: string;
+    category?: string;
+    severity?: string;
+    path?: string;
+    line_start?: number;
+    line_end?: number;
+    summary?: string;
+    rule?: string;
+    raw?: unknown;
+}>): ExternalAnalyzerResults;

package/dist/adapters/normalizeExternal.js

@@ -0,0 +1,19 @@
+export function normalizeGenericExternalResults(tool, items) {
+    return {
+        tool,
+        generated_at: new Date().toISOString(),
+        results: items
+            .filter((item) => item.path && item.summary)
+            .map((item, index) => ({
+            id: item.id ?? `${tool}-${index + 1}`,
+            category: item.category ?? "unknown",
+            severity: item.severity ?? "unknown",
+            path: item.path,
+            line_start: item.line_start,
+            line_end: item.line_end,
+            summary: item.summary,
+            rule: item.rule,
+            raw: item.raw,
+        })),
+    };
+}

package/dist/adapters/npmAudit.d.ts

@@ -0,0 +1,15 @@
+import type { ExternalAnalyzerResults } from "../types/externalAnalyzer.js";
+interface NpmAuditVuln {
+    name?: string;
+    severity?: string;
+    range?: string;
+    fixAvailable?: boolean | {
+        name?: string;
+        version?: string;
+    };
+}
+interface NpmAuditJson {
+    vulnerabilities?: Record<string, NpmAuditVuln>;
+}
+export declare function normalizeNpmAuditJson(input: NpmAuditJson): ExternalAnalyzerResults;
+export {};

package/dist/adapters/npmAudit.js

@@ -0,0 +1,12 @@
+import { normalizeGenericExternalResults } from "./normalizeExternal.js";
+export function normalizeNpmAuditJson(input) {
+    return normalizeGenericExternalResults("npm-audit", Object.entries(input.vulnerabilities ?? {}).map(([pkg, vuln], index) => ({
+        id: `npm-audit-${index + 1}`,
+        category: "dependency_risk",
+        severity: vuln.severity ?? "unknown",
+        path: "package-lock.json",
+        summary: `Package ${pkg} has a ${vuln.severity ?? "unknown"} severity vulnerability in range ${vuln.range ?? "unknown"}.`,
+        rule: pkg,
+        raw: vuln,
+    })));
+}

package/dist/adapters/semgrep.d.ts

@@ -0,0 +1,22 @@
+import type { ExternalAnalyzerResults } from "../types/externalAnalyzer.js";
+interface SemgrepJson {
+    results?: Array<{
+        check_id?: string;
+        path?: string;
+        start?: {
+            line?: number;
+        };
+        end?: {
+            line?: number;
+        };
+        extra?: {
+            severity?: string;
+            message?: string;
+            metadata?: {
+                category?: string;
+            };
+        };
+    }>;
+}
+export declare function normalizeSemgrepJson(input: SemgrepJson): ExternalAnalyzerResults;
+export {};

package/dist/adapters/semgrep.js

@@ -0,0 +1,14 @@
+import { normalizeGenericExternalResults } from "./normalizeExternal.js";
+export function normalizeSemgrepJson(input) {
+    return normalizeGenericExternalResults("semgrep", (input.results ?? []).map((result) => ({
+        id: result.check_id,
+        category: result.extra?.metadata?.category ?? "security",
+        severity: result.extra?.severity,
+        path: result.path,
+        line_start: result.start?.line,
+        line_end: result.end?.line,
+        summary: result.extra?.message,
+        rule: result.check_id,
+        raw: result,
+    })));
+}

package/dist/cli.d.ts

@@ -0,0 +1 @@
+export declare function runSample(): Promise<void>;