bla-agents 0.0.0-stage → 1.5.3

package/dist/core/sarif.js

@@ -0,0 +1,91 @@
+import { BLA_IDENTITY } from "../identity.js";
+/**
+ * Formats an `AuditReport` (and optional `ReleaseExposureReport`) as a SARIF 2.1.0 JSON document
+ * compatible with GitHub Code Scanning (`github/codeql-action/upload-sarif`).
+ */
+export function buildSarifReport(audit, releaseExposure) {
+    const rulesMap = new Map();
+    const results = [];
+    for (const item of audit.exposedItems) {
+        const ruleId = `BLA-AUDIT-${item.kind.toUpperCase()}`;
+        const level = item.riskLevel === "critical"
+            ? "error"
+            : item.riskLevel === "high"
+                ? "warning"
+                : "note";
+        if (!rulesMap.has(ruleId)) {
+            rulesMap.set(ruleId, {
+                id: ruleId,
+                name: `ExposedArtifact_${item.kind}`,
+                shortDescription: {
+                    text: `Artifact surface (${item.kind}) exposed to automated reverse-engineering tool (${item.reaToolUsed})`,
+                },
+                defaultConfiguration: { level },
+            });
+        }
+        const [uriPart, linePart] = item.location.split(":");
+        const startLine = linePart ? Number.parseInt(linePart, 10) : undefined;
+        results.push({
+            ruleId,
+            level,
+            message: {
+                text: `${item.name}: ${item.reason} (Est. reconstruction: ${item.estimatedTokensToReconstruct} tokens / $${item.estimatedCostUsd.toFixed(2)})`,
+            },
+            locations: [
+                {
+                    physicalLocation: {
+                        artifactLocation: { uri: uriPart || audit.targetPath },
+                        ...(startLine && Number.isFinite(startLine) ? { region: { startLine } } : {}),
+                    },
+                },
+            ],
+        });
+    }
+    if (releaseExposure) {
+        for (const f of releaseExposure.findings) {
+            const ruleId = `BLA-RELEASE-${f.kind.toUpperCase()}`;
+            const level = f.kind === "embedded-source-text" ? "error" : "warning";
+            if (!rulesMap.has(ruleId)) {
+                rulesMap.set(ruleId, {
+                    id: ruleId,
+                    name: `ReleaseExposure_${f.kind}`,
+                    shortDescription: { text: `Release source-map exposure (${f.kind}, ${f.representation})` },
+                    defaultConfiguration: { level },
+                });
+            }
+            results.push({
+                ruleId,
+                level,
+                message: {
+                    text: `${f.kind} (${f.representation}) in ${f.file} — Run "npx bla-agents defend" to replace with decoy source maps.`,
+                },
+                locations: [
+                    {
+                        physicalLocation: {
+                            artifactLocation: { uri: f.file },
+                        },
+                    },
+                ],
+            });
+        }
+    }
+    return {
+        $schema: "https://json.schemastore.org/sarif-2.1.0.json",
+        version: "2.1.0",
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: BLA_IDENTITY.packageName,
+                        fullName: BLA_IDENTITY.fullName,
+                        version: BLA_IDENTITY.version,
+                        informationUri: "https://bla.tools",
+                        rules: [...rulesMap.values()],
+                    },
+                },
+                results,
+            },
+        ],
+    };
+}
+//# sourceMappingURL=sarif.js.map

package/dist/core/sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/core/sarif.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AA0C9C;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAkB,EAClB,eAA8C;IAE9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAQrB,CAAC;IAEJ,MAAM,OAAO,GAA6C,EAAE,CAAC;IAE7D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,aAAa,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACtD,MAAM,KAAK,GACT,IAAI,CAAC,SAAS,KAAK,UAAU;YAC3B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM;gBACzB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC;QAEf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE;gBACnB,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,mBAAmB,IAAI,CAAC,IAAI,EAAE;gBACpC,gBAAgB,EAAE;oBAChB,IAAI,EAAE,qBAAqB,IAAI,CAAC,IAAI,oDAAoD,IAAI,CAAC,WAAW,GAAG;iBAC5G;gBACD,oBAAoB,EAAE,EAAE,KAAK,EAAE;aAChC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEvE,OAAO,CAAC,IAAI,CAAC;YACX,MAAM;YACN,KAAK;YACL,OAAO,EAAE;gBACP,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,0BAA0B,IAAI,CAAC,4BAA4B,cAAc,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;aAC/I;YACD,SAAS,EAAE;gBACT;oBACE,gBAAgB,EAAE;wBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,OAAO,IAAI,KAAK,CAAC,UAAU,EAAE;wBACtD,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC9E;iBACF;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACrD,MAAM,KAAK,GACT,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE;oBACnB,EAAE,EAAE,MAAM;oBACV,IAAI,EAAE,mBAAmB,CAAC,CAAC,IAAI,EAAE;oBACjC,gBAAgB,EAAE,EAAE,IAAI,EAAE,gCAAgC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,cAAc,GAAG,EAAE;oBAC1F,oBAAoB,EAAE,EAAE,KAAK,EAAE;iBAChC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM;gBACN,KAAK;gBACL,OAAO,EAAE;oBACP,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,cAAc,QAAQ,CAAC,CAAC,IAAI,mEAAmE;iBACtH;gBACD,SAAS,EAAE;oBACT;wBACE,gBAAgB,EAAE;4BAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE;yBAClC;qBACF;iBACF;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,YAAY,CAAC,WAAW;wBAC9B,QAAQ,EAAE,YAAY,CAAC,QAAQ;wBAC/B,OAAO,EAAE,YAAY,CAAC,OAAO;wBAC7B,cAAc,EAAE,mBAAmB;wBACnC,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;qBAC9B;iBACF;gBACD,OAAO;aACR;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/core/sqlite-runtime.d.ts

@@ -0,0 +1,17 @@
+import type { DatabaseSync } from "node:sqlite";
+/**
+ * Probe whether the current Node runtime exposes a usable `node:sqlite`
+ * `DatabaseSync` with custom scalar `function()` support (Node ^22.13 || >=24).
+ * Result is memoized for the process lifetime.
+ */
+export declare function isNodeSqliteAvailable(): boolean;
+/**
+ * Load `DatabaseSync` when available; return `null` on unsupported runtimes
+ * (Node < 22.13, `--no-experimental-sqlite`, or missing `function` API).
+ * Prefer this for optional/degraded paths; use `getDatabaseSyncClass()` when
+ * SQLite is required and a clear hard-error is appropriate.
+ */
+export declare function tryGetDatabaseSyncClass(): typeof DatabaseSync | null;
+/** Load lazily so non-SQLite commands can still explain an unsupported setup. */
+export declare function getDatabaseSyncClass(): typeof DatabaseSync;
+//# sourceMappingURL=sqlite-runtime.d.ts.map

package/dist/core/sqlite-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-runtime.d.ts","sourceRoot":"","sources":["../../src/core/sqlite-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAOhD;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAI/C;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,OAAO,YAAY,GAAG,IAAI,CAiBpE;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,IAAI,OAAO,YAAY,CAQ1D"}

package/dist/core/sqlite-runtime.js

@@ -0,0 +1,49 @@
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+let cachedAvailable;
+let cachedClass;
+/**
+ * Probe whether the current Node runtime exposes a usable `node:sqlite`
+ * `DatabaseSync` with custom scalar `function()` support (Node ^22.13 || >=24).
+ * Result is memoized for the process lifetime.
+ */
+export function isNodeSqliteAvailable() {
+    if (cachedAvailable !== undefined)
+        return cachedAvailable;
+    cachedAvailable = tryGetDatabaseSyncClass() !== null;
+    return cachedAvailable;
+}
+/**
+ * Load `DatabaseSync` when available; return `null` on unsupported runtimes
+ * (Node < 22.13, `--no-experimental-sqlite`, or missing `function` API).
+ * Prefer this for optional/degraded paths; use `getDatabaseSyncClass()` when
+ * SQLite is required and a clear hard-error is appropriate.
+ */
+export function tryGetDatabaseSyncClass() {
+    if (cachedClass !== undefined)
+        return cachedClass;
+    try {
+        const mod = require("node:sqlite");
+        if (typeof mod.DatabaseSync !== "function" ||
+            typeof mod.DatabaseSync.prototype?.function !== "function") {
+            cachedClass = null;
+            return null;
+        }
+        cachedClass = mod.DatabaseSync;
+        return cachedClass;
+    }
+    catch {
+        cachedClass = null;
+        return null;
+    }
+}
+/** Load lazily so non-SQLite commands can still explain an unsupported setup. */
+export function getDatabaseSyncClass() {
+    const cls = tryGetDatabaseSyncClass();
+    if (cls)
+        return cls;
+    throw new Error(`BLA SQLite support requires Node.js 22.x >=22.13.0 or Node.js >=24.0.0 ` +
+        `with node:sqlite enabled (current runtime: ${process.version}). ` +
+        "Upgrade Node.js and remove --no-experimental-sqlite if set.");
+}
+//# sourceMappingURL=sqlite-runtime.js.map

package/dist/core/sqlite-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-runtime.js","sourceRoot":"","sources":["../../src/core/sqlite-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,IAAI,eAAoC,CAAC;AACzC,IAAI,WAAmD,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IAC1D,eAAe,GAAG,uBAAuB,EAAE,KAAK,IAAI,CAAC;IACrD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAA2C,CAAC;QAC7E,IACE,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU;YACtC,OAAO,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,KAAK,UAAU,EAC1D,CAAC;YACD,WAAW,GAAG,IAAI,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;QAC/B,OAAO,WAAW,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,uBAAuB,EAAE,CAAC;IACtC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,IAAI,KAAK,CACb,yEAAyE;QACvE,8CAA8C,OAAO,CAAC,OAAO,KAAK;QAClE,6DAA6D,CAChE,CAAC;AACJ,CAAC"}

package/dist/core/token-estimator.d.ts

@@ -0,0 +1,11 @@
+import type { AgentCostEstimate, ReaSemanticSimulationResult } from "./types.js";
+/**
+ * Models REA's exact investigation workflow:
+ * 1. Initial `analyze_javascript_application` / `open_binary` / `inspect_*` summary call
+ * 2. Paging `inspect_analysis_view` across modules/functions (`limit: 16`)
+ * 3. Calling `trace_application_feature` / `analyze_function` for each obligation node
+ * 4. Retrying unresolved dynamic/ambiguous IPC channels & semantic resource-limit bailouts
+ * 5. Accumulating context window history across every MCP tool call turn (`O(N^2)` cumulative input tokens)
+ */
+export declare function estimateAgentReverseEngineeringCosts(sim: ReaSemanticSimulationResult, byteSize: number): readonly AgentCostEstimate[];
+//# sourceMappingURL=token-estimator.d.ts.map

package/dist/core/token-estimator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-estimator.d.ts","sourceRoot":"","sources":["../../src/core/token-estimator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAkCjF;;;;;;;GAOG;AACH,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,2BAA2B,EAChC,QAAQ,EAAE,MAAM,GACf,SAAS,iBAAiB,EAAE,CA2E9B"}

package/dist/core/token-estimator.js

@@ -0,0 +1,87 @@
+const AGENT_MODELS = [
+    {
+        modelName: "Claude Opus 4 / Claude Code (Deep REA Loop)",
+        inputUsdPerMillion: 15.0,
+        outputUsdPerMillion: 75.0,
+        contextWindowTokens: 200_000,
+        secondsPerMcpRoundtrip: 7.5,
+    },
+    {
+        modelName: "Claude Sonnet 4 / Cursor Agent",
+        inputUsdPerMillion: 3.0,
+        outputUsdPerMillion: 15.0,
+        contextWindowTokens: 200_000,
+        secondsPerMcpRoundtrip: 4.8,
+    },
+    {
+        modelName: "OpenAI o3 / Codex CLI",
+        inputUsdPerMillion: 10.0,
+        outputUsdPerMillion: 40.0,
+        contextWindowTokens: 200_000,
+        secondsPerMcpRoundtrip: 6.2,
+    },
+];
+/**
+ * Models REA's exact investigation workflow:
+ * 1. Initial `analyze_javascript_application` / `open_binary` / `inspect_*` summary call
+ * 2. Paging `inspect_analysis_view` across modules/functions (`limit: 16`)
+ * 3. Calling `trace_application_feature` / `analyze_function` for each obligation node
+ * 4. Retrying unresolved dynamic/ambiguous IPC channels & semantic resource-limit bailouts
+ * 5. Accumulating context window history across every MCP tool call turn (`O(N^2)` cumulative input tokens)
+ */
+export function estimateAgentReverseEngineeringCosts(sim, byteSize) {
+    const isShielded = sim.examinationStatus === "limited" ||
+        sim.decoyFunctionsDetectedAsReal >= 5 ||
+        sim.triggeredResourceLimits.length > 0;
+    const baseSourceTokens = Math.max(350, Math.min(25_000, Math.ceil(byteSize / 3.8)));
+    const obligationNodes = Math.max(1, sim.obligationLedgerNodes);
+    if (!isShielded) {
+        // Unprotected target: fast, linear 4-8 MCP calls, ~$0.11-$0.19 on Opus / ~$0.03 on Sonnet
+        const totalMcpCalls = Math.max(3, Math.min(10, Math.ceil(obligationNodes * 1.2) + 2));
+        const cumulativeInputTokens = baseSourceTokens * 2 + totalMcpCalls * 820;
+        const outputTokens = 650 + totalMcpCalls * 210;
+        return AGENT_MODELS.map((model) => {
+            const inputUsd = (cumulativeInputTokens / 1_000_000) * model.inputUsdPerMillion;
+            const outputUsd = (outputTokens / 1_000_000) * model.outputUsdPerMillion;
+            const cost = Number(Math.max(0.02, inputUsd + outputUsd).toFixed(2));
+            return {
+                modelName: model.modelName,
+                estimatedInputTokens: cumulativeInputTokens,
+                estimatedOutputTokens: outputTokens,
+                estimatedMcpToolCalls: totalMcpCalls,
+                estimatedWallClockSeconds: Math.round(totalMcpCalls * model.secondsPerMcpRoundtrip),
+                estimatedCostUsd: cost,
+                contextWindowOverflowProbability: 0.02,
+                outcomeVerdict: "TRIVIAL_CLONE",
+            };
+        });
+    }
+    // Protected target: Tarpit + Semantic Budget Breakers + Ambiguous IPC + Chaff
+    const ambiguityRetries = Math.min(40, sim.ipcChannelsAmbiguousOrDynamic * 2) +
+        sim.triggeredResourceLimits.length * 5 +
+        Math.min(20, sim.decoyRoutesHarvested);
+    const totalMcpCalls = Math.min(140, Math.max(32, Math.ceil(obligationNodes * 0.65) + ambiguityRetries));
+    // Each MCP turn adds ~3,400 tokens of decoy Evidence dossier & chaff into the sliding context window:
+    const avgContextPerTurn = Math.min(165_000, 18_000 + sim.decoyFunctionsDetectedAsReal * 1_650 + sim.architecturalChaffPayloads * 1_200);
+    const rawCumulativeInput = baseSourceTokens + totalMcpCalls * avgContextPerTurn;
+    const rawOutputTokens = 4_500 + totalMcpCalls * 780 + sim.decoyFunctionsDetectedAsReal * 320;
+    return AGENT_MODELS.map((model) => {
+        const inputUsd = (rawCumulativeInput / 1_000_000) * model.inputUsdPerMillion;
+        const outputUsd = (rawOutputTokens / 1_000_000) * model.outputUsdPerMillion;
+        const totalCostUsd = Number((inputUsd + outputUsd).toFixed(2));
+        const wallClockSeconds = Math.round(totalMcpCalls * model.secondsPerMcpRoundtrip);
+        return {
+            modelName: model.modelName,
+            estimatedInputTokens: rawCumulativeInput,
+            estimatedOutputTokens: rawOutputTokens,
+            estimatedMcpToolCalls: totalMcpCalls,
+            estimatedWallClockSeconds: wallClockSeconds,
+            estimatedCostUsd: Math.max(1.5, totalCostUsd),
+            contextWindowOverflowProbability: sim.decoyFunctionsDetectedAsReal >= 10 ? 0.98 : 0.84,
+            outcomeVerdict: sim.examinationStatus === "limited" && sim.decoyFunctionsDetectedAsReal >= 8
+                ? "AGENT_HALLUCINATION_AND_BANKRUPTCY"
+                : "HIGH_FRICTION",
+        };
+    });
+}
+//# sourceMappingURL=token-estimator.js.map

package/dist/core/token-estimator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-estimator.js","sourceRoot":"","sources":["../../src/core/token-estimator.ts"],"names":[],"mappings":"AAUA,MAAM,YAAY,GAAiC;IACjD;QACE,SAAS,EAAE,6CAA6C;QACxD,kBAAkB,EAAE,IAAI;QACxB,mBAAmB,EAAE,IAAI;QACzB,mBAAmB,EAAE,OAAO;QAC5B,sBAAsB,EAAE,GAAG;KAC5B;IACD;QACE,SAAS,EAAE,gCAAgC;QAC3C,kBAAkB,EAAE,GAAG;QACvB,mBAAmB,EAAE,IAAI;QACzB,mBAAmB,EAAE,OAAO;QAC5B,sBAAsB,EAAE,GAAG;KAC5B;IACD;QACE,SAAS,EAAE,uBAAuB;QAClC,kBAAkB,EAAE,IAAI;QACxB,mBAAmB,EAAE,IAAI;QACzB,mBAAmB,EAAE,OAAO;QAC5B,sBAAsB,EAAE,GAAG;KAC5B;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,oCAAoC,CAClD,GAAgC,EAChC,QAAgB;IAEhB,MAAM,UAAU,GACd,GAAG,CAAC,iBAAiB,KAAK,SAAS;QACnC,GAAG,CAAC,4BAA4B,IAAI,CAAC;QACrC,GAAG,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC,CAAC;IAEzC,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAE/D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,0FAA0F;QAC1F,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,qBAAqB,GAAG,gBAAgB,GAAG,CAAC,GAAG,aAAa,GAAG,GAAG,CAAC;QACzE,MAAM,YAAY,GAAG,GAAG,GAAG,aAAa,GAAG,GAAG,CAAC;QAE/C,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,QAAQ,GAAG,CAAC,qBAAqB,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC;YAChF,MAAM,SAAS,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC;YACzE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,OAAO;gBACL,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,oBAAoB,EAAE,qBAAqB;gBAC3C,qBAAqB,EAAE,YAAY;gBACnC,qBAAqB,EAAE,aAAa;gBACpC,yBAAyB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,sBAAsB,CAAC;gBACnF,gBAAgB,EAAE,IAAI;gBACtB,gCAAgC,EAAE,IAAI;gBACtC,cAAc,EAAE,eAAe;aAChC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,MAAM,gBAAgB,GACpB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,6BAA6B,GAAG,CAAC,CAAC;QACnD,GAAG,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEzC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC5B,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,gBAAgB,CAAC,CACnE,CAAC;IAEF,sGAAsG;IACtG,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAChC,OAAO,EACP,MAAM,GAAG,GAAG,CAAC,4BAA4B,GAAG,KAAK,GAAG,GAAG,CAAC,0BAA0B,GAAG,KAAK,CAC3F,CAAC;IAEF,MAAM,kBAAkB,GACtB,gBAAgB,GAAG,aAAa,GAAG,iBAAiB,CAAC;IACvD,MAAM,eAAe,GACnB,KAAK,GAAG,aAAa,GAAG,GAAG,GAAG,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAC;IAEvE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,CAAC,kBAAkB,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAC7E,MAAM,SAAS,GAAG,CAAC,eAAe,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAElF,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,oBAAoB,EAAE,kBAAkB;YACxC,qBAAqB,EAAE,eAAe;YACtC,qBAAqB,EAAE,aAAa;YACpC,yBAAyB,EAAE,gBAAgB;YAC3C,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC;YAC7C,gCAAgC,EAC9B,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YACtD,cAAc,EACZ,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,GAAG,CAAC,4BAA4B,IAAI,CAAC;gBAC1E,CAAC,CAAC,oCAAoC;gBACtC,CAAC,CAAC,eAAe;SACtB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/types.d.ts

@@ -0,0 +1,159 @@
+export type ArtifactFormat = "javascript" | "typescript" | "electron-asar" | "sourcemap" | "html-bundle" | "wasm" | "python-source" | "python-pyc" | "native-elf" | "native-macho" | "native-pe" | "dotnet-managed" | "apple-plist" | "jvm-class" | "sqlite" | "model-safetensors" | "model-gguf" | "android-dex" | "il2cpp-metadata" | "archive-zip" | "android-apk" | "erlang-beam" | "evm-bytecode" | "pcap-capture" | "gpu-ptx" | "directory" | "unknown";
+export type ProtectionIntensity = "stealth" | "balanced" | "maximum" | "bankrupt";
+export type ReaAttackVectorId = "js-static-semantics" | "electron-ipc-bridge" | "electron-fuses-inspection" | "runtime-cdp-frida-reconciliation" | "js-route-rpc-inventory" | "sourcemap-recovery" | "call-graph-tracing" | "obligation-ledger-cloning" | "wasm-wat-interface" | "python-pyc-marshal" | "native-go-buildinfo" | "native-rust-auditable" | "native-decompiler-pseudocode" | "flutter-dart-aot-snapshot" | "dotnet-managed-budget" | "apple-plist-budget" | "jvm-bytecode-decompilation" | "sqlite-database-inspection" | "model-artifact-inspection" | "android-dex-il2cpp-inspection" | "archive-inventory" | "asar-header-admission" | "erlang-beam-inspection" | "evm-bytecode-inspection" | "pcap-capture-inspection" | "gpu-ptx-inspection" | "bun-standalone-module-graph";
+export interface ExposedSymbolOrModule {
+    readonly id: string;
+    readonly name: string;
+    readonly kind: "function" | "class" | "export" | "ipc-channel" | "route" | "rpc-endpoint" | "wasm-export" | "pyc-code-object" | "native-symbol" | "metadata-section" | "sourcemap-source" | "sqlite-table" | "model-tensor" | "electron-fuse" | "dex-class";
+    readonly location: string;
+    readonly riskLevel: "critical" | "high" | "medium" | "low";
+    readonly reaToolUsed: string;
+    readonly estimatedTokensToReconstruct: number;
+    readonly estimatedCostUsd: number;
+    readonly reason: string;
+}
+export interface ReaSemanticSimulationResult {
+    readonly parseStatus: "complete" | "recovered" | "failed";
+    readonly examinationStatus: "complete" | "limited";
+    readonly triggeredResourceLimits: readonly string[];
+    readonly semanticUncertainties: readonly string[];
+    readonly visitedAstNodes: number;
+    readonly totalFunctions: number;
+    readonly decoyFunctionsDetectedAsReal: number;
+    readonly staticStringsResolved: number;
+    readonly staticStringsOpaque: number;
+    readonly ipcChannelsTotal: number;
+    readonly ipcChannelsPairedUniquely: number;
+    readonly ipcChannelsAmbiguousOrDynamic: number;
+    readonly routesDiscovered: number;
+    readonly decoyRoutesHarvested: number;
+    readonly obligationLedgerNodes: number;
+    readonly architecturalChaffPayloads: number;
+}
+export interface AgentCostEstimate {
+    readonly modelName: string;
+    readonly estimatedInputTokens: number;
+    readonly estimatedOutputTokens: number;
+    readonly estimatedMcpToolCalls: number;
+    readonly estimatedWallClockSeconds: number;
+    readonly estimatedCostUsd: number;
+    readonly contextWindowOverflowProbability: number;
+    readonly outcomeVerdict: "TRIVIAL_CLONE" | "MODERATE_EFFORT" | "HIGH_FRICTION" | "AGENT_HALLUCINATION_AND_BANKRUPTCY";
+}
+export interface AuditReport {
+    readonly targetPath: string;
+    readonly detectedFormat: ArtifactFormat;
+    readonly sha256: string;
+    readonly byteSize: number;
+    readonly timestamp: string;
+    readonly exposureScore: number;
+    readonly protectionStatus: "UNPROTECTED" | "PARTIALLY_SHIELDED" | "BLA_PROTECTED";
+    readonly reaSimulation: ReaSemanticSimulationResult;
+    readonly exposedItems: readonly ExposedSymbolOrModule[];
+    readonly vulnerableReaVectors: readonly ReaAttackVectorId[];
+    readonly agentEstimates: readonly AgentCostEstimate[];
+    readonly headlineWarning: string;
+    readonly recommendedCommand: string;
+}
+export interface ProtectionOptions {
+    readonly inputPath: string;
+    readonly outputPath?: string;
+    readonly inPlace?: boolean;
+    readonly intensity?: ProtectionIntensity;
+    readonly seed?: string | number;
+    readonly tarpitDecoyCount?: number;
+    readonly tarpitDepth?: number;
+    readonly chaffPayloads?: boolean;
+    readonly breakSemanticBudgets?: boolean;
+    readonly protectElectronIpc?: boolean;
+    readonly injectRouteMirage?: boolean;
+    readonly honeySourceMaps?: boolean;
+    readonly runtimeDeception?: boolean;
+    /**
+     * When true, embed opt-in risky LLM directive layers (fake COPPA/medical notices,
+     * dual-use imitation vocabulary, in-band AI chat markers). Default false.
+     */
+    readonly llmDirectives?: boolean;
+}
+export interface ProtectionMetrics {
+    readonly originalBytes: number;
+    readonly protectedBytes: number;
+    readonly decoyFunctionsInjected: number;
+    readonly fakeCrossReferencesCreated: number;
+    readonly primitiveCandidateBranchesCreated: number;
+    readonly aliasSelectionStatesCreated: number;
+    readonly ipcAmbiguitySitesInjected: number;
+    readonly decoyRoutesInjected: number;
+    readonly chaffPayloadsEmbedded: number;
+    readonly honeySourceMapsGenerated: number;
+    readonly binarySectionsPatched: number;
+}
+export interface ProtectionResult {
+    readonly inputPath: string;
+    readonly outputPath: string;
+    readonly detectedFormat: ArtifactFormat;
+    readonly intensity: ProtectionIntensity;
+    readonly seed: string;
+    readonly originalSha256: string;
+    readonly protectedSha256: string;
+    readonly metrics: ProtectionMetrics;
+    readonly counteredReaVectors: readonly ReaAttackVectorId[];
+    readonly beforeAudit: AuditReport;
+    readonly afterAudit: AuditReport;
+    readonly elapsedMs: number;
+}
+export interface VerificationCheck {
+    readonly id: string;
+    readonly name: string;
+    readonly targetReaComponent: string;
+    readonly passed: boolean;
+    readonly details: string;
+}
+export interface VerificationReport {
+    readonly targetPath: string;
+    readonly originalPath?: string;
+    readonly detectedFormat: ArtifactFormat;
+    readonly overallPassed: boolean;
+    readonly defenseScore: number;
+    readonly checks: readonly VerificationCheck[];
+    readonly tokenAmplificationFactor: number;
+    readonly costAmplificationFactor: number;
+    readonly obligationGraphExpansionFactor: number;
+    readonly functionalIntegrityVerified: boolean;
+}
+export interface ShowcaseCaseResult {
+    readonly id: string;
+    readonly title: string;
+    readonly reaShowcaseReference: string;
+    readonly format: ArtifactFormat;
+    readonly before: {
+        readonly exposureScore: number;
+        readonly examinationStatus: "complete" | "limited";
+        readonly obligationNodes: number;
+        readonly estimatedTokens: number;
+        readonly estimatedCostUsd: number;
+        readonly estimatedSeconds: number;
+        readonly agentOutcome: string;
+    };
+    readonly after: {
+        readonly exposureScore: number;
+        readonly examinationStatus: "complete" | "limited";
+        readonly triggeredLimits: readonly string[];
+        readonly obligationNodes: number;
+        readonly estimatedTokens: number;
+        readonly estimatedCostUsd: number;
+        readonly estimatedSeconds: number;
+        readonly agentOutcome: string;
+    };
+    readonly tokenMultiplier: number;
+    readonly costMultiplier: number;
+    readonly functionalCheckPassed: boolean;
+}
+export interface BenchmarkReport {
+    readonly timestamp: string;
+    readonly blaVersion: string;
+    readonly cases: readonly ShowcaseCaseResult[];
+    readonly aggregateTokenMultiplier: number;
+    readonly aggregateCostMultiplier: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,WAAW,GACX,aAAa,GACb,MAAM,GACN,eAAe,GACf,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,WAAW,GACX,gBAAgB,GAChB,aAAa,GACb,WAAW,GACX,QAAQ,GACR,mBAAmB,GACnB,YAAY,GACZ,aAAa,GACb,iBAAiB,GACjB,aAAa,GACb,aAAa,GACb,aAAa,GACb,cAAc,GACd,cAAc,GACd,SAAS,GACT,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC;AAElF,MAAM,MAAM,iBAAiB,GACzB,qBAAqB,GACrB,qBAAqB,GACrB,2BAA2B,GAC3B,kCAAkC,GAClC,wBAAwB,GACxB,oBAAoB,GACpB,oBAAoB,GACpB,2BAA2B,GAC3B,oBAAoB,GACpB,oBAAoB,GACpB,qBAAqB,GACrB,uBAAuB,GACvB,8BAA8B,GAC9B,2BAA2B,GAC3B,uBAAuB,GACvB,oBAAoB,GACpB,4BAA4B,GAC5B,4BAA4B,GAC5B,2BAA2B,GAC3B,+BAA+B,GAC/B,mBAAmB,GACnB,uBAAuB,GACvB,wBAAwB,GACxB,yBAAyB,GACzB,yBAAyB,GACzB,oBAAoB,GACpB,6BAA6B,CAAC;AAElC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EACT,UAAU,GACV,OAAO,GACP,QAAQ,GACR,aAAa,GACb,OAAO,GACP,cAAc,GACd,aAAa,GACb,iBAAiB,GACjB,eAAe,GACf,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,cAAc,GACd,eAAe,GACf,WAAW,CAAC;IAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC1D,QAAQ,CAAC,iBAAiB,EAAE,UAAU,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpD,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;CAC7C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,gCAAgC,EAAE,MAAM,CAAC;IAClD,QAAQ,CAAC,cAAc,EACnB,eAAe,GACf,iBAAiB,GACjB,eAAe,GACf,oCAAoC,CAAC;CAC1C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,aAAa,GAAG,oBAAoB,GAAG,eAAe,CAAC;IAClF,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,QAAQ,CAAC,YAAY,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACxD,QAAQ,CAAC,oBAAoB,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC5D,QAAQ,CAAC,cAAc,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACtD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,iCAAiC,EAAE,MAAM,CAAC;IACnD,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC3D,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC9C,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;IAChD,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;CAC/C;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,iBAAiB,EAAE,UAAU,GAAG,SAAS,CAAC;QACnD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,iBAAiB,EAAE,UAAU,GAAG,SAAS,CAAC;QACnD,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;QAC5C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC9C,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C"}

package/dist/core/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":""}

package/dist/engine/auditor.d.ts

@@ -0,0 +1,6 @@
+import type { AuditReport } from "../core/types.js";
+/**
+ * Runs a Pre-flight REA Exposure & Vulnerability Audit on any file or directory.
+ */
+export declare function auditTarget(targetPath: string): AuditReport;
+//# sourceMappingURL=auditor.d.ts.map

package/dist/engine/auditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditor.d.ts","sourceRoot":"","sources":["../../src/engine/auditor.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAEV,WAAW,EAIZ,MAAM,kBAAkB,CAAC;AA6Q1B;;GAEG;AACH,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,WAAW,CAuuB3D"}