cto-ai-cli 5.2.0 → 7.1.0

package/dist/govern/index.d.ts

@@ -1,325 +0,0 @@
-interface AuditEntry {
-    id: string;
-    timestamp: Date;
-    action: AuditAction;
-    user: string;
-    projectPath: string;
-    contextHash?: string;
-    filesIncluded?: number;
-    filesExcluded?: number;
-    tokensUsed?: number;
-    coverageScore?: number;
-    riskScore?: number;
-    model?: string;
-    estimatedCost?: number;
-    integrityHash: string;
-    details: Record<string, unknown>;
-}
-type AuditAction = 'init' | 'analyze' | 'interact' | 'snapshot-create' | 'snapshot-verify' | 'policy-change' | 'secret-detected' | 'integrity-check';
-interface PolicySet {
-    version: string;
-    name: string;
-    rules: PolicyRule[];
-}
-interface PolicyRule {
-    id: string;
-    type: PolicyRuleType;
-    pattern?: string;
-    threshold?: number;
-    category?: string;
-    reason: string;
-    enabled: boolean;
-}
-type PolicyRuleType = 'include-always' | 'exclude-always' | 'budget-limit' | 'coverage-minimum' | 'risk-maximum' | 'secret-block';
-interface PolicyValidation {
-    passed: boolean;
-    violations: PolicyViolation[];
-    warnings: PolicyWarning[];
-}
-interface PolicyViolation {
-    rule: PolicyRule;
-    message: string;
-    severity: 'error' | 'warning';
-}
-interface PolicyWarning {
-    rule: PolicyRule;
-    message: string;
-    currentValue: number;
-    threshold: number;
-}
-interface ContextSnapshot {
-    id: string;
-    name: string;
-    createdAt: Date;
-    hash: string;
-    projectHash: string;
-    analysisHash: string;
-    selectionHash: string;
-    files: SnapshotFile[];
-    totalTokens: number;
-    coverageScore: number;
-    riskScore: number;
-    metadata: Record<string, unknown>;
-}
-interface SnapshotFile {
-    relativePath: string;
-    hash: string;
-    tokens: number;
-    pruneLevel: string;
-}
-interface SnapshotVerification {
-    valid: boolean;
-    snapshotId: string;
-    filesChecked: number;
-    filesMatched: number;
-    filesMissing: string[];
-    filesChanged: string[];
-    integrityOk: boolean;
-}
-interface SecretFinding {
-    type: SecretType;
-    file: string;
-    line: number;
-    match: string;
-    redacted: string;
-    severity: 'critical' | 'high' | 'medium' | 'low';
-}
-type SecretType = 'api-key' | 'aws-key' | 'private-key' | 'password' | 'token' | 'connection-string' | 'env-variable' | 'pii' | 'high-entropy' | 'custom';
-interface IntegrityManifest {
-    version: string;
-    createdAt: Date;
-    entries: IntegrityEntry[];
-}
-interface IntegrityEntry {
-    filePath: string;
-    hash: string;
-    size: number;
-    createdAt: Date;
-    type: 'snapshot' | 'audit' | 'config' | 'policy';
-}
-
-declare function logAudit(action: AuditAction, projectPath: string, details?: Record<string, unknown>): Promise<AuditEntry>;
-declare function getAuditEntries(options?: {
-    projectPath?: string;
-    action?: AuditAction;
-    since?: Date;
-    limit?: number;
-}): Promise<AuditEntry[]>;
-declare function verifyAuditEntry(entry: AuditEntry): boolean;
-declare function verifyAuditIntegrity(): Promise<{
-    totalEntries: number;
-    validEntries: number;
-    invalidEntries: AuditEntry[];
-}>;
-declare function purgeOldAuditEntries(retentionDays: number): Promise<number>;
-
-declare function scanContentForSecrets(content: string, filePath: string, customPatterns?: string[], extraPiiSafeDomains?: Set<string>): SecretFinding[];
-declare function scanFileForSecrets(filePath: string, projectPath: string, customPatterns?: string[]): Promise<SecretFinding[]>;
-declare function scanProjectForSecrets(projectPath: string, filePaths: string[], customPatterns?: string[]): Promise<SecretFinding[]>;
-declare function sanitizeContent(content: string, customPatterns?: string[]): string;
-interface AllowlistEntry {
-    fingerprint: string;
-    file: string;
-    type: string;
-    redacted: string;
-    reason: string;
-    reviewedBy: string;
-    reviewedAt: string;
-}
-declare function loadAllowlist(projectPath: string): AllowlistEntry[];
-declare function saveAllowlist(projectPath: string, entries: AllowlistEntry[]): void;
-declare function addToAllowlist(projectPath: string, finding: SecretFinding, reason: string, reviewedBy?: string): AllowlistEntry;
-declare function filterByAllowlist(findings: SecretFinding[], projectPath: string): {
-    filtered: SecretFinding[];
-    allowed: SecretFinding[];
-};
-interface FileHashMap {
-    [relativePath: string]: string;
-}
-declare function getChangedFiles(projectPath: string, filePaths: string[]): {
-    changed: string[];
-    unchanged: string[];
-    cache: FileHashMap;
-};
-interface AuditConfig {
-    severityOverrides: Partial<Record<SecretType, SecretFinding['severity']>>;
-    piiSafeDomains: string[];
-    customPatterns: string[];
-    entropyThreshold: number;
-    includePII: boolean;
-    incrementalScan: boolean;
-}
-declare const DEFAULT_AUDIT_CONFIG: AuditConfig;
-declare function loadAuditConfig(projectPath: string): AuditConfig;
-declare function saveAuditConfig(projectPath: string, config: AuditConfig): void;
-declare function generatePreCommitHook(projectPath: string, hookType?: 'husky' | 'githooks'): string;
-declare function scanContentForHighEntropy(content: string, filePath: string, threshold?: number): SecretFinding[];
-interface AuditResult {
-    findings: SecretFinding[];
-    summary: {
-        totalFiles: number;
-        filesScanned: number;
-        filesWithSecrets: number;
-        totalFindings: number;
-        bySeverity: {
-            critical: number;
-            high: number;
-            medium: number;
-            low: number;
-        };
-        byType: Record<string, number>;
-    };
-    recommendations: string[];
-}
-interface AuditOptions {
-    customPatterns?: string[];
-    entropyThreshold?: number;
-    includePII?: boolean;
-    useAllowlist?: boolean;
-    incrementalScan?: boolean;
-    severityOverrides?: Partial<Record<SecretType, SecretFinding['severity']>>;
-    piiSafeDomains?: string[];
-}
-declare function auditProject(projectPath: string, filePaths: string[], options?: AuditOptions): Promise<AuditResult>;
-
-interface AnalyzedFile {
-    path: string;
-    relativePath: string;
-    extension: string;
-    size: number;
-    tokens: number;
-    lines: number;
-    lastModified: Date;
-    kind: FileKind;
-    imports: string[];
-    importedBy: string[];
-    isHub: boolean;
-    complexity: number;
-    riskScore: number;
-    riskFactors: RiskFactor[];
-    exclusionImpact: ExclusionImpact;
-}
-type FileKind = 'source' | 'type' | 'test' | 'config' | 'entry' | 'asset';
-type ExclusionImpact = 'critical' | 'high' | 'medium' | 'low' | 'none';
-interface ProjectAnalysis {
-    projectPath: string;
-    projectName: string;
-    analyzedAt: Date;
-    hash: string;
-    files: AnalyzedFile[];
-    totalFiles: number;
-    totalTokens: number;
-    graph: ProjectGraph;
-    riskProfile: RiskProfile;
-    stack: string[];
-    tokenMethod: 'chars4' | 'tiktoken';
-}
-interface ProjectGraph {
-    nodes: string[];
-    edges: GraphEdge[];
-    hubs: HubNode[];
-    leaves: string[];
-    orphans: string[];
-    clusters: FileCluster[];
-}
-interface GraphEdge {
-    from: string;
-    to: string;
-    type: 'import' | 'export' | 're-export';
-}
-interface HubNode {
-    relativePath: string;
-    dependents: number;
-    dependencies: number;
-    score: number;
-}
-interface FileCluster {
-    id: string;
-    name: string;
-    files: string[];
-    totalTokens: number;
-    internalEdges: number;
-    externalEdges: number;
-    cohesion: number;
-}
-interface RiskProfile {
-    distribution: {
-        critical: number;
-        high: number;
-        medium: number;
-        low: number;
-    };
-    topRiskFiles: AnalyzedFile[];
-    overallComplexity: number;
-}
-interface RiskFactor {
-    type: RiskFactorType;
-    score: number;
-    weight: number;
-    detail: string;
-}
-type RiskFactorType = 'hub' | 'type-provider' | 'complexity' | 'recency' | 'config' | 'churn';
-interface CoverageResult {
-    score: number;
-    relevantFiles: string[];
-    includedRelevant: string[];
-    missingRelevant: string[];
-    missingCritical: string[];
-    explanation: string;
-}
-interface ContextSelection {
-    files: SelectedFile[];
-    totalTokens: number;
-    budget: number;
-    usedPercent: number;
-    coverage: CoverageResult;
-    riskScore: number;
-    deterministic: boolean;
-    hash: string;
-    decisions: SelectionDecision[];
-}
-interface SelectedFile {
-    relativePath: string;
-    tokens: number;
-    originalTokens: number;
-    pruneLevel: PruneLevel;
-    riskScore: number;
-    reason: string;
-}
-type PruneLevel = 'full' | 'signatures' | 'skeleton' | 'excluded';
-interface SelectionDecision {
-    file: string;
-    action: 'include-full' | 'include-signatures' | 'include-skeleton' | 'exclude';
-    reason: string;
-    alternatives?: string;
-}
-
-declare const DEFAULT_POLICY: PolicySet;
-declare function validateSelection(selection: ContextSelection, policies: PolicySet, allFiles?: AnalyzedFile[]): PolicyValidation;
-declare function addRule(policies: PolicySet, rule: PolicyRule): PolicySet;
-declare function removeRule(policies: PolicySet, ruleId: string): PolicySet;
-declare function toggleRule(policies: PolicySet, ruleId: string, enabled: boolean): PolicySet;
-
-declare function createSnapshot(name: string, analysis: ProjectAnalysis, selection: ContextSelection, metadata?: Record<string, unknown>): ContextSnapshot;
-declare function verifySnapshot(snapshot: ContextSnapshot, currentAnalysis: ProjectAnalysis, currentSelection: ContextSelection): Promise<SnapshotVerification>;
-declare function compareSnapshots(older: ContextSnapshot, newer: ContextSnapshot): {
-    added: string[];
-    removed: string[];
-    changed: string[];
-    tokenDelta: number;
-    coverageDelta: number;
-    riskDelta: number;
-};
-
-declare function hashContent(content: Buffer | string): string;
-declare function hashFile(filePath: string): Promise<string | null>;
-declare function buildManifest(projectDir: string): Promise<IntegrityManifest>;
-declare function verifyManifest(manifest: IntegrityManifest): Promise<{
-    totalFiles: number;
-    validFiles: number;
-    invalidFiles: string[];
-    missingFiles: string[];
-}>;
-declare function securePermissions(dirPath: string): Promise<number>;
-
-export { type AllowlistEntry, type AuditConfig, type AuditOptions, type AuditResult, DEFAULT_AUDIT_CONFIG, DEFAULT_POLICY, addRule, addToAllowlist, auditProject, buildManifest, compareSnapshots, createSnapshot, filterByAllowlist, generatePreCommitHook, getAuditEntries, getChangedFiles, hashContent, hashFile, loadAllowlist, loadAuditConfig, logAudit, purgeOldAuditEntries, removeRule, sanitizeContent, saveAllowlist, saveAuditConfig, scanContentForHighEntropy, scanContentForSecrets, scanFileForSecrets, scanProjectForSecrets, securePermissions, toggleRule, validateSelection, verifyAuditEntry, verifyAuditIntegrity, verifyManifest, verifySnapshot };