driftdetect-core 0.7.1 → 0.8.1

package/dist/quality-gates/gates/regression-detection/regression-detection-gate.js

@@ -0,0 +1,330 @@
+/**
+ * Regression Detection Gate
+ *
+ * @license Apache-2.0
+ *
+ * Detects pattern regressions by comparing current state against a baseline.
+ * Catches when changes cause patterns to degrade (lower confidence, more outliers).
+ *
+ * FUTURE_GATE: gate:regression-detection (Team tier)
+ */
+import { BaseGate } from '../base-gate.js';
+/**
+ * Regression Detection Gate
+ *
+ * Compares current pattern health against a baseline to detect regressions.
+ */
+export class RegressionDetectionGate extends BaseGate {
+    id = 'regression-detection';
+    name = 'Regression Detection';
+    description = 'Detects pattern regressions from baseline';
+    async executeGate(input) {
+        const config = input.config;
+        const patterns = input.context.patterns ?? [];
+        const previousSnapshot = input.context.previousSnapshot;
+        if (!previousSnapshot) {
+            return this.createPassedResult('No baseline snapshot available for comparison', {
+                regressions: [],
+                improvements: [],
+                overallHealthDelta: 0,
+                categoryDeltas: {},
+                baseline: {
+                    type: config.baseline,
+                    reference: 'none',
+                    timestamp: new Date().toISOString(),
+                },
+            }, ['No baseline snapshot found. Run `drift gate` on main branch first to establish baseline.']);
+        }
+        // Compare current patterns against baseline
+        const comparison = this.comparePatterns(patterns, previousSnapshot, config);
+        // Build violations from regressions
+        const violations = this.buildViolations(comparison.regressions, config);
+        // Determine pass/fail based on thresholds
+        const passed = this.evaluateThresholds(comparison, config);
+        const score = this.calculateScore(comparison);
+        const status = passed ? (comparison.regressions.length > 0 ? 'warned' : 'passed') : 'failed';
+        const details = {
+            regressions: comparison.regressions,
+            improvements: comparison.improvements,
+            overallHealthDelta: comparison.overallHealthDelta,
+            categoryDeltas: comparison.categoryDeltas,
+            baseline: {
+                type: config.baseline,
+                reference: previousSnapshot.commitSha || previousSnapshot.branch,
+                timestamp: previousSnapshot.timestamp,
+            },
+        };
+        const summary = this.buildSummary(comparison, passed);
+        const warnings = this.buildWarnings(comparison);
+        if (!passed) {
+            return this.createFailedResult(summary, violations, details, score, warnings);
+        }
+        if (comparison.regressions.length > 0) {
+            return this.createWarnedResult(summary, violations, details, score, warnings);
+        }
+        return {
+            gateId: this.id,
+            gateName: this.name,
+            status,
+            passed,
+            score,
+            summary,
+            violations,
+            warnings,
+            executionTimeMs: 0,
+            details: details,
+        };
+    }
+    validateConfig(config) {
+        const errors = [];
+        const c = config;
+        if (c.maxConfidenceDrop < 0 || c.maxConfidenceDrop > 100) {
+            errors.push('maxConfidenceDrop must be between 0 and 100');
+        }
+        if (c.maxComplianceDrop < 0 || c.maxComplianceDrop > 100) {
+            errors.push('maxComplianceDrop must be between 0 and 100');
+        }
+        if (c.maxNewOutliersPerPattern < 0) {
+            errors.push('maxNewOutliersPerPattern must be non-negative');
+        }
+        return { valid: errors.length === 0, errors };
+    }
+    getDefaultConfig() {
+        return {
+            enabled: true,
+            blocking: true,
+            maxConfidenceDrop: 10, // 10 percentage points
+            maxComplianceDrop: 10, // 10 percentage points
+            maxNewOutliersPerPattern: 3,
+            criticalCategories: ['security', 'auth'],
+            baseline: 'branch-base',
+        };
+    }
+    /**
+     * Compare current patterns against baseline snapshot.
+     */
+    comparePatterns(currentPatterns, baseline, config) {
+        const regressions = [];
+        const improvements = [];
+        const categoryDeltas = {};
+        // Build map of baseline patterns
+        const baselineMap = new Map();
+        for (const bp of baseline.patterns) {
+            const compliance = bp.locations > 0
+                ? (bp.locations / (bp.locations + bp.outliers)) * 100
+                : 100;
+            baselineMap.set(bp.patternId, {
+                confidence: bp.confidence,
+                compliance,
+                outliers: bp.outliers,
+                category: bp.category,
+            });
+        }
+        // Compare each current pattern
+        for (const pattern of currentPatterns) {
+            const baselinePattern = baselineMap.get(pattern.id);
+            if (!baselinePattern)
+                continue; // New pattern, not a regression
+            const currentOutliers = pattern.outliers?.length ?? 0;
+            const currentLocations = pattern.locations?.length ?? 0;
+            const currentCompliance = currentLocations > 0
+                ? (currentLocations / (currentLocations + currentOutliers)) * 100
+                : 100;
+            const confidenceDelta = (pattern.confidence * 100) - (baselinePattern.confidence * 100);
+            const complianceDelta = currentCompliance - baselinePattern.compliance;
+            const newOutliers = currentOutliers - baselinePattern.outliers;
+            // Track category deltas
+            if (!categoryDeltas[pattern.category]) {
+                categoryDeltas[pattern.category] = 0;
+            }
+            // Check for regression
+            if (confidenceDelta < -config.maxConfidenceDrop ||
+                complianceDelta < -config.maxComplianceDrop ||
+                newOutliers > config.maxNewOutliersPerPattern) {
+                const severity = this.classifyRegressionSeverity(confidenceDelta, complianceDelta, newOutliers, config);
+                regressions.push({
+                    patternId: pattern.id,
+                    patternName: pattern.name,
+                    previousConfidence: baselinePattern.confidence * 100,
+                    currentConfidence: pattern.confidence * 100,
+                    confidenceDelta,
+                    previousCompliance: baselinePattern.compliance,
+                    currentCompliance,
+                    complianceDelta,
+                    newOutliers: Math.max(0, newOutliers),
+                    severity,
+                });
+                categoryDeltas[pattern.category] += complianceDelta;
+            }
+            // Check for improvement
+            else if (confidenceDelta > 5 || complianceDelta > 5 || newOutliers < 0) {
+                improvements.push({
+                    patternId: pattern.id,
+                    patternName: pattern.name,
+                    confidenceImprovement: Math.max(0, confidenceDelta),
+                    complianceImprovement: Math.max(0, complianceDelta),
+                    outliersFixed: Math.max(0, -newOutliers),
+                });
+                categoryDeltas[pattern.category] += complianceDelta;
+            }
+        }
+        // Calculate overall health delta
+        const overallHealthDelta = this.calculateOverallDelta(categoryDeltas);
+        return { regressions, improvements, overallHealthDelta, categoryDeltas };
+    }
+    /**
+     * Classify regression severity.
+     */
+    classifyRegressionSeverity(confidenceDelta, complianceDelta, newOutliers, config) {
+        // Severe: More than 2x the threshold
+        if (confidenceDelta < -config.maxConfidenceDrop * 2 ||
+            complianceDelta < -config.maxComplianceDrop * 2 ||
+            newOutliers > config.maxNewOutliersPerPattern * 2) {
+            return 'severe';
+        }
+        // Moderate: Exceeds threshold
+        if (confidenceDelta < -config.maxConfidenceDrop ||
+            complianceDelta < -config.maxComplianceDrop ||
+            newOutliers > config.maxNewOutliersPerPattern) {
+            return 'moderate';
+        }
+        return 'minor';
+    }
+    /**
+     * Calculate overall health delta.
+     */
+    calculateOverallDelta(categoryDeltas) {
+        const values = Object.values(categoryDeltas);
+        if (values.length === 0)
+            return 0;
+        return values.reduce((sum, v) => sum + v, 0) / values.length;
+    }
+    /**
+     * Evaluate whether the gate passes based on thresholds.
+     */
+    evaluateThresholds(comparison, config) {
+        // Check for severe regressions
+        const severeRegressions = comparison.regressions.filter(r => r.severity === 'severe');
+        if (severeRegressions.length > 0)
+            return false;
+        // Check for regressions in critical categories
+        for (const regression of comparison.regressions) {
+            // Find the pattern's category from the regression
+            const category = this.getCategoryFromRegression(regression);
+            if (config.criticalCategories.includes(category)) {
+                return false;
+            }
+        }
+        // Check if moderate regressions exceed threshold
+        const moderateRegressions = comparison.regressions.filter(r => r.severity === 'moderate');
+        if (moderateRegressions.length > 3)
+            return false;
+        return true;
+    }
+    /**
+     * Get category from regression (simplified - in full impl would track this).
+     */
+    getCategoryFromRegression(_regression) {
+        // In full implementation, we'd track the category with the regression
+        return 'unknown';
+    }
+    /**
+     * Build violations from regressions.
+     */
+    buildViolations(regressions, config) {
+        return regressions
+            .filter(r => r.severity !== 'minor')
+            .map(r => this.createViolation({
+            severity: r.severity === 'severe' ? 'error' : 'warning',
+            file: 'project',
+            line: 1,
+            column: 1,
+            message: `Pattern "${r.patternName}" regressed`,
+            explanation: this.formatRegressionExplanation(r, config),
+            ruleId: r.patternId,
+            suggestedFix: `Review changes that affected pattern "${r.patternName}" and ensure they follow the established pattern`,
+        }));
+    }
+    /**
+     * Format regression explanation.
+     */
+    formatRegressionExplanation(regression, config) {
+        const parts = [];
+        if (regression.confidenceDelta < -config.maxConfidenceDrop) {
+            parts.push(`Confidence dropped ${Math.abs(regression.confidenceDelta).toFixed(1)}pp (${regression.previousConfidence.toFixed(1)}% → ${regression.currentConfidence.toFixed(1)}%)`);
+        }
+        if (regression.complianceDelta < -config.maxComplianceDrop) {
+            parts.push(`Compliance dropped ${Math.abs(regression.complianceDelta).toFixed(1)}pp (${regression.previousCompliance.toFixed(1)}% → ${regression.currentCompliance.toFixed(1)}%)`);
+        }
+        if (regression.newOutliers > config.maxNewOutliersPerPattern) {
+            parts.push(`${regression.newOutliers} new outlier${regression.newOutliers === 1 ? '' : 's'} introduced`);
+        }
+        return parts.join('. ');
+    }
+    /**
+     * Calculate score based on comparison.
+     */
+    calculateScore(comparison) {
+        // Start at 100
+        let score = 100;
+        // Deduct for regressions
+        for (const r of comparison.regressions) {
+            switch (r.severity) {
+                case 'severe':
+                    score -= 20;
+                    break;
+                case 'moderate':
+                    score -= 10;
+                    break;
+                case 'minor':
+                    score -= 3;
+                    break;
+            }
+        }
+        // Small bonus for improvements (max 10 points)
+        const improvementBonus = Math.min(10, comparison.improvements.length * 2);
+        score += improvementBonus;
+        return Math.max(0, Math.min(100, Math.round(score)));
+    }
+    /**
+     * Build human-readable summary.
+     */
+    buildSummary(comparison, passed) {
+        if (comparison.regressions.length === 0 && comparison.improvements.length === 0) {
+            return 'No pattern changes detected';
+        }
+        const parts = [];
+        if (comparison.regressions.length > 0) {
+            const severe = comparison.regressions.filter(r => r.severity === 'severe').length;
+            const moderate = comparison.regressions.filter(r => r.severity === 'moderate').length;
+            if (severe > 0) {
+                parts.push(`${severe} severe regression${severe === 1 ? '' : 's'}`);
+            }
+            if (moderate > 0) {
+                parts.push(`${moderate} moderate regression${moderate === 1 ? '' : 's'}`);
+            }
+        }
+        if (comparison.improvements.length > 0) {
+            parts.push(`${comparison.improvements.length} improvement${comparison.improvements.length === 1 ? '' : 's'}`);
+        }
+        const prefix = passed ? 'Pattern health:' : 'Pattern regressions detected:';
+        return `${prefix} ${parts.join(', ')}`;
+    }
+    /**
+     * Build warnings for the result.
+     */
+    buildWarnings(comparison) {
+        const warnings = [];
+        // Warn about minor regressions
+        const minorRegressions = comparison.regressions.filter(r => r.severity === 'minor');
+        if (minorRegressions.length > 0) {
+            warnings.push(`${minorRegressions.length} minor regression${minorRegressions.length === 1 ? '' : 's'} detected (within threshold)`);
+        }
+        // Warn about overall health trend
+        if (comparison.overallHealthDelta < -5) {
+            warnings.push(`Overall pattern health trending down (${comparison.overallHealthDelta.toFixed(1)}pp)`);
+        }
+        return warnings;
+    }
+}
+//# sourceMappingURL=regression-detection-gate.js.map

package/dist/quality-gates/gates/regression-detection/regression-detection-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regression-detection-gate.js","sourceRoot":"","sources":["../../../../src/quality-gates/gates/regression-detection/regression-detection-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAe3C;;;;GAIG;AACH,MAAM,OAAO,uBAAwB,SAAQ,QAAQ;IAC1C,EAAE,GAAW,sBAAsB,CAAC;IACpC,IAAI,GAAG,sBAAsB,CAAC;IAC9B,WAAW,GAAG,2CAA2C,CAAC;IAEzD,KAAK,CAAC,WAAW,CAAC,KAAgB;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAmC,CAAC;QACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC9C,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAExD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,kBAAkB,CAC5B,+CAA+C,EAC/C;gBACE,WAAW,EAAE,EAAE;gBACf,YAAY,EAAE,EAAE;gBAChB,kBAAkB,EAAE,CAAC;gBACrB,cAAc,EAAE,EAAE;gBAClB,QAAQ,EAAE;oBACR,IAAI,EAAE,MAAM,CAAC,QAAQ;oBACrB,SAAS,EAAE,MAAM;oBACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC;aACoC,EACvC,CAAC,0FAA0F,CAAC,CAC7F,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAE5E,oCAAoC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAExE,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAE7F,MAAM,OAAO,GAA+B;YAC1C,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;YACjD,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,QAAQ,EAAE;gBACR,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,SAAS,EAAE,gBAAgB,CAAC,SAAS,IAAI,gBAAgB,CAAC,MAAM;gBAChE,SAAS,EAAE,gBAAgB,CAAC,SAAS;aACtC;SACF,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAEhD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,OAA6C,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtH,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,OAA6C,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM;YACN,MAAM;YACN,KAAK;YACL,OAAO;YACP,UAAU;YACV,QAAQ;YACR,eAAe,EAAE,CAAC;YAClB,OAAO,EAAE,OAA6C;SACvD,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,MAAkB;QAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAmC,CAAC;QAE9C,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,CAAC,iBAAiB,GAAG,GAAG,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,CAAC,iBAAiB,GAAG,GAAG,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,CAAC,wBAAwB,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;IAED,gBAAgB;QACd,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,IAAI;YACd,iBAAiB,EAAE,EAAE,EAAE,uBAAuB;YAC9C,iBAAiB,EAAE,EAAE,EAAE,uBAAuB;YAC9C,wBAAwB,EAAE,CAAC;YAC3B,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;YACxC,QAAQ,EAAE,aAAa;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,eAA0B,EAC1B,QAAwB,EACxB,MAAiC;QAOjC,MAAM,WAAW,GAAwB,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAyB,EAAE,CAAC;QAC9C,MAAM,cAAc,GAA2B,EAAE,CAAC;QAElD,iCAAiC;QACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAKvB,CAAC;QAEL,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,GAAG,CAAC;gBACjC,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,GAAG;gBACrD,CAAC,CAAC,GAAG,CAAC;YACR,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE;gBAC5B,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,UAAU;gBACV,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;aACtB,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,eAAe;gBAAE,SAAS,CAAC,gCAAgC;YAEhE,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC;YACtD,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC;YACxD,MAAM,iBAAiB,GAAG,gBAAgB,GAAG,CAAC;gBAC5C,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,gBAAgB,GAAG,eAAe,CAAC,CAAC,GAAG,GAAG;gBACjE,CAAC,CAAC,GAAG,CAAC;YAER,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;YACxF,MAAM,eAAe,GAAG,iBAAiB,GAAG,eAAe,CAAC,UAAU,CAAC;YACvE,MAAM,WAAW,GAAG,eAAe,GAAG,eAAe,CAAC,QAAQ,CAAC;YAE/D,wBAAwB;YACxB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvC,CAAC;YAED,uBAAuB;YACvB,IAAI,eAAe,GAAG,CAAC,MAAM,CAAC,iBAAiB;gBAC3C,eAAe,GAAG,CAAC,MAAM,CAAC,iBAAiB;gBAC3C,WAAW,GAAG,MAAM,CAAC,wBAAwB,EAAE,CAAC;gBAElD,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAC9C,eAAe,EACf,eAAe,EACf,WAAW,EACX,MAAM,CACP,CAAC;gBAEF,WAAW,CAAC,IAAI,CAAC;oBACf,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,kBAAkB,EAAE,eAAe,CAAC,UAAU,GAAG,GAAG;oBACpD,iBAAiB,EAAE,OAAO,CAAC,UAAU,GAAG,GAAG;oBAC3C,eAAe;oBACf,kBAAkB,EAAE,eAAe,CAAC,UAAU;oBAC9C,iBAAiB;oBACjB,eAAe;oBACf,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;oBACrC,QAAQ;iBACT,CAAC,CAAC;gBAEH,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAE,IAAI,eAAe,CAAC;YACvD,CAAC;YACD,wBAAwB;iBACnB,IAAI,eAAe,GAAG,CAAC,IAAI,eAAe,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACvE,YAAY,CAAC,IAAI,CAAC;oBAChB,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC;oBACnD,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC;oBACnD,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC;iBACzC,CAAC,CAAC;gBAEH,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAE,IAAI,eAAe,CAAC;YACvD,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;QAEtE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC;IAC3E,CAAC;IAED;;OAEG;IACK,0BAA0B,CAChC,eAAuB,EACvB,eAAuB,EACvB,WAAmB,EACnB,MAAiC;QAEjC,qCAAqC;QACrC,IAAI,eAAe,GAAG,CAAC,MAAM,CAAC,iBAAiB,GAAG,CAAC;YAC/C,eAAe,GAAG,CAAC,MAAM,CAAC,iBAAiB,GAAG,CAAC;YAC/C,WAAW,GAAG,MAAM,CAAC,wBAAwB,GAAG,CAAC,EAAE,CAAC;YACtD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,8BAA8B;QAC9B,IAAI,eAAe,GAAG,CAAC,MAAM,CAAC,iBAAiB;YAC3C,eAAe,GAAG,CAAC,MAAM,CAAC,iBAAiB;YAC3C,WAAW,GAAG,MAAM,CAAC,wBAAwB,EAAE,CAAC;YAClD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,cAAsC;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,UAIC,EACD,MAAiC;QAEjC,+BAA+B;QAC/B,MAAM,iBAAiB,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACtF,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAE/C,+CAA+C;QAC/C,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAChD,kDAAkD;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,MAAM,mBAAmB,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QAC1F,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAEjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,WAA8B;QAC9D,sEAAsE;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,WAAgC,EAChC,MAAiC;QAEjC,OAAO,WAAW;aACf,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC;YAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACvD,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,YAAY,CAAC,CAAC,WAAW,aAAa;YAC/C,WAAW,EAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC,EAAE,MAAM,CAAC;YACxD,MAAM,EAAE,CAAC,CAAC,SAAS;YACnB,YAAY,EAAE,yCAAyC,CAAC,CAAC,WAAW,kDAAkD;SACvH,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;OAEG;IACK,2BAA2B,CACjC,UAA6B,EAC7B,MAAiC;QAEjC,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,IAAI,UAAU,CAAC,eAAe,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrL,CAAC;QAED,IAAI,UAAU,CAAC,eAAe,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrL,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,wBAAwB,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,eAAe,UAAU,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC;QAC3G,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,UAItB;QACC,eAAe;QACf,IAAI,KAAK,GAAG,GAAG,CAAC;QAEhB,yBAAyB;QACzB,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YACvC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBAAE,KAAK,IAAI,EAAE,CAAC;oBAAC,MAAM;gBAClC,KAAK,UAAU;oBAAE,KAAK,IAAI,EAAE,CAAC;oBAAC,MAAM;gBACpC,KAAK,OAAO;oBAAE,KAAK,IAAI,CAAC,CAAC;oBAAC,MAAM;YAClC,CAAC;QACH,CAAC;QAED,+CAA+C;QAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC1E,KAAK,IAAI,gBAAgB,CAAC;QAE1B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACK,YAAY,CAClB,UAIC,EACD,MAAe;QAEf,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,6BAA6B,CAAC;QACvC,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;YAClF,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;YAEtF,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,qBAAqB,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,uBAAuB,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,MAAM,eAAe,UAAU,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAChH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,+BAA+B,CAAC;QAC5E,OAAO,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,UAIrB;QACC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,+BAA+B;QAC/B,MAAM,gBAAgB,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACpF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,oBAAoB,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,8BAA8B,CAAC,CAAC;QACtI,CAAC;QAED,kCAAkC;QAClC,IAAI,UAAU,CAAC,kBAAkB,GAAG,CAAC,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC,yCAAyC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxG,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/quality-gates/gates/security-boundary/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Security Boundary Gate
+ *
+ * @license Apache-2.0
+ */
+export { SecurityBoundaryGate } from './security-boundary-gate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/quality-gates/gates/security-boundary/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/quality-gates/gates/security-boundary/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/quality-gates/gates/security-boundary/index.js

@@ -0,0 +1,7 @@
+/**
+ * Security Boundary Gate
+ *
+ * @license Apache-2.0
+ */
+export { SecurityBoundaryGate } from './security-boundary-gate.js';
+//# sourceMappingURL=index.js.map

package/dist/quality-gates/gates/security-boundary/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/quality-gates/gates/security-boundary/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/quality-gates/gates/security-boundary/security-boundary-gate.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Security Boundary Gate
+ *
+ * @license Apache-2.0
+ *
+ * Enforces security boundaries by checking that sensitive data access
+ * has proper authorization in the call chain.
+ *
+ * FUTURE_GATE: gate:security-boundary (Enterprise tier)
+ */
+import { BaseGate } from '../base-gate.js';
+import type { GateId, GateInput, GateResult, GateConfig, SecurityBoundaryConfig } from '../../types.js';
+/**
+ * Security Boundary Gate
+ *
+ * Checks that sensitive data access has proper authorization.
+ */
+export declare class SecurityBoundaryGate extends BaseGate {
+    readonly id: GateId;
+    readonly name = "Security Boundary";
+    readonly description = "Enforces authorization for sensitive data access";
+    protected executeGate(input: GateInput): Promise<GateResult>;
+    validateConfig(config: GateConfig): {
+        valid: boolean;
+        errors: string[];
+    };
+    getDefaultConfig(): SecurityBoundaryConfig;
+    /**
+     * Analyze security boundaries in changed files.
+     */
+    private analyzeSecurityBoundaries;
+    /**
+     * Detect data access in a function (simplified).
+     */
+    private detectDataAccess;
+    /**
+     * Check if auth is in the call chain.
+     */
+    private hasAuthInCallChain;
+    /**
+     * Find the unauthorized path from entry point to function.
+     */
+    private findUnauthorizedPath;
+    /**
+     * Evaluate whether the gate passes based on thresholds.
+     */
+    private evaluateThresholds;
+    /**
+     * Build violations from unauthorized access.
+     */
+    private buildViolations;
+    /**
+     * Calculate score based on analysis.
+     */
+    private calculateScore;
+    /**
+     * Build human-readable summary.
+     */
+    private buildSummary;
+    /**
+     * Build warnings for the result.
+     */
+    private buildWarnings;
+}
+//# sourceMappingURL=security-boundary-gate.d.ts.map

package/dist/quality-gates/gates/security-boundary/security-boundary-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-boundary-gate.d.ts","sourceRoot":"","sources":["../../../../src/quality-gates/gates/security-boundary/security-boundary-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EACV,MAAM,EACN,SAAS,EACT,UAAU,EACV,UAAU,EACV,sBAAsB,EAMvB,MAAM,gBAAgB,CAAC;AAExB;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,QAAQ;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAuB;IAC1C,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,WAAW,sDAAsD;cAE1D,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IA8DlE,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE;IAWxE,gBAAgB,IAAI,sBAAsB;IAW1C;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAgGjC;;OAEG;IACH,OAAO,CAAC,gBAAgB;IASxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmC1B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA6B5B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAwB1B;;OAEG;IACH,OAAO,CAAC,eAAe;IAuCvB;;OAEG;IACH,OAAO,CAAC,cAAc;IActB;;OAEG;IACH,OAAO,CAAC,YAAY;IAoBpB;;OAEG;IACH,OAAO,CAAC,aAAa;CA2BtB"}