frontend-guardian-core 3.5.0 → 3.5.2

package/dist/utils/compliance.js

@@ -0,0 +1,266 @@
+"use strict";
+/**
+ * Compliance Report Generator -- v3.5.0
+ *
+ * Generates SOC2 / ISO27001 style code quality compliance reports.
+ * Maps scan results to specific compliance controls, outputs audit-friendly Markdown.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateComplianceReport = generateComplianceReport;
+exports.complianceReportToMarkdown = complianceReportToMarkdown;
+exports.saveComplianceReport = saveComplianceReport;
+exports.getComplianceMapping = getComplianceMapping;
+exports.registerComplianceMapping = registerComplianceMapping;
+/** Predefined rule-compliance mapping table */
+const DEFAULT_MAPPINGS = [
+    {
+        ruleId: "security-xss-vulnerable",
+        controls: [
+            { code: "SOC2-CC7.1", name: "System Operations Monitoring", standard: "SOC2", description: "Detect and log code defects that may affect system security" },
+            { code: "ISO27001-A.12.4", name: "Logging and Monitoring", standard: "ISO27001", description: "Ensure system activities are logged and monitored" },
+        ],
+        impact: "high",
+    },
+    {
+        ruleId: "security-eval-usage",
+        controls: [
+            { code: "SOC2-CC7.1", name: "System Operations Monitoring", standard: "SOC2", description: "Prohibit dangerous code execution methods" },
+            { code: "ISO27001-A.12.6", name: "Technical Vulnerability Management", standard: "ISO27001", description: "Timely fix known technical vulnerabilities" },
+        ],
+        impact: "high",
+    },
+    {
+        ruleId: "security-hardcoded-secret",
+        controls: [
+            { code: "SOC2-CC6.1", name: "Logical and Physical Access Controls", standard: "SOC2", description: "Credentials must not be hardcoded in source code" },
+            { code: "ISO27001-A.9.4.3", name: "Password Management", standard: "ISO27001", description: "Passwords must not be stored or hardcoded in plaintext" },
+        ],
+        impact: "high",
+    },
+    {
+        ruleId: "a11y-missing-alt",
+        controls: [
+            { code: "WCAG-2.1-1.1.1", name: "Non-text Content", standard: "WCAG", description: "All non-text content must have text alternatives" },
+            { code: "ISO27001-A.18.1", name: "Compliance", standard: "ISO27001", description: "Comply with applicable laws, regulations, and contractual requirements" },
+        ],
+        impact: "medium",
+    },
+    {
+        ruleId: "a11y-missing-label",
+        controls: [
+            { code: "WCAG-2.1-3.3.2", name: "Labels or Instructions", standard: "WCAG", description: "UI components must have clear labels" },
+        ],
+        impact: "medium",
+    },
+    {
+        ruleId: "a11y-clickable-no-keyboard",
+        controls: [
+            { code: "WCAG-2.1-2.1.1", name: "Keyboard", standard: "WCAG", description: "All functionality must be operable through a keyboard" },
+        ],
+        impact: "medium",
+    },
+    {
+        ruleId: "perf-large-bundle",
+        controls: [
+            { code: "INTERNAL-SLA-1", name: "Performance SLA", standard: "INTERNAL", description: "First screen load time must meet internal SLA requirements" },
+        ],
+        impact: "medium",
+    },
+    {
+        ruleId: "perf-usememo-missing",
+        controls: [
+            { code: "INTERNAL-SLA-1", name: "Performance SLA", standard: "INTERNAL", description: "Avoid unnecessary re-renders" },
+        ],
+        impact: "low",
+    },
+    {
+        ruleId: "i18n-hardcoded-chinese",
+        controls: [
+            { code: "INTERNAL-I18N-1", name: "Internationalization Compliance", standard: "INTERNAL", description: "All product copy must go through the i18n system" },
+        ],
+        impact: "medium",
+    },
+    {
+        ruleId: "i18n-missing-key",
+        controls: [
+            { code: "INTERNAL-I18N-1", name: "Internationalization Compliance", standard: "INTERNAL", description: "i18n keys must be fully defined" },
+        ],
+        impact: "medium",
+    },
+    {
+        ruleId: "cross-file-circular-dep",
+        controls: [
+            { code: "INTERNAL-ARCH-1", name: "Architecture Compliance", standard: "INTERNAL", description: "Modules must not have circular dependencies" },
+        ],
+        impact: "medium",
+    },
+];
+/** Generate compliance report */
+function generateComplianceReport(results, projectName, strategy = "standard", mappings = DEFAULT_MAPPINGS) {
+    const timestamp = new Date().toISOString();
+    const allIssues = results.flatMap((r) => [...r.issues.critical, ...r.issues.warning, ...r.issues.suggestion]);
+    const findingsMap = new Map();
+    const severityOrder = { critical: 3, warning: 2, suggestion: 1 };
+    for (const issue of allIssues) {
+        const mapping = mappings.find((m) => m.ruleId === issue.ruleId);
+        if (!mapping)
+            continue;
+        for (const control of mapping.controls) {
+            const key = control.code;
+            const existing = findingsMap.get(key);
+            if (existing) {
+                existing.issues.push(issue);
+                if (severityOrder[issue.severity] > severityOrder[existing.severity]) {
+                    existing.severity = issue.severity;
+                }
+            }
+            else {
+                findingsMap.set(key, {
+                    control,
+                    issues: [issue],
+                    severity: issue.severity,
+                });
+            }
+        }
+    }
+    const findings = Array.from(findingsMap.values()).sort((a, b) => severityOrder[b.severity] - severityOrder[a.severity]);
+    const criticalIssues = allIssues.filter((i) => i.severity === "critical").length;
+    const highImpactControls = findings.filter((f) => f.severity === "critical").length;
+    const scoreBase = criticalIssues * 10
+        + allIssues.filter((i) => i.severity === "warning").length * 3
+        + allIssues.filter((i) => i.severity === "suggestion").length;
+    const complianceScore = Math.max(0, Math.round(100 - scoreBase / Math.max(allIssues.length, 1) * 5));
+    const recommendations = findings.map((f) => {
+        const priority = f.severity === "critical" ? "immediate" : f.severity === "warning" ? "short-term" : "long-term";
+        const ruleIds = [...new Set(f.issues.map((i) => i.ruleId))].join(", ");
+        return {
+            control: f.control,
+            priority,
+            action: `Fix ${f.issues.length} issues related to "${f.control.name}", rules: ${ruleIds}`,
+            estimatedEffort: f.issues.length <= 3 ? "1-2 days" : f.issues.length <= 10 ? "3-5 days" : "1-2 weeks",
+        };
+    });
+    return {
+        timestamp,
+        project: projectName,
+        strategy,
+        summary: {
+            totalIssues: allIssues.length,
+            criticalIssues,
+            highImpactControls,
+            complianceScore,
+        },
+        findings,
+        recommendations,
+    };
+}
+/** Convert compliance report to Markdown */
+function complianceReportToMarkdown(report) {
+    const lines = [];
+    lines.push("# Code Quality Compliance Report");
+    lines.push("");
+    lines.push(`**Project**: ${report.project}`);
+    lines.push(`**Generated**: ${report.timestamp}`);
+    lines.push(`**Strategy**: ${report.strategy}`);
+    lines.push("");
+    // Executive summary
+    lines.push("## Executive Summary");
+    lines.push("");
+    lines.push("| Metric | Value |");
+    lines.push("|--------|-------|");
+    lines.push(`| Total Issues | ${report.summary.totalIssues} |`);
+    lines.push(`| Critical | ${report.summary.criticalIssues} |`);
+    lines.push(`| High Impact Controls | ${report.summary.highImpactControls} |`);
+    lines.push(`| Compliance Score | ${report.summary.complianceScore}/100 |`);
+    lines.push("");
+    if (report.summary.complianceScore >= 90) {
+        lines.push("> PASS - Excellent: Code quality meets enterprise compliance requirements.");
+    }
+    else if (report.summary.complianceScore >= 70) {
+        lines.push("> WARNING - Good: Some improvements recommended, address warning issues in the short term.");
+    }
+    else if (report.summary.complianceScore >= 50) {
+        lines.push("> NEEDS IMPROVEMENT - Multiple non-compliances found, remediation plan recommended.");
+    }
+    else {
+        lines.push("> FAIL - Serious compliance risks detected, immediate remediation required.");
+    }
+    lines.push("");
+    // Findings
+    if (report.findings.length > 0) {
+        lines.push("## Non-Compliance Findings");
+        lines.push("");
+        for (const finding of report.findings) {
+            const icon = finding.severity === "critical" ? "🔴" : finding.severity === "warning" ? "🟡" : "💡";
+            lines.push(`### ${icon} ${finding.control.code} -- ${finding.control.name}`);
+            lines.push("");
+            lines.push(`- **Standard**: ${finding.control.standard}`);
+            lines.push(`- **Description**: ${finding.control.description}`);
+            lines.push(`- **Severity**: ${finding.severity}`);
+            lines.push(`- **Issues**: ${finding.issues.length}`);
+            lines.push("");
+            const topIssues = finding.issues.slice(0, 5);
+            for (const issue of topIssues) {
+                lines.push(`  - \`${issue.file}:${issue.line}\` -- ${issue.title}`);
+            }
+            if (finding.issues.length > 5) {
+                lines.push(`  - ... ${finding.issues.length - 5} more`);
+            }
+            lines.push("");
+        }
+    }
+    else {
+        lines.push("## Non-Compliance Findings");
+        lines.push("");
+        lines.push("No compliance-related issues found.");
+        lines.push("");
+    }
+    // Recommendations
+    if (report.recommendations.length > 0) {
+        lines.push("## Remediation Recommendations");
+        lines.push("");
+        lines.push("| Priority | Control | Action | Est. Effort |");
+        lines.push("|----------|---------|--------|-------------|");
+        const priorityIcon = { immediate: "🔴", "short-term": "🟡", "long-term": "💡" };
+        for (const rec of report.recommendations) {
+            lines.push(`| ${priorityIcon[rec.priority]} ${rec.priority} | ${rec.control.code} | ${rec.action} | ${rec.estimatedEffort} |`);
+        }
+        lines.push("");
+    }
+    // Control mapping reference
+    lines.push("## Control Mapping Reference");
+    lines.push("");
+    lines.push("| Standard | Control | Name |");
+    lines.push("|----------|---------|------|");
+    const seenControls = new Set();
+    for (const finding of report.findings) {
+        if (!seenControls.has(finding.control.code)) {
+            seenControls.add(finding.control.code);
+            lines.push(`| ${finding.control.standard} | ${finding.control.code} | ${finding.control.name} |`);
+        }
+    }
+    lines.push("");
+    lines.push("---");
+    lines.push("*Generated by frontend-guardian*");
+    return lines.join("\n");
+}
+/** Save compliance report to file */
+function saveComplianceReport(report, outputPath) {
+    const { writeFileSync } = require("node:fs");
+    writeFileSync(outputPath, complianceReportToMarkdown(report), "utf-8");
+}
+/** Get compliance mapping for a rule (for extensions) */
+function getComplianceMapping(ruleId) {
+    return DEFAULT_MAPPINGS.find((m) => m.ruleId === ruleId);
+}
+/** Register custom compliance mapping */
+function registerComplianceMapping(mapping) {
+    const existing = DEFAULT_MAPPINGS.findIndex((m) => m.ruleId === mapping.ruleId);
+    if (existing >= 0) {
+        DEFAULT_MAPPINGS[existing] = mapping;
+    }
+    else {
+        DEFAULT_MAPPINGS.push(mapping);
+    }
+}
+//# sourceMappingURL=compliance.js.map

package/dist/utils/compliance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.js","sourceRoot":"","sources":["../../src/utils/compliance.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAuIH,4DAuEC;AAGD,gEAkGC;AAGD,oDAGC;AAGD,oDAEC;AAGD,8DAOC;AArTD,+CAA+C;AAC/C,MAAM,gBAAgB,GAA4B;IAC9C;QACI,MAAM,EAAE,yBAAyB;QACjC,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,8BAA8B,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,6DAA6D,EAAE;YAC1J,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,mDAAmD,EAAE;SACtJ;QACD,MAAM,EAAE,MAAM;KACjB;IACD;QACI,MAAM,EAAE,qBAAqB;QAC7B,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,8BAA8B,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,2CAA2C,EAAE;YACxI,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,oCAAoC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,4CAA4C,EAAE;SAC3J;QACD,MAAM,EAAE,MAAM;KACjB;IACD;QACI,MAAM,EAAE,2BAA2B;QACnC,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,sCAAsC,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,kDAAkD,EAAE;YACvJ,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,wDAAwD,EAAE;SACzJ;QACD,MAAM,EAAE,MAAM;KACjB;IACD;QACI,MAAM,EAAE,kBAAkB;QAC1B,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,kDAAkD,EAAE;YACvI,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,wEAAwE,EAAE;SAC/J;QACD,MAAM,EAAE,QAAQ;KACnB;IACD;QACI,MAAM,EAAE,oBAAoB;QAC5B,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,sCAAsC,EAAE;SACpI;QACD,MAAM,EAAE,QAAQ;KACnB;IACD;QACI,MAAM,EAAE,4BAA4B;QACpC,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,uDAAuD,EAAE;SACvI;QACD,MAAM,EAAE,QAAQ;KACnB;IACD;QACI,MAAM,EAAE,mBAAmB;QAC3B,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,4DAA4D,EAAE;SACvJ;QACD,MAAM,EAAE,QAAQ;KACnB;IACD;QACI,MAAM,EAAE,sBAAsB;QAC9B,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,8BAA8B,EAAE;SACzH;QACD,MAAM,EAAE,KAAK;KAChB;IACD;QACI,MAAM,EAAE,wBAAwB;QAChC,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,iCAAiC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,kDAAkD,EAAE;SAC9J;QACD,MAAM,EAAE,QAAQ;KACnB;IACD;QACI,MAAM,EAAE,kBAAkB;QAC1B,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,iCAAiC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,iCAAiC,EAAE;SAC7I;QACD,MAAM,EAAE,QAAQ;KACnB;IACD;QACI,MAAM,EAAE,yBAAyB;QACjC,QAAQ,EAAE;YACN,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,6CAA6C,EAAE;SACjJ;QACD,MAAM,EAAE,QAAQ;KACnB;CACJ,CAAC;AAgCF,iCAAiC;AACjC,SAAgB,wBAAwB,CACpC,OAAqB,EACrB,WAAmB,EACnB,QAAQ,GAAG,UAAU,EACrB,QAAQ,GAAG,gBAAgB;IAE3B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAE9G,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,MAAM,aAAa,GAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAE3F,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;YACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,QAAQ,EAAE,CAAC;gBACX,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACnE,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACvC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE;oBACjB,OAAO;oBACP,MAAM,EAAE,CAAC,KAAK,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YACP,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAClE,CAAC;IAEF,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IACjF,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAEpF,MAAM,SAAS,GAAG,cAAc,GAAG,EAAE;UAC/B,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;UAC5D,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAErG,MAAM,eAAe,GAA+B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnE,MAAM,QAAQ,GACV,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;QACpG,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,OAAO;YACH,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ;YACR,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,uBAAuB,CAAC,CAAC,OAAO,CAAC,IAAI,aAAa,OAAO,EAAE;YACzF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;SACxG,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,OAAO;QACH,SAAS;QACT,OAAO,EAAE,WAAW;QACpB,QAAQ;QACR,OAAO,EAAE;YACL,WAAW,EAAE,SAAS,CAAC,MAAM;YAC7B,cAAc;YACd,kBAAkB;YAClB,eAAe;SAClB;QACD,QAAQ;QACR,eAAe;KAClB,CAAC;AACN,CAAC;AAED,4CAA4C;AAC5C,SAAgB,0BAA0B,CAAC,MAAwB;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC9E,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,OAAO,CAAC,eAAe,QAAQ,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAC7F,CAAC;SAAM,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC;IAC7G,CAAC;SAAM,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IACtG,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC9F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,WAAW;IACX,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACnG,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEf,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5D,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAE5D,MAAM,YAAY,GAA2B,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACxG,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CACN,KAAK,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,eAAe,IAAI,CACrH,CAAC;QACN,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,4BAA4B;IAC5B,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAE5C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QACtG,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAE/C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,qCAAqC;AACrC,SAAgB,oBAAoB,CAAC,MAAwB,EAAE,UAAkB;IAC7E,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,yDAAyD;AACzD,SAAgB,oBAAoB,CAAC,MAAc;IAC/C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,yCAAyC;AACzC,SAAgB,yBAAyB,CAAC,OAA8B;IACpE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChF,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAChB,gBAAgB,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;IACzC,CAAC;SAAM,CAAC;QACJ,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;AACL,CAAC"}

package/dist/utils/dashboard-client.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Dashboard Client
+ *
+ * Uploads scan results to a governance dashboard server.
+ *
+ * v3.5.2: CLI-side reporter for the central dashboard.
+ */
+import type { ScanResult, Issue } from "../types.js";
+/** Dashboard upload configuration */
+export interface DashboardClientConfig {
+    /** Dashboard server URL (e.g. http://localhost:3456) */
+    serverUrl: string;
+    /** Optional auth token */
+    authToken?: string;
+}
+/** Upload result */
+export interface DashboardUploadResult {
+    success: boolean;
+    reportId?: string;
+    projectId?: string;
+    error?: string;
+}
+/** Report payload sent to the server */
+export interface DashboardReportPayload {
+    projectName: string;
+    projectPath: string;
+    module: string;
+    result: ScanResult;
+    issues: Issue[];
+    git?: {
+        commit?: string;
+        branch?: string;
+    };
+    meta?: {
+        strategy?: string;
+        duration?: number;
+        filesScanned?: number;
+    };
+}
+/**
+ * Upload a scan report to the dashboard server.
+ *
+ * @param payload Report data
+ * @param config Server configuration
+ * @returns Upload result
+ */
+export declare function uploadToDashboardServer(payload: DashboardReportPayload, config: DashboardClientConfig): Promise<DashboardUploadResult>;
+/**
+ * Detect dashboard server config from environment variables.
+ *
+ * Environment variables:
+ * - FG_DASHBOARD_SERVER: server URL
+ * - FG_DASHBOARD_TOKEN: optional auth token
+ *
+ * @returns Config if FG_DASHBOARD_SERVER is set, null otherwise
+ */
+export declare function detectDashboardConfig(): DashboardClientConfig | null;
+//# sourceMappingURL=dashboard-client.d.ts.map

package/dist/utils/dashboard-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-client.d.ts","sourceRoot":"","sources":["../../src/utils/dashboard-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEpD,qCAAqC;AACrC,MAAM,WAAW,qBAAqB;IAClC,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,oBAAoB;AACpB,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wCAAwC;AACxC,MAAM,WAAW,sBAAsB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1E;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,sBAAsB,EAC/B,MAAM,EAAE,qBAAqB,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,qBAAqB,GAAG,IAAI,CAQpE"}

package/dist/utils/dashboard-client.js

@@ -0,0 +1,72 @@
+"use strict";
+/**
+ * Dashboard Client
+ *
+ * Uploads scan results to a governance dashboard server.
+ *
+ * v3.5.2: CLI-side reporter for the central dashboard.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uploadToDashboardServer = uploadToDashboardServer;
+exports.detectDashboardConfig = detectDashboardConfig;
+/**
+ * Upload a scan report to the dashboard server.
+ *
+ * @param payload Report data
+ * @param config Server configuration
+ * @returns Upload result
+ */
+async function uploadToDashboardServer(payload, config) {
+    const url = config.serverUrl.replace(/\/$/, "") + "/api/reports";
+    const headers = {
+        "Content-Type": "application/json",
+    };
+    if (config.authToken) {
+        headers["Authorization"] = `Bearer ${config.authToken}`;
+    }
+    try {
+        const response = await fetch(url, {
+            method: "POST",
+            headers,
+            body: JSON.stringify(payload),
+        });
+        if (!response.ok) {
+            const text = await response.text().catch(() => "Unknown error");
+            return {
+                success: false,
+                error: `HTTP ${response.status}: ${text}`,
+            };
+        }
+        const data = (await response.json());
+        return {
+            success: data.success ?? true,
+            reportId: data.reportId,
+            projectId: data.projectId,
+        };
+    }
+    catch (err) {
+        return {
+            success: false,
+            error: String(err),
+        };
+    }
+}
+/**
+ * Detect dashboard server config from environment variables.
+ *
+ * Environment variables:
+ * - FG_DASHBOARD_SERVER: server URL
+ * - FG_DASHBOARD_TOKEN: optional auth token
+ *
+ * @returns Config if FG_DASHBOARD_SERVER is set, null otherwise
+ */
+function detectDashboardConfig() {
+    const serverUrl = process.env.FG_DASHBOARD_SERVER;
+    if (!serverUrl)
+        return null;
+    return {
+        serverUrl,
+        authToken: process.env.FG_DASHBOARD_TOKEN,
+    };
+}
+//# sourceMappingURL=dashboard-client.js.map

package/dist/utils/dashboard-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-client.js","sourceRoot":"","sources":["../../src/utils/dashboard-client.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAsCH,0DA8CC;AAWD,sDAQC;AAxED;;;;;;GAMG;AACI,KAAK,UAAU,uBAAuB,CACzC,OAA+B,EAC/B,MAA6B;IAE7B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC;IAEjE,MAAM,OAAO,GAA2B;QACpC,cAAc,EAAE,kBAAkB;KACrC,CAAC;IACF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,SAAS,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;YAChE,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE;aAC5C,CAAC;QACN,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKlC,CAAC;QAEF,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC5B,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO;YACH,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SACrB,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB;IACjC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAClD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,OAAO;QACH,SAAS;QACT,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;KAC5C,CAAC;AACN,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "frontend-guardian-core",
-    "version": "3.5.0",
+    "version": "3.5.2",
     "description": "Core analysis engine for frontend-guardian — AST-based scanning and auto-fixing",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",
@@ -13,7 +13,8 @@
     },
     "bin": {
         "fg-core": "bin/fg-core.js",
-        "fg-lsp": "bin/fg-lsp.js"
+        "fg-lsp": "bin/fg-lsp.js",
+        "fg-server": "bin/fg-server.js"
     },
     "files": [
         "dist",