guardrail-cli 1.0.6 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (144) hide show
  1. package/README.md +483 -10
  2. package/dist/commands/baseline.d.ts +7 -0
  3. package/dist/commands/baseline.d.ts.map +1 -0
  4. package/dist/commands/baseline.js +79 -0
  5. package/dist/commands/baseline.js.map +1 -0
  6. package/dist/commands/cache.d.ts +13 -0
  7. package/dist/commands/cache.d.ts.map +1 -0
  8. package/dist/commands/cache.js +165 -0
  9. package/dist/commands/cache.js.map +1 -0
  10. package/dist/commands/evidence.d.ts +45 -0
  11. package/dist/commands/evidence.d.ts.map +1 -0
  12. package/dist/commands/evidence.js +197 -0
  13. package/dist/commands/evidence.js.map +1 -0
  14. package/dist/commands/index.d.ts +8 -0
  15. package/dist/commands/index.d.ts.map +1 -0
  16. package/dist/commands/index.js +15 -0
  17. package/dist/commands/index.js.map +1 -0
  18. package/dist/commands/scan-secrets.d.ts +47 -0
  19. package/dist/commands/scan-secrets.d.ts.map +1 -0
  20. package/dist/commands/scan-secrets.js +225 -0
  21. package/dist/commands/scan-secrets.js.map +1 -0
  22. package/dist/commands/scan-vulnerabilities-enhanced.d.ts +41 -0
  23. package/dist/commands/scan-vulnerabilities-enhanced.d.ts.map +1 -0
  24. package/dist/commands/scan-vulnerabilities-enhanced.js +368 -0
  25. package/dist/commands/scan-vulnerabilities-enhanced.js.map +1 -0
  26. package/dist/commands/scan-vulnerabilities-osv.d.ts +58 -0
  27. package/dist/commands/scan-vulnerabilities-osv.d.ts.map +1 -0
  28. package/dist/commands/scan-vulnerabilities-osv.js +716 -0
  29. package/dist/commands/scan-vulnerabilities-osv.js.map +1 -0
  30. package/dist/commands/scan-vulnerabilities.d.ts +32 -0
  31. package/dist/commands/scan-vulnerabilities.d.ts.map +1 -0
  32. package/dist/commands/scan-vulnerabilities.js +283 -0
  33. package/dist/commands/scan-vulnerabilities.js.map +1 -0
  34. package/dist/commands/secrets-allowlist.d.ts +7 -0
  35. package/dist/commands/secrets-allowlist.d.ts.map +1 -0
  36. package/dist/commands/secrets-allowlist.js +85 -0
  37. package/dist/commands/secrets-allowlist.js.map +1 -0
  38. package/dist/fix/applicator.d.ts +44 -0
  39. package/dist/fix/applicator.d.ts.map +1 -0
  40. package/dist/fix/applicator.js +144 -0
  41. package/dist/fix/applicator.js.map +1 -0
  42. package/dist/fix/backup.d.ts +38 -0
  43. package/dist/fix/backup.d.ts.map +1 -0
  44. package/dist/fix/backup.js +154 -0
  45. package/dist/fix/backup.js.map +1 -0
  46. package/dist/fix/engine.d.ts +55 -0
  47. package/dist/fix/engine.d.ts.map +1 -0
  48. package/dist/fix/engine.js +285 -0
  49. package/dist/fix/engine.js.map +1 -0
  50. package/dist/fix/index.d.ts +5 -0
  51. package/dist/fix/index.d.ts.map +1 -0
  52. package/dist/fix/index.js +12 -0
  53. package/dist/fix/index.js.map +1 -0
  54. package/dist/fix/interactive.d.ts +22 -0
  55. package/dist/fix/interactive.d.ts.map +1 -0
  56. package/dist/fix/interactive.js +172 -0
  57. package/dist/fix/interactive.js.map +1 -0
  58. package/dist/formatters/index.d.ts +6 -0
  59. package/dist/formatters/index.d.ts.map +1 -0
  60. package/dist/formatters/index.js +11 -0
  61. package/dist/formatters/index.js.map +1 -0
  62. package/dist/formatters/sarif-enhanced.d.ts +78 -0
  63. package/dist/formatters/sarif-enhanced.d.ts.map +1 -0
  64. package/dist/formatters/sarif-enhanced.js +144 -0
  65. package/dist/formatters/sarif-enhanced.js.map +1 -0
  66. package/dist/formatters/sarif-v2.d.ts +121 -0
  67. package/dist/formatters/sarif-v2.d.ts.map +1 -0
  68. package/dist/formatters/sarif-v2.js +356 -0
  69. package/dist/formatters/sarif-v2.js.map +1 -0
  70. package/dist/formatters/sarif.d.ts +72 -0
  71. package/dist/formatters/sarif.d.ts.map +1 -0
  72. package/dist/formatters/sarif.js +146 -0
  73. package/dist/formatters/sarif.js.map +1 -0
  74. package/dist/index.js +3362 -1397
  75. package/dist/index.js.map +1 -1
  76. package/dist/init/ci-generator.d.ts +18 -0
  77. package/dist/init/ci-generator.d.ts.map +1 -0
  78. package/dist/init/ci-generator.js +251 -0
  79. package/dist/init/ci-generator.js.map +1 -0
  80. package/dist/init/detect-framework.d.ts +15 -0
  81. package/dist/init/detect-framework.d.ts.map +1 -0
  82. package/dist/init/detect-framework.js +299 -0
  83. package/dist/init/detect-framework.js.map +1 -0
  84. package/dist/init/hooks-installer.d.ts +22 -0
  85. package/dist/init/hooks-installer.d.ts.map +1 -0
  86. package/dist/init/hooks-installer.js +302 -0
  87. package/dist/init/hooks-installer.js.map +1 -0
  88. package/dist/init/index.d.ts +8 -0
  89. package/dist/init/index.d.ts.map +1 -0
  90. package/dist/init/index.js +22 -0
  91. package/dist/init/index.js.map +1 -0
  92. package/dist/init/templates.d.ts +401 -0
  93. package/dist/init/templates.d.ts.map +1 -0
  94. package/dist/init/templates.js +240 -0
  95. package/dist/init/templates.js.map +1 -0
  96. package/dist/reality/reality-runner.d.ts +76 -0
  97. package/dist/reality/reality-runner.d.ts.map +1 -0
  98. package/dist/reality/reality-runner.js +454 -0
  99. package/dist/reality/reality-runner.js.map +1 -0
  100. package/dist/runtime/auth-utils.d.ts +43 -0
  101. package/dist/runtime/auth-utils.d.ts.map +1 -0
  102. package/dist/runtime/auth-utils.js +126 -0
  103. package/dist/runtime/auth-utils.js.map +1 -0
  104. package/dist/runtime/client.d.ts +74 -0
  105. package/dist/runtime/client.d.ts.map +1 -0
  106. package/dist/runtime/client.js +222 -0
  107. package/dist/runtime/client.js.map +1 -0
  108. package/dist/runtime/creds.d.ts +48 -0
  109. package/dist/runtime/creds.d.ts.map +1 -0
  110. package/dist/runtime/creds.js +245 -0
  111. package/dist/runtime/creds.js.map +1 -0
  112. package/dist/runtime/exit-codes.d.ts +47 -0
  113. package/dist/runtime/exit-codes.d.ts.map +1 -0
  114. package/dist/runtime/exit-codes.js +91 -0
  115. package/dist/runtime/exit-codes.js.map +1 -0
  116. package/dist/runtime/index.d.ts +9 -0
  117. package/dist/runtime/index.d.ts.map +1 -0
  118. package/dist/runtime/index.js +25 -0
  119. package/dist/runtime/index.js.map +1 -0
  120. package/dist/runtime/semver.d.ts +37 -0
  121. package/dist/runtime/semver.d.ts.map +1 -0
  122. package/dist/runtime/semver.js +110 -0
  123. package/dist/runtime/semver.js.map +1 -0
  124. package/dist/scanner/baseline.d.ts +52 -0
  125. package/dist/scanner/baseline.d.ts.map +1 -0
  126. package/dist/scanner/baseline.js +85 -0
  127. package/dist/scanner/baseline.js.map +1 -0
  128. package/dist/scanner/incremental.d.ts +30 -0
  129. package/dist/scanner/incremental.d.ts.map +1 -0
  130. package/dist/scanner/incremental.js +82 -0
  131. package/dist/scanner/incremental.js.map +1 -0
  132. package/dist/scanner/parallel.d.ts +43 -0
  133. package/dist/scanner/parallel.d.ts.map +1 -0
  134. package/dist/scanner/parallel.js +99 -0
  135. package/dist/scanner/parallel.js.map +1 -0
  136. package/dist/ui/frame.d.ts +68 -0
  137. package/dist/ui/frame.d.ts.map +1 -0
  138. package/dist/ui/frame.js +165 -0
  139. package/dist/ui/frame.js.map +1 -0
  140. package/dist/ui/index.d.ts +5 -0
  141. package/dist/ui/index.d.ts.map +1 -0
  142. package/dist/ui/index.js +16 -0
  143. package/dist/ui/index.js.map +1 -0
  144. package/package.json +42 -9
@@ -0,0 +1,144 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.FixApplicator = void 0;
4
+ const fs_1 = require("fs");
5
+ const path_1 = require("path");
6
+ class FixApplicator {
7
+ constructor(projectPath) {
8
+ this.projectPath = projectPath;
9
+ }
10
+ /**
11
+ * Apply fixes from selected packs
12
+ */
13
+ async applyPacks(packs) {
14
+ let appliedFixes = 0;
15
+ let failedFixes = 0;
16
+ const errors = [];
17
+ for (const pack of packs) {
18
+ for (const fix of pack.fixes) {
19
+ try {
20
+ await this.applyFix(fix);
21
+ appliedFixes++;
22
+ }
23
+ catch (error) {
24
+ failedFixes++;
25
+ errors.push({
26
+ fix,
27
+ error: error.message || 'Unknown error',
28
+ });
29
+ }
30
+ }
31
+ }
32
+ return {
33
+ success: failedFixes === 0,
34
+ appliedFixes,
35
+ failedFixes,
36
+ errors,
37
+ };
38
+ }
39
+ /**
40
+ * Apply a single fix
41
+ */
42
+ async applyFix(fix) {
43
+ const filePath = (0, path_1.join)(this.projectPath, fix.file);
44
+ const content = (0, fs_1.readFileSync)(filePath, 'utf-8');
45
+ const lines = content.split('\n');
46
+ if (fix.line <= 0 || fix.line > lines.length) {
47
+ throw new Error(`Invalid line number: ${fix.line}`);
48
+ }
49
+ // Verify the old code matches
50
+ const actualLine = lines[fix.line - 1];
51
+ if (actualLine.trim() !== fix.oldCode.trim()) {
52
+ throw new Error(`Line mismatch at ${fix.file}:${fix.line}. Expected: "${fix.oldCode.trim()}", Found: "${actualLine.trim()}"`);
53
+ }
54
+ // Apply the fix
55
+ lines[fix.line - 1] = fix.newCode;
56
+ // Write back to file
57
+ (0, fs_1.writeFileSync)(filePath, lines.join('\n'), 'utf-8');
58
+ }
59
+ /**
60
+ * Verify project after applying fixes
61
+ */
62
+ async verify() {
63
+ const typecheck = await this.runTypecheck();
64
+ const build = await this.runBuild();
65
+ return {
66
+ passed: typecheck.passed && build.passed,
67
+ typecheck,
68
+ build,
69
+ };
70
+ }
71
+ async runTypecheck() {
72
+ try {
73
+ const { execSync } = require('child_process');
74
+ const output = execSync('tsc --noEmit', {
75
+ cwd: this.projectPath,
76
+ encoding: 'utf-8',
77
+ stdio: 'pipe',
78
+ });
79
+ return {
80
+ passed: true,
81
+ output: output || 'Type check passed',
82
+ };
83
+ }
84
+ catch (error) {
85
+ return {
86
+ passed: false,
87
+ output: error.stdout || error.message || 'Type check failed',
88
+ };
89
+ }
90
+ }
91
+ async runBuild() {
92
+ try {
93
+ const { execSync } = require('child_process');
94
+ const output = execSync('npm run build --if-present', {
95
+ cwd: this.projectPath,
96
+ encoding: 'utf-8',
97
+ stdio: 'pipe',
98
+ timeout: 60000, // 60 second timeout
99
+ });
100
+ return {
101
+ passed: true,
102
+ output: output || 'Build passed',
103
+ };
104
+ }
105
+ catch (error) {
106
+ // Build script might not exist, which is okay
107
+ if (error.message?.includes('missing script')) {
108
+ return {
109
+ passed: true,
110
+ output: 'No build script found (skipped)',
111
+ };
112
+ }
113
+ return {
114
+ passed: false,
115
+ output: error.stdout || error.message || 'Build failed',
116
+ };
117
+ }
118
+ }
119
+ /**
120
+ * Generate unified diff for preview
121
+ */
122
+ generateDiff(packs) {
123
+ const lines = [];
124
+ for (const pack of packs) {
125
+ lines.push(`# Fix Pack: ${pack.name}`);
126
+ lines.push(`# Category: ${pack.category}`);
127
+ lines.push(`# Risk: ${pack.estimatedRisk}`);
128
+ lines.push(`# Confidence: ${(pack.confidence * 100).toFixed(0)}%`);
129
+ lines.push('');
130
+ for (const fix of pack.fixes) {
131
+ lines.push(`--- a/${fix.file}`);
132
+ lines.push(`+++ b/${fix.file}`);
133
+ lines.push(`@@ -${fix.line},1 +${fix.line},1 @@`);
134
+ lines.push(`-${fix.oldCode}`);
135
+ lines.push(`+${fix.newCode}`);
136
+ lines.push(`# ${fix.explanation}`);
137
+ lines.push('');
138
+ }
139
+ }
140
+ return lines.join('\n');
141
+ }
142
+ }
143
+ exports.FixApplicator = FixApplicator;
144
+ //# sourceMappingURL=applicator.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"applicator.js","sourceRoot":"","sources":["../../src/fix/applicator.ts"],"names":[],"mappings":";;;AAAA,2BAAiD;AACjD,+BAA4B;AAgB5B,MAAa,aAAa;IAGxB,YAAY,WAAmB;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,KAAgB;QAC/B,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,MAAM,GAAuC,EAAE,CAAC;QAEtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACzB,YAAY,EAAE,CAAC;gBACjB,CAAC;gBAAC,OAAO,KAAU,EAAE,CAAC;oBACpB,WAAW,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,CAAC;wBACV,GAAG;wBACH,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,eAAe;qBACxC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,WAAW,KAAK,CAAC;YAC1B,YAAY;YACZ,WAAW;YACX,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,QAAQ,CAAC,GAAQ;QAC7B,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,oBAAoB,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,gBAAgB,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,UAAU,CAAC,IAAI,EAAE,GAAG,CAC7G,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;QAElC,qBAAqB;QACrB,IAAA,kBAAa,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEpC,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;YACxC,SAAS;YACT,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,EAAE;gBACtC,GAAG,EAAE,IAAI,CAAC,WAAW;gBACrB,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YAEH,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,IAAI,mBAAmB;aACtC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,mBAAmB;aAC7D,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,4BAA4B,EAAE;gBACpD,GAAG,EAAE,IAAI,CAAC,WAAW;gBACrB,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,KAAK,EAAE,oBAAoB;aACrC,CAAC,CAAC;YAEH,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,IAAI,cAAc;aACjC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,8CAA8C;YAC9C,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC9C,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,iCAAiC;iBAC1C,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,cAAc;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAgB;QAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;gBAClD,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AA5JD,sCA4JC"}
@@ -0,0 +1,38 @@
1
+ export interface BackupMetadata {
2
+ runId: string;
3
+ timestamp: string;
4
+ projectPath: string;
5
+ files: string[];
6
+ packs: string[];
7
+ }
8
+ export declare class BackupManager {
9
+ private projectPath;
10
+ private backupRoot;
11
+ constructor(projectPath: string);
12
+ /**
13
+ * Create a backup before applying fixes
14
+ */
15
+ createBackup(runId: string, files: string[], packs: string[]): Promise<void>;
16
+ /**
17
+ * Rollback to a previous backup
18
+ */
19
+ rollback(runId: string): Promise<{
20
+ success: boolean;
21
+ restoredFiles: string[];
22
+ error?: string;
23
+ }>;
24
+ /**
25
+ * List all available backups
26
+ */
27
+ listBackups(): BackupMetadata[];
28
+ /**
29
+ * Delete a backup
30
+ */
31
+ deleteBackup(runId: string): boolean;
32
+ /**
33
+ * Get backup size
34
+ */
35
+ getBackupSize(runId: string): number;
36
+ private calculateDirSize;
37
+ }
38
+ //# sourceMappingURL=backup.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/fix/backup.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,UAAU,CAAS;gBAEf,WAAW,EAAE,MAAM;IAK/B;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAqClF;;OAEG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA8CrG;;OAEG;IACH,WAAW,IAAI,cAAc,EAAE;IA2B/B;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAepC;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAUpC,OAAO,CAAC,gBAAgB;CAsBzB"}
@@ -0,0 +1,154 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.BackupManager = void 0;
4
+ const fs_1 = require("fs");
5
+ const path_1 = require("path");
6
+ class BackupManager {
7
+ constructor(projectPath) {
8
+ this.projectPath = projectPath;
9
+ this.backupRoot = (0, path_1.join)(projectPath, '.guardrail', 'backups');
10
+ }
11
+ /**
12
+ * Create a backup before applying fixes
13
+ */
14
+ async createBackup(runId, files, packs) {
15
+ const backupDir = (0, path_1.join)(this.backupRoot, runId);
16
+ if (!(0, fs_1.existsSync)(backupDir)) {
17
+ (0, fs_1.mkdirSync)(backupDir, { recursive: true });
18
+ }
19
+ // Copy each file to backup directory
20
+ for (const file of files) {
21
+ const sourcePath = (0, path_1.join)(this.projectPath, file);
22
+ const targetPath = (0, path_1.join)(backupDir, file);
23
+ if ((0, fs_1.existsSync)(sourcePath)) {
24
+ const targetDir = (0, path_1.dirname)(targetPath);
25
+ if (!(0, fs_1.existsSync)(targetDir)) {
26
+ (0, fs_1.mkdirSync)(targetDir, { recursive: true });
27
+ }
28
+ (0, fs_1.copyFileSync)(sourcePath, targetPath);
29
+ }
30
+ }
31
+ // Save metadata
32
+ const metadata = {
33
+ runId,
34
+ timestamp: new Date().toISOString(),
35
+ projectPath: this.projectPath,
36
+ files,
37
+ packs,
38
+ };
39
+ (0, fs_1.writeFileSync)((0, path_1.join)(backupDir, 'metadata.json'), JSON.stringify(metadata, null, 2));
40
+ }
41
+ /**
42
+ * Rollback to a previous backup
43
+ */
44
+ async rollback(runId) {
45
+ const backupDir = (0, path_1.join)(this.backupRoot, runId);
46
+ if (!(0, fs_1.existsSync)(backupDir)) {
47
+ return {
48
+ success: false,
49
+ restoredFiles: [],
50
+ error: `Backup ${runId} not found`,
51
+ };
52
+ }
53
+ // Load metadata
54
+ const metadataPath = (0, path_1.join)(backupDir, 'metadata.json');
55
+ if (!(0, fs_1.existsSync)(metadataPath)) {
56
+ return {
57
+ success: false,
58
+ restoredFiles: [],
59
+ error: 'Backup metadata not found',
60
+ };
61
+ }
62
+ const metadata = JSON.parse((0, fs_1.readFileSync)(metadataPath, 'utf-8'));
63
+ const restoredFiles = [];
64
+ // Restore each file
65
+ for (const file of metadata.files) {
66
+ const backupPath = (0, path_1.join)(backupDir, file);
67
+ const targetPath = (0, path_1.join)(this.projectPath, file);
68
+ if ((0, fs_1.existsSync)(backupPath)) {
69
+ const targetDir = (0, path_1.dirname)(targetPath);
70
+ if (!(0, fs_1.existsSync)(targetDir)) {
71
+ (0, fs_1.mkdirSync)(targetDir, { recursive: true });
72
+ }
73
+ (0, fs_1.copyFileSync)(backupPath, targetPath);
74
+ restoredFiles.push(file);
75
+ }
76
+ }
77
+ return {
78
+ success: true,
79
+ restoredFiles,
80
+ };
81
+ }
82
+ /**
83
+ * List all available backups
84
+ */
85
+ listBackups() {
86
+ if (!(0, fs_1.existsSync)(this.backupRoot)) {
87
+ return [];
88
+ }
89
+ const backups = [];
90
+ const entries = (0, fs_1.readdirSync)(this.backupRoot);
91
+ for (const entry of entries) {
92
+ const backupDir = (0, path_1.join)(this.backupRoot, entry);
93
+ const metadataPath = (0, path_1.join)(backupDir, 'metadata.json');
94
+ if ((0, fs_1.existsSync)(metadataPath)) {
95
+ try {
96
+ const metadata = JSON.parse((0, fs_1.readFileSync)(metadataPath, 'utf-8'));
97
+ backups.push(metadata);
98
+ }
99
+ catch {
100
+ // Skip invalid metadata
101
+ }
102
+ }
103
+ }
104
+ return backups.sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime());
105
+ }
106
+ /**
107
+ * Delete a backup
108
+ */
109
+ deleteBackup(runId) {
110
+ const backupDir = (0, path_1.join)(this.backupRoot, runId);
111
+ if (!(0, fs_1.existsSync)(backupDir)) {
112
+ return false;
113
+ }
114
+ try {
115
+ (0, fs_1.rmSync)(backupDir, { recursive: true, force: true });
116
+ return true;
117
+ }
118
+ catch {
119
+ return false;
120
+ }
121
+ }
122
+ /**
123
+ * Get backup size
124
+ */
125
+ getBackupSize(runId) {
126
+ const backupDir = (0, path_1.join)(this.backupRoot, runId);
127
+ if (!(0, fs_1.existsSync)(backupDir)) {
128
+ return 0;
129
+ }
130
+ return this.calculateDirSize(backupDir);
131
+ }
132
+ calculateDirSize(dir) {
133
+ let size = 0;
134
+ try {
135
+ const entries = (0, fs_1.readdirSync)(dir);
136
+ for (const entry of entries) {
137
+ const fullPath = (0, path_1.join)(dir, entry);
138
+ const stat = (0, fs_1.statSync)(fullPath);
139
+ if (stat.isDirectory()) {
140
+ size += this.calculateDirSize(fullPath);
141
+ }
142
+ else {
143
+ size += stat.size;
144
+ }
145
+ }
146
+ }
147
+ catch {
148
+ // Ignore errors
149
+ }
150
+ return size;
151
+ }
152
+ }
153
+ exports.BackupManager = BackupManager;
154
+ //# sourceMappingURL=backup.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/fix/backup.ts"],"names":[],"mappings":";;;AAAA,2BAAqH;AACrH,+BAA+C;AAU/C,MAAa,aAAa;IAIxB,YAAY,WAAmB;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,KAAe,EAAE,KAAe;QAChE,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,IAAA,cAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,qCAAqC;QACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAEzC,IAAI,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,MAAM,SAAS,GAAG,IAAA,cAAO,EAAC,UAAU,CAAC,CAAC;gBACtC,IAAI,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;oBAC3B,IAAA,cAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,CAAC;gBAED,IAAA,iBAAY,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,MAAM,QAAQ,GAAmB;YAC/B,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,KAAK;YACL,KAAK;SACN,CAAC;QAEF,IAAA,kBAAa,EACX,IAAA,WAAI,EAAC,SAAS,EAAE,eAAe,CAAC,EAChC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAClC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,EAAE;gBACjB,KAAK,EAAE,UAAU,KAAK,YAAY;aACnC,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,IAAA,eAAU,EAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,EAAE;gBACjB,KAAK,EAAE,2BAA2B;aACnC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAmB,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,MAAM,aAAa,GAAa,EAAE,CAAC;QAEnC,oBAAoB;QACpB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAEhD,IAAI,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,MAAM,SAAS,GAAG,IAAA,cAAO,EAAC,UAAU,CAAC,CAAC;gBACtC,IAAI,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;oBAC3B,IAAA,cAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,CAAC;gBAED,IAAA,iBAAY,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBACrC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAA,gBAAW,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE7C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YAEtD,IAAI,IAAA,eAAU,EAAC,YAAY,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;oBACjE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC3B,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAClE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAa;QACxB,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,IAAA,WAAM,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAa;QACzB,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAEO,gBAAgB,CAAC,GAAW;QAClC,IAAI,IAAI,GAAG,CAAC,CAAC;QAEb,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,gBAAW,EAAC,GAAG,CAAC,CAAC;YAEjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClC,MAAM,IAAI,GAAG,IAAA,aAAQ,EAAC,QAAQ,CAAC,CAAC;gBAEhC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvB,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB;QAClB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AArLD,sCAqLC"}
@@ -0,0 +1,55 @@
1
+ export interface Finding {
2
+ id: string;
3
+ severity: 'critical' | 'high' | 'medium' | 'low';
4
+ category: string;
5
+ title: string;
6
+ file: string;
7
+ line: number;
8
+ description: string;
9
+ recommendation: string;
10
+ }
11
+ export interface Fix {
12
+ findingId: string;
13
+ file: string;
14
+ line: number;
15
+ oldCode: string;
16
+ newCode: string;
17
+ confidence: number;
18
+ risk: 'low' | 'medium' | 'high';
19
+ explanation: string;
20
+ }
21
+ export interface FixPack {
22
+ id: string;
23
+ category: 'quality' | 'security' | 'config';
24
+ name: string;
25
+ description: string;
26
+ findings: Finding[];
27
+ fixes: Fix[];
28
+ estimatedRisk: 'low' | 'medium' | 'high';
29
+ impactedFiles: string[];
30
+ priority: number;
31
+ confidence: number;
32
+ }
33
+ export interface ScanResult {
34
+ findings: Finding[];
35
+ projectPath: string;
36
+ scanType?: string;
37
+ }
38
+ export declare class FixEngine {
39
+ private projectPath;
40
+ constructor(projectPath: string);
41
+ /**
42
+ * Generate fix packs from scan results
43
+ */
44
+ generateFixPacks(scanResult: ScanResult): Promise<FixPack[]>;
45
+ private createSecurityFixPack;
46
+ private createQualityFixPack;
47
+ private createConfigFixPack;
48
+ private generateSecretFix;
49
+ private generateVulnerabilityFix;
50
+ private generateQualityFix;
51
+ private generateConfigFix;
52
+ private calculatePackRisk;
53
+ private inferEnvVarName;
54
+ }
55
+ //# sourceMappingURL=engine.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/fix/engine.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,KAAK,EAAE,GAAG,EAAE,CAAC;IACb,aAAa,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACzC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,WAAW,CAAS;gBAEhB,WAAW,EAAE,MAAM;IAI/B;;OAEG;IACG,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YAgDpD,qBAAqB;YAmCrB,oBAAoB;YA4BpB,mBAAmB;IA4BjC,OAAO,CAAC,iBAAiB;IA0DzB,OAAO,CAAC,wBAAwB;IAoChC,OAAO,CAAC,kBAAkB;IA6C1B,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,eAAe;CAYxB"}