guardrail-core 1.0.0

package/src/fix-packs/types.ts

@@ -0,0 +1,206 @@
+/**
+ * Fix Packs Types
+ * 
+ * First-class objects that group findings into actionable batches.
+ * Used by CLI, Autopilot, and Verified AutoFix.
+ */
+
+import { Tier } from '../tier-config';
+
+// ============================================================================
+// FINDING CATEGORY ENUM
+// ============================================================================
+
+export const FINDING_CATEGORIES = [
+  'secrets',
+  'routes',
+  'mocks',
+  'auth',
+  'placeholders',
+  'deps',
+  'types',
+  'tests',
+  'security',
+  'performance',
+] as const;
+
+export type FindingCategory = typeof FINDING_CATEGORIES[number];
+
+// ============================================================================
+// SEVERITY LEVELS
+// ============================================================================
+
+export const SEVERITY_LEVELS = ['critical', 'high', 'medium', 'low', 'info'] as const;
+export type SeverityLevel = typeof SEVERITY_LEVELS[number];
+
+export const SEVERITY_ORDER: Record<SeverityLevel, number> = {
+  critical: 0,
+  high: 1,
+  medium: 2,
+  low: 3,
+  info: 4,
+};
+
+// ============================================================================
+// FIX STRATEGY
+// ============================================================================
+
+export const FIX_STRATEGIES = [
+  'auto',           // Fully automated fix
+  'guided',         // AI-guided with human review
+  'manual',         // Requires manual intervention
+  'ai-assisted',    // AI generates suggestions
+] as const;
+
+export type FixStrategy = typeof FIX_STRATEGIES[number];
+
+// ============================================================================
+// FINDING INTERFACE
+// ============================================================================
+
+export interface Finding {
+  id: string;
+  category: FindingCategory;
+  severity: SeverityLevel;
+  title: string;
+  description: string;
+  file: string;
+  line?: number;
+  column?: number;
+  endLine?: number;
+  endColumn?: number;
+  code?: string;
+  suggestion?: string;
+  rule?: string;
+  metadata?: Record<string, unknown>;
+}
+
+// ============================================================================
+// FIX PACK INTERFACE
+// ============================================================================
+
+export interface FixPack {
+  id: string;
+  title: string;
+  severity: SeverityLevel;
+  findings: Finding[];
+  files: string[];
+  strategy: FixStrategy;
+  estimatedImpact: EstimatedImpact;
+  requiresHumanReview: boolean;
+  category: FindingCategory;
+  createdAt: string;
+  metadata?: FixPackMetadata;
+}
+
+export interface EstimatedImpact {
+  filesAffected: number;
+  linesChanged: number;
+  riskLevel: 'low' | 'medium' | 'high';
+  confidence: number;
+  timeEstimateMinutes: number;
+}
+
+export interface FixPackMetadata {
+  repoFingerprint?: string;
+  generatedBy?: string;
+  version?: string;
+  tags?: string[];
+}
+
+// ============================================================================
+// REPO FINGERPRINT
+// ============================================================================
+
+export interface RepoFingerprint {
+  id: string;
+  name: string;
+  framework?: string;
+  language?: string;
+  hasTypeScript: boolean;
+  hasTests: boolean;
+  packageManager?: 'npm' | 'yarn' | 'pnpm';
+  gitRemote?: string;
+  hash: string;
+}
+
+// ============================================================================
+// GENERATOR OPTIONS
+// ============================================================================
+
+export interface GenerateFixPacksOptions {
+  findings: Finding[];
+  repoFingerprint: RepoFingerprint;
+  groupByCategory?: boolean;
+  groupByFileProximity?: boolean;
+  maxPackSize?: number;
+  minPackSize?: number;
+  requiredTier?: Tier;
+}
+
+export interface GenerateFixPacksResult {
+  packs: FixPack[];
+  ungrouped: Finding[];
+  stats: {
+    totalFindings: number;
+    totalPacks: number;
+    byCategory: Record<FindingCategory, number>;
+    bySeverity: Record<SeverityLevel, number>;
+  };
+}
+
+// ============================================================================
+// FIX PACK EXECUTION
+// ============================================================================
+
+export interface FixPackExecutionOptions {
+  pack: FixPack;
+  projectPath: string;
+  dryRun?: boolean;
+  autoApply?: boolean;
+  maxAttempts?: number;
+  onProgress?: (stage: string, message: string) => void;
+}
+
+export interface FixPackExecutionResult {
+  success: boolean;
+  packId: string;
+  appliedFixes: number;
+  skippedFixes: number;
+  errors: string[];
+  duration: number;
+  filesModified: string[];
+  diffs: Array<{
+    file: string;
+    content: string;
+  }>;
+}
+
+// ============================================================================
+// HELPER FUNCTIONS
+// ============================================================================
+
+export function compareSeverity(a: SeverityLevel, b: SeverityLevel): number {
+  return SEVERITY_ORDER[a] - SEVERITY_ORDER[b];
+}
+
+export function isHigherSeverity(a: SeverityLevel, b: SeverityLevel): boolean {
+  return compareSeverity(a, b) < 0;
+}
+
+export function getHighestSeverity(severities: SeverityLevel[]): SeverityLevel {
+  if (severities.length === 0) return 'info';
+  return severities.reduce((highest, current) => 
+    isHigherSeverity(current, highest) ? current : highest
+  );
+}
+
+export function generatePackId(category: FindingCategory, index: number, hash: string): string {
+  const categoryPrefix = category.slice(0, 3).toUpperCase();
+  const hashSuffix = hash.slice(0, 6);
+  return `FP-${categoryPrefix}-${String(index).padStart(3, '0')}-${hashSuffix}`;
+}
+
+export function sortPacksBySeverity(packs: FixPack[]): FixPack[] {
+  return [...packs].sort((a, b) => compareSeverity(a.severity, b.severity));
+}

package/src/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./types";
+export * from "./utils";
+export * from "./env";
+export * from "./cache/redis-cache";
+export * from "./metrics/prometheus";
+export * from "./visualization/dependency-graph";
+//# sourceMappingURL=index.d.ts.map

package/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC;AACtB,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC"}

package/src/index.ts

@@ -0,0 +1,12 @@
+export * from "./cache/redis-cache";
+export * from "./entitlements";
+export * from "./env";
+export * from "./fix-packs";
+export * from "./metrics/prometheus";
+export * from "./rbac";
+export * from "./tier-config";
+export * from "./types";
+export * from "./utils";
+export * from "./visualization/dependency-graph";
+export * from "./autopilot";
+export * from "./verified-autofix";

package/src/metrics/prometheus.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Prometheus Metrics
+ *
+ * Production-ready metrics collection for Guardrail AI
+ * Exposes metrics in Prometheus format for monitoring and alerting
+ */
+export interface MetricLabels {
+  [key: string]: string;
+}
+export interface MetricValue {
+  value: number;
+  labels: MetricLabels;
+  timestamp?: number;
+}
+export interface Metric {
+  name: string;
+  help: string;
+  type: "counter" | "gauge" | "histogram" | "summary";
+  values: MetricValue[];
+}
+declare class Counter {
+  readonly name: string;
+  readonly help: string;
+  readonly labelNames: string[];
+  private values;
+  constructor(name: string, help: string, labelNames?: string[]);
+  inc(labels?: MetricLabels, value?: number): void;
+  get(labels?: MetricLabels): number;
+  reset(): void;
+  collect(): MetricValue[];
+  private labelsToKey;
+  private keyToLabels;
+}
+declare class Gauge {
+  readonly name: string;
+  readonly help: string;
+  readonly labelNames: string[];
+  private values;
+  constructor(name: string, help: string, labelNames?: string[]);
+  set(labels: MetricLabels, value: number): void;
+  set(value: number): void;
+  inc(labels?: MetricLabels, value?: number): void;
+  dec(labels?: MetricLabels, value?: number): void;
+  get(labels?: MetricLabels): number;
+  collect(): MetricValue[];
+  private labelsToKey;
+  private keyToLabels;
+}
+declare class Histogram {
+  readonly name: string;
+  readonly help: string;
+  readonly labelNames: string[];
+  private buckets;
+  private values;
+  constructor(
+    name: string,
+    help: string,
+    labelNames?: string[],
+    buckets?: number[],
+  );
+  observe(labels: MetricLabels, value: number): void;
+  observe(value: number): void;
+  startTimer(labels?: MetricLabels): () => number;
+  collect(): MetricValue[];
+  private labelsToKey;
+  private keyToLabels;
+}
+/**
+ * Guardrail Metrics Registry
+ */
+declare class MetricsRegistry {
+  readonly scansTotal: Counter;
+  readonly scanDuration: Histogram;
+  readonly injectionsDetected: Counter;
+  readonly injectionScanDuration: Histogram;
+  readonly vulnerabilitiesFound: Counter;
+  readonly vulnerablePackages: Gauge;
+  readonly secretsDetected: Counter;
+  readonly complianceScore: Gauge;
+  readonly complianceViolations: Counter;
+  readonly apiRequestsTotal: Counter;
+  readonly apiRequestDuration: Histogram;
+  readonly agentActionsTotal: Counter;
+  readonly agentActionsBlocked: Counter;
+  readonly cacheHits: Counter;
+  readonly cacheMisses: Counter;
+  readonly activeConnections: Gauge;
+  readonly memoryUsageBytes: Gauge;
+  /**
+   * Generate Prometheus-formatted output
+   */
+  generatePrometheusOutput(): string;
+  /**
+   * Update system metrics
+   */
+  updateSystemMetrics(): void;
+  /**
+   * Reset all metrics (for testing)
+   */
+  resetAll(): void;
+}
+export declare const metrics: MetricsRegistry;
+export { Counter, Gauge, Histogram };
+//# sourceMappingURL=prometheus.d.ts.map

package/src/metrics/prometheus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prometheus.d.ts","sourceRoot":"","sources":["prometheus.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;IACpD,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,cAAM,OAAO;aAIO,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,MAAM;aACZ,UAAU,EAAE,MAAM,EAAE;IALtC,OAAO,CAAC,MAAM,CAAkC;gBAG9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,GAAE,MAAM,EAAO;IAG3C,GAAG,CAAC,MAAM,GAAE,YAAiB,EAAE,KAAK,GAAE,MAAU,GAAG,IAAI;IAMvD,GAAG,CAAC,MAAM,GAAE,YAAiB,GAAG,MAAM;IAKtC,KAAK,IAAI,IAAI;IAIb,OAAO,IAAI,WAAW,EAAE;IAWxB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,WAAW;CAUpB;AAED,cAAM,KAAK;aAIS,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,MAAM;aACZ,UAAU,EAAE,MAAM,EAAE;IALtC,OAAO,CAAC,MAAM,CAAkC;gBAG9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,GAAE,MAAM,EAAO;IAG3C,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAC9C,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAUxB,GAAG,CAAC,MAAM,GAAE,YAAiB,EAAE,KAAK,GAAE,MAAU,GAAG,IAAI;IAMvD,GAAG,CAAC,MAAM,GAAE,YAAiB,EAAE,KAAK,GAAE,MAAU,GAAG,IAAI;IAMvD,GAAG,CAAC,MAAM,GAAE,YAAiB,GAAG,MAAM;IAKtC,OAAO,IAAI,WAAW,EAAE;IAWxB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,WAAW;CAUpB;AAED,cAAM,SAAS;aAKK,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,MAAM;aACZ,UAAU,EAAE,MAAM,EAAE;IANtC,OAAO,CAAC,OAAO,CAAW;IAC1B,OAAO,CAAC,MAAM,CAA6E;gBAGzE,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,GAAE,MAAM,EAAO,EACzC,OAAO,CAAC,EAAE,MAAM,EAAE;IAKpB,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAClD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAqC5B,UAAU,CAAC,MAAM,GAAE,YAAiB,GAAG,MAAM,MAAM;IAUnD,OAAO,IAAI,WAAW,EAAE;IAoCxB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,WAAW;CAUpB;AAED;;GAEG;AACH,cAAM,eAAe;IAEnB,QAAQ,CAAC,UAAU,UAIjB;IAEF,QAAQ,CAAC,YAAY,YAKnB;IAGF,QAAQ,CAAC,kBAAkB,UAIzB;IAEF,QAAQ,CAAC,qBAAqB,YAI5B;IAGF,QAAQ,CAAC,oBAAoB,UAI3B;IAEF,QAAQ,CAAC,kBAAkB,QAIzB;IAGF,QAAQ,CAAC,eAAe,UAItB;IAGF,QAAQ,CAAC,eAAe,QAItB;IAEF,QAAQ,CAAC,oBAAoB,UAI3B;IAGF,QAAQ,CAAC,gBAAgB,UAIvB;IAEF,QAAQ,CAAC,kBAAkB,YAIzB;IAGF,QAAQ,CAAC,iBAAiB,UAIxB;IAEF,QAAQ,CAAC,mBAAmB,UAI1B;IAGF,QAAQ,CAAC,SAAS,UAIhB;IAEF,QAAQ,CAAC,WAAW,UAIlB;IAGF,QAAQ,CAAC,iBAAiB,QAIxB;IAEF,QAAQ,CAAC,gBAAgB,QAIvB;IAEF;;OAEG;IACH,wBAAwB,IAAI,MAAM;IA6ClC;;OAEG;IACH,mBAAmB,IAAI,IAAI;IAQ3B;;OAEG;IACH,QAAQ,IAAI,IAAI;CAIjB;AAGD,eAAO,MAAM,OAAO,iBAAwB,CAAC;AAG7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC"}