insa-check-core 0.1.0

package/dist/types.d.ts

@@ -0,0 +1,244 @@
+/**
+ * Result of one Annex B test.
+ * "manual" = still needs a human (no automated verdict and no recorded manual verdict).
+ * "not-applicable" = a reviewer recorded that the test does not apply to this site.
+ */
+export type Status = "pass" | "fail" | "manual" | "error" | "not-applicable";
+/** A reviewer's verdict on a manually tested item. "untested" keeps the row pending. */
+export type ManualVerdict = "pass" | "fail" | "not-applicable" | "untested";
+/** Reference to a screenshot or file attached as evidence. The bytes live elsewhere (IndexedDB or Report.attachments). */
+export interface AttachmentRef {
+    id: string;
+    name: string;
+    type: string;
+    size: number;
+}
+/** An earlier state of a manual review, kept for accountability. */
+export interface ReviewSnapshot {
+    verdict: ManualVerdict;
+    note?: string;
+    evidenceText?: string;
+    reviewer?: string;
+    /** Screenshots attached in this state. */
+    attachments?: AttachmentRef[];
+    /** When this state was recorded. */
+    at: string;
+    carriedFrom?: string;
+}
+/** A human verdict recorded for a row that automation could not decide (Tier 3 guided review). */
+export interface ManualReview {
+    verdict: ManualVerdict;
+    note?: string;
+    /** Pasted evidence: request/response excerpts, observations. */
+    evidenceText?: string;
+    attachments?: AttachmentRef[];
+    /** ISO timestamp of the last change to this review. */
+    reviewedAt?: string;
+    reviewer?: string;
+    /** Set when the verdict was copied from an earlier report (its finish time); cleared once re-recorded. */
+    carriedFrom?: string;
+    /** Earlier states, oldest first. Maintained by recordVerdict(). */
+    history?: ReviewSnapshot[];
+}
+/** An attachment carried inside an exported report (base64), so exports are complete backups. */
+export interface EmbeddedAttachment {
+    name: string;
+    type: string;
+    size: number;
+    base64: string;
+}
+/** Plain-language explanation of a term used in guidance. */
+export interface TermExplanation {
+    term: string;
+    meaning: string;
+}
+/**
+ * 1 = passive, URL-only (implemented in v1)
+ * 2 = requires source-code / configuration scanning (future)
+ * 3 = requires a human (future / always manual)
+ */
+export type Tier = 1 | 2 | 3;
+/** How a report row was decided. "manual" = no automated check ran for it. */
+export type EvaluatedBy = "url" | "code" | "url+code" | "manual";
+export type CheckKind = "url" | "code";
+/** How sure a code finding is. Low-confidence findings never produce "fail" on their own. */
+export type Confidence = "high" | "medium" | "low";
+/** One static-analysis hit, located in the scanned project. */
+export interface CodeFinding {
+    /** Path relative to the project root, using "/" separators. */
+    file: string;
+    line: number;
+    /** The matched source line (trimmed, secrets redacted). */
+    snippet: string;
+    /** Why this matters, in one line. */
+    why: string;
+    confidence: Confidence;
+    /** "ast" = syntax-tree match; "regex" = text match (higher false-positive rate). */
+    method: "ast" | "regex";
+    /** Rule identifier, e.g. "py-sql-string-building". */
+    rule: string;
+}
+/** A finding as it appears in a report row, stamped with the Annex B item it was reported under. */
+export interface ReportedFinding extends CodeFinding {
+    item: string;
+}
+/** One row of Annex B, transcribed verbatim from the standard. */
+export interface AnnexItem {
+    /** Original Annex B item number. */
+    id: string;
+    /** Annex B section heading the item sits under. */
+    section: string;
+    /** Annex B test title. */
+    title: string;
+    tier: Tier;
+    /** Keys of the automated checks that decide this item, per kind (url: checks/index.ts, code: code/checks/index.ts). */
+    checks?: {
+        url?: string;
+        code?: string | string[];
+    };
+    /** How to test the item by hand, in one line. Shown whenever the item is reported as "manual". */
+    manualNote: string;
+    /** Guided-review content (from content/<locale>.ts): what to check and why. */
+    guidance?: string;
+    /** 2-5 concrete test steps. */
+    howToTest?: string[];
+    /** What the reviewer should record as evidence. */
+    evidencePrompt?: string;
+    /** Plain explanations of technical terms used above. */
+    terms?: TermExplanation[];
+    /** Related requirements in INSA documents, cited by clause. */
+    references?: string[];
+}
+/** What a check returns. The engine adds id/section/title from the registry. */
+export interface CheckOutcome {
+    status: Status;
+    detail: string;
+    /** Concrete observations backing the verdict (header values, URLs, cookie names...). */
+    evidence?: string[];
+    /** Code checks only: the located findings behind the verdict. */
+    findings?: CodeFinding[];
+}
+export interface CheckResult extends Omit<CheckOutcome, "findings"> {
+    id: string;
+    section: string;
+    title: string;
+    tier: Tier;
+    evaluatedBy: EvaluatedBy;
+    findings?: ReportedFinding[];
+    /** Present on rows that need (or received) a human verdict. */
+    manual?: ManualReview;
+}
+/** A passive check against a live URL (Tier 1). */
+export interface UrlCheck {
+    kind: "url";
+    /** Stable identifier, referenced from AnnexItem.checks.url. */
+    key: string;
+    run(ctx: ScanContext): Promise<CheckOutcome>;
+}
+/** Kept for v1 compatibility. */
+export type Check = UrlCheck;
+export interface HttpResponse {
+    /** Final URL after any redirects that were followed. */
+    url: string;
+    status: number;
+    /** Lower-cased header names. Repeated headers are joined with ", " (except set-cookie). */
+    headers: Record<string, string>;
+    /** Raw Set-Cookie header values from the final response. */
+    setCookies: string[];
+    /** Body decoded as UTF-8, truncated to the client's body limit. */
+    body: string;
+    /** Every URL visited before the final one, in order. Empty if no redirect occurred. */
+    redirects: string[];
+}
+export interface RequestOptions {
+    method?: string;
+    /** Defaults to true. */
+    followRedirects?: boolean;
+    headers?: Record<string, string>;
+}
+export interface CertificateInfo {
+    subject: string;
+    issuer: string;
+    validFrom: string;
+    validTo: string;
+    daysRemaining: number;
+    subjectAltNames: string[];
+    /** Public key algorithm family, when it can be determined. */
+    keyType?: "RSA" | "EC";
+    /** Public key size in bits, when reported. */
+    bits?: number;
+}
+export interface TlsInfo {
+    /** Negotiated protocol, e.g. "TLSv1.3". */
+    protocol: string | null;
+    cipher: string | null;
+    /** True when the chain is trusted and the hostname matches. */
+    authorized: boolean;
+    /** OpenSSL / Node error code when not authorized, e.g. CERT_HAS_EXPIRED. */
+    authorizationError?: string;
+    cert: CertificateInfo | null;
+}
+export type LegacyTlsVersion = "TLSv1" | "TLSv1.1";
+/**
+ * Everything a check may do to the target. Injected so that checks are pure
+ * with respect to I/O and can be unit-tested with fakes.
+ */
+export interface ScanContext {
+    /** Normalised target URL (origin + path the user supplied). */
+    target: URL;
+    /** Request a path (resolved against target) or absolute URL. Responses are cached per method+URL. */
+    request(pathOrUrl: string, opts?: RequestOptions): Promise<HttpResponse>;
+    /** TLS handshake details for the target host. Cached. */
+    tlsInfo(): Promise<TlsInfo>;
+    /** Whether the server completes a handshake when only the given legacy version is offered. */
+    probeTls(version: LegacyTlsVersion): Promise<boolean>;
+}
+export interface ReportSummary {
+    total: number;
+    pass: number;
+    fail: number;
+    manual: number;
+    error: number;
+    /** Absent on reports created before Tier 3. */
+    "not-applicable"?: number;
+}
+export interface Report {
+    tool: {
+        name: string;
+        version: string;
+    };
+    /** Which edition of Annex B the registry was transcribed from. */
+    standard: string;
+    /** Display name of what was scanned: a URL, "code: <project>", or both for a combined report. */
+    target: string;
+    /** What contributed to this report. Absent on v1 reports (URL only). */
+    sources?: ReportSources;
+    /** Warnings about coverage (unparseable files, unsupported framework...). */
+    notes?: string[];
+    /** Evidence files embedded for export, keyed by AttachmentRef.id. */
+    attachments?: Record<string, EmbeddedAttachment>;
+    startedAt: string;
+    finishedAt: string;
+    summary: ReportSummary;
+    /** In Annex B order. */
+    results: CheckResult[];
+}
+export interface CodeSource {
+    /** Project directory name (never the absolute path). */
+    name: string;
+    language: string | null;
+    /** Every language with source files in the project (the first is the primary one). */
+    languages?: string[];
+    frameworks: string[];
+    filesAnalyzed: number;
+    filesSkipped: number;
+    parseErrors: {
+        file: string;
+        error: string;
+    }[];
+}
+export interface ReportSources {
+    url?: string;
+    code?: CodeSource;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,gBAAgB,CAAC;AAE7E,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,gBAAgB,GAAG,UAAU,CAAC;AAE5E,0HAA0H;AAC1H,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oEAAoE;AACpE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;IAC9B,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;IAC9B,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,iGAAiG;AACjG,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAE7B,8EAA8E;AAC9E,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEjE,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvC,6FAA6F;AAC7F,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEnD,+DAA+D;AAC/D,MAAM,WAAW,WAAW;IAC1B,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,UAAU,CAAC;IACvB,oFAAoF;IACpF,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC;IACxB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oGAAoG;AACpG,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,kEAAkE;AAClE,MAAM,WAAW,SAAS;IACxB,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;IACX,uHAAuH;IACvH,MAAM,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE,CAAC;IACpD,kGAAkG;IAClG,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,WAAY,SAAQ,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;IACX,WAAW,EAAE,WAAW,CAAC;IACzB,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,mDAAmD;AACnD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,KAAK,CAAC;IACZ,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC9C;AAED,iCAAiC;AACjC,MAAM,MAAM,KAAK,GAAG,QAAQ,CAAC;AAE7B,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,2FAA2F;IAC3F,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,4DAA4D;IAC5D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,8DAA8D;IAC9D,OAAO,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;IACvB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,OAAO;IACtB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,+DAA+D;IAC/D,UAAU,EAAE,OAAO,CAAC;IACpB,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,SAAS,CAAC;AAEnD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,+DAA+D;IAC/D,MAAM,EAAE,GAAG,CAAC;IACZ,qGAAqG;IACrG,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACzE,yDAAyD;IACzD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,8FAA8F;IAC9F,QAAQ,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB,wBAAwB;IACxB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,sFAAsF;IACtF,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/validate.d.ts

@@ -0,0 +1,4 @@
+import type { AnnexItem } from "./types.js";
+/** Registry sanity: unique ids, known check keys of the right kind. Used by tests and at CLI start-up. */
+export declare function validateRegistry(registry?: readonly AnnexItem[], urlChecks?: ReadonlyMap<string, unknown>, codeChecks?: ReadonlyMap<string, unknown>): string[];
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,0GAA0G;AAC1G,wBAAgB,gBAAgB,CAC9B,QAAQ,GAAE,SAAS,SAAS,EAAY,EACxC,SAAS,GAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAU,EAChD,UAAU,GAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAe,GACrD,MAAM,EAAE,CAcV"}

package/dist/validate.js

@@ -0,0 +1,24 @@
+import { ANNEX_B } from "./annex-b.js";
+import { CHECKS } from "./checks/index.js";
+import { CODE_CHECKS } from "./code/checks/index.js";
+/** Registry sanity: unique ids, known check keys of the right kind. Used by tests and at CLI start-up. */
+export function validateRegistry(registry = ANNEX_B, urlChecks = CHECKS, codeChecks = CODE_CHECKS) {
+    const problems = [];
+    const seen = new Set();
+    for (const item of registry) {
+        if (seen.has(item.id))
+            problems.push(`Duplicate item id ${item.id}`);
+        seen.add(item.id);
+        const { url, code } = item.checks ?? {};
+        if (url && !urlChecks.has(url))
+            problems.push(`Item ${item.id} references unknown url check "${url}"`);
+        for (const key of [code ?? []].flat()) {
+            if (!codeChecks.has(key))
+                problems.push(`Item ${item.id} references unknown code check "${key}"`);
+        }
+        if (!item.manualNote.trim())
+            problems.push(`Item ${item.id} has no manualNote`);
+    }
+    return problems;
+}
+//# sourceMappingURL=validate.js.map

package/dist/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,0GAA0G;AAC1G,MAAM,UAAU,gBAAgB,CAC9B,QAAQ,GAAyB,OAAO,EACxC,SAAS,GAAiC,MAAM,EAChD,UAAU,GAAiC,WAAW;IAEtD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,kCAAkC,GAAG,GAAG,CAAC,CAAC;QACvG,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,mCAAmC,GAAG,GAAG,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "insa-check-core",
+  "version": "0.1.0",
+  "description": "Check engine for INSA Secure Website Management Standard, Annex B",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./report": {
+      "types": "./dist/report/index.d.ts",
+      "default": "./dist/report/index.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist"
+  ],
+  "license": "SEE LICENSE IN LICENSE",
+  "dependencies": {
+    "@babel/parser": "^7.29.9",
+    "php-parser": "^3.7.0",
+    "tree-sitter-wasms": "^0.1.13",
+    "web-tree-sitter": "^0.22.6"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/zikra-abdusemed-cmd/insa-check.git",
+    "directory": "packages/core"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}