sfscanner 0.1.0 → 0.2.1

package/dist/v2/json-output.d.ts

@@ -1,97 +0,0 @@
-import { type ScannerResultV2 } from '@hub/contracts/scanner-v2-result';
-import type { BatchErrorCodeV2, BatchResultV2 } from './batch-runner';
-export type ProjectionFormatV2 = 'json' | 'ndjson' | 'sarif' | 'table';
-export type ProjectionSourceV2 = Readonly<{
-    profile: 'BUILT_IN' | 'CONFIG' | 'CLI';
-    rules: 'BUILT_IN' | 'CONFIG' | 'CLI';
-    semantics: 'BUILT_IN' | 'CONFIG' | 'CLI';
-    limits: 'BUILT_IN' | 'CONFIG' | 'CLI';
-    target: 'DEFAULT' | 'CONFIG' | 'CLI';
-    unsignedDevelopment: 'DEFAULT' | 'CONFIG' | 'CLI';
-}>;
-export type ProjectionOptionsV2 = Readonly<{
-    format: ProjectionFormatV2;
-    profile: string;
-    failOn: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO';
-    requireComplete: boolean;
-    concurrency: number;
-    allowUnsignedDevelopmentRules: boolean;
-    sources: ProjectionSourceV2;
-}>;
-type ArtifactV2 = Readonly<{
-    profile: {
-        id: string;
-        version: string;
-    };
-    ruleset: {
-        id: string;
-        version: string;
-        digest: string;
-        signatureStatus: 'VERIFIED' | 'UNVERIFIED';
-    };
-    semantics: {
-        id: string;
-        version: string;
-        digest: string;
-    };
-    target: ScannerResultV2['target'];
-    limits: {
-        schemaVersion: 'scanner-limits-v2';
-        digest: string;
-    };
-}>;
-type CliErrorCodeV2 = BatchErrorCodeV2 | 'OUTPUT_WRITE_FAILED';
-type CliErrorV2 = Readonly<{
-    kind: 'INPUT' | 'INCOMPLETE' | 'INTERNAL' | 'CANCELLED';
-    code: CliErrorCodeV2;
-    message: string;
-}>;
-type CliItemV2 = Readonly<{
-    input: string;
-    ok: true;
-    result: ScannerResultV2;
-} | {
-    input: string;
-    ok: false;
-    error: CliErrorV2;
-}>;
-type SummaryV2 = Readonly<{
-    total: number;
-    complete: number;
-    degraded: number;
-    indeterminate: number;
-    inputErrors: number;
-    internalErrors: number;
-    cancelled: number;
-    findings: number;
-}>;
-export type CliEnvelopeV2 = Readonly<{
-    schemaVersion: 'n8n-scan-v2';
-    tool: Readonly<{
-        name: 'n8n-scan';
-        version: string;
-        buildDigest: string;
-    }>;
-    artifacts: ArtifactV2;
-    invocation: Readonly<{
-        schema: 'v2';
-        format: 'json' | 'ndjson' | 'sarif' | 'table';
-        profile: string;
-        failOn: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO';
-        requireComplete: boolean;
-        concurrency: number;
-        allowUnsignedDevelopmentRules: boolean;
-        sources: ProjectionSourceV2;
-    }>;
-    results: readonly CliItemV2[];
-    summary: SummaryV2;
-    exitReason: 'UNDER_THRESHOLD' | 'FINDING_THRESHOLD' | 'REQUIRE_COMPLETE' | 'ITEM_FAILURE' | 'USAGE' | 'INTERNAL' | 'CANCELLED';
-}>;
-export type ProjectedBatchV2 = Readonly<{
-    envelope: CliEnvelopeV2;
-    items: readonly CliItemV2[];
-}>;
-export declare const DEFAULT_PROJECTION_OPTIONS: ProjectionOptionsV2;
-export declare function serializeEnvelopeV2(batch: BatchResultV2, options?: ProjectionOptionsV2): string;
-export declare function projectBatchV2(batch: BatchResultV2, options?: ProjectionOptionsV2 | ProjectionFormatV2): ProjectedBatchV2;
-export {};

package/dist/v2/metadata-validation.d.ts

@@ -1,4 +0,0 @@
-import type { CliMetadataDocumentV2 } from './commands';
-export declare function checkPlain(o: unknown): Record<string, unknown>;
-export declare function checkDenseArray<T>(arr: unknown): T[];
-export declare function validateDocumentShape(doc: unknown): asserts doc is CliMetadataDocumentV2;

package/dist/v2/ndjson-output.d.ts

@@ -1,3 +0,0 @@
-import type { BatchResultV2 } from './batch-runner';
-import { type ProjectionOptionsV2 } from './json-output';
-export declare function serializeNdjsonV2(batch: BatchResultV2, options?: ProjectionOptionsV2): string;

package/dist/v2/sarif-helpers.d.ts

@@ -1,69 +0,0 @@
-import { type ScannerResultV2 } from '@hub/contracts/scanner-v2-result';
-import type { SourceSpanV2, SubjectV2 } from '@hub/contracts/scanner-v2-source';
-import type { BatchSarifInputV2, SarifV2Limits } from './sarif-output';
-export type Bounds = {
-    rules: number;
-    results: number;
-    notifications: number;
-    taxonomies: number;
-    taxa: number;
-    tags: number;
-    flows: number;
-    steps: number;
-};
-export type NotifItem = {
-    code: string;
-    level: 'warning' | 'error';
-    location?: Record<string, unknown>;
-    locKey: string;
-    id?: string;
-    label?: string;
-};
-export type BatchId = {
-    engineId: string;
-    engineVersion: string;
-    engineBuildDigest: string;
-    profileId: string;
-    profileVersion: string;
-    rulesetId: string;
-    rulesetVersion: string;
-    rulesetDigest: string;
-    rulesetSig: string;
-    semanticsId: string;
-    semanticsVersion: string;
-    semanticsDigest: string;
-    targetContextDigest: string;
-    targetEdition: string;
-    targetDeployment: string;
-    targetRole: string;
-    targetTaskRunner: string;
-    limitsSchemaVersion: string;
-    limitsDigest: string;
-};
-export type InputIdentity = {
-    rawUri: unknown;
-    label: string;
-};
-export declare const FALLBACK: Bounds;
-export declare const SEV_ORDER: Record<string, number>;
-export declare const LEVELS: Record<string, 'error' | 'warning' | 'note'>;
-export declare const ALLOWED_ERRORS: Set<string>;
-export declare const prop: (v: unknown, k: string) => unknown;
-export declare const inv: () => never;
-export declare function checkResult(r: unknown): ScannerResultV2;
-export declare function inputIdentity(value: unknown): InputIdentity;
-export declare function extractItems(input: BatchSarifInputV2): {
-    items: readonly unknown[];
-    repoRoot?: string;
-    selRoot?: string;
-    limits?: SarifV2Limits;
-};
-export declare function safePath(v: unknown): v is string;
-export declare function safeUri(raw: unknown, repoRoot?: string, selRoot?: string): string | undefined;
-export declare function readPos(v: unknown): SourceSpanV2['start'] | undefined;
-export declare function readSpan(source: unknown): SourceSpanV2 | undefined;
-export declare function subjectKey(s: SubjectV2): string;
-export declare function subjectSpan(subj: SubjectV2): SourceSpanV2 | undefined;
-export declare function physical(uri: string, s: SourceSpanV2): Record<string, unknown>;
-export declare function freeze<T>(v: T, seen?: WeakSet<object>): T;
-export declare function sameId(a: BatchId, b: BatchId): boolean;

package/dist/v2/sarif-output.d.ts

@@ -1,40 +0,0 @@
-import type { ScannerResultV2 } from '@hub/contracts/scanner-v2-result';
-export type SarifLog = Readonly<{
-    version: '2.1.0';
-    $schema: string;
-    runs: readonly SarifRun[];
-}>;
-export type SarifRun = Readonly<{
-    tool: {
-        driver: Record<string, unknown>;
-    };
-    results: readonly Record<string, unknown>[];
-    invocations: readonly Record<string, unknown>[];
-    taxonomies?: readonly Record<string, unknown>[];
-}>;
-export type SarifV2Limits = Readonly<{
-    maxRules?: number;
-    maxResults?: number;
-    maxNotifications?: number;
-    maxTaxonomies?: number;
-    maxTaxa?: number;
-    maxTags?: number;
-    maxFlows?: number;
-    maxTraceSteps?: number;
-}>;
-export type BatchSarifEnvelopeV2 = Readonly<{
-    items?: readonly unknown[];
-    results?: readonly unknown[];
-    input?: Readonly<{
-        label: string;
-        uri?: string;
-    }>;
-    result?: ScannerResultV2;
-    repositoryRoot?: string;
-    selectionRoot?: string;
-    limits?: SarifV2Limits;
-}>;
-export type BatchSarifInputV2 = BatchSarifEnvelopeV2 | readonly unknown[];
-export declare function buildBatchSarifV2(input: BatchSarifInputV2): SarifLog;
-export declare function buildSarifV2(input: BatchSarifInputV2): SarifLog;
-export declare function serializeSarifV2(input: BatchSarifInputV2): string;

package/dist/v2/table-output.d.ts

@@ -1,2 +0,0 @@
-import type { BatchResultV2 } from './batch-runner';
-export declare function renderTableV2(batch: BatchResultV2): string;

package/dist/v2/worker-host.d.ts

@@ -1,24 +0,0 @@
-export type WorkerHostStatus = 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'TIMEOUT';
-export type WorkerHostRun<T> = Readonly<{
-    status: 'COMPLETED';
-    value: T;
-} | {
-    status: Exclude<WorkerHostStatus, 'COMPLETED'>;
-}>;
-export type SigintSource = Readonly<{
-    on: (event: 'SIGINT', listener: () => void) => unknown;
-    off?: (event: 'SIGINT', listener: () => void) => unknown;
-    removeListener?: (event: 'SIGINT', listener: () => void) => unknown;
-}>;
-export type SigintController = Readonly<{
-    signal: AbortSignal;
-    dispose: () => void;
-}>;
-export type WorkerHostOptions = Readonly<{
-    signal?: AbortSignal;
-    sigint?: SigintSource;
-    timeoutMs?: number;
-    now?: () => number;
-}>;
-export declare function createSigintController(source?: SigintSource): SigintController;
-export declare function runHostedScan<T>(task: () => T | PromiseLike<T>, options?: WorkerHostOptions): Promise<WorkerHostRun<T>>;