synapsexcoder 6.0.0

package/dist/sdk/plugin-base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-base.d.ts","sourceRoot":"","sources":["../../src/sdk/plugin-base.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM1C;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,6DAA6D;IAC7D,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB;IACtB,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;IAClF,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD;;;GAGG;AACH,qBAAa,YAAY,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACzF,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,gBAAgB,CAAU;IAClC,OAAO,CAAC,MAAM,CAAiF;gBAG7F,QAAQ,EAAE,OAAO,EACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAOzF,gCAAgC;IAChC,GAAG,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIhD,yEAAyE;IACzE,GAAG,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI;IAa7D,4BAA4B;IAC5B,MAAM,IAAI,OAAO;IAIjB,sFAAsF;IACtF,KAAK,IAAI,IAAI;IAWb,4CAA4C;IAC5C,QAAQ,IAAI,MAAM,EAAE;IAUpB,OAAO,CAAC,WAAW;CASpB;AAMD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,MAAM,EAAE;QACN,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;QAChD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;QAChD,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;QACjD,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;KAClD,CAAC;IACF,6CAA6C;IAC7C,OAAO,EAAE;QACP,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC;QACvC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;QACxC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC9B,KAAK,EAAE,MAAM,IAAI,CAAC;QAClB,MAAM,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACvC,CAAC;IACF,wDAAwD;IACxD,KAAK,EAAE,YAAY,CAAC;IACpB,0DAA0D;IAC1D,GAAG,EAAE;QACH,iCAAiC;QACjC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,mCAAmC;QACnC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,4BAA4B;QAC5B,UAAU,EAAE,MAAM,MAAM,EAAE,CAAC;KAC5B,CAAC;CACH;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,8BAAsB,UAAU,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAEhG,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAGjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAG1B,0DAA0D;IAC1D,cAAc,EAAE,OAAO,CAAiB;IACxC,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAE9F,mCAAmC;IACnC,MAAM,EAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAG/B,4CAA4C;IAC5C,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAQ;IAC5C,6CAA6C;IAC7C,MAAM,UAAS;IACf,yCAAyC;IACzC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAQ;IAGlC,OAAO,CAAC,OAAO,CAA8B;IAG7C,OAAO,CAAC,YAAY,CAAyB;IAE7C;;OAEG;IACH,IAAI,IAAI,IAAI,UAAU,CAYrB;IAED;;;OAGG;IACH,UAAU,IAAI,IAAI;IAIlB;;;;OAIG;IACG,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5D;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAajC;;;OAGG;cACa,UAAU,CAAC,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzE;;;OAGG;cACa,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7C;;;OAGG;IACH,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI;IAM1D;;OAEG;IACH,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI;IAQhE;;;OAGG;IACH,cAAc,IAAI;QAChB,QAAQ,EAAE,CAAC,GAAG,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KACjC;CAUF"}

package/dist/sdk/plugin-base.js

@@ -0,0 +1,227 @@
+/**
+ * Plugin SDK — Base Plugin Class
+ *
+ * Provides a type-safe, ergonomic base class for third-party plugins.
+ * Wraps the lower-level plugin-system.ts with lifecycle hooks,
+ * typed configuration, and event-driven architecture.
+ *
+ * @module sdk/plugin-base
+ */
+// ========================================================================
+// Plugin Configuration
+// ========================================================================
+/**
+ * Typed plugin configuration wrapper.
+ * Provides get/set/reset with schema validation.
+ */
+export class PluginConfig {
+    config;
+    originalDefaults;
+    schema;
+    constructor(defaults, schema) {
+        this.config = { ...defaults };
+        this.originalDefaults = { ...defaults };
+        this.schema = schema ?? {};
+    }
+    /** Get a configuration value */
+    get(key) {
+        return this.config[key];
+    }
+    /** Set a configuration value (with type validation if schema defined) */
+    set(key, value) {
+        if (this.schema[key]) {
+            const expectedType = this.schema[key].type;
+            const actualType = typeof value;
+            if (actualType !== expectedType) {
+                throw new Error(`PluginConfig: expected "${String(key)}" to be ${expectedType}, got ${actualType}`);
+            }
+        }
+        this.config[key] = value;
+    }
+    /** Get all configuration */
+    getAll() {
+        return { ...this.config };
+    }
+    /** Reset configuration to defaults (original values overlaid with schema defaults) */
+    reset() {
+        // Start from original constructor values
+        this.config = { ...this.originalDefaults };
+        // Then overlay schema defaults for any keys that have them
+        for (const [key, rule] of Object.entries(this.schema)) {
+            if (rule.default !== undefined) {
+                this.config[key] = rule.default;
+            }
+        }
+    }
+    /** Validate configuration against schema */
+    validate() {
+        const issues = [];
+        for (const [key, rule] of Object.entries(this.schema)) {
+            if (rule.required && this.config[key] === undefined) {
+                issues.push(`Missing required config: ${key}`);
+            }
+        }
+        return issues;
+    }
+    getDefaults() {
+        const defaults = {};
+        for (const [key, rule] of Object.entries(this.schema)) {
+            if (rule.default !== undefined) {
+                defaults[key] = rule.default;
+            }
+        }
+        return defaults;
+    }
+}
+// ========================================================================
+// BasePlugin — Main SDK Class
+// ========================================================================
+/**
+ * Base plugin class that all third-party plugins should extend.
+ *
+ * Provides:
+ * - Lifecycle hooks (onActivate, onDeactivate, onConfigChange)
+ * - Typed configuration with validation
+ * - Logger scoped to plugin
+ * - Simple key-value storage
+ * - Access to SynapseXcoder API
+ *
+ * @example
+ * ```typescript
+ * class MyPlugin extends BasePlugin<{ apiKey: string }> {
+ *   id = "com.example.my-plugin";
+ *   name = "My Plugin";
+ *   version = "1.0.0";
+ *   description = "Does amazing things";
+ *   author = "Example Corp";
+ *
+ *   configDefaults = { apiKey: "" };
+ *
+ *   async onActivate(ctx: PluginRuntimeContext): Promise<void> {
+ *     ctx.logger.info("Plugin activated!");
+ *     const apiKey = this.config.get("apiKey");
+ *     // ...
+ *   }
+ * }
+ * ```
+ */
+export class BasePlugin {
+    // ── Optional metadata ──
+    minSynapseVersion;
+    category;
+    homepage;
+    license;
+    // ── Configuration ──
+    /** Default configuration values (override in subclass) */
+    configDefaults = {};
+    /** Optional schema for config validation */
+    configSchema;
+    /** Typed configuration instance */
+    config;
+    // ── Runtime state ──
+    /** Runtime context set during activation */
+    context = null;
+    /** Whether the plugin is currently active */
+    active = false;
+    /** When the plugin was last activated */
+    activatedAt = null;
+    // ── Internal storage (in-memory) ──
+    storage = new Map();
+    // ── Hook subscription cleanup ──
+    hookCleanups = [];
+    /**
+     * Get plugin metadata object.
+     */
+    get meta() {
+        return {
+            id: this.id,
+            name: this.name,
+            version: this.version,
+            description: this.description,
+            author: this.author,
+            minSynapseVersion: this.minSynapseVersion,
+            category: this.category,
+            homepage: this.homepage,
+            license: this.license,
+        };
+    }
+    /**
+     * Initialize the plugin — called by the SDK before activation.
+     * Sets up config and context.
+     */
+    initialize() {
+        this.config = new PluginConfig(this.configDefaults, this.configSchema);
+    }
+    /**
+     * Activate the plugin — called by the SDK when the plugin is loaded.
+     *
+     * @param context - Runtime context provided by the SDK
+     */
+    async activate(context) {
+        this.context = context;
+        this.active = true;
+        this.activatedAt = Date.now();
+        await this.onActivate(context);
+    }
+    /**
+     * Deactivate the plugin — called by the SDK when the plugin is disabled.
+     */
+    async deactivate() {
+        await this.onDeactivate();
+        // Clean up hook subscriptions
+        for (const cleanup of this.hookCleanups) {
+            cleanup();
+        }
+        this.hookCleanups = [];
+        this.active = false;
+        this.context = null;
+    }
+    // ── Lifecycle Hooks (override in subclass) ──
+    /**
+     * Called when the plugin is activated.
+     * Override to set up resources, register hooks, start background tasks.
+     */
+    async onActivate(_context) {
+        // Default: no-op
+    }
+    /**
+     * Called when the plugin is deactivated.
+     * Override to clean up resources, close connections, save state.
+     */
+    async onDeactivate() {
+        // Default: no-op
+    }
+    /**
+     * Called when plugin configuration changes at runtime.
+     * Override to react to config updates (e.g., reconnect with new API key).
+     */
+    onConfigChange(_changes) {
+        // Default: no-op
+    }
+    // ── Hook Subscription Helpers ──
+    /**
+     * Subscribe to a lifecycle hook with automatic cleanup on deactivation.
+     */
+    onHook(hook, handler) {
+        if (!this.context)
+            return;
+        const cleanup = this.context.hooks.on(hook, handler);
+        this.hookCleanups.push(cleanup);
+    }
+    // ── SDK Integration ──
+    /**
+     * Convert this BasePlugin to the lower-level PluginModule interface
+     * used by plugin-system.ts for registration.
+     */
+    toPluginModule() {
+        return {
+            activate: async (ctx) => {
+                await this.activate(ctx);
+            },
+            deactivate: async () => {
+                await this.deactivate();
+            },
+        };
+    }
+}
+//# sourceMappingURL=plugin-base.js.map

package/dist/sdk/plugin-base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-base.js","sourceRoot":"","sources":["../../src/sdk/plugin-base.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiCH,2EAA2E;AAC3E,uBAAuB;AACvB,2EAA2E;AAE3E;;;GAGG;AACH,MAAM,OAAO,YAAY;IACf,MAAM,CAAU;IAChB,gBAAgB,CAAU;IAC1B,MAAM,CAAiF;IAE/F,YACE,QAAiB,EACjB,MAAuF;QAEvF,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,gBAAgB,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAK,EAAU,CAAC;IACtC,CAAC;IAED,gCAAgC;IAChC,GAAG,CAA0B,GAAM;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,yEAAyE;IACzE,GAAG,CAA0B,GAAM,EAAE,KAAiB;QACpD,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC3C,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC;YAChC,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,2BAA2B,MAAM,CAAC,GAAG,CAAC,WAAW,YAAY,SAAS,UAAU,EAAE,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,4BAA4B;IAC5B,MAAM;QACJ,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,sFAAsF;IACtF,KAAK;QACH,yCAAyC;QACzC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3C,2DAA2D;QAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAc,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,QAAQ;QACN,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAoB,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrE,MAAM,CAAC,IAAI,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,WAAW;QACjB,MAAM,QAAQ,GAAqB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9B,QAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,QAAmB,CAAC;IAC7B,CAAC;CACF;AAyCD,2EAA2E;AAC3E,8BAA8B;AAC9B,2EAA2E;AAE3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAgB,UAAU;IAQ9B,0BAA0B;IACjB,iBAAiB,CAAU;IAC3B,QAAQ,CAA0B;IAClC,QAAQ,CAAU;IAClB,OAAO,CAAU;IAE1B,sBAAsB;IACtB,0DAA0D;IAC1D,cAAc,GAAY,EAAa,CAAC;IACxC,4CAA4C;IAC5C,YAAY,CAAkF;IAE9F,mCAAmC;IACnC,MAAM,CAAyB;IAE/B,sBAAsB;IACtB,4CAA4C;IAC5C,OAAO,GAAgC,IAAI,CAAC;IAC5C,6CAA6C;IAC7C,MAAM,GAAG,KAAK,CAAC;IACf,yCAAyC;IACzC,WAAW,GAAkB,IAAI,CAAC;IAElC,qCAAqC;IAC7B,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE7C,kCAAkC;IAC1B,YAAY,GAAsB,EAAE,CAAC;IAE7C;;OAEG;IACH,IAAI,IAAI;QACN,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAU,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAClF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA6B;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,8BAA8B;QAC9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,+CAA+C;IAE/C;;;OAGG;IACO,KAAK,CAAC,UAAU,CAAC,QAA8B;QACvD,iBAAiB;IACnB,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,YAAY;QAC1B,iBAAiB;IACnB,CAAC;IAED;;;OAGG;IACO,cAAc,CAAC,QAA0B;QACjD,iBAAiB;IACnB,CAAC;IAED,kCAAkC;IAElC;;OAEG;IACO,MAAM,CAAC,IAAmB,EAAE,OAAmB;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,wBAAwB;IAExB;;;OAGG;IACH,cAAc;QAIZ,OAAO;YACL,QAAQ,EAAE,KAAK,EAAE,GAAyB,EAAE,EAAE;gBAC5C,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,UAAU,EAAE,KAAK,IAAI,EAAE;gBACrB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/security/audit-rules.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Security Audit Rules — Built-in vulnerability detection patterns
+ *
+ * Defines the rule set used by SecurityAuditor to scan files.
+ */
+import type { AuditRule } from "./security-types.js";
+export declare const BUILTIN_RULES: AuditRule[];
+export declare function getRule(ruleId: string): AuditRule | undefined;
+export declare function getRulesByCategory(category: string): AuditRule[];
+export declare function getSeverityLevel(severity: string): number;
+export declare function meetsThreshold(severity: string, threshold: string): boolean;
+//# sourceMappingURL=audit-rules.d.ts.map

package/dist/security/audit-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-rules.d.ts","sourceRoot":"","sources":["../../src/security/audit-rules.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAMrD,eAAO,MAAM,aAAa,EAAE,SAAS,EAkLpC,CAAC;AAWF,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE7D;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,GACf,SAAS,EAAE,CAEb;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CASzD;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAET"}

package/dist/security/audit-rules.js

@@ -0,0 +1,214 @@
+/**
+ * Security Audit Rules — Built-in vulnerability detection patterns
+ *
+ * Defines the rule set used by SecurityAuditor to scan files.
+ */
+// ============================================================================
+// Built-in Rules
+// ============================================================================
+export const BUILTIN_RULES = [
+    // ─── Hardcoded Secrets ───────────────────────────────────────────────────
+    {
+        id: "SX-HC-001",
+        category: "hardcoded-secret",
+        severity: "critical",
+        title: "Hardcoded API Key or Secret",
+        description: "A hardcoded API key, password, or secret token was detected. These should be stored in environment variables or a secrets manager.",
+        remediation: "Move the secret to an environment variable or use a secrets manager like Vault.",
+        cwe: ["CWE-798", "CWE-259"],
+        confidence: 0.7,
+        pattern: /(?:api[_-]?key|apikey|secret|password|passwd|pwd|token|auth[_-]?token|access[_-]?key)[\s]*[:=][\s]*['"][A-Za-z0-9_\-+=/]{16,}['"]/i,
+    },
+    // ─── Command Injection ──────────────────────────────────────────────────
+    {
+        id: "SX-CI-001",
+        category: "command-injection",
+        severity: "critical",
+        title: "Potential Command Injection",
+        description: "User-controlled input may be passed to a command execution function without proper sanitization.",
+        remediation: "Use execFile or spawn with arguments array instead of exec. Validate and sanitize all user input.",
+        cwe: ["CWE-78", "CWE-88"],
+        confidence: 0.6,
+        pattern: /(?:exec|execSync)\([^)]*\$\{/,
+    },
+    {
+        id: "SX-CI-002",
+        category: "command-injection",
+        severity: "high",
+        title: "Shell Command with User Input",
+        description: "A shell command is being constructed with string interpolation, which may allow command injection if user input is involved.",
+        remediation: "Use child_process.spawn with an arguments array instead of string interpolation.",
+        cwe: ["CWE-78"],
+        confidence: 0.5,
+        pattern: /child_process\.(?:exec|execSync|spawn|spawnSync|fork)\s*\([^)]*\$\{/,
+    },
+    // ─── Path Traversal ──────────────────────────────────────────────────────
+    {
+        id: "SX-PT-001",
+        category: "path-traversal",
+        severity: "high",
+        title: "Potential Path Traversal",
+        description: "User input is used in file system operations without path sanitization, which may allow directory traversal attacks.",
+        remediation: "Use path.resolve/basename to restrict access to allowed directories. Validate paths against an allowlist.",
+        cwe: ["CWE-22", "CWE-23"],
+        confidence: 0.5,
+        pattern: /(?:readFile|readFileSync|writeFile|writeFileSync|unlink|unlinkSync|existsSync|createReadStream)\s*\([^)]*\$\{/,
+    },
+    // ─── Eval Usage ──────────────────────────────────────────────────────────
+    {
+        id: "SX-EV-001",
+        category: "eval-usage",
+        severity: "critical",
+        title: "Use of eval()",
+        description: "The eval() function executes arbitrary code strings and should not be used in production code.",
+        remediation: "Replace eval() with safer alternatives like JSON.parse, Function constructor, or domain-specific parsers.",
+        cwe: ["CWE-95", "CWE-94"],
+        confidence: 0.9,
+        pattern: /\beval\s*\(/,
+    },
+    {
+        id: "SX-EV-002",
+        category: "eval-usage",
+        severity: "high",
+        title: "Use of Function() Constructor",
+        description: "The Function constructor can execute arbitrary code strings, similar to eval().",
+        remediation: "Avoid dynamic code execution. Use predefined functions or a proper expression parser.",
+        cwe: ["CWE-94"],
+        confidence: 0.7,
+        pattern: /new\s+Function\s*\(/,
+    },
+    // ─── Prototype Pollution ─────────────────────────────────────────────────
+    {
+        id: "SX-PP-001",
+        category: "prototype-pollution",
+        severity: "high",
+        title: "Potential Prototype Pollution",
+        description: "Object merge or assignment operations may allow prototype pollution if user-controlled keys are used.",
+        remediation: "Use Object.create(null) for dictionaries, validate keys against a allowlist, or use Map instead of plain objects.",
+        cwe: ["CWE-1321"],
+        confidence: 0.4,
+        pattern: /(?:__proto__|constructor\.prototype|Object\.assign\s*\([^,]+,\s*\w+\s*\))/,
+    },
+    // ─── SQL Injection ───────────────────────────────────────────────────────
+    {
+        id: "SX-SQL-001",
+        category: "sql-injection",
+        severity: "critical",
+        title: "Potential SQL Injection",
+        description: "String concatenation is used in SQL queries, which may allow SQL injection attacks.",
+        remediation: "Use parameterized queries (prepared statements) instead of string concatenation.",
+        cwe: ["CWE-89"],
+        confidence: 0.6,
+        pattern: /(?:SELECT|INSERT|UPDATE|DELETE)\s+.*?['"]\s*\+\s*\w/,
+    },
+    // ─── XSS ─────────────────────────────────────────────────────────────────
+    {
+        id: "SX-XSS-001",
+        category: "xss",
+        severity: "high",
+        title: "Potential Cross-Site Scripting",
+        description: "User input is directly assigned to innerHTML or dangerouslySetInnerHTML, which may allow XSS attacks.",
+        remediation: "Use textContent or safely sanitize HTML with a library like DOMPurify.",
+        cwe: ["CWE-79"],
+        confidence: 0.7,
+        pattern: /(?:innerHTML|dangerouslySetInnerHTML)\s*[:=]/,
+    },
+    // ─── Insecure Randomness ─────────────────────────────────────────────────
+    {
+        id: "SX-IR-001",
+        category: "insecure-randomness",
+        severity: "low",
+        title: "Insecure Random Number Generation",
+        description: "Math.random() is not cryptographically secure and should not be used for security-sensitive operations.",
+        remediation: "Use crypto.randomBytes() or crypto.randomUUID() for security-sensitive random values.",
+        cwe: ["CWE-338"],
+        confidence: 0.5,
+        pattern: /Math\.random\s*\(/,
+    },
+    // ─── Debug Endpoint ──────────────────────────────────────────────────────
+    {
+        id: "SX-DB-001",
+        category: "debug-endpoint",
+        severity: "medium",
+        title: "Debug or Test Endpoint Exposed",
+        description: "A debug, test, or status endpoint may be exposed in production, leaking internal information.",
+        remediation: "Remove or gate debug endpoints behind authentication or environment checks.",
+        cwe: ["CWE-489", "CWE-215"],
+        confidence: 0.3,
+        pattern: /(?:app\.(?:get|post|put|delete)\s*\(\s*['"](?:\/debug|\/test|\/status|\/health|\/info))/i,
+    },
+    // ─── Information Exposure ────────────────────────────────────────────────
+    {
+        id: "SX-IE-001",
+        category: "information-exposure",
+        severity: "medium",
+        title: "Stack Trace Exposure",
+        description: "Error stack traces may be logged or returned to users, leaking internal paths and code structure.",
+        remediation: "Log stack traces only in development mode. Return generic error messages to users.",
+        cwe: ["CWE-209", "CWE-200"],
+        confidence: 0.5,
+        pattern: /\.stack\b/,
+    },
+    {
+        id: "SX-IE-002",
+        category: "information-exposure",
+        severity: "low",
+        title: "Console Log with Sensitive Data",
+        description: "console.log or console.debug statements may expose sensitive data in production logs.",
+        remediation: "Use a structured logging library with log levels. Remove console.log from production code.",
+        cwe: ["CWE-200"],
+        confidence: 0.3,
+        pattern: /console\.(?:log|debug|info)\s*\(/,
+    },
+    // ─── Insecure TLS ────────────────────────────────────────────────────────
+    {
+        id: "SX-TLS-001",
+        category: "insecure-tls",
+        severity: "high",
+        title: "Insecure TLS/SSL Configuration",
+        description: "TLS verification is disabled (NODE_TLS_REJECT_UNAUTHORIZED=0 or rejectUnauthorized: false), making connections vulnerable to MITM attacks.",
+        remediation: "Enable TLS verification. Use rejectUnauthorized: true and provide proper CA certificates.",
+        cwe: ["CWE-295"],
+        confidence: 0.8,
+        pattern: /rejectUnauthorized\s*:\s*false|NODE_TLS_REJECT_UNAUTHORIZED\s*=\s*0/i,
+    },
+    // ─── Insecure Deserialization ────────────────────────────────────────────
+    {
+        id: "SX-DS-001",
+        category: "insecure-deserialization",
+        severity: "high",
+        title: "Insecure Deserialization",
+        description: "JSON.parse or similar deserialization of user-controlled input may lead to prototype pollution or denial of service.",
+        remediation: "Validate input size and structure before parsing. Consider using a streaming parser for large inputs.",
+        cwe: ["CWE-502"],
+        confidence: 0.3,
+        pattern: /JSON\.parse\s*\([^)]*(?:req|request|body|input|userInput|params|query)/,
+    },
+];
+// ============================================================================
+// Rule Lookup
+// ============================================================================
+const ruleMap = new Map();
+for (const rule of BUILTIN_RULES) {
+    ruleMap.set(rule.id, rule);
+}
+export function getRule(ruleId) {
+    return ruleMap.get(ruleId);
+}
+export function getRulesByCategory(category) {
+    return BUILTIN_RULES.filter((r) => r.category === category);
+}
+export function getSeverityLevel(severity) {
+    const levels = {
+        critical: 4,
+        high: 3,
+        medium: 2,
+        low: 1,
+        info: 0,
+    };
+    return levels[severity] ?? 0;
+}
+export function meetsThreshold(severity, threshold) {
+    return getSeverityLevel(severity) >= getSeverityLevel(threshold);
+}
+//# sourceMappingURL=audit-rules.js.map

package/dist/security/audit-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-rules.js","sourceRoot":"","sources":["../../src/security/audit-rules.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,aAAa,GAAgB;IACxC,4EAA4E;IAC5E;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,oIAAoI;QACjJ,WAAW,EAAE,iFAAiF;QAC9F,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3B,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,oIAAoI;KAC9I;IACD,2EAA2E;IAC3E;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,mBAAmB;QAC7B,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,kGAAkG;QAC/G,WAAW,EAAE,mGAAmG;QAChH,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACzB,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,8BAA8B;KACxC;IACD;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,mBAAmB;QAC7B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,8HAA8H;QAC3I,WAAW,EAAE,kFAAkF;QAC/F,GAAG,EAAE,CAAC,QAAQ,CAAC;QACf,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,qEAAqE;KAC/E;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,sHAAsH;QACnI,WAAW,EAAE,2GAA2G;QACxH,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACzB,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,+GAA+G;KACzH;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,gGAAgG;QAC7G,WAAW,EAAE,2GAA2G;QACxH,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACzB,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,aAAa;KACvB;IACD;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,iFAAiF;QAC9F,WAAW,EAAE,uFAAuF;QACpG,GAAG,EAAE,CAAC,QAAQ,CAAC;QACf,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,qBAAqB;KAC/B;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,uGAAuG;QACpH,WAAW,EAAE,mHAAmH;QAChI,GAAG,EAAE,CAAC,UAAU,CAAC;QACjB,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,2EAA2E;KACrF;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,qFAAqF;QAClG,WAAW,EAAE,kFAAkF;QAC/F,GAAG,EAAE,CAAC,QAAQ,CAAC;QACf,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,qDAAqD;KAC/D;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,uGAAuG;QACpH,WAAW,EAAE,wEAAwE;QACrF,GAAG,EAAE,CAAC,QAAQ,CAAC;QACf,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,8CAA8C;KACxD;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,yGAAyG;QACtH,WAAW,EAAE,uFAAuF;QACpG,GAAG,EAAE,CAAC,SAAS,CAAC;QAChB,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,mBAAmB;KAC7B;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,+FAA+F;QAC5G,WAAW,EAAE,6EAA6E;QAC1F,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3B,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,0FAA0F;KACpG;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,mGAAmG;QAChH,WAAW,EAAE,oFAAoF;QACjG,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3B,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,WAAW;KACrB;IACD;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,uFAAuF;QACpG,WAAW,EAAE,4FAA4F;QACzG,GAAG,EAAE,CAAC,SAAS,CAAC;QAChB,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,kCAAkC;KAC5C;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,cAAc;QACxB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,4IAA4I;QACzJ,WAAW,EAAE,2FAA2F;QACxG,GAAG,EAAE,CAAC,SAAS,CAAC;QAChB,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,sEAAsE;KAChF;IACD,4EAA4E;IAC5E;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,0BAA0B;QACpC,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,sHAAsH;QACnI,WAAW,EAAE,uGAAuG;QACpH,GAAG,EAAE,CAAC,SAAS,CAAC;QAChB,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,wEAAwE;KAClF;CACF,CAAC;AAEF,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;AAC7C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,MAAc;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAgB;IAEhB,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,MAAM,GAA2B;QACrC,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,SAAiB;IAEjB,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;AACnE,CAAC"}

package/dist/security/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * SynapseXcoder V6 — Security Audit & SARIF Export
+ *
+ * Phase 11: Security vulnerability scanning with SARIF v2.1.0 export.
+ * Includes built-in rules for common vulnerability patterns.
+ *
+ * @packageDocumentation
+ */
+export { SecurityAuditor, createAuditor } from "./security-auditor.js";
+export { SarifExporter, createSarifExporter } from "./sarif-exporter.js";
+export { BUILTIN_RULES, getRule, getRulesByCategory, meetsThreshold } from "./audit-rules.js";
+export * from "./security-types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC9F,cAAc,qBAAqB,CAAC"}

package/dist/security/index.js

@@ -0,0 +1,13 @@
+/**
+ * SynapseXcoder V6 — Security Audit & SARIF Export
+ *
+ * Phase 11: Security vulnerability scanning with SARIF v2.1.0 export.
+ * Includes built-in rules for common vulnerability patterns.
+ *
+ * @packageDocumentation
+ */
+export { SecurityAuditor, createAuditor } from "./security-auditor.js";
+export { SarifExporter, createSarifExporter } from "./sarif-exporter.js";
+export { BUILTIN_RULES, getRule, getRulesByCategory, meetsThreshold } from "./audit-rules.js";
+export * from "./security-types.js";
+//# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC9F,cAAc,qBAAqB,CAAC"}

package/dist/security/sarif-exporter.d.ts

@@ -0,0 +1,36 @@
+/**
+ * SARIF Exporter — Converts audit findings to SARIF format
+ *
+ * SARIF (Static Analysis Results Interchange Format) is an OASIS
+ * standard for static analysis tool output. This generates
+ * SARIF v2.1.0 compliant JSON.
+ */
+import type { AuditResult } from "./security-types.js";
+export declare class SarifExporter {
+    private readonly toolName;
+    private readonly toolVersion;
+    private readonly informationUri;
+    constructor(options?: {
+        toolName?: string;
+        toolVersion?: string;
+        informationUri?: string;
+    });
+    /**
+     * Convert an audit result to SARIF JSON string
+     */
+    toSarifJson(result: AuditResult): string;
+    /**
+     * Write SARIF output to a file
+     */
+    writeToFile(result: AuditResult, filePath: string): void;
+    private buildSarifLog;
+    private buildSarifRules;
+    private buildSarifResults;
+    private buildRuleIndexMap;
+    /**
+     * Export a human-readable markdown summary
+     */
+    toMarkdown(result: AuditResult): string;
+}
+export declare function createSarifExporter(options?: ConstructorParameters<typeof SarifExporter>[0]): SarifExporter;
+//# sourceMappingURL=sarif-exporter.d.ts.map

package/dist/security/sarif-exporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif-exporter.d.ts","sourceRoot":"","sources":["../../src/security/sarif-exporter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EACV,WAAW,EAQZ,MAAM,qBAAqB,CAAC;AAmB7B,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;gBAE5B,OAAO,CAAC,EAAE;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB;IASD;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM;IAKxC;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IASxD,OAAO,CAAC,aAAa;IAoCrB,OAAO,CAAC,eAAe;IAmCvB,OAAO,CAAC,iBAAiB;IAmCzB,OAAO,CAAC,iBAAiB;IAazB;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM;CA+DxC;AAMD,wBAAgB,mBAAmB,CACjC,OAAO,CAAC,EAAE,qBAAqB,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,GACvD,aAAa,CAEf"}