vaspera 2.10.0 → 2.11.0

package/dist/scanners/deploy/provider-detector.js

@@ -0,0 +1,177 @@
+/**
+ * Provider Detector
+ *
+ * Detects deployment provider from project configuration.
+ *
+ * @module scanners/deploy/provider-detector
+ */
+import { readFile, access } from "fs/promises";
+import { join } from "path";
+import { logger } from "../../logger.js";
+/**
+ * Provider detection patterns
+ */
+const PROVIDER_PATTERNS = [
+    {
+        provider: "vercel",
+        files: ["vercel.json", "vercel.ts", ".vercel/project.json"],
+        packageIndicators: ["@vercel/node", "@vercel/next", "vercel"],
+        envIndicators: ["VERCEL", "VERCEL_URL", "VERCEL_ENV"],
+    },
+    {
+        provider: "aws",
+        files: ["serverless.yml", "serverless.yaml", "samconfig.toml", "cdk.json", "amplify.yml"],
+        packageIndicators: ["@aws-cdk/core", "aws-cdk-lib", "serverless", "@aws-amplify/cli"],
+        envIndicators: ["AWS_REGION", "AWS_LAMBDA_FUNCTION_NAME"],
+    },
+    {
+        provider: "gcp",
+        files: ["app.yaml", "cloudbuild.yaml", ".gcloudignore"],
+        packageIndicators: ["@google-cloud/functions-framework", "firebase-functions"],
+        envIndicators: ["GOOGLE_CLOUD_PROJECT", "GCLOUD_PROJECT", "GCP_PROJECT"],
+    },
+    {
+        provider: "railway",
+        files: ["railway.json", "railway.toml"],
+        packageIndicators: [],
+        envIndicators: ["RAILWAY_ENVIRONMENT", "RAILWAY_PROJECT_ID"],
+    },
+    {
+        provider: "render",
+        files: ["render.yaml"],
+        packageIndicators: [],
+        envIndicators: ["RENDER", "RENDER_SERVICE_ID"],
+    },
+    {
+        provider: "fly",
+        files: ["fly.toml"],
+        packageIndicators: [],
+        envIndicators: ["FLY_APP_NAME", "FLY_REGION"],
+    },
+];
+/**
+ * Detect deployment provider from project
+ */
+export async function detectProvider(projectPath) {
+    const indicators = [];
+    let bestMatch;
+    let bestConfidence = 0;
+    for (const pattern of PROVIDER_PATTERNS) {
+        let confidence = 0;
+        // Check for provider-specific files
+        for (const file of pattern.files) {
+            try {
+                await access(join(projectPath, file));
+                confidence += 40;
+                indicators.push(`Found ${file}`);
+            }
+            catch {
+                // File doesn't exist
+            }
+        }
+        // Check package.json for dependencies
+        try {
+            const packageJsonPath = join(projectPath, "package.json");
+            const packageJson = JSON.parse(await readFile(packageJsonPath, "utf-8"));
+            const allDeps = {
+                ...packageJson.dependencies,
+                ...packageJson.devDependencies,
+            };
+            for (const indicator of pattern.packageIndicators) {
+                if (allDeps[indicator]) {
+                    confidence += 25;
+                    indicators.push(`Found ${indicator} in package.json`);
+                }
+            }
+        }
+        catch {
+            // No package.json or parse error
+        }
+        // Check environment variables
+        for (const envVar of pattern.envIndicators) {
+            if (process.env[envVar]) {
+                confidence += 35;
+                indicators.push(`Found ${envVar} environment variable`);
+            }
+        }
+        if (confidence > bestConfidence) {
+            bestConfidence = confidence;
+            bestMatch = pattern;
+        }
+    }
+    if (bestMatch && bestConfidence > 0) {
+        // Try to get project ID from config
+        let projectId;
+        let configPath;
+        if (bestMatch.provider === "vercel") {
+            try {
+                const vercelProject = JSON.parse(await readFile(join(projectPath, ".vercel/project.json"), "utf-8"));
+                projectId = vercelProject.projectId;
+                configPath = ".vercel/project.json";
+            }
+            catch {
+                // No project.json
+            }
+        }
+        logger.info("deploy.provider_detected", {
+            provider: bestMatch.provider,
+            confidence: Math.min(bestConfidence, 100),
+        });
+        return {
+            provider: bestMatch.provider,
+            confidence: Math.min(bestConfidence, 100),
+            indicators,
+            projectId,
+            configPath,
+        };
+    }
+    return {
+        provider: "unknown",
+        confidence: 0,
+        indicators: ["No deployment provider detected"],
+    };
+}
+/**
+ * Get provider-specific deployment URL pattern
+ */
+export function getDeploymentUrlPattern(provider) {
+    switch (provider) {
+        case "vercel":
+            return /https:\/\/[\w-]+\.vercel\.app/;
+        case "railway":
+            return /https:\/\/[\w-]+\.railway\.app/;
+        case "render":
+            return /https:\/\/[\w-]+\.onrender\.com/;
+        case "fly":
+            return /https:\/\/[\w-]+\.fly\.dev/;
+        default:
+            return null;
+    }
+}
+/**
+ * Check if running in a deployment environment
+ */
+export function isDeploymentEnvironment() {
+    return !!(process.env.VERCEL ||
+        process.env.AWS_LAMBDA_FUNCTION_NAME ||
+        process.env.GOOGLE_CLOUD_PROJECT ||
+        process.env.RAILWAY_ENVIRONMENT ||
+        process.env.RENDER ||
+        process.env.FLY_APP_NAME);
+}
+/**
+ * Get current environment from provider
+ */
+export function getCurrentEnvironment(provider) {
+    switch (provider) {
+        case "vercel":
+            return process.env.VERCEL_ENV || "development";
+        case "railway":
+            return process.env.RAILWAY_ENVIRONMENT || "development";
+        case "render":
+            return process.env.RENDER ? "production" : "development";
+        default:
+            return process.env.NODE_ENV || "development";
+    }
+}
+//# sourceMappingURL=provider-detector.js.map

package/dist/scanners/deploy/provider-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-detector.js","sourceRoot":"","sources":["../../../src/scanners/deploy/provider-detector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAGzC;;GAEG;AACH,MAAM,iBAAiB,GAKlB;IACH;QACE,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,sBAAsB,CAAC;QAC3D,iBAAiB,EAAE,CAAC,cAAc,EAAE,cAAc,EAAE,QAAQ,CAAC;QAC7D,aAAa,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC;KACtD;IACD;QACE,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,CAAC;QACzF,iBAAiB,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,CAAC;QACrF,aAAa,EAAE,CAAC,YAAY,EAAE,0BAA0B,CAAC;KAC1D;IACD;QACE,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,eAAe,CAAC;QACvD,iBAAiB,EAAE,CAAC,mCAAmC,EAAE,oBAAoB,CAAC;QAC9E,aAAa,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,EAAE,aAAa,CAAC;KACzE;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;QACvC,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;KAC7D;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,CAAC,aAAa,CAAC;QACtB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC;KAC/C;IACD;QACE,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,UAAU,CAAC;QACnB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC;KAC9C;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAmB;IACtD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,SAAoD,CAAC;IACzD,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,oCAAoC;QACpC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;gBACtC,UAAU,IAAI,EAAE,CAAC;gBACjB,UAAU,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;YAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;YACzE,MAAM,OAAO,GAAG;gBACd,GAAG,WAAW,CAAC,YAAY;gBAC3B,GAAG,WAAW,CAAC,eAAe;aAC/B,CAAC;YAEF,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBAClD,IAAI,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBACvB,UAAU,IAAI,EAAE,CAAC;oBACjB,UAAU,CAAC,IAAI,CAAC,SAAS,SAAS,kBAAkB,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;QAED,8BAA8B;QAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,UAAU,IAAI,EAAE,CAAC;gBACjB,UAAU,CAAC,IAAI,CAAC,SAAS,MAAM,uBAAuB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;YAChC,cAAc,GAAG,UAAU,CAAC;YAC5B,SAAS,GAAG,OAAO,CAAC;QACtB,CAAC;IACH,CAAC;IAED,IAAI,SAAS,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QACpC,oCAAoC;QACpC,IAAI,SAA6B,CAAC;QAClC,IAAI,UAA8B,CAAC;QAEnC,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAC9B,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC,CACnE,CAAC;gBACF,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;gBACpC,UAAU,GAAG,sBAAsB,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;YACtC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC;SAC1C,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC;YACzC,UAAU;YACV,SAAS;YACT,UAAU;SACX,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,CAAC;QACb,UAAU,EAAE,CAAC,iCAAiC,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAwB;IAC9D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,+BAA+B,CAAC;QACzC,KAAK,SAAS;YACZ,OAAO,gCAAgC,CAAC;QAC1C,KAAK,QAAQ;YACX,OAAO,iCAAiC,CAAC;QAC3C,KAAK,KAAK;YACR,OAAO,4BAA4B,CAAC;QACtC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,CAAC,CAAC,CACP,OAAO,CAAC,GAAG,CAAC,MAAM;QAClB,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,OAAO,CAAC,GAAG,CAAC,MAAM;QAClB,OAAO,CAAC,GAAG,CAAC,YAAY,CACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,CAAC;QACjD,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,aAAa,CAAC;QAC1D,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;QAC3D;YACE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/scanners/deploy/types.d.ts

@@ -0,0 +1,406 @@
+/**
+ * Deployment Verification Types
+ *
+ * Types for canary deployment, health monitoring, and rollback detection.
+ *
+ * @module scanners/deploy/types
+ */
+import { z } from "zod";
+/**
+ * Supported deployment providers
+ */
+export type DeployProvider = "vercel" | "aws" | "gcp" | "railway" | "render" | "fly" | "unknown";
+/**
+ * Deployment environment
+ */
+export type DeployEnvironment = "production" | "preview" | "staging" | "development";
+/**
+ * Deployment status
+ */
+export type DeployStatus = "pending" | "building" | "deploying" | "ready" | "failed" | "canceled" | "rolled_back";
+/**
+ * Health check result
+ */
+export interface HealthCheckResult {
+    endpoint: string;
+    status: "healthy" | "degraded" | "unhealthy" | "timeout";
+    statusCode?: number;
+    responseTime: number;
+    error?: string;
+    checkedAt: string;
+}
+/**
+ * Deployment info
+ */
+export interface DeploymentInfo {
+    id: string;
+    provider: DeployProvider;
+    environment: DeployEnvironment;
+    status: DeployStatus;
+    url: string;
+    createdAt: string;
+    readyAt?: string;
+    meta?: {
+        commit?: string;
+        branch?: string;
+        buildTime?: number;
+    };
+}
+/**
+ * Canary deployment config
+ */
+export declare const CanaryConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    trafficPercent: z.ZodDefault<z.ZodNumber>;
+    duration: z.ZodDefault<z.ZodString>;
+    thresholds: z.ZodOptional<z.ZodObject<{
+        errorRate: z.ZodDefault<z.ZodNumber>;
+        p95Latency: z.ZodDefault<z.ZodNumber>;
+        healthCheckFailures: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        errorRate: number;
+        p95Latency: number;
+        healthCheckFailures: number;
+    }, {
+        errorRate?: number | undefined;
+        p95Latency?: number | undefined;
+        healthCheckFailures?: number | undefined;
+    }>>;
+    rollbackOnFailure: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    duration: string;
+    trafficPercent: number;
+    rollbackOnFailure: boolean;
+    thresholds?: {
+        errorRate: number;
+        p95Latency: number;
+        healthCheckFailures: number;
+    } | undefined;
+}, {
+    enabled?: boolean | undefined;
+    duration?: string | undefined;
+    thresholds?: {
+        errorRate?: number | undefined;
+        p95Latency?: number | undefined;
+        healthCheckFailures?: number | undefined;
+    } | undefined;
+    trafficPercent?: number | undefined;
+    rollbackOnFailure?: boolean | undefined;
+}>;
+export type CanaryConfig = z.infer<typeof CanaryConfigSchema>;
+/**
+ * Smoke test definition
+ */
+export declare const SmokeTestSchema: z.ZodObject<{
+    name: z.ZodString;
+    endpoint: z.ZodString;
+    method: z.ZodDefault<z.ZodEnum<["GET", "POST", "PUT", "DELETE"]>>;
+    expectedStatus: z.ZodDefault<z.ZodNumber>;
+    timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    body: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    assertions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<["status", "body", "header", "latency"]>;
+        path: z.ZodOptional<z.ZodString>;
+        operator: z.ZodEnum<["eq", "ne", "gt", "lt", "contains", "matches"]>;
+        value: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
+    }, "strip", z.ZodTypeAny, {
+        value: string | number;
+        type: "status" | "body" | "header" | "latency";
+        operator: "eq" | "ne" | "gt" | "lt" | "contains" | "matches";
+        path?: string | undefined;
+    }, {
+        value: string | number;
+        type: "status" | "body" | "header" | "latency";
+        operator: "eq" | "ne" | "gt" | "lt" | "contains" | "matches";
+        path?: string | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    timeout: number;
+    endpoint: string;
+    method: "GET" | "POST" | "PUT" | "DELETE";
+    expectedStatus: number;
+    headers?: Record<string, string> | undefined;
+    body?: Record<string, unknown> | undefined;
+    assertions?: {
+        value: string | number;
+        type: "status" | "body" | "header" | "latency";
+        operator: "eq" | "ne" | "gt" | "lt" | "contains" | "matches";
+        path?: string | undefined;
+    }[] | undefined;
+}, {
+    name: string;
+    endpoint: string;
+    timeout?: number | undefined;
+    headers?: Record<string, string> | undefined;
+    body?: Record<string, unknown> | undefined;
+    method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
+    expectedStatus?: number | undefined;
+    assertions?: {
+        value: string | number;
+        type: "status" | "body" | "header" | "latency";
+        operator: "eq" | "ne" | "gt" | "lt" | "contains" | "matches";
+        path?: string | undefined;
+    }[] | undefined;
+}>;
+export type SmokeTest = z.infer<typeof SmokeTestSchema>;
+/**
+ * Deployment config (YAML schema)
+ */
+export declare const DeployConfigSchema: z.ZodObject<{
+    provider: z.ZodOptional<z.ZodEnum<["vercel", "aws", "gcp", "railway", "render", "fly"]>>;
+    healthEndpoints: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    smokeTests: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        endpoint: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<["GET", "POST", "PUT", "DELETE"]>>;
+        expectedStatus: z.ZodDefault<z.ZodNumber>;
+        timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        body: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        assertions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<["status", "body", "header", "latency"]>;
+            path: z.ZodOptional<z.ZodString>;
+            operator: z.ZodEnum<["eq", "ne", "gt", "lt", "contains", "matches"]>;
+            value: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
+        }, "strip", z.ZodTypeAny, {
+            value: string | number;
+            type: "status" | "body" | "header" | "latency";
+            operator: "eq" | "ne" | "gt" | "lt" | "contains" | "matches";
+            path?: string | undefined;
+        }, {
+            value: string | number;
+            type: "status" | "body" | "header" | "latency";
+            operator: "eq" | "ne" | "gt" | "lt" | "contains" | "matches";
+            path?: string | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        timeout: number;
+        endpoint: string;
+        method: "GET" | "POST" | "PUT" | "DELETE";
+        expectedStatus: number;
+        headers?: Record<string, string> | undefined;
+        body?: Record<string, unknown> | undefined;
+        assertions?: {
+            value: string | number;
+            type: "status" | "body" | "header" | "latency";
+            operator: "eq" | "ne" | "gt" | "lt" | "contains" | "matches";
+            path?: string | undefined;
+        }[] | undefined;
+    }, {
+        name: string;
+        endpoint: string;
+        timeout?: number | undefined;
+        headers?: Record<string, string> | undefined;
+        body?: Record<string, unknown> | undefined;
+        method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
+        expectedStatus?: number | undefined;
+        assertions?: {
+            value: string | number;
+            type: "status" | "body" | "header" | "latency";
+            operator: "eq" | "ne" | "gt" | "lt" | "contains" | "matches";
+            path?: string | undefined;
+        }[] | undefined;
+    }>, "many">>;
+    canary: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        trafficPercent: z.ZodDefault<z.ZodNumber>;
+        duration: z.ZodDefault<z.ZodString>;
+        thresholds: z.ZodOptional<z.ZodObject<{
+            errorRate: z.ZodDefault<z.ZodNumber>;
+            p95Latency: z.ZodDefault<z.ZodNumber>;
+            healthCheckFailures: z.ZodDefault<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            errorRate: number;
+            p95Latency: number;
+            healthCheckFailures: number;
+        }, {
+            errorRate?: number | undefined;
+            p95Latency?: number | undefined;
+            healthCheckFailures?: number | undefined;
+        }>>;
+        rollbackOnFailure: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        duration: string;
+        trafficPercent: number;
+        rollbackOnFailure: boolean;
+        thresholds?: {
+            errorRate: number;
+            p95Latency: number;
+            healthCheckFailures: number;
+        } | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        duration?: string | undefined;
+        thresholds?: {
+            errorRate?: number | undefined;
+            p95Latency?: number | undefined;
+            healthCheckFailures?: number | undefined;
+        } | undefined;
+        trafficPercent?: number | undefined;
+        rollbackOnFailure?: boolean | undefined;
+    }>>;
+    rollback: z.ZodOptional<z.ZodObject<{
+        autoRollback: z.ZodDefault<z.ZodBoolean>;
+        retainVersions: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        autoRollback: boolean;
+        retainVersions: number;
+    }, {
+        autoRollback?: boolean | undefined;
+        retainVersions?: number | undefined;
+    }>>;
+    notifications: z.ZodOptional<z.ZodObject<{
+        slack: z.ZodOptional<z.ZodString>;
+        email: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        email?: string[] | undefined;
+        slack?: string | undefined;
+    }, {
+        email?: string[] | undefined;
+        slack?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    healthEndpoints: string[];
+    provider?: "vercel" | "aws" | "gcp" | "railway" | "render" | "fly" | undefined;
+    canary?: {
+        enabled: boolean;
+        duration: string;
+        trafficPercent: number;
+        rollbackOnFailure: boolean;
+        thresholds?: {
+            errorRate: number;
+            p95Latency: number;
+            healthCheckFailures: number;
+        } | undefined;
+    } | undefined;
+    smokeTests?: {
+        name: string;
+        timeout: number;
+        endpoint: string;
+        method: "GET" | "POST" | "PUT" | "DELETE";
+        expectedStatus: number;
+        headers?: Record<string, string> | undefined;
+        body?: Record<string, unknown> | undefined;
+        assertions?: {
+            value: string | number;
+            type: "status" | "body" | "header" | "latency";
+            operator: "eq" | "ne" | "gt" | "lt" | "contains" | "matches";
+            path?: string | undefined;
+        }[] | undefined;
+    }[] | undefined;
+    rollback?: {
+        autoRollback: boolean;
+        retainVersions: number;
+    } | undefined;
+    notifications?: {
+        email?: string[] | undefined;
+        slack?: string | undefined;
+    } | undefined;
+}, {
+    provider?: "vercel" | "aws" | "gcp" | "railway" | "render" | "fly" | undefined;
+    canary?: {
+        enabled?: boolean | undefined;
+        duration?: string | undefined;
+        thresholds?: {
+            errorRate?: number | undefined;
+            p95Latency?: number | undefined;
+            healthCheckFailures?: number | undefined;
+        } | undefined;
+        trafficPercent?: number | undefined;
+        rollbackOnFailure?: boolean | undefined;
+    } | undefined;
+    healthEndpoints?: string[] | undefined;
+    smokeTests?: {
+        name: string;
+        endpoint: string;
+        timeout?: number | undefined;
+        headers?: Record<string, string> | undefined;
+        body?: Record<string, unknown> | undefined;
+        method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
+        expectedStatus?: number | undefined;
+        assertions?: {
+            value: string | number;
+            type: "status" | "body" | "header" | "latency";
+            operator: "eq" | "ne" | "gt" | "lt" | "contains" | "matches";
+            path?: string | undefined;
+        }[] | undefined;
+    }[] | undefined;
+    rollback?: {
+        autoRollback?: boolean | undefined;
+        retainVersions?: number | undefined;
+    } | undefined;
+    notifications?: {
+        email?: string[] | undefined;
+        slack?: string | undefined;
+    } | undefined;
+}>;
+export type DeployConfig = z.infer<typeof DeployConfigSchema>;
+/**
+ * Smoke test result
+ */
+export interface SmokeTestResult {
+    name: string;
+    endpoint: string;
+    passed: boolean;
+    statusCode: number;
+    responseTime: number;
+    assertions: Array<{
+        type: string;
+        expected: string | number;
+        actual: string | number;
+        passed: boolean;
+    }>;
+    error?: string;
+}
+/**
+ * Canary analysis result
+ */
+export interface CanaryAnalysis {
+    phase: "running" | "passed" | "failed" | "promoted" | "rolled_back";
+    trafficPercent: number;
+    duration: number;
+    metrics: {
+        errorRate: number;
+        p95Latency: number;
+        requestCount: number;
+        healthChecksPassed: number;
+        healthChecksFailed: number;
+    };
+    thresholdsPassed: boolean;
+    recommendation: "promote" | "rollback" | "continue";
+}
+/**
+ * Deployment verification result
+ */
+export interface DeployVerificationResult {
+    success: boolean;
+    provider: DeployProvider;
+    deployment?: DeploymentInfo;
+    healthChecks: HealthCheckResult[];
+    smokeTests: SmokeTestResult[];
+    canary?: CanaryAnalysis;
+    score: {
+        healthScore: number;
+        smokeTestScore: number;
+        canaryScore: number;
+        overallScore: number;
+    };
+    duration: number;
+    error?: string;
+}
+/**
+ * Provider detection result
+ */
+export interface ProviderDetection {
+    provider: DeployProvider;
+    confidence: number;
+    indicators: string[];
+    projectId?: string;
+    configPath?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/scanners/deploy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/scanners/deploy/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAEjG;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;AAErF;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,UAAU,GACV,WAAW,GACX,OAAO,GACP,QAAQ,GACR,UAAU,GACV,aAAa,CAAC;AAElB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAa7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;QAC1B,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;QACxB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,CAAC;IACpE,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,kBAAkB,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,cAAc,CAAC;IACzB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,cAAc,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/scanners/deploy/types.js

@@ -0,0 +1,58 @@
+/**
+ * Deployment Verification Types
+ *
+ * Types for canary deployment, health monitoring, and rollback detection.
+ *
+ * @module scanners/deploy/types
+ */
+import { z } from "zod";
+/**
+ * Canary deployment config
+ */
+export const CanaryConfigSchema = z.object({
+    enabled: z.boolean().default(true),
+    trafficPercent: z.number().min(0).max(100).default(10),
+    duration: z.string().default("10m").describe("How long to run canary before promotion"),
+    thresholds: z.object({
+        errorRate: z.number().default(0.01).describe("Max error rate to pass"),
+        p95Latency: z.number().default(500).describe("Max p95 latency (ms)"),
+        healthCheckFailures: z.number().default(2).describe("Max consecutive health check failures"),
+    }).optional(),
+    rollbackOnFailure: z.boolean().default(true),
+});
+/**
+ * Smoke test definition
+ */
+export const SmokeTestSchema = z.object({
+    name: z.string(),
+    endpoint: z.string(),
+    method: z.enum(["GET", "POST", "PUT", "DELETE"]).default("GET"),
+    expectedStatus: z.number().default(200),
+    timeout: z.number().optional().default(10000),
+    headers: z.record(z.string()).optional(),
+    body: z.record(z.unknown()).optional(),
+    assertions: z.array(z.object({
+        type: z.enum(["status", "body", "header", "latency"]),
+        path: z.string().optional(),
+        operator: z.enum(["eq", "ne", "gt", "lt", "contains", "matches"]),
+        value: z.union([z.string(), z.number()]),
+    })).optional(),
+});
+/**
+ * Deployment config (YAML schema)
+ */
+export const DeployConfigSchema = z.object({
+    provider: z.enum(["vercel", "aws", "gcp", "railway", "render", "fly"]).optional(),
+    healthEndpoints: z.array(z.string()).default(["/", "/api/health"]),
+    smokeTests: z.array(SmokeTestSchema).optional(),
+    canary: CanaryConfigSchema.optional(),
+    rollback: z.object({
+        autoRollback: z.boolean().default(true),
+        retainVersions: z.number().default(5),
+    }).optional(),
+    notifications: z.object({
+        slack: z.string().optional(),
+        email: z.array(z.string()).optional(),
+    }).optional(),
+});
+//# sourceMappingURL=types.js.map

package/dist/scanners/deploy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/scanners/deploy/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsDxB;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACvF,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QACtE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACpE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;KAC7F,CAAC,CAAC,QAAQ,EAAE;IACb,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC7C,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACjE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KACzC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACf,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjF,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;KACtC,CAAC,CAAC,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACtC,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC"}