vaspera 2.5.0

package/dist/certification/autofix.js

@@ -0,0 +1,476 @@
+/**
+ * Auto-Fix Capabilities for Common Patterns
+ *
+ * Provides automatic fix suggestions and applications for common
+ * code quality issues detected during certification.
+ *
+ * @module certification/autofix
+ */
+import { readFile, writeFile } from "fs/promises";
+import { join } from "path";
+import { logger } from "../logger.js";
+/**
+ * Built-in fix patterns for common issues
+ */
+export const FIX_PATTERNS = [
+    // Performance: async forEach antipattern
+    {
+        patternId: "perf-async-foreach",
+        name: "Fix async forEach",
+        description: "Convert array.forEach(async ...) to Promise.all(array.map(async ...))",
+        matchPattern: /(\w+)\.forEach\(\s*async\s*\(([^)]*)\)\s*=>\s*\{/g,
+        replacement: "await Promise.all($1.map(async ($2) => {",
+        safeToAutoApply: false,
+        risk: "medium",
+    },
+    // TypeScript: unsafe type assertion
+    {
+        patternId: "type-unsafe-assertion",
+        name: "Fix unsafe type assertion",
+        description: "Replace 'as unknown as T' with proper type guard or optional chaining",
+        matchPattern: /as\s+unknown\s+as\s+(\w+)/g,
+        replacement: "?? (undefined as $1 | undefined)",
+        safeToAutoApply: false,
+        risk: "high",
+    },
+    // Security: hardcoded secrets pattern
+    {
+        patternId: "sec-hardcoded-secret",
+        name: "Extract hardcoded secret",
+        description: "Replace hardcoded secret with environment variable reference",
+        matchPattern: /(password|secret|apiKey|api_key|token)\s*[:=]\s*["']([^"']+)["']/gi,
+        replacement: "$1: process.env.$1_VALUE",
+        safeToAutoApply: false,
+        risk: "high",
+    },
+    // Reliability: missing error handling
+    {
+        patternId: "rel-missing-try-catch",
+        name: "Add try-catch wrapper",
+        description: "Wrap async function body in try-catch block",
+        matchPattern: /async\s+function\s+(\w+)\s*\([^)]*\)\s*\{([^}]+)\}/g,
+        replacement: (match, name, body) => `async function ${name}() {\n  try {\n    ${body.trim()}\n  } catch (error) {\n    console.error('Error in ${name}:', error);\n    throw error;\n  }\n}`,
+        safeToAutoApply: false,
+        risk: "medium",
+    },
+    // Quality: console.log statements
+    {
+        patternId: "qual-console-log",
+        name: "Remove console.log",
+        description: "Remove or replace console.log with proper logging",
+        matchPattern: /console\.log\([^)]*\);?\n?/g,
+        replacement: "",
+        safeToAutoApply: true,
+        risk: "low",
+    },
+    // Performance: unnecessary await in return
+    {
+        patternId: "perf-unnecessary-await",
+        name: "Remove unnecessary await",
+        description: "Remove await on direct return statements",
+        matchPattern: /return\s+await\s+/g,
+        replacement: "return ",
+        safeToAutoApply: true,
+        risk: "low",
+    },
+    // Security: IDOR - missing authorization check
+    {
+        patternId: "sec-idor-missing-auth",
+        name: "Add authorization check",
+        description: "Add user ownership verification before resource access",
+        matchPattern: /const\s+(\w+)\s*=\s*await\s+(db|prisma|supabase)\.(\w+)\.find\w*\(\s*\{\s*where:\s*\{\s*id:\s*(\w+)/g,
+        replacement: `const $1 = await $2.$3.findFirst({
+  where: {
+    id: $4,
+    userId: session.user.id, // SECURITY: Added ownership check`,
+        safeToAutoApply: false,
+        risk: "high",
+    },
+    // Security: Missing rate limiting on API route
+    {
+        patternId: "sec-missing-rate-limit",
+        name: "Add rate limiting",
+        description: "Add rate limiting middleware to API endpoint",
+        matchPattern: /export\s+(async\s+)?function\s+(GET|POST|PUT|DELETE|PATCH)\s*\(/g,
+        replacement: `// SECURITY: Add rate limiting - npm install @upstash/ratelimit @upstash/redis
+// import { Ratelimit } from "@upstash/ratelimit";
+// const ratelimit = new Ratelimit({ redis, limiter: Ratelimit.slidingWindow(10, "10 s") });
+export $1function $2(`,
+        safeToAutoApply: false,
+        risk: "medium",
+    },
+    // Security: Missing CSRF protection
+    {
+        patternId: "sec-missing-csrf",
+        name: "Add CSRF token validation",
+        description: "Add CSRF token check for state-changing operations",
+        matchPattern: /export\s+async\s+function\s+(POST|PUT|DELETE|PATCH)\s*\(\s*request:\s*Request/g,
+        replacement: `export async function $1(request: Request) {
+  // SECURITY: Validate CSRF token
+  const csrfToken = request.headers.get("x-csrf-token");
+  if (!csrfToken || !validateCsrfToken(csrfToken)) {
+    return new Response("Invalid CSRF token", { status: 403 });
+  }
+
+  // Original handler
+  return (async function $1_handler(request: Request`,
+        safeToAutoApply: false,
+        risk: "high",
+    },
+    // Security: Insecure cookie settings
+    {
+        patternId: "sec-insecure-cookie",
+        name: "Fix insecure cookie",
+        description: "Add secure, httpOnly, and sameSite attributes to cookies",
+        matchPattern: /\.set\s*\(\s*["']([^"']+)["']\s*,\s*([^,)]+)\s*\)/g,
+        replacement: `.set("$1", $2, { httpOnly: true, secure: true, sameSite: "strict" })`,
+        safeToAutoApply: false,
+        risk: "medium",
+    },
+    // Security: SQL injection - string concatenation
+    {
+        patternId: "sec-sql-injection",
+        name: "Fix SQL injection",
+        description: "Replace string concatenation with parameterized query",
+        matchPattern: /`SELECT\s+\*\s+FROM\s+(\w+)\s+WHERE\s+(\w+)\s*=\s*'\$\{(\w+)\}'`/g,
+        replacement: "{ text: 'SELECT * FROM $1 WHERE $2 = $1', values: [$3] }",
+        safeToAutoApply: false,
+        risk: "high",
+    },
+    // Security: XSS - innerHTML usage
+    {
+        patternId: "sec-xss-innerhtml",
+        name: "Fix innerHTML XSS",
+        description: "Replace innerHTML with textContent or sanitized HTML",
+        matchPattern: /\.innerHTML\s*=\s*(\w+)/g,
+        replacement: ".textContent = $1 // SECURITY: Changed from innerHTML to prevent XSS",
+        safeToAutoApply: false,
+        risk: "high",
+    },
+    // TypeScript: explicit any
+    {
+        patternId: "type-explicit-any",
+        name: "Replace explicit any",
+        description: "Replace 'any' with 'unknown' for safer typing",
+        matchPattern: /:\s*any\b/g,
+        replacement: ": unknown",
+        safeToAutoApply: false,
+        risk: "medium",
+    },
+    // Reliability: unhandled promise rejection
+    {
+        patternId: "rel-unhandled-promise",
+        name: "Add promise error handling",
+        description: "Add .catch() to unhandled promise",
+        matchPattern: /(\w+)\.(then)\s*\(\s*([^)]+)\s*\)\s*(?!\.catch)/g,
+        replacement: "$1.then($3).catch((err) => console.error('Unhandled promise rejection:', err))",
+        safeToAutoApply: false,
+        risk: "medium",
+    },
+    // Security: Missing input validation
+    {
+        patternId: "sec-missing-validation",
+        name: "Add input validation",
+        description: "Add Zod schema validation for request body",
+        matchPattern: /const\s+(\w+)\s*=\s*await\s+request\.json\(\)/g,
+        replacement: `// SECURITY: Add input validation
+// const schema = z.object({ /* define your schema */ });
+const rawBody = await request.json();
+// const $1 = schema.parse(rawBody);
+const $1 = rawBody // TODO: Add validation`,
+        safeToAutoApply: false,
+        risk: "high",
+    },
+];
+/**
+ * Find the fix pattern for a given finding
+ */
+export function findFixPattern(finding) {
+    // First try exact ID match
+    const idPattern = FIX_PATTERNS.find((p) => finding.id.includes(p.patternId) || finding.category.includes(p.patternId));
+    if (idPattern)
+        return idPattern;
+    // Try category-based matching
+    const categoryPatterns = {
+        "async-foreach": ["perf-async-foreach"],
+        "type-assertion": ["type-unsafe-assertion"],
+        "hardcoded": ["sec-hardcoded-secret"],
+        "console": ["qual-console-log"],
+    };
+    const category = finding.category.toLowerCase();
+    for (const [keyword, patternIds] of Object.entries(categoryPatterns)) {
+        if (category.includes(keyword)) {
+            const pattern = FIX_PATTERNS.find((p) => patternIds.includes(p.patternId));
+            if (pattern)
+                return pattern;
+        }
+    }
+    return undefined;
+}
+/**
+ * Generate a preview of the fix without applying it
+ */
+export async function previewFix(projectPath, finding) {
+    const pattern = findFixPattern(finding);
+    if (!pattern) {
+        return {
+            findingId: finding.id,
+            canAutoFix: false,
+            risk: "high",
+            requiresReview: true,
+        };
+    }
+    if (!finding.file) {
+        return {
+            findingId: finding.id,
+            canAutoFix: false,
+            pattern: pattern.name,
+            fixDescription: pattern.description,
+            risk: pattern.risk,
+            requiresReview: true,
+        };
+    }
+    try {
+        const filePath = join(projectPath, finding.file);
+        const content = await readFile(filePath, "utf-8");
+        const lines = content.split("\n");
+        // Find the matching line
+        const lineIndex = (finding.line || 1) - 1;
+        const contextStart = Math.max(0, lineIndex - 2);
+        const contextEnd = Math.min(lines.length, lineIndex + 3);
+        const contextLines = lines.slice(contextStart, contextEnd);
+        const contextBefore = contextLines.join("\n");
+        // Apply the pattern to the context
+        const replacement = typeof pattern.replacement === "function"
+            ? contextBefore.replace(pattern.matchPattern, pattern.replacement)
+            : contextBefore.replace(pattern.matchPattern, pattern.replacement);
+        if (replacement === contextBefore) {
+            return {
+                findingId: finding.id,
+                canAutoFix: false,
+                pattern: pattern.name,
+                fixDescription: "Pattern not found in specified location",
+                risk: pattern.risk,
+                requiresReview: true,
+            };
+        }
+        return {
+            findingId: finding.id,
+            canAutoFix: true,
+            pattern: pattern.name,
+            fixDescription: pattern.description,
+            preview: {
+                before: contextBefore,
+                after: replacement,
+                file: finding.file,
+                lineStart: contextStart + 1,
+                lineEnd: contextEnd,
+            },
+            risk: pattern.risk,
+            requiresReview: !pattern.safeToAutoApply,
+        };
+    }
+    catch (error) {
+        logger.warn("autofix.preview_failed", {
+            findingId: finding.id,
+            error: String(error),
+        });
+        return {
+            findingId: finding.id,
+            canAutoFix: false,
+            pattern: pattern.name,
+            fixDescription: `Error reading file: ${error}`,
+            risk: "high",
+            requiresReview: true,
+        };
+    }
+}
+/**
+ * Apply a fix to a file
+ */
+export async function applyFix(projectPath, finding, dryRun = false) {
+    const pattern = findFixPattern(finding);
+    if (!pattern) {
+        return {
+            findingId: finding.id,
+            file: finding.file || "unknown",
+            applied: false,
+            error: "No auto-fix pattern available for this finding",
+        };
+    }
+    if (!finding.file) {
+        return {
+            findingId: finding.id,
+            file: "unknown",
+            applied: false,
+            error: "Finding does not specify a file location",
+        };
+    }
+    try {
+        const filePath = join(projectPath, finding.file);
+        const content = await readFile(filePath, "utf-8");
+        // Apply the fix
+        const replacement = typeof pattern.replacement === "function"
+            ? content.replace(pattern.matchPattern, pattern.replacement)
+            : content.replace(pattern.matchPattern, pattern.replacement);
+        if (replacement === content) {
+            return {
+                findingId: finding.id,
+                file: finding.file,
+                applied: false,
+                error: "Pattern not found in file",
+            };
+        }
+        // Calculate diff for the changed lines
+        const beforeLines = content.split("\n");
+        const afterLines = replacement.split("\n");
+        let diffStart = 0;
+        let diffEnd = beforeLines.length;
+        for (let i = 0; i < Math.min(beforeLines.length, afterLines.length); i++) {
+            if (beforeLines[i] !== afterLines[i]) {
+                diffStart = i;
+                break;
+            }
+        }
+        for (let i = 0; i < Math.min(beforeLines.length, afterLines.length); i++) {
+            if (beforeLines[beforeLines.length - 1 - i] !== afterLines[afterLines.length - 1 - i]) {
+                diffEnd = beforeLines.length - i;
+                break;
+            }
+        }
+        const diff = {
+            before: beforeLines.slice(diffStart, diffEnd).join("\n"),
+            after: afterLines.slice(diffStart, Math.min(diffEnd + 1, afterLines.length)).join("\n"),
+            lineNumber: diffStart + 1,
+        };
+        if (!dryRun) {
+            await writeFile(filePath, replacement, "utf-8");
+            logger.info("autofix.applied", {
+                findingId: finding.id,
+                file: finding.file,
+                pattern: pattern.name,
+            });
+        }
+        return {
+            findingId: finding.id,
+            file: finding.file,
+            applied: !dryRun,
+            diff,
+        };
+    }
+    catch (error) {
+        logger.error("autofix.failed", {
+            findingId: finding.id,
+            error: String(error),
+        });
+        return {
+            findingId: finding.id,
+            file: finding.file,
+            applied: false,
+            error: String(error),
+        };
+    }
+}
+/**
+ * Get all available fix patterns with their metadata
+ */
+export function listFixPatterns() {
+    return FIX_PATTERNS.map((p) => ({
+        id: p.patternId,
+        name: p.name,
+        description: p.description,
+        risk: p.risk,
+        safeToAutoApply: p.safeToAutoApply,
+    }));
+}
+/**
+ * Add a custom fix pattern at runtime
+ */
+export function registerFixPattern(pattern) {
+    // Check for duplicate
+    const existing = FIX_PATTERNS.findIndex((p) => p.patternId === pattern.patternId);
+    if (existing >= 0) {
+        FIX_PATTERNS[existing] = pattern;
+    }
+    else {
+        FIX_PATTERNS.push(pattern);
+    }
+    logger.debug("autofix.pattern_registered", { patternId: pattern.patternId });
+}
+/**
+ * Apply all safe fixes to a list of findings
+ * Only applies fixes marked as safeToAutoApply: true
+ */
+export async function batchApplySafeFixes(projectPath, findings, options) {
+    const dryRun = options?.dryRun ?? false;
+    const includeUnsafe = options?.includeUnsafe ?? false;
+    const safePatterns = FIX_PATTERNS.filter((p) => p.safeToAutoApply || includeUnsafe);
+    const safePatternIds = new Set(safePatterns.map((p) => p.patternId));
+    const results = [];
+    const byPattern = {};
+    const byFile = {};
+    let applied = 0;
+    let skipped = 0;
+    let failed = 0;
+    let safeFixesAvailable = 0;
+    for (const finding of findings) {
+        const pattern = findFixPattern(finding);
+        if (!pattern) {
+            skipped++;
+            continue;
+        }
+        // Check if pattern is safe (or includeUnsafe is true)
+        const patternIsSafe = safePatternIds.has(pattern.patternId);
+        if (!patternIsSafe && !includeUnsafe) {
+            skipped++;
+            continue;
+        }
+        safeFixesAvailable++;
+        const result = await applyFix(projectPath, finding, dryRun);
+        results.push(result);
+        if (result.applied || (dryRun && result.diff)) {
+            applied++;
+            byPattern[pattern.patternId] = (byPattern[pattern.patternId] || 0) + 1;
+            if (finding.file) {
+                byFile[finding.file] = (byFile[finding.file] || 0) + 1;
+            }
+        }
+        else if (result.error) {
+            failed++;
+        }
+        else {
+            skipped++;
+        }
+    }
+    logger.info("autofix.batch_complete", {
+        totalFindings: findings.length,
+        safeFixesAvailable,
+        applied,
+        skipped,
+        failed,
+        dryRun,
+    });
+    return {
+        totalFindings: findings.length,
+        safeFixesAvailable,
+        applied,
+        skipped,
+        failed,
+        results,
+        summary: {
+            byPattern,
+            byFile,
+        },
+    };
+}
+/**
+ * Get safe fix patterns only
+ */
+export function getSafeFixPatterns() {
+    return FIX_PATTERNS.filter((p) => p.safeToAutoApply).map((p) => ({
+        id: p.patternId,
+        name: p.name,
+        description: p.description,
+    }));
+}
+//# sourceMappingURL=autofix.js.map

package/dist/certification/autofix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autofix.js","sourceRoot":"","sources":["../../src/certification/autofix.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAwDtC;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,yCAAyC;IACzC;QACE,SAAS,EAAE,oBAAoB;QAC/B,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,uEAAuE;QACpF,YAAY,EAAE,mDAAmD;QACjE,WAAW,EAAE,0CAA0C;QACvD,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,QAAQ;KACf;IACD,oCAAoC;IACpC;QACE,SAAS,EAAE,uBAAuB;QAClC,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,uEAAuE;QACpF,YAAY,EAAE,4BAA4B;QAC1C,WAAW,EAAE,kCAAkC;QAC/C,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,MAAM;KACb;IACD,sCAAsC;IACtC;QACE,SAAS,EAAE,sBAAsB;QACjC,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,8DAA8D;QAC3E,YAAY,EAAE,oEAAoE;QAClF,WAAW,EAAE,0BAA0B;QACvC,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,MAAM;KACb;IACD,sCAAsC;IACtC;QACE,SAAS,EAAE,uBAAuB;QAClC,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,6CAA6C;QAC1D,YAAY,EAAE,qDAAqD;QACnE,WAAW,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CACjC,kBAAkB,IAAI,sBAAsB,IAAI,CAAC,IAAI,EAAE,sDAAsD,IAAI,uCAAuC;QAC1J,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,QAAQ;KACf;IACD,kCAAkC;IAClC;QACE,SAAS,EAAE,kBAAkB;QAC7B,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,mDAAmD;QAChE,YAAY,EAAE,6BAA6B;QAC3C,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,IAAI;QACrB,IAAI,EAAE,KAAK;KACZ;IACD,2CAA2C;IAC3C;QACE,SAAS,EAAE,wBAAwB;QACnC,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,0CAA0C;QACvD,YAAY,EAAE,oBAAoB;QAClC,WAAW,EAAE,SAAS;QACtB,eAAe,EAAE,IAAI;QACrB,IAAI,EAAE,KAAK;KACZ;IACD,+CAA+C;IAC/C;QACE,SAAS,EAAE,uBAAuB;QAClC,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,wDAAwD;QACrE,YAAY,EAAE,sGAAsG;QACpH,WAAW,EAAE;;;gEAG+C;QAC5D,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,MAAM;KACb;IACD,+CAA+C;IAC/C;QACE,SAAS,EAAE,wBAAwB;QACnC,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,8CAA8C;QAC3D,YAAY,EAAE,kEAAkE;QAChF,WAAW,EAAE;;;sBAGK;QAClB,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,QAAQ;KACf;IACD,oCAAoC;IACpC;QACE,SAAS,EAAE,kBAAkB;QAC7B,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,oDAAoD;QACjE,YAAY,EAAE,gFAAgF;QAC9F,WAAW,EAAE;;;;;;;;qDAQoC;QACjD,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,MAAM;KACb;IACD,qCAAqC;IACrC;QACE,SAAS,EAAE,qBAAqB;QAChC,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,0DAA0D;QACvE,YAAY,EAAE,oDAAoD;QAClE,WAAW,EAAE,sEAAsE;QACnF,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,QAAQ;KACf;IACD,iDAAiD;IACjD;QACE,SAAS,EAAE,mBAAmB;QAC9B,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,uDAAuD;QACpE,YAAY,EAAE,mEAAmE;QACjF,WAAW,EAAE,0DAA0D;QACvE,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,MAAM;KACb;IACD,kCAAkC;IAClC;QACE,SAAS,EAAE,mBAAmB;QAC9B,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,sDAAsD;QACnE,YAAY,EAAE,0BAA0B;QACxC,WAAW,EAAE,sEAAsE;QACnF,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,MAAM;KACb;IACD,2BAA2B;IAC3B;QACE,SAAS,EAAE,mBAAmB;QAC9B,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,WAAW;QACxB,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,QAAQ;KACf;IACD,2CAA2C;IAC3C;QACE,SAAS,EAAE,uBAAuB;QAClC,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,mCAAmC;QAChD,YAAY,EAAE,kDAAkD;QAChE,WAAW,EAAE,gFAAgF;QAC7F,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,QAAQ;KACf;IACD,qCAAqC;IACrC;QACE,SAAS,EAAE,wBAAwB;QACnC,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,4CAA4C;QACzD,YAAY,EAAE,gDAAgD;QAC9D,WAAW,EAAE;;;;2CAI0B;QACvC,eAAe,EAAE,KAAK;QACtB,IAAI,EAAE,MAAM;KACb;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,2BAA2B;IAC3B,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAClF,CAAC;IACF,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAEhC,8BAA8B;IAC9B,MAAM,gBAAgB,GAA6B;QACjD,eAAe,EAAE,CAAC,oBAAoB,CAAC;QACvC,gBAAgB,EAAE,CAAC,uBAAuB,CAAC;QAC3C,WAAW,EAAE,CAAC,sBAAsB,CAAC;QACrC,SAAS,EAAE,CAAC,kBAAkB,CAAC;KAChC,CAAC;IAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrE,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3E,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,WAAmB,EACnB,OAAgB;IAEhB,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,UAAU,EAAE,KAAK;YACjB,IAAI,EAAE,MAAM;YACZ,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,cAAc,EAAE,OAAO,CAAC,WAAW;YACnC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,yBAAyB;QACzB,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9C,mCAAmC;QACnC,MAAM,WAAW,GACf,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU;YACvC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,WAAkB,CAAC;YACzE,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAEvE,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;YAClC,OAAO;gBACL,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,cAAc,EAAE,yCAAyC;gBACzD,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,cAAc,EAAE,IAAI;aACrB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,cAAc,EAAE,OAAO,CAAC,WAAW;YACnC,OAAO,EAAE;gBACP,MAAM,EAAE,aAAa;gBACrB,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,YAAY,GAAG,CAAC;gBAC3B,OAAO,EAAE,UAAU;aACpB;YACD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,cAAc,EAAE,CAAC,OAAO,CAAC,eAAe;SACzC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACpC,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,cAAc,EAAE,uBAAuB,KAAK,EAAE;YAC9C,IAAI,EAAE,MAAM;YACZ,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,WAAmB,EACnB,OAAgB,EAChB,SAAkB,KAAK;IAEvB,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS;YAC/B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,gDAAgD;SACxD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,0CAA0C;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAElD,gBAAgB;QAChB,MAAM,WAAW,GACf,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU;YACvC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,WAAkB,CAAC;YACnE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAEjE,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO;gBACL,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,2BAA2B;aACnC,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC;QAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzE,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,SAAS,GAAG,CAAC,CAAC;gBACd,MAAM;YACR,CAAC;QACH,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzE,IAAI,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACtF,OAAO,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;gBACjC,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACxD,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACvF,UAAU,EAAE,SAAS,GAAG,CAAC;SAC1B,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC7B,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,CAAC,MAAM;YAChB,IAAI;SACL,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;YAC7B,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAO7B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,EAAE,EAAE,CAAC,CAAC,SAAS;QACf,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,eAAe,EAAE,CAAC,CAAC,eAAe;KACnC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAmB;IACpD,sBAAsB;IACtB,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAClF,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,YAAY,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;AAC/E,CAAC;AAkBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAAmB,EACnB,QAAmB,EACnB,OAGC;IAED,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;IACxC,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,KAAK,CAAC;IAEtD,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,aAAa,CAC1C,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAErE,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAE3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAExC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,sDAAsD;QACtD,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE,CAAC;YACrC,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,kBAAkB,EAAE,CAAC;QAErB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAErB,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC;YACV,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACvE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,EAAE,CAAC;QACX,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;QACpC,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,kBAAkB;QAClB,OAAO;QACP,OAAO;QACP,MAAM;QACN,MAAM;KACP,CAAC,CAAC;IAEH,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,kBAAkB;QAClB,OAAO;QACP,OAAO;QACP,MAAM;QACN,OAAO;QACP,OAAO,EAAE;YACP,SAAS;YACT,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAKhC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,EAAE,EAAE,CAAC,CAAC,SAAS;QACf,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/certification/badge.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Certification Badge Generation
+ *
+ * Generates SVG badges for certification status that can be embedded
+ * in README files or displayed on dashboards.
+ *
+ * @module certification/badge
+ */
+import type { CertificationLevel } from "./types.js";
+/**
+ * Generate an SVG certification badge.
+ *
+ * Creates a shields.io-style badge showing certification level and score.
+ *
+ * @param level - The certification level
+ * @param score - The overall score (0-100)
+ * @returns SVG string that can be saved to a file or embedded in markdown
+ *
+ * @example
+ * ```typescript
+ * const svg = generateBadgeSvg("APPROVED", 85);
+ * // Returns SVG showing "certification | Approved 85/100"
+ * ```
+ */
+export declare function generateBadgeSvg(level: CertificationLevel, score: number): string;
+/**
+ * Generate a simple text badge for markdown.
+ *
+ * @param level - The certification level
+ * @param score - The overall score (0-100)
+ * @returns Markdown badge text
+ *
+ * @example
+ * ```typescript
+ * const badge = generateTextBadge("APPROVED", 85);
+ * // Returns: "![Certification: Approved](https://img.shields.io/badge/certification-Approved%2085%2F100-eab308)"
+ * ```
+ */
+export declare function generateTextBadge(level: CertificationLevel, score: number): string;
+/**
+ * Generate a compact score-only badge.
+ *
+ * @param score - The overall score (0-100)
+ * @returns SVG string for score badge
+ */
+export declare function generateScoreBadgeSvg(score: number): string;
+/**
+ * Generate badge markdown for embedding in README.
+ *
+ * @param level - The certification level
+ * @param score - The overall score (0-100)
+ * @param badgePath - Relative path to the badge SVG file
+ * @returns Markdown string for embedding the badge
+ */
+export declare function generateBadgeMarkdown(level: CertificationLevel, score: number, badgePath?: string): string;
+//# sourceMappingURL=badge.d.ts.map

package/dist/certification/badge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"badge.d.ts","sourceRoot":"","sources":["../../src/certification/badge.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAmCrD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA0BjF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMlF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAsC3D;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,MAAoC,GAC9C,MAAM,CAGR"}