vaspera 2.5.0

package/dist/commands/core/fix-critical.js

@@ -0,0 +1,22 @@
+export const fixCritical = {
+    name: "fix-critical",
+    description: "Fix all CRITICAL severity issues from AUDIT.md — security holes, crash risks, missing auth",
+    content: `Read AUDIT.md in the repo root. Fix every issue listed under the CRITICAL section.
+
+Execution Rules:
+1. Work through issues one file at a time.
+2. For each fix:
+   - Add try/catch with structured error responses on every unhandled async call
+   - Error responses must follow: { error: string, code: string, status: number }
+   - Never return raw error messages or stack traces to the client
+   - Auth checks: verify session exists before any data operation
+   - Supabase RLS: generate migration SQL for any table missing policies, save to supabase/migrations/
+   - Secrets: replace hardcoded values with process.env.VARIABLE_NAME, note what must be added to Doppler
+3. After all fixes, create a git commit: "fix: resolve critical production issues"
+4. Update AUDIT.md — mark each CRITICAL issue as [FIXED]
+5. Print summary: how many existed, how many fixed, any that could NOT be auto-fixed (explain why)
+
+Do NOT change business logic, refactor file structure, add features, or modify UI appearance.
+If you cannot auto-fix an issue, add a // TODO(CRITICAL): comment and flag it in the summary.`
+};
+//# sourceMappingURL=fix-critical.js.map

package/dist/commands/core/fix-critical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-critical.js","sourceRoot":"","sources":["../../../src/commands/core/fix-critical.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAqB;IAC3C,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,4FAA4F;IACzG,OAAO,EAAE;;;;;;;;;;;;;;;;8FAgBmF;CAC7F,CAAC"}

package/dist/commands/core/fix-high.d.ts

@@ -0,0 +1,3 @@
+import type { HardeningCommand } from "../types.js";
+export declare const fixHigh: HardeningCommand;
+//# sourceMappingURL=fix-high.d.ts.map

package/dist/commands/core/fix-high.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-high.d.ts","sourceRoot":"","sources":["../../../src/commands/core/fix-high.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,eAAO,MAAM,OAAO,EAAE,gBA8BrB,CAAC"}

package/dist/commands/core/fix-high.js

@@ -0,0 +1,32 @@
+export const fixHigh = {
+    name: "fix-high",
+    description: "Fix all HIGH severity issues — validation, types, UI loading/error/empty states",
+    content: `Read AUDIT.md in the repo root. Fix every issue under the HIGH section.
+
+Execute in this order:
+
+Round A: Input Validation
+- Add Zod schemas for every API route and server action accepting user input
+- Place schemas in lib/validations/ or colocated with the route
+- Parse with schema.safeParse() — never trust raw req.body or form data
+- Return 400 with structured error on validation failure
+
+Round B: TypeScript Strictness
+- Replace every any type with a proper type or interface
+- Add explicit return types to all exported functions
+- Add parameter types to all function arguments
+- Shared types go in types/ directory
+
+Round C: UI Resilience
+- Every data-fetching component must have loading, error, and empty states
+- Add React Error Boundaries at the layout level if none exist
+- Clean up Supabase realtime subscriptions in useEffect cleanup
+
+Round D: API Hardening
+- Sanitize all error responses
+- Add revalidatePath() after every mutation
+- Ensure consistent response shapes across all API routes
+
+After all fixes: git commit "fix: resolve high priority production issues", update AUDIT.md.`
+};
+//# sourceMappingURL=fix-high.js.map

package/dist/commands/core/fix-high.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-high.js","sourceRoot":"","sources":["../../../src/commands/core/fix-high.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,OAAO,GAAqB;IACvC,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,iFAAiF;IAC9F,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;6FA0BkF;CAC5F,CAAC"}

package/dist/commands/core/fix-medium.d.ts

@@ -0,0 +1,3 @@
+import type { HardeningCommand } from "../types.js";
+export declare const fixMedium: HardeningCommand;
+//# sourceMappingURL=fix-medium.d.ts.map

package/dist/commands/core/fix-medium.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-medium.d.ts","sourceRoot":"","sources":["../../../src/commands/core/fix-medium.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,eAAO,MAAM,SAAS,EAAE,gBA2BvB,CAAC"}

package/dist/commands/core/fix-medium.js

@@ -0,0 +1,29 @@
+export const fixMedium = {
+    name: "fix-medium",
+    description: "Fix MEDIUM severity issues — data access layer, logging, code organization",
+    content: `Read AUDIT.md in the repo root. Fix every issue under the MEDIUM section.
+
+Round A: Data Access Layer
+- If Supabase calls are scattered, create lib/db/ with typed functions per table
+- Each function handles its own error handling and returns typed results
+- Replace all direct supabase.from() calls with these functions
+
+Round B: Structured Logging
+- Replace console.log with a lightweight structured logger in lib/logger.ts
+- Levels: info, warn, error. Dev: console with context. Prod: structured JSON.
+- Every API route logs: request received, success/failure, duration
+- Every error catch logs with context (route, user id, input)
+
+Round C: Code Organization
+- Break components over 300 lines into smaller composable components
+- Extract duplicated logic into shared utilities
+- Remove dead code: unused imports, commented-out blocks, unreachable branches
+
+Round D: Error Boundaries
+- Add root-level React Error Boundary if none exists
+- Add boundaries around major data-fetching sections
+- Each shows user-friendly fallback with retry
+
+After all fixes: git commit "fix: resolve medium priority tech debt", update AUDIT.md.`
+};
+//# sourceMappingURL=fix-medium.js.map

package/dist/commands/core/fix-medium.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-medium.js","sourceRoot":"","sources":["../../../src/commands/core/fix-medium.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,SAAS,GAAqB;IACzC,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,4EAA4E;IACzF,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;uFAuB4E;CACtF,CAAC"}

package/dist/commands/core/fix-rls.d.ts

@@ -0,0 +1,3 @@
+import type { HardeningCommand } from "../types.js";
+export declare const fixRls: HardeningCommand;
+//# sourceMappingURL=fix-rls.d.ts.map

package/dist/commands/core/fix-rls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-rls.d.ts","sourceRoot":"","sources":["../../../src/commands/core/fix-rls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,eAAO,MAAM,MAAM,EAAE,gBAepB,CAAC"}

package/dist/commands/core/fix-rls.js

@@ -0,0 +1,17 @@
+export const fixRls = {
+    name: "fix-rls",
+    description: "Supabase RLS policy audit and generation — ensures every table has proper row-level security",
+    content: `Audit and fix Row Level Security policies for every Supabase table.
+
+1. Discover all tables: check supabase/migrations/, seed files, and codebase for supabase.from('table_name') calls.
+2. Check existing policies in migrations for CREATE POLICY or ENABLE ROW LEVEL SECURITY.
+3. For each table, determine access pattern from codebase usage: who reads, who writes, ownership column.
+4. Generate migration files in supabase/migrations/ for:
+   - ALTER TABLE ENABLE ROW LEVEL SECURITY on any table missing it
+   - SELECT, INSERT, UPDATE, DELETE policies matching the access pattern
+5. Flag any service-role key usage from client side (critical security issue).
+6. Save migration as supabase/migrations/[timestamp]_rls_hardening.sql
+7. Generate RLS-REPORT.md listing every table, its policies, and gaps.
+8. Git commit: "security: add RLS policies to all tables"`
+};
+//# sourceMappingURL=fix-rls.js.map

package/dist/commands/core/fix-rls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-rls.js","sourceRoot":"","sources":["../../../src/commands/core/fix-rls.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,MAAM,GAAqB;IACtC,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,8FAA8F;IAC3G,OAAO,EAAE;;;;;;;;;;;0DAW+C;CACzD,CAAC"}

package/dist/commands/core/harden.d.ts

@@ -0,0 +1,3 @@
+import type { HardeningCommand } from "../types.js";
+export declare const harden: HardeningCommand;
+//# sourceMappingURL=harden.d.ts.map

package/dist/commands/core/harden.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harden.d.ts","sourceRoot":"","sources":["../../../src/commands/core/harden.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,eAAO,MAAM,MAAM,EAAE,gBAiBpB,CAAC"}

package/dist/commands/core/harden.js

@@ -0,0 +1,19 @@
+export const harden = {
+    name: "harden",
+    description: "Full production hardening pipeline — runs audit, all fix phases, tests, and verification in sequence",
+    content: `Run the complete Vaspera production hardening pipeline. Execute each phase in order. Do NOT skip phases. Commit after each phase.
+
+Phase 1: Audit — full production readiness audit, save to AUDIT.md
+Phase 2: Fix Critical — fix all CRITICAL issues. Commit: "fix: resolve critical production issues"
+Phase 3: Fix High — fix all HIGH issues. Commit: "fix: resolve high priority production issues"
+Phase 4: Fix Medium — fix all MEDIUM issues. Commit: "fix: resolve medium priority tech debt"
+Phase 5: Add Tests — add test coverage, run suite. Commit: "test: add production test coverage"
+Phase 6: Verify — re-audit, generate HARDENING-REPORT.md with before/after comparison
+
+Rules:
+- If any phase hits an issue it cannot resolve, add // TODO(HARDENING): comment and continue
+- Do not change business logic, only infrastructure/resilience/safety code
+- If codebase is large, focus on API routes and data-fetching components first
+- Print a one-paragraph executive summary at the end`
+};
+//# sourceMappingURL=harden.js.map

package/dist/commands/core/harden.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harden.js","sourceRoot":"","sources":["../../../src/commands/core/harden.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,MAAM,GAAqB;IACtC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,sGAAsG;IACnH,OAAO,EAAE;;;;;;;;;;;;;qDAa0C;CACpD,CAAC"}

package/dist/commands/core/index.d.ts

@@ -0,0 +1,3 @@
+import type { HardeningCommand } from "../types.js";
+export declare const COMMANDS: Record<string, HardeningCommand>;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAWpD,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAUrD,CAAC"}

package/dist/commands/core/index.js

@@ -0,0 +1,21 @@
+import { audit } from "./audit.js";
+import { fixCritical } from "./fix-critical.js";
+import { fixHigh } from "./fix-high.js";
+import { fixMedium } from "./fix-medium.js";
+import { fixRls } from "./fix-rls.js";
+import { addTests } from "./add-tests.js";
+import { verify } from "./verify.js";
+import { harden } from "./harden.js";
+import { preflight } from "./preflight.js";
+export const COMMANDS = {
+    audit,
+    "fix-critical": fixCritical,
+    "fix-high": fixHigh,
+    "fix-medium": fixMedium,
+    "fix-rls": fixRls,
+    "add-tests": addTests,
+    verify,
+    harden,
+    preflight,
+};
+//# sourceMappingURL=index.js.map

package/dist/commands/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/core/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,CAAC,MAAM,QAAQ,GAAqC;IACxD,KAAK;IACL,cAAc,EAAE,WAAW;IAC3B,UAAU,EAAE,OAAO;IACnB,YAAY,EAAE,SAAS;IACvB,SAAS,EAAE,MAAM;IACjB,WAAW,EAAE,QAAQ;IACrB,MAAM;IACN,MAAM;IACN,SAAS;CACV,CAAC"}

package/dist/commands/core/preflight.d.ts

@@ -0,0 +1,3 @@
+import type { HardeningCommand } from "../types.js";
+export declare const preflight: HardeningCommand;
+//# sourceMappingURL=preflight.d.ts.map

package/dist/commands/core/preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../../../src/commands/core/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,eAAO,MAAM,SAAS,EAAE,gBAgDvB,CAAC"}

package/dist/commands/core/preflight.js

@@ -0,0 +1,50 @@
+export const preflight = {
+    name: "preflight",
+    description: "Pre-commit quality check — TypeScript, lint, tests, and code hygiene before committing",
+    content: `Run a fast pre-commit quality check. This should be run before every commit to catch issues early.
+
+## Checks to Run
+
+### 1. TypeScript Compilation
+- Run \`npx tsc --noEmit\` (or equivalent for the project)
+- List ALL type errors with file:line
+- Flag any \`any\` types in changed files
+
+### 2. Lint Violations
+- Run the project's linter (eslint, biome, etc.)
+- Focus on errors, not warnings
+- Auto-fix what's safe to auto-fix
+
+### 3. Test Suite
+- Run \`npm test\` or equivalent
+- If tests fail, list which tests and why
+- Do NOT skip failing tests
+
+### 4. Code Hygiene
+Scan staged/changed files for:
+- console.log statements (should be removed or use logger)
+- Commented-out code blocks (should be deleted)
+- TODO/FIXME without ticket reference
+- Unused imports
+- debugger statements
+- .only() on tests
+
+### 5. Import Analysis
+- Check for circular imports in changed files
+- Flag any new imports from node_modules that aren't in package.json
+
+## Output
+
+Print a PASS/FAIL checklist:
+\`\`\`
+[✓] TypeScript: No errors
+[✗] Lint: 3 errors in src/api/route.ts
+[✓] Tests: 42 passed
+[✗] Hygiene: 2 console.logs found
+[✓] Imports: Clean
+\`\`\`
+
+If ANY check fails, list the specific issues and DO NOT proceed with commit.
+If all pass, print "Ready to commit" and suggest a commit message based on the changes.`
+};
+//# sourceMappingURL=preflight.js.map

package/dist/commands/core/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../../src/commands/core/preflight.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,SAAS,GAAqB;IACzC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,wFAAwF;IACrG,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wFA4C6E;CACvF,CAAC"}

package/dist/commands/core/verify.d.ts

@@ -0,0 +1,3 @@
+import type { HardeningCommand } from "../types.js";
+export declare const verify: HardeningCommand;
+//# sourceMappingURL=verify.d.ts.map

package/dist/commands/core/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../src/commands/core/verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,eAAO,MAAM,MAAM,EAAE,gBA8BpB,CAAC"}

package/dist/commands/core/verify.js

@@ -0,0 +1,32 @@
+export const verify = {
+    name: "verify",
+    description: "Re-audit and generate before/after comparison report with deployment checklist",
+    content: `1. Rename current AUDIT.md to AUDIT-BEFORE.md if not already done.
+2. Run the full audit again. Save to AUDIT-AFTER.md.
+3. Generate HARDENING-REPORT.md:
+
+### Before / After Comparison
+| Severity | Before | After | Resolved | Remaining |
+|----------|--------|-------|----------|-----------|
+| CRITICAL | X | X | X | X |
+| HIGH     | X | X | X | X |
+| MEDIUM   | X | X | X | X |
+| LOW      | X | X | X | X |
+
+### Production Readiness Score: Before X/100 -> After X/100
+
+### Remaining Issues (with why they weren't auto-fixed and manual action needed)
+### New Issues Introduced (regressions from fixes)
+### Deployment Checklist:
+- [ ] All tests pass
+- [ ] Environment variables documented and in Doppler
+- [ ] RLS policies verified on all Supabase tables
+- [ ] Error monitoring set up
+- [ ] Rate limiting on public endpoints
+- [ ] CORS configured
+- [ ] No hardcoded secrets
+
+4. Run test suite, include results.
+5. Git commit: "docs: production hardening verification report"`
+};
+//# sourceMappingURL=verify.js.map

package/dist/commands/core/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../src/commands/core/verify.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,MAAM,GAAqB;IACtC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,gFAAgF;IAC7F,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;gEA0BqD;CAC/D,CAAC"}

package/dist/commands/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Embedded hardening command prompts.
+ * These are the same commands from the slash command kit,
+ * served as MCP resources and used by tools.
+ *
+ * Commands are organized into categories:
+ * - core: Main hardening pipeline (audit, fix-*, verify, harden)
+ * - audits: Specialized audit commands (deps, deadcode, errors, etc.)
+ * - certification: Enterprise certification agents
+ */
+import type { HardeningCommand } from "./types.js";
+export type { HardeningCommand } from "./types.js";
+/**
+ * All available hardening commands.
+ */
+export declare const COMMANDS: Record<string, HardeningCommand>;
+/**
+ * Get a command by name.
+ * @param name - The command name (e.g., "audit", "fix-critical")
+ * @returns The command or undefined if not found
+ */
+export declare function getCommand(name: string): HardeningCommand | undefined;
+/**
+ * List all available commands.
+ * @returns Array of all hardening commands
+ */
+export declare function listCommands(): HardeningCommand[];
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAKnD,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;GAEG;AACH,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAIrD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAErE;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,gBAAgB,EAAE,CAEjD"}

package/dist/commands/index.js

@@ -0,0 +1,37 @@
+/**
+ * Embedded hardening command prompts.
+ * These are the same commands from the slash command kit,
+ * served as MCP resources and used by tools.
+ *
+ * Commands are organized into categories:
+ * - core: Main hardening pipeline (audit, fix-*, verify, harden)
+ * - audits: Specialized audit commands (deps, deadcode, errors, etc.)
+ * - certification: Enterprise certification agents
+ */
+import { COMMANDS as coreCommands } from "./core/index.js";
+import { COMMANDS as auditCommands } from "./audits/index.js";
+import { COMMANDS as certificationCommands } from "./certification/index.js";
+/**
+ * All available hardening commands.
+ */
+export const COMMANDS = {
+    ...coreCommands,
+    ...auditCommands,
+    ...certificationCommands,
+};
+/**
+ * Get a command by name.
+ * @param name - The command name (e.g., "audit", "fix-critical")
+ * @returns The command or undefined if not found
+ */
+export function getCommand(name) {
+    return COMMANDS[name];
+}
+/**
+ * List all available commands.
+ * @returns Array of all hardening commands
+ */
+export function listCommands() {
+    return Object.values(COMMANDS);
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAI7E;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAqC;IACxD,GAAG,YAAY;IACf,GAAG,aAAa;IAChB,GAAG,qBAAqB;CACzB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC"}

package/dist/commands/types.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Type definitions for hardening commands
+ */
+export interface HardeningCommand {
+    name: string;
+    description: string;
+    content: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/commands/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/commands/types.js

@@ -0,0 +1,5 @@
+/**
+ * Type definitions for hardening commands
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/commands/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/compliance/cis.d.ts

@@ -0,0 +1,29 @@
+/**
+ * CIS Critical Security Controls v8
+ *
+ * Center for Internet Security Controls
+ *
+ * @module compliance/cis
+ */
+import type { ComplianceControl } from "./types.js";
+/**
+ * CIS control categories (Implementation Groups)
+ */
+export declare const CIS_CATEGORIES: readonly ["Inventory and Control of Enterprise Assets", "Inventory and Control of Software Assets", "Data Protection", "Secure Configuration", "Account Management", "Access Control Management", "Continuous Vulnerability Management", "Audit Log Management", "Email and Web Browser Protections", "Malware Defenses", "Data Recovery", "Network Infrastructure Management", "Network Monitoring and Defense", "Security Awareness Training", "Service Provider Management", "Application Software Security", "Incident Response Management", "Penetration Testing"];
+/**
+ * CIS Controls v8 relevant to code security
+ */
+export declare const CIS_CONTROLS: ComplianceControl[];
+/**
+ * Get all CIS controls
+ */
+export declare function getCISControls(): ComplianceControl[];
+/**
+ * Get CIS controls by category
+ */
+export declare function getCISControlsByCategory(category: string): ComplianceControl[];
+/**
+ * Get CIS categories
+ */
+export declare function getCISCategories(): readonly string[];
+//# sourceMappingURL=cis.d.ts.map

package/dist/compliance/cis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cis.d.ts","sourceRoot":"","sources":["../../src/compliance/cis.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD;;GAEG;AACH,eAAO,MAAM,cAAc,yiBAmBjB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,iBAAiB,EAuS3C,CAAC;AAEF;;GAEG;AACH,wBAAgB,cAAc,IAAI,iBAAiB,EAAE,CAEpD;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAE9E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,SAAS,MAAM,EAAE,CAEpD"}