vaspera 2.5.0

package/dist/compliance/types.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Compliance Framework Types
+ *
+ * Types for mapping security findings to compliance frameworks
+ * like SOC 2 and ISO 27001.
+ *
+ * @module compliance/types
+ */
+import type { Severity } from "../certification/types.js";
+import type { Finding } from "../certification/types.js";
+/**
+ * Supported compliance frameworks
+ */
+export type ComplianceFramework = "SOC2" | "ISO27001" | "PCI-DSS" | "HIPAA" | "GDPR" | "NIST-800-53" | "CIS" | "OWASP-LLM" | "NIST-AI-RMF" | "MITRE-ATLAS" | "EU-AI-ACT" | "ISO-42001";
+/**
+ * A compliance control from a framework
+ */
+export interface ComplianceControl {
+    /** Control ID (e.g., "CC6.1", "A.12.6.1") */
+    id: string;
+    /** Framework this control belongs to */
+    framework: ComplianceFramework;
+    /** Control category/domain */
+    category: string;
+    /** Short title of the control */
+    title: string;
+    /** Full description of the control requirement */
+    description: string;
+    /** Keywords for matching findings to this control */
+    keywords: string[];
+    /** Finding categories that map to this control */
+    findingCategories: string[];
+    /** CWE IDs that map to this control */
+    cweIds?: string[];
+    /** Severity threshold - findings below this don't trigger control */
+    severityThreshold?: Severity;
+}
+/**
+ * A control with its associated findings
+ */
+export interface ControlWithFindings {
+    control: ComplianceControl;
+    findings: Finding[];
+    status: "compliant" | "at_risk" | "non_compliant";
+    riskLevel: "low" | "medium" | "high" | "critical";
+}
+/**
+ * Summary of compliance status for a framework
+ */
+export interface ComplianceStatus {
+    framework: ComplianceFramework;
+    totalControls: number;
+    controlsCovered: number;
+    controlsAtRisk: number;
+    controlsNonCompliant: number;
+    complianceScore: number;
+    riskScore: number;
+}
+/**
+ * Full compliance report
+ */
+export interface ComplianceReport {
+    /** Report metadata */
+    id: string;
+    generatedAt: string;
+    projectPath: string;
+    certificationId?: string;
+    /** Framework being assessed */
+    framework: ComplianceFramework;
+    /** Overall status */
+    status: ComplianceStatus;
+    /** Controls with their findings */
+    controls: ControlWithFindings[];
+    /** Controls with no findings (compliant) */
+    compliantControls: ComplianceControl[];
+    /** Controls at risk (medium/low findings) */
+    atRiskControls: ControlWithFindings[];
+    /** Non-compliant controls (critical/high findings) */
+    nonCompliantControls: ControlWithFindings[];
+    /** Recommendations */
+    recommendations: ComplianceRecommendation[];
+}
+/**
+ * A compliance recommendation
+ */
+export interface ComplianceRecommendation {
+    controlId: string;
+    priority: "critical" | "high" | "medium" | "low";
+    title: string;
+    description: string;
+    remediationSteps: string[];
+    estimatedEffort: "hours" | "days" | "weeks";
+}
+/**
+ * Mapping configuration for a finding category
+ */
+export interface CategoryMapping {
+    /** Finding category (e.g., "sql-injection", "secrets") */
+    category: string;
+    /** CWE IDs associated with this category */
+    cweIds: string[];
+    /** Control IDs this category maps to */
+    soc2Controls: string[];
+    iso27001Controls: string[];
+    pciDssControls?: string[];
+    hipaaControls?: string[];
+    gdprControls?: string[];
+    nist80053Controls?: string[];
+    cisControls?: string[];
+}
+/**
+ * Multi-framework compliance summary
+ */
+export interface MultiFrameworkReport {
+    id: string;
+    generatedAt: string;
+    projectPath: string;
+    certificationId?: string;
+    frameworks: {
+        [K in ComplianceFramework]?: ComplianceStatus;
+    };
+    /** Cross-framework recommendations prioritized by impact */
+    prioritizedRecommendations: ComplianceRecommendation[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/compliance/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/compliance/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,UAAU,GACV,SAAS,GACT,OAAO,GACP,MAAM,GACN,aAAa,GACb,KAAK,GAEL,WAAW,GACX,aAAa,GACb,aAAa,GACb,WAAW,GACX,WAAW,CAAC;AAEhB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAC;IAEX,wCAAwC;IACxC,SAAS,EAAE,mBAAmB,CAAC;IAE/B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IAEjB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IAEd,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IAEpB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,EAAE,CAAC;IAEnB,kDAAkD;IAClD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAE5B,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,QAAQ,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,eAAe,CAAC;IAClD,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,+BAA+B;IAC/B,SAAS,EAAE,mBAAmB,CAAC;IAE/B,qBAAqB;IACrB,MAAM,EAAE,gBAAgB,CAAC;IAEzB,mCAAmC;IACnC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAEhC,4CAA4C;IAC5C,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;IAEvC,6CAA6C;IAC7C,cAAc,EAAE,mBAAmB,EAAE,CAAC;IAEtC,sDAAsD;IACtD,oBAAoB,EAAE,mBAAmB,EAAE,CAAC;IAE5C,sBAAsB;IACtB,eAAe,EAAE,wBAAwB,EAAE,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IAEjB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,wCAAwC;IACxC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,UAAU,EAAE;SACT,CAAC,IAAI,mBAAmB,CAAC,CAAC,EAAE,gBAAgB;KAC9C,CAAC;IAEF,4DAA4D;IAC5D,0BAA0B,EAAE,wBAAwB,EAAE,CAAC;CACxD"}

package/dist/compliance/types.js

@@ -0,0 +1,10 @@
+/**
+ * Compliance Framework Types
+ *
+ * Types for mapping security findings to compliance frameworks
+ * like SOC 2 and ISO 27001.
+ *
+ * @module compliance/types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/compliance/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/compliance/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/config/flags.d.ts

@@ -0,0 +1,456 @@
+/**
+ * Feature Flags Configuration
+ *
+ * Allows users to enable/disable features via `.vaspera/config.yaml`.
+ *
+ * Example configuration:
+ * ```yaml
+ * version: 1
+ *
+ * agents:
+ *   security:
+ *     enabled: true
+ *     weight: 1.0
+ *   reliability:
+ *     enabled: true
+ *     weight: 0.8
+ *   typesafety:
+ *     enabled: false
+ *   redteam:
+ *     enabled: true
+ *     weight: 0.5
+ *
+ * scanners:
+ *   semgrep:
+ *     enabled: true
+ *     timeout: 120000
+ *   gitleaks:
+ *     enabled: true
+ *   npm-audit:
+ *     enabled: true
+ *
+ * features:
+ *   multiModel: false
+ *   costTracking: true
+ *   autofix: true
+ *   incrementalScan: true
+ * ```
+ *
+ * @module config/flags
+ */
+import { z } from "zod";
+/**
+ * Agent configuration
+ */
+export declare const AgentConfigSchema: z.ZodObject<{
+    /** Whether agent is enabled */
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    /** Agent weight for consensus (0-1) */
+    weight: z.ZodDefault<z.ZodNumber>;
+    /** Model to use for this agent */
+    model: z.ZodOptional<z.ZodString>;
+    /** Temperature for this agent */
+    temperature: z.ZodOptional<z.ZodNumber>;
+    /** Custom prompt additions */
+    promptAdditions: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    weight: number;
+    model?: string | undefined;
+    temperature?: number | undefined;
+    promptAdditions?: string | undefined;
+}, {
+    enabled?: boolean | undefined;
+    model?: string | undefined;
+    weight?: number | undefined;
+    temperature?: number | undefined;
+    promptAdditions?: string | undefined;
+}>;
+export type AgentConfig = z.infer<typeof AgentConfigSchema>;
+/**
+ * Scanner configuration
+ */
+export declare const ScannerConfigSchema: z.ZodObject<{
+    /** Whether scanner is enabled */
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    /** Scanner timeout in ms */
+    timeout: z.ZodOptional<z.ZodNumber>;
+    /** Custom rules directory */
+    rulesDir: z.ZodOptional<z.ZodString>;
+    /** Additional scanner-specific options */
+    options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    timeout?: number | undefined;
+    options?: Record<string, unknown> | undefined;
+    rulesDir?: string | undefined;
+}, {
+    enabled?: boolean | undefined;
+    timeout?: number | undefined;
+    options?: Record<string, unknown> | undefined;
+    rulesDir?: string | undefined;
+}>;
+export type ScannerConfig = z.infer<typeof ScannerConfigSchema>;
+/**
+ * Feature flags
+ */
+export declare const FeatureFlagsSchema: z.ZodObject<{
+    /** Enable multi-model consensus */
+    multiModel: z.ZodDefault<z.ZodBoolean>;
+    /** Enable cost tracking */
+    costTracking: z.ZodDefault<z.ZodBoolean>;
+    /** Enable auto-fix suggestions */
+    autofix: z.ZodDefault<z.ZodBoolean>;
+    /** Enable incremental scanning */
+    incrementalScan: z.ZodDefault<z.ZodBoolean>;
+    /** Enable scanner caching */
+    scannerCache: z.ZodDefault<z.ZodBoolean>;
+    /** Enable cross-verification */
+    crossVerification: z.ZodDefault<z.ZodBoolean>;
+    /** Enable Sigstore signing */
+    sigstoreSigning: z.ZodDefault<z.ZodBoolean>;
+    /** Enable SARIF export */
+    sarifExport: z.ZodDefault<z.ZodBoolean>;
+    /** Enable compliance mapping */
+    complianceMapping: z.ZodDefault<z.ZodBoolean>;
+    /** Enable OpenTelemetry */
+    otel: z.ZodDefault<z.ZodBoolean>;
+    /** Enable plugin system */
+    plugins: z.ZodDefault<z.ZodBoolean>;
+    /** Enable red team mode */
+    redteam: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    redteam: boolean;
+    plugins: boolean;
+    complianceMapping: boolean;
+    multiModel: boolean;
+    costTracking: boolean;
+    autofix: boolean;
+    incrementalScan: boolean;
+    scannerCache: boolean;
+    crossVerification: boolean;
+    sigstoreSigning: boolean;
+    sarifExport: boolean;
+    otel: boolean;
+}, {
+    redteam?: boolean | undefined;
+    plugins?: boolean | undefined;
+    complianceMapping?: boolean | undefined;
+    multiModel?: boolean | undefined;
+    costTracking?: boolean | undefined;
+    autofix?: boolean | undefined;
+    incrementalScan?: boolean | undefined;
+    scannerCache?: boolean | undefined;
+    crossVerification?: boolean | undefined;
+    sigstoreSigning?: boolean | undefined;
+    sarifExport?: boolean | undefined;
+    otel?: boolean | undefined;
+}>;
+export type FeatureFlags = z.infer<typeof FeatureFlagsSchema>;
+/**
+ * Full configuration schema
+ */
+export declare const VasperaConfigSchema: z.ZodObject<{
+    /** Config version */
+    version: z.ZodDefault<z.ZodLiteral<1>>;
+    /** Agent configurations */
+    agents: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        /** Whether agent is enabled */
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** Agent weight for consensus (0-1) */
+        weight: z.ZodDefault<z.ZodNumber>;
+        /** Model to use for this agent */
+        model: z.ZodOptional<z.ZodString>;
+        /** Temperature for this agent */
+        temperature: z.ZodOptional<z.ZodNumber>;
+        /** Custom prompt additions */
+        promptAdditions: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        weight: number;
+        model?: string | undefined;
+        temperature?: number | undefined;
+        promptAdditions?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        model?: string | undefined;
+        weight?: number | undefined;
+        temperature?: number | undefined;
+        promptAdditions?: string | undefined;
+    }>>>;
+    /** Scanner configurations */
+    scanners: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        /** Whether scanner is enabled */
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** Scanner timeout in ms */
+        timeout: z.ZodOptional<z.ZodNumber>;
+        /** Custom rules directory */
+        rulesDir: z.ZodOptional<z.ZodString>;
+        /** Additional scanner-specific options */
+        options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        timeout?: number | undefined;
+        options?: Record<string, unknown> | undefined;
+        rulesDir?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        timeout?: number | undefined;
+        options?: Record<string, unknown> | undefined;
+        rulesDir?: string | undefined;
+    }>>>;
+    /** Feature flags */
+    features: z.ZodDefault<z.ZodObject<{
+        /** Enable multi-model consensus */
+        multiModel: z.ZodDefault<z.ZodBoolean>;
+        /** Enable cost tracking */
+        costTracking: z.ZodDefault<z.ZodBoolean>;
+        /** Enable auto-fix suggestions */
+        autofix: z.ZodDefault<z.ZodBoolean>;
+        /** Enable incremental scanning */
+        incrementalScan: z.ZodDefault<z.ZodBoolean>;
+        /** Enable scanner caching */
+        scannerCache: z.ZodDefault<z.ZodBoolean>;
+        /** Enable cross-verification */
+        crossVerification: z.ZodDefault<z.ZodBoolean>;
+        /** Enable Sigstore signing */
+        sigstoreSigning: z.ZodDefault<z.ZodBoolean>;
+        /** Enable SARIF export */
+        sarifExport: z.ZodDefault<z.ZodBoolean>;
+        /** Enable compliance mapping */
+        complianceMapping: z.ZodDefault<z.ZodBoolean>;
+        /** Enable OpenTelemetry */
+        otel: z.ZodDefault<z.ZodBoolean>;
+        /** Enable plugin system */
+        plugins: z.ZodDefault<z.ZodBoolean>;
+        /** Enable red team mode */
+        redteam: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        redteam: boolean;
+        plugins: boolean;
+        complianceMapping: boolean;
+        multiModel: boolean;
+        costTracking: boolean;
+        autofix: boolean;
+        incrementalScan: boolean;
+        scannerCache: boolean;
+        crossVerification: boolean;
+        sigstoreSigning: boolean;
+        sarifExport: boolean;
+        otel: boolean;
+    }, {
+        redteam?: boolean | undefined;
+        plugins?: boolean | undefined;
+        complianceMapping?: boolean | undefined;
+        multiModel?: boolean | undefined;
+        costTracking?: boolean | undefined;
+        autofix?: boolean | undefined;
+        incrementalScan?: boolean | undefined;
+        scannerCache?: boolean | undefined;
+        crossVerification?: boolean | undefined;
+        sigstoreSigning?: boolean | undefined;
+        sarifExport?: boolean | undefined;
+        otel?: boolean | undefined;
+    }>>;
+    /** Default model for agents */
+    defaultModel: z.ZodDefault<z.ZodString>;
+    /** Default temperature */
+    defaultTemperature: z.ZodDefault<z.ZodNumber>;
+    /** Certification settings */
+    certification: z.ZodDefault<z.ZodObject<{
+        /** Minimum confidence threshold */
+        minConfidence: z.ZodDefault<z.ZodNumber>;
+        /** Required agent agreement ratio */
+        requiredAgreement: z.ZodDefault<z.ZodNumber>;
+        /** Maximum findings per agent */
+        maxFindingsPerAgent: z.ZodDefault<z.ZodNumber>;
+        /** Auto-finalize when complete */
+        autoFinalize: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        minConfidence: number;
+        requiredAgreement: number;
+        maxFindingsPerAgent: number;
+        autoFinalize: boolean;
+    }, {
+        minConfidence?: number | undefined;
+        requiredAgreement?: number | undefined;
+        maxFindingsPerAgent?: number | undefined;
+        autoFinalize?: boolean | undefined;
+    }>>;
+    /** Cost tracking settings */
+    cost: z.ZodDefault<z.ZodObject<{
+        /** Maximum budget per certification (USD) */
+        maxBudget: z.ZodOptional<z.ZodNumber>;
+        /** Warning threshold (percentage of budget) */
+        warningThreshold: z.ZodDefault<z.ZodNumber>;
+        /** Abort on budget exceeded */
+        abortOnBudget: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        warningThreshold: number;
+        abortOnBudget: boolean;
+        maxBudget?: number | undefined;
+    }, {
+        maxBudget?: number | undefined;
+        warningThreshold?: number | undefined;
+        abortOnBudget?: boolean | undefined;
+    }>>;
+    /** Plugin settings */
+    plugins: z.ZodDefault<z.ZodObject<{
+        /** Load plugins from .vaspera/plugins */
+        loadLocal: z.ZodDefault<z.ZodBoolean>;
+        /** Load plugins from npm */
+        loadNpm: z.ZodDefault<z.ZodBoolean>;
+        /** Run plugins in sandbox */
+        sandbox: z.ZodDefault<z.ZodBoolean>;
+        /** Plugin-specific configs */
+        configs: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, "strip", z.ZodTypeAny, {
+        configs: Record<string, Record<string, unknown>>;
+        loadLocal: boolean;
+        loadNpm: boolean;
+        sandbox: boolean;
+    }, {
+        configs?: Record<string, Record<string, unknown>> | undefined;
+        loadLocal?: boolean | undefined;
+        loadNpm?: boolean | undefined;
+        sandbox?: boolean | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    version: 1;
+    agents: Record<string, {
+        enabled: boolean;
+        weight: number;
+        model?: string | undefined;
+        temperature?: number | undefined;
+        promptAdditions?: string | undefined;
+    }>;
+    scanners: Record<string, {
+        enabled: boolean;
+        timeout?: number | undefined;
+        options?: Record<string, unknown> | undefined;
+        rulesDir?: string | undefined;
+    }>;
+    plugins: {
+        configs: Record<string, Record<string, unknown>>;
+        loadLocal: boolean;
+        loadNpm: boolean;
+        sandbox: boolean;
+    };
+    cost: {
+        warningThreshold: number;
+        abortOnBudget: boolean;
+        maxBudget?: number | undefined;
+    };
+    features: {
+        redteam: boolean;
+        plugins: boolean;
+        complianceMapping: boolean;
+        multiModel: boolean;
+        costTracking: boolean;
+        autofix: boolean;
+        incrementalScan: boolean;
+        scannerCache: boolean;
+        crossVerification: boolean;
+        sigstoreSigning: boolean;
+        sarifExport: boolean;
+        otel: boolean;
+    };
+    defaultModel: string;
+    defaultTemperature: number;
+    certification: {
+        minConfidence: number;
+        requiredAgreement: number;
+        maxFindingsPerAgent: number;
+        autoFinalize: boolean;
+    };
+}, {
+    version?: 1 | undefined;
+    agents?: Record<string, {
+        enabled?: boolean | undefined;
+        model?: string | undefined;
+        weight?: number | undefined;
+        temperature?: number | undefined;
+        promptAdditions?: string | undefined;
+    }> | undefined;
+    scanners?: Record<string, {
+        enabled?: boolean | undefined;
+        timeout?: number | undefined;
+        options?: Record<string, unknown> | undefined;
+        rulesDir?: string | undefined;
+    }> | undefined;
+    plugins?: {
+        configs?: Record<string, Record<string, unknown>> | undefined;
+        loadLocal?: boolean | undefined;
+        loadNpm?: boolean | undefined;
+        sandbox?: boolean | undefined;
+    } | undefined;
+    cost?: {
+        maxBudget?: number | undefined;
+        warningThreshold?: number | undefined;
+        abortOnBudget?: boolean | undefined;
+    } | undefined;
+    features?: {
+        redteam?: boolean | undefined;
+        plugins?: boolean | undefined;
+        complianceMapping?: boolean | undefined;
+        multiModel?: boolean | undefined;
+        costTracking?: boolean | undefined;
+        autofix?: boolean | undefined;
+        incrementalScan?: boolean | undefined;
+        scannerCache?: boolean | undefined;
+        crossVerification?: boolean | undefined;
+        sigstoreSigning?: boolean | undefined;
+        sarifExport?: boolean | undefined;
+        otel?: boolean | undefined;
+    } | undefined;
+    defaultModel?: string | undefined;
+    defaultTemperature?: number | undefined;
+    certification?: {
+        minConfidence?: number | undefined;
+        requiredAgreement?: number | undefined;
+        maxFindingsPerAgent?: number | undefined;
+        autoFinalize?: boolean | undefined;
+    } | undefined;
+}>;
+export type VasperaConfig = z.infer<typeof VasperaConfigSchema>;
+/**
+ * Default configuration
+ */
+export declare const DEFAULT_CONFIG: VasperaConfig;
+/**
+ * Load configuration from .vaspera/config.yaml
+ */
+export declare function loadConfig(projectPath: string): Promise<VasperaConfig>;
+/**
+ * Clear config cache
+ */
+export declare function clearConfigCache(): void;
+/**
+ * Check if a feature is enabled
+ */
+export declare function isFeatureEnabled(config: VasperaConfig, feature: keyof FeatureFlags): boolean;
+/**
+ * Check if an agent is enabled
+ */
+export declare function isAgentEnabled(config: VasperaConfig, agent: string): boolean;
+/**
+ * Get agent weight
+ */
+export declare function getAgentWeight(config: VasperaConfig, agent: string): number;
+/**
+ * Check if a scanner is enabled
+ */
+export declare function isScannerEnabled(config: VasperaConfig, scanner: string): boolean;
+/**
+ * Get scanner timeout
+ */
+export declare function getScannerTimeout(config: VasperaConfig, scanner: string, defaultTimeout?: number): number;
+/**
+ * Generate sample configuration file
+ */
+export declare function generateSampleConfig(): string;
+/**
+ * Save configuration to file
+ */
+export declare function saveConfig(projectPath: string, config: VasperaConfig): Promise<void>;
+//# sourceMappingURL=flags.d.ts.map

package/dist/config/flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../src/config/flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;GAEG;AACH,eAAO,MAAM,iBAAiB;IAC5B,+BAA+B;;IAG/B,uCAAuC;;IAGvC,kCAAkC;;IAGlC,iCAAiC;;IAGjC,8BAA8B;;;;;;;;;;;;;;EAE9B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,mBAAmB;IAC9B,iCAAiC;;IAGjC,4BAA4B;;IAG5B,6BAA6B;;IAG7B,0CAA0C;;;;;;;;;;;;EAE1C,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,kBAAkB;IAC7B,mCAAmC;;IAGnC,2BAA2B;;IAG3B,kCAAkC;;IAGlC,kCAAkC;;IAGlC,6BAA6B;;IAG7B,gCAAgC;;IAGhC,8BAA8B;;IAG9B,0BAA0B;;IAG1B,gCAAgC;;IAGhC,2BAA2B;;IAG3B,2BAA2B;;IAG3B,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE3B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,mBAAmB;IAC9B,qBAAqB;;IAGrB,2BAA2B;;QAvF3B,+BAA+B;;QAG/B,uCAAuC;;QAGvC,kCAAkC;;QAGlC,iCAAiC;;QAGjC,8BAA8B;;;;;;;;;;;;;;;IA8E9B,6BAA6B;;QApE7B,iCAAiC;;QAGjC,4BAA4B;;QAG5B,6BAA6B;;QAG7B,0CAA0C;;;;;;;;;;;;;IA8D1C,oBAAoB;;QApDpB,mCAAmC;;QAGnC,2BAA2B;;QAG3B,kCAAkC;;QAGlC,kCAAkC;;QAGlC,6BAA6B;;QAG7B,gCAAgC;;QAGhC,8BAA8B;;QAG9B,0BAA0B;;QAG1B,gCAAgC;;QAGhC,2BAA2B;;QAG3B,2BAA2B;;QAG3B,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsB3B,+BAA+B;;IAG/B,0BAA0B;;IAG1B,6BAA6B;;QAE3B,mCAAmC;;QAGnC,qCAAqC;;QAGrC,iCAAiC;;QAGjC,kCAAkC;;;;;;;;;;;;;IAIpC,6BAA6B;;QAE3B,6CAA6C;;QAG7C,+CAA+C;;QAG/C,+BAA+B;;;;;;;;;;;IAIjC,sBAAsB;;QAEpB,yCAAyC;;QAGzC,4BAA4B;;QAG5B,6BAA6B;;QAG7B,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGhC,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,aA6C5B,CAAC;AAQF;;GAEG;AACH,wBAAsB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAyD5E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAGvC;AAkFD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,YAAY,GAC1B,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,GACZ,MAAM,CAER;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,cAAc,GAAE,MAAe,GAC9B,MAAM,CAER;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CA8E7C;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAQf"}