vaspera 2.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +184 -0
- package/LICENSE +21 -0
- package/README.md +809 -0
- package/dist/__tests__/integration/certification-flow.test.d.ts +5 -0
- package/dist/__tests__/integration/certification-flow.test.d.ts.map +1 -0
- package/dist/__tests__/integration/certification-flow.test.js +245 -0
- package/dist/__tests__/integration/certification-flow.test.js.map +1 -0
- package/dist/__tests__/integration/commands.test.d.ts +5 -0
- package/dist/__tests__/integration/commands.test.d.ts.map +1 -0
- package/dist/__tests__/integration/commands.test.js +93 -0
- package/dist/__tests__/integration/commands.test.js.map +1 -0
- package/dist/action/diff-mode.d.ts +34 -0
- package/dist/action/diff-mode.d.ts.map +1 -0
- package/dist/action/diff-mode.js +201 -0
- package/dist/action/diff-mode.js.map +1 -0
- package/dist/action/diff-mode.test.d.ts +5 -0
- package/dist/action/diff-mode.test.d.ts.map +1 -0
- package/dist/action/diff-mode.test.js +162 -0
- package/dist/action/diff-mode.test.js.map +1 -0
- package/dist/action/index.d.ts +10 -0
- package/dist/action/index.d.ts.map +1 -0
- package/dist/action/index.js +231 -0
- package/dist/action/index.js.map +1 -0
- package/dist/action/pr-comment.d.ts +30 -0
- package/dist/action/pr-comment.d.ts.map +1 -0
- package/dist/action/pr-comment.js +301 -0
- package/dist/action/pr-comment.js.map +1 -0
- package/dist/action/pr-comment.test.d.ts +5 -0
- package/dist/action/pr-comment.test.d.ts.map +1 -0
- package/dist/action/pr-comment.test.js +189 -0
- package/dist/action/pr-comment.test.js.map +1 -0
- package/dist/action/sarif-upload.d.ts +104 -0
- package/dist/action/sarif-upload.d.ts.map +1 -0
- package/dist/action/sarif-upload.js +188 -0
- package/dist/action/sarif-upload.js.map +1 -0
- package/dist/action/sarif-upload.test.d.ts +5 -0
- package/dist/action/sarif-upload.test.d.ts.map +1 -0
- package/dist/action/sarif-upload.test.js +206 -0
- package/dist/action/sarif-upload.test.js.map +1 -0
- package/dist/action/types.d.ts +104 -0
- package/dist/action/types.d.ts.map +1 -0
- package/dist/action/types.js +33 -0
- package/dist/action/types.js.map +1 -0
- package/dist/action/types.test.d.ts +5 -0
- package/dist/action/types.test.d.ts.map +1 -0
- package/dist/action/types.test.js +79 -0
- package/dist/action/types.test.js.map +1 -0
- package/dist/agents/agent-integrity.d.ts +111 -0
- package/dist/agents/agent-integrity.d.ts.map +1 -0
- package/dist/agents/agent-integrity.js +308 -0
- package/dist/agents/agent-integrity.js.map +1 -0
- package/dist/agents/agent-privacy.d.ts +68 -0
- package/dist/agents/agent-privacy.d.ts.map +1 -0
- package/dist/agents/agent-privacy.js +345 -0
- package/dist/agents/agent-privacy.js.map +1 -0
- package/dist/agents/exploit-chain.d.ts +64 -0
- package/dist/agents/exploit-chain.d.ts.map +1 -0
- package/dist/agents/exploit-chain.js +477 -0
- package/dist/agents/exploit-chain.js.map +1 -0
- package/dist/agents/exploit-chain.test.d.ts +5 -0
- package/dist/agents/exploit-chain.test.d.ts.map +1 -0
- package/dist/agents/exploit-chain.test.js +455 -0
- package/dist/agents/exploit-chain.test.js.map +1 -0
- package/dist/agents/index.d.ts +14 -0
- package/dist/agents/index.d.ts.map +1 -0
- package/dist/agents/index.js +19 -0
- package/dist/agents/index.js.map +1 -0
- package/dist/agents/logic-flaw-detector.d.ts +55 -0
- package/dist/agents/logic-flaw-detector.d.ts.map +1 -0
- package/dist/agents/logic-flaw-detector.js +454 -0
- package/dist/agents/logic-flaw-detector.js.map +1 -0
- package/dist/agents/zero-day-hunter.d.ts +69 -0
- package/dist/agents/zero-day-hunter.d.ts.map +1 -0
- package/dist/agents/zero-day-hunter.js +591 -0
- package/dist/agents/zero-day-hunter.js.map +1 -0
- package/dist/certification/artifacts.d.ts +21 -0
- package/dist/certification/artifacts.d.ts.map +1 -0
- package/dist/certification/artifacts.js +275 -0
- package/dist/certification/artifacts.js.map +1 -0
- package/dist/certification/autofix.d.ts +122 -0
- package/dist/certification/autofix.d.ts.map +1 -0
- package/dist/certification/autofix.js +476 -0
- package/dist/certification/autofix.js.map +1 -0
- package/dist/certification/badge.d.ts +56 -0
- package/dist/certification/badge.d.ts.map +1 -0
- package/dist/certification/badge.js +155 -0
- package/dist/certification/badge.js.map +1 -0
- package/dist/certification/cache.d.ts +121 -0
- package/dist/certification/cache.d.ts.map +1 -0
- package/dist/certification/cache.js +275 -0
- package/dist/certification/cache.js.map +1 -0
- package/dist/certification/cache.test.d.ts +5 -0
- package/dist/certification/cache.test.d.ts.map +1 -0
- package/dist/certification/cache.test.js +270 -0
- package/dist/certification/cache.test.js.map +1 -0
- package/dist/certification/consensus.d.ts +105 -0
- package/dist/certification/consensus.d.ts.map +1 -0
- package/dist/certification/consensus.js +353 -0
- package/dist/certification/consensus.js.map +1 -0
- package/dist/certification/consensus.test.d.ts +5 -0
- package/dist/certification/consensus.test.d.ts.map +1 -0
- package/dist/certification/consensus.test.js +342 -0
- package/dist/certification/consensus.test.js.map +1 -0
- package/dist/certification/index.d.ts +14 -0
- package/dist/certification/index.d.ts.map +1 -0
- package/dist/certification/index.js +14 -0
- package/dist/certification/index.js.map +1 -0
- package/dist/certification/rules.d.ts +89 -0
- package/dist/certification/rules.d.ts.map +1 -0
- package/dist/certification/rules.js +317 -0
- package/dist/certification/rules.js.map +1 -0
- package/dist/certification/sarif.d.ts +107 -0
- package/dist/certification/sarif.d.ts.map +1 -0
- package/dist/certification/sarif.js +191 -0
- package/dist/certification/sarif.js.map +1 -0
- package/dist/certification/store.d.ts +255 -0
- package/dist/certification/store.d.ts.map +1 -0
- package/dist/certification/store.js +835 -0
- package/dist/certification/store.js.map +1 -0
- package/dist/certification/store.test.d.ts +5 -0
- package/dist/certification/store.test.d.ts.map +1 -0
- package/dist/certification/store.test.js +468 -0
- package/dist/certification/store.test.js.map +1 -0
- package/dist/certification/summary.d.ts +72 -0
- package/dist/certification/summary.d.ts.map +1 -0
- package/dist/certification/summary.js +296 -0
- package/dist/certification/summary.js.map +1 -0
- package/dist/certification/types.d.ts +138 -0
- package/dist/certification/types.d.ts.map +1 -0
- package/dist/certification/types.js +34 -0
- package/dist/certification/types.js.map +1 -0
- package/dist/commands/audits/api-check.d.ts +3 -0
- package/dist/commands/audits/api-check.d.ts.map +1 -0
- package/dist/commands/audits/api-check.js +71 -0
- package/dist/commands/audits/api-check.js.map +1 -0
- package/dist/commands/audits/deadcode.d.ts +3 -0
- package/dist/commands/audits/deadcode.d.ts.map +1 -0
- package/dist/commands/audits/deadcode.js +63 -0
- package/dist/commands/audits/deadcode.js.map +1 -0
- package/dist/commands/audits/deps.d.ts +3 -0
- package/dist/commands/audits/deps.d.ts.map +1 -0
- package/dist/commands/audits/deps.js +56 -0
- package/dist/commands/audits/deps.js.map +1 -0
- package/dist/commands/audits/errors.d.ts +3 -0
- package/dist/commands/audits/errors.d.ts.map +1 -0
- package/dist/commands/audits/errors.js +65 -0
- package/dist/commands/audits/errors.js.map +1 -0
- package/dist/commands/audits/index.d.ts +3 -0
- package/dist/commands/audits/index.d.ts.map +1 -0
- package/dist/commands/audits/index.js +15 -0
- package/dist/commands/audits/index.js.map +1 -0
- package/dist/commands/audits/perf.d.ts +3 -0
- package/dist/commands/audits/perf.d.ts.map +1 -0
- package/dist/commands/audits/perf.js +85 -0
- package/dist/commands/audits/perf.js.map +1 -0
- package/dist/commands/audits/secrets.d.ts +3 -0
- package/dist/commands/audits/secrets.d.ts.map +1 -0
- package/dist/commands/audits/secrets.js +71 -0
- package/dist/commands/audits/secrets.js.map +1 -0
- package/dist/commands/certification/certify.d.ts +3 -0
- package/dist/commands/certification/certify.d.ts.map +1 -0
- package/dist/commands/certification/certify.js +108 -0
- package/dist/commands/certification/certify.js.map +1 -0
- package/dist/commands/certification/index.d.ts +3 -0
- package/dist/commands/certification/index.d.ts.map +1 -0
- package/dist/commands/certification/index.js +17 -0
- package/dist/commands/certification/index.js.map +1 -0
- package/dist/commands/certification/performance.d.ts +3 -0
- package/dist/commands/certification/performance.d.ts.map +1 -0
- package/dist/commands/certification/performance.js +89 -0
- package/dist/commands/certification/performance.js.map +1 -0
- package/dist/commands/certification/quality.d.ts +3 -0
- package/dist/commands/certification/quality.d.ts.map +1 -0
- package/dist/commands/certification/quality.js +92 -0
- package/dist/commands/certification/quality.js.map +1 -0
- package/dist/commands/certification/redteam.d.ts +3 -0
- package/dist/commands/certification/redteam.d.ts.map +1 -0
- package/dist/commands/certification/redteam.js +114 -0
- package/dist/commands/certification/redteam.js.map +1 -0
- package/dist/commands/certification/reliability.d.ts +3 -0
- package/dist/commands/certification/reliability.d.ts.map +1 -0
- package/dist/commands/certification/reliability.js +93 -0
- package/dist/commands/certification/reliability.js.map +1 -0
- package/dist/commands/certification/security.d.ts +3 -0
- package/dist/commands/certification/security.d.ts.map +1 -0
- package/dist/commands/certification/security.js +90 -0
- package/dist/commands/certification/security.js.map +1 -0
- package/dist/commands/certification/typesafety.d.ts +3 -0
- package/dist/commands/certification/typesafety.d.ts.map +1 -0
- package/dist/commands/certification/typesafety.js +87 -0
- package/dist/commands/certification/typesafety.js.map +1 -0
- package/dist/commands/core/add-tests.d.ts +3 -0
- package/dist/commands/core/add-tests.d.ts.map +1 -0
- package/dist/commands/core/add-tests.js +29 -0
- package/dist/commands/core/add-tests.js.map +1 -0
- package/dist/commands/core/audit.d.ts +3 -0
- package/dist/commands/core/audit.d.ts.map +1 -0
- package/dist/commands/core/audit.js +64 -0
- package/dist/commands/core/audit.js.map +1 -0
- package/dist/commands/core/fix-critical.d.ts +3 -0
- package/dist/commands/core/fix-critical.d.ts.map +1 -0
- package/dist/commands/core/fix-critical.js +22 -0
- package/dist/commands/core/fix-critical.js.map +1 -0
- package/dist/commands/core/fix-high.d.ts +3 -0
- package/dist/commands/core/fix-high.d.ts.map +1 -0
- package/dist/commands/core/fix-high.js +32 -0
- package/dist/commands/core/fix-high.js.map +1 -0
- package/dist/commands/core/fix-medium.d.ts +3 -0
- package/dist/commands/core/fix-medium.d.ts.map +1 -0
- package/dist/commands/core/fix-medium.js +29 -0
- package/dist/commands/core/fix-medium.js.map +1 -0
- package/dist/commands/core/fix-rls.d.ts +3 -0
- package/dist/commands/core/fix-rls.d.ts.map +1 -0
- package/dist/commands/core/fix-rls.js +17 -0
- package/dist/commands/core/fix-rls.js.map +1 -0
- package/dist/commands/core/harden.d.ts +3 -0
- package/dist/commands/core/harden.d.ts.map +1 -0
- package/dist/commands/core/harden.js +19 -0
- package/dist/commands/core/harden.js.map +1 -0
- package/dist/commands/core/index.d.ts +3 -0
- package/dist/commands/core/index.d.ts.map +1 -0
- package/dist/commands/core/index.js +21 -0
- package/dist/commands/core/index.js.map +1 -0
- package/dist/commands/core/preflight.d.ts +3 -0
- package/dist/commands/core/preflight.d.ts.map +1 -0
- package/dist/commands/core/preflight.js +50 -0
- package/dist/commands/core/preflight.js.map +1 -0
- package/dist/commands/core/verify.d.ts +3 -0
- package/dist/commands/core/verify.d.ts.map +1 -0
- package/dist/commands/core/verify.js +32 -0
- package/dist/commands/core/verify.js.map +1 -0
- package/dist/commands/index.d.ts +28 -0
- package/dist/commands/index.d.ts.map +1 -0
- package/dist/commands/index.js +37 -0
- package/dist/commands/index.js.map +1 -0
- package/dist/commands/types.d.ts +9 -0
- package/dist/commands/types.d.ts.map +1 -0
- package/dist/commands/types.js +5 -0
- package/dist/commands/types.js.map +1 -0
- package/dist/compliance/cis.d.ts +29 -0
- package/dist/compliance/cis.d.ts.map +1 -0
- package/dist/compliance/cis.js +316 -0
- package/dist/compliance/cis.js.map +1 -0
- package/dist/compliance/frameworks/eu-ai-act.d.ts +55 -0
- package/dist/compliance/frameworks/eu-ai-act.d.ts.map +1 -0
- package/dist/compliance/frameworks/eu-ai-act.js +621 -0
- package/dist/compliance/frameworks/eu-ai-act.js.map +1 -0
- package/dist/compliance/frameworks/index.d.ts +67 -0
- package/dist/compliance/frameworks/index.d.ts.map +1 -0
- package/dist/compliance/frameworks/index.js +97 -0
- package/dist/compliance/frameworks/index.js.map +1 -0
- package/dist/compliance/frameworks/iso-42001.d.ts +59 -0
- package/dist/compliance/frameworks/iso-42001.d.ts.map +1 -0
- package/dist/compliance/frameworks/iso-42001.js +719 -0
- package/dist/compliance/frameworks/iso-42001.js.map +1 -0
- package/dist/compliance/frameworks/mitre-atlas.d.ts +58 -0
- package/dist/compliance/frameworks/mitre-atlas.d.ts.map +1 -0
- package/dist/compliance/frameworks/mitre-atlas.js +686 -0
- package/dist/compliance/frameworks/mitre-atlas.js.map +1 -0
- package/dist/compliance/frameworks/nist-ai-rmf.d.ts +51 -0
- package/dist/compliance/frameworks/nist-ai-rmf.d.ts.map +1 -0
- package/dist/compliance/frameworks/nist-ai-rmf.js +677 -0
- package/dist/compliance/frameworks/nist-ai-rmf.js.map +1 -0
- package/dist/compliance/frameworks/owasp-llm.d.ts +58 -0
- package/dist/compliance/frameworks/owasp-llm.d.ts.map +1 -0
- package/dist/compliance/frameworks/owasp-llm.js +399 -0
- package/dist/compliance/frameworks/owasp-llm.js.map +1 -0
- package/dist/compliance/gdpr.d.ts +34 -0
- package/dist/compliance/gdpr.d.ts.map +1 -0
- package/dist/compliance/gdpr.js +319 -0
- package/dist/compliance/gdpr.js.map +1 -0
- package/dist/compliance/hipaa.d.ts +29 -0
- package/dist/compliance/hipaa.d.ts.map +1 -0
- package/dist/compliance/hipaa.js +205 -0
- package/dist/compliance/hipaa.js.map +1 -0
- package/dist/compliance/index.d.ts +18 -0
- package/dist/compliance/index.d.ts.map +1 -0
- package/dist/compliance/index.js +26 -0
- package/dist/compliance/index.js.map +1 -0
- package/dist/compliance/iso27001.d.ts +30 -0
- package/dist/compliance/iso27001.d.ts.map +1 -0
- package/dist/compliance/iso27001.js +332 -0
- package/dist/compliance/iso27001.js.map +1 -0
- package/dist/compliance/mapper.d.ts +42 -0
- package/dist/compliance/mapper.d.ts.map +1 -0
- package/dist/compliance/mapper.js +269 -0
- package/dist/compliance/mapper.js.map +1 -0
- package/dist/compliance/mapper.test.d.ts +5 -0
- package/dist/compliance/mapper.test.d.ts.map +1 -0
- package/dist/compliance/mapper.test.js +360 -0
- package/dist/compliance/mapper.test.js.map +1 -0
- package/dist/compliance/pci-dss.d.ts +29 -0
- package/dist/compliance/pci-dss.d.ts.map +1 -0
- package/dist/compliance/pci-dss.js +247 -0
- package/dist/compliance/pci-dss.js.map +1 -0
- package/dist/compliance/report.d.ts +25 -0
- package/dist/compliance/report.d.ts.map +1 -0
- package/dist/compliance/report.js +254 -0
- package/dist/compliance/report.js.map +1 -0
- package/dist/compliance/report.test.d.ts +5 -0
- package/dist/compliance/report.test.d.ts.map +1 -0
- package/dist/compliance/report.test.js +128 -0
- package/dist/compliance/report.test.js.map +1 -0
- package/dist/compliance/soc2.d.ts +30 -0
- package/dist/compliance/soc2.d.ts.map +1 -0
- package/dist/compliance/soc2.js +262 -0
- package/dist/compliance/soc2.js.map +1 -0
- package/dist/compliance/soc2.test.d.ts +5 -0
- package/dist/compliance/soc2.test.d.ts.map +1 -0
- package/dist/compliance/soc2.test.js +86 -0
- package/dist/compliance/soc2.test.js.map +1 -0
- package/dist/compliance/types.d.ts +125 -0
- package/dist/compliance/types.d.ts.map +1 -0
- package/dist/compliance/types.js +10 -0
- package/dist/compliance/types.js.map +1 -0
- package/dist/config/flags.d.ts +456 -0
- package/dist/config/flags.d.ts.map +1 -0
- package/dist/config/flags.js +464 -0
- package/dist/config/flags.js.map +1 -0
- package/dist/config/index.d.ts +10 -0
- package/dist/config/index.d.ts.map +1 -0
- package/dist/config/index.js +10 -0
- package/dist/config/index.js.map +1 -0
- package/dist/config/severity-overrides.d.ts +209 -0
- package/dist/config/severity-overrides.d.ts.map +1 -0
- package/dist/config/severity-overrides.js +380 -0
- package/dist/config/severity-overrides.js.map +1 -0
- package/dist/cost/index.d.ts +11 -0
- package/dist/cost/index.d.ts.map +1 -0
- package/dist/cost/index.js +12 -0
- package/dist/cost/index.js.map +1 -0
- package/dist/cost/pricing.d.ts +57 -0
- package/dist/cost/pricing.d.ts.map +1 -0
- package/dist/cost/pricing.js +196 -0
- package/dist/cost/pricing.js.map +1 -0
- package/dist/cost/pricing.test.d.ts +5 -0
- package/dist/cost/pricing.test.d.ts.map +1 -0
- package/dist/cost/pricing.test.js +195 -0
- package/dist/cost/pricing.test.js.map +1 -0
- package/dist/cost/tracker.d.ts +100 -0
- package/dist/cost/tracker.d.ts.map +1 -0
- package/dist/cost/tracker.js +366 -0
- package/dist/cost/tracker.js.map +1 -0
- package/dist/cost/tracker.test.d.ts +5 -0
- package/dist/cost/tracker.test.d.ts.map +1 -0
- package/dist/cost/tracker.test.js +360 -0
- package/dist/cost/tracker.test.js.map +1 -0
- package/dist/cost/types.d.ts +135 -0
- package/dist/cost/types.d.ts.map +1 -0
- package/dist/cost/types.js +9 -0
- package/dist/cost/types.js.map +1 -0
- package/dist/enterprise/auth/oidc.d.ts +231 -0
- package/dist/enterprise/auth/oidc.d.ts.map +1 -0
- package/dist/enterprise/auth/oidc.js +372 -0
- package/dist/enterprise/auth/oidc.js.map +1 -0
- package/dist/enterprise/auth/oidc.test.d.ts +5 -0
- package/dist/enterprise/auth/oidc.test.d.ts.map +1 -0
- package/dist/enterprise/auth/oidc.test.js +435 -0
- package/dist/enterprise/auth/oidc.test.js.map +1 -0
- package/dist/enterprise/index.d.ts +14 -0
- package/dist/enterprise/index.d.ts.map +1 -0
- package/dist/enterprise/index.js +19 -0
- package/dist/enterprise/index.js.map +1 -0
- package/dist/enterprise/integrations/chat.d.ts +205 -0
- package/dist/enterprise/integrations/chat.d.ts.map +1 -0
- package/dist/enterprise/integrations/chat.js +624 -0
- package/dist/enterprise/integrations/chat.js.map +1 -0
- package/dist/enterprise/integrations/chat.test.d.ts +5 -0
- package/dist/enterprise/integrations/chat.test.d.ts.map +1 -0
- package/dist/enterprise/integrations/chat.test.js +557 -0
- package/dist/enterprise/integrations/chat.test.js.map +1 -0
- package/dist/enterprise/integrations/ticketing.d.ts +257 -0
- package/dist/enterprise/integrations/ticketing.d.ts.map +1 -0
- package/dist/enterprise/integrations/ticketing.js +548 -0
- package/dist/enterprise/integrations/ticketing.js.map +1 -0
- package/dist/enterprise/integrations/ticketing.test.d.ts +5 -0
- package/dist/enterprise/integrations/ticketing.test.d.ts.map +1 -0
- package/dist/enterprise/integrations/ticketing.test.js +693 -0
- package/dist/enterprise/integrations/ticketing.test.js.map +1 -0
- package/dist/enterprise/policy/opa.d.ts +194 -0
- package/dist/enterprise/policy/opa.d.ts.map +1 -0
- package/dist/enterprise/policy/opa.js +385 -0
- package/dist/enterprise/policy/opa.js.map +1 -0
- package/dist/enterprise/policy/opa.test.d.ts +5 -0
- package/dist/enterprise/policy/opa.test.d.ts.map +1 -0
- package/dist/enterprise/policy/opa.test.js +702 -0
- package/dist/enterprise/policy/opa.test.js.map +1 -0
- package/dist/enterprise/signing/kms.d.ts +211 -0
- package/dist/enterprise/signing/kms.d.ts.map +1 -0
- package/dist/enterprise/signing/kms.js +480 -0
- package/dist/enterprise/signing/kms.js.map +1 -0
- package/dist/enterprise/signing/kms.test.d.ts +5 -0
- package/dist/enterprise/signing/kms.test.d.ts.map +1 -0
- package/dist/enterprise/signing/kms.test.js +511 -0
- package/dist/enterprise/signing/kms.test.js.map +1 -0
- package/dist/eval/fixtures.d.ts +58 -0
- package/dist/eval/fixtures.d.ts.map +1 -0
- package/dist/eval/fixtures.js +571 -0
- package/dist/eval/fixtures.js.map +1 -0
- package/dist/eval/fixtures.test.d.ts +5 -0
- package/dist/eval/fixtures.test.d.ts.map +1 -0
- package/dist/eval/fixtures.test.js +193 -0
- package/dist/eval/fixtures.test.js.map +1 -0
- package/dist/eval/harness.d.ts +30 -0
- package/dist/eval/harness.d.ts.map +1 -0
- package/dist/eval/harness.js +221 -0
- package/dist/eval/harness.js.map +1 -0
- package/dist/eval/harness.test.d.ts +5 -0
- package/dist/eval/harness.test.d.ts.map +1 -0
- package/dist/eval/harness.test.js +314 -0
- package/dist/eval/harness.test.js.map +1 -0
- package/dist/eval/index.d.ts +15 -0
- package/dist/eval/index.d.ts.map +1 -0
- package/dist/eval/index.js +18 -0
- package/dist/eval/index.js.map +1 -0
- package/dist/eval/metrics.d.ts +56 -0
- package/dist/eval/metrics.d.ts.map +1 -0
- package/dist/eval/metrics.js +298 -0
- package/dist/eval/metrics.js.map +1 -0
- package/dist/eval/metrics.test.d.ts +5 -0
- package/dist/eval/metrics.test.d.ts.map +1 -0
- package/dist/eval/metrics.test.js +426 -0
- package/dist/eval/metrics.test.js.map +1 -0
- package/dist/eval/report.d.ts +30 -0
- package/dist/eval/report.d.ts.map +1 -0
- package/dist/eval/report.js +333 -0
- package/dist/eval/report.js.map +1 -0
- package/dist/eval/report.test.d.ts +5 -0
- package/dist/eval/report.test.d.ts.map +1 -0
- package/dist/eval/report.test.js +275 -0
- package/dist/eval/report.test.js.map +1 -0
- package/dist/eval/types.d.ts +234 -0
- package/dist/eval/types.d.ts.map +1 -0
- package/dist/eval/types.js +27 -0
- package/dist/eval/types.js.map +1 -0
- package/dist/http-server.d.ts +3 -0
- package/dist/http-server.d.ts.map +1 -0
- package/dist/http-server.js +127 -0
- package/dist/http-server.js.map +1 -0
- package/dist/index.d.ts +33 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +4120 -0
- package/dist/index.js.map +1 -0
- package/dist/logger.d.ts +46 -0
- package/dist/logger.d.ts.map +1 -0
- package/dist/logger.js +131 -0
- package/dist/logger.js.map +1 -0
- package/dist/multimodel/consensus.d.ts +49 -0
- package/dist/multimodel/consensus.d.ts.map +1 -0
- package/dist/multimodel/consensus.js +454 -0
- package/dist/multimodel/consensus.js.map +1 -0
- package/dist/multimodel/consensus.test.d.ts +5 -0
- package/dist/multimodel/consensus.test.d.ts.map +1 -0
- package/dist/multimodel/consensus.test.js +415 -0
- package/dist/multimodel/consensus.test.js.map +1 -0
- package/dist/multimodel/index.d.ts +13 -0
- package/dist/multimodel/index.d.ts.map +1 -0
- package/dist/multimodel/index.js +14 -0
- package/dist/multimodel/index.js.map +1 -0
- package/dist/multimodel/runner.d.ts +95 -0
- package/dist/multimodel/runner.d.ts.map +1 -0
- package/dist/multimodel/runner.js +312 -0
- package/dist/multimodel/runner.js.map +1 -0
- package/dist/multimodel/runner.test.d.ts +5 -0
- package/dist/multimodel/runner.test.d.ts.map +1 -0
- package/dist/multimodel/runner.test.js +224 -0
- package/dist/multimodel/runner.test.js.map +1 -0
- package/dist/multimodel/types.d.ts +202 -0
- package/dist/multimodel/types.d.ts.map +1 -0
- package/dist/multimodel/types.js +10 -0
- package/dist/multimodel/types.js.map +1 -0
- package/dist/observability/index.d.ts +9 -0
- package/dist/observability/index.d.ts.map +1 -0
- package/dist/observability/index.js +9 -0
- package/dist/observability/index.js.map +1 -0
- package/dist/observability/otel.d.ts +102 -0
- package/dist/observability/otel.d.ts.map +1 -0
- package/dist/observability/otel.js +284 -0
- package/dist/observability/otel.js.map +1 -0
- package/dist/plugins/index.d.ts +10 -0
- package/dist/plugins/index.d.ts.map +1 -0
- package/dist/plugins/index.js +10 -0
- package/dist/plugins/index.js.map +1 -0
- package/dist/plugins/loader.d.ts +78 -0
- package/dist/plugins/loader.d.ts.map +1 -0
- package/dist/plugins/loader.js +470 -0
- package/dist/plugins/loader.js.map +1 -0
- package/dist/plugins/types.d.ts +304 -0
- package/dist/plugins/types.d.ts.map +1 -0
- package/dist/plugins/types.js +100 -0
- package/dist/plugins/types.js.map +1 -0
- package/dist/sbom/cyclonedx.d.ts +30 -0
- package/dist/sbom/cyclonedx.d.ts.map +1 -0
- package/dist/sbom/cyclonedx.js +392 -0
- package/dist/sbom/cyclonedx.js.map +1 -0
- package/dist/sbom/cyclonedx.test.d.ts +5 -0
- package/dist/sbom/cyclonedx.test.d.ts.map +1 -0
- package/dist/sbom/cyclonedx.test.js +244 -0
- package/dist/sbom/cyclonedx.test.js.map +1 -0
- package/dist/sbom/index.d.ts +13 -0
- package/dist/sbom/index.d.ts.map +1 -0
- package/dist/sbom/index.js +15 -0
- package/dist/sbom/index.js.map +1 -0
- package/dist/sbom/provenance.d.ts +37 -0
- package/dist/sbom/provenance.d.ts.map +1 -0
- package/dist/sbom/provenance.js +268 -0
- package/dist/sbom/provenance.js.map +1 -0
- package/dist/sbom/provenance.test.d.ts +5 -0
- package/dist/sbom/provenance.test.d.ts.map +1 -0
- package/dist/sbom/provenance.test.js +189 -0
- package/dist/sbom/provenance.test.js.map +1 -0
- package/dist/sbom/signing.d.ts +87 -0
- package/dist/sbom/signing.d.ts.map +1 -0
- package/dist/sbom/signing.js +354 -0
- package/dist/sbom/signing.js.map +1 -0
- package/dist/sbom/signing.test.d.ts +5 -0
- package/dist/sbom/signing.test.d.ts.map +1 -0
- package/dist/sbom/signing.test.js +170 -0
- package/dist/sbom/signing.test.js.map +1 -0
- package/dist/sbom/types.d.ts +384 -0
- package/dist/sbom/types.d.ts.map +1 -0
- package/dist/sbom/types.js +17 -0
- package/dist/sbom/types.js.map +1 -0
- package/dist/scanners/agent/credential-scope-audit.d.ts +40 -0
- package/dist/scanners/agent/credential-scope-audit.d.ts.map +1 -0
- package/dist/scanners/agent/credential-scope-audit.js +404 -0
- package/dist/scanners/agent/credential-scope-audit.js.map +1 -0
- package/dist/scanners/agent/exfil-path-graph.d.ts +50 -0
- package/dist/scanners/agent/exfil-path-graph.d.ts.map +1 -0
- package/dist/scanners/agent/exfil-path-graph.js +764 -0
- package/dist/scanners/agent/exfil-path-graph.js.map +1 -0
- package/dist/scanners/agent/index.d.ts +43 -0
- package/dist/scanners/agent/index.d.ts.map +1 -0
- package/dist/scanners/agent/index.js +616 -0
- package/dist/scanners/agent/index.js.map +1 -0
- package/dist/scanners/agent/manifest-audit.d.ts +43 -0
- package/dist/scanners/agent/manifest-audit.d.ts.map +1 -0
- package/dist/scanners/agent/manifest-audit.js +403 -0
- package/dist/scanners/agent/manifest-audit.js.map +1 -0
- package/dist/scanners/agent/payloads/index.d.ts +44 -0
- package/dist/scanners/agent/payloads/index.d.ts.map +1 -0
- package/dist/scanners/agent/payloads/index.js +184 -0
- package/dist/scanners/agent/payloads/index.js.map +1 -0
- package/dist/scanners/agent/permission-minimiser.d.ts +48 -0
- package/dist/scanners/agent/permission-minimiser.d.ts.map +1 -0
- package/dist/scanners/agent/permission-minimiser.js +551 -0
- package/dist/scanners/agent/permission-minimiser.js.map +1 -0
- package/dist/scanners/agent/prompt-injection-fuzzer.d.ts +39 -0
- package/dist/scanners/agent/prompt-injection-fuzzer.d.ts.map +1 -0
- package/dist/scanners/agent/prompt-injection-fuzzer.js +720 -0
- package/dist/scanners/agent/prompt-injection-fuzzer.js.map +1 -0
- package/dist/scanners/agent/sandbox-audit.d.ts +44 -0
- package/dist/scanners/agent/sandbox-audit.d.ts.map +1 -0
- package/dist/scanners/agent/sandbox-audit.js +425 -0
- package/dist/scanners/agent/sandbox-audit.js.map +1 -0
- package/dist/scanners/agent/supply-chain-mcp.d.ts +53 -0
- package/dist/scanners/agent/supply-chain-mcp.d.ts.map +1 -0
- package/dist/scanners/agent/supply-chain-mcp.js +479 -0
- package/dist/scanners/agent/supply-chain-mcp.js.map +1 -0
- package/dist/scanners/agent/tool-description-drift.d.ts +62 -0
- package/dist/scanners/agent/tool-description-drift.d.ts.map +1 -0
- package/dist/scanners/agent/tool-description-drift.js +365 -0
- package/dist/scanners/agent/tool-description-drift.js.map +1 -0
- package/dist/scanners/agent/types.d.ts +840 -0
- package/dist/scanners/agent/types.d.ts.map +1 -0
- package/dist/scanners/agent/types.js +149 -0
- package/dist/scanners/agent/types.js.map +1 -0
- package/dist/scanners/bandit.d.ts +25 -0
- package/dist/scanners/bandit.d.ts.map +1 -0
- package/dist/scanners/bandit.js +129 -0
- package/dist/scanners/bandit.js.map +1 -0
- package/dist/scanners/binary-analysis.d.ts +41 -0
- package/dist/scanners/binary-analysis.d.ts.map +1 -0
- package/dist/scanners/binary-analysis.js +587 -0
- package/dist/scanners/binary-analysis.js.map +1 -0
- package/dist/scanners/binary-analysis.test.d.ts +5 -0
- package/dist/scanners/binary-analysis.test.d.ts.map +1 -0
- package/dist/scanners/binary-analysis.test.js +291 -0
- package/dist/scanners/binary-analysis.test.js.map +1 -0
- package/dist/scanners/brakeman.d.ts +30 -0
- package/dist/scanners/brakeman.d.ts.map +1 -0
- package/dist/scanners/brakeman.js +271 -0
- package/dist/scanners/brakeman.js.map +1 -0
- package/dist/scanners/dependencies.d.ts +22 -0
- package/dist/scanners/dependencies.d.ts.map +1 -0
- package/dist/scanners/dependencies.js +202 -0
- package/dist/scanners/dependencies.js.map +1 -0
- package/dist/scanners/dependencies.test.d.ts +5 -0
- package/dist/scanners/dependencies.test.d.ts.map +1 -0
- package/dist/scanners/dependencies.test.js +185 -0
- package/dist/scanners/dependencies.test.js.map +1 -0
- package/dist/scanners/eslint.d.ts +25 -0
- package/dist/scanners/eslint.d.ts.map +1 -0
- package/dist/scanners/eslint.js +220 -0
- package/dist/scanners/eslint.js.map +1 -0
- package/dist/scanners/gosec.d.ts +25 -0
- package/dist/scanners/gosec.d.ts.map +1 -0
- package/dist/scanners/gosec.js +128 -0
- package/dist/scanners/gosec.js.map +1 -0
- package/dist/scanners/index.d.ts +128 -0
- package/dist/scanners/index.d.ts.map +1 -0
- package/dist/scanners/index.js +811 -0
- package/dist/scanners/index.js.map +1 -0
- package/dist/scanners/index.test.d.ts +5 -0
- package/dist/scanners/index.test.d.ts.map +1 -0
- package/dist/scanners/index.test.js +424 -0
- package/dist/scanners/index.test.js.map +1 -0
- package/dist/scanners/memory-safety.d.ts +44 -0
- package/dist/scanners/memory-safety.d.ts.map +1 -0
- package/dist/scanners/memory-safety.js +571 -0
- package/dist/scanners/memory-safety.js.map +1 -0
- package/dist/scanners/memory-safety.test.d.ts +5 -0
- package/dist/scanners/memory-safety.test.d.ts.map +1 -0
- package/dist/scanners/memory-safety.test.js +321 -0
- package/dist/scanners/memory-safety.test.js.map +1 -0
- package/dist/scanners/race-condition.d.ts +25 -0
- package/dist/scanners/race-condition.d.ts.map +1 -0
- package/dist/scanners/race-condition.js +443 -0
- package/dist/scanners/race-condition.js.map +1 -0
- package/dist/scanners/race-condition.test.d.ts +5 -0
- package/dist/scanners/race-condition.test.d.ts.map +1 -0
- package/dist/scanners/race-condition.test.js +428 -0
- package/dist/scanners/race-condition.test.js.map +1 -0
- package/dist/scanners/secrets.d.ts +25 -0
- package/dist/scanners/secrets.d.ts.map +1 -0
- package/dist/scanners/secrets.js +367 -0
- package/dist/scanners/secrets.js.map +1 -0
- package/dist/scanners/secrets.test.d.ts +5 -0
- package/dist/scanners/secrets.test.d.ts.map +1 -0
- package/dist/scanners/secrets.test.js +160 -0
- package/dist/scanners/secrets.test.js.map +1 -0
- package/dist/scanners/semgrep.d.ts +33 -0
- package/dist/scanners/semgrep.d.ts.map +1 -0
- package/dist/scanners/semgrep.js +350 -0
- package/dist/scanners/semgrep.js.map +1 -0
- package/dist/scanners/semgrep.test.d.ts +8 -0
- package/dist/scanners/semgrep.test.d.ts.map +1 -0
- package/dist/scanners/semgrep.test.js +254 -0
- package/dist/scanners/semgrep.test.js.map +1 -0
- package/dist/scanners/trivy.d.ts +26 -0
- package/dist/scanners/trivy.d.ts.map +1 -0
- package/dist/scanners/trivy.js +187 -0
- package/dist/scanners/trivy.js.map +1 -0
- package/dist/scanners/types.d.ts +210 -0
- package/dist/scanners/types.d.ts.map +1 -0
- package/dist/scanners/types.js +106 -0
- package/dist/scanners/types.js.map +1 -0
- package/dist/scanners/types.test.d.ts +5 -0
- package/dist/scanners/types.test.d.ts.map +1 -0
- package/dist/scanners/types.test.js +103 -0
- package/dist/scanners/types.test.js.map +1 -0
- package/dist/scanners/typescript.d.ts +32 -0
- package/dist/scanners/typescript.d.ts.map +1 -0
- package/dist/scanners/typescript.js +300 -0
- package/dist/scanners/typescript.js.map +1 -0
- package/dist/scanners/typescript.test.d.ts +5 -0
- package/dist/scanners/typescript.test.d.ts.map +1 -0
- package/dist/scanners/typescript.test.js +296 -0
- package/dist/scanners/typescript.test.js.map +1 -0
- package/dist/transcripts/index.d.ts +13 -0
- package/dist/transcripts/index.d.ts.map +1 -0
- package/dist/transcripts/index.js +17 -0
- package/dist/transcripts/index.js.map +1 -0
- package/dist/transcripts/logger.d.ts +190 -0
- package/dist/transcripts/logger.d.ts.map +1 -0
- package/dist/transcripts/logger.js +385 -0
- package/dist/transcripts/logger.js.map +1 -0
- package/dist/transcripts/logger.test.d.ts +5 -0
- package/dist/transcripts/logger.test.d.ts.map +1 -0
- package/dist/transcripts/logger.test.js +227 -0
- package/dist/transcripts/logger.test.js.map +1 -0
- package/dist/transcripts/redaction.d.ts +125 -0
- package/dist/transcripts/redaction.d.ts.map +1 -0
- package/dist/transcripts/redaction.js +416 -0
- package/dist/transcripts/redaction.js.map +1 -0
- package/dist/transcripts/redaction.test.d.ts +5 -0
- package/dist/transcripts/redaction.test.d.ts.map +1 -0
- package/dist/transcripts/redaction.test.js +267 -0
- package/dist/transcripts/redaction.test.js.map +1 -0
- package/dist/transcripts/signing.d.ts +108 -0
- package/dist/transcripts/signing.d.ts.map +1 -0
- package/dist/transcripts/signing.js +173 -0
- package/dist/transcripts/signing.js.map +1 -0
- package/dist/transcripts/verifier.d.ts +133 -0
- package/dist/transcripts/verifier.d.ts.map +1 -0
- package/dist/transcripts/verifier.js +489 -0
- package/dist/transcripts/verifier.js.map +1 -0
- package/dist/transcripts/verifier.test.d.ts +5 -0
- package/dist/transcripts/verifier.test.d.ts.map +1 -0
- package/dist/transcripts/verifier.test.js +330 -0
- package/dist/transcripts/verifier.test.js.map +1 -0
- package/dist/util/concurrency.d.ts +221 -0
- package/dist/util/concurrency.d.ts.map +1 -0
- package/dist/util/concurrency.js +339 -0
- package/dist/util/concurrency.js.map +1 -0
- package/dist/util/index.d.ts +12 -0
- package/dist/util/index.d.ts.map +1 -0
- package/dist/util/index.js +12 -0
- package/dist/util/index.js.map +1 -0
- package/dist/util/json.d.ts +63 -0
- package/dist/util/json.d.ts.map +1 -0
- package/dist/util/json.js +134 -0
- package/dist/util/json.js.map +1 -0
- package/dist/util/paths.d.ts +56 -0
- package/dist/util/paths.d.ts.map +1 -0
- package/dist/util/paths.js +128 -0
- package/dist/util/paths.js.map +1 -0
- package/dist/util/retry.d.ts +185 -0
- package/dist/util/retry.d.ts.map +1 -0
- package/dist/util/retry.js +338 -0
- package/dist/util/retry.js.map +1 -0
- package/package.json +79 -0
|
@@ -0,0 +1,209 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Severity Overrides Configuration
|
|
3
|
+
*
|
|
4
|
+
* Allows users to customize finding severities via `.vaspera/severity-overrides.yaml`.
|
|
5
|
+
*
|
|
6
|
+
* Example configuration:
|
|
7
|
+
* ```yaml
|
|
8
|
+
* overrides:
|
|
9
|
+
* - ruleId: "semgrep:javascript.lang.security.audit.detect-non-literal-require"
|
|
10
|
+
* severity: "low"
|
|
11
|
+
* reason: "False positive in our codebase"
|
|
12
|
+
*
|
|
13
|
+
* - scanner: "npm-audit"
|
|
14
|
+
* cwe: "CWE-1321"
|
|
15
|
+
* severity: "medium"
|
|
16
|
+
* reason: "Prototype pollution not exploitable in our context"
|
|
17
|
+
*
|
|
18
|
+
* - file: "tests/**"
|
|
19
|
+
* severity: "info"
|
|
20
|
+
* reason: "Test files have relaxed security requirements"
|
|
21
|
+
* ```
|
|
22
|
+
*
|
|
23
|
+
* @module config/severity-overrides
|
|
24
|
+
*/
|
|
25
|
+
import { z } from "zod";
|
|
26
|
+
import type { Severity } from "../certification/types.js";
|
|
27
|
+
import type { DeterministicFinding } from "../scanners/types.js";
|
|
28
|
+
/**
|
|
29
|
+
* Single severity override rule
|
|
30
|
+
*/
|
|
31
|
+
export declare const SeverityOverrideRuleSchema: z.ZodObject<{
|
|
32
|
+
/** Rule ID to match (exact or glob pattern) */
|
|
33
|
+
ruleId: z.ZodOptional<z.ZodString>;
|
|
34
|
+
/** Scanner type to match */
|
|
35
|
+
scanner: z.ZodOptional<z.ZodEnum<["semgrep", "npm-audit", "gitleaks", "tsc", "eslint", "bandit", "gosec", "brakeman", "trivy"]>>;
|
|
36
|
+
/** CWE ID to match */
|
|
37
|
+
cwe: z.ZodOptional<z.ZodString>;
|
|
38
|
+
/** CVE ID to match */
|
|
39
|
+
cve: z.ZodOptional<z.ZodString>;
|
|
40
|
+
/** File path pattern to match (glob) */
|
|
41
|
+
file: z.ZodOptional<z.ZodString>;
|
|
42
|
+
/** New severity to apply */
|
|
43
|
+
severity: z.ZodEnum<["critical", "high", "medium", "low", "info"]>;
|
|
44
|
+
/** Reason for override (documentation) */
|
|
45
|
+
reason: z.ZodOptional<z.ZodString>;
|
|
46
|
+
/** Whether this override is active */
|
|
47
|
+
enabled: z.ZodDefault<z.ZodBoolean>;
|
|
48
|
+
/** Override expiration date (ISO 8601) */
|
|
49
|
+
expiresAt: z.ZodOptional<z.ZodString>;
|
|
50
|
+
}, "strip", z.ZodTypeAny, {
|
|
51
|
+
severity: "info" | "critical" | "high" | "medium" | "low";
|
|
52
|
+
enabled: boolean;
|
|
53
|
+
file?: string | undefined;
|
|
54
|
+
reason?: string | undefined;
|
|
55
|
+
expiresAt?: string | undefined;
|
|
56
|
+
ruleId?: string | undefined;
|
|
57
|
+
scanner?: "semgrep" | "npm-audit" | "gitleaks" | "tsc" | "eslint" | "bandit" | "gosec" | "brakeman" | "trivy" | undefined;
|
|
58
|
+
cwe?: string | undefined;
|
|
59
|
+
cve?: string | undefined;
|
|
60
|
+
}, {
|
|
61
|
+
severity: "info" | "critical" | "high" | "medium" | "low";
|
|
62
|
+
file?: string | undefined;
|
|
63
|
+
reason?: string | undefined;
|
|
64
|
+
expiresAt?: string | undefined;
|
|
65
|
+
enabled?: boolean | undefined;
|
|
66
|
+
ruleId?: string | undefined;
|
|
67
|
+
scanner?: "semgrep" | "npm-audit" | "gitleaks" | "tsc" | "eslint" | "bandit" | "gosec" | "brakeman" | "trivy" | undefined;
|
|
68
|
+
cwe?: string | undefined;
|
|
69
|
+
cve?: string | undefined;
|
|
70
|
+
}>;
|
|
71
|
+
export type SeverityOverrideRule = z.infer<typeof SeverityOverrideRuleSchema>;
|
|
72
|
+
/**
|
|
73
|
+
* Severity overrides configuration file
|
|
74
|
+
*/
|
|
75
|
+
export declare const SeverityOverridesConfigSchema: z.ZodObject<{
|
|
76
|
+
/** Schema version */
|
|
77
|
+
version: z.ZodDefault<z.ZodLiteral<1>>;
|
|
78
|
+
/** Override rules */
|
|
79
|
+
overrides: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
|
80
|
+
/** Rule ID to match (exact or glob pattern) */
|
|
81
|
+
ruleId: z.ZodOptional<z.ZodString>;
|
|
82
|
+
/** Scanner type to match */
|
|
83
|
+
scanner: z.ZodOptional<z.ZodEnum<["semgrep", "npm-audit", "gitleaks", "tsc", "eslint", "bandit", "gosec", "brakeman", "trivy"]>>;
|
|
84
|
+
/** CWE ID to match */
|
|
85
|
+
cwe: z.ZodOptional<z.ZodString>;
|
|
86
|
+
/** CVE ID to match */
|
|
87
|
+
cve: z.ZodOptional<z.ZodString>;
|
|
88
|
+
/** File path pattern to match (glob) */
|
|
89
|
+
file: z.ZodOptional<z.ZodString>;
|
|
90
|
+
/** New severity to apply */
|
|
91
|
+
severity: z.ZodEnum<["critical", "high", "medium", "low", "info"]>;
|
|
92
|
+
/** Reason for override (documentation) */
|
|
93
|
+
reason: z.ZodOptional<z.ZodString>;
|
|
94
|
+
/** Whether this override is active */
|
|
95
|
+
enabled: z.ZodDefault<z.ZodBoolean>;
|
|
96
|
+
/** Override expiration date (ISO 8601) */
|
|
97
|
+
expiresAt: z.ZodOptional<z.ZodString>;
|
|
98
|
+
}, "strip", z.ZodTypeAny, {
|
|
99
|
+
severity: "info" | "critical" | "high" | "medium" | "low";
|
|
100
|
+
enabled: boolean;
|
|
101
|
+
file?: string | undefined;
|
|
102
|
+
reason?: string | undefined;
|
|
103
|
+
expiresAt?: string | undefined;
|
|
104
|
+
ruleId?: string | undefined;
|
|
105
|
+
scanner?: "semgrep" | "npm-audit" | "gitleaks" | "tsc" | "eslint" | "bandit" | "gosec" | "brakeman" | "trivy" | undefined;
|
|
106
|
+
cwe?: string | undefined;
|
|
107
|
+
cve?: string | undefined;
|
|
108
|
+
}, {
|
|
109
|
+
severity: "info" | "critical" | "high" | "medium" | "low";
|
|
110
|
+
file?: string | undefined;
|
|
111
|
+
reason?: string | undefined;
|
|
112
|
+
expiresAt?: string | undefined;
|
|
113
|
+
enabled?: boolean | undefined;
|
|
114
|
+
ruleId?: string | undefined;
|
|
115
|
+
scanner?: "semgrep" | "npm-audit" | "gitleaks" | "tsc" | "eslint" | "bandit" | "gosec" | "brakeman" | "trivy" | undefined;
|
|
116
|
+
cwe?: string | undefined;
|
|
117
|
+
cve?: string | undefined;
|
|
118
|
+
}>, "many">>;
|
|
119
|
+
/** Global settings */
|
|
120
|
+
settings: z.ZodDefault<z.ZodObject<{
|
|
121
|
+
/** Whether to log when overrides are applied */
|
|
122
|
+
logOverrides: z.ZodDefault<z.ZodBoolean>;
|
|
123
|
+
/** Whether to include override reason in finding metadata */
|
|
124
|
+
includeReason: z.ZodDefault<z.ZodBoolean>;
|
|
125
|
+
}, "strip", z.ZodTypeAny, {
|
|
126
|
+
logOverrides: boolean;
|
|
127
|
+
includeReason: boolean;
|
|
128
|
+
}, {
|
|
129
|
+
logOverrides?: boolean | undefined;
|
|
130
|
+
includeReason?: boolean | undefined;
|
|
131
|
+
}>>;
|
|
132
|
+
}, "strip", z.ZodTypeAny, {
|
|
133
|
+
version: 1;
|
|
134
|
+
settings: {
|
|
135
|
+
logOverrides: boolean;
|
|
136
|
+
includeReason: boolean;
|
|
137
|
+
};
|
|
138
|
+
overrides: {
|
|
139
|
+
severity: "info" | "critical" | "high" | "medium" | "low";
|
|
140
|
+
enabled: boolean;
|
|
141
|
+
file?: string | undefined;
|
|
142
|
+
reason?: string | undefined;
|
|
143
|
+
expiresAt?: string | undefined;
|
|
144
|
+
ruleId?: string | undefined;
|
|
145
|
+
scanner?: "semgrep" | "npm-audit" | "gitleaks" | "tsc" | "eslint" | "bandit" | "gosec" | "brakeman" | "trivy" | undefined;
|
|
146
|
+
cwe?: string | undefined;
|
|
147
|
+
cve?: string | undefined;
|
|
148
|
+
}[];
|
|
149
|
+
}, {
|
|
150
|
+
version?: 1 | undefined;
|
|
151
|
+
settings?: {
|
|
152
|
+
logOverrides?: boolean | undefined;
|
|
153
|
+
includeReason?: boolean | undefined;
|
|
154
|
+
} | undefined;
|
|
155
|
+
overrides?: {
|
|
156
|
+
severity: "info" | "critical" | "high" | "medium" | "low";
|
|
157
|
+
file?: string | undefined;
|
|
158
|
+
reason?: string | undefined;
|
|
159
|
+
expiresAt?: string | undefined;
|
|
160
|
+
enabled?: boolean | undefined;
|
|
161
|
+
ruleId?: string | undefined;
|
|
162
|
+
scanner?: "semgrep" | "npm-audit" | "gitleaks" | "tsc" | "eslint" | "bandit" | "gosec" | "brakeman" | "trivy" | undefined;
|
|
163
|
+
cwe?: string | undefined;
|
|
164
|
+
cve?: string | undefined;
|
|
165
|
+
}[] | undefined;
|
|
166
|
+
}>;
|
|
167
|
+
export type SeverityOverridesConfig = z.infer<typeof SeverityOverridesConfigSchema>;
|
|
168
|
+
/**
|
|
169
|
+
* Applied override information
|
|
170
|
+
*/
|
|
171
|
+
export interface AppliedOverride {
|
|
172
|
+
/** Original severity */
|
|
173
|
+
originalSeverity: Severity;
|
|
174
|
+
/** New severity */
|
|
175
|
+
newSeverity: Severity;
|
|
176
|
+
/** Rule that matched */
|
|
177
|
+
rule: SeverityOverrideRule;
|
|
178
|
+
/** Match reason */
|
|
179
|
+
matchReason: string;
|
|
180
|
+
}
|
|
181
|
+
/**
|
|
182
|
+
* Load severity overrides configuration
|
|
183
|
+
*/
|
|
184
|
+
export declare function loadSeverityOverrides(projectPath: string): Promise<SeverityOverridesConfig>;
|
|
185
|
+
/**
|
|
186
|
+
* Apply severity overrides to a finding
|
|
187
|
+
*/
|
|
188
|
+
export declare function applySeverityOverride(finding: DeterministicFinding, config: SeverityOverridesConfig): {
|
|
189
|
+
finding: DeterministicFinding;
|
|
190
|
+
override?: AppliedOverride;
|
|
191
|
+
};
|
|
192
|
+
/**
|
|
193
|
+
* Apply severity overrides to multiple findings
|
|
194
|
+
*/
|
|
195
|
+
export declare function applySeverityOverrides(findings: DeterministicFinding[], config: SeverityOverridesConfig): {
|
|
196
|
+
findings: DeterministicFinding[];
|
|
197
|
+
overrides: AppliedOverride[];
|
|
198
|
+
summary: {
|
|
199
|
+
total: number;
|
|
200
|
+
modified: number;
|
|
201
|
+
byOriginalSeverity: Record<Severity, number>;
|
|
202
|
+
byNewSeverity: Record<Severity, number>;
|
|
203
|
+
};
|
|
204
|
+
};
|
|
205
|
+
/**
|
|
206
|
+
* Create a sample severity overrides configuration file
|
|
207
|
+
*/
|
|
208
|
+
export declare function generateSampleConfig(): string;
|
|
209
|
+
//# sourceMappingURL=severity-overrides.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"severity-overrides.d.ts","sourceRoot":"","sources":["../../src/config/severity-overrides.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAe,MAAM,sBAAsB,CAAC;AAE9E;;GAEG;AACH,eAAO,MAAM,0BAA0B;IACrC,+CAA+C;;IAG/C,4BAA4B;;IAG5B,sBAAsB;;IAGtB,sBAAsB;;IAGtB,wCAAwC;;IAGxC,4BAA4B;;IAG5B,0CAA0C;;IAG1C,sCAAsC;;IAGtC,0CAA0C;;;;;;;;;;;;;;;;;;;;;;EAE1C,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;GAEG;AACH,eAAO,MAAM,6BAA6B;IACxC,qBAAqB;;IAGrB,qBAAqB;;QArCrB,+CAA+C;;QAG/C,4BAA4B;;QAG5B,sBAAsB;;QAGtB,sBAAsB;;QAGtB,wCAAwC;;QAGxC,4BAA4B;;QAG5B,0CAA0C;;QAG1C,sCAAsC;;QAGtC,0CAA0C;;;;;;;;;;;;;;;;;;;;;;;IAgB1C,sBAAsB;;QAEpB,gDAAgD;;QAGhD,6DAA6D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAG/D,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,gBAAgB,EAAE,QAAQ,CAAC;IAE3B,mBAAmB;IACnB,WAAW,EAAE,QAAQ,CAAC;IAEtB,wBAAwB;IACxB,IAAI,EAAE,oBAAoB,CAAC;IAE3B,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,uBAAuB,CAAC,CAgDlC;AAgKD;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EAAE,uBAAuB,GAC9B;IAAE,OAAO,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;CAAE,CAyC/D;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,oBAAoB,EAAE,EAChC,MAAM,EAAE,uBAAuB,GAC9B;IACD,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;KACzC,CAAC;CACH,CAuCA;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAiC7C"}
|
|
@@ -0,0 +1,380 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Severity Overrides Configuration
|
|
3
|
+
*
|
|
4
|
+
* Allows users to customize finding severities via `.vaspera/severity-overrides.yaml`.
|
|
5
|
+
*
|
|
6
|
+
* Example configuration:
|
|
7
|
+
* ```yaml
|
|
8
|
+
* overrides:
|
|
9
|
+
* - ruleId: "semgrep:javascript.lang.security.audit.detect-non-literal-require"
|
|
10
|
+
* severity: "low"
|
|
11
|
+
* reason: "False positive in our codebase"
|
|
12
|
+
*
|
|
13
|
+
* - scanner: "npm-audit"
|
|
14
|
+
* cwe: "CWE-1321"
|
|
15
|
+
* severity: "medium"
|
|
16
|
+
* reason: "Prototype pollution not exploitable in our context"
|
|
17
|
+
*
|
|
18
|
+
* - file: "tests/**"
|
|
19
|
+
* severity: "info"
|
|
20
|
+
* reason: "Test files have relaxed security requirements"
|
|
21
|
+
* ```
|
|
22
|
+
*
|
|
23
|
+
* @module config/severity-overrides
|
|
24
|
+
*/
|
|
25
|
+
import { readFile, access } from "fs/promises";
|
|
26
|
+
import { join } from "path";
|
|
27
|
+
import { z } from "zod";
|
|
28
|
+
import { logger } from "../logger.js";
|
|
29
|
+
/**
|
|
30
|
+
* Single severity override rule
|
|
31
|
+
*/
|
|
32
|
+
export const SeverityOverrideRuleSchema = z.object({
|
|
33
|
+
/** Rule ID to match (exact or glob pattern) */
|
|
34
|
+
ruleId: z.string().optional(),
|
|
35
|
+
/** Scanner type to match */
|
|
36
|
+
scanner: z.enum(["semgrep", "npm-audit", "gitleaks", "tsc", "eslint", "bandit", "gosec", "brakeman", "trivy"]).optional(),
|
|
37
|
+
/** CWE ID to match */
|
|
38
|
+
cwe: z.string().optional(),
|
|
39
|
+
/** CVE ID to match */
|
|
40
|
+
cve: z.string().optional(),
|
|
41
|
+
/** File path pattern to match (glob) */
|
|
42
|
+
file: z.string().optional(),
|
|
43
|
+
/** New severity to apply */
|
|
44
|
+
severity: z.enum(["critical", "high", "medium", "low", "info"]),
|
|
45
|
+
/** Reason for override (documentation) */
|
|
46
|
+
reason: z.string().optional(),
|
|
47
|
+
/** Whether this override is active */
|
|
48
|
+
enabled: z.boolean().default(true),
|
|
49
|
+
/** Override expiration date (ISO 8601) */
|
|
50
|
+
expiresAt: z.string().optional(),
|
|
51
|
+
});
|
|
52
|
+
/**
|
|
53
|
+
* Severity overrides configuration file
|
|
54
|
+
*/
|
|
55
|
+
export const SeverityOverridesConfigSchema = z.object({
|
|
56
|
+
/** Schema version */
|
|
57
|
+
version: z.literal(1).default(1),
|
|
58
|
+
/** Override rules */
|
|
59
|
+
overrides: z.array(SeverityOverrideRuleSchema).default([]),
|
|
60
|
+
/** Global settings */
|
|
61
|
+
settings: z.object({
|
|
62
|
+
/** Whether to log when overrides are applied */
|
|
63
|
+
logOverrides: z.boolean().default(true),
|
|
64
|
+
/** Whether to include override reason in finding metadata */
|
|
65
|
+
includeReason: z.boolean().default(true),
|
|
66
|
+
}).default({}),
|
|
67
|
+
});
|
|
68
|
+
/**
|
|
69
|
+
* Load severity overrides configuration
|
|
70
|
+
*/
|
|
71
|
+
export async function loadSeverityOverrides(projectPath) {
|
|
72
|
+
const configPaths = [
|
|
73
|
+
join(projectPath, ".vaspera", "severity-overrides.yaml"),
|
|
74
|
+
join(projectPath, ".vaspera", "severity-overrides.yml"),
|
|
75
|
+
join(projectPath, ".vaspera", "severity-overrides.json"),
|
|
76
|
+
];
|
|
77
|
+
for (const configPath of configPaths) {
|
|
78
|
+
try {
|
|
79
|
+
await access(configPath);
|
|
80
|
+
const content = await readFile(configPath, "utf-8");
|
|
81
|
+
// Parse based on extension
|
|
82
|
+
let data;
|
|
83
|
+
if (configPath.endsWith(".json")) {
|
|
84
|
+
data = JSON.parse(content);
|
|
85
|
+
}
|
|
86
|
+
else {
|
|
87
|
+
// Simple YAML parsing for common cases
|
|
88
|
+
data = parseSimpleYaml(content);
|
|
89
|
+
}
|
|
90
|
+
const result = SeverityOverridesConfigSchema.safeParse(data);
|
|
91
|
+
if (result.success) {
|
|
92
|
+
logger.info("severity_overrides.loaded", {
|
|
93
|
+
path: configPath,
|
|
94
|
+
overrideCount: result.data.overrides.length,
|
|
95
|
+
});
|
|
96
|
+
return result.data;
|
|
97
|
+
}
|
|
98
|
+
else {
|
|
99
|
+
logger.warn("severity_overrides.invalid_config", {
|
|
100
|
+
path: configPath,
|
|
101
|
+
errors: result.error.errors.map((e) => e.message),
|
|
102
|
+
});
|
|
103
|
+
}
|
|
104
|
+
}
|
|
105
|
+
catch {
|
|
106
|
+
// File doesn't exist or can't be read
|
|
107
|
+
}
|
|
108
|
+
}
|
|
109
|
+
// Return default empty config
|
|
110
|
+
return {
|
|
111
|
+
version: 1,
|
|
112
|
+
overrides: [],
|
|
113
|
+
settings: {
|
|
114
|
+
logOverrides: true,
|
|
115
|
+
includeReason: true,
|
|
116
|
+
},
|
|
117
|
+
};
|
|
118
|
+
}
|
|
119
|
+
/**
|
|
120
|
+
* Simple YAML parser for common configuration structures
|
|
121
|
+
*/
|
|
122
|
+
function parseSimpleYaml(content) {
|
|
123
|
+
const lines = content.split("\n");
|
|
124
|
+
const result = {};
|
|
125
|
+
let currentKey = "";
|
|
126
|
+
let currentArray = null;
|
|
127
|
+
let currentObject = null;
|
|
128
|
+
let indentLevel = 0;
|
|
129
|
+
for (const line of lines) {
|
|
130
|
+
const trimmed = line.trim();
|
|
131
|
+
// Skip comments and empty lines
|
|
132
|
+
if (trimmed.startsWith("#") || trimmed === "")
|
|
133
|
+
continue;
|
|
134
|
+
const match = line.match(/^(\s*)(.+)$/);
|
|
135
|
+
if (!match)
|
|
136
|
+
continue;
|
|
137
|
+
const indent = match[1].length;
|
|
138
|
+
const content = match[2];
|
|
139
|
+
// Top-level key
|
|
140
|
+
if (indent === 0 && content.endsWith(":")) {
|
|
141
|
+
currentKey = content.slice(0, -1);
|
|
142
|
+
if (currentKey === "overrides") {
|
|
143
|
+
currentArray = [];
|
|
144
|
+
result[currentKey] = currentArray;
|
|
145
|
+
}
|
|
146
|
+
else if (currentKey === "settings") {
|
|
147
|
+
currentObject = {};
|
|
148
|
+
result[currentKey] = currentObject;
|
|
149
|
+
}
|
|
150
|
+
continue;
|
|
151
|
+
}
|
|
152
|
+
// Array item
|
|
153
|
+
if (content.startsWith("- ") && currentArray) {
|
|
154
|
+
const item = {};
|
|
155
|
+
const firstProp = content.slice(2);
|
|
156
|
+
if (firstProp.includes(": ")) {
|
|
157
|
+
const [key, ...valueParts] = firstProp.split(": ");
|
|
158
|
+
item[key] = parseYamlValue(valueParts.join(": "));
|
|
159
|
+
}
|
|
160
|
+
currentArray.push(item);
|
|
161
|
+
currentObject = item;
|
|
162
|
+
continue;
|
|
163
|
+
}
|
|
164
|
+
// Object property
|
|
165
|
+
if (content.includes(": ") && currentObject) {
|
|
166
|
+
const [key, ...valueParts] = content.split(": ");
|
|
167
|
+
currentObject[key.trim()] = parseYamlValue(valueParts.join(": "));
|
|
168
|
+
}
|
|
169
|
+
}
|
|
170
|
+
return result;
|
|
171
|
+
}
|
|
172
|
+
/**
|
|
173
|
+
* Parse a YAML value
|
|
174
|
+
*/
|
|
175
|
+
function parseYamlValue(value) {
|
|
176
|
+
const trimmed = value.trim();
|
|
177
|
+
// Remove quotes
|
|
178
|
+
if ((trimmed.startsWith('"') && trimmed.endsWith('"')) ||
|
|
179
|
+
(trimmed.startsWith("'") && trimmed.endsWith("'"))) {
|
|
180
|
+
return trimmed.slice(1, -1);
|
|
181
|
+
}
|
|
182
|
+
// Boolean
|
|
183
|
+
if (trimmed === "true")
|
|
184
|
+
return true;
|
|
185
|
+
if (trimmed === "false")
|
|
186
|
+
return false;
|
|
187
|
+
// Number
|
|
188
|
+
const num = Number(trimmed);
|
|
189
|
+
if (!isNaN(num))
|
|
190
|
+
return num;
|
|
191
|
+
// String
|
|
192
|
+
return trimmed;
|
|
193
|
+
}
|
|
194
|
+
/**
|
|
195
|
+
* Check if a rule matches a finding
|
|
196
|
+
*/
|
|
197
|
+
function ruleMatchesFinding(rule, finding) {
|
|
198
|
+
// Check if rule is enabled and not expired
|
|
199
|
+
if (!rule.enabled) {
|
|
200
|
+
return { matches: false };
|
|
201
|
+
}
|
|
202
|
+
if (rule.expiresAt) {
|
|
203
|
+
const expiresAt = new Date(rule.expiresAt);
|
|
204
|
+
if (expiresAt < new Date()) {
|
|
205
|
+
return { matches: false };
|
|
206
|
+
}
|
|
207
|
+
}
|
|
208
|
+
// Check scanner
|
|
209
|
+
if (rule.scanner && rule.scanner !== finding.scanner) {
|
|
210
|
+
return { matches: false };
|
|
211
|
+
}
|
|
212
|
+
// Check rule ID
|
|
213
|
+
if (rule.ruleId) {
|
|
214
|
+
const pattern = rule.ruleId.includes("*")
|
|
215
|
+
? new RegExp("^" + rule.ruleId.replace(/\*/g, ".*") + "$")
|
|
216
|
+
: null;
|
|
217
|
+
if (pattern) {
|
|
218
|
+
if (!pattern.test(finding.ruleId)) {
|
|
219
|
+
return { matches: false };
|
|
220
|
+
}
|
|
221
|
+
}
|
|
222
|
+
else if (rule.ruleId !== finding.ruleId) {
|
|
223
|
+
return { matches: false };
|
|
224
|
+
}
|
|
225
|
+
}
|
|
226
|
+
// Check CWE
|
|
227
|
+
if (rule.cwe) {
|
|
228
|
+
if (!finding.cweIds?.includes(rule.cwe)) {
|
|
229
|
+
return { matches: false };
|
|
230
|
+
}
|
|
231
|
+
}
|
|
232
|
+
// Check CVE
|
|
233
|
+
if (rule.cve) {
|
|
234
|
+
if (!finding.cveIds?.includes(rule.cve)) {
|
|
235
|
+
return { matches: false };
|
|
236
|
+
}
|
|
237
|
+
}
|
|
238
|
+
// Check file pattern
|
|
239
|
+
if (rule.file) {
|
|
240
|
+
const pattern = new RegExp("^" + rule.file.replace(/\*\*/g, ".*").replace(/\*/g, "[^/]*") + "$");
|
|
241
|
+
if (!pattern.test(finding.file)) {
|
|
242
|
+
return { matches: false };
|
|
243
|
+
}
|
|
244
|
+
}
|
|
245
|
+
// Build match reason
|
|
246
|
+
const reasons = [];
|
|
247
|
+
if (rule.ruleId)
|
|
248
|
+
reasons.push(`ruleId=${rule.ruleId}`);
|
|
249
|
+
if (rule.scanner)
|
|
250
|
+
reasons.push(`scanner=${rule.scanner}`);
|
|
251
|
+
if (rule.cwe)
|
|
252
|
+
reasons.push(`cwe=${rule.cwe}`);
|
|
253
|
+
if (rule.cve)
|
|
254
|
+
reasons.push(`cve=${rule.cve}`);
|
|
255
|
+
if (rule.file)
|
|
256
|
+
reasons.push(`file=${rule.file}`);
|
|
257
|
+
return {
|
|
258
|
+
matches: true,
|
|
259
|
+
reason: reasons.join(", "),
|
|
260
|
+
};
|
|
261
|
+
}
|
|
262
|
+
/**
|
|
263
|
+
* Apply severity overrides to a finding
|
|
264
|
+
*/
|
|
265
|
+
export function applySeverityOverride(finding, config) {
|
|
266
|
+
for (const rule of config.overrides) {
|
|
267
|
+
const match = ruleMatchesFinding(rule, finding);
|
|
268
|
+
if (match.matches) {
|
|
269
|
+
const override = {
|
|
270
|
+
originalSeverity: finding.severity,
|
|
271
|
+
newSeverity: rule.severity,
|
|
272
|
+
rule,
|
|
273
|
+
matchReason: match.reason || "matched",
|
|
274
|
+
};
|
|
275
|
+
// Create new finding with overridden severity
|
|
276
|
+
const overriddenFinding = {
|
|
277
|
+
...finding,
|
|
278
|
+
severity: rule.severity,
|
|
279
|
+
metadata: {
|
|
280
|
+
...finding.metadata,
|
|
281
|
+
severityOverride: {
|
|
282
|
+
original: finding.severity,
|
|
283
|
+
reason: rule.reason,
|
|
284
|
+
rule: rule.ruleId || rule.scanner || rule.file,
|
|
285
|
+
},
|
|
286
|
+
},
|
|
287
|
+
};
|
|
288
|
+
if (config.settings.logOverrides) {
|
|
289
|
+
logger.debug("severity_overrides.applied", {
|
|
290
|
+
file: finding.file,
|
|
291
|
+
line: finding.line,
|
|
292
|
+
ruleId: finding.ruleId,
|
|
293
|
+
originalSeverity: finding.severity,
|
|
294
|
+
newSeverity: rule.severity,
|
|
295
|
+
matchReason: match.reason,
|
|
296
|
+
});
|
|
297
|
+
}
|
|
298
|
+
return { finding: overriddenFinding, override };
|
|
299
|
+
}
|
|
300
|
+
}
|
|
301
|
+
return { finding };
|
|
302
|
+
}
|
|
303
|
+
/**
|
|
304
|
+
* Apply severity overrides to multiple findings
|
|
305
|
+
*/
|
|
306
|
+
export function applySeverityOverrides(findings, config) {
|
|
307
|
+
const results = [];
|
|
308
|
+
const overrides = [];
|
|
309
|
+
const byOriginalSeverity = {
|
|
310
|
+
critical: 0,
|
|
311
|
+
high: 0,
|
|
312
|
+
medium: 0,
|
|
313
|
+
low: 0,
|
|
314
|
+
info: 0,
|
|
315
|
+
};
|
|
316
|
+
const byNewSeverity = {
|
|
317
|
+
critical: 0,
|
|
318
|
+
high: 0,
|
|
319
|
+
medium: 0,
|
|
320
|
+
low: 0,
|
|
321
|
+
info: 0,
|
|
322
|
+
};
|
|
323
|
+
for (const finding of findings) {
|
|
324
|
+
const result = applySeverityOverride(finding, config);
|
|
325
|
+
results.push(result.finding);
|
|
326
|
+
if (result.override) {
|
|
327
|
+
overrides.push(result.override);
|
|
328
|
+
byOriginalSeverity[result.override.originalSeverity]++;
|
|
329
|
+
byNewSeverity[result.override.newSeverity]++;
|
|
330
|
+
}
|
|
331
|
+
}
|
|
332
|
+
return {
|
|
333
|
+
findings: results,
|
|
334
|
+
overrides,
|
|
335
|
+
summary: {
|
|
336
|
+
total: findings.length,
|
|
337
|
+
modified: overrides.length,
|
|
338
|
+
byOriginalSeverity,
|
|
339
|
+
byNewSeverity,
|
|
340
|
+
},
|
|
341
|
+
};
|
|
342
|
+
}
|
|
343
|
+
/**
|
|
344
|
+
* Create a sample severity overrides configuration file
|
|
345
|
+
*/
|
|
346
|
+
export function generateSampleConfig() {
|
|
347
|
+
return `# Vaspera Severity Overrides Configuration
|
|
348
|
+
# Place this file at .vaspera/severity-overrides.yaml
|
|
349
|
+
|
|
350
|
+
version: 1
|
|
351
|
+
|
|
352
|
+
settings:
|
|
353
|
+
logOverrides: true
|
|
354
|
+
includeReason: true
|
|
355
|
+
|
|
356
|
+
overrides:
|
|
357
|
+
# Override by rule ID
|
|
358
|
+
- ruleId: "semgrep:javascript.lang.security.audit.detect-non-literal-require"
|
|
359
|
+
severity: "low"
|
|
360
|
+
reason: "False positive - require paths are validated"
|
|
361
|
+
|
|
362
|
+
# Override by scanner and CWE
|
|
363
|
+
- scanner: "npm-audit"
|
|
364
|
+
cwe: "CWE-1321"
|
|
365
|
+
severity: "medium"
|
|
366
|
+
reason: "Prototype pollution not exploitable in our context"
|
|
367
|
+
|
|
368
|
+
# Override by file pattern
|
|
369
|
+
- file: "tests/**"
|
|
370
|
+
severity: "info"
|
|
371
|
+
reason: "Test files have relaxed security requirements"
|
|
372
|
+
|
|
373
|
+
# Override with expiration
|
|
374
|
+
- ruleId: "gitleaks:generic-api-key"
|
|
375
|
+
severity: "low"
|
|
376
|
+
reason: "Temporary override while migrating to env vars"
|
|
377
|
+
expiresAt: "2024-12-31T23:59:59Z"
|
|
378
|
+
`;
|
|
379
|
+
}
|
|
380
|
+
//# sourceMappingURL=severity-overrides.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"severity-overrides.js","sourceRoot":"","sources":["../../src/config/severity-overrides.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAItC;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,+CAA+C;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE7B,4BAA4B;IAC5B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEzH,sBAAsB;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE1B,sBAAsB;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE1B,wCAAwC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE3B,4BAA4B;IAC5B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAE/D,0CAA0C;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE7B,sCAAsC;IACtC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAElC,0CAA0C;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,qBAAqB;IACrB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhC,qBAAqB;IACrB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAE1D,sBAAsB;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,gDAAgD;QAChD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAEvC,6DAA6D;QAC7D,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACzC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACf,CAAC,CAAC;AAqBH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAmB;IAEnB,MAAM,WAAW,GAAG;QAClB,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,yBAAyB,CAAC;QACxD,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,wBAAwB,CAAC;QACvD,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,yBAAyB,CAAC;KACzD,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAEpD,2BAA2B;YAC3B,IAAI,IAAa,CAAC;YAClB,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,uCAAuC;gBACvC,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YAED,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;oBACvC,IAAI,EAAE,UAAU;oBAChB,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM;iBAC5C,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;oBAC/C,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,OAAO;QACL,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;SACpB;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,YAAY,GAAqB,IAAI,CAAC;IAC1C,IAAI,aAAa,GAAmC,IAAI,CAAC;IACzD,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,gCAAgC;QAChC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,EAAE;YAAE,SAAS;QAExD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEzB,gBAAgB;QAChB,IAAI,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBAC/B,YAAY,GAAG,EAAE,CAAC;gBAClB,MAAM,CAAC,UAAU,CAAC,GAAG,YAAY,CAAC;YACpC,CAAC;iBAAM,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;gBACrC,aAAa,GAAG,EAAE,CAAC;gBACnB,MAAM,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC;YACrC,CAAC;YACD,SAAS;QACX,CAAC;QAED,aAAa;QACb,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC;YAC7C,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnD,IAAI,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,aAAa,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QAED,kBAAkB;QAClB,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjD,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,gBAAgB;IAChB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,UAAU;IACV,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAEtC,SAAS;IACT,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAE5B,SAAS;IACT,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACzB,IAA0B,EAC1B,OAA6B;IAE7B,2CAA2C;IAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,gBAAgB;IAChB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YACvC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,YAAY;IACZ,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,YAAY;IACZ,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;QACjG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAEjD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA6B,EAC7B,MAA+B;IAE/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAoB;gBAChC,gBAAgB,EAAE,OAAO,CAAC,QAAQ;gBAClC,WAAW,EAAE,IAAI,CAAC,QAAQ;gBAC1B,IAAI;gBACJ,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS;aACvC,CAAC;YAEF,8CAA8C;YAC9C,MAAM,iBAAiB,GAAyB;gBAC9C,GAAG,OAAO;gBACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE;oBACR,GAAG,OAAO,CAAC,QAAQ;oBACnB,gBAAgB,EAAE;wBAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI;qBAC/C;iBACF;aACF,CAAC;YAEF,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;gBACjC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;oBACzC,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,gBAAgB,EAAE,OAAO,CAAC,QAAQ;oBAClC,WAAW,EAAE,IAAI,CAAC,QAAQ;oBAC1B,WAAW,EAAE,KAAK,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgC,EAChC,MAA+B;IAW/B,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,MAAM,kBAAkB,GAA6B;QACnD,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IACF,MAAM,aAAa,GAA6B;QAC9C,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE7B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvD,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,SAAS;QACT,OAAO,EAAE;YACP,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,QAAQ,EAAE,SAAS,CAAC,MAAM;YAC1B,kBAAkB;YAClB,aAAa;SACd;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BR,CAAC;AACF,CAAC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Cost Tracking Module
|
|
3
|
+
*
|
|
4
|
+
* Exports cost tracking functionality for certifications.
|
|
5
|
+
*
|
|
6
|
+
* @module cost
|
|
7
|
+
*/
|
|
8
|
+
export type { ModelProvider, ModelId, ModelPricing, TokenUsage, CallCost, ApiCallRecord, CostSummary, BudgetConfig, BudgetStatus, CostTrackerState, CostTrackingOptions, } from "./types.js";
|
|
9
|
+
export { MODEL_PRICING, getModelProvider, getModelPricing, calculateCost, estimateCost, formatCost, formatTokens, estimateTokens, getSupportedModels, getModelsByProvider, getCheapestModel, } from "./pricing.js";
|
|
10
|
+
export { CostTracker, BudgetExceededError, getTracker, removeTracker, getActiveTrackers, } from "./tracker.js";
|
|
11
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cost/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,YAAY,EACV,aAAa,EACb,OAAO,EACP,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,aAAa,EACb,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,aAAa,EACb,iBAAiB,GAClB,MAAM,cAAc,CAAC"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Cost Tracking Module
|
|
3
|
+
*
|
|
4
|
+
* Exports cost tracking functionality for certifications.
|
|
5
|
+
*
|
|
6
|
+
* @module cost
|
|
7
|
+
*/
|
|
8
|
+
// Pricing
|
|
9
|
+
export { MODEL_PRICING, getModelProvider, getModelPricing, calculateCost, estimateCost, formatCost, formatTokens, estimateTokens, getSupportedModels, getModelsByProvider, getCheapestModel, } from "./pricing.js";
|
|
10
|
+
// Tracker
|
|
11
|
+
export { CostTracker, BudgetExceededError, getTracker, removeTracker, getActiveTrackers, } from "./tracker.js";
|
|
12
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cost/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiBH,UAAU;AACV,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAEtB,UAAU;AACV,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,aAAa,EACb,iBAAiB,GAClB,MAAM,cAAc,CAAC"}
|