vaspera 2.5.0

package/dist/multimodel/types.d.ts

@@ -0,0 +1,202 @@
+/**
+ * Multi-Model Consensus Types
+ *
+ * Types for running certification agents across multiple LLM providers
+ * and calculating inter-model consensus.
+ *
+ * @module multimodel/types
+ */
+import type { AgentType, Finding, Severity } from "../certification/types.js";
+import type { ModelId, ModelProvider } from "../cost/types.js";
+/**
+ * Configuration for a model in multi-model runs
+ */
+export interface ModelConfig {
+    /** Model identifier */
+    id: ModelId;
+    /** Provider (anthropic, openai, google) */
+    provider: ModelProvider;
+    /** Optional custom endpoint */
+    endpoint?: string;
+    /** Optional API key (defaults to env var) */
+    apiKey?: string;
+    /** Weight for consensus voting (default: 1.0) */
+    weight?: number;
+    /** Whether this model is enabled */
+    enabled?: boolean;
+}
+/**
+ * Result from a single model run
+ */
+export interface ModelRunResult {
+    /** Model used */
+    model: ModelId;
+    /** Provider */
+    provider: ModelProvider;
+    /** Agent type */
+    agent: AgentType;
+    /** Findings from this model */
+    findings: Finding[];
+    /** Execution time in ms */
+    duration: number;
+    /** Token usage */
+    tokens: {
+        input: number;
+        output: number;
+        total: number;
+    };
+    /** Cost in USD */
+    cost: number;
+    /** Whether run was successful */
+    success: boolean;
+    /** Error message if failed */
+    error?: string;
+    /** Timestamp */
+    timestamp: string;
+}
+/**
+ * Finding match between models
+ */
+export interface FindingMatch {
+    /** Finding ID from reference model */
+    referenceId: string;
+    /** Matched finding IDs from other models (partial since not all models may be in the run) */
+    matchedIds: Partial<Record<ModelId, string | null>>;
+    /** Match confidence (0-100) */
+    confidence: number;
+    /** Match type */
+    matchType: "exact" | "similar" | "partial" | "none";
+    /** The finding data */
+    finding: Finding;
+    /** Models that found this issue */
+    foundBy: ModelId[];
+    /** Models that missed this issue */
+    missedBy: ModelId[];
+}
+/**
+ * Disagreement between models
+ */
+export interface ModelDisagreement {
+    /** Type of disagreement */
+    type: "severity" | "existence" | "location" | "description";
+    /** Finding ID */
+    findingId: string;
+    /** Models involved */
+    models: ModelId[];
+    /** Details of disagreement */
+    details: {
+        /** What each model reported (partial since not all models may report) */
+        values: Partial<Record<ModelId, string | number | null>>;
+        /** Recommended resolution */
+        resolution?: string;
+    };
+    /** Severity of the disagreement */
+    severity: "high" | "medium" | "low";
+}
+/**
+ * Inter-model consensus result
+ */
+export interface MultiModelConsensus {
+    /** Certification ID */
+    certificationId: string;
+    /** Agent type */
+    agent: AgentType;
+    /** Models used */
+    models: ModelId[];
+    /** Individual model results */
+    results: ModelRunResult[];
+    /** Matched findings across models */
+    matches: FindingMatch[];
+    /** Disagreements between models */
+    disagreements: ModelDisagreement[];
+    /** Consensus metrics */
+    metrics: {
+        /** Agreement rate (0-100) */
+        agreementRate: number;
+        /** Number of unanimous findings */
+        unanimousFindings: number;
+        /** Number of majority findings */
+        majorityFindings: number;
+        /** Number of disputed findings */
+        disputedFindings: number;
+        /** Number of unique findings (only one model found) */
+        uniqueFindings: number;
+        /** Fleiss' kappa for inter-rater reliability */
+        fleissKappa: number;
+        /** By severity breakdown */
+        bySeverity: Record<Severity, {
+            unanimous: number;
+            majority: number;
+            disputed: number;
+        }>;
+    };
+    /** Final merged findings (after consensus) */
+    mergedFindings: Finding[];
+    /** Timestamp */
+    calculatedAt: string;
+}
+/**
+ * Multi-model run options
+ */
+export interface MultiModelRunOptions {
+    /** Models to use (defaults to all enabled) */
+    models?: ModelId[];
+    /** Agents to run */
+    agents?: AgentType[];
+    /** Whether to run models in parallel */
+    parallel?: boolean;
+    /** Timeout per model in ms */
+    timeout?: number;
+    /** Stop on first model failure */
+    failFast?: boolean;
+    /** Minimum models required for consensus */
+    minModels?: number;
+    /** Threshold for considering findings as matching (0-100) */
+    matchThreshold?: number;
+    /** Whether to include cost tracking */
+    trackCosts?: boolean;
+}
+/**
+ * Configuration for multi-model certification
+ */
+export interface MultiModelConfig {
+    /** Available models */
+    models: ModelConfig[];
+    /** Default run options */
+    defaults?: MultiModelRunOptions;
+    /** Consensus thresholds */
+    thresholds?: {
+        /** Minimum agreement for unanimous (default: 100) */
+        unanimous: number;
+        /** Minimum agreement for majority (default: 50) */
+        majority: number;
+        /** Fleiss' kappa threshold for good agreement (default: 0.6) */
+        goodAgreement: number;
+    };
+}
+/**
+ * Summary of multi-model certification
+ */
+export interface MultiModelSummary {
+    /** Total models used */
+    totalModels: number;
+    /** Successful models */
+    successfulModels: number;
+    /** Total findings across all models */
+    totalFindings: number;
+    /** Unique findings after dedup */
+    uniqueFindings: number;
+    /** Agreement rate */
+    agreementRate: number;
+    /** Inter-rater reliability (Fleiss' kappa) */
+    reliability: number;
+    /** Total cost */
+    totalCost: number;
+    /** Total tokens */
+    totalTokens: number;
+    /** High-confidence findings (found by majority) */
+    highConfidenceFindings: number;
+    /** Disputed findings */
+    disputedFindings: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/multimodel/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/multimodel/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,uBAAuB;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,2CAA2C;IAC3C,QAAQ,EAAE,aAAa,CAAC;IACxB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,iBAAiB;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe;IACf,QAAQ,EAAE,aAAa,CAAC;IACxB,iBAAiB;IACjB,KAAK,EAAE,SAAS,CAAC;IACjB,+BAA+B;IAC/B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB;IAClB,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,6FAA6F;IAC7F,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IACpD,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB;IACjB,SAAS,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IACpD,uBAAuB;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,mCAAmC;IACnC,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,oCAAoC;IACpC,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,IAAI,EAAE,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;IAC5D,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,8BAA8B;IAC9B,OAAO,EAAE;QACP,yEAAyE;QACzE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;QACzD,6BAA6B;QAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,mCAAmC;IACnC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,uBAAuB;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB;IACjB,KAAK,EAAE,SAAS,CAAC;IACjB,kBAAkB;IAClB,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,+BAA+B;IAC/B,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,qCAAqC;IACrC,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,mCAAmC;IACnC,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACnC,wBAAwB;IACxB,OAAO,EAAE;QACP,6BAA6B;QAC7B,aAAa,EAAE,MAAM,CAAC;QACtB,mCAAmC;QACnC,iBAAiB,EAAE,MAAM,CAAC;QAC1B,kCAAkC;QAClC,gBAAgB,EAAE,MAAM,CAAC;QACzB,kCAAkC;QAClC,gBAAgB,EAAE,MAAM,CAAC;QACzB,uDAAuD;QACvD,cAAc,EAAE,MAAM,CAAC;QACvB,gDAAgD;QAChD,WAAW,EAAE,MAAM,CAAC;QACpB,4BAA4B;QAC5B,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE;YAC3B,SAAS,EAAE,MAAM,CAAC;YAClB,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC,CAAC;KACJ,CAAC;IACF,8CAA8C;IAC9C,cAAc,EAAE,OAAO,EAAE,CAAC;IAC1B,gBAAgB;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,8CAA8C;IAC9C,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,oBAAoB;IACpB,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uCAAuC;IACvC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uBAAuB;IACvB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,2BAA2B;IAC3B,UAAU,CAAC,EAAE;QACX,qDAAqD;QACrD,SAAS,EAAE,MAAM,CAAC;QAClB,mDAAmD;QACnD,QAAQ,EAAE,MAAM,CAAC;QACjB,gEAAgE;QAChE,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,uCAAuC;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB;IACxB,gBAAgB,EAAE,MAAM,CAAC;CAC1B"}

package/dist/multimodel/types.js

@@ -0,0 +1,10 @@
+/**
+ * Multi-Model Consensus Types
+ *
+ * Types for running certification agents across multiple LLM providers
+ * and calculating inter-model consensus.
+ *
+ * @module multimodel/types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/multimodel/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/multimodel/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/observability/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Observability Module
+ *
+ * Provides OpenTelemetry metrics, tracing, and logging capabilities.
+ *
+ * @module observability
+ */
+export { initializeOtel, isOtelEnabled, getOtlpEndpoint, getMetrics, getTracer, getInMemoryStats, resetInMemoryStats, type VasperaMetrics, type Span, type SpanContext, type Tracer, } from "./otel.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/observability/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,cAAc,EACd,aAAa,EACb,eAAe,EACf,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,MAAM,GACZ,MAAM,WAAW,CAAC"}

package/dist/observability/index.js

@@ -0,0 +1,9 @@
+/**
+ * Observability Module
+ *
+ * Provides OpenTelemetry metrics, tracing, and logging capabilities.
+ *
+ * @module observability
+ */
+export { initializeOtel, isOtelEnabled, getOtlpEndpoint, getMetrics, getTracer, getInMemoryStats, resetInMemoryStats, } from "./otel.js";
+//# sourceMappingURL=index.js.map

package/dist/observability/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,cAAc,EACd,aAAa,EACb,eAAe,EACf,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,kBAAkB,GAKnB,MAAM,WAAW,CAAC"}

package/dist/observability/otel.d.ts

@@ -0,0 +1,102 @@
+/**
+ * OpenTelemetry Observability
+ *
+ * Provides metrics, tracing, and logging for Vaspera operations.
+ * Disabled by default, enabled via VASPERA_OTEL_ENABLED=true.
+ *
+ * @module observability/otel
+ */
+/**
+ * Metric types for Vaspera operations
+ */
+export interface VasperaMetrics {
+    /** Total findings by severity */
+    findingsTotal: (severity: string, scanner: string) => void;
+    /** Scan duration in milliseconds */
+    scanDuration: (scanner: string, durationMs: number) => void;
+    /** Certification duration in milliseconds */
+    certificationDuration: (durationMs: number) => void;
+    /** Agent run count */
+    agentRuns: (agentType: string, status: "success" | "failure") => void;
+    /** Circuit breaker state changes */
+    circuitBreakerState: (name: string, state: string) => void;
+    /** Retry attempts */
+    retryAttempts: (operation: string, attempt: number) => void;
+}
+/**
+ * Span context for tracing
+ */
+export interface SpanContext {
+    traceId: string;
+    spanId: string;
+    parentSpanId?: string;
+}
+/**
+ * Span interface for tracing operations
+ */
+export interface Span {
+    /** Set an attribute on the span */
+    setAttribute(key: string, value: string | number | boolean): void;
+    /** Record an error */
+    recordException(error: Error): void;
+    /** End the span */
+    end(): void;
+    /** Get span context */
+    getContext(): SpanContext;
+}
+/**
+ * Tracer interface for creating spans
+ */
+export interface Tracer {
+    /** Start a new span */
+    startSpan(name: string, attributes?: Record<string, string | number | boolean>): Span;
+    /** Run a function within a span */
+    withSpan<T>(name: string, fn: (span: Span) => Promise<T>): Promise<T>;
+}
+/**
+ * Check if OpenTelemetry is enabled
+ */
+export declare function isOtelEnabled(): boolean;
+/**
+ * Get the OTLP endpoint
+ */
+export declare function getOtlpEndpoint(): string;
+/**
+ * Initialize OpenTelemetry (lazy initialization)
+ *
+ * When VASPERA_OTEL_ENABLED=true, this will:
+ * 1. Initialize the OTEL SDK
+ * 2. Set up OTLP exporter
+ * 3. Register metrics and tracing providers
+ *
+ * When disabled (default), returns no-op implementations.
+ */
+export declare function initializeOtel(): Promise<void>;
+/**
+ * Get the metrics instance
+ */
+export declare function getMetrics(): VasperaMetrics;
+/**
+ * Get the tracer instance
+ */
+export declare function getTracer(): Tracer;
+/**
+ * Get in-memory metrics stats (when OTEL is disabled)
+ */
+export declare function getInMemoryStats(): {
+    findings: Record<string, number>;
+    recentScans: Array<{
+        scanner: string;
+        durationMs: number;
+        timestamp: Date;
+    }>;
+    agentRuns: Record<string, {
+        success: number;
+        failure: number;
+    }>;
+};
+/**
+ * Reset in-memory metrics (for testing)
+ */
+export declare function resetInMemoryStats(): void;
+//# sourceMappingURL=otel.d.ts.map

package/dist/observability/otel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel.d.ts","sourceRoot":"","sources":["../../src/observability/otel.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D,oCAAoC;IACpC,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D,6CAA6C;IAC7C,qBAAqB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IACpD,sBAAsB;IACtB,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,SAAS,KAAK,IAAI,CAAC;IACtE,oCAAoC;IACpC,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D,qBAAqB;IACrB,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7D;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,mCAAmC;IACnC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAClE,sBAAsB;IACtB,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpC,mBAAmB;IACnB,GAAG,IAAI,IAAI,CAAC;IACZ,uBAAuB;IACvB,UAAU,IAAI,WAAW,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,uBAAuB;IACvB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC;IACtF,mCAAmC;IACnC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACvE;AAaD;;GAEG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAkGD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAgJpD;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,cAAc,CAK3C;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAKlC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI;IAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,WAAW,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC7E,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE,CAMA;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAIzC"}

package/dist/observability/otel.js

@@ -0,0 +1,284 @@
+/**
+ * OpenTelemetry Observability
+ *
+ * Provides metrics, tracing, and logging for Vaspera operations.
+ * Disabled by default, enabled via VASPERA_OTEL_ENABLED=true.
+ *
+ * @module observability/otel
+ */
+// In-memory metrics storage (for when OTEL is disabled)
+const inMemoryMetrics = {
+    findings: new Map(),
+    scanDurations: [],
+    agentRuns: new Map(),
+};
+/**
+ * Check if OpenTelemetry is enabled
+ */
+export function isOtelEnabled() {
+    return process.env.VASPERA_OTEL_ENABLED === "true";
+}
+/**
+ * Get the OTLP endpoint
+ */
+export function getOtlpEndpoint() {
+    return process.env.VASPERA_OTEL_ENDPOINT || "http://localhost:4318";
+}
+/**
+ * No-op span implementation when OTEL is disabled
+ */
+class NoOpSpan {
+    context;
+    constructor(name) {
+        this.context = {
+            traceId: generateId(32),
+            spanId: generateId(16),
+        };
+    }
+    setAttribute(_key, _value) {
+        // No-op
+    }
+    recordException(_error) {
+        // No-op
+    }
+    end() {
+        // No-op
+    }
+    getContext() {
+        return this.context;
+    }
+}
+/**
+ * No-op tracer implementation when OTEL is disabled
+ */
+class NoOpTracer {
+    startSpan(name, _attributes) {
+        return new NoOpSpan(name);
+    }
+    async withSpan(name, fn) {
+        const span = this.startSpan(name);
+        try {
+            return await fn(span);
+        }
+        finally {
+            span.end();
+        }
+    }
+}
+/**
+ * Generate a random hex ID
+ */
+function generateId(length) {
+    const bytes = new Uint8Array(length / 2);
+    crypto.getRandomValues(bytes);
+    return Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+}
+/**
+ * Create a no-op metrics implementation
+ */
+function createNoOpMetrics() {
+    return {
+        findingsTotal: (severity, scanner) => {
+            const key = `${scanner}:${severity}`;
+            inMemoryMetrics.findings.set(key, (inMemoryMetrics.findings.get(key) || 0) + 1);
+        },
+        scanDuration: (scanner, durationMs) => {
+            inMemoryMetrics.scanDurations.push({ scanner, durationMs, timestamp: new Date() });
+            // Keep only last 1000 entries
+            if (inMemoryMetrics.scanDurations.length > 1000) {
+                inMemoryMetrics.scanDurations.shift();
+            }
+        },
+        certificationDuration: (_durationMs) => {
+            // No-op for now
+        },
+        agentRuns: (agentType, status) => {
+            const current = inMemoryMetrics.agentRuns.get(agentType) || { success: 0, failure: 0 };
+            current[status]++;
+            inMemoryMetrics.agentRuns.set(agentType, current);
+        },
+        circuitBreakerState: (_name, _state) => {
+            // No-op
+        },
+        retryAttempts: (_operation, _attempt) => {
+            // No-op
+        },
+    };
+}
+// Singleton instances
+let metricsInstance = null;
+let tracerInstance = null;
+/**
+ * Initialize OpenTelemetry (lazy initialization)
+ *
+ * When VASPERA_OTEL_ENABLED=true, this will:
+ * 1. Initialize the OTEL SDK
+ * 2. Set up OTLP exporter
+ * 3. Register metrics and tracing providers
+ *
+ * When disabled (default), returns no-op implementations.
+ */
+export async function initializeOtel() {
+    if (!isOtelEnabled()) {
+        return;
+    }
+    // Dynamic import to avoid loading OTEL dependencies when disabled
+    // Note: OpenTelemetry packages are optional. Install them for full observability:
+    // npm install @opentelemetry/sdk-node @opentelemetry/api @opentelemetry/exporter-metrics-otlp-http @opentelemetry/exporter-trace-otlp-http @opentelemetry/sdk-metrics
+    try {
+        // Use Function constructor to hide imports from TypeScript's static analysis
+        // This allows the code to compile even when @opentelemetry packages aren't installed
+        const dynamicImport = new Function("specifier", "return import(specifier)");
+        const otelApi = await dynamicImport("@opentelemetry/api");
+        const { NodeSDK } = await dynamicImport("@opentelemetry/sdk-node");
+        const { OTLPMetricExporter } = await dynamicImport("@opentelemetry/exporter-metrics-otlp-http");
+        const { OTLPTraceExporter } = await dynamicImport("@opentelemetry/exporter-trace-otlp-http");
+        const { PeriodicExportingMetricReader } = await dynamicImport("@opentelemetry/sdk-metrics");
+        const endpoint = getOtlpEndpoint();
+        const sdk = new NodeSDK({
+            serviceName: "vaspera-hardening",
+            metricReader: new PeriodicExportingMetricReader({
+                exporter: new OTLPMetricExporter({ url: `${endpoint}/v1/metrics` }),
+                exportIntervalMillis: 10000,
+            }),
+            traceExporter: new OTLPTraceExporter({ url: `${endpoint}/v1/traces` }),
+        });
+        sdk.start();
+        // Create real metrics
+        const meter = otelApi.metrics.getMeter("vaspera-hardening");
+        const findingsCounter = meter.createCounter("vaspera_findings_total", {
+            description: "Total number of findings by severity and scanner",
+        });
+        const scanDurationHistogram = meter.createHistogram("vaspera_scan_duration_ms", {
+            description: "Scanner execution duration in milliseconds",
+        });
+        const certDurationHistogram = meter.createHistogram("vaspera_certification_duration_ms", {
+            description: "Certification total duration in milliseconds",
+        });
+        const agentRunsCounter = meter.createCounter("vaspera_agent_runs_total", {
+            description: "Total number of agent runs by type and status",
+        });
+        meter.createObservableGauge("vaspera_circuit_breaker_state", {
+            description: "Circuit breaker state (0=closed, 1=half-open, 2=open)",
+        });
+        const retryCounter = meter.createCounter("vaspera_retry_attempts_total", {
+            description: "Total number of retry attempts",
+        });
+        metricsInstance = {
+            findingsTotal: (severity, scanner) => {
+                findingsCounter.add(1, { severity, scanner });
+            },
+            scanDuration: (scanner, durationMs) => {
+                scanDurationHistogram.record(durationMs, { scanner });
+            },
+            certificationDuration: (durationMs) => {
+                certDurationHistogram.record(durationMs);
+            },
+            agentRuns: (agentType, status) => {
+                agentRunsCounter.add(1, { agent_type: agentType, status });
+            },
+            circuitBreakerState: (_name, _state) => {
+                // Observable gauge callback handles this
+            },
+            retryAttempts: (operation, attempt) => {
+                retryCounter.add(1, { operation, attempt: attempt.toString() });
+            },
+        };
+        // Create real tracer
+        const tracer = otelApi.trace.getTracer("vaspera-hardening");
+        tracerInstance = {
+            startSpan: (name, attributes) => {
+                const span = tracer.startSpan(name);
+                if (attributes) {
+                    Object.entries(attributes).forEach(([key, value]) => {
+                        span.setAttribute(key, value);
+                    });
+                }
+                return {
+                    setAttribute: (key, value) => span.setAttribute(key, value),
+                    recordException: (error) => span.recordException(error),
+                    end: () => span.end(),
+                    getContext: () => {
+                        const ctx = span.spanContext();
+                        return {
+                            traceId: ctx.traceId,
+                            spanId: ctx.spanId,
+                        };
+                    },
+                };
+            },
+            withSpan: async (name, fn) => {
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                return tracer.startActiveSpan(name, async (otelSpan) => {
+                    const span = {
+                        setAttribute: (key, value) => otelSpan.setAttribute(key, value),
+                        recordException: (error) => otelSpan.recordException(error),
+                        end: () => otelSpan.end(),
+                        getContext: () => ({
+                            traceId: otelSpan.spanContext().traceId,
+                            spanId: otelSpan.spanContext().spanId,
+                        }),
+                    };
+                    try {
+                        return await fn(span);
+                    }
+                    finally {
+                        otelSpan.end();
+                    }
+                });
+            },
+        };
+        if (process.env.VASPERA_OTEL_DEBUG === "true") {
+            console.log(`[otel] Initialized with endpoint: ${endpoint}`);
+        }
+    }
+    catch (error) {
+        // OpenTelemetry packages not installed or initialization failed
+        // This is expected - OTEL is optional
+        if (process.env.VASPERA_OTEL_DEBUG === "true") {
+            console.warn("[otel] OpenTelemetry not available. Install @opentelemetry/* packages for observability.", error.message);
+        }
+        // Fall back to no-op
+        metricsInstance = null;
+        tracerInstance = null;
+    }
+}
+/**
+ * Get the metrics instance
+ */
+export function getMetrics() {
+    if (!metricsInstance) {
+        metricsInstance = createNoOpMetrics();
+    }
+    return metricsInstance;
+}
+/**
+ * Get the tracer instance
+ */
+export function getTracer() {
+    if (!tracerInstance) {
+        tracerInstance = new NoOpTracer();
+    }
+    return tracerInstance;
+}
+/**
+ * Get in-memory metrics stats (when OTEL is disabled)
+ */
+export function getInMemoryStats() {
+    return {
+        findings: Object.fromEntries(inMemoryMetrics.findings),
+        recentScans: inMemoryMetrics.scanDurations.slice(-100),
+        agentRuns: Object.fromEntries(inMemoryMetrics.agentRuns),
+    };
+}
+/**
+ * Reset in-memory metrics (for testing)
+ */
+export function resetInMemoryStats() {
+    inMemoryMetrics.findings.clear();
+    inMemoryMetrics.scanDurations.length = 0;
+    inMemoryMetrics.agentRuns.clear();
+}
+//# sourceMappingURL=otel.js.map

package/dist/observability/otel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel.js","sourceRoot":"","sources":["../../src/observability/otel.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqDH,wDAAwD;AACxD,MAAM,eAAe,GAIjB;IACF,QAAQ,EAAE,IAAI,GAAG,EAAE;IACnB,aAAa,EAAE,EAAE;IACjB,SAAS,EAAE,IAAI,GAAG,EAAE;CACrB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,uBAAuB,CAAC;AACtE,CAAC;AAED;;GAEG;AACH,MAAM,QAAQ;IACK,OAAO,CAAc;IAEtC,YAAY,IAAY;QACtB,IAAI,CAAC,OAAO,GAAG;YACb,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;SACvB,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,MAAiC;QAC1D,QAAQ;IACV,CAAC;IAED,eAAe,CAAC,MAAa;QAC3B,QAAQ;IACV,CAAC;IAED,GAAG;QACD,QAAQ;IACV,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU;IACd,SAAS,CAAC,IAAY,EAAE,WAAuD;QAC7E,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAI,IAAY,EAAE,EAA8B;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,aAAa,EAAE,CAAC,QAAgB,EAAE,OAAe,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;YACrC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClF,CAAC;QACD,YAAY,EAAE,CAAC,OAAe,EAAE,UAAkB,EAAE,EAAE;YACpD,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YACnF,8BAA8B;YAC9B,IAAI,eAAe,CAAC,aAAa,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;gBAChD,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACxC,CAAC;QACH,CAAC;QACD,qBAAqB,EAAE,CAAC,WAAmB,EAAE,EAAE;YAC7C,gBAAgB;QAClB,CAAC;QACD,SAAS,EAAE,CAAC,SAAiB,EAAE,MAA6B,EAAE,EAAE;YAC9D,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACvF,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClB,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QACD,mBAAmB,EAAE,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE;YACrD,QAAQ;QACV,CAAC;QACD,aAAa,EAAE,CAAC,UAAkB,EAAE,QAAgB,EAAE,EAAE;YACtD,QAAQ;QACV,CAAC;KACF,CAAC;AACJ,CAAC;AAED,sBAAsB;AACtB,IAAI,eAAe,GAA0B,IAAI,CAAC;AAClD,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,kEAAkE;IAClE,kFAAkF;IAClF,sKAAsK;IACtK,IAAI,CAAC;QACH,6EAA6E;QAC7E,qFAAqF;QACrF,MAAM,aAAa,GAAG,IAAI,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAGzD,CAAC;QAElB,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,CAAC;QAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,yBAAyB,CAAC,CAAC;QACnE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,aAAa,CAAC,2CAA2C,CAAC,CAAC;QAChG,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,aAAa,CAAC,yCAAyC,CAAC,CAAC;QAC7F,MAAM,EAAE,6BAA6B,EAAE,GAAG,MAAM,aAAa,CAAC,4BAA4B,CAAC,CAAC;QAE5F,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;QAEnC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC;YACtB,WAAW,EAAE,mBAAmB;YAChC,YAAY,EAAE,IAAI,6BAA6B,CAAC;gBAC9C,QAAQ,EAAE,IAAI,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,QAAQ,aAAa,EAAE,CAAC;gBACnE,oBAAoB,EAAE,KAAK;aAC5B,CAAC;YACF,aAAa,EAAE,IAAI,iBAAiB,CAAC,EAAE,GAAG,EAAE,GAAG,QAAQ,YAAY,EAAE,CAAC;SACvE,CAAC,CAAC;QAEH,GAAG,CAAC,KAAK,EAAE,CAAC;QAEZ,sBAAsB;QACtB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAE5D,MAAM,eAAe,GAAG,KAAK,CAAC,aAAa,CAAC,wBAAwB,EAAE;YACpE,WAAW,EAAE,kDAAkD;SAChE,CAAC,CAAC;QAEH,MAAM,qBAAqB,GAAG,KAAK,CAAC,eAAe,CAAC,0BAA0B,EAAE;YAC9E,WAAW,EAAE,4CAA4C;SAC1D,CAAC,CAAC;QAEH,MAAM,qBAAqB,GAAG,KAAK,CAAC,eAAe,CAAC,mCAAmC,EAAE;YACvF,WAAW,EAAE,8CAA8C;SAC5D,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,KAAK,CAAC,aAAa,CAAC,0BAA0B,EAAE;YACvE,WAAW,EAAE,+CAA+C;SAC7D,CAAC,CAAC;QAEH,KAAK,CAAC,qBAAqB,CAAC,+BAA+B,EAAE;YAC3D,WAAW,EAAE,uDAAuD;SACrE,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC,8BAA8B,EAAE;YACvE,WAAW,EAAE,gCAAgC;SAC9C,CAAC,CAAC;QAEH,eAAe,GAAG;YAChB,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;gBACnC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,YAAY,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE;gBACpC,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,qBAAqB,EAAE,CAAC,UAAU,EAAE,EAAE;gBACpC,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3C,CAAC;YACD,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE;gBAC/B,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrC,yCAAyC;YAC3C,CAAC;YACD,aAAa,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;gBACpC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC;SACF,CAAC;QAEF,qBAAqB;QACrB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAE5D,cAAc,GAAG;YACf,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;wBAClD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAChC,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO;oBACL,YAAY,EAAE,CAAC,GAAW,EAAE,KAAgC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC;oBAC9F,eAAe,EAAE,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;oBAC9D,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;oBACrB,UAAU,EAAE,GAAG,EAAE;wBACf,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC/B,OAAO;4BACL,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,MAAM,EAAE,GAAG,CAAC,MAAM;yBACnB,CAAC;oBACJ,CAAC;iBACF,CAAC;YACJ,CAAC;YACD,QAAQ,EAAE,KAAK,EAAK,IAAY,EAAE,EAA8B,EAAc,EAAE;gBAC9E,8DAA8D;gBAC9D,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,QAAa,EAAE,EAAE;oBAC1D,MAAM,IAAI,GAAS;wBACjB,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC;wBAC/D,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC;wBAC3D,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE;wBACzB,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;4BACjB,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO;4BACvC,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM;yBACtC,CAAC;qBACH,CAAC;oBACF,IAAI,CAAC;wBACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;oBACxB,CAAC;4BAAS,CAAC;wBACT,QAAQ,CAAC,GAAG,EAAE,CAAC;oBACjB,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC;QAEF,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,EAAE,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gEAAgE;QAChE,sCAAsC;QACtC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CACV,0FAA0F,EACzF,KAAe,CAAC,OAAO,CACzB,CAAC;QACJ,CAAC;QACD,qBAAqB;QACrB,eAAe,GAAG,IAAI,CAAC;QACvB,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,eAAe,GAAG,iBAAiB,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,IAAI,UAAU,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAK9B,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,QAAQ,CAAC;QACtD,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;QACtD,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,eAAe,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjC,eAAe,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;IACzC,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;AACpC,CAAC"}

package/dist/plugins/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Scanner Plugin System
+ *
+ * Provides extensibility through external scanner plugins.
+ *
+ * @module plugins
+ */
+export { PluginManifestSchema, isValidManifest, validateManifest, type PluginManifest, type LoadedPlugin, type PluginLoadOptions, type PluginExecutionResult, type ScannerPluginContext, type ScannerPluginFn, type PluginRegistryEntry, type PluginSeverityMapping, type PluginFinding, } from "./types.js";
+export { loadPlugins, executePlugins, executePluginDirect, executePluginSandboxed, PluginRegistry, } from "./loader.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,GACf,MAAM,aAAa,CAAC"}