verification-layer 0.27.13 → 0.28.0

package/dist/delivery-cli.js

@@ -0,0 +1,306 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import chalk from 'chalk';
+import { readFile, writeFile } from 'fs/promises';
+import { resolve } from 'path';
+import { applyFixes } from './fixer/index.js';
+import { buildComplianceGraph, buildEvidencePackage, buildRemediationPlan, getAcknowledgmentLifecycle, graphToMermaid, remediationToMarkdown, runComplianceGuard, saveEvidencePackage, verifyEvidencePackage, } from './delivery/index.js';
+function addCommonOptions(command) {
+    return command
+        .option('--baseline <path>', 'Baseline file (default: .vlayer-baseline.json when present)')
+        .option('--config <path>', 'Scanner configuration file')
+        .option('--policy <path>', 'Delivery policy JSON file')
+        .option('--base <ref>', 'Git base branch, tag, or SHA')
+        .option('--head <ref>', 'Git head branch, tag, or SHA', 'HEAD')
+        .option('--all-files', 'Evaluate all new findings instead of changed files only')
+        .option('--ai', 'Enable AI triage for this gate (off by default for deterministic CI)')
+        .option('--min-confidence <level>', 'Minimum confidence: high, medium, low');
+}
+async function executeGuard(path, options) {
+    return runComplianceGuard({
+        path,
+        baselineFile: options.baseline,
+        configFile: options.config,
+        policyFile: options.policy,
+        baseRef: options.base,
+        headRef: options.head,
+        changedFilesOnly: options.allFiles ? false : undefined,
+        enableAI: options.ai === true,
+        minConfidence: options.minConfidence,
+    });
+}
+function guardJson(guard) {
+    return {
+        schemaVersion: '1.0',
+        generatedAt: new Date().toISOString(),
+        source: guard.git,
+        baseline: {
+            loaded: guard.baselineLoaded,
+            path: guard.baselinePath,
+        },
+        policySource: guard.policySource,
+        decision: guard.decision,
+        summary: {
+            scannedFiles: guard.scannedFiles,
+            complianceScore: guard.complianceScore,
+            newFindings: guard.delta.newFindings.length,
+            newFindingsInChangedFiles: guard.delta.newFindingsInChangedFiles.length,
+            baselineFindings: guard.delta.baselineFindings.length,
+            resolvedFindings: guard.delta.resolvedFindings.length,
+            expiredAcknowledgments: guard.acknowledgmentLifecycle.expired.length,
+        },
+        newFindings: guard.delta.newFindings.map(finding => ({
+            id: finding.id,
+            severity: finding.severity,
+            title: finding.title,
+            file: finding.file,
+            line: finding.line,
+            recommendation: finding.recommendation,
+            hipaaReference: finding.hipaaReference,
+            fixType: finding.fixType,
+        })),
+        resolvedFindings: guard.delta.resolvedFindings,
+    };
+}
+function printDecision(guard) {
+    const decision = guard.decision;
+    console.log('');
+    console.log(decision.deployAllowed
+        ? chalk.green.bold('DEPLOYMENT APPROVED')
+        : chalk.red.bold('DEPLOYMENT BLOCKED'));
+    console.log(chalk.gray(`Scope: ${decision.consideredScope}`));
+    if (guard.git.headSha)
+        console.log(chalk.gray(`Head: ${guard.git.headSha}`));
+    if (guard.git.baseSha)
+        console.log(chalk.gray(`Base: ${guard.git.baseSha}`));
+    console.log(chalk.gray(`Changed files: ${guard.git.changedFiles.length}`));
+    console.log(`Compliance score: ${guard.complianceScore ?? 'N/A'}`);
+    console.log(`New findings: ${guard.delta.newFindings.length}`);
+    console.log(`New in changed files: ${guard.delta.newFindingsInChangedFiles.length}`);
+    console.log(`Resolved: ${guard.delta.resolvedFindings.length}`);
+    console.log(`Baseline debt: ${guard.delta.baselineFindings.length}`);
+    if (decision.reasons.length > 0) {
+        console.log(chalk.bold('\nPolicy reasons:'));
+        for (const reason of decision.reasons) {
+            console.log(chalk.red(`  - ${reason.message}`));
+        }
+    }
+    const soon = guard.acknowledgmentLifecycle.expiringSoon.length;
+    if (soon > 0) {
+        console.log(chalk.yellow(`\n${soon} acknowledgment${soon === 1 ? '' : 's'} expire within 30 days.`));
+    }
+}
+async function appendGithubSummary(guard) {
+    const summaryFile = process.env.GITHUB_STEP_SUMMARY;
+    if (!summaryFile)
+        return;
+    const lines = [
+        '## vlayer compliance delivery gate',
+        '',
+        `**Decision:** ${guard.decision.deployAllowed ? 'PASS' : 'FAIL'}`,
+        '',
+        '| Metric | Value |',
+        '|---|---:|',
+        `| Compliance score | ${guard.complianceScore ?? 'N/A'} |`,
+        `| New findings | ${guard.delta.newFindings.length} |`,
+        `| New in changed files | ${guard.delta.newFindingsInChangedFiles.length} |`,
+        `| Resolved | ${guard.delta.resolvedFindings.length} |`,
+        `| Baseline debt | ${guard.delta.baselineFindings.length} |`,
+        `| Expired exceptions | ${guard.acknowledgmentLifecycle.expired.length} |`,
+        '',
+    ];
+    if (guard.decision.reasons.length > 0) {
+        lines.push('### Policy reasons', '');
+        for (const reason of guard.decision.reasons)
+            lines.push(`- ${reason.message}`);
+        lines.push('');
+    }
+    await writeFile(summaryFile, `${lines.join('\n')}\n`, { flag: 'a' });
+}
+function setDecisionExitCode(guard) {
+    if (!guard.decision.deployAllowed)
+        process.exitCode = 2;
+}
+const program = new Command();
+program
+    .name('vlayer-ci')
+    .description('Compliance delivery gates, evidence, graph, and remediation for vlayer')
+    .version('1.0.0');
+addCommonOptions(program
+    .command('guard')
+    .description('Decide whether a software change may be deployed')
+    .argument('[path]', 'Repository path', '.')
+    .option('-o, --output <path>', 'Write the machine-readable guard result to JSON')).action(async (path, options) => {
+    try {
+        const guard = await executeGuard(path, options);
+        printDecision(guard);
+        await appendGithubSummary(guard);
+        if (options.output) {
+            const output = resolve(options.output);
+            await writeFile(output, JSON.stringify(guardJson(guard), null, 2), 'utf-8');
+            console.log(chalk.gray(`\nGuard result: ${output}`));
+        }
+        setDecisionExitCode(guard);
+    }
+    catch (error) {
+        console.error(chalk.red(error instanceof Error ? error.message : 'Compliance guard failed'));
+        process.exitCode = 1;
+    }
+});
+addCommonOptions(program
+    .command('evidence')
+    .description('Generate a tamper-evident compliance evidence package')
+    .argument('[path]', 'Repository path', '.')
+    .option('-o, --output <path>', 'Evidence package output', 'vlayer-evidence.json')).action(async (path, options) => {
+    try {
+        const guard = await executeGuard(path, options);
+        const evidence = buildEvidencePackage(guard.git.root, guard);
+        const output = resolve(options.output);
+        await saveEvidencePackage(output, evidence);
+        printDecision(guard);
+        console.log(chalk.cyan(`\nEvidence package: ${output}`));
+        console.log(chalk.cyan(`SHA256: ${evidence.packageHash}`));
+        setDecisionExitCode(guard);
+    }
+    catch (error) {
+        console.error(chalk.red(error instanceof Error ? error.message : 'Evidence generation failed'));
+        process.exitCode = 1;
+    }
+});
+addCommonOptions(program
+    .command('graph')
+    .description('Generate the code-to-control compliance graph')
+    .argument('[path]', 'Repository path', '.')
+    .option('-o, --output <path>', 'Graph JSON output', 'vlayer-compliance-graph.json')
+    .option('--mermaid <path>', 'Also write a Mermaid graph file')).action(async (path, options) => {
+    try {
+        const guard = await executeGuard(path, options);
+        const graph = buildComplianceGraph(guard.findings, guard.git.root, guard.decision, guard.git);
+        const output = resolve(options.output);
+        await writeFile(output, JSON.stringify(graph, null, 2), 'utf-8');
+        console.log(chalk.cyan(`Compliance graph: ${output}`));
+        console.log(chalk.gray(`${graph.nodes.length} nodes / ${graph.edges.length} edges`));
+        if (options.mermaid) {
+            const mermaidPath = resolve(options.mermaid);
+            await writeFile(mermaidPath, graphToMermaid(graph), 'utf-8');
+            console.log(chalk.cyan(`Mermaid graph: ${mermaidPath}`));
+        }
+        setDecisionExitCode(guard);
+    }
+    catch (error) {
+        console.error(chalk.red(error instanceof Error ? error.message : 'Graph generation failed'));
+        process.exitCode = 1;
+    }
+});
+program
+    .command('exceptions')
+    .description('Review acknowledgment/exception lifecycle')
+    .argument('[path]', 'Repository path', '.')
+    .option('--config <path>', 'Scanner configuration file')
+    .option('-f, --format <format>', 'text or json', 'text')
+    .action(async (path, options) => {
+    try {
+        const lifecycle = await getAcknowledgmentLifecycle(path, options.config);
+        if (options.format === 'json') {
+            console.log(JSON.stringify(lifecycle, null, 2));
+        }
+        else {
+            console.log(chalk.bold('\nCompliance exceptions'));
+            console.log(`Total: ${lifecycle.total}`);
+            console.log(`Active: ${lifecycle.active.length}`);
+            console.log(`Expiring in 30 days: ${lifecycle.expiringSoon.length}`);
+            console.log(`Expired: ${lifecycle.expired.length}`);
+            for (const acknowledgment of lifecycle.expired) {
+                console.log(chalk.red(`  - ${acknowledgment.id ?? acknowledgment.pattern}: ${acknowledgment.reason}`));
+            }
+        }
+        if (lifecycle.expired.length > 0)
+            process.exitCode = 2;
+    }
+    catch (error) {
+        console.error(chalk.red(error instanceof Error ? error.message : 'Exception review failed'));
+        process.exitCode = 1;
+    }
+});
+addCommonOptions(program
+    .command('agent')
+    .description('Explain a deployment decision and generate a remediation plan')
+    .argument('[path]', 'Repository path', '.')
+    .option('-o, --output <path>', 'Write agent result JSON')
+    .option('--markdown <path>', 'Write remediation plan as Markdown')
+    .option('--apply-safe-fixes', 'Apply registered deterministic fixes, then re-evaluate')).action(async (path, options) => {
+    try {
+        let guard = await executeGuard(path, options);
+        let fixReport;
+        if (options.applySafeFixes && !guard.decision.deployAllowed) {
+            const candidates = (guard.decision.consideredScope === 'changed-files'
+                ? guard.delta.newFindingsInChangedFiles
+                : guard.delta.newFindings).filter(finding => finding.fixType);
+            if (candidates.length > 0) {
+                const report = await applyFixes(candidates, guard.git.root, guard.scannedFiles, 0);
+                fixReport = { fixedCount: report.fixedCount, skippedCount: report.skippedCount };
+                guard = await executeGuard(path, options);
+            }
+        }
+        const remediation = buildRemediationPlan(guard.git.root, guard);
+        printDecision(guard);
+        console.log(chalk.bold('\nRemediation'));
+        if (remediation.items.length === 0) {
+            console.log(remediation.deployAllowed
+                ? chalk.green('No blocking remediation required.')
+                : chalk.yellow('Policy failed for a governance condition; review policy reasons above.'));
+        }
+        else {
+            for (const item of remediation.items) {
+                console.log(`\n${chalk.red(item.severity.toUpperCase())} ${item.title}`);
+                console.log(chalk.gray(`${item.file}${item.line ? `:${item.line}` : ''}`));
+                console.log(item.recommendation);
+                if (item.autoFixAvailable)
+                    console.log(chalk.cyan('Deterministic auto-fix is registered.'));
+            }
+        }
+        if (fixReport) {
+            console.log(chalk.cyan(`\nSafe fixes applied: ${fixReport.fixedCount}; skipped: ${fixReport.skippedCount}`));
+        }
+        if (options.markdown) {
+            await writeFile(resolve(options.markdown), remediationToMarkdown(remediation), 'utf-8');
+        }
+        if (options.output) {
+            await writeFile(resolve(options.output), JSON.stringify({
+                schemaVersion: '1.0',
+                decision: guard.decision,
+                remediation,
+                fixReport,
+            }, null, 2), 'utf-8');
+        }
+        setDecisionExitCode(guard);
+    }
+    catch (error) {
+        console.error(chalk.red(error instanceof Error ? error.message : 'Compliance agent failed'));
+        process.exitCode = 1;
+    }
+});
+program
+    .command('verify-evidence')
+    .description('Verify the SHA256 integrity of a vlayer evidence package')
+    .argument('<file>', 'Evidence package JSON')
+    .action(async (file) => {
+    try {
+        const evidence = JSON.parse(await readFile(resolve(file), 'utf-8'));
+        const valid = verifyEvidencePackage(evidence);
+        console.log(valid
+            ? chalk.green.bold('Evidence package integrity verified')
+            : chalk.red.bold('Evidence package integrity check FAILED'));
+        if (!valid)
+            process.exitCode = 2;
+    }
+    catch (error) {
+        console.error(chalk.red(error instanceof Error ? error.message : 'Evidence verification failed'));
+        process.exitCode = 1;
+    }
+});
+program.parseAsync().catch(error => {
+    console.error(chalk.red(error instanceof Error ? error.message : 'vlayer-ci failed'));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=delivery-cli.js.map

package/dist/delivery-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-cli.js","sourceRoot":"","sources":["../src/delivery-cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAc7B,SAAS,gBAAgB,CAAC,OAAgB;IACxC,OAAO,OAAO;SACX,MAAM,CAAC,mBAAmB,EAAE,6DAA6D,CAAC;SAC1F,MAAM,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;SACvD,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;SACtD,MAAM,CAAC,cAAc,EAAE,8BAA8B,CAAC;SACtD,MAAM,CAAC,cAAc,EAAE,8BAA8B,EAAE,MAAM,CAAC;SAC9D,MAAM,CAAC,aAAa,EAAE,yDAAyD,CAAC;SAChF,MAAM,CAAC,MAAM,EAAE,sEAAsE,CAAC;SACtF,MAAM,CAAC,0BAA0B,EAAE,uCAAuC,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,OAAsB;IAC9D,OAAO,kBAAkB,CAAC;QACxB,IAAI;QACJ,YAAY,EAAE,OAAO,CAAC,QAAQ;QAC9B,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACtD,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,IAAI;QAC7B,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAqD;IACtE,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,KAAK,CAAC,GAAG;QACjB,QAAQ,EAAE;YACR,MAAM,EAAE,KAAK,CAAC,cAAc;YAC5B,IAAI,EAAE,KAAK,CAAC,YAAY;SACzB;QACD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE;YACP,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM;YAC3C,yBAAyB,EAAE,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM;YACvE,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM;YACrD,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM;YACrD,sBAAsB,EAAE,KAAK,CAAC,uBAAuB,CAAC,OAAO,CAAC,MAAM;SACrE;QACD,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACnD,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QACH,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAqD;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa;QAChC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC;QACzC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,CAAC,eAAe,IAAI,KAAK,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,EAAE,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IAErE,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7C,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,uBAAuB,CAAC,YAAY,CAAC,MAAM,CAAC;IAC/D,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,kBAAkB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC;IACvG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,KAAqD;IACtF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACpD,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,KAAK,GAAG;QACZ,oCAAoC;QACpC,EAAE;QACF,iBAAiB,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;QACjE,EAAE;QACF,oBAAoB;QACpB,YAAY;QACZ,wBAAwB,KAAK,CAAC,eAAe,IAAI,KAAK,IAAI;QAC1D,oBAAoB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,IAAI;QACtD,4BAA4B,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,IAAI;QAC5E,gBAAgB,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,IAAI;QACvD,qBAAqB,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,IAAI;QAC5D,0BAA0B,KAAK,CAAC,uBAAuB,CAAC,OAAO,CAAC,MAAM,IAAI;QAC1E,EAAE;KACH,CAAC;IAEF,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QACrC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAkB;IAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,wEAAwE,CAAC;KACrF,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,gBAAgB,CACd,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,kDAAkD,CAAC;KAC/D,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC;KAC1C,MAAM,CAAC,qBAAqB,EAAE,iDAAiD,CAAC,CACpF,CAAC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA4C,EAAE,EAAE;IAC5E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC7F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,gBAAgB,CACd,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,uDAAuD,CAAC;KACpE,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC;KAC1C,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,EAAE,sBAAsB,CAAC,CACpF,CAAC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA2C,EAAE,EAAE;IAC3E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5C,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3D,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAChG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,gBAAgB,CACd,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,+CAA+C,CAAC;KAC5D,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC;KAC1C,MAAM,CAAC,qBAAqB,EAAE,mBAAmB,EAAE,8BAA8B,CAAC;KAClF,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CACjE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA6D,EAAE,EAAE;IAC7F,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC;QACrF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,SAAS,CAAC,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC7F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,OAAO;KACJ,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,2CAA2C,CAAC;KACxD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC;KAC1C,MAAM,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;KACvD,MAAM,CAAC,uBAAuB,EAAE,cAAc,EAAE,MAAM,CAAC;KACvD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA4C,EAAE,EAAE;IAC3E,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,UAAU,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,WAAW,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,wBAAwB,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,KAAK,MAAM,cAAc,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,cAAc,CAAC,EAAE,IAAI,cAAc,CAAC,OAAO,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC7F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,gBAAgB,CACd,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,+DAA+D,CAAC;KAC5E,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC;KAC1C,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,CAAC;KACxD,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;KACjE,MAAM,CAAC,oBAAoB,EAAE,wDAAwD,CAAC,CAC1F,CAAC,MAAM,CAAC,KAAK,EACZ,IAAY,EACZ,OAAyF,EACzF,EAAE;IACF,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,SAAmE,CAAC;QAExE,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC5D,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,KAAK,eAAe;gBACpE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB;gBACvC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEhE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;gBACnF,SAAS,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;gBACjF,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChE,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;QACzC,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa;gBACnC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC;gBAClD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,wEAAwE,CAAC,CAAC,CAAC;QAC9F,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC3E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBACjC,IAAI,IAAI,CAAC,gBAAgB;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,SAAS,CAAC,UAAU,cAAc,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC/G,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtD,aAAa,EAAE,KAAK;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW;gBACX,SAAS;aACV,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxB,CAAC;QACD,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC7F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,OAAO;KACJ,OAAO,CAAC,iBAAiB,CAAC;KAC1B,WAAW,CAAC,0DAA0D,CAAC;KACvE,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;KAC3C,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAoB,CAAC;QACvF,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,KAAK;YACf,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC;YACzD,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAClG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACjC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACtF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/delivery-upload-cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=delivery-upload-cli.d.ts.map

package/dist/delivery-upload-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-upload-cli.d.ts","sourceRoot":"","sources":["../src/delivery-upload-cli.ts"],"names":[],"mappings":""}

package/dist/delivery-upload-cli.js

@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import chalk from 'chalk';
+import { uploadEvidenceFile } from './delivery/upload.js';
+const program = new Command();
+program
+    .name('vlayer-upload')
+    .description('Upload a verified vlayer evidence package to a compliance workspace')
+    .argument('<file>', 'Evidence package JSON')
+    .option('--url <url>', 'Workspace ingest URL (default: VLAYER_INGEST_URL or https://vlayer.app/api/ingest)')
+    .option('--token-env <name>', 'Environment variable containing the project token', 'VLAYER_TOKEN')
+    .action(async (file, options) => {
+    try {
+        const token = process.env[options.tokenEnv];
+        if (!token) {
+            throw new Error(`${options.tokenEnv} is not set`);
+        }
+        const result = await uploadEvidenceFile(file, {
+            url: options.url,
+            token,
+        });
+        console.log(chalk.green.bold('Evidence uploaded'));
+        if (result.projectId)
+            console.log(`Project: ${result.projectId}`);
+        if (result.scanId)
+            console.log(`Scan: ${result.scanId}`);
+    }
+    catch (error) {
+        console.error(chalk.red(error instanceof Error ? error.message : 'Evidence upload failed'));
+        process.exitCode = 1;
+    }
+});
+program.parseAsync().catch(error => {
+    console.error(chalk.red(error instanceof Error ? error.message : 'vlayer-upload failed'));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=delivery-upload-cli.js.map

package/dist/delivery-upload-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-upload-cli.js","sourceRoot":"","sources":["../src/delivery-upload-cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,eAAe,CAAC;KACrB,WAAW,CAAC,qEAAqE,CAAC;KAClF,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;KAC3C,MAAM,CAAC,aAAa,EAAE,oFAAoF,CAAC;KAC3G,MAAM,CAAC,oBAAoB,EAAE,mDAAmD,EAAE,cAAc,CAAC;KACjG,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA2C,EAAE,EAAE;IAC1E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,aAAa,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE;YAC5C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK;SACN,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACjC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAC1F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -3,10 +3,11 @@ export { generateReport } from './reporters/index.js';
 export { loadCustomRules, validateRulesFile, scanWithCustomRules } from './rules/index.js';
 export { RULE_CATALOG, getAllRules, getRulesByCategory, getCategoryCounts, } from './rules/catalog.js';
 export type { CatalogRule, CatalogSeverity, Category } from './rules/catalog.js';
-export { loadBaseline, saveBaseline, applyBaseline, generateFindingHash } from './baseline.js';
+export { BASELINE_VERSION, applyBaseline, canonicalRuleId, createBaselineEntry, generateFindingHash, getFindingAnchor, inferProjectRoot, loadBaseline, normalizeFindingFile, saveBaseline, } from './baseline.js';
 export { checkInlineSuppression, applyInlineSuppressions } from './suppression.js';
 export { checkAcknowledgment, applyAcknowledgments } from './acknowledgments.js';
 export { calculateComplianceScore, formatScore, getScoreColor, getScoreSummary } from './compliance-score.js';
+export * from './delivery/index.js';
 export type { Finding, ScanResult, ScanOptions, Report, ReportOptions, Scanner, Severity, ComplianceCategory, Confidence, VlayerConfig, AcknowledgedFinding, ContextLine, CompiledCustomRule, CustomRuleFix, ComplianceScore, GroupedFinding, Occurrence, } from './types.js';
 export type { LoadRulesResult, RuleLoadError, CustomRuleDefinition, RulesFile } from './rules/index.js';
 export type { Baseline, BaselineEntry } from './baseline.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC9G,YAAY,EACV,OAAO,EACP,UAAU,EACV,WAAW,EACX,MAAM,EACN,aAAa,EACb,OAAO,EACP,QAAQ,EACR,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,cAAc,EACd,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxG,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC9G,cAAc,qBAAqB,CAAC;AACpC,YAAY,EACV,OAAO,EACP,UAAU,EACV,WAAW,EACX,MAAM,EACN,aAAa,EACb,OAAO,EACP,QAAQ,EACR,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,cAAc,EACd,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxG,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -2,8 +2,9 @@ export { scan, groupFindings } from './scan.js';
 export { generateReport } from './reporters/index.js';
 export { loadCustomRules, validateRulesFile, scanWithCustomRules } from './rules/index.js';
 export { RULE_CATALOG, getAllRules, getRulesByCategory, getCategoryCounts, } from './rules/catalog.js';
-export { loadBaseline, saveBaseline, applyBaseline, generateFindingHash } from './baseline.js';
+export { BASELINE_VERSION, applyBaseline, canonicalRuleId, createBaselineEntry, generateFindingHash, getFindingAnchor, inferProjectRoot, loadBaseline, normalizeFindingFile, saveBaseline, } from './baseline.js';
 export { checkInlineSuppression, applyInlineSuppressions } from './suppression.js';
 export { checkAcknowledgment, applyAcknowledgments } from './acknowledgments.js';
 export { calculateComplianceScore, formatScore, getScoreColor, getScoreSummary } from './compliance-score.js';
+export * from './delivery/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC9G,cAAc,qBAAqB,CAAC"}

package/dist/rule-catalog.json

@@ -1,6 +1,6 @@
 {
   "package": "verification-layer",
-  "version": "0.27.13",
+  "version": "0.28.0",
   "total": 143,
   "counts": {
     "phi-exposure": 29,

package/package.json

@@ -1,11 +1,13 @@
 {
   "name": "verification-layer",
-  "version": "0.27.13",
-  "description": "Open-source HIPAA compliance scanner for healthcare code. 143 rules, 5 HIPAA categories. CLI + CI/CD + VS Code.",
+  "version": "0.28.0",
+  "description": "Open-source HIPAA compliance scanner and compliance delivery gate for healthcare code. 143 rules, evidence packages, policy gates, CLI + CI/CD.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
-    "vlayer": "dist/cli.js"
+    "vlayer": "dist/cli.js",
+    "vlayer-ci": "dist/delivery-cli.js",
+    "vlayer-upload": "dist/delivery-upload-cli.js"
   },
   "type": "module",
   "exports": {
@@ -18,6 +20,7 @@
     "dist",
     "templates",
     "README.md",
+    "COMPLIANCE_DELIVERY.md",
     "LICENSE"
   ],
   "scripts": {
@@ -27,7 +30,7 @@
     "start": "node dist/cli.js",
     "test": "vitest",
     "test:run": "vitest run",
-    "lint": "eslint src/",
+    "lint": "eslint src/ --max-warnings 23",
     "typecheck": "tsc --noEmit",
     "prepare": "husky || true",
     "prepublishOnly": "npm run build"
@@ -52,7 +55,11 @@
     "suppression",
     "github-action",
     "devsecops",
-    "healthtech"
+    "healthtech",
+    "compliance-as-code",
+    "policy-gate",
+    "audit-evidence",
+    "software-supply-chain"
   ],
   "author": "Simon Franco",
   "license": "MIT",
@@ -65,15 +72,14 @@
   },
   "homepage": "https://github.com/Francosimon53/verification-layer#readme",
   "devDependencies": {
-    "@semantic-release/changelog": "^6.0.3",
-    "@semantic-release/git": "^10.0.1",
+    "@eslint/js": "^9.39.5",
     "@types/node": "^20.0.0",
     "@typescript-eslint/eslint-plugin": "^8.54.0",
     "@typescript-eslint/parser": "^8.54.0",
-    "eslint": "^8.57.0",
+    "eslint": "^9.39.5",
     "husky": "^9.1.7",
-    "semantic-release": "^24.2.9",
     "typescript": "^5.4.0",
+    "typescript-eslint": "^8.69.0",
     "vitest": "^4.1.11"
   },
   "dependencies": {

package/templates/github-actions/compliance-gate.yml

@@ -0,0 +1,61 @@
+name: vlayer compliance gate
+
+on:
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  compliance:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout full history
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: '22'
+
+      - name: Evaluate changed-code compliance
+        id: guard
+        continue-on-error: true
+        run: |
+          npm exec --yes --package=verification-layer -- \
+            vlayer-ci guard . \
+            --baseline .vlayer-baseline.json \
+            --policy vlayer.policy.json \
+            --base "${{ github.base_ref }}" \
+            --output vlayer-guard.json
+
+      - name: Generate evidence package
+        if: always()
+        continue-on-error: true
+        run: |
+          npm exec --yes --package=verification-layer -- \
+            vlayer-ci evidence . \
+            --baseline .vlayer-baseline.json \
+            --policy vlayer.policy.json \
+            --base "${{ github.base_ref }}" \
+            --output vlayer-evidence.json
+
+      - name: Upload compliance evidence
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: vlayer-compliance-${{ github.run_number }}
+          path: |
+            vlayer-guard.json
+            vlayer-evidence.json
+          if-no-files-found: warn
+          retention-days: 90
+
+      - name: Enforce delivery decision
+        if: steps.guard.outcome != 'success'
+        run: |
+          echo "vlayer compliance policy blocked this change or the guard failed."
+          exit 1