verification-layer 0.4.0

package/dist/audit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/audit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,SAAS,GAAG,SAAS,CAAC;AAC5B,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO;QACL,EAAE,EAAE,UAAU,EAAE;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW;QACX,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;QAClC,YAAY,EAAE,CAAC;QACf,YAAY,EAAE,CAAC;QACf,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,iBAAiB,EAAE,CAAC;QACpB,QAAQ,EAAE,EAAE;QACZ,aAAa,EAAE,EAAE;KAClB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAiB,EAAE,QAAuB;IACpE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,iBAAiB,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAExC,iCAAiC;IACjC,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,UAAU;YACb,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;YACvD,MAAM;QACR,KAAK,MAAM;YACT,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU;YACzD,MAAM;QACR,KAAK,QAAQ;YACX,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU;YACzD,MAAM;QACR;YACE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW;IAC9D,CAAC;IAED,OAAO;QACL,EAAE,EAAE,UAAU,EAAE;QAChB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,OAAO;QACP,MAAM,EAAE,gBAAsC;QAC9C,iBAAiB,EAAE,iBAAiB,CAAC,WAAW,EAAE;QAClD,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;KAC7B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAiB,EAAE,QAAmB;IACrE,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5D,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAiB,EACjB,aAAqB,EACrB,YAAoB,EACpB,YAAoB;IAEpB,KAAK,CAAC,aAAa,GAAG,aAAa,CAAC;IACpC,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;IAClC,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,KAAK,CAAC,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAiB,EAAE,WAAmB;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IAED,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAmB;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAE3D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAiB,EACjB,QAAgB,EAChB,MAA0B,EAC1B,UAAmB,EACnB,KAAc;IAEd,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/C,IAAI,KAAK;QAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IAEhC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;QACjE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAA4B,CAAC,CAAC;IAEjC,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;QACnE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvE,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAA4B,CAAC,CAAC;IAEjC,MAAM,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,CACjF,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,KAAK,CAAC,cAAc;QAC/B,mBAAmB,EAAE,KAAK,CAAC,iBAAiB;QAC5C,eAAe;QACf,iBAAiB;QACjB,YAAY,EAAE,cAAc,CAAC,MAAM;QACnC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,199 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import chalk from 'chalk';
+import ora from 'ora';
+import { resolve } from 'path';
+import { scan } from './scan.js';
+import { generateReport } from './reporters/index.js';
+import { applyFixes } from './fixer/index.js';
+import { generateFixReport } from './reporters/fix-report.js';
+import { loadAuditTrail, getAuditSummary } from './audit/index.js';
+import { generateAuditReport, generateTextAuditReport } from './reporters/audit-report.js';
+const program = new Command();
+program
+    .name('vlayer')
+    .description('HIPAA compliance scanner for healthcare applications')
+    .version('0.2.0');
+program
+    .command('scan')
+    .description('Scan a repository for HIPAA compliance issues')
+    .argument('<path>', 'Path to the repository to scan')
+    .option('-c, --categories <categories...>', 'Compliance categories to check')
+    .option('-e, --exclude <patterns...>', 'Glob patterns to exclude')
+    .option('-o, --output <path>', 'Output file path for the report')
+    .option('-f, --format <format>', 'Report format: json, html, markdown', 'json')
+    .option('--config <path>', 'Path to configuration file')
+    .option('--fix', 'Automatically fix detected issues where possible')
+    .action(async (path, options) => {
+    const spinner = ora('Scanning repository...').start();
+    const absolutePath = resolve(path);
+    try {
+        const categories = options.categories;
+        const result = await scan({
+            path,
+            categories,
+            exclude: options.exclude,
+            configFile: options.config,
+        });
+        spinner.succeed(`Scan complete. Found ${result.findings.length} issues.`);
+        // Apply fixes if --fix flag is provided
+        if (options.fix) {
+            const fixSpinner = ora('Applying automatic fixes...').start();
+            const fixReport = await applyFixes(result.findings, absolutePath, result.scannedFiles, result.scanDuration);
+            fixSpinner.succeed(`Applied ${fixReport.fixedCount} automatic fixes.`);
+            console.log(generateFixReport(fixReport));
+            // Show audit trail info
+            console.log(chalk.cyan('\nAudit Trail saved to: ') + chalk.white(`${absolutePath}/.vlayer/audit-trail.json`));
+            console.log(chalk.cyan('Evidence hash: ') + chalk.white(fixReport.auditTrail.reportHash || 'N/A'));
+            console.log(chalk.cyan('Manual reviews pending: ') + chalk.yellow(fixReport.auditTrail.manualReviewCount.toString()));
+            if (fixReport.auditTrail.manualReviewCount > 0) {
+                console.log(chalk.yellow('\nRun `vlayer audit <path> --generate-report` to generate PDF audit report.'));
+            }
+        }
+        const reportOptions = {
+            format: options.format,
+            outputPath: options.output,
+        };
+        await generateReport(result, path, reportOptions);
+        // Print summary
+        const critical = result.findings.filter(f => f.severity === 'critical').length;
+        const high = result.findings.filter(f => f.severity === 'high').length;
+        console.log('\n' + chalk.bold('Summary:'));
+        console.log(`  Files scanned: ${result.scannedFiles}`);
+        console.log(`  Duration: ${result.scanDuration}ms`);
+        console.log(`  Total findings: ${result.findings.length}`);
+        if (critical > 0) {
+            console.log(chalk.red(`  Critical: ${critical}`));
+        }
+        if (high > 0) {
+            console.log(chalk.yellow(`  High: ${high}`));
+        }
+        // Exit with error code if critical issues found (only if not fixing)
+        if (critical > 0 && !options.fix) {
+            process.exit(1);
+        }
+    }
+    catch (error) {
+        spinner.fail('Scan failed');
+        console.error(chalk.red(error instanceof Error ? error.message : 'Unknown error'));
+        process.exit(1);
+    }
+});
+program
+    .command('audit')
+    .description('Manage audit trail and generate compliance reports')
+    .argument('<path>', 'Path to the project with audit trail')
+    .option('--generate-report', 'Generate PDF audit report')
+    .option('-o, --output <path>', 'Output path for the PDF report')
+    .option('--org <name>', 'Organization name for the report')
+    .option('--auditor <name>', 'Auditor name for the report')
+    .option('--text', 'Generate text report instead of PDF')
+    .option('--summary', 'Show audit trail summary only')
+    .action(async (path, options) => {
+    const absolutePath = resolve(path);
+    try {
+        const trail = await loadAuditTrail(absolutePath);
+        if (!trail) {
+            console.log(chalk.red('No audit trail found.'));
+            console.log(chalk.yellow('Run `vlayer scan <path> --fix` to generate an audit trail.'));
+            process.exit(1);
+        }
+        // Show summary
+        const summary = getAuditSummary(trail);
+        console.log(chalk.bold('\n=== Audit Trail Summary ===\n'));
+        console.log(`Project: ${chalk.cyan(trail.projectName)}`);
+        console.log(`Scan Date: ${chalk.white(new Date(trail.createdAt).toLocaleString())}`);
+        console.log(`Report ID: ${chalk.gray(trail.id)}`);
+        console.log('');
+        console.log(`Total Findings: ${chalk.white(summary.totalFindings)}`);
+        console.log(`Auto-Fixed: ${chalk.green(summary.autoFixed)}`);
+        console.log(`Pending Manual Review: ${chalk.yellow(summary.pendingManualReview)}`);
+        if (summary.overdueCount > 0) {
+            console.log(`Overdue Items: ${chalk.red(summary.overdueCount)}`);
+        }
+        console.log('');
+        console.log(`Report Hash: ${chalk.gray(summary.reportHash || 'N/A')}`);
+        // Show review status breakdown
+        if (Object.keys(summary.reviewsByStatus).length > 0) {
+            console.log('\n' + chalk.bold('Reviews by Status:'));
+            for (const [status, count] of Object.entries(summary.reviewsByStatus)) {
+                const statusLabel = status.replace(/_/g, ' ').replace(/\b\w/g, l => l.toUpperCase());
+                console.log(`  ${statusLabel}: ${count}`);
+            }
+        }
+        // Show severity breakdown
+        if (Object.keys(summary.reviewsBySeverity).length > 0) {
+            console.log('\n' + chalk.bold('Pending Reviews by Severity:'));
+            const severityColors = {
+                critical: chalk.red,
+                high: chalk.yellow,
+                medium: chalk.hex('#ca8a04'),
+                low: chalk.green,
+                info: chalk.blue,
+            };
+            for (const [severity, count] of Object.entries(summary.reviewsBySeverity)) {
+                const color = severityColors[severity] || chalk.white;
+                console.log(`  ${color(severity.charAt(0).toUpperCase() + severity.slice(1))}: ${count}`);
+            }
+        }
+        if (options.summary) {
+            return;
+        }
+        // Generate report if requested
+        if (options.generateReport) {
+            const outputPath = options.output || `${absolutePath}/vlayer-audit-report.pdf`;
+            const reportOptions = {
+                outputPath,
+                organizationName: options.org,
+                auditorName: options.auditor,
+                includeEvidence: true,
+                includeManualReviews: true,
+            };
+            if (options.text) {
+                // Generate text report
+                const textReport = generateTextAuditReport(trail);
+                const textPath = outputPath.replace('.pdf', '.txt');
+                const { writeFile } = await import('fs/promises');
+                await writeFile(textPath, textReport);
+                console.log(chalk.green(`\nText audit report generated: ${textPath}`));
+            }
+            else {
+                // Generate PDF report
+                const spinner = ora('Generating PDF audit report...').start();
+                try {
+                    const { path: pdfPath, hash } = await generateAuditReport(trail, reportOptions);
+                    spinner.succeed('PDF audit report generated.');
+                    console.log(chalk.green(`\nAudit report saved to: ${pdfPath}`));
+                    console.log(chalk.cyan(`Report verification hash: ${hash}`));
+                    console.log(chalk.gray('\nThis hash can be used to verify the report integrity.'));
+                }
+                catch (err) {
+                    spinner.fail('Failed to generate PDF report');
+                    console.error(chalk.red(err instanceof Error ? err.message : 'Unknown error'));
+                    // Fallback to text
+                    console.log(chalk.yellow('\nFalling back to text report...'));
+                    const textReport = generateTextAuditReport(trail);
+                    const textPath = outputPath.replace('.pdf', '.txt');
+                    const { writeFile } = await import('fs/promises');
+                    await writeFile(textPath, textReport);
+                    console.log(chalk.green(`Text audit report generated: ${textPath}`));
+                }
+            }
+        }
+        else {
+            console.log(chalk.yellow('\nUse --generate-report to create a PDF audit report.'));
+        }
+    }
+    catch (error) {
+        console.error(chalk.red(error instanceof Error ? error.message : 'Unknown error'));
+        process.exit(1);
+    }
+});
+program
+    .command('init')
+    .description('Initialize a vlayer configuration file')
+    .action(() => {
+    console.log(chalk.yellow('Configuration initialization not yet implemented'));
+});
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAG3F,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,sDAAsD,CAAC;KACnE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,+CAA+C,CAAC;KAC5D,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;KACpD,MAAM,CAAC,kCAAkC,EAAE,gCAAgC,CAAC;KAC5E,MAAM,CAAC,6BAA6B,EAAE,0BAA0B,CAAC;KACjE,MAAM,CAAC,qBAAqB,EAAE,iCAAiC,CAAC;KAChE,MAAM,CAAC,uBAAuB,EAAE,qCAAqC,EAAE,MAAM,CAAC;KAC9E,MAAM,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;KACvD,MAAM,CAAC,OAAO,EAAE,kDAAkD,CAAC;KACnE,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAO,EAAE,EAAE;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;IACtD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,OAAO,CAAC,UAA8C,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;YACxB,IAAI;YACJ,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,OAAO,CAAC,MAAM;SAC3B,CAAC,CAAC;QAEH,OAAO,CAAC,OAAO,CAAC,wBAAwB,MAAM,CAAC,QAAQ,CAAC,MAAM,UAAU,CAAC,CAAC;QAE1E,wCAAwC;QACxC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;YAC9D,MAAM,SAAS,GAAG,MAAM,UAAU,CAChC,MAAM,CAAC,QAAQ,EACf,YAAY,EACZ,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,YAAY,CACpB,CAAC;YACF,UAAU,CAAC,OAAO,CAAC,WAAW,SAAS,CAAC,UAAU,mBAAmB,CAAC,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;YAE1C,wBAAwB;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,YAAY,2BAA2B,CAAC,CAAC,CAAC;YAC9G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC,CAAC;YACnG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAEtH,IAAI,SAAS,CAAC,UAAU,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,6EAA6E,CAAC,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAkB;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,MAAM;SAC3B,CAAC;QAEF,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAElD,gBAAgB;QAChB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAEvE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAE3D,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,qEAAqE;QACrE,IAAI,QAAQ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,oDAAoD,CAAC;KACjE,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC;KAC1D,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;KACxD,MAAM,CAAC,qBAAqB,EAAE,gCAAgC,CAAC;KAC/D,MAAM,CAAC,cAAc,EAAE,kCAAkC,CAAC;KAC1D,MAAM,CAAC,kBAAkB,EAAE,6BAA6B,CAAC;KACzD,MAAM,CAAC,QAAQ,EAAE,qCAAqC,CAAC;KACvD,MAAM,CAAC,WAAW,EAAE,+BAA+B,CAAC;KACpD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAO,EAAE,EAAE;IACtC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;QAEjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,4DAA4D,CAAC,CAAC,CAAC;YACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,eAAe;QACf,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAEvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAEnF,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QAEvE,+BAA+B;QAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;YACrD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACtE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBACrF,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,KAAK,KAAK,EAAE,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAqC;gBACvD,QAAQ,EAAE,KAAK,CAAC,GAAG;gBACnB,IAAI,EAAE,KAAK,CAAC,MAAM;gBAClB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;gBAC5B,GAAG,EAAE,KAAK,CAAC,KAAK;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC;YACF,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC1E,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,YAAY,0BAA0B,CAAC;YAE/E,MAAM,aAAa,GAAuB;gBACxC,UAAU;gBACV,gBAAgB,EAAE,OAAO,CAAC,GAAG;gBAC7B,WAAW,EAAE,OAAO,CAAC,OAAO;gBAC5B,eAAe,EAAE,IAAI;gBACrB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;YAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,uBAAuB;gBACvB,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;gBAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACpD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBAClD,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,sBAAsB;gBACtB,MAAM,OAAO,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAC,KAAK,EAAE,CAAC;gBAE9D,IAAI,CAAC;oBACH,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;oBAChF,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;oBAE/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC,CAAC;oBAChE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC,CAAC;oBAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC,CAAC;gBACrF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;oBAC9C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;oBAE/E,mBAAmB;oBACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC,CAAC;oBAC9D,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;oBAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBACpD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;oBAClD,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;oBACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,uDAAuD,CAAC,CAAC,CAAC;QACrF,CAAC;IAEH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,GAAG,EAAE;IACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,7 @@
+import type { VlayerConfig } from './types.js';
+declare const DEFAULT_CONFIG: VlayerConfig;
+export declare function loadConfig(targetPath: string, configFile?: string): Promise<VlayerConfig>;
+export declare function isPathIgnored(filePath: string, config: VlayerConfig): boolean;
+export declare function isSafeHttpUrl(url: string, config: VlayerConfig): boolean;
+export { DEFAULT_CONFIG };
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,QAAA,MAAM,cAAc,EAAE,YAsCrB,CAAC;AAEF,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAmB/F;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAU7E;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAGxE;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/config.js

@@ -0,0 +1,77 @@
+import { readFile } from 'fs/promises';
+import path from 'path';
+const DEFAULT_CONFIG = {
+    exclude: [],
+    ignorePaths: [],
+    safeHttpDomains: [
+        // XML namespaces
+        'www.w3.org',
+        'w3.org',
+        'xmlns.com',
+        'purl.org',
+        'ns.adobe.com',
+        // CDNs
+        'cdnjs.cloudflare.com',
+        'unpkg.com',
+        'jsdelivr.net',
+        'cdn.jsdelivr.net',
+        'googleapis.com',
+        'fonts.googleapis.com',
+        'ajax.googleapis.com',
+        'gstatic.com',
+        'fonts.gstatic.com',
+        'cloudflare.com',
+        'bootstrapcdn.com',
+        'maxcdn.bootstrapcdn.com',
+        'stackpath.bootstrapcdn.com',
+        'code.jquery.com',
+        'cdn.tailwindcss.com',
+        // Schema/standards
+        'schema.org',
+        'ogp.me',
+        'rdfs.org',
+        // Documentation
+        'example.com',
+        'example.org',
+        'localhost',
+        '127.0.0.1',
+    ],
+    contextLines: 2,
+    categories: undefined,
+};
+export async function loadConfig(targetPath, configFile) {
+    const configPath = configFile || path.join(targetPath, '.vlayerrc.json');
+    try {
+        const content = await readFile(configPath, 'utf-8');
+        const userConfig = JSON.parse(content);
+        return {
+            ...DEFAULT_CONFIG,
+            ...userConfig,
+            // Merge arrays instead of replacing
+            exclude: [...(DEFAULT_CONFIG.exclude || []), ...(userConfig.exclude || [])],
+            ignorePaths: [...(DEFAULT_CONFIG.ignorePaths || []), ...(userConfig.ignorePaths || [])],
+            safeHttpDomains: [...(DEFAULT_CONFIG.safeHttpDomains || []), ...(userConfig.safeHttpDomains || [])],
+        };
+    }
+    catch {
+        // No config file found, use defaults
+        return DEFAULT_CONFIG;
+    }
+}
+export function isPathIgnored(filePath, config) {
+    const ignorePaths = config.ignorePaths || [];
+    return ignorePaths.some(pattern => {
+        // Simple glob matching
+        if (pattern.includes('*')) {
+            const regex = new RegExp(pattern.replace(/\*/g, '.*'));
+            return regex.test(filePath);
+        }
+        return filePath.includes(pattern);
+    });
+}
+export function isSafeHttpUrl(url, config) {
+    const safeDomains = config.safeHttpDomains || [];
+    return safeDomains.some(domain => url.includes(domain));
+}
+export { DEFAULT_CONFIG };
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,cAAc,GAAiB;IACnC,OAAO,EAAE,EAAE;IACX,WAAW,EAAE,EAAE;IACf,eAAe,EAAE;QACf,iBAAiB;QACjB,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,UAAU;QACV,cAAc;QACd,OAAO;QACP,sBAAsB;QACtB,WAAW;QACX,cAAc;QACd,kBAAkB;QAClB,gBAAgB;QAChB,sBAAsB;QACtB,qBAAqB;QACrB,aAAa;QACb,mBAAmB;QACnB,gBAAgB;QAChB,kBAAkB;QAClB,yBAAyB;QACzB,4BAA4B;QAC5B,iBAAiB;QACjB,qBAAqB;QACrB,mBAAmB;QACnB,YAAY;QACZ,QAAQ;QACR,UAAU;QACV,gBAAgB;QAChB,aAAa;QACb,aAAa;QACb,WAAW;QACX,WAAW;KACZ;IACD,YAAY,EAAE,CAAC;IACf,UAAU,EAAE,SAAS;CACtB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB,EAAE,UAAmB;IACtE,MAAM,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAEzE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA0B,CAAC;QAEhE,OAAO;YACL,GAAG,cAAc;YACjB,GAAG,UAAU;YACb,oCAAoC;YACpC,OAAO,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC3E,WAAW,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACvF,eAAe,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;SACpG,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;QACrC,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAoB;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IAC7C,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAChC,uBAAuB;QACvB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAAoB;IAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;IACjD,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/fixer/index.d.ts

@@ -0,0 +1,11 @@
+import type { Finding, FixReport, AuditTrail } from '../types.js';
+interface FixReportWithAudit extends FixReport {
+    auditTrail: AuditTrail;
+}
+export declare function applyFixes(findings: Finding[], projectPath: string, scannedFiles?: number, scanDuration?: number): Promise<FixReportWithAudit>;
+/**
+ * Apply fixes without audit trail (for backwards compatibility)
+ */
+export declare function applyFixesSimple(findings: Finding[]): Promise<FixReport>;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/fixer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fixer/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAa,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiB7E,UAAU,kBAAmB,SAAQ,SAAS;IAC5C,UAAU,EAAE,UAAU,CAAC;CACxB;AAmBD,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,OAAO,EAAE,EACnB,WAAW,EAAE,MAAM,EACnB,YAAY,GAAE,MAAU,EACxB,YAAY,GAAE,MAAU,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAoG7B;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAsE9E"}

package/dist/fixer/index.js

@@ -0,0 +1,171 @@
+import { readFile, writeFile } from 'fs/promises';
+import { applyFixStrategy } from './strategies.js';
+import { createEvidence } from '../audit/evidence.js';
+import { createAuditTrail, addEvidence, addManualReviews, updateScanStats, finalizeAuditTrail, saveAuditTrail, } from '../audit/index.js';
+function groupFindingsByFile(findings) {
+    const groups = new Map();
+    for (const finding of findings) {
+        if (!finding.fixType || !finding.line)
+            continue;
+        const existing = groups.get(finding.file) ?? [];
+        existing.push(finding);
+        groups.set(finding.file, existing);
+    }
+    return Array.from(groups.entries()).map(([filePath, findings]) => ({
+        filePath,
+        findings: findings.sort((a, b) => (b.line ?? 0) - (a.line ?? 0)), // Sort descending by line
+    }));
+}
+export async function applyFixes(findings, projectPath, scannedFiles = 0, scanDuration = 0) {
+    const fixableFindings = findings.filter(f => f.fixType);
+    const fixes = [];
+    // Create audit trail
+    const auditTrail = createAuditTrail(projectPath);
+    const fileGroups = groupFindingsByFile(fixableFindings);
+    for (const group of fileGroups) {
+        try {
+            const contentBefore = await readFile(group.filePath, 'utf-8');
+            const linesBefore = contentBefore.split('\n');
+            const lines = [...linesBefore]; // Copy for modification
+            let modified = false;
+            // Process findings from bottom to top to preserve line numbers
+            for (const finding of group.findings) {
+                if (!finding.line || !finding.fixType)
+                    continue;
+                const lineIndex = finding.line - 1;
+                if (lineIndex < 0 || lineIndex >= lines.length)
+                    continue;
+                const originalLine = lines[lineIndex];
+                const fixedLine = applyFixStrategy(originalLine, finding.fixType);
+                if (fixedLine !== null && fixedLine !== originalLine) {
+                    lines[lineIndex] = fixedLine;
+                    modified = true;
+                    // Create evidence BEFORE writing (using original content and proposed new content)
+                    const contentAfterFix = lines.join('\n');
+                    const evidence = await createEvidence(finding, group.filePath, contentBefore, contentAfterFix, lineIndex, finding.fixType);
+                    addEvidence(auditTrail, evidence);
+                    fixes.push({
+                        finding,
+                        fixed: true,
+                        originalLine,
+                        fixedLine,
+                        fixType: finding.fixType,
+                    });
+                }
+                else {
+                    fixes.push({
+                        finding,
+                        fixed: false,
+                        originalLine,
+                        fixedLine: originalLine,
+                        fixType: finding.fixType,
+                    });
+                }
+            }
+            if (modified) {
+                await writeFile(group.filePath, lines.join('\n'));
+            }
+        }
+        catch {
+            // If we can't read/write the file, mark all findings as not fixed
+            for (const finding of group.findings) {
+                if (!finding.fixType)
+                    continue;
+                fixes.push({
+                    finding,
+                    fixed: false,
+                    originalLine: '',
+                    fixedLine: '',
+                    fixType: finding.fixType,
+                });
+            }
+        }
+    }
+    // Add manual review items for non-fixable findings
+    addManualReviews(auditTrail, findings);
+    // Update scan statistics
+    const nonFixableCount = findings.filter(f => !f.fixType).length;
+    const fixedCount = fixes.filter(f => f.fixed).length;
+    const skippedFixableCount = fixes.filter(f => !f.fixed).length;
+    updateScanStats(auditTrail, findings.length, scannedFiles, scanDuration);
+    // Finalize and save audit trail
+    finalizeAuditTrail(auditTrail);
+    await saveAuditTrail(auditTrail, projectPath);
+    return {
+        totalFindings: findings.length,
+        fixedCount,
+        skippedCount: nonFixableCount + skippedFixableCount,
+        fixes,
+        auditTrail,
+    };
+}
+/**
+ * Apply fixes without audit trail (for backwards compatibility)
+ */
+export async function applyFixesSimple(findings) {
+    const fixableFindings = findings.filter(f => f.fixType);
+    const fixes = [];
+    const fileGroups = groupFindingsByFile(fixableFindings);
+    for (const group of fileGroups) {
+        try {
+            const content = await readFile(group.filePath, 'utf-8');
+            const lines = content.split('\n');
+            let modified = false;
+            for (const finding of group.findings) {
+                if (!finding.line || !finding.fixType)
+                    continue;
+                const lineIndex = finding.line - 1;
+                if (lineIndex < 0 || lineIndex >= lines.length)
+                    continue;
+                const originalLine = lines[lineIndex];
+                const fixedLine = applyFixStrategy(originalLine, finding.fixType);
+                if (fixedLine !== null && fixedLine !== originalLine) {
+                    lines[lineIndex] = fixedLine;
+                    modified = true;
+                    fixes.push({
+                        finding,
+                        fixed: true,
+                        originalLine,
+                        fixedLine,
+                        fixType: finding.fixType,
+                    });
+                }
+                else {
+                    fixes.push({
+                        finding,
+                        fixed: false,
+                        originalLine,
+                        fixedLine: originalLine,
+                        fixType: finding.fixType,
+                    });
+                }
+            }
+            if (modified) {
+                await writeFile(group.filePath, lines.join('\n'));
+            }
+        }
+        catch {
+            for (const finding of group.findings) {
+                if (!finding.fixType)
+                    continue;
+                fixes.push({
+                    finding,
+                    fixed: false,
+                    originalLine: '',
+                    fixedLine: '',
+                    fixType: finding.fixType,
+                });
+            }
+        }
+    }
+    const nonFixableCount = findings.filter(f => !f.fixType).length;
+    const fixedCount = fixes.filter(f => f.fixed).length;
+    const skippedFixableCount = fixes.filter(f => !f.fixed).length;
+    return {
+        totalFindings: findings.length,
+        fixedCount,
+        skippedCount: nonFixableCount + skippedFixableCount,
+        fixes,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/fixer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fixer/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAW3B,SAAS,mBAAmB,CAAC,QAAmB;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,SAAS;QAEhD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACjE,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,0BAA0B;KAC7F,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAmB,EACnB,WAAmB,EACnB,eAAuB,CAAC,EACxB,eAAuB,CAAC;IAExB,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,qBAAqB;IACrB,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;IAExD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9D,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,wBAAwB;YACxD,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,+DAA+D;YAC/D,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO;oBAAE,SAAS;gBAEhD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;gBACnC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM;oBAAE,SAAS;gBAEzD,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;gBACtC,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAElE,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;oBACrD,KAAK,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;oBAC7B,QAAQ,GAAG,IAAI,CAAC;oBAEhB,mFAAmF;oBACnF,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACzC,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,OAAO,EACP,KAAK,CAAC,QAAQ,EACd,aAAa,EACb,eAAe,EACf,SAAS,EACT,OAAO,CAAC,OAAO,CAChB,CAAC;oBAEF,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;oBAElC,KAAK,CAAC,IAAI,CAAC;wBACT,OAAO;wBACP,KAAK,EAAE,IAAI;wBACX,YAAY;wBACZ,SAAS;wBACT,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC;wBACT,OAAO;wBACP,KAAK,EAAE,KAAK;wBACZ,YAAY;wBACZ,SAAS,EAAE,YAAY;wBACvB,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,OAAO;oBAAE,SAAS;gBAC/B,KAAK,CAAC,IAAI,CAAC;oBACT,OAAO;oBACP,KAAK,EAAE,KAAK;oBACZ,YAAY,EAAE,EAAE;oBAChB,SAAS,EAAE,EAAE;oBACb,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEvC,yBAAyB;IACzB,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAE/D,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAEzE,gCAAgC;IAChC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/B,MAAM,cAAc,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAE9C,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,UAAU;QACV,YAAY,EAAE,eAAe,GAAG,mBAAmB;QACnD,KAAK;QACL,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAmB;IACxD,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,MAAM,UAAU,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;IAExD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO;oBAAE,SAAS;gBAEhD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;gBACnC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM;oBAAE,SAAS;gBAEzD,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;gBACtC,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAElE,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;oBACrD,KAAK,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;oBAC7B,QAAQ,GAAG,IAAI,CAAC;oBAEhB,KAAK,CAAC,IAAI,CAAC;wBACT,OAAO;wBACP,KAAK,EAAE,IAAI;wBACX,YAAY;wBACZ,SAAS;wBACT,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC;wBACT,OAAO;wBACP,KAAK,EAAE,KAAK;wBACZ,YAAY;wBACZ,SAAS,EAAE,YAAY;wBACvB,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,OAAO;oBAAE,SAAS;gBAC/B,KAAK,CAAC,IAAI,CAAC;oBACT,OAAO;oBACP,KAAK,EAAE,KAAK;oBACZ,YAAY,EAAE,EAAE;oBAChB,SAAS,EAAE,EAAE;oBACb,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAE/D,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,UAAU;QACV,YAAY,EAAE,eAAe,GAAG,mBAAmB;QACnD,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/fixer/strategies.d.ts

@@ -0,0 +1,3 @@
+import type { FixType } from '../types.js';
+export declare function applyFixStrategy(line: string, fixType: FixType): string | null;
+//# sourceMappingURL=strategies.d.ts.map

package/dist/fixer/strategies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategies.d.ts","sourceRoot":"","sources":["../../src/fixer/strategies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAmP3C,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM9E"}