/** * Runtime Verification Scanner * * Orchestrates app launching, golden path testing, and runtime verification. * This is the entry point for M7 runtime verification capabilities. * * @module scanners/runtime */ import { runAllFlows } from "./golden-path-runner.js"; import type { RuntimeVerificationResult, RuntimeFinding, GoldenPathFlow } from "./types.js"; export * from "./types.js"; export { detectFramework, launchApp, stopApp, stopAllApps, getRunningApps, } from "./app-launcher.js"; export { discoverFlows, runFlow, runAllFlows, generateSampleFlow, generateSecurityProofFlows, loadFlow, } from "./golden-path-runner.js"; export { isPlaywrightAvailable, launchBrowser, closeBrowser, runFlowWithPlaywright, } from "./playwright-executor.js"; /** * Convert failed proof flows into findings. A failed `cross-tenant`, * `auth-failure`, `webhook-forgery`, or `csrf` flow is a confirmed behavioral * vulnerability — emitted as a critical/high finding so it gates certification. */ export declare function flowsToFindings(goldenPathResults: Awaited>): RuntimeFinding[]; /** * Run full runtime verification * * 1. Detect framework * 2. Launch the app * 3. Run golden path flows * 4. Calculate score * 5. Stop the app */ export declare function runRuntimeVerification(projectPath: string, options?: { port?: number; timeout?: number; priority?: GoldenPathFlow["priority"]; stopAfter?: boolean; }): Promise; /** * Quick health check - just launch and verify app starts */ export declare function quickHealthCheck(projectPath: string, options?: { port?: number; timeout?: number; }): Promise<{ healthy: boolean; url: string; startupTime: number; error?: string; }>; //# sourceMappingURL=index.d.ts.map