@claude-tools-i-use/ai-code-audit 0.1.0

package/README.md

@@ -0,0 +1,148 @@
+# ai-code-audit
+
+Security and quality linter specifically designed for AI-generated code.
+
+## The Problem
+
+AI coding assistants can introduce security vulnerabilities and quality issues:
+
+- SQL injection through string concatenation
+- Command injection via unsanitized inputs
+- Hardcoded secrets and credentials
+- Missing error handling
+- Unsafe deserialization
+- Over-complex "clever" solutions
+
+Traditional linters catch some of these, but AI code has unique patterns that need specific attention.
+
+## Installation
+
+```bash
+npm install -g ai-code-audit
+```
+
+## Usage
+
+### Audit Files
+
+```bash
+# Audit a single file
+aca src/api.ts
+
+# Audit multiple files
+aca src/**/*.ts
+
+# Audit a git diff
+git diff HEAD~1 | aca --stdin
+
+# Audit staged changes
+git diff --cached | aca --stdin
+```
+
+### Options
+
+```
+Options:
+  -s, --stdin           Read diff from stdin
+  -f, --format <type>   Output format: text, json, sarif (default: text)
+  -c, --config <file>   Config file path
+  --severity <level>    Minimum severity: info, warning, error (default: warning)
+  -q, --quiet           Only output errors
+  -h, --help            Show help
+```
+
+### Git Hook Integration
+
+Add to `.git/hooks/pre-commit`:
+
+```bash
+#!/bin/bash
+git diff --cached | aca --stdin --severity error
+if [ $? -ne 0 ]; then
+  echo "AI code audit found issues. Please review before committing."
+  exit 1
+fi
+```
+
+### CI Integration
+
+```yaml
+# GitHub Actions
+- name: AI Code Audit
+  run: |
+    npm install -g ai-code-audit
+    git diff ${{ github.event.before }} ${{ github.sha }} | aca --stdin --format sarif > results.sarif
+
+- name: Upload SARIF
+  uses: github/codeql-action/upload-sarif@v2
+  with:
+    sarif_file: results.sarif
+```
+
+## Rules
+
+### Security Rules
+
+| Rule                | Severity | Description                                   |
+| ------------------- | -------- | --------------------------------------------- |
+| `sql-injection`     | error    | Detects SQL queries with string interpolation |
+| `command-injection` | error    | Detects shell commands with unsanitized input |
+| `hardcoded-secret`  | error    | Detects hardcoded API keys, passwords, tokens |
+| `unsafe-eval`       | error    | Detects use of eval() or Function()           |
+| `unsafe-regex`      | warning  | Detects potentially catastrophic regex        |
+| `path-traversal`    | error    | Detects unsanitized file path operations      |
+| `xss-risk`          | warning  | Detects potential XSS in HTML generation      |
+
+### Quality Rules
+
+| Rule                     | Severity | Description                                    |
+| ------------------------ | -------- | ---------------------------------------------- |
+| `missing-error-handling` | warning  | Detects async operations without try/catch     |
+| `empty-catch`            | warning  | Detects empty catch blocks that swallow errors |
+| `console-log`            | info     | Detects console.log left in code               |
+| `todo-fixme`             | info     | Detects TODO/FIXME comments                    |
+| `magic-number`           | info     | Detects unexplained numeric literals           |
+| `deep-nesting`           | warning  | Detects deeply nested code (>4 levels)         |
+
+### AI-Specific Rules
+
+| Rule                 | Severity | Description                                           |
+| -------------------- | -------- | ----------------------------------------------------- |
+| `ai-placeholder`     | error    | Detects placeholder text like "// Add implementation" |
+| `incomplete-impl`    | warning  | Detects `throw new Error('Not implemented')`          |
+| `excessive-comments` | info     | Detects over-commented obvious code                   |
+| `type-any-abuse`     | warning  | Detects excessive use of `any` type                   |
+
+## Configuration
+
+Create `.ai-code-audit.json`:
+
+```json
+{
+  "rules": {
+    "sql-injection": "error",
+    "console-log": "off",
+    "magic-number": "warning"
+  },
+  "ignore": ["**/*.test.ts", "**/fixtures/**"],
+  "languages": ["typescript", "javascript", "python"]
+}
+```
+
+## Output Example
+
+```
+src/api/users.ts
+  12:5  error    SQL injection risk: query uses string interpolation     sql-injection
+  24:3  warning  Missing error handling for async operation              missing-error-handling
+  45:1  error    Hardcoded secret detected: API_KEY = "sk-..."           hardcoded-secret
+
+src/utils/shell.ts
+  8:12  error    Command injection: exec() with unsanitized input        command-injection
+
+4 problems (3 errors, 1 warning)
+```
+
+## License
+
+MIT

package/dist/auditor.d.ts

@@ -0,0 +1,7 @@
+import type { Finding, AuditResult, Config } from "./types.js";
+export declare function auditFile(filename: string, config?: Config): Finding[];
+export declare function auditContent(content: string, filename: string, config?: Config): Finding[];
+export declare function auditDiff(diff: string, config?: Config): Finding[];
+export declare function summarize(findings: Finding[]): AuditResult;
+export declare function loadConfig(configPath?: string): Config;
+//# sourceMappingURL=auditor.d.ts.map

package/dist/auditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditor.d.ts","sourceRoot":"","sources":["../src/auditor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAsC/D,wBAAgB,SAAS,CACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,MAAuB,GAC9B,OAAO,EAAE,CAmCX;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,MAAuB,GAC9B,OAAO,EAAE,CAwBX;AAED,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,MAAuB,GAC9B,OAAO,EAAE,CAkEX;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,WAAW,CA8B1D;AAED,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAsBtD"}

package/dist/auditor.js

@@ -0,0 +1,190 @@
+import { readFileSync, existsSync } from "node:fs";
+import { extname } from "node:path";
+import { allRules } from "./rules/index.js";
+const EXTENSION_MAP = {
+    ".ts": "typescript",
+    ".tsx": "typescript",
+    ".js": "javascript",
+    ".jsx": "javascript",
+    ".mjs": "javascript",
+    ".cjs": "javascript",
+    ".py": "python",
+    ".rb": "ruby",
+    ".go": "go",
+};
+const DEFAULT_CONFIG = {
+    rules: {},
+    ignore: [],
+    languages: ["typescript", "javascript", "python"],
+};
+function getLanguage(filename) {
+    const ext = extname(filename).toLowerCase();
+    return EXTENSION_MAP[ext] || null;
+}
+function shouldIgnore(finding, config) {
+    const ruleSeverity = config.rules[finding.rule];
+    return ruleSeverity === "off";
+}
+function adjustSeverity(finding, config) {
+    const ruleSeverity = config.rules[finding.rule];
+    if (ruleSeverity && ruleSeverity !== "off") {
+        return { ...finding, severity: ruleSeverity };
+    }
+    return finding;
+}
+export function auditFile(filename, config = DEFAULT_CONFIG) {
+    const language = getLanguage(filename);
+    if (!language) {
+        return [];
+    }
+    if (!config.languages.includes(language)) {
+        return [];
+    }
+    let content;
+    try {
+        content = readFileSync(filename, "utf-8");
+    }
+    catch {
+        return [];
+    }
+    const findings = [];
+    for (const rule of allRules) {
+        if (!rule.languages.includes(language)) {
+            continue;
+        }
+        const ruleFindings = rule.check(content, filename);
+        for (const finding of ruleFindings) {
+            if (!shouldIgnore(finding, config)) {
+                findings.push(adjustSeverity(finding, config));
+            }
+        }
+    }
+    return findings;
+}
+export function auditContent(content, filename, config = DEFAULT_CONFIG) {
+    const language = getLanguage(filename);
+    if (!language) {
+        return [];
+    }
+    const findings = [];
+    for (const rule of allRules) {
+        if (!rule.languages.includes(language)) {
+            continue;
+        }
+        const ruleFindings = rule.check(content, filename);
+        for (const finding of ruleFindings) {
+            if (!shouldIgnore(finding, config)) {
+                findings.push(adjustSeverity(finding, config));
+            }
+        }
+    }
+    return findings;
+}
+export function auditDiff(diff, config = DEFAULT_CONFIG) {
+    const findings = [];
+    let currentFile = "";
+    let lineOffset = 0;
+    const addedLines = new Map();
+    // Parse the diff
+    const lines = diff.split("\n");
+    for (const line of lines) {
+        // New file
+        if (line.startsWith("+++ b/")) {
+            currentFile = line.slice(6);
+            addedLines.set(currentFile, []);
+            continue;
+        }
+        // Hunk header
+        if (line.startsWith("@@")) {
+            const match = line.match(/@@ -\d+(?:,\d+)? \+(\d+)/);
+            if (match) {
+                lineOffset = parseInt(match[1], 10) - 1;
+            }
+            continue;
+        }
+        // Added line
+        if (line.startsWith("+") && !line.startsWith("+++")) {
+            lineOffset++;
+            const fileLines = addedLines.get(currentFile);
+            if (fileLines) {
+                fileLines.push({
+                    line: lineOffset,
+                    content: line.slice(1),
+                });
+            }
+            continue;
+        }
+        // Context or removed line
+        if (!line.startsWith("-")) {
+            lineOffset++;
+        }
+    }
+    // Audit added lines for each file
+    for (const [filename, lines] of addedLines) {
+        if (lines.length === 0)
+            continue;
+        const content = lines.map((l) => l.content).join("\n");
+        const contentFindings = auditContent(content, filename, config);
+        // Adjust line numbers back to original file
+        for (const finding of contentFindings) {
+            const originalLine = lines[finding.line - 1];
+            if (originalLine) {
+                findings.push({
+                    ...finding,
+                    line: originalLine.line,
+                });
+            }
+        }
+    }
+    return findings;
+}
+export function summarize(findings) {
+    let errorCount = 0;
+    let warningCount = 0;
+    let infoCount = 0;
+    const files = new Set();
+    for (const finding of findings) {
+        files.add(finding.file);
+        switch (finding.severity) {
+            case "error":
+                errorCount++;
+                break;
+            case "warning":
+                warningCount++;
+                break;
+            case "info":
+                infoCount++;
+                break;
+        }
+    }
+    return {
+        findings,
+        filesScanned: files.size,
+        errorCount,
+        warningCount,
+        infoCount,
+    };
+}
+export function loadConfig(configPath) {
+    const paths = configPath
+        ? [configPath]
+        : [".ai-code-audit.json", ".ai-code-audit.config.json"];
+    for (const path of paths) {
+        if (existsSync(path)) {
+            try {
+                const content = readFileSync(path, "utf-8");
+                const userConfig = JSON.parse(content);
+                return {
+                    ...DEFAULT_CONFIG,
+                    ...userConfig,
+                    rules: { ...DEFAULT_CONFIG.rules, ...userConfig.rules },
+                };
+            }
+            catch {
+                // Invalid config, use defaults
+            }
+        }
+    }
+    return DEFAULT_CONFIG;
+}
+//# sourceMappingURL=auditor.js.map

package/dist/auditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditor.js","sourceRoot":"","sources":["../src/auditor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,MAAM,aAAa,GAA2B;IAC5C,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,IAAI;CACZ,CAAC;AAEF,MAAM,cAAc,GAAW;IAC7B,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;CAClD,CAAC;AAEF,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB,EAAE,MAAc;IACpD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,YAAY,KAAK,KAAK,CAAC;AAChC,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB,EAAE,MAAc;IACtD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,YAAY,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;QAC3C,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,QAAgB,EAChB,SAAiB,cAAc;IAE/B,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEnD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,QAAgB,EAChB,SAAiB,cAAc;IAE/B,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEnD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,SAAiB,cAAc;IAE/B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,UAAU,GACd,IAAI,GAAG,EAAE,CAAC;IAEZ,iBAAiB;IACjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,WAAW;QACX,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QAED,cAAc;QACd,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACrD,IAAI,KAAK,EAAE,CAAC;gBACV,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;YACD,SAAS;QACX,CAAC;QAED,aAAa;QACb,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,UAAU,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,UAAU,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEjC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhE,4CAA4C;QAC5C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAC7C,IAAI,YAAY,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC;oBACZ,GAAG,OAAO;oBACV,IAAI,EAAE,YAAY,CAAC,IAAI;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAmB;IAC3C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAExB,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,OAAO;gBACV,UAAU,EAAE,CAAC;gBACb,MAAM;YACR,KAAK,SAAS;gBACZ,YAAY,EAAE,CAAC;gBACf,MAAM;YACR,KAAK,MAAM;gBACT,SAAS,EAAE,CAAC;gBACZ,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,YAAY,EAAE,KAAK,CAAC,IAAI;QACxB,UAAU;QACV,YAAY;QACZ,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,MAAM,KAAK,GAAG,UAAU;QACtB,CAAC,CAAC,CAAC,UAAU,CAAC;QACd,CAAC,CAAC,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;IAE1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACvC,OAAO;oBACL,GAAG,cAAc;oBACjB,GAAG,UAAU;oBACb,KAAK,EAAE,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE;iBACxD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,+BAA+B;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,233 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { auditFile, auditDiff, summarize, loadConfig } from "./auditor.js";
+const VERSION = "0.1.0";
+const COLORS = {
+    reset: "\x1b[0m",
+    bold: "\x1b[1m",
+    dim: "\x1b[2m",
+    red: "\x1b[31m",
+    yellow: "\x1b[33m",
+    blue: "\x1b[34m",
+    cyan: "\x1b[36m",
+    gray: "\x1b[90m",
+};
+const SEVERITY_COLORS = {
+    error: COLORS.red,
+    warning: COLORS.yellow,
+    info: COLORS.blue,
+};
+const HELP = `
+${COLORS.bold}ai-code-audit${COLORS.reset} v${VERSION}
+Security and quality linter for AI-generated code
+
+${COLORS.bold}USAGE:${COLORS.reset}
+  aca [options] <files...>
+  git diff | aca --stdin
+
+${COLORS.bold}OPTIONS:${COLORS.reset}
+  -s, --stdin           Read diff from stdin
+  -f, --format <type>   Output format: text, json, sarif (default: text)
+  -c, --config <file>   Config file path
+  --severity <level>    Minimum severity: info, warning, error (default: warning)
+  -q, --quiet           Only output errors
+  -h, --help            Show help
+  -v, --version         Show version
+
+${COLORS.bold}EXAMPLES:${COLORS.reset}
+  aca src/api.ts                    # Audit a single file
+  aca src/**/*.ts                   # Audit multiple files
+  git diff HEAD~1 | aca --stdin     # Audit a diff
+  git diff --cached | aca --stdin   # Audit staged changes
+
+${COLORS.bold}GIT HOOK:${COLORS.reset}
+  Add to .git/hooks/pre-commit:
+    git diff --cached | aca --stdin --severity error
+
+`;
+function parseArgs(args) {
+    const options = {
+        stdin: false,
+        format: "text",
+        severity: "warning",
+        quiet: false,
+        files: [],
+    };
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        switch (arg) {
+            case "-h":
+            case "--help":
+                console.log(HELP);
+                process.exit(0);
+                break;
+            case "-v":
+            case "--version":
+                console.log(`ai-code-audit v${VERSION}`);
+                process.exit(0);
+                break;
+            case "-s":
+            case "--stdin":
+                options.stdin = true;
+                break;
+            case "-f":
+            case "--format":
+                options.format = args[++i];
+                break;
+            case "-c":
+            case "--config":
+                options.configPath = args[++i];
+                break;
+            case "--severity":
+                options.severity = args[++i];
+                break;
+            case "-q":
+            case "--quiet":
+                options.quiet = true;
+                options.severity = "error";
+                break;
+            default:
+                if (!arg.startsWith("-")) {
+                    options.files.push(arg);
+                }
+                break;
+        }
+    }
+    return options;
+}
+function filterBySeverity(findings, minSeverity) {
+    const severityOrder = ["info", "warning", "error"];
+    const minIndex = severityOrder.indexOf(minSeverity);
+    return findings.filter((f) => severityOrder.indexOf(f.severity) >= minIndex);
+}
+function formatText(result) {
+    const output = [];
+    // Group findings by file
+    const byFile = new Map();
+    for (const finding of result.findings) {
+        const existing = byFile.get(finding.file) || [];
+        existing.push(finding);
+        byFile.set(finding.file, existing);
+    }
+    for (const [file, findings] of byFile) {
+        output.push(`\n${COLORS.bold}${file}${COLORS.reset}`);
+        for (const f of findings) {
+            const color = SEVERITY_COLORS[f.severity];
+            const loc = `${f.line}:${f.column}`.padEnd(8);
+            const sev = f.severity.padEnd(8);
+            output.push(`  ${COLORS.gray}${loc}${COLORS.reset} ${color}${sev}${COLORS.reset} ${f.message}  ${COLORS.dim}${f.rule}${COLORS.reset}`);
+        }
+    }
+    output.push("");
+    const { errorCount, warningCount, infoCount } = result;
+    const total = errorCount + warningCount + infoCount;
+    if (total === 0) {
+        output.push(`${COLORS.cyan}✓ No issues found${COLORS.reset}`);
+    }
+    else {
+        const parts = [];
+        if (errorCount > 0)
+            parts.push(`${COLORS.red}${errorCount} error${errorCount !== 1 ? "s" : ""}${COLORS.reset}`);
+        if (warningCount > 0)
+            parts.push(`${COLORS.yellow}${warningCount} warning${warningCount !== 1 ? "s" : ""}${COLORS.reset}`);
+        if (infoCount > 0)
+            parts.push(`${COLORS.blue}${infoCount} info${COLORS.reset}`);
+        output.push(parts.join(", "));
+    }
+    return output.join("\n");
+}
+function formatJson(result) {
+    return JSON.stringify(result, null, 2);
+}
+function formatSarif(result) {
+    const sarif = {
+        $schema: "https://json.schemastore.org/sarif-2.1.0.json",
+        version: "2.1.0",
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: "ai-code-audit",
+                        version: VERSION,
+                        rules: result.findings.map((f) => ({
+                            id: f.rule,
+                            shortDescription: { text: f.message },
+                        })),
+                    },
+                },
+                results: result.findings.map((f) => ({
+                    ruleId: f.rule,
+                    level: f.severity === "error"
+                        ? "error"
+                        : f.severity === "warning"
+                            ? "warning"
+                            : "note",
+                    message: { text: f.message },
+                    locations: [
+                        {
+                            physicalLocation: {
+                                artifactLocation: { uri: f.file },
+                                region: { startLine: f.line, startColumn: f.column },
+                            },
+                        },
+                    ],
+                })),
+            },
+        ],
+    };
+    return JSON.stringify(sarif, null, 2);
+}
+async function main() {
+    const args = process.argv.slice(2);
+    if (args.length === 0) {
+        console.log(HELP);
+        process.exit(0);
+    }
+    const options = parseArgs(args);
+    const config = loadConfig(options.configPath);
+    let findings = [];
+    if (options.stdin) {
+        // Read diff from stdin
+        const chunks = [];
+        for await (const chunk of process.stdin) {
+            chunks.push(chunk);
+        }
+        const diff = Buffer.concat(chunks).toString("utf-8");
+        findings = auditDiff(diff, config);
+    }
+    else if (options.files.length > 0) {
+        // Audit files
+        for (const file of options.files) {
+            const filePath = resolve(file);
+            findings.push(...auditFile(filePath, config));
+        }
+    }
+    else {
+        console.error("Error: No files specified. Use --stdin for diff input.");
+        process.exit(1);
+    }
+    // Filter by severity
+    findings = filterBySeverity(findings, options.severity);
+    const result = summarize(findings);
+    // Output
+    switch (options.format) {
+        case "json":
+            console.log(formatJson(result));
+            break;
+        case "sarif":
+            console.log(formatSarif(result));
+            break;
+        default:
+            console.log(formatText(result));
+            break;
+    }
+    // Exit with error if there are errors
+    if (result.errorCount > 0) {
+        process.exit(1);
+    }
+}
+main().catch((err) => {
+    console.error("Fatal error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG3E,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,SAAS;IACd,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;CACjB,CAAC;AAEF,MAAM,eAAe,GAA6B;IAChD,KAAK,EAAE,MAAM,CAAC,GAAG;IACjB,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,IAAI,EAAE,MAAM,CAAC,IAAI;CAClB,CAAC;AAEF,MAAM,IAAI,GAAG;EACX,MAAM,CAAC,IAAI,gBAAgB,MAAM,CAAC,KAAK,KAAK,OAAO;;;EAGnD,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,KAAK;;;;EAIhC,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,KAAK;;;;;;;;;EASlC,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,KAAK;;;;;;EAMnC,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,KAAK;;;;CAIpC,CAAC;AAWF,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,OAAO,GAAY;QACvB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,EAAE;KACV,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,WAAW;gBACd,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;gBACrB,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,UAAU;gBACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAA8B,CAAC;gBACxD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,UAAU;gBACb,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC/B,MAAM;YAER,KAAK,YAAY;gBACf,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAa,CAAC;gBACzC,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;gBACrB,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC;gBAC3B,MAAM;YAER;gBACE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;gBACD,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAmB,EACnB,WAAqB;IAErB,MAAM,aAAa,GAAe,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEpD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,yBAAyB;IACzB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAEtD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,KAAK,MAAM,CAAC,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACvD,MAAM,KAAK,GAAG,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;IAEpD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,IAAI,UAAU,GAAG,CAAC;YAChB,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,GAAG,GAAG,UAAU,SAAS,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAChF,CAAC;QACJ,IAAI,YAAY,GAAG,CAAC;YAClB,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,MAAM,GAAG,YAAY,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CACzF,CAAC;QACJ,IAAI,SAAS,GAAG,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,SAAS,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB;IACrC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB;IACtC,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE,OAAO;wBAChB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BACjC,EAAE,EAAE,CAAC,CAAC,IAAI;4BACV,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;yBACtC,CAAC,CAAC;qBACJ;iBACF;gBACD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,MAAM,EAAE,CAAC,CAAC,IAAI;oBACd,KAAK,EACH,CAAC,CAAC,QAAQ,KAAK,OAAO;wBACpB,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS;4BACxB,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,MAAM;oBACd,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;oBAC5B,SAAS,EAAE;wBACT;4BACE,gBAAgB,EAAE;gCAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE;gCACjC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;6BACrD;yBACF;qBACF;iBACF,CAAC,CAAC;aACJ;SACF;KACF,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE9C,IAAI,QAAQ,GAAc,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,uBAAuB;QACvB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrD,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,cAAc;QACd,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,qBAAqB;IACrB,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEnC,SAAS;IACT,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YAChC,MAAM;QACR,KAAK,OAAO;YACV,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACjC,MAAM;QACR;YACE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YAChC,MAAM;IACV,CAAC;IAED,sCAAsC;IACtC,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { auditFile, auditContent, auditDiff, summarize, loadConfig, } from "./auditor.js";
+export { allRules, securityRules, qualityRules, aiSpecificRules, } from "./rules/index.js";
+export type { Finding, Rule, AuditResult, Config, Severity } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,SAAS,EACT,YAAY,EACZ,SAAS,EACT,SAAS,EACT,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,4 @@
+// ai-code-audit - Security and quality linter for AI-generated code
+export { auditFile, auditContent, auditDiff, summarize, loadConfig, } from "./auditor.js";
+export { allRules, securityRules, qualityRules, aiSpecificRules, } from "./rules/index.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,OAAO,EACL,SAAS,EACT,YAAY,EACZ,SAAS,EACT,SAAS,EACT,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAC"}

package/dist/rules/ai-specific.d.ts

@@ -0,0 +1,7 @@
+import type { Rule } from "../types.js";
+export declare const aiPlaceholder: Rule;
+export declare const incompleteImpl: Rule;
+export declare const typeAnyAbuse: Rule;
+export declare const excessiveComments: Rule;
+export declare const aiSpecificRules: Rule[];
+//# sourceMappingURL=ai-specific.d.ts.map

package/dist/rules/ai-specific.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-specific.d.ts","sourceRoot":"","sources":["../../src/rules/ai-specific.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAW,MAAM,aAAa,CAAC;AAqCjD,eAAO,MAAM,aAAa,EAAE,IA+B3B,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,IA4B5B,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,IA0B1B,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,IAsC/B,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,IAAI,EAKjC,CAAC"}

package/dist/rules/ai-specific.js

@@ -0,0 +1,124 @@
+function findMatches(content, pattern, rule, severity, message, filename) {
+    const findings = [];
+    const lines = content.split("\n");
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        let match;
+        pattern.lastIndex = 0;
+        while ((match = pattern.exec(line)) !== null) {
+            findings.push({
+                rule,
+                severity,
+                message,
+                file: filename,
+                line: i + 1,
+                column: match.index + 1,
+                snippet: line.trim(),
+            });
+            if (!pattern.global)
+                break;
+        }
+    }
+    return findings;
+}
+export const aiPlaceholder = {
+    name: "ai-placeholder",
+    description: "Detects placeholder text left by AI",
+    severity: "error",
+    languages: ["javascript", "typescript", "python", "ruby", "go"],
+    check: (content, filename) => {
+        const patterns = [
+            /\/\/\s*(?:Add|TODO:?\s*add|Implement)\s+(?:your|the)\s+/gi,
+            /\/\/\s*(?:Replace|Update)\s+(?:this|with)\s+/gi,
+            /#\s*(?:Add|TODO:?\s*add|Implement)\s+(?:your|the)\s+/gi,
+            /\/\/\s*\.\.\.\s*(?:rest|more|additional|other)/gi,
+            /\/\*\s*(?:Add|Implement|Your)\s+.*\s+here\s*\*\//gi,
+            /['"](?:your-api-key|YOUR_API_KEY|api-key-here|replace-me|CHANGE_ME)['"]/gi,
+            /(?:example|placeholder|dummy)[@.](?:com|org|io)/gi,
+        ];
+        const findings = [];
+        for (const pattern of patterns) {
+            findings.push(...findMatches(content, pattern, "ai-placeholder", "error", "AI placeholder text detected - needs implementation", filename));
+        }
+        return findings;
+    },
+};
+export const incompleteImpl = {
+    name: "incomplete-impl",
+    description: "Detects incomplete implementations",
+    severity: "warning",
+    languages: ["javascript", "typescript", "python"],
+    check: (content, filename) => {
+        const patterns = [
+            /throw\s+new\s+Error\s*\(\s*['"](?:Not\s+implemented|TODO|FIXME)['"]/gi,
+            /raise\s+NotImplementedError/gi,
+            /pass\s*#\s*(?:TODO|FIXME)/gi,
+            /return\s+(?:null|undefined|None)\s*;?\s*\/\/\s*(?:TODO|FIXME)/gi,
+        ];
+        const findings = [];
+        for (const pattern of patterns) {
+            findings.push(...findMatches(content, pattern, "incomplete-impl", "warning", "Incomplete implementation detected", filename));
+        }
+        return findings;
+    },
+};
+export const typeAnyAbuse = {
+    name: "type-any-abuse",
+    description: "Detects excessive use of any type",
+    severity: "warning",
+    languages: ["typescript"],
+    check: (content, filename) => {
+        if (!filename.endsWith(".ts") && !filename.endsWith(".tsx")) {
+            return [];
+        }
+        const pattern = /:\s*any\b/g;
+        const findings = findMatches(content, pattern, "type-any-abuse", "warning", 'Unsafe "any" type usage - consider using a specific type', filename);
+        // Only report if there are many instances
+        if (findings.length > 3) {
+            return findings;
+        }
+        return [];
+    },
+};
+export const excessiveComments = {
+    name: "excessive-comments",
+    description: "Detects over-commented obvious code",
+    severity: "info",
+    languages: ["javascript", "typescript"],
+    check: (content, filename) => {
+        const findings = [];
+        const lines = content.split("\n");
+        let commentLines = 0;
+        let codeLines = 0;
+        for (const line of lines) {
+            const trimmed = line.trim();
+            if (trimmed.startsWith("//") ||
+                trimmed.startsWith("/*") ||
+                trimmed.startsWith("*")) {
+                commentLines++;
+            }
+            else if (trimmed.length > 0) {
+                codeLines++;
+            }
+        }
+        // If comments exceed 50% of code, flag it
+        if (codeLines > 10 && commentLines > codeLines * 0.5) {
+            findings.push({
+                rule: "excessive-comments",
+                severity: "info",
+                message: `High comment ratio (${commentLines} comments / ${codeLines} code lines) - may be over-documented`,
+                file: filename,
+                line: 1,
+                column: 1,
+            });
+        }
+        return findings;
+    },
+};
+export const aiSpecificRules = [
+    aiPlaceholder,
+    incompleteImpl,
+    typeAnyAbuse,
+    excessiveComments,
+];
+//# sourceMappingURL=ai-specific.js.map

package/dist/rules/ai-specific.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-specific.js","sourceRoot":"","sources":["../../src/rules/ai-specific.ts"],"names":[],"mappings":"AAEA,SAAS,WAAW,CAClB,OAAe,EACf,OAAe,EACf,IAAY,EACZ,QAAsC,EACtC,OAAe,EACf,QAAgB;IAEhB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC;QAEV,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEtB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,QAAQ;gBACR,OAAO;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;gBACvB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,MAAM;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAS;IACjC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,qCAAqC;IAClD,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;IAC/D,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG;YACf,2DAA2D;YAC3D,gDAAgD;YAChD,wDAAwD;YACxD,kDAAkD;YAClD,oDAAoD;YACpD,2EAA2E;YAC3E,mDAAmD;SACpD,CAAC;QAEF,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,GAAG,WAAW,CACZ,OAAO,EACP,OAAO,EACP,gBAAgB,EAChB,OAAO,EACP,qDAAqD,EACrD,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAS;IAClC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,oCAAoC;IACjD,QAAQ,EAAE,SAAS;IACnB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;IACjD,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG;YACf,uEAAuE;YACvE,+BAA+B;YAC/B,6BAA6B;YAC7B,iEAAiE;SAClE,CAAC;QAEF,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,GAAG,WAAW,CACZ,OAAO,EACP,OAAO,EACP,iBAAiB,EACjB,SAAS,EACT,oCAAoC,EACpC,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAS;IAChC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,mCAAmC;IAChD,QAAQ,EAAE,SAAS;IACnB,SAAS,EAAE,CAAC,YAAY,CAAC;IACzB,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC;QAC7B,MAAM,QAAQ,GAAG,WAAW,CAC1B,OAAO,EACP,OAAO,EACP,gBAAgB,EAChB,SAAS,EACT,0DAA0D,EAC1D,QAAQ,CACT,CAAC;QAEF,0CAA0C;QAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAS;IACrC,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,qCAAqC;IAClD,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IACE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EACvB,CAAC;gBACD,YAAY,EAAE,CAAC;YACjB,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,SAAS,EAAE,CAAC;YACd,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,SAAS,GAAG,EAAE,IAAI,YAAY,GAAG,SAAS,GAAG,GAAG,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,uBAAuB,YAAY,eAAe,SAAS,uCAAuC;gBAC3G,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,CAAC;aACV,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAW;IACrC,aAAa;IACb,cAAc;IACd,YAAY;IACZ,iBAAiB;CAClB,CAAC"}

package/dist/rules/index.d.ts

@@ -0,0 +1,7 @@
+import { securityRules } from "./security.js";
+import { qualityRules } from "./quality.js";
+import { aiSpecificRules } from "./ai-specific.js";
+import type { Rule } from "../types.js";
+export declare const allRules: Rule[];
+export { securityRules, qualityRules, aiSpecificRules };
+//# sourceMappingURL=index.d.ts.map

package/dist/rules/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAExC,eAAO,MAAM,QAAQ,EAAE,IAAI,EAI1B,CAAC;AAEF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC"}

package/dist/rules/index.js

@@ -0,0 +1,10 @@
+import { securityRules } from "./security.js";
+import { qualityRules } from "./quality.js";
+import { aiSpecificRules } from "./ai-specific.js";
+export const allRules = [
+    ...securityRules,
+    ...qualityRules,
+    ...aiSpecificRules,
+];
+export { securityRules, qualityRules, aiSpecificRules };
+//# sourceMappingURL=index.js.map

package/dist/rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,CAAC,MAAM,QAAQ,GAAW;IAC9B,GAAG,aAAa;IAChB,GAAG,YAAY;IACf,GAAG,eAAe;CACnB,CAAC;AAEF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC"}

package/dist/rules/quality.d.ts

@@ -0,0 +1,8 @@
+import type { Rule } from "../types.js";
+export declare const missingErrorHandling: Rule;
+export declare const emptyCatch: Rule;
+export declare const consoleLog: Rule;
+export declare const todoFixme: Rule;
+export declare const deepNesting: Rule;
+export declare const qualityRules: Rule[];
+//# sourceMappingURL=quality.d.ts.map

package/dist/rules/quality.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality.d.ts","sourceRoot":"","sources":["../../src/rules/quality.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAW,MAAM,aAAa,CAAC;AAqCjD,eAAO,MAAM,oBAAoB,EAAE,IAkClC,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,IAgBxB,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,IAgBxB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,IAgBvB,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,IAiCzB,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,IAAI,EAM9B,CAAC"}

package/dist/rules/quality.js

@@ -0,0 +1,123 @@
+function findMatches(content, pattern, rule, severity, message, filename) {
+    const findings = [];
+    const lines = content.split("\n");
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        let match;
+        pattern.lastIndex = 0;
+        while ((match = pattern.exec(line)) !== null) {
+            findings.push({
+                rule,
+                severity,
+                message,
+                file: filename,
+                line: i + 1,
+                column: match.index + 1,
+                snippet: line.trim(),
+            });
+            if (!pattern.global)
+                break;
+        }
+    }
+    return findings;
+}
+export const missingErrorHandling = {
+    name: "missing-error-handling",
+    description: "Detects async operations without try/catch",
+    severity: "warning",
+    languages: ["javascript", "typescript"],
+    check: (content, filename) => {
+        const findings = [];
+        const lines = content.split("\n");
+        // Look for await outside of try blocks
+        let inTry = 0;
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            if (/\btry\s*\{/.test(line))
+                inTry++;
+            if (/\}\s*catch/.test(line))
+                inTry = Math.max(0, inTry - 1);
+            if (inTry === 0 && /\bawait\s+/.test(line)) {
+                // Check if it's in an async function without surrounding try
+                findings.push({
+                    rule: "missing-error-handling",
+                    severity: "warning",
+                    message: "Async operation without error handling",
+                    file: filename,
+                    line: i + 1,
+                    column: line.indexOf("await") + 1,
+                    snippet: line.trim(),
+                });
+            }
+        }
+        return findings;
+    },
+};
+export const emptyCatch = {
+    name: "empty-catch",
+    description: "Detects empty catch blocks that swallow errors",
+    severity: "warning",
+    languages: ["javascript", "typescript"],
+    check: (content, filename) => {
+        const pattern = /catch\s*\([^)]*\)\s*\{\s*\}/g;
+        return findMatches(content, pattern, "empty-catch", "warning", "Empty catch block swallows errors", filename);
+    },
+};
+export const consoleLog = {
+    name: "console-log",
+    description: "Detects console.log left in code",
+    severity: "info",
+    languages: ["javascript", "typescript"],
+    check: (content, filename) => {
+        const pattern = /console\.log\s*\(/g;
+        return findMatches(content, pattern, "console-log", "info", "console.log statement found", filename);
+    },
+};
+export const todoFixme = {
+    name: "todo-fixme",
+    description: "Detects TODO/FIXME comments",
+    severity: "info",
+    languages: ["javascript", "typescript", "python", "ruby", "go"],
+    check: (content, filename) => {
+        const pattern = /\/\/\s*(?:TODO|FIXME|HACK|XXX|BUG)[\s:]/gi;
+        return findMatches(content, pattern, "todo-fixme", "info", "TODO/FIXME comment found", filename);
+    },
+};
+export const deepNesting = {
+    name: "deep-nesting",
+    description: "Detects deeply nested code (>4 levels)",
+    severity: "warning",
+    languages: ["javascript", "typescript"],
+    check: (content, filename) => {
+        const findings = [];
+        const lines = content.split("\n");
+        let depth = 0;
+        const MAX_DEPTH = 4;
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            const opens = (line.match(/\{/g) || []).length;
+            const closes = (line.match(/\}/g) || []).length;
+            depth += opens - closes;
+            if (depth > MAX_DEPTH && opens > 0) {
+                findings.push({
+                    rule: "deep-nesting",
+                    severity: "warning",
+                    message: `Code nested ${depth} levels deep (max: ${MAX_DEPTH})`,
+                    file: filename,
+                    line: i + 1,
+                    column: 1,
+                    snippet: line.trim(),
+                });
+            }
+        }
+        return findings;
+    },
+};
+export const qualityRules = [
+    missingErrorHandling,
+    emptyCatch,
+    consoleLog,
+    todoFixme,
+    deepNesting,
+];
+//# sourceMappingURL=quality.js.map

package/dist/rules/quality.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality.js","sourceRoot":"","sources":["../../src/rules/quality.ts"],"names":[],"mappings":"AAEA,SAAS,WAAW,CAClB,OAAe,EACf,OAAe,EACf,IAAY,EACZ,QAAsC,EACtC,OAAe,EACf,QAAgB;IAEhB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC;QAEV,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEtB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,QAAQ;gBACR,OAAO;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;gBACvB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,MAAM;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EAAE,4CAA4C;IACzD,QAAQ,EAAE,SAAS;IACnB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,uCAAuC;QACvC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAEtB,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,KAAK,EAAE,CAAC;YACrC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAE5D,IAAI,KAAK,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,6DAA6D;gBAC7D,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,wBAAwB;oBAC9B,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,wCAAwC;oBACjD,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;oBACjC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAS;IAC9B,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,gDAAgD;IAC7D,QAAQ,EAAE,SAAS;IACnB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,8BAA8B,CAAC;QAC/C,OAAO,WAAW,CAChB,OAAO,EACP,OAAO,EACP,aAAa,EACb,SAAS,EACT,mCAAmC,EACnC,QAAQ,CACT,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAS;IAC9B,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,kCAAkC;IAC/C,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,oBAAoB,CAAC;QACrC,OAAO,WAAW,CAChB,OAAO,EACP,OAAO,EACP,aAAa,EACb,MAAM,EACN,6BAA6B,EAC7B,QAAQ,CACT,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAS;IAC7B,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,6BAA6B;IAC1C,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;IAC/D,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,2CAA2C,CAAC;QAC5D,OAAO,WAAW,CAChB,OAAO,EACP,OAAO,EACP,YAAY,EACZ,MAAM,EACN,0BAA0B,EAC1B,QAAQ,CACT,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAS;IAC/B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,wCAAwC;IACrD,QAAQ,EAAE,SAAS;IACnB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,SAAS,GAAG,CAAC,CAAC;QAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC/C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAEhD,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC;YAExB,IAAI,KAAK,GAAG,SAAS,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,cAAc;oBACpB,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,eAAe,KAAK,sBAAsB,SAAS,GAAG;oBAC/D,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,CAAC;oBACT,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAW;IAClC,oBAAoB;IACpB,UAAU;IACV,UAAU;IACV,SAAS;IACT,WAAW;CACZ,CAAC"}

package/dist/rules/security.d.ts

@@ -0,0 +1,9 @@
+import type { Rule } from "../types.js";
+export declare const sqlInjection: Rule;
+export declare const commandInjection: Rule;
+export declare const hardcodedSecret: Rule;
+export declare const unsafeEval: Rule;
+export declare const pathTraversal: Rule;
+export declare const xssRisk: Rule;
+export declare const securityRules: Rule[];
+//# sourceMappingURL=security.d.ts.map

package/dist/rules/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/rules/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAW,MAAM,aAAa,CAAC;AAuCjD,eAAO,MAAM,YAAY,EAAE,IA8B1B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,IAgC9B,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,IAsC7B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,IA4BxB,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,IA8B3B,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,IA8BrB,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,IAAI,EAO/B,CAAC"}

package/dist/rules/security.js

@@ -0,0 +1,168 @@
+function findMatches(content, pattern, rule, severity, message, filename) {
+    const findings = [];
+    const lines = content.split("\n");
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        let match;
+        // Reset regex for global patterns
+        pattern.lastIndex = 0;
+        while ((match = pattern.exec(line)) !== null) {
+            findings.push({
+                rule,
+                severity,
+                message,
+                file: filename,
+                line: i + 1,
+                column: match.index + 1,
+                snippet: line.trim(),
+            });
+            // Prevent infinite loop for non-global regex
+            if (!pattern.global)
+                break;
+        }
+    }
+    return findings;
+}
+export const sqlInjection = {
+    name: "sql-injection",
+    description: "Detects SQL queries with string interpolation",
+    severity: "error",
+    languages: ["javascript", "typescript", "python"],
+    check: (content, filename) => {
+        const patterns = [
+            // Template literals in SQL
+            /(?:query|execute|sql)\s*\(\s*`[^`]*\$\{/gi,
+            // String concatenation in SQL
+            /(?:query|execute|sql)\s*\(\s*['"][^'"]*['"]\s*\+/gi,
+            // Python f-strings in SQL
+            /(?:execute|cursor\.execute)\s*\(\s*f['"][^'"]*\{/gi,
+        ];
+        const findings = [];
+        for (const pattern of patterns) {
+            findings.push(...findMatches(content, pattern, "sql-injection", "error", "SQL injection risk: query uses string interpolation", filename));
+        }
+        return findings;
+    },
+};
+export const commandInjection = {
+    name: "command-injection",
+    description: "Detects shell commands with unsanitized input",
+    severity: "error",
+    languages: ["javascript", "typescript", "python"],
+    check: (content, filename) => {
+        const patterns = [
+            // exec with template literal
+            /(?:exec|execSync|spawn|spawnSync)\s*\(\s*`[^`]*\$\{/gi,
+            // exec with concatenation
+            /(?:exec|execSync|spawn|spawnSync)\s*\(\s*['"][^'"]*['"]\s*\+/gi,
+            // Python subprocess with f-string
+            /subprocess\.(?:run|call|Popen)\s*\(\s*f['"][^'"]*\{/gi,
+            // shell=True in Python
+            /subprocess\.(?:run|call|Popen)\s*\([^)]*shell\s*=\s*True/gi,
+        ];
+        const findings = [];
+        for (const pattern of patterns) {
+            findings.push(...findMatches(content, pattern, "command-injection", "error", "Command injection risk: shell command with unsanitized input", filename));
+        }
+        return findings;
+    },
+};
+export const hardcodedSecret = {
+    name: "hardcoded-secret",
+    description: "Detects hardcoded API keys, passwords, tokens",
+    severity: "error",
+    languages: ["javascript", "typescript", "python", "ruby", "go"],
+    check: (content, filename) => {
+        const patterns = [
+            // API keys
+            /(?:api[_-]?key|apikey)\s*[:=]\s*['"][a-zA-Z0-9_\-]{20,}['"]/gi,
+            // AWS keys
+            /(?:AKIA|ABIA|ACCA|ASIA)[A-Z0-9]{16}/g,
+            // Generic secrets
+            /(?:password|passwd|pwd|secret|token)\s*[:=]\s*['"][^'"]{8,}['"]/gi,
+            // Bearer tokens
+            /['"]Bearer\s+[a-zA-Z0-9_\-\.]+['"]/g,
+            // Private keys
+            /-----BEGIN\s+(?:RSA\s+)?PRIVATE\s+KEY-----/g,
+            // GitHub tokens
+            /gh[pousr]_[A-Za-z0-9_]{36,}/g,
+            // Slack tokens
+            /xox[baprs]-[A-Za-z0-9-]+/g,
+        ];
+        const findings = [];
+        for (const pattern of patterns) {
+            findings.push(...findMatches(content, pattern, "hardcoded-secret", "error", "Hardcoded secret detected", filename));
+        }
+        return findings;
+    },
+};
+export const unsafeEval = {
+    name: "unsafe-eval",
+    description: "Detects use of eval() or Function()",
+    severity: "error",
+    languages: ["javascript", "typescript"],
+    check: (content, filename) => {
+        const patterns = [
+            /\beval\s*\(/g,
+            /new\s+Function\s*\(/g,
+            /setTimeout\s*\(\s*['"`]/g,
+            /setInterval\s*\(\s*['"`]/g,
+        ];
+        const findings = [];
+        for (const pattern of patterns) {
+            findings.push(...findMatches(content, pattern, "unsafe-eval", "error", "Unsafe eval() or Function() usage detected", filename));
+        }
+        return findings;
+    },
+};
+export const pathTraversal = {
+    name: "path-traversal",
+    description: "Detects unsanitized file path operations",
+    severity: "error",
+    languages: ["javascript", "typescript", "python"],
+    check: (content, filename) => {
+        const patterns = [
+            // Direct path concatenation
+            /(?:readFile|writeFile|unlink|rmdir|mkdir)(?:Sync)?\s*\(\s*(?:req\.|request\.|params\.|query\.)/gi,
+            // Python path with user input
+            /open\s*\(\s*(?:request\.|args\.|kwargs\.)/gi,
+            // Path join with user input
+            /path\.join\s*\([^)]*(?:req\.|request\.|params\.|query\.)/gi,
+        ];
+        const findings = [];
+        for (const pattern of patterns) {
+            findings.push(...findMatches(content, pattern, "path-traversal", "error", "Path traversal risk: file operation with user input", filename));
+        }
+        return findings;
+    },
+};
+export const xssRisk = {
+    name: "xss-risk",
+    description: "Detects potential XSS in HTML generation",
+    severity: "warning",
+    languages: ["javascript", "typescript"],
+    check: (content, filename) => {
+        const patterns = [
+            // innerHTML with variable
+            /\.innerHTML\s*=\s*[^'"]/g,
+            // document.write
+            /document\.write\s*\(/g,
+            // dangerouslySetInnerHTML
+            /dangerouslySetInnerHTML\s*=\s*\{\s*\{\s*__html\s*:/g,
+        ];
+        const findings = [];
+        for (const pattern of patterns) {
+            findings.push(...findMatches(content, pattern, "xss-risk", "warning", "Potential XSS risk: unsafe HTML manipulation", filename));
+        }
+        return findings;
+    },
+};
+export const securityRules = [
+    sqlInjection,
+    commandInjection,
+    hardcodedSecret,
+    unsafeEval,
+    pathTraversal,
+    xssRisk,
+];
+//# sourceMappingURL=security.js.map

package/dist/rules/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/rules/security.ts"],"names":[],"mappings":"AAEA,SAAS,WAAW,CAClB,OAAe,EACf,OAAe,EACf,IAAY,EACZ,QAAsC,EACtC,OAAe,EACf,QAAgB;IAEhB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC;QAEV,kCAAkC;QAClC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEtB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,QAAQ;gBACR,OAAO;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;gBACvB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;aACrB,CAAC,CAAC;YAEH,6CAA6C;YAC7C,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,MAAM;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAS;IAChC,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,+CAA+C;IAC5D,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;IACjD,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG;YACf,2BAA2B;YAC3B,2CAA2C;YAC3C,8BAA8B;YAC9B,oDAAoD;YACpD,0BAA0B;YAC1B,oDAAoD;SACrD,CAAC;QAEF,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,GAAG,WAAW,CACZ,OAAO,EACP,OAAO,EACP,eAAe,EACf,OAAO,EACP,qDAAqD,EACrD,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,+CAA+C;IAC5D,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;IACjD,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG;YACf,6BAA6B;YAC7B,uDAAuD;YACvD,0BAA0B;YAC1B,gEAAgE;YAChE,kCAAkC;YAClC,uDAAuD;YACvD,uBAAuB;YACvB,4DAA4D;SAC7D,CAAC;QAEF,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,GAAG,WAAW,CACZ,OAAO,EACP,OAAO,EACP,mBAAmB,EACnB,OAAO,EACP,8DAA8D,EAC9D,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAS;IACnC,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,+CAA+C;IAC5D,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;IAC/D,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG;YACf,WAAW;YACX,+DAA+D;YAC/D,WAAW;YACX,sCAAsC;YACtC,kBAAkB;YAClB,mEAAmE;YACnE,gBAAgB;YAChB,qCAAqC;YACrC,eAAe;YACf,6CAA6C;YAC7C,gBAAgB;YAChB,8BAA8B;YAC9B,eAAe;YACf,2BAA2B;SAC5B,CAAC;QAEF,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,GAAG,WAAW,CACZ,OAAO,EACP,OAAO,EACP,kBAAkB,EAClB,OAAO,EACP,2BAA2B,EAC3B,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAS;IAC9B,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,qCAAqC;IAClD,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG;YACf,cAAc;YACd,sBAAsB;YACtB,0BAA0B;YAC1B,2BAA2B;SAC5B,CAAC;QAEF,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,GAAG,WAAW,CACZ,OAAO,EACP,OAAO,EACP,aAAa,EACb,OAAO,EACP,4CAA4C,EAC5C,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAS;IACjC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,0CAA0C;IACvD,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;IACjD,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG;YACf,4BAA4B;YAC5B,kGAAkG;YAClG,8BAA8B;YAC9B,6CAA6C;YAC7C,4BAA4B;YAC5B,4DAA4D;SAC7D,CAAC;QAEF,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,GAAG,WAAW,CACZ,OAAO,EACP,OAAO,EACP,gBAAgB,EAChB,OAAO,EACP,qDAAqD,EACrD,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAS;IAC3B,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,0CAA0C;IACvD,QAAQ,EAAE,SAAS;IACnB,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG;YACf,0BAA0B;YAC1B,0BAA0B;YAC1B,iBAAiB;YACjB,uBAAuB;YACvB,0BAA0B;YAC1B,qDAAqD;SACtD,CAAC;QAEF,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,GAAG,WAAW,CACZ,OAAO,EACP,OAAO,EACP,UAAU,EACV,SAAS,EACT,8CAA8C,EAC9C,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAW;IACnC,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,UAAU;IACV,aAAa;IACb,OAAO;CACR,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,30 @@
+export type Severity = "info" | "warning" | "error";
+export interface Finding {
+    rule: string;
+    severity: Severity;
+    message: string;
+    file: string;
+    line: number;
+    column: number;
+    snippet?: string;
+}
+export interface Rule {
+    name: string;
+    description: string;
+    severity: Severity;
+    languages: string[];
+    check: (content: string, filename: string) => Finding[];
+}
+export interface Config {
+    rules: Record<string, Severity | "off">;
+    ignore: string[];
+    languages: string[];
+}
+export interface AuditResult {
+    findings: Finding[];
+    filesScanned: number;
+    errorCount: number;
+    warningCount: number;
+    infoCount: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;AAEpD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC;IACxC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@claude-tools-i-use/ai-code-audit",
+  "version": "0.1.0",
+  "description": "Security and quality linter for AI-generated code",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "ai-code-audit": "dist/cli.js",
+    "aca": "dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "start": "node dist/cli.js",
+    "test": "node --test",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "ai",
+    "security",
+    "lint",
+    "audit",
+    "code-review",
+    "owasp"
+  ],
+  "author": "Josh Duffy",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/joshduffy/claude-tools.git",
+    "directory": "packages/ai-code-audit"
+  },
+  "homepage": "https://joshduffy.dev/tools",
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}