@datahogo/core 0.1.0

package/dist/engines/gitleaks.js

@@ -0,0 +1,107 @@
+// Gitleaks engine - runs the Gitleaks binary for comprehensive secret detection.
+// Falls back gracefully if gitleaks is not installed (regex secrets engine covers basics).
+import { execWithTimeout } from "../utils/exec.js";
+import { readFile, rm } from "../utils/fs.js";
+import path from "node:path";
+import os from "node:os";
+// Map Gitleaks RuleIDs to our vulnerability catalog
+const RULE_ID_MAP = {
+    "generic-api-key": { id: 53, severity: "critical", category: "vibecoding" },
+    "private-key": { id: 53, severity: "critical", category: "vibecoding" },
+    "aws-access-key-id": { id: 53, severity: "critical", category: "vibecoding" },
+    "aws-secret-access-key": { id: 53, severity: "critical", category: "vibecoding" },
+    "github-pat": { id: 53, severity: "critical", category: "vibecoding" },
+    "github-fine-grained-pat": { id: 53, severity: "critical", category: "vibecoding" },
+    "github-oauth": { id: 53, severity: "critical", category: "vibecoding" },
+    "github-app-token": { id: 53, severity: "critical", category: "vibecoding" },
+    "gcp-api-key": { id: 53, severity: "critical", category: "vibecoding" },
+    "stripe-access-token": { id: 53, severity: "critical", category: "vibecoding" },
+    "slack-bot-token": { id: 53, severity: "critical", category: "vibecoding" },
+    "slack-webhook-url": { id: 53, severity: "high", category: "vibecoding" },
+    "twilio-api-key": { id: 53, severity: "critical", category: "vibecoding" },
+    "sendgrid-api-key": { id: 53, severity: "critical", category: "vibecoding" },
+    "mailchimp-api-key": { id: 53, severity: "high", category: "vibecoding" },
+    "npm-access-token": { id: 53, severity: "critical", category: "supply-chain" },
+    "pypi-upload-token": { id: 53, severity: "critical", category: "supply-chain" },
+    "telegram-bot-api-token": { id: 53, severity: "high", category: "vibecoding" },
+    "discord-api-token": { id: 53, severity: "high", category: "vibecoding" },
+    "discord-client-secret": { id: 53, severity: "high", category: "vibecoding" },
+    "heroku-api-key": { id: 53, severity: "critical", category: "vibecoding" },
+    "linkedin-client-secret": { id: 53, severity: "high", category: "vibecoding" },
+    "vault-service-token": { id: 53, severity: "critical", category: "vibecoding" },
+    "jwt": { id: 53, severity: "high", category: "vibecoding" },
+    "password-in-url": { id: 55, severity: "critical", category: "vibecoding" },
+    "postgresql-connection-string": { id: 101, severity: "critical", category: "database" },
+    "mysql-connection-string": { id: 101, severity: "critical", category: "database" },
+    "mongodb-connection-string": { id: 101, severity: "critical", category: "database" },
+};
+const DEFAULT_MAPPING = { id: 53, severity: "critical", category: "vibecoding" };
+export async function runGitleaks(repoDir) {
+    const reportPath = path.join(os.tmpdir(), `gitleaks-${Date.now()}-${Math.random().toString(36).slice(2)}.json`);
+    try {
+        // Gitleaks exits with code 1 when leaks are found — this is expected behavior
+        await execWithTimeout("gitleaks", [
+            "dir",
+            repoDir,
+            "-v",
+            "--report-format", "json",
+            "--report-path", reportPath,
+            "--no-git", // Scan current files, not git history (faster, history not available)
+        ], { timeoutMs: 30_000 });
+    }
+    catch (error) {
+        // Only re-throw if it's a timeout or missing binary
+        const message = error instanceof Error ? error.message : String(error);
+        if (message.includes("timed out") || message.includes("ENOENT")) {
+            throw error;
+        }
+        // exit code 1 = leaks found, report file should exist
+    }
+    let reportContent;
+    try {
+        reportContent = await readFile(reportPath, "utf-8");
+    }
+    catch {
+        // No report file = no leaks found (exit code 0, empty report)
+        return [];
+    }
+    finally {
+        await rm(reportPath, { force: true }).catch(() => { });
+    }
+    if (!reportContent.trim())
+        return [];
+    let results;
+    try {
+        results = JSON.parse(reportContent);
+    }
+    catch {
+        return [];
+    }
+    if (!Array.isArray(results))
+        return [];
+    return results.map((leak) => mapLeakToFinding(leak, repoDir));
+}
+function mapLeakToFinding(leak, repoDir) {
+    const mapping = RULE_ID_MAP[leak.RuleID] ?? DEFAULT_MAPPING;
+    // Make file path relative to repo root
+    const filePath = leak.File.startsWith(repoDir)
+        ? leak.File.slice(repoDir.length + 1)
+        : leak.File;
+    // Mask the actual secret value
+    const maskedSecret = leak.Secret.length > 6
+        ? leak.Secret.substring(0, 6) + "...REDACTED"
+        : "***REDACTED***";
+    return {
+        vulnerability_id: mapping.id,
+        severity: mapping.severity,
+        category: mapping.category,
+        title: `${leak.Description}`,
+        description_technical: `Gitleaks detected ${leak.RuleID}: ${leak.Description}`,
+        file_path: filePath,
+        line_number: leak.StartLine,
+        code_snippet: leak.Match.replace(leak.Secret, maskedSecret),
+        owasp_ref: "A07:2021",
+        status: "open",
+    };
+}
+//# sourceMappingURL=gitleaks.js.map

package/dist/engines/gitleaks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitleaks.js","sourceRoot":"","sources":["../../src/engines/gitleaks.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,2FAA2F;AAE3F,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAyBzB,oDAAoD;AACpD,MAAM,WAAW,GAAyE;IACxF,iBAAiB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC3E,aAAa,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IACvE,mBAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC7E,uBAAuB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IACjF,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IACtE,yBAAyB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IACnF,cAAc,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IACxE,kBAAkB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC5E,aAAa,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IACvE,qBAAqB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC/E,iBAAiB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC3E,mBAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;IACzE,gBAAgB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC1E,kBAAkB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC5E,mBAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;IACzE,kBAAkB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE;IAC9E,mBAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE;IAC/E,wBAAwB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC9E,mBAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;IACzE,uBAAuB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC7E,gBAAgB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC1E,wBAAwB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC9E,qBAAqB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC/E,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC3D,iBAAiB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC3E,8BAA8B,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE;IACvF,yBAAyB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE;IAClF,2BAA2B,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE;CACrF,CAAC;AAEF,MAAM,eAAe,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAsB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AAE7F,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEhH,IAAI,CAAC;QACH,8EAA8E;QAC9E,MAAM,eAAe,CAAC,UAAU,EAAE;YAChC,KAAK;YACL,OAAO;YACP,IAAI;YACJ,iBAAiB,EAAE,MAAM;YACzB,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,sEAAsE;SACnF,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,oDAAoD;QACpD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,sDAAsD;IACxD,CAAC;IAED,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,OAAO,EAAE,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAErC,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAkB,EAAE,OAAe;IAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC;IAE5D,uCAAuC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAEd,+BAA+B;IAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,aAAa;QAC7C,CAAC,CAAC,gBAAgB,CAAC;IAErB,OAAO;QACL,gBAAgB,EAAE,OAAO,CAAC,EAAE;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE;QAC5B,qBAAqB,EAAE,qBAAqB,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE;QAC9E,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;QAC3D,SAAS,EAAE,UAAU;QACrB,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC"}

package/dist/engines/npm-audit.d.ts

@@ -0,0 +1,3 @@
+import type { FindingData } from "./types.js";
+export declare function runNpmAudit(repoDir: string, files: Map<string, string>): Promise<FindingData[]>;
+//# sourceMappingURL=npm-audit.d.ts.map

package/dist/engines/npm-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-audit.d.ts","sourceRoot":"","sources":["../../src/engines/npm-audit.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAY,MAAM,YAAY,CAAC;AA0CxD,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACzB,OAAO,CAAC,WAAW,EAAE,CAAC,CA2FxB"}

package/dist/engines/npm-audit.js

@@ -0,0 +1,113 @@
+// npm audit engine - runs npm audit for real-time CVE dependency scanning.
+// Only runs when package-lock.json exists in the repo (required by npm audit).
+// The hardcoded dependencies engine still runs for typosquatting detection.
+import { execWithTimeout } from "../utils/exec.js";
+import { access } from "../utils/fs.js";
+import path from "node:path";
+const SEVERITY_MAP = {
+    critical: "critical",
+    high: "high",
+    moderate: "medium",
+    low: "low",
+    info: "info",
+};
+export async function runNpmAudit(repoDir, files) {
+    // npm audit requires package-lock.json
+    const lockfilePath = path.join(repoDir, "package-lock.json");
+    try {
+        await access(lockfilePath);
+    }
+    catch {
+        // No lockfile — can't run npm audit
+        return [];
+    }
+    let stdout;
+    try {
+        // npm audit exits with non-zero when vulnerabilities are found — expected behavior
+        const result = await execWithTimeout("npm", [
+            "audit",
+            "--json",
+            "--omit=dev",
+        ], {
+            timeoutMs: 60_000,
+            cwd: repoDir,
+        });
+        stdout = result.stdout;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (message.includes("timed out") || message.includes("ENOENT")) {
+            throw error;
+        }
+        // npm audit exits non-zero when vulns found — try to extract stdout from error
+        return [];
+    }
+    if (!stdout.trim())
+        return [];
+    let output;
+    try {
+        output = JSON.parse(stdout);
+    }
+    catch {
+        return [];
+    }
+    if (!output.vulnerabilities)
+        return [];
+    const findings = [];
+    for (const [pkgName, vuln] of Object.entries(output.vulnerabilities)) {
+        // Get the actual advisory details from `via` (skip string-only entries)
+        const advisories = vuln.via.filter((v) => typeof v !== "string");
+        if (advisories.length === 0) {
+            // Transitive vulnerability — still report but with less detail
+            findings.push({
+                vulnerability_id: 3,
+                severity: SEVERITY_MAP[vuln.severity] ?? "medium",
+                category: "supply-chain",
+                title: `Vulnerable Dependency: ${pkgName}`,
+                description_technical: `${pkgName} (${vuln.range}) has known vulnerabilities. ${vuln.isDirect ? "Direct dependency." : "Transitive dependency."}`,
+                file_path: "package-lock.json",
+                code_snippet: `"${pkgName}": "${vuln.range}"`,
+                fix_description: formatFixAvailable(vuln.fixAvailable),
+                owasp_ref: "A06:2021",
+                status: "open",
+            });
+            continue;
+        }
+        for (const advisory of advisories) {
+            const cweStr = advisory.cwe?.join(", ") || "";
+            findings.push({
+                vulnerability_id: 3,
+                severity: SEVERITY_MAP[advisory.severity] ?? SEVERITY_MAP[vuln.severity] ?? "medium",
+                category: "supply-chain",
+                title: `${advisory.title}: ${pkgName}`,
+                description_technical: [
+                    advisory.title,
+                    `Package: ${pkgName} (${vuln.range})`,
+                    vuln.isDirect ? "Direct dependency" : "Transitive dependency",
+                    advisory.url ? `Advisory: ${advisory.url}` : "",
+                    cweStr ? `CWE: ${cweStr}` : "",
+                    advisory.cvss?.score ? `CVSS: ${advisory.cvss.score}` : "",
+                ].filter(Boolean).join("\n"),
+                file_path: "package-lock.json",
+                code_snippet: `"${pkgName}": "${vuln.range}"`,
+                fix_description: formatFixAvailable(vuln.fixAvailable),
+                owasp_ref: "A06:2021",
+                status: "open",
+            });
+        }
+    }
+    return findings;
+}
+function formatFixAvailable(fix) {
+    if (fix === true)
+        return "A fix is available. Run `npm audit fix` to apply.";
+    if (fix === false)
+        return "No fix available yet. Consider finding an alternative package.";
+    if (typeof fix === "object") {
+        return fix.isSemVerMajor
+            ? `Update ${fix.name} to ${fix.version} (breaking change). Run \`npm audit fix --force\`.`
+            : `Update ${fix.name} to ${fix.version}. Run \`npm audit fix\`.`;
+    }
+    return "";
+}
+//# sourceMappingURL=npm-audit.js.map

package/dist/engines/npm-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-audit.js","sourceRoot":"","sources":["../../src/engines/npm-audit.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAmC7B,MAAM,YAAY,GAA6B;IAC7C,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,QAAQ;IAClB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,KAA0B;IAE1B,uCAAuC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;QACpC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,mFAAmF;QACnF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE;YAC1C,OAAO;YACP,QAAQ;YACR,YAAY;SACb,EAAE;YACD,SAAS,EAAE,MAAM;YACjB,GAAG,EAAE,OAAO;SACb,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,+EAA+E;QAC/E,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAE9B,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACrE,wEAAwE;QACxE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QAE9E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,+DAA+D;YAC/D,QAAQ,CAAC,IAAI,CAAC;gBACZ,gBAAgB,EAAE,CAAC;gBACnB,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ;gBACjD,QAAQ,EAAE,cAAc;gBACxB,KAAK,EAAE,0BAA0B,OAAO,EAAE;gBAC1C,qBAAqB,EAAE,GAAG,OAAO,KAAK,IAAI,CAAC,KAAK,gCAAgC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,wBAAwB,EAAE;gBACjJ,SAAS,EAAE,mBAAmB;gBAC9B,YAAY,EAAE,IAAI,OAAO,OAAO,IAAI,CAAC,KAAK,GAAG;gBAC7C,eAAe,EAAE,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC;gBACtD,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAE9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,gBAAgB,EAAE,CAAC;gBACnB,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ;gBACpF,QAAQ,EAAE,cAAc;gBACxB,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,KAAK,OAAO,EAAE;gBACtC,qBAAqB,EAAE;oBACrB,QAAQ,CAAC,KAAK;oBACd,YAAY,OAAO,KAAK,IAAI,CAAC,KAAK,GAAG;oBACrC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,uBAAuB;oBAC7D,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE;oBAC/C,MAAM,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;oBAC9B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;iBAC3D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5B,SAAS,EAAE,mBAAmB;gBAC9B,YAAY,EAAE,IAAI,OAAO,OAAO,IAAI,CAAC,KAAK,GAAG;gBAC7C,eAAe,EAAE,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC;gBACtD,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAqC;IAC/D,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,mDAAmD,CAAC;IAC7E,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,gEAAgE,CAAC;IAC3F,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,aAAa;YACtB,CAAC,CAAC,UAAU,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,oDAAoD;YAC1F,CAAC,CAAC,UAAU,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,0BAA0B,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/engines/patterns.d.ts

@@ -0,0 +1,3 @@
+import type { FindingData } from "./types.js";
+export declare function analyzePatterns(files: Map<string, string>): FindingData[];
+//# sourceMappingURL=patterns.d.ts.map

package/dist/engines/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../src/engines/patterns.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAC;AAglCjE,wBAAgB,eAAe,CAC7B,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACzB,WAAW,EAAE,CAsDf"}