@greenarmor/ges-audit-engine 0.4.0 → 0.5.1

package/dist/index.js

@@ -10,7 +10,11 @@ const IGNORE_DIRS = new Set([
     "node_modules", ".git", "dist", "build", ".next", ".nuxt", "coverage",
     ".ges", "vendor", "__pycache__", ".venv", "venv", ".turbo", ".cache",
     "reports", "compliance", "security", "controls", "policies", "checklists", "docs",
+    "bundle", ".crush", ".vscode", ".idea",
 ]);
+const SKIP_PATHS = [
+    "/audit-engine/src/",
+];
 const IGNORE_EXTENSIONS = new Set([
     ".png", ".jpg", ".jpeg", ".gif", ".webp", ".svg", ".ico", ".woff",
     ".woff2", ".ttf", ".eot", ".mp4", ".mp3", ".zip", ".gz", ".tar",
@@ -30,7 +34,10 @@ function collectFiles(root) {
             else if (entry.isFile()) {
                 const ext = path.extname(entry.name);
                 if (!IGNORE_EXTENSIONS.has(ext)) {
-                    files.push(path.relative(root, fullPath));
+                    const rel = path.relative(root, fullPath).replace(/\\/g, "/");
+                    if (!SKIP_PATHS.some(skip => rel.includes(skip))) {
+                        files.push(rel);
+                    }
                 }
             }
         }
@@ -56,10 +63,85 @@ function readFiles(root, files) {
     }
     return contents;
 }
+function detectWebProject(fileContents) {
+    const webPatterns = [
+        /from\s+['"]express['"]/, /require\s*\(\s*['"]express['"]\s*\)/,
+        /from\s+['"]fastify['"]/, /require\s*\(\s*['"]fastify['"]\s*\)/,
+        /from\s+['"]koa['"]/, /require\s*\(\s*['"]koa['"]\s*\)/,
+        /from\s+['"]hono['"]/, /require\s*\(\s*['"]hono['"]\s*\)/,
+        /from\s+['"]@nestjs/, /from\s+['"]next['"]/, /from\s+['"]nuxt['"]/,
+        /from\s+['"]@sveltejs/, /from\s+['"]@remix-run/,
+        /from\s+['"]@angular/, /from\s+['"]vue['"]/,
+        /import\s+django/, /from\s+flask\s+import/, /from\s+fastapi\s+import/,
+        /from\s+sanic\s+import/, /from\s+aiohttp\s+import/, /import\s+tornado/,
+        /use\s+gin\.Default\(\)|gin\.New\(\)/, /fiber\.New\(\)/,
+        /echo\.New\(\)/, /mux\.NewRouter\(\)/, /chi\.NewRouter\(\)/,
+        /iris\.New\(\)/,
+        /use\s+Actix\s*Web/, /use\s+rocket/, /use\s+warp/, /use\s+axum/,
+        /Rails\.application/, /ActionController::Base/, /Sinatra::Base/,
+        /import\s+io\.express/, /import\s+io\.ktor/, /import\s+spark\.Spark/,
+        /@SpringBootApplication/, /@Controller/, /@RestController/,
+        /use\s+Rocketeer/, /Route::get|Route::post/, /use\s+Illuminate/,
+        /using\s+Microsoft\.AspNetCore/, /using\s+Nancy/, /ControllerBase/,
+        /createServer\s*\(\s*.*request\b/, /http\.createServer/,
+        /router\.(get|post|put|delete|patch)\s*\(/,
+    ];
+    for (const [, content] of fileContents) {
+        for (const pattern of webPatterns) {
+            if (pattern.test(content))
+                return true;
+        }
+    }
+    for (const [filePath, content] of fileContents) {
+        if (filePath === "package.json") {
+            try {
+                const pkg = JSON.parse(content);
+                const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+                if (allDeps.express || allDeps.fastify || allDeps.koa || allDeps.hono ||
+                    allDeps.next || allDeps.nuxt || allDeps["@nestjs/core"] || allDeps["@sveltejs/kit"] ||
+                    allDeps["@remix-run/node"] || allDeps["@angular/core"] || allDeps.vue) {
+                    return true;
+                }
+            }
+            catch { /* not json */ }
+        }
+        if (filePath === "requirements.txt" || filePath === "pyproject.toml") {
+            if (/django|flask|fastapi|sanic|aiohttp|tornado|starlette/i.test(content))
+                return true;
+        }
+        if (filePath === "go.mod") {
+            if (/gin-gonic|fiber|echo|chi|gorilla\/mux|iris/i.test(content))
+                return true;
+        }
+        if (filePath === "Cargo.toml") {
+            if (/actix-web|rocket|warp|axum|tide/i.test(content))
+                return true;
+        }
+        if (filePath === "Gemfile") {
+            if (/rails|sinatra|hanami/i.test(content))
+                return true;
+        }
+        if (filePath === "pom.xml" || filePath === "build.gradle") {
+            if (/spring-boot|ktor|sparkjava|quarkus/i.test(content))
+                return true;
+        }
+        if (filePath === "composer.json") {
+            try {
+                const pkg = JSON.parse(content);
+                const allDeps = { ...pkg.require, ...pkg["require-dev"] };
+                if (allDeps["laravel/framework"] || allDeps["symfony/symfony"] || allDeps["slim/slim"])
+                    return true;
+            }
+            catch { /* not json */ }
+        }
+    }
+    return false;
+}
 export function runAudit(root) {
     const files = collectFiles(root);
     const fileContents = readFiles(root, files);
-    const ctx = { root, files, fileContents };
+    const isWebProject = detectWebProject(fileContents);
+    const ctx = { root, files, fileContents, isWebProject };
     const scanners = [
         new SecretsScanner(),
         new CryptoScanner(),

package/dist/scanners/auth-scanner.js

@@ -4,6 +4,8 @@ export class AuthScanner {
     scan(ctx) {
         const findings = [];
         const content = ctx.fileContents;
+        if (!ctx.isWebProject)
+            return findings;
         const hasAuthMiddleware = this.detectAuthMiddleware(content);
         const routesWithoutAuth = this.detectRoutesWithoutAuth(content, hasAuthMiddleware);
         const hasRateLimiting = this.detectRateLimiting(content);

package/dist/scanners/config-scanner.js

@@ -43,7 +43,7 @@ export class ConfigScanner {
                     fix: "npm install cors and configure allowed origins explicitly.",
                 });
             }
-            const auditDeps = ["express", "lodash", "axios", "underscore"];
+            const auditDeps = ["lodash", "axios", "underscore"];
             for (const dep of auditDeps) {
                 if (deps[dep]) {
                     findings.push({

package/dist/scanners/database-scanner.js

@@ -1,3 +1,39 @@
+const DB_SCHEMA_EXTENSIONS = new Set([
+    ".prisma", ".sql",
+]);
+const DB_SCHEMA_FILENAMES = [
+    /(?:^|[\/\\])(?:schema|migration|knexfile|drizzle\.config|database\.conf)/i,
+];
+const DB_DIR_INDICATORS = [
+    /[\/\\](?:migrations?|models?|entities?|repositories?|schemas?|db|database)[\/\\]/i,
+];
+const ORM_ENTITY_PATTERNS = {
+    ".ts": /(?:@Entity|@Table|@Schema|BaseModel)\s*\(|(?:Model|Entity|Schema)\s+extends\s+|Schema\s*=\s*new\s+mongoose\.Schema/i,
+    ".js": /(?:@Entity|@Table|@Schema|BaseModel)\s*\(/,
+    ".py": /class\s+\w+\s*\(\s*(?:models\.Model|Base|declarative_base)\)/i,
+    ".rb": /class\s+\w+\s*<\s*(?:ApplicationRecord|ActiveRecord::Base)/i,
+    ".go": /type\s+\w+\s+struct\s*\{[\s\S]*?gorm/i,
+    ".java": /@Entity\s*(?:public\s+)?class/i,
+    ".php": /class\s+\w+\s+extends\s+(?:Model|Eloquent|Doctrine)/i,
+};
+function isDatabaseSchemaFile(filePath, content) {
+    const ext = filePath.substring(filePath.lastIndexOf("."));
+    const basename = filePath.substring(filePath.lastIndexOf("/") + 1);
+    if (DB_SCHEMA_EXTENSIONS.has(ext))
+        return true;
+    for (const pattern of DB_SCHEMA_FILENAMES) {
+        if (pattern.test(basename))
+            return true;
+    }
+    for (const pattern of DB_DIR_INDICATORS) {
+        if (pattern.test(filePath))
+            return true;
+    }
+    const ormPattern = ORM_ENTITY_PATTERNS[ext];
+    if (ormPattern && ormPattern.test(content))
+        return true;
+    return false;
+}
 export class DatabaseScanner {
     name = "database";
     scan(ctx) {
@@ -7,56 +43,55 @@ export class DatabaseScanner {
         return findings;
     }
     checkSchemaPatterns(ctx, findings) {
-        const requiredAuditColumns = ["created_at", "updated_at"];
-        const recommendedAuditColumns = ["deleted_at", "created_by", "updated_by"];
-        const codeExtensions = new Set([".ts", ".tsx", ".js", ".jsx", ".prisma", ".sql"]);
         for (const [filePath, content] of ctx.fileContents) {
-            const ext = filePath.substring(filePath.lastIndexOf("."));
-            if (!codeExtensions.has(ext))
+            if (!isDatabaseSchemaFile(filePath, content))
                 continue;
-            const hasTimestamps = /\b(?:timestamps|created_at|createdAt)\s*[:\(]/i.test(content);
-            const hasSoftDelete = /\b(?:deleted_at|deletedAt|softDelete|paranoid)\s*[:\(]/i.test(content);
-            const hasUserAudit = /\b(?:created_by|createdBy|updated_by|updatedBy)\s*[:\(]/i.test(content);
-            if (/\b(?:model|schema|entity|table)\b.*\{/i.test(content) || /\bCREATE\s+TABLE\b/i.test(content)) {
-                if (!hasTimestamps) {
-                    findings.push({
-                        ruleId: "DB-001",
-                        severity: "high",
-                        category: "database",
-                        title: "Missing audit timestamps in schema",
-                        description: "Database schema does not include created_at/updated_at timestamps. These are mandatory for audit trails.",
-                        file: filePath,
-                        evidence: "No created_at/updated_at columns detected",
-                        controlIds: ["GDPR-ART32-006"],
-                        fix: "Add created_at and updated_at columns to all tables. In Prisma: @@map, in Sequelize: timestamps: true.",
-                    });
-                }
-                if (!hasSoftDelete) {
-                    findings.push({
-                        ruleId: "DB-002",
-                        severity: "medium",
-                        category: "database",
-                        title: "Missing soft delete pattern",
-                        description: "No deleted_at column or soft delete pattern found. Hard deletes prevent audit trail and data recovery.",
-                        file: filePath,
-                        evidence: "No deleted_at/softDelete pattern detected",
-                        controlIds: ["GDPR-ART32-007"],
-                        fix: "Add deleted_at column. In Prisma: add DeletedAt DateTime?, in Sequelize: paranoid: true.",
-                    });
-                }
-                if (!hasUserAudit) {
-                    findings.push({
-                        ruleId: "DB-003",
-                        severity: "medium",
-                        category: "database",
-                        title: "Missing user audit columns",
-                        description: "No created_by/updated_by columns found. Track who makes changes for accountability.",
-                        file: filePath,
-                        evidence: "No created_by/updated_by columns detected",
-                        controlIds: ["GDPR-ART32-006"],
-                        fix: "Add created_by and updated_by columns to track which user made changes.",
-                    });
-                }
+            const hasTimestamps = /\b(?:timestamps|created_at|createdAt|createdDate|date_created|timecreated|createdTime)\s*[:\(]/i.test(content);
+            const hasSoftDelete = /\b(?:deleted_at|deletedAt|softDelete|paranoid|is_deleted|isDeleted|deleted|active)\s*[:\(]/i.test(content);
+            const hasUserAudit = /\b(?:created_by|createdBy|updated_by|updatedBy|owner_id|author_id)\s*[:\(]/i.test(content);
+            const hasSchemaDef = /\b(?:model|schema|entity|table|struct|class)\b.*\{/i.test(content) ||
+                /\bCREATE\s+TABLE\b/i.test(content) ||
+                /@(?:Entity|Table|Schema)\b/.test(content);
+            if (!hasSchemaDef)
+                continue;
+            if (!hasTimestamps) {
+                findings.push({
+                    ruleId: "DB-001",
+                    severity: "high",
+                    category: "database",
+                    title: "Missing audit timestamps in schema",
+                    description: "Database schema does not include created_at/updated_at timestamps. These are mandatory for audit trails.",
+                    file: filePath,
+                    evidence: "No created_at/updated_at columns detected",
+                    controlIds: ["GDPR-ART32-006"],
+                    fix: "Add created_at and updated_at columns. In Prisma: add DateTime fields, in Sequelize: timestamps: true, in Django: auto_now_add=True.",
+                });
+            }
+            if (!hasSoftDelete) {
+                findings.push({
+                    ruleId: "DB-002",
+                    severity: "medium",
+                    category: "database",
+                    title: "Missing soft delete pattern",
+                    description: "No deleted_at column or soft delete pattern found. Hard deletes prevent audit trail and data recovery.",
+                    file: filePath,
+                    evidence: "No deleted_at/softDelete pattern detected",
+                    controlIds: ["GDPR-ART32-007"],
+                    fix: "Add deleted_at column or soft delete flag. In Prisma: DeletedAt DateTime?, in Sequelize: paranoid: true, in Django: SoftDeleteModel.",
+                });
+            }
+            if (!hasUserAudit) {
+                findings.push({
+                    ruleId: "DB-003",
+                    severity: "medium",
+                    category: "database",
+                    title: "Missing user audit columns",
+                    description: "No created_by/updated_by columns found. Track who makes changes for accountability.",
+                    file: filePath,
+                    evidence: "No created_by/updated_by columns detected",
+                    controlIds: ["GDPR-ART32-006"],
+                    fix: "Add created_by and updated_by columns to track which user made changes.",
+                });
             }
         }
     }

package/dist/scanners/types.d.ts

@@ -15,6 +15,7 @@ export interface ScanContext {
     files: string[];
     fileContents: Map<string, string>;
     config?: Record<string, unknown>;
+    isWebProject?: boolean;
 }
 export interface Scanner {
     name: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greenarmor/ges-audit-engine",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "type": "module",
   "description": "GESF Audit Engine - Audit trails and compliance evaluation",
   "main": "./dist/index.js",
@@ -12,7 +12,7 @@
     }
   },
   "dependencies": {
-    "@greenarmor/ges-core": "0.4.0"
+    "@greenarmor/ges-core": "0.5.1"
   },
   "devDependencies": {
     "typescript": "^6.0.0",