@lunora/advisor 1.0.0-alpha.19 → 1.0.0-alpha.20

package/dist/index.mjs

@@ -14,9 +14,9 @@ import authSecureCookiesDisabled from './packem_shared/authSecureCookiesDisabled
 import authSessionFreshageZero from './packem_shared/authSessionFreshageZero-CjufCc_Q.mjs';
 import authTrustedOriginsWildcard from './packem_shared/authTrustedOriginsWildcard-ylv4PKzC.mjs';
 import browserAllowPrivateTargets from './packem_shared/browserAllowPrivateTargets-CBvQxLAM.mjs';
-import browserUserUrlWithoutAllowlist from './packem_shared/browserUserUrlWithoutAllowlist-B5DrK72J.mjs';
+import browserUserUrlWithoutAllowlist from './packem_shared/browserUserUrlWithoutAllowlist-CvhA6w59.mjs';
 import circularFk from './packem_shared/circularFk-B2freHrP.mjs';
-import containerInstanceKeyFromUserInput from './packem_shared/containerInstanceKeyFromUserInput-DLl-jpex.mjs';
+import containerInstanceKeyFromUserInput from './packem_shared/containerInstanceKeyFromUserInput-BUXj2J4w.mjs';
 import containerOversizedInstance from './packem_shared/containerOversizedInstance-5U1VKPRM.mjs';
 import containerPublicInternet from './packem_shared/containerPublicInternet-CuNerJE5.mjs';
 import containerRuntimeEgressRelaxation from './packem_shared/containerRuntimeEgressRelaxation-B0LlfmDA.mjs';
@@ -30,10 +30,10 @@ import httpActionMissingAuthGuard from './packem_shared/httpActionMissingAuthGua
 import httpActionResponseHeaderInjection from './packem_shared/httpActionResponseHeaderInjection-DOFS7pFT.mjs';
 import hyperdriveOutsideAction from './packem_shared/hyperdriveOutsideAction-BgZqX7Xg.mjs';
 import identityUndeclaredClaimTrusted from './packem_shared/identityUndeclaredClaimTrusted-D8nXV2dd.mjs';
-import imagesUrlSourceFromUserInput from './packem_shared/imagesUrlSourceFromUserInput-BYq6I7VC.mjs';
-import indexReferencesUnknownField from './packem_shared/indexReferencesUnknownField-BfCCZfgW.mjs';
+import imagesUrlSourceFromUserInput from './packem_shared/imagesUrlSourceFromUserInput-YcDQ0b_Y.mjs';
+import indexReferencesUnknownField from './packem_shared/indexReferencesUnknownField-BSWNngxX.mjs';
 import insertManyUnsafeUserData from './packem_shared/insertManyUnsafeUserData-Dn77XpmX.mjs';
-import kvUnscopedUserKeyIdor from './packem_shared/kvUnscopedUserKeyIdor-wOv1sRL8.mjs';
+import kvUnscopedUserKeyIdor from './packem_shared/kvUnscopedUserKeyIdor-YWwmfE8X.mjs';
 import mailInboundDispatchWithoutVerify from './packem_shared/mailInboundDispatchWithoutVerify-CHSRA8zz.mjs';
 import mailRecipientFromRequestInput from './packem_shared/mailRecipientFromRequestInput-Cka2qu5J.mjs';
 import maskUncoveredPiiColumn from './packem_shared/maskUncoveredPiiColumn-DjGIPG6M.mjs';
@@ -42,7 +42,7 @@ import maskedRelationLeakViaWith from './packem_shared/maskedRelationLeakViaWith
 import mutatorFullRowReplace from './packem_shared/mutatorFullRowReplace-BJnNDaIV.mjs';
 import nondeterministicQueryMutation from './packem_shared/nondeterministicQueryMutation-GXES1fLp.mjs';
 import normalizeIdUsedAsAuthorization from './packem_shared/normalizeIdUsedAsAuthorization-BVPtCpzT.mjs';
-import outputProjectionMissingOnPublicRead from './packem_shared/outputProjectionMissingOnPublicRead-Cjd885DW.mjs';
+import outputProjectionMissingOnPublicRead from './packem_shared/outputProjectionMissingOnPublicRead-Bl5IMx0k.mjs';
 import ownerFieldFromArgsNotAuth from './packem_shared/ownerFieldFromArgsNotAuth-mOw3hE5z.mjs';
 import paymentCreateWithoutAuthorize from './packem_shared/paymentCreateWithoutAuthorize-BYm4JLxo.mjs';
 import paymentWebhookWideTolerance from './packem_shared/paymentWebhookWideTolerance-D9QQJMJq.mjs';
@@ -51,14 +51,14 @@ import policyReferencesUnknownTable from './packem_shared/policyReferencesUnknow
 import privilegedDispatchUnvalidatedPayload from './packem_shared/privilegedDispatchUnvalidatedPayload-5Forjckt.mjs';
 import privilegedFanoutFromPublicProcedure from './packem_shared/privilegedFanoutFromPublicProcedure-D3dL01B8.mjs';
 import publicArgumentUsesAny from './packem_shared/publicArgumentUsesAny-C71b2NCf.mjs';
-import publicMutationWithoutRatelimit from './packem_shared/publicMutationWithoutRatelimit-xBpJ6GWK.mjs';
-import publicTableRlsOptoutConfusion from './packem_shared/publicTableRlsOptoutConfusion-DJ5GFSRD.mjs';
+import publicMutationWithoutRatelimit from './packem_shared/publicMutationWithoutRatelimit-DbIhgi7j.mjs';
+import publicTableRlsOptoutConfusion from './packem_shared/publicTableRlsOptoutConfusion-Bn71yoD4.mjs';
 import queueWithoutDlq from './packem_shared/queueWithoutDlq-CSkGNb_0.mjs';
 import r2sqlOutsideAction from './packem_shared/r2sqlOutsideAction-CtqxvMuV.mjs';
 import ratelimitDefaultMemoryStore from './packem_shared/ratelimitDefaultMemoryStore-BISChG5C.mjs';
 import ratelimitKeySpoofableOrGlobal from './packem_shared/ratelimitKeySpoofableOrGlobal-DqlHYQQ3.mjs';
 import ratelimitMiddlewareFailOpen from './packem_shared/ratelimitMiddlewareFailOpen-CJgDCaUw.mjs';
-import relationReferencesUnknownField from './packem_shared/relationReferencesUnknownField-D4hckqi8.mjs';
+import relationReferencesUnknownField from './packem_shared/relationReferencesUnknownField-CjbLScJ1.mjs';
 import relationReferencesUnknownTable from './packem_shared/relationReferencesUnknownTable-DrorpKYe.mjs';
 import rlsUncoveredTable from './packem_shared/rlsUncoveredTable-CxEfZ5eZ.mjs';
 import shapeTargetsGlobalTable from './packem_shared/shapeTargetsGlobalTable-DHrf4Koi.mjs';
@@ -66,7 +66,7 @@ import shapeUnknownTable from './packem_shared/shapeUnknownTable-C8aDWFoe.mjs';
 import softDeleteIncludeDeletedFromArgs from './packem_shared/softDeleteIncludeDeletedFromArgs-BLqDKrkM.mjs';
 import sqlInjectionRisk from './packem_shared/sqlInjectionRisk-zwytYGLt.mjs';
 import storageGenerateUploadUrlNoContentTypePin from './packem_shared/storageGenerateUploadUrlNoContentTypePin-Da4L9Ge8.mjs';
-import storageKeyFromUserArgs from './packem_shared/storageKeyFromUserArgs-B7k0iiGb.mjs';
+import storageKeyFromUserArgs from './packem_shared/storageKeyFromUserArgs-B86elJgS.mjs';
 import storagePresignedUrlForPrivateContent from './packem_shared/storagePresignedUrlForPrivateContent-yGmb8uqz.mjs';
 import storageUploadWithoutContentTypeAllowlist from './packem_shared/storageUploadWithoutContentTypeAllowlist-BV-gF1lT.mjs';
 import storageUploadWithoutMaxSize from './packem_shared/storageUploadWithoutMaxSize-DpxO59wU.mjs';
@@ -74,8 +74,8 @@ import tableWithoutInsert from './packem_shared/tableWithoutInsert-CbbaYIP4.mjs'
 import unboundedStringArgument from './packem_shared/unboundedStringArgument-DThg2-wt.mjs';
 import unindexedForeignKey from './packem_shared/unindexedForeignKey-BgJbKyqK.mjs';
 import unindexedRelationTarget from './packem_shared/unindexedRelationTarget-D6eyj6Xx.mjs';
-import userCreatingMutationWithoutCaptcha from './packem_shared/userCreatingMutationWithoutCaptcha-CH31YsUZ.mjs';
-import vectorsNamespaceFromUserInput from './packem_shared/vectorsNamespaceFromUserInput-CCSl5SYq.mjs';
+import userCreatingMutationWithoutCaptcha from './packem_shared/userCreatingMutationWithoutCaptcha-2DZtWIPb.mjs';
+import vectorsNamespaceFromUserInput from './packem_shared/vectorsNamespaceFromUserInput-CQhr5bVn.mjs';
 import workflowDuplicateStepName from './packem_shared/workflowDuplicateStepName-ioBxPBCy.mjs';
 import workflowUnknownTarget from './packem_shared/workflowUnknownTarget-Cdd7WhKQ.mjs';
 import workflowUnused from './packem_shared/workflowUnused-D0jHxdz9.mjs';

package/dist/packem_shared/argument-derived-sink-C1xTTqAt.mjs

@@ -0,0 +1,30 @@
+import { e as emit } from './finding-Dm_zvzS1.mjs';
+
+const makeArgumentDerivedSinkLint = (config) => {
+  const lint = {
+    categories: config.categories,
+    description: config.description,
+    facing: config.facing,
+    level: config.level,
+    name: config.name,
+    remediation: config.remediation,
+    run: (context) => {
+      const accesses = config.getAccesses(context);
+      if (accesses === void 0 || config.suppressWhen?.(context) === true) {
+        return [];
+      }
+      return accesses.map(
+        (access) => emit(lint, {
+          cacheKey: config.cacheKey(access),
+          detail: config.detail(access),
+          metadata: config.metadata(access)
+        })
+      );
+    },
+    source: "static",
+    title: config.title
+  };
+  return lint;
+};
+
+export { makeArgumentDerivedSinkLint as m };

package/dist/packem_shared/browserUserUrlWithoutAllowlist-CvhA6w59.mjs

@@ -0,0 +1,26 @@
+import { m as makeArgumentDerivedSinkLint } from './argument-derived-sink-C1xTTqAt.mjs';
+
+const browserUserUrlWithoutAllowlist = makeArgumentDerivedSinkLint({
+  cacheKey: (access) => `browser_user_url_without_allowlist:${access.file}:${access.line.toString()}`,
+  categories: ["SECURITY"],
+  description: "A `ctx.browser.<method>(url, …)` call navigates to a URL derived from the handler's `args` with no server-side scoping, and no `createBrowser` allowlist contains it. The default guard blocks private targets but not arbitrary public URLs, so any caller can make the headless browser an open-proxy / SSRF tool (fetch arbitrary third-party URLs, DNS-rebind to internal hosts).",
+  detail: (access) => `\`ctx.browser.${access.method}\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) navigates to a URL derived from \`args\` with no server-side scoping, and no \`createBrowser\` allowlist contains it — the default guard blocks private targets but not arbitrary public URLs, so any caller can turn the headless browser into an open-proxy / SSRF tool. Pin \`allowedHosts\` (and/or \`resolveDns\`) on \`createBrowser({...})\`, and derive the URL from server-trusted state where possible.`,
+  facing: "EXTERNAL",
+  getAccesses: (context) => context.browserUrlAccesses,
+  level: "WARN",
+  metadata: (access) => {
+    return { exportName: access.exportName, file: access.file, line: access.line, method: access.method };
+  },
+  name: "browser_user_url_without_allowlist",
+  remediation: "Pin the browser with an `allowedHosts` allowlist (and/or `resolveDns`) on `createBrowser({...})`, and derive the navigation URL from server-trusted state where possible rather than passing `args` straight to `ctx.browser`.",
+  // A `createBrowser` hardened with an `allowedHosts` allowlist or a pinned
+  // `resolveDns` contains the SSRF surface — suppress every finding when one is
+  // visible. Only an analyzable (non-spread, static object-literal) config call
+  // counts; an opaque config could set the key elsewhere but can't be relied on.
+  suppressWhen: (context) => (context.configCalls ?? []).some(
+    (call) => call.callee === "createBrowser" && call.analyzable && (call.presentKeys.includes("allowedHosts") || call.presentKeys.includes("resolveDns"))
+  ),
+  title: "Browser navigates to arg-derived URL with no allowlist"
+});
+
+export { browserUserUrlWithoutAllowlist as default };

package/dist/packem_shared/containerInstanceKeyFromUserInput-BUXj2J4w.mjs

@@ -0,0 +1,19 @@
+import { m as makeArgumentDerivedSinkLint } from './argument-derived-sink-C1xTTqAt.mjs';
+
+const containerInstanceKeyFromUserInput = makeArgumentDerivedSinkLint({
+  cacheKey: (access) => `container_instance_key_from_user_input:${access.file}:${access.line.toString()}`,
+  categories: ["SECURITY"],
+  description: "A `ctx.containers.<name>.get` call routes to a container instance using a key derived from the handler's `args` with no server-side scoping. Any caller can supply another tenant's key and reach that tenant's container instance — a cross-tenant insecure direct object reference (IDOR).",
+  detail: (access) => `\`ctx.containers.*.${access.method}\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) routes to a container instance using a key derived from \`args\` with no server-side scoping — any caller can reach another tenant's container (IDOR). Derive the key from a server-trusted identity (e.g. \`\${ctx.auth.userId}\`).`,
+  facing: "EXTERNAL",
+  getAccesses: (context) => context.containerKeyAccesses,
+  level: "WARN",
+  metadata: (access) => {
+    return { exportName: access.exportName, file: access.file, line: access.line, method: access.method };
+  },
+  name: "container_instance_key_from_user_input",
+  remediation: `Derive the container instance key from a server-trusted identity (e.g. \`\${ctx.auth.userId}\`) or a record the caller owns — never pass request input straight to \`ctx.containers.<name>.get\`.`,
+  title: "Possible cross-tenant IDOR from arg-derived unscoped container key"
+});
+
+export { containerInstanceKeyFromUserInput as default };

package/dist/packem_shared/{helpers-BhGmRI2n.mjs → helpers-BySnKhVB.mjs}

@@ -26,5 +26,6 @@ const PII_FIELD_NAMES = /* @__PURE__ */ new Set([
 const SYSTEM_FIELDS = /* @__PURE__ */ new Set(["_creationTime", "_id"]);
 const ownershipOrPiiColumns = (table) => table.fields.filter((field) => OWNERSHIP_FIELD_NAMES.has(field) || PII_FIELD_NAMES.has(field));
 const tableColumnSet = (table) => /* @__PURE__ */ new Set([...SYSTEM_FIELDS, ...table.fields]);
+const isPublicWrite = (procedure) => procedure.visibility === "public" && (procedure.kind === "mutation" || procedure.kind === "action");
 
-export { PII_FIELD_NAMES as P, ownershipOrPiiColumns as o, tableColumnSet as t };
+export { PII_FIELD_NAMES as P, isPublicWrite as i, ownershipOrPiiColumns as o, tableColumnSet as t };

package/dist/packem_shared/imagesUrlSourceFromUserInput-YcDQ0b_Y.mjs

@@ -0,0 +1,19 @@
+import { m as makeArgumentDerivedSinkLint } from './argument-derived-sink-C1xTTqAt.mjs';
+
+const imagesUrlSourceFromUserInput = makeArgumentDerivedSinkLint({
+  cacheKey: (access) => `images_url_source_from_user_input:${access.file}:${access.line.toString()}`,
+  categories: ["SECURITY"],
+  description: "A `buildImageDeliveryUrl({ key, … })` call's `key` — the CDN transform's source image, an absolute URL or an origin-relative key — is derived from the handler's `args` with no server-side scoping, so any caller can point the CDN's on-the-fly transform at an attacker-chosen origin (SSRF / open proxy) or an arbitrary key under the account's own store.",
+  detail: (access) => `\`buildImageDeliveryUrl\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) builds its delivery URL from a \`key\` derived from \`args\` with no server-side scoping — any caller can point the CDN's on-the-fly transform at an attacker-chosen origin or store key. Validate \`key\` against an allowlist, or derive it from server-trusted state.`,
+  facing: "EXTERNAL",
+  getAccesses: (context) => context.imageDeliveryUrlAccesses,
+  level: "WARN",
+  metadata: (access) => {
+    return { exportName: access.exportName, file: access.file, line: access.line };
+  },
+  name: "images_url_source_from_user_input",
+  remediation: "Validate `key` against an allowlist of known origins/prefixes before calling `buildImageDeliveryUrl`, or derive it from server-trusted state (a stored record's own image key) rather than passing `args` straight through.",
+  title: "Image delivery URL built from unscoped user input"
+});
+
+export { imagesUrlSourceFromUserInput as default };

package/dist/packem_shared/{indexReferencesUnknownField-BfCCZfgW.mjs → indexReferencesUnknownField-BSWNngxX.mjs}

@@ -1,5 +1,5 @@
 import { e as emit } from './finding-Dm_zvzS1.mjs';
-import { t as tableColumnSet } from './helpers-BhGmRI2n.mjs';
+import { t as tableColumnSet } from './helpers-BySnKhVB.mjs';
 
 const indexReferencesUnknownField = {
   categories: ["SCHEMA"],

package/dist/packem_shared/kvUnscopedUserKeyIdor-YWwmfE8X.mjs

@@ -0,0 +1,19 @@
+import { m as makeArgumentDerivedSinkLint } from './argument-derived-sink-C1xTTqAt.mjs';
+
+const kvUnscopedUserKeyIdor = makeArgumentDerivedSinkLint({
+  cacheKey: (access) => `kv_unscoped_user_key_idor:${access.file}:${access.line.toString()}`,
+  categories: ["SECURITY"],
+  description: "A `ctx.kv` read/write uses a namespace key derived from the handler's `args` with no server-side scoping. Workers KV is a flat namespace, so an unscoped key lets any caller read, overwrite, or delete another user's entry — an insecure direct object reference (IDOR).",
+  detail: (access) => `\`ctx.kv.${access.method}\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) uses a KV key derived from \`args\` with no server-side scoping — any caller can read/overwrite/delete another user's entry (IDOR). Prefix the key with a server-trusted identity (e.g. \`\${ctx.auth.userId}:…\`).`,
+  facing: "EXTERNAL",
+  getAccesses: (context) => context.kvKeyAccesses,
+  level: "ERROR",
+  metadata: (access) => {
+    return { exportName: access.exportName, file: access.file, line: access.line, method: access.method };
+  },
+  name: "kv_unscoped_user_key_idor",
+  remediation: `Prefix every \`ctx.kv\` key with a server-trusted identity (e.g. \`\${ctx.auth.userId}:\${args.id}\`) so a caller can only address their own entries. Never pass request input straight to \`ctx.kv.get\`/\`put\`/\`delete\`.`,
+  title: "Possible IDOR from arg-derived unscoped KV key"
+});
+
+export { kvUnscopedUserKeyIdor as default };

package/dist/packem_shared/{outputProjectionMissingOnPublicRead-Cjd885DW.mjs → outputProjectionMissingOnPublicRead-Bl5IMx0k.mjs}

@@ -1,5 +1,5 @@
 import { e as emit } from './finding-Dm_zvzS1.mjs';
-import { P as PII_FIELD_NAMES } from './helpers-BhGmRI2n.mjs';
+import { P as PII_FIELD_NAMES } from './helpers-BySnKhVB.mjs';
 
 const outputProjectionMissingOnPublicRead = {
   categories: ["SECURITY"],

package/dist/packem_shared/{publicMutationWithoutRatelimit-xBpJ6GWK.mjs → publicMutationWithoutRatelimit-DbIhgi7j.mjs}

@@ -1,4 +1,5 @@
 import { e as emit } from './finding-Dm_zvzS1.mjs';
+import { i as isPublicWrite } from './helpers-BySnKhVB.mjs';
 
 const SENSITIVE_NAME_RE = /contact|forgot|login|magic|otp|register|reset|signin|signup|subscribe|verify/iu;
 const publicMutationWithoutRatelimit = {
@@ -14,8 +15,7 @@ const publicMutationWithoutRatelimit = {
     }
     const findings = [];
     for (const procedure of context.procedureProtections) {
-      const isPublicWrite = procedure.visibility === "public" && (procedure.kind === "mutation" || procedure.kind === "action");
-      if (!isPublicWrite || procedure.usesRateLimit) {
+      if (!isPublicWrite(procedure) || procedure.usesRateLimit) {
         continue;
       }
       const sensitive = SENSITIVE_NAME_RE.test(procedure.exportName);

package/dist/packem_shared/{publicTableRlsOptoutConfusion-DJ5GFSRD.mjs → publicTableRlsOptoutConfusion-Bn71yoD4.mjs}

@@ -1,5 +1,5 @@
 import { e as emit } from './finding-Dm_zvzS1.mjs';
-import { o as ownershipOrPiiColumns } from './helpers-BhGmRI2n.mjs';
+import { o as ownershipOrPiiColumns } from './helpers-BySnKhVB.mjs';
 
 const publicTableRlsOptoutConfusion = {
   categories: ["SECURITY"],

package/dist/packem_shared/{relationReferencesUnknownField-D4hckqi8.mjs → relationReferencesUnknownField-CjbLScJ1.mjs}

@@ -1,5 +1,5 @@
 import { e as emit } from './finding-Dm_zvzS1.mjs';
-import { t as tableColumnSet } from './helpers-BhGmRI2n.mjs';
+import { t as tableColumnSet } from './helpers-BySnKhVB.mjs';
 
 const missingColumns = (byName, columnsOf, holder, relation) => {
   const target = byName.get(relation.table);

package/dist/packem_shared/storageKeyFromUserArgs-B86elJgS.mjs

@@ -0,0 +1,19 @@
+import { m as makeArgumentDerivedSinkLint } from './argument-derived-sink-C1xTTqAt.mjs';
+
+const storageKeyFromUserArgs = makeArgumentDerivedSinkLint({
+  cacheKey: (access) => `storage_key_from_user_args:${access.file}:${access.line.toString()}`,
+  categories: ["SECURITY"],
+  description: "A `ctx.storage.*` call uses an R2 object key taken directly from the handler's `args` with no server-side scoping. The bucket methods key by the caller-supplied string, so any caller can read, overwrite, or delete another user's object — object-level IDOR.",
+  detail: (access) => `\`ctx.storage.*.${access.method}\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) uses an object key derived from \`args\` with no server-side scoping — any caller can read/overwrite/delete another user's object (IDOR). Prefix the key with a server-trusted identity (e.g. \`\${ctx.auth.userId}/…\`) or resolve the object through an owned record.`,
+  facing: "EXTERNAL",
+  getAccesses: (context) => context.storageKeyAccesses,
+  level: "ERROR",
+  metadata: (access) => {
+    return { exportName: access.exportName, file: access.file, line: access.line, method: access.method };
+  },
+  name: "storage_key_from_user_args",
+  remediation: `Prefix the object key with a server-trusted identity (e.g. \`\${ctx.auth.userId}/…\`) or resolve the object through a record the caller is known to own. Never pass request input straight through as an R2 object key.`,
+  title: "R2 object key taken directly from user args (IDOR)"
+});
+
+export { storageKeyFromUserArgs as default };

package/dist/packem_shared/{userCreatingMutationWithoutCaptcha-CH31YsUZ.mjs → userCreatingMutationWithoutCaptcha-2DZtWIPb.mjs}

@@ -1,4 +1,5 @@
 import { e as emit } from './finding-Dm_zvzS1.mjs';
+import { i as isPublicWrite } from './helpers-BySnKhVB.mjs';
 
 const userCreatingMutationWithoutCaptcha = {
   categories: ["SECURITY"],
@@ -13,9 +14,8 @@ const userCreatingMutationWithoutCaptcha = {
     }
     const findings = [];
     for (const procedure of context.procedureProtections) {
-      const isPublicWrite = procedure.visibility === "public" && (procedure.kind === "mutation" || procedure.kind === "action");
       const sensitive = procedure.writesUserTable || procedure.callsMail;
-      if (!isPublicWrite || !sensitive || procedure.usesCaptcha) {
+      if (!isPublicWrite(procedure) || !sensitive || procedure.usesCaptcha) {
         continue;
       }
       const reason = procedure.writesUserTable ? "writes a user/session table" : "sends mail";

package/dist/packem_shared/vectorsNamespaceFromUserInput-CQhr5bVn.mjs

@@ -0,0 +1,19 @@
+import { m as makeArgumentDerivedSinkLint } from './argument-derived-sink-C1xTTqAt.mjs';
+
+const vectorsNamespaceFromUserInput = makeArgumentDerivedSinkLint({
+  cacheKey: (access) => `vectors_namespace_from_user_input:${access.file}:${access.line.toString()}`,
+  categories: ["SECURITY"],
+  description: "A `ctx.vectors.query`/`upsert`/`upsertMany` call uses a `namespace` derived from the handler's `args` with no server-side scoping. A Vectorize namespace partitions one index into isolated sub-collections, so an unscoped namespace lets any caller read or poison another tenant's vectors.",
+  detail: (access) => `\`ctx.vectors.${access.method}\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) uses a Vectorize namespace derived from \`args\` with no server-side scoping — any caller can read or poison another tenant's vectors. Derive the namespace from a server-trusted identity (e.g. \`\${ctx.auth.orgId}\`), never from \`args\`.`,
+  facing: "EXTERNAL",
+  getAccesses: (context) => context.vectorNamespaceAccesses,
+  level: "WARN",
+  metadata: (access) => {
+    return { exportName: access.exportName, file: access.file, line: access.line, method: access.method };
+  },
+  name: "vectors_namespace_from_user_input",
+  remediation: `Derive the \`namespace\` from a server-trusted identity (e.g. \`\${ctx.auth.orgId}\`), never from \`args\`.`,
+  title: "Vectorize namespace derived from unscoped user input"
+});
+
+export { vectorsNamespaceFromUserInput as default };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/advisor",
-  "version": "1.0.0-alpha.19",
+  "version": "1.0.0-alpha.20",
   "description": "Schema & query lints (splinter-style advisors) for Lunora, feeding the Studio Advisors view",
   "keywords": [
     "advisor",
@@ -46,8 +46,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.1",
-    "@lunora/server": "1.0.0-alpha.16"
+    "@lunora/errors": "1.0.0-alpha.2",
+    "@lunora/server": "1.0.0-alpha.17"
   },
   "engines": {
     "node": "^22.15.0 || >=24.11.0"

package/dist/packem_shared/browserUserUrlWithoutAllowlist-B5DrK72J.mjs

@@ -1,32 +0,0 @@
-import { e as emit } from './finding-Dm_zvzS1.mjs';
-
-const browserUserUrlWithoutAllowlist = {
-  categories: ["SECURITY"],
-  description: "A `ctx.browser.<method>(url, …)` call navigates to a URL derived from the handler's `args` with no server-side scoping, and no `createBrowser` allowlist contains it. The default guard blocks private targets but not arbitrary public URLs, so any caller can make the headless browser an open-proxy / SSRF tool (fetch arbitrary third-party URLs, DNS-rebind to internal hosts).",
-  facing: "EXTERNAL",
-  level: "WARN",
-  name: "browser_user_url_without_allowlist",
-  remediation: "Pin the browser with an `allowedHosts` allowlist (and/or `resolveDns`) on `createBrowser({...})`, and derive the navigation URL from server-trusted state where possible rather than passing `args` straight to `ctx.browser`.",
-  run: (context) => {
-    if (context.browserUrlAccesses === void 0) {
-      return [];
-    }
-    const hardened = (context.configCalls ?? []).some(
-      (call) => call.callee === "createBrowser" && call.analyzable && (call.presentKeys.includes("allowedHosts") || call.presentKeys.includes("resolveDns"))
-    );
-    if (hardened) {
-      return [];
-    }
-    return context.browserUrlAccesses.map(
-      (access) => emit(browserUserUrlWithoutAllowlist, {
-        cacheKey: `browser_user_url_without_allowlist:${access.file}:${access.line.toString()}`,
-        detail: `\`ctx.browser.${access.method}\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) navigates to a URL derived from \`args\` with no server-side scoping, and no \`createBrowser\` allowlist contains it — the default guard blocks private targets but not arbitrary public URLs, so any caller can turn the headless browser into an open-proxy / SSRF tool. Pin \`allowedHosts\` (and/or \`resolveDns\`) on \`createBrowser({...})\`, and derive the URL from server-trusted state where possible.`,
-        metadata: { exportName: access.exportName, file: access.file, line: access.line, method: access.method }
-      })
-    );
-  },
-  source: "static",
-  title: "Browser navigates to arg-derived URL with no allowlist"
-};
-
-export { browserUserUrlWithoutAllowlist as default };

package/dist/packem_shared/containerInstanceKeyFromUserInput-DLl-jpex.mjs

@@ -1,26 +0,0 @@
-import { e as emit } from './finding-Dm_zvzS1.mjs';
-
-const containerInstanceKeyFromUserInput = {
-  categories: ["SECURITY"],
-  description: "A `ctx.containers.<name>.get` call routes to a container instance using a key derived from the handler's `args` with no server-side scoping. Any caller can supply another tenant's key and reach that tenant's container instance — a cross-tenant insecure direct object reference (IDOR).",
-  facing: "EXTERNAL",
-  level: "WARN",
-  name: "container_instance_key_from_user_input",
-  remediation: `Derive the container instance key from a server-trusted identity (e.g. \`\${ctx.auth.userId}\`) or a record the caller owns — never pass request input straight to \`ctx.containers.<name>.get\`.`,
-  run: (context) => {
-    if (context.containerKeyAccesses === void 0) {
-      return [];
-    }
-    return context.containerKeyAccesses.map(
-      (access) => emit(containerInstanceKeyFromUserInput, {
-        cacheKey: `container_instance_key_from_user_input:${access.file}:${access.line.toString()}`,
-        detail: `\`ctx.containers.*.${access.method}\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) routes to a container instance using a key derived from \`args\` with no server-side scoping — any caller can reach another tenant's container (IDOR). Derive the key from a server-trusted identity (e.g. \`\${ctx.auth.userId}\`).`,
-        metadata: { exportName: access.exportName, file: access.file, line: access.line, method: access.method }
-      })
-    );
-  },
-  source: "static",
-  title: "Possible cross-tenant IDOR from arg-derived unscoped container key"
-};
-
-export { containerInstanceKeyFromUserInput as default };

package/dist/packem_shared/imagesUrlSourceFromUserInput-BYq6I7VC.mjs

@@ -1,26 +0,0 @@
-import { e as emit } from './finding-Dm_zvzS1.mjs';
-
-const imagesUrlSourceFromUserInput = {
-  categories: ["SECURITY"],
-  description: "A `buildImageDeliveryUrl({ key, … })` call's `key` — the CDN transform's source image, an absolute URL or an origin-relative key — is derived from the handler's `args` with no server-side scoping, so any caller can point the CDN's on-the-fly transform at an attacker-chosen origin (SSRF / open proxy) or an arbitrary key under the account's own store.",
-  facing: "EXTERNAL",
-  level: "WARN",
-  name: "images_url_source_from_user_input",
-  remediation: "Validate `key` against an allowlist of known origins/prefixes before calling `buildImageDeliveryUrl`, or derive it from server-trusted state (a stored record's own image key) rather than passing `args` straight through.",
-  run: (context) => {
-    if (context.imageDeliveryUrlAccesses === void 0) {
-      return [];
-    }
-    return context.imageDeliveryUrlAccesses.map(
-      (access) => emit(imagesUrlSourceFromUserInput, {
-        cacheKey: `images_url_source_from_user_input:${access.file}:${access.line.toString()}`,
-        detail: `\`buildImageDeliveryUrl\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) builds its delivery URL from a \`key\` derived from \`args\` with no server-side scoping — any caller can point the CDN's on-the-fly transform at an attacker-chosen origin or store key. Validate \`key\` against an allowlist, or derive it from server-trusted state.`,
-        metadata: { exportName: access.exportName, file: access.file, line: access.line }
-      })
-    );
-  },
-  source: "static",
-  title: "Image delivery URL built from unscoped user input"
-};
-
-export { imagesUrlSourceFromUserInput as default };

package/dist/packem_shared/kvUnscopedUserKeyIdor-wOv1sRL8.mjs

@@ -1,26 +0,0 @@
-import { e as emit } from './finding-Dm_zvzS1.mjs';
-
-const kvUnscopedUserKeyIdor = {
-  categories: ["SECURITY"],
-  description: "A `ctx.kv` read/write uses a namespace key derived from the handler's `args` with no server-side scoping. Workers KV is a flat namespace, so an unscoped key lets any caller read, overwrite, or delete another user's entry — an insecure direct object reference (IDOR).",
-  facing: "EXTERNAL",
-  level: "ERROR",
-  name: "kv_unscoped_user_key_idor",
-  remediation: `Prefix every \`ctx.kv\` key with a server-trusted identity (e.g. \`\${ctx.auth.userId}:\${args.id}\`) so a caller can only address their own entries. Never pass request input straight to \`ctx.kv.get\`/\`put\`/\`delete\`.`,
-  run: (context) => {
-    if (context.kvKeyAccesses === void 0) {
-      return [];
-    }
-    return context.kvKeyAccesses.map(
-      (access) => emit(kvUnscopedUserKeyIdor, {
-        cacheKey: `kv_unscoped_user_key_idor:${access.file}:${access.line.toString()}`,
-        detail: `\`ctx.kv.${access.method}\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) uses a KV key derived from \`args\` with no server-side scoping — any caller can read/overwrite/delete another user's entry (IDOR). Prefix the key with a server-trusted identity (e.g. \`\${ctx.auth.userId}:…\`).`,
-        metadata: { exportName: access.exportName, file: access.file, line: access.line, method: access.method }
-      })
-    );
-  },
-  source: "static",
-  title: "Possible IDOR from arg-derived unscoped KV key"
-};
-
-export { kvUnscopedUserKeyIdor as default };

package/dist/packem_shared/storageKeyFromUserArgs-B7k0iiGb.mjs

@@ -1,26 +0,0 @@
-import { e as emit } from './finding-Dm_zvzS1.mjs';
-
-const storageKeyFromUserArgs = {
-  categories: ["SECURITY"],
-  description: "A `ctx.storage.*` call uses an R2 object key taken directly from the handler's `args` with no server-side scoping. The bucket methods key by the caller-supplied string, so any caller can read, overwrite, or delete another user's object — object-level IDOR.",
-  facing: "EXTERNAL",
-  level: "ERROR",
-  name: "storage_key_from_user_args",
-  remediation: `Prefix the object key with a server-trusted identity (e.g. \`\${ctx.auth.userId}/…\`) or resolve the object through a record the caller is known to own. Never pass request input straight through as an R2 object key.`,
-  run: (context) => {
-    if (context.storageKeyAccesses === void 0) {
-      return [];
-    }
-    return context.storageKeyAccesses.map(
-      (access) => emit(storageKeyFromUserArgs, {
-        cacheKey: `storage_key_from_user_args:${access.file}:${access.line.toString()}`,
-        detail: `\`ctx.storage.*.${access.method}\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) uses an object key derived from \`args\` with no server-side scoping — any caller can read/overwrite/delete another user's object (IDOR). Prefix the key with a server-trusted identity (e.g. \`\${ctx.auth.userId}/…\`) or resolve the object through an owned record.`,
-        metadata: { exportName: access.exportName, file: access.file, line: access.line, method: access.method }
-      })
-    );
-  },
-  source: "static",
-  title: "R2 object key taken directly from user args (IDOR)"
-};
-
-export { storageKeyFromUserArgs as default };

package/dist/packem_shared/vectorsNamespaceFromUserInput-CCSl5SYq.mjs

@@ -1,26 +0,0 @@
-import { e as emit } from './finding-Dm_zvzS1.mjs';
-
-const vectorsNamespaceFromUserInput = {
-  categories: ["SECURITY"],
-  description: "A `ctx.vectors.query`/`upsert`/`upsertMany` call uses a `namespace` derived from the handler's `args` with no server-side scoping. A Vectorize namespace partitions one index into isolated sub-collections, so an unscoped namespace lets any caller read or poison another tenant's vectors.",
-  facing: "EXTERNAL",
-  level: "WARN",
-  name: "vectors_namespace_from_user_input",
-  remediation: `Derive the \`namespace\` from a server-trusted identity (e.g. \`\${ctx.auth.orgId}\`), never from \`args\`.`,
-  run: (context) => {
-    if (context.vectorNamespaceAccesses === void 0) {
-      return [];
-    }
-    return context.vectorNamespaceAccesses.map(
-      (access) => emit(vectorsNamespaceFromUserInput, {
-        cacheKey: `vectors_namespace_from_user_input:${access.file}:${access.line.toString()}`,
-        detail: `\`ctx.vectors.${access.method}\` in \`${access.exportName}\` (${access.file}:${access.line.toString()}) uses a Vectorize namespace derived from \`args\` with no server-side scoping — any caller can read or poison another tenant's vectors. Derive the namespace from a server-trusted identity (e.g. \`\${ctx.auth.orgId}\`), never from \`args\`.`,
-        metadata: { exportName: access.exportName, file: access.file, line: access.line, method: access.method }
-      })
-    );
-  },
-  source: "static",
-  title: "Vectorize namespace derived from unscoped user input"
-};
-
-export { vectorsNamespaceFromUserInput as default };