@methiu/raigal 0.2.0 → 0.2.3

package/dist/{finding-assessment-M5fUTE-C.js → finding-assessment-CGpt5YUR.js}

@@ -160,6 +160,9 @@ const RULE_SCORE_IMPACTS = {
 	"security/shell-injection": strict("Interpolated shell commands can become command execution."),
 	"security/unsafe-deserialization": strict("Deserializing untrusted data with a legacy .NET formatter can become remote code execution."),
 	"security/unsafe-c-call": strict("Unbounded C string and process calls can become buffer overflows or command execution."),
+	"security/prompt-injection": strict("Dynamic user interpolation in system/developer prompts enables prompt injection attacks."),
+	"security/unsandboxed-agent-tool": strict("Unsandboxed agent code execution or tool permission bypass allows arbitrary host commands."),
+	"security/invisible-unicode-tags": strict("Invisible Unicode Tag characters (U+E0000-U+E007F) hide stealth prompt injection payloads."),
 	"security/dependency-audit-skipped": advisory("An unavailable audit is visibility loss, not evidence of a vulnerability."),
 	"dotnet/projects-skipped": advisory("Skipping unrestored C# projects is visibility loss, not evidence of a defect."),
 	"cppcheck/chunks-skipped": advisory("A skipped cppcheck chunk is visibility loss, not evidence that the skipped files have a defect."),

package/dist/index.d.ts

@@ -70,11 +70,40 @@ declare const AislopConfigSchema: z.ZodObject<{
   telemetry: z.ZodDefault<z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
   }, z.core.$strict>>;
+  baseline: z.ZodOptional<z.ZodObject<{
+    mode: z.ZodDefault<z.ZodEnum<{
+      strict: "strict";
+      relaxed: "relaxed";
+    }>>;
+  }, z.core.$strict>>;
+  licensing: z.ZodOptional<z.ZodObject<{
+    onLapse: z.ZodDefault<z.ZodEnum<{
+      "fail-open": "fail-open";
+      "fail-closed": "fail-closed";
+    }>>;
+  }, z.core.$strict>>;
+  workspace: z.ZodOptional<z.ZodObject<{
+    minimumFloor: z.ZodDefault<z.ZodNumber>;
+  }, z.core.$strict>>;
   rules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
     error: "error";
     warning: "warning";
     off: "off";
   }>>>;
+  overrides: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    files: z.ZodArray<z.ZodString>;
+    quality: z.ZodOptional<z.ZodObject<{
+      maxFunctionLoc: z.ZodOptional<z.ZodNumber>;
+      maxFileLoc: z.ZodOptional<z.ZodNumber>;
+      maxNesting: z.ZodOptional<z.ZodNumber>;
+      maxParams: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    rules: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      error: "error";
+      warning: "warning";
+      off: "off";
+    }>>>;
+  }, z.core.$strip>>>;
   exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;
   include: z.ZodDefault<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
@@ -148,11 +177,40 @@ declare const RaigalConfigSchema: z.ZodObject<{
   telemetry: z.ZodDefault<z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
   }, z.core.$strict>>;
+  baseline: z.ZodOptional<z.ZodObject<{
+    mode: z.ZodDefault<z.ZodEnum<{
+      strict: "strict";
+      relaxed: "relaxed";
+    }>>;
+  }, z.core.$strict>>;
+  licensing: z.ZodOptional<z.ZodObject<{
+    onLapse: z.ZodDefault<z.ZodEnum<{
+      "fail-open": "fail-open";
+      "fail-closed": "fail-closed";
+    }>>;
+  }, z.core.$strict>>;
+  workspace: z.ZodOptional<z.ZodObject<{
+    minimumFloor: z.ZodDefault<z.ZodNumber>;
+  }, z.core.$strict>>;
   rules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
     error: "error";
     warning: "warning";
     off: "off";
   }>>>;
+  overrides: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    files: z.ZodArray<z.ZodString>;
+    quality: z.ZodOptional<z.ZodObject<{
+      maxFunctionLoc: z.ZodOptional<z.ZodNumber>;
+      maxFileLoc: z.ZodOptional<z.ZodNumber>;
+      maxNesting: z.ZodOptional<z.ZodNumber>;
+      maxParams: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    rules: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      error: "error";
+      warning: "warning";
+      off: "off";
+    }>>>;
+  }, z.core.$strip>>>;
   exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;
   include: z.ZodDefault<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
@@ -329,6 +387,7 @@ interface EngineResult {
   elapsed: number;
   skipped: boolean;
   skipReason?: string;
+  failed?: boolean;
 }
 //#endregion
 //#region src/commands/scan.d.ts