@nahisaho/musubix-core 1.0.0

package/dist/codegen/security-scanner.js

@@ -0,0 +1,495 @@
+/**
+ * Security Scanner
+ *
+ * Scans code for security vulnerabilities
+ *
+ * @packageDocumentation
+ * @module codegen/security-scanner
+ *
+ * @see REQ-COD-006 - Security Analysis
+ * @see Article VII - Security Standards
+ */
+/**
+ * Default configuration
+ */
+export const DEFAULT_SCANNER_CONFIG = {
+    severityThreshold: 'medium',
+    categories: [
+        'injection',
+        'xss',
+        'auth',
+        'crypto',
+        'sensitive-data',
+        'access-control',
+        'secrets',
+    ],
+    failOnFindings: true,
+    riskScoreThreshold: 70,
+};
+/**
+ * Built-in security rules
+ */
+const SECURITY_RULES = [
+    // Injection
+    {
+        id: 'sql-injection',
+        name: 'SQL Injection',
+        category: 'injection',
+        severity: 'critical',
+        description: 'Possible SQL injection vulnerability',
+        pattern: /(?:execute|query)\s*\(\s*[`'"].*\$\{|(?:execute|query)\s*\(\s*.*\+\s*(?:req\.|params\.|query\.)/gi,
+        cweId: 'CWE-89',
+        owasp: 'A03:2021',
+        remediation: 'Use parameterized queries or prepared statements',
+        enabled: true,
+    },
+    {
+        id: 'command-injection',
+        name: 'Command Injection',
+        category: 'injection',
+        severity: 'critical',
+        description: 'Possible command injection vulnerability',
+        pattern: /(?:exec|spawn|execSync|execFile)\s*\(\s*[`'"]?.*\$\{|(?:exec|spawn)\s*\(\s*.*\+/gi,
+        cweId: 'CWE-78',
+        owasp: 'A03:2021',
+        remediation: 'Avoid executing shell commands with user input. Use safe alternatives.',
+        enabled: true,
+    },
+    {
+        id: 'path-traversal',
+        name: 'Path Traversal',
+        category: 'injection',
+        severity: 'high',
+        description: 'Possible path traversal vulnerability',
+        pattern: /(?:readFile|writeFile|readdir|access|stat)\s*\(\s*(?:req\.|params\.|query\.|.*\+)/gi,
+        cweId: 'CWE-22',
+        owasp: 'A01:2021',
+        remediation: 'Validate and sanitize file paths. Use path.resolve() and verify within allowed directory.',
+        enabled: true,
+    },
+    // XSS
+    {
+        id: 'xss-innerhtml',
+        name: 'XSS via innerHTML',
+        category: 'xss',
+        severity: 'high',
+        description: 'Possible XSS vulnerability via innerHTML',
+        pattern: /\.innerHTML\s*=\s*(?!['"`])/gi,
+        cweId: 'CWE-79',
+        owasp: 'A03:2021',
+        remediation: 'Use textContent or sanitize HTML before setting innerHTML',
+        languages: ['javascript', 'typescript'],
+        enabled: true,
+    },
+    {
+        id: 'xss-dangerouslysetinnerhtml',
+        name: 'XSS via dangerouslySetInnerHTML',
+        category: 'xss',
+        severity: 'high',
+        description: 'Possible XSS via React dangerouslySetInnerHTML',
+        pattern: /dangerouslySetInnerHTML\s*=\s*\{\s*\{\s*__html\s*:/gi,
+        cweId: 'CWE-79',
+        owasp: 'A03:2021',
+        remediation: 'Sanitize HTML content before using dangerouslySetInnerHTML',
+        languages: ['javascript', 'typescript'],
+        enabled: true,
+    },
+    {
+        id: 'xss-document-write',
+        name: 'XSS via document.write',
+        category: 'xss',
+        severity: 'high',
+        description: 'Possible XSS via document.write',
+        pattern: /document\.write\s*\(/gi,
+        cweId: 'CWE-79',
+        owasp: 'A03:2021',
+        remediation: 'Avoid document.write. Use DOM manipulation methods instead.',
+        languages: ['javascript', 'typescript'],
+        enabled: true,
+    },
+    // Crypto
+    {
+        id: 'weak-hash-md5',
+        name: 'Weak Hash Algorithm (MD5)',
+        category: 'crypto',
+        severity: 'high',
+        description: 'Use of weak hash algorithm MD5',
+        pattern: /createHash\s*\(\s*['"]md5['"]\s*\)/gi,
+        cweId: 'CWE-328',
+        owasp: 'A02:2021',
+        remediation: 'Use stronger hash algorithms like SHA-256 or SHA-3',
+        enabled: true,
+    },
+    {
+        id: 'weak-hash-sha1',
+        name: 'Weak Hash Algorithm (SHA1)',
+        category: 'crypto',
+        severity: 'medium',
+        description: 'Use of weak hash algorithm SHA1',
+        pattern: /createHash\s*\(\s*['"]sha1['"]\s*\)/gi,
+        cweId: 'CWE-328',
+        owasp: 'A02:2021',
+        remediation: 'Use stronger hash algorithms like SHA-256 or SHA-3',
+        enabled: true,
+    },
+    {
+        id: 'weak-random',
+        name: 'Weak Random Number Generator',
+        category: 'crypto',
+        severity: 'medium',
+        description: 'Use of Math.random() for security-sensitive operations',
+        pattern: /Math\.random\s*\(\s*\)/gi,
+        cweId: 'CWE-338',
+        owasp: 'A02:2021',
+        remediation: 'Use crypto.randomBytes() or crypto.getRandomValues() for security purposes',
+        enabled: true,
+    },
+    {
+        id: 'hardcoded-iv',
+        name: 'Hardcoded IV',
+        category: 'crypto',
+        severity: 'high',
+        description: 'Hardcoded initialization vector in cryptographic operation',
+        pattern: /(?:createCipheriv|createDecipheriv)\s*\([^,]+,\s*[^,]+,\s*(?:Buffer\.from\s*\(\s*)?['"][^'"]+['"]/gi,
+        cweId: 'CWE-329',
+        owasp: 'A02:2021',
+        remediation: 'Generate a random IV for each encryption operation',
+        enabled: true,
+    },
+    // Sensitive Data
+    {
+        id: 'hardcoded-password',
+        name: 'Hardcoded Password',
+        category: 'secrets',
+        severity: 'critical',
+        description: 'Possible hardcoded password in code',
+        pattern: /(?:password|passwd|pwd|secret)\s*[=:]\s*['"][^'"]{4,}['"]/gi,
+        cweId: 'CWE-798',
+        owasp: 'A07:2021',
+        remediation: 'Store passwords in environment variables or secure secrets management',
+        enabled: true,
+    },
+    {
+        id: 'hardcoded-api-key',
+        name: 'Hardcoded API Key',
+        category: 'secrets',
+        severity: 'critical',
+        description: 'Possible hardcoded API key in code',
+        pattern: /(?:api[_-]?key|apikey|api[_-]?secret|auth[_-]?token)\s*[=:]\s*['"][^'"]{8,}['"]/gi,
+        cweId: 'CWE-798',
+        owasp: 'A07:2021',
+        remediation: 'Store API keys in environment variables or secure secrets management',
+        enabled: true,
+    },
+    {
+        id: 'aws-credentials',
+        name: 'AWS Credentials',
+        category: 'secrets',
+        severity: 'critical',
+        description: 'Possible AWS credentials in code',
+        pattern: /(?:AKIA[0-9A-Z]{16})|(?:aws[_-]?(?:access[_-]?key|secret)[_-]?(?:id)?)\s*[=:]\s*['"][^'"]+['"]/gi,
+        cweId: 'CWE-798',
+        owasp: 'A07:2021',
+        remediation: 'Use AWS IAM roles or environment variables for credentials',
+        enabled: true,
+    },
+    {
+        id: 'private-key',
+        name: 'Private Key Exposure',
+        category: 'secrets',
+        severity: 'critical',
+        description: 'Possible private key in code',
+        pattern: /-----BEGIN\s+(?:RSA\s+)?PRIVATE\s+KEY-----/gi,
+        cweId: 'CWE-321',
+        owasp: 'A07:2021',
+        remediation: 'Store private keys in secure key management systems',
+        enabled: true,
+    },
+    // Authentication
+    {
+        id: 'jwt-none-algorithm',
+        name: 'JWT None Algorithm',
+        category: 'auth',
+        severity: 'critical',
+        description: 'JWT with none algorithm allows token forgery',
+        pattern: /algorithm\s*[=:]\s*['"]none['"]/gi,
+        cweId: 'CWE-347',
+        owasp: 'A07:2021',
+        remediation: 'Always specify a secure algorithm like RS256 or HS256',
+        enabled: true,
+    },
+    {
+        id: 'jwt-weak-secret',
+        name: 'JWT Weak Secret',
+        category: 'auth',
+        severity: 'high',
+        description: 'JWT signed with potentially weak secret',
+        pattern: /jwt\.sign\s*\([^,]+,\s*['"][^'"]{1,15}['"]/gi,
+        cweId: 'CWE-326',
+        owasp: 'A07:2021',
+        remediation: 'Use a strong, random secret at least 256 bits long',
+        enabled: true,
+    },
+    {
+        id: 'basic-auth-header',
+        name: 'Basic Auth in Code',
+        category: 'auth',
+        severity: 'medium',
+        description: 'Hardcoded basic authentication credentials',
+        pattern: /Authorization['"]\s*[=:]\s*['"]Basic\s+[A-Za-z0-9+/=]+['"]/gi,
+        cweId: 'CWE-798',
+        owasp: 'A07:2021',
+        remediation: 'Use secure credential storage and avoid hardcoding auth headers',
+        enabled: true,
+    },
+    // Misconfiguration
+    {
+        id: 'cors-allow-all',
+        name: 'CORS Allow All Origins',
+        category: 'misconfiguration',
+        severity: 'medium',
+        description: 'CORS configured to allow all origins',
+        pattern: /(?:Access-Control-Allow-Origin|origin)\s*[=:]\s*['"][*]['"]/gi,
+        cweId: 'CWE-942',
+        owasp: 'A05:2021',
+        remediation: 'Restrict CORS to specific trusted origins',
+        enabled: true,
+    },
+    {
+        id: 'debug-mode',
+        name: 'Debug Mode Enabled',
+        category: 'misconfiguration',
+        severity: 'low',
+        description: 'Debug mode appears to be enabled',
+        pattern: /(?:debug|DEBUG)\s*[=:]\s*(?:true|1|['"]true['"])/gi,
+        cweId: 'CWE-489',
+        owasp: 'A05:2021',
+        remediation: 'Disable debug mode in production',
+        enabled: true,
+    },
+    {
+        id: 'disable-ssl-verify',
+        name: 'SSL Verification Disabled',
+        category: 'misconfiguration',
+        severity: 'high',
+        description: 'SSL certificate verification is disabled',
+        pattern: /(?:rejectUnauthorized|verify|strict[_-]?ssl)\s*[=:]\s*false/gi,
+        cweId: 'CWE-295',
+        owasp: 'A07:2021',
+        remediation: 'Enable SSL verification in production',
+        enabled: true,
+    },
+    // Access Control
+    {
+        id: 'insecure-redirect',
+        name: 'Insecure Redirect',
+        category: 'access-control',
+        severity: 'medium',
+        description: 'Possible open redirect vulnerability',
+        pattern: /(?:res\.redirect|location\.href|window\.location)\s*[=(]\s*(?:req\.|params\.|query\.)/gi,
+        cweId: 'CWE-601',
+        owasp: 'A01:2021',
+        remediation: 'Validate redirect URLs against a whitelist of allowed destinations',
+        enabled: true,
+    },
+    // Other
+    {
+        id: 'eval-usage',
+        name: 'Eval Usage',
+        category: 'injection',
+        severity: 'high',
+        description: 'Use of eval() is dangerous',
+        pattern: /\beval\s*\(/gi,
+        cweId: 'CWE-95',
+        owasp: 'A03:2021',
+        remediation: 'Avoid eval(). Use safer alternatives like JSON.parse()',
+        enabled: true,
+    },
+    {
+        id: 'new-function',
+        name: 'New Function Constructor',
+        category: 'injection',
+        severity: 'high',
+        description: 'Use of Function constructor is similar to eval()',
+        pattern: /new\s+Function\s*\(/gi,
+        cweId: 'CWE-95',
+        owasp: 'A03:2021',
+        remediation: 'Avoid new Function(). Use regular functions instead.',
+        enabled: true,
+    },
+];
+/**
+ * Security Scanner
+ */
+export class SecurityScanner {
+    config;
+    rules;
+    constructor(config) {
+        this.config = { ...DEFAULT_SCANNER_CONFIG, ...config };
+        this.rules = [...SECURITY_RULES];
+        if (this.config.customRules) {
+            this.rules.push(...this.config.customRules);
+        }
+    }
+    /**
+     * Scan code for vulnerabilities
+     */
+    scan(code, file, language = 'typescript') {
+        const startTime = Date.now();
+        const vulnerabilities = [];
+        for (const rule of this.rules) {
+            if (!rule.enabled)
+                continue;
+            if (!this.config.categories.includes(rule.category))
+                continue;
+            if (rule.languages && !rule.languages.includes(language))
+                continue;
+            const matches = this.findMatches(code, rule, file);
+            vulnerabilities.push(...matches);
+        }
+        // Filter by severity
+        const filtered = this.filterBySeverity(vulnerabilities);
+        const scanTime = Date.now() - startTime;
+        const summary = this.createSummary(filtered);
+        return {
+            file,
+            vulnerabilities: filtered,
+            scanTime,
+            summary,
+        };
+    }
+    /**
+     * Scan multiple files
+     */
+    scanFiles(files) {
+        return files.map((f) => this.scan(f.content, f.path, f.language));
+    }
+    /**
+     * Find pattern matches in code
+     */
+    findMatches(code, rule, file) {
+        const vulnerabilities = [];
+        const lines = code.split('\n');
+        let match;
+        // Reset regex lastIndex
+        rule.pattern.lastIndex = 0;
+        while ((match = rule.pattern.exec(code)) !== null) {
+            const line = code.substring(0, match.index).split('\n').length;
+            const lineContent = lines[line - 1] || '';
+            vulnerabilities.push({
+                id: `${file}:${line}:${rule.id}`,
+                ruleId: rule.id,
+                severity: rule.severity,
+                category: rule.category,
+                title: rule.name,
+                description: rule.description,
+                file,
+                line,
+                snippet: lineContent.trim().substring(0, 100),
+                cweId: rule.cweId,
+                owasp: rule.owasp,
+                remediation: rule.remediation,
+            });
+        }
+        return vulnerabilities;
+    }
+    /**
+     * Filter vulnerabilities by severity threshold
+     */
+    filterBySeverity(vulnerabilities) {
+        const severityOrder = [
+            'critical',
+            'high',
+            'medium',
+            'low',
+            'info',
+        ];
+        const thresholdIndex = severityOrder.indexOf(this.config.severityThreshold);
+        return vulnerabilities.filter((v) => {
+            const vIndex = severityOrder.indexOf(v.severity);
+            return vIndex <= thresholdIndex;
+        });
+    }
+    /**
+     * Create security summary
+     */
+    createSummary(vulnerabilities) {
+        const bySeverity = {
+            critical: 0,
+            high: 0,
+            medium: 0,
+            low: 0,
+            info: 0,
+        };
+        const byCategory = {
+            injection: 0,
+            xss: 0,
+            auth: 0,
+            crypto: 0,
+            'sensitive-data': 0,
+            'access-control': 0,
+            misconfiguration: 0,
+            dependencies: 0,
+            secrets: 0,
+        };
+        for (const v of vulnerabilities) {
+            bySeverity[v.severity]++;
+            byCategory[v.category]++;
+        }
+        const riskScore = this.calculateRiskScore(bySeverity);
+        const passed = riskScore <= this.config.riskScoreThreshold &&
+            bySeverity.critical === 0;
+        return {
+            total: vulnerabilities.length,
+            bySeverity,
+            byCategory,
+            riskScore,
+            passed,
+        };
+    }
+    /**
+     * Calculate risk score
+     */
+    calculateRiskScore(bySeverity) {
+        const weights = {
+            critical: 40,
+            high: 20,
+            medium: 10,
+            low: 5,
+            info: 1,
+        };
+        let score = 0;
+        for (const [severity, count] of Object.entries(bySeverity)) {
+            score += weights[severity] * count;
+        }
+        return Math.min(100, score);
+    }
+    /**
+     * Get available rules
+     */
+    getRules() {
+        return [...this.rules];
+    }
+    /**
+     * Enable/disable rule
+     */
+    setRuleEnabled(ruleId, enabled) {
+        const rule = this.rules.find((r) => r.id === ruleId);
+        if (rule) {
+            rule.enabled = enabled;
+        }
+    }
+    /**
+     * Add custom rule
+     */
+    addRule(rule) {
+        this.rules.push(rule);
+    }
+}
+/**
+ * Create security scanner instance
+ */
+export function createSecurityScanner(config) {
+    return new SecurityScanner(config);
+}
+//# sourceMappingURL=security-scanner.js.map

package/dist/codegen/security-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scanner.js","sourceRoot":"","sources":["../../src/codegen/security-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAiIH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA0B;IAC3D,iBAAiB,EAAE,QAAQ;IAC3B,UAAU,EAAE;QACV,WAAW;QACX,KAAK;QACL,MAAM;QACN,QAAQ;QACR,gBAAgB;QAChB,gBAAgB;QAChB,SAAS;KACV;IACD,cAAc,EAAE,IAAI;IACpB,kBAAkB,EAAE,EAAE;CACvB,CAAC;AAEF;;GAEG;AACH,MAAM,cAAc,GAAmB;IACrC,YAAY;IACZ;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,mGAAmG;QAC5G,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,0CAA0C;QACvD,OAAO,EAAE,mFAAmF;QAC5F,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,wEAAwE;QACrF,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,uCAAuC;QACpD,OAAO,EAAE,qFAAqF;QAC9F,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,2FAA2F;QACxG,OAAO,EAAE,IAAI;KACd;IAED,MAAM;IACN;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,0CAA0C;QACvD,OAAO,EAAE,+BAA+B;QACxC,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,2DAA2D;QACxE,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;QACvC,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,gDAAgD;QAC7D,OAAO,EAAE,sDAAsD;QAC/D,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,4DAA4D;QACzE,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;QACvC,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,wBAAwB;QACjC,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,6DAA6D;QAC1E,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;QACvC,OAAO,EAAE,IAAI;KACd;IAED,SAAS;IACT;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,gCAAgC;QAC7C,OAAO,EAAE,sCAAsC;QAC/C,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,uCAAuC;QAChD,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,wDAAwD;QACrE,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,4EAA4E;QACzF,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,4DAA4D;QACzE,OAAO,EAAE,qGAAqG;QAC9G,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,IAAI;KACd;IAED,iBAAiB;IACjB;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,6DAA6D;QACtE,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,uEAAuE;QACpF,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,mFAAmF;QAC5F,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,sEAAsE;QACnF,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,kGAAkG;QAC3G,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,4DAA4D;QACzE,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,8BAA8B;QAC3C,OAAO,EAAE,8CAA8C;QACvD,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE,IAAI;KACd;IAED,iBAAiB;IACjB;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,mCAAmC;QAC5C,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,uDAAuD;QACpE,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,8CAA8C;QACvD,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,8DAA8D;QACvE,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,iEAAiE;QAC9E,OAAO,EAAE,IAAI;KACd;IAED,mBAAmB;IACnB;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,+DAA+D;QACxE,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,2CAA2C;QACxD,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,oDAAoD;QAC7D,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,0CAA0C;QACvD,OAAO,EAAE,+DAA+D;QACxE,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,uCAAuC;QACpD,OAAO,EAAE,IAAI;KACd;IAED,iBAAiB;IACjB;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,yFAAyF;QAClG,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,oEAAoE;QACjF,OAAO,EAAE,IAAI;KACd;IAED,QAAQ;IACR;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,eAAe;QACxB,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,wDAAwD;QACrE,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,uBAAuB;QAChC,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,MAAM,CAAwB;IAC9B,KAAK,CAAiB;IAE9B,YAAY,MAAuC;QACjD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,sBAAsB,EAAE,GAAG,MAAM,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,IAAY,EAAE,IAAY,EAAE,QAAQ,GAAG,YAAY;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,eAAe,GAA4B,EAAE,CAAC;QAEpD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC9D,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAEnE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACnD,eAAe,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,qBAAqB;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE7C,OAAO;YACL,IAAI;YACJ,eAAe,EAAE,QAAQ;YACzB,QAAQ;YACR,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CACP,KAAkE;QAElE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACK,WAAW,CACjB,IAAY,EACZ,IAAkB,EAClB,IAAY;QAEZ,MAAM,eAAe,GAA4B,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC;QAEV,wBAAwB;QACxB,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAE3B,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAC/D,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAE1C,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,GAAG,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE;gBAChC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI,CAAC,IAAI;gBAChB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC7C,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,eAAwC;QAExC,MAAM,aAAa,GAA4B;YAC7C,UAAU;YACV,MAAM;YACN,QAAQ;YACR,KAAK;YACL,MAAM;SACP,CAAC;QACF,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAE5E,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAClC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACjD,OAAO,MAAM,IAAI,cAAc,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,eAAwC;QAC5D,MAAM,UAAU,GAA0C;YACxD,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,UAAU,GAA0C;YACxD,SAAS,EAAE,CAAC;YACZ,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,gBAAgB,EAAE,CAAC;YACnB,gBAAgB,EAAE,CAAC;YACnB,gBAAgB,EAAE,CAAC;YACnB,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,CAAC;SACX,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAChC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB;YAC3C,UAAU,CAAC,QAAQ,KAAK,CAAC,CAAC;QAEzC,OAAO;YACL,KAAK,EAAE,eAAe,CAAC,MAAM;YAC7B,UAAU;YACV,UAAU;YACV,SAAS;YACT,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,UAAiD;QAEjD,MAAM,OAAO,GAAG;YACd,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,EAAE;YACV,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;SACR,CAAC;QAEF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,KAAK,IAAI,OAAO,CAAC,QAAiC,CAAC,GAAG,KAAK,CAAC;QAC9D,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAc,EAAE,OAAgB;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACrD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAkB;QACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAuC;IAEvC,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/codegen/static-analyzer.d.ts

@@ -0,0 +1,188 @@
+/**
+ * Static Analyzer
+ *
+ * Performs static code analysis
+ *
+ * @packageDocumentation
+ * @module codegen/static-analyzer
+ *
+ * @see REQ-COD-002 - Static Analysis
+ * @see Article V - Code Quality Standards
+ */
+/**
+ * Issue severity
+ */
+export type IssueSeverity = 'error' | 'warning' | 'info' | 'hint';
+/**
+ * Issue category
+ */
+export type IssueCategory = 'syntax' | 'type' | 'style' | 'complexity' | 'maintainability' | 'performance' | 'security' | 'best-practice' | 'deprecated';
+/**
+ * Code issue
+ */
+export interface CodeIssue {
+    /** Issue ID */
+    id: string;
+    /** Rule ID */
+    ruleId: string;
+    /** Severity */
+    severity: IssueSeverity;
+    /** Category */
+    category: IssueCategory;
+    /** Message */
+    message: string;
+    /** File path */
+    file?: string;
+    /** Line number */
+    line?: number;
+    /** Column */
+    column?: number;
+    /** End line */
+    endLine?: number;
+    /** End column */
+    endColumn?: number;
+    /** Code snippet */
+    snippet?: string;
+    /** Fix suggestion */
+    fix?: CodeFix;
+}
+/**
+ * Code fix
+ */
+export interface CodeFix {
+    /** Fix description */
+    description: string;
+    /** Replacement text */
+    replacement: string;
+    /** Range to replace */
+    range: {
+        start: {
+            line: number;
+            column: number;
+        };
+        end: {
+            line: number;
+            column: number;
+        };
+    };
+}
+/**
+ * Analysis result
+ */
+export interface AnalysisResult {
+    /** File analyzed */
+    file: string;
+    /** Issues found */
+    issues: CodeIssue[];
+    /** Analysis time */
+    analysisTime: number;
+    /** Summary */
+    summary: AnalysisSummary;
+}
+/**
+ * Analysis summary
+ */
+export interface AnalysisSummary {
+    /** Total issues */
+    totalIssues: number;
+    /** By severity */
+    bySeverity: Record<IssueSeverity, number>;
+    /** By category */
+    byCategory: Record<IssueCategory, number>;
+    /** Pass/fail */
+    passed: boolean;
+}
+/**
+ * Analysis rule
+ */
+export interface AnalysisRule {
+    /** Rule ID */
+    id: string;
+    /** Rule name */
+    name: string;
+    /** Category */
+    category: IssueCategory;
+    /** Default severity */
+    severity: IssueSeverity;
+    /** Description */
+    description: string;
+    /** Detection function */
+    detect: (code: string, context: AnalysisContext) => CodeIssue[];
+    /** Is enabled */
+    enabled: boolean;
+}
+/**
+ * Analysis context
+ */
+export interface AnalysisContext {
+    /** File path */
+    file: string;
+    /** Language */
+    language: string;
+    /** Options */
+    options: StaticAnalyzerConfig;
+}
+/**
+ * Static analyzer configuration
+ */
+export interface StaticAnalyzerConfig {
+    /** Max errors to report */
+    maxErrors: number;
+    /** Severity threshold */
+    severityThreshold: IssueSeverity;
+    /** Categories to check */
+    categories: IssueCategory[];
+    /** Custom rules */
+    customRules?: AnalysisRule[];
+    /** Ignore patterns */
+    ignorePatterns?: string[];
+}
+/**
+ * Default configuration
+ */
+export declare const DEFAULT_ANALYZER_CONFIG: StaticAnalyzerConfig;
+/**
+ * Static Analyzer
+ */
+export declare class StaticAnalyzer {
+    private config;
+    private rules;
+    constructor(config?: Partial<StaticAnalyzerConfig>);
+    /**
+     * Analyze code
+     */
+    analyze(code: string, file: string, language?: string): AnalysisResult;
+    /**
+     * Analyze multiple files
+     */
+    analyzeFiles(files: Array<{
+        path: string;
+        content: string;
+        language?: string;
+    }>): AnalysisResult[];
+    /**
+     * Filter issues by severity threshold
+     */
+    private filterBySeverity;
+    /**
+     * Create analysis summary
+     */
+    private createSummary;
+    /**
+     * Get available rules
+     */
+    getRules(): AnalysisRule[];
+    /**
+     * Enable/disable rule
+     */
+    setRuleEnabled(ruleId: string, enabled: boolean): void;
+    /**
+     * Add custom rule
+     */
+    addRule(rule: AnalysisRule): void;
+}
+/**
+ * Create static analyzer instance
+ */
+export declare function createStaticAnalyzer(config?: Partial<StaticAnalyzerConfig>): StaticAnalyzer;
+//# sourceMappingURL=static-analyzer.d.ts.map