@nahisaho/musubix-core 3.0.7 → 3.0.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (119) hide show
  1. package/.github/AGENTS.md +1 -1
  2. package/AGENTS.md +21 -6
  3. package/dist/cli/commands/index.d.ts +1 -0
  4. package/dist/cli/commands/index.d.ts.map +1 -1
  5. package/dist/cli/commands/index.js +6 -0
  6. package/dist/cli/commands/index.js.map +1 -1
  7. package/dist/cli/commands/watch.d.ts +13 -0
  8. package/dist/cli/commands/watch.d.ts.map +1 -0
  9. package/dist/cli/commands/watch.js +15 -0
  10. package/dist/cli/commands/watch.js.map +1 -0
  11. package/dist/codeql/cwe-mapper.d.ts +56 -0
  12. package/dist/codeql/cwe-mapper.d.ts.map +1 -0
  13. package/dist/codeql/cwe-mapper.js +333 -0
  14. package/dist/codeql/cwe-mapper.js.map +1 -0
  15. package/dist/codeql/index.d.ts +11 -0
  16. package/dist/codeql/index.d.ts.map +1 -0
  17. package/dist/codeql/index.js +11 -0
  18. package/dist/codeql/index.js.map +1 -0
  19. package/dist/codeql/result-aggregator.d.ts +108 -0
  20. package/dist/codeql/result-aggregator.d.ts.map +1 -0
  21. package/dist/codeql/result-aggregator.js +280 -0
  22. package/dist/codeql/result-aggregator.js.map +1 -0
  23. package/dist/codeql/sarif-parser.d.ts +91 -0
  24. package/dist/codeql/sarif-parser.d.ts.map +1 -0
  25. package/dist/codeql/sarif-parser.js +328 -0
  26. package/dist/codeql/sarif-parser.js.map +1 -0
  27. package/dist/codeql/types.d.ts +429 -0
  28. package/dist/codeql/types.d.ts.map +1 -0
  29. package/dist/codeql/types.js +8 -0
  30. package/dist/codeql/types.js.map +1 -0
  31. package/dist/index.d.ts +8 -0
  32. package/dist/index.d.ts.map +1 -1
  33. package/dist/index.js +8 -0
  34. package/dist/index.js.map +1 -1
  35. package/dist/spaces/context-manager.d.ts +124 -0
  36. package/dist/spaces/context-manager.d.ts.map +1 -0
  37. package/dist/spaces/context-manager.js +349 -0
  38. package/dist/spaces/context-manager.js.map +1 -0
  39. package/dist/spaces/index.d.ts +11 -0
  40. package/dist/spaces/index.d.ts.map +1 -0
  41. package/dist/spaces/index.js +15 -0
  42. package/dist/spaces/index.js.map +1 -0
  43. package/dist/spaces/space-context.d.ts +86 -0
  44. package/dist/spaces/space-context.d.ts.map +1 -0
  45. package/dist/spaces/space-context.js +300 -0
  46. package/dist/spaces/space-context.js.map +1 -0
  47. package/dist/spaces/space-storage.d.ts +90 -0
  48. package/dist/spaces/space-storage.d.ts.map +1 -0
  49. package/dist/spaces/space-storage.js +281 -0
  50. package/dist/spaces/space-storage.js.map +1 -0
  51. package/dist/spaces/types.d.ts +226 -0
  52. package/dist/spaces/types.d.ts.map +1 -0
  53. package/dist/spaces/types.js +42 -0
  54. package/dist/spaces/types.js.map +1 -0
  55. package/dist/team/git-client.d.ts +111 -0
  56. package/dist/team/git-client.d.ts.map +1 -0
  57. package/dist/team/git-client.js +336 -0
  58. package/dist/team/git-client.js.map +1 -0
  59. package/dist/team/index.d.ts +11 -0
  60. package/dist/team/index.d.ts.map +1 -0
  61. package/dist/team/index.js +11 -0
  62. package/dist/team/index.js.map +1 -0
  63. package/dist/team/pattern-sharer.d.ts +81 -0
  64. package/dist/team/pattern-sharer.d.ts.map +1 -0
  65. package/dist/team/pattern-sharer.js +348 -0
  66. package/dist/team/pattern-sharer.js.map +1 -0
  67. package/dist/team/team-knowledge.d.ts +130 -0
  68. package/dist/team/team-knowledge.d.ts.map +1 -0
  69. package/dist/team/team-knowledge.js +409 -0
  70. package/dist/team/team-knowledge.js.map +1 -0
  71. package/dist/team/types.d.ts +247 -0
  72. package/dist/team/types.d.ts.map +1 -0
  73. package/dist/team/types.js +7 -0
  74. package/dist/team/types.js.map +1 -0
  75. package/dist/watch/file-watcher.d.ts +96 -0
  76. package/dist/watch/file-watcher.d.ts.map +1 -0
  77. package/dist/watch/file-watcher.js +217 -0
  78. package/dist/watch/file-watcher.js.map +1 -0
  79. package/dist/watch/index.d.ts +15 -0
  80. package/dist/watch/index.d.ts.map +1 -0
  81. package/dist/watch/index.js +14 -0
  82. package/dist/watch/index.js.map +1 -0
  83. package/dist/watch/result-reporter.d.ts +99 -0
  84. package/dist/watch/result-reporter.d.ts.map +1 -0
  85. package/dist/watch/result-reporter.js +198 -0
  86. package/dist/watch/result-reporter.js.map +1 -0
  87. package/dist/watch/runners/ears-runner.d.ts +33 -0
  88. package/dist/watch/runners/ears-runner.d.ts.map +1 -0
  89. package/dist/watch/runners/ears-runner.js +169 -0
  90. package/dist/watch/runners/ears-runner.js.map +1 -0
  91. package/dist/watch/runners/index.d.ts +8 -0
  92. package/dist/watch/runners/index.d.ts.map +1 -0
  93. package/dist/watch/runners/index.js +8 -0
  94. package/dist/watch/runners/index.js.map +1 -0
  95. package/dist/watch/runners/lint-runner.d.ts +34 -0
  96. package/dist/watch/runners/lint-runner.d.ts.map +1 -0
  97. package/dist/watch/runners/lint-runner.js +119 -0
  98. package/dist/watch/runners/lint-runner.js.map +1 -0
  99. package/dist/watch/runners/security-runner.d.ts +38 -0
  100. package/dist/watch/runners/security-runner.d.ts.map +1 -0
  101. package/dist/watch/runners/security-runner.js +165 -0
  102. package/dist/watch/runners/security-runner.js.map +1 -0
  103. package/dist/watch/runners/test-runner.d.ts +47 -0
  104. package/dist/watch/runners/test-runner.d.ts.map +1 -0
  105. package/dist/watch/runners/test-runner.js +185 -0
  106. package/dist/watch/runners/test-runner.js.map +1 -0
  107. package/dist/watch/task-scheduler.d.ts +115 -0
  108. package/dist/watch/task-scheduler.d.ts.map +1 -0
  109. package/dist/watch/task-scheduler.js +260 -0
  110. package/dist/watch/task-scheduler.js.map +1 -0
  111. package/dist/watch/types.d.ts +45 -0
  112. package/dist/watch/types.d.ts.map +1 -0
  113. package/dist/watch/types.js +5 -0
  114. package/dist/watch/types.js.map +1 -0
  115. package/dist/watch/watch-command.d.ts +15 -0
  116. package/dist/watch/watch-command.d.ts.map +1 -0
  117. package/dist/watch/watch-command.js +143 -0
  118. package/dist/watch/watch-command.js.map +1 -0
  119. package/package.json +1 -1
package/.github/AGENTS.md CHANGED
@@ -16,7 +16,7 @@
16
16
  | **テストフレームワーク** | Vitest |
17
17
  | **テスト数** | 2249+ (全合格) |
18
18
  | **パッケージ数** | 25 |
19
- | **MCPツール数** | 61 |
19
+ | **MCPツール数** | 96 |
20
20
  | **Agent Skills** | 13 (Claude Code対応) |
21
21
 
22
22
  ---
package/AGENTS.md CHANGED
@@ -16,7 +16,7 @@
16
16
  | **テストフレームワーク** | Vitest |
17
17
  | **テスト数** | 2249+ (全合格) |
18
18
  | **パッケージ数** | 25 |
19
- | **MCPツール数** | 61 |
19
+ | **MCPツール数** | 96 |
20
20
  | **Agent Skills** | 13 (Claude Code対応) |
21
21
 
22
22
  ---
@@ -63,7 +63,7 @@ packages/
63
63
  | `packages/lean/` | `@nahisaho/musubix-lean` | **Lean 4統合** - 定理証明・EARS変換 |
64
64
  | `packages/library-learner/` | `@nahisaho/musubix-library-learner` | **ライブラリ学習** - APIパターン抽出、メトリクスエクスポート |
65
65
  | `packages/knowledge/` | `@musubix/knowledge` | **知識ストア (v3.0.0 NEW!)** - Git-friendly JSON知識グラフ |
66
- | `packages/policy/` | `@musubix/policy` | **ポリシーエンジン (v3.0.0 NEW!)** - 9憲法条項検証 |
66
+ | `packages/policy/` | `@musubix/policy` | **ポリシーエンジン (v3.0.0 NEW!)** - 10憲法条項検証 |
67
67
  | `packages/decisions/` | `@musubix/decisions` | **ADRマネージャー (v3.0.0 NEW!)** - Architecture Decision Records |
68
68
  | `packages/neural-search/` | `@nahisaho/musubix-neural-search` | **ニューラル検索** - 意味的コード検索、軌跡ロギング |
69
69
  | `packages/synthesis/` | `@nahisaho/musubix-synthesis` | **プログラム合成** - ニューラル誘導合成、説明生成 |
@@ -217,7 +217,7 @@ npx musubix-mcp --transport stdio
217
217
  | `sdd_create_design` | C4モデル設計ドキュメント作成 |
218
218
  | `sdd_validate_design` | 設計の要件トレーサビリティ検証 |
219
219
  | `sdd_create_tasks` | 設計から実装タスク生成 |
220
- | `sdd_validate_constitution` | 9憲法条項への準拠検証 |
220
+ | `sdd_validate_constitution` | 10憲法条項への準拠検証 |
221
221
  | `sdd_validate_traceability` | 要件↔設計↔タスクのトレーサビリティ検証 |
222
222
 
223
223
  #### パターン統合ツール(7ツール)- v1.3.0 NEW!
@@ -324,7 +324,7 @@ npx musubix-mcp --transport stdio
324
324
 
325
325
  ---
326
326
 
327
- ## 📋 9憲法条項(Constitutional Articles)
327
+ ## 📋 10憲法条項(Constitutional Articles)
328
328
 
329
329
  すべての開発活動を統治する不変のルールです。
330
330
 
@@ -339,6 +339,21 @@ npx musubix-mcp --transport stdio
339
339
  | **VII** | Design Patterns | 設計パターン適用の文書化 |
340
340
  | **VIII** | Decision Records | すべての決定をADRで記録 |
341
341
  | **IX** | Quality Gates | フェーズ移行前の品質検証 |
342
+ | **X** | **Implementation Prerequisites** | **要件・設計・タスクなしの実装禁止** |
343
+
344
+ ### ⛔ Article X: Implementation Prerequisites (v3.0.9)
345
+
346
+ **絶対ルール**: 要件定義書・設計書・タスク分解が承認されていない限り、実装を開始してはならない。
347
+
348
+ ```
349
+ ⛔ 禁止: Phase 2 (設計) → Phase 4 (実装) の直接遷移
350
+ ✅ 必須: Phase 1 → Phase 2 → Phase 3 → Phase 4 の順序遵守
351
+ ```
352
+
353
+ 実装開始前に`workflow-engine`が自動検証:
354
+ - ✅ Phase 1 (要件定義) が承認済みかつ成果物あり
355
+ - ✅ Phase 2 (設計) が承認済みかつ成果物あり
356
+ - ✅ Phase 3 (タスク分解) が承認済みかつ成果物あり
342
357
 
343
358
  **詳細**: [steering/rules/constitution.md](steering/rules/constitution.md)
344
359
 
@@ -353,7 +368,7 @@ AIエージェントは決定前に必ずこれらのファイルを参照して
353
368
  | `steering/structure.ja.md` | アーキテクチャパターン、レイヤー構造 |
354
369
  | `steering/tech.ja.md` | 技術スタック(TypeScript, Node.js 20+) |
355
370
  | `steering/product.ja.md` | プロダクトコンテキスト |
356
- | `steering/rules/constitution.md` | 9憲法条項 |
371
+ | `steering/rules/constitution.md` | 10憲法条項 |
357
372
  | `steering/project.yml` | プロジェクト設定 |
358
373
 
359
374
  ---
@@ -527,7 +542,7 @@ const related = await store.traverse('requirement:REQ-001', {
527
542
  ```
528
543
 
529
544
  **関連パッケージ**:
530
- - `@musubix/policy`: 9憲法条項の自動検証
545
+ - `@musubix/policy`: 10憲法条項の自動検証
531
546
  - `@musubix/decisions`: Architecture Decision Records管理
532
547
 
533
548
  **ドキュメント**: [docs/packages/knowledge.md](docs/packages/knowledge.md)
@@ -36,4 +36,5 @@ export { registerCodeGraphCommand } from './codegraph.js';
36
36
  export { registerKnowledgeCommands } from './knowledge.js';
37
37
  export { registerPolicyCommands } from './policy.js';
38
38
  export { registerDecisionCommands } from './decision.js';
39
+ export { registerWatchCommand } from './watch.js';
39
40
  //# sourceMappingURL=index.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyBzC;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6CvD;AAGD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGlD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGhD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGlD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAG1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4BzC;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgDvD;AAGD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGlD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGhD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGlD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAG1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAGzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}
@@ -30,6 +30,8 @@ import { registerCodeGraphCommand } from './codegraph.js';
30
30
  import { registerKnowledgeCommands } from './knowledge.js';
31
31
  import { registerPolicyCommands } from './policy.js';
32
32
  import { registerDecisionCommands } from './decision.js';
33
+ // DX Enhancement commands (v3.1.0)
34
+ import { registerWatchCommand } from './watch.js';
33
35
  /**
34
36
  * Register all CLI commands
35
37
  *
@@ -69,6 +71,8 @@ export function registerCommands(program) {
69
71
  registerKnowledgeCommands(program);
70
72
  registerPolicyCommands(program);
71
73
  registerDecisionCommands(program);
74
+ // DX Enhancement commands (v3.1.0)
75
+ registerWatchCommand(program);
72
76
  }
73
77
  // Core command exports
74
78
  export { registerInitCommand } from './init.js';
@@ -103,4 +107,6 @@ export { registerCodeGraphCommand } from './codegraph.js';
103
107
  export { registerKnowledgeCommands } from './knowledge.js';
104
108
  export { registerPolicyCommands } from './policy.js';
105
109
  export { registerDecisionCommands } from './decision.js';
110
+ // DX Enhancement command exports (v3.1.0)
111
+ export { registerWatchCommand } from './watch.js';
106
112
  //# sourceMappingURL=index.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,gDAAgD;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAEzD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,gBAAgB;IAChB,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/B,0CAA0C;IAC1C,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACrC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEhC,6CAA6C;IAC7C,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,kCAAkC;IAClC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjC,oCAAoC;IACpC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,2CAA2C;IAC3C,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,qCAAqC;IACrC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,2BAA2B;IAC3B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,6CAA6C;IAC7C,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjC,qCAAqC;IACrC,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEnC,kCAAkC;IAClC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAElC,gDAAgD;IAChD,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,uBAAuB;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,+BAA+B;AAC/B,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,+BAA+B;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,0BAA0B;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,kCAAkC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,wCAAwC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,sBAAsB;AACtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD,uBAAuB;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,wCAAwC;AACxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,2CAA2C;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,wCAAwC;AACxC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,uDAAuD;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,gDAAgD;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAEzD,mCAAmC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,gBAAgB;IAChB,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/B,0CAA0C;IAC1C,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACrC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEhC,6CAA6C;IAC7C,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,kCAAkC;IAClC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjC,oCAAoC;IACpC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,2CAA2C;IAC3C,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,qCAAqC;IACrC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,2BAA2B;IAC3B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,6CAA6C;IAC7C,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjC,qCAAqC;IACrC,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEnC,kCAAkC;IAClC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAElC,gDAAgD;IAChD,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAElC,mCAAmC;IACnC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,uBAAuB;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,+BAA+B;AAC/B,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,+BAA+B;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,0BAA0B;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,kCAAkC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,wCAAwC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,sBAAsB;AACtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD,uBAAuB;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,wCAAwC;AACxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,2CAA2C;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,wCAAwC;AACxC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,uDAAuD;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAEzD,0CAA0C;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}
@@ -0,0 +1,13 @@
1
+ /**
2
+ * Watch Command Registration
3
+ *
4
+ * Implements: TSK-WATCH-007, REQ-WATCH-006
5
+ * @see DES-DX-v3.1.0 Section Watch Module
6
+ */
7
+ import type { Command } from 'commander';
8
+ /**
9
+ * Register watch command to CLI
10
+ */
11
+ export declare function registerWatchCommand(program: Command): void;
12
+ export { registerWatchCommand as default };
13
+ //# sourceMappingURL=watch.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/watch.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAE3D;AAED,OAAO,EAAE,oBAAoB,IAAI,OAAO,EAAE,CAAC"}
@@ -0,0 +1,15 @@
1
+ /**
2
+ * Watch Command Registration
3
+ *
4
+ * Implements: TSK-WATCH-007, REQ-WATCH-006
5
+ * @see DES-DX-v3.1.0 Section Watch Module
6
+ */
7
+ import { createWatchCommand } from '../../watch/watch-command.js';
8
+ /**
9
+ * Register watch command to CLI
10
+ */
11
+ export function registerWatchCommand(program) {
12
+ program.addCommand(createWatchCommand());
13
+ }
14
+ export { registerWatchCommand as default };
15
+ //# sourceMappingURL=watch.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"watch.js","sourceRoot":"","sources":["../../../src/cli/commands/watch.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,OAAO,EAAE,oBAAoB,IAAI,OAAO,EAAE,CAAC"}
@@ -0,0 +1,56 @@
1
+ /**
2
+ * CWE Mapper - Map CWE IDs to Japanese explanations
3
+ *
4
+ * Implements: TSK-CODEQL-002, REQ-CODEQL-003, DES-CODEQL-002
5
+ */
6
+ /**
7
+ * CWE Information
8
+ */
9
+ export interface CWEInfo {
10
+ id: string;
11
+ name: string;
12
+ nameJa: string;
13
+ description: string;
14
+ explanation: string;
15
+ severity: 'critical' | 'high' | 'medium' | 'low';
16
+ category: string;
17
+ references?: string[];
18
+ }
19
+ /**
20
+ * Map CWE ID to CWE information
21
+ */
22
+ export declare function mapCWE(cweId: string): CWEInfo | null;
23
+ /**
24
+ * Get all CWE entries
25
+ */
26
+ export declare function getAllCWEs(): CWEInfo[];
27
+ /**
28
+ * Get CWE entries by category
29
+ */
30
+ export declare function getCWEsByCategory(category: string): CWEInfo[];
31
+ /**
32
+ * Get CWE entries by severity
33
+ */
34
+ export declare function getCWEsBySeverity(severity: CWEInfo['severity']): CWEInfo[];
35
+ /**
36
+ * Extract CWE IDs from text
37
+ */
38
+ export declare function extractCWEIds(text: string): string[];
39
+ /**
40
+ * Check if CWE ID is known
41
+ */
42
+ export declare function isCWEKnown(cweId: string): boolean;
43
+ /**
44
+ * Get CWE severity
45
+ */
46
+ export declare function getCWESeverity(cweId: string): CWEInfo['severity'] | null;
47
+ /**
48
+ * Get CWE explanation (Japanese)
49
+ */
50
+ export declare function getCWEExplanation(cweId: string): string | null;
51
+ /**
52
+ * CWE categories
53
+ */
54
+ export declare const CWE_CATEGORIES: readonly ["injection", "auth", "crypto", "file", "secrets", "memory", "info-disclosure", "config", "validation", "redirect"];
55
+ export type CWECategory = (typeof CWE_CATEGORIES)[number];
56
+ //# sourceMappingURL=cwe-mapper.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cwe-mapper.d.ts","sourceRoot":"","sources":["../../src/codeql/cwe-mapper.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AA4RD;;GAEG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAOpD;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,OAAO,EAAE,CAEtC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE,CAE7D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,EAAE,CAE1E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAIpD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAGxE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9D;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,8HAWjB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC"}
@@ -0,0 +1,333 @@
1
+ /**
2
+ * CWE Mapper - Map CWE IDs to Japanese explanations
3
+ *
4
+ * Implements: TSK-CODEQL-002, REQ-CODEQL-003, DES-CODEQL-002
5
+ */
6
+ /**
7
+ * CWE Database - Common Web Application Vulnerabilities (Top 25 + Additional)
8
+ * @see https://cwe.mitre.org/top25/archive/2023/2023_top25_list.html
9
+ */
10
+ const CWE_DATABASE = {
11
+ 'CWE-79': {
12
+ id: 'CWE-79',
13
+ name: 'Cross-site Scripting (XSS)',
14
+ nameJa: 'クロスサイトスクリプティング (XSS)',
15
+ description: 'Improper Neutralization of Input During Web Page Generation',
16
+ explanation: 'ユーザー入力がHTMLページに適切にエスケープされずに出力されることで、攻撃者が悪意のあるスクリプトを注入できる脆弱性です。Cookieの窃取、セッションハイジャック、フィッシングなどの攻撃に悪用されます。対策として、出力時のHTMLエスケープ、Content Security Policy (CSP) の設定、HTTPOnlyフラグの使用を推奨します。',
17
+ severity: 'high',
18
+ category: 'injection',
19
+ references: ['https://owasp.org/www-community/attacks/xss/'],
20
+ },
21
+ 'CWE-89': {
22
+ id: 'CWE-89',
23
+ name: 'SQL Injection',
24
+ nameJa: 'SQLインジェクション',
25
+ description: 'Improper Neutralization of Special Elements used in an SQL Command',
26
+ explanation: 'ユーザー入力がSQLクエリに直接組み込まれることで、攻撃者がデータベースを不正に操作できる脆弱性です。データの窃取、改ざん、削除、認証バイパスなどの攻撃に悪用されます。対策として、プリペアドステートメント(パラメータ化クエリ)の使用、ORMの活用、入力検証を推奨します。',
27
+ severity: 'critical',
28
+ category: 'injection',
29
+ references: ['https://owasp.org/www-community/attacks/SQL_Injection'],
30
+ },
31
+ 'CWE-78': {
32
+ id: 'CWE-78',
33
+ name: 'OS Command Injection',
34
+ nameJa: 'OSコマンドインジェクション',
35
+ description: 'Improper Neutralization of Special Elements used in an OS Command',
36
+ explanation: 'ユーザー入力がOSコマンドに直接組み込まれることで、攻撃者がサーバー上で任意のコマンドを実行できる脆弱性です。システムの完全な乗っ取りにつながる可能性があります。対策として、シェルコマンドの使用回避、入力の厳格な検証、コマンド実行APIの適切な使用を推奨します。',
37
+ severity: 'critical',
38
+ category: 'injection',
39
+ references: ['https://owasp.org/www-community/attacks/Command_Injection'],
40
+ },
41
+ 'CWE-22': {
42
+ id: 'CWE-22',
43
+ name: 'Path Traversal',
44
+ nameJa: 'パストラバーサル',
45
+ description: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
46
+ explanation: 'ファイルパスの構成にユーザー入力を使用する際、../などの特殊文字列により意図しないディレクトリにアクセスできる脆弱性です。機密ファイルの読み取りや上書きに悪用されます。対策として、パスの正規化、ホワイトリスト検証、chroot環境の使用を推奨します。',
47
+ severity: 'high',
48
+ category: 'file',
49
+ references: ['https://owasp.org/www-community/attacks/Path_Traversal'],
50
+ },
51
+ 'CWE-352': {
52
+ id: 'CWE-352',
53
+ name: 'Cross-Site Request Forgery (CSRF)',
54
+ nameJa: 'クロスサイトリクエストフォージェリ (CSRF)',
55
+ description: 'Cross-Site Request Forgery (CSRF)',
56
+ explanation: '認証済みユーザーが意図しないリクエストを強制的に実行させられる脆弱性です。ログイン状態を悪用して、パスワード変更や送金などの操作を行わせることができます。対策として、CSRFトークンの使用、SameSite Cookie属性の設定、リファラーチェックを推奨します。',
57
+ severity: 'medium',
58
+ category: 'auth',
59
+ references: ['https://owasp.org/www-community/attacks/csrf'],
60
+ },
61
+ 'CWE-287': {
62
+ id: 'CWE-287',
63
+ name: 'Improper Authentication',
64
+ nameJa: '不適切な認証',
65
+ description: 'Improper Authentication',
66
+ explanation: '認証メカニズムが適切に実装されていないことで、攻撃者が認証をバイパスできる脆弱性です。セッション固定、認証情報の推測、認証ロジックの欠陥などが含まれます。対策として、標準的な認証フレームワークの使用、多要素認証の導入、セッション管理の強化を推奨します。',
67
+ severity: 'critical',
68
+ category: 'auth',
69
+ references: ['https://cwe.mitre.org/data/definitions/287.html'],
70
+ },
71
+ 'CWE-306': {
72
+ id: 'CWE-306',
73
+ name: 'Missing Authentication for Critical Function',
74
+ nameJa: '重要な機能に対する認証の欠如',
75
+ description: 'Missing Authentication for Critical Function',
76
+ explanation: '重要な機能やリソースへのアクセスに認証が要求されていない脆弱性です。管理機能や機密データへの不正アクセスにつながります。対策として、すべての重要エンドポイントでの認証要求、デフォルト拒否ポリシーの適用を推奨します。',
77
+ severity: 'high',
78
+ category: 'auth',
79
+ references: ['https://cwe.mitre.org/data/definitions/306.html'],
80
+ },
81
+ 'CWE-862': {
82
+ id: 'CWE-862',
83
+ name: 'Missing Authorization',
84
+ nameJa: '認可の欠如',
85
+ description: 'Missing Authorization',
86
+ explanation: 'ユーザーの権限が適切に検証されずにリソースへのアクセスが許可される脆弱性です。水平・垂直権限昇格攻撃に悪用されます。対策として、すべてのアクセスでの権限チェック、最小権限の原則の適用を推奨します。',
87
+ severity: 'high',
88
+ category: 'auth',
89
+ references: ['https://cwe.mitre.org/data/definitions/862.html'],
90
+ },
91
+ 'CWE-798': {
92
+ id: 'CWE-798',
93
+ name: 'Use of Hard-coded Credentials',
94
+ nameJa: 'ハードコードされた認証情報の使用',
95
+ description: 'Use of Hard-coded Credentials',
96
+ explanation: 'ソースコード内にパスワードやAPIキーなどの認証情報が直接記述されている脆弱性です。コード漏洩時に認証情報が露出し、不正アクセスにつながります。対策として、環境変数や秘密管理サービスの使用、定期的な認証情報のローテーションを推奨します。',
97
+ severity: 'critical',
98
+ category: 'secrets',
99
+ references: ['https://cwe.mitre.org/data/definitions/798.html'],
100
+ },
101
+ 'CWE-311': {
102
+ id: 'CWE-311',
103
+ name: 'Missing Encryption of Sensitive Data',
104
+ nameJa: '機密データの暗号化の欠如',
105
+ description: 'Missing Encryption of Sensitive Data',
106
+ explanation: '機密データが暗号化されずに保存または送信される脆弱性です。データ漏洩時に機密情報が平文で露出します。対策として、保存時の暗号化(AES-256等)、通信時のTLS使用、適切な鍵管理を推奨します。',
107
+ severity: 'high',
108
+ category: 'crypto',
109
+ references: ['https://cwe.mitre.org/data/definitions/311.html'],
110
+ },
111
+ 'CWE-327': {
112
+ id: 'CWE-327',
113
+ name: 'Use of a Broken or Risky Cryptographic Algorithm',
114
+ nameJa: '脆弱な暗号アルゴリズムの使用',
115
+ description: 'Use of a Broken or Risky Cryptographic Algorithm',
116
+ explanation: 'MD5、SHA-1、DES、RC4などの脆弱な暗号アルゴリズムが使用されている脆弱性です。暗号化されたデータが解読される可能性があります。対策として、AES-256、SHA-256以上、RSA 2048ビット以上など、現代的な暗号アルゴリズムの使用を推奨します。',
117
+ severity: 'medium',
118
+ category: 'crypto',
119
+ references: ['https://cwe.mitre.org/data/definitions/327.html'],
120
+ },
121
+ 'CWE-502': {
122
+ id: 'CWE-502',
123
+ name: 'Deserialization of Untrusted Data',
124
+ nameJa: '信頼されないデータのデシリアライゼーション',
125
+ description: 'Deserialization of Untrusted Data',
126
+ explanation: '信頼されないソースからのシリアライズデータを復元する際に、任意のコードが実行される可能性がある脆弱性です。リモートコード実行につながる重大な脆弱性です。対策として、JSONなど安全なフォーマットの使用、デシリアライズ前の検証、ホワイトリストによる型制限を推奨します。',
127
+ severity: 'critical',
128
+ category: 'injection',
129
+ references: ['https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/14-Testing_for_Deserialization_of_Untrusted_Data'],
130
+ },
131
+ 'CWE-94': {
132
+ id: 'CWE-94',
133
+ name: 'Improper Control of Generation of Code (Code Injection)',
134
+ nameJa: 'コードインジェクション',
135
+ description: "Improper Control of Generation of Code ('Code Injection')",
136
+ explanation: '動的にコードを生成・実行する際にユーザー入力が含まれることで、任意のコードが実行される脆弱性です。eval()、Function()、exec()などの使用時に発生します。対策として、動的コード生成の回避、入力の厳格な検証、サンドボックス環境での実行を推奨します。',
137
+ severity: 'critical',
138
+ category: 'injection',
139
+ references: ['https://cwe.mitre.org/data/definitions/94.html'],
140
+ },
141
+ 'CWE-269': {
142
+ id: 'CWE-269',
143
+ name: 'Improper Privilege Management',
144
+ nameJa: '不適切な権限管理',
145
+ description: 'Improper Privilege Management',
146
+ explanation: 'アプリケーションが必要以上の権限で実行される、または権限の昇格が適切に制御されていない脆弱性です。対策として、最小権限の原則の適用、権限分離、権限昇格時の再認証を推奨します。',
147
+ severity: 'high',
148
+ category: 'auth',
149
+ references: ['https://cwe.mitre.org/data/definitions/269.html'],
150
+ },
151
+ 'CWE-434': {
152
+ id: 'CWE-434',
153
+ name: 'Unrestricted Upload of File with Dangerous Type',
154
+ nameJa: '危険なファイルタイプの無制限アップロード',
155
+ description: 'Unrestricted Upload of File with Dangerous Type',
156
+ explanation: 'ファイルアップロード機能で危険なファイルタイプ(実行可能ファイル等)がアップロード・実行される脆弱性です。Webシェルの設置などに悪用されます。対策として、ファイルタイプのホワイトリスト検証、アップロードディレクトリの実行権限無効化、ファイル名のサニタイズを推奨します。',
157
+ severity: 'high',
158
+ category: 'file',
159
+ references: ['https://owasp.org/www-community/vulnerabilities/Unrestricted_File_Upload'],
160
+ },
161
+ 'CWE-918': {
162
+ id: 'CWE-918',
163
+ name: 'Server-Side Request Forgery (SSRF)',
164
+ nameJa: 'サーバーサイドリクエストフォージェリ (SSRF)',
165
+ description: 'Server-Side Request Forgery (SSRF)',
166
+ explanation: 'サーバーが外部リソースへのリクエストを行う際にURLがユーザー制御可能で、内部ネットワークへのアクセスや認証情報の窃取に悪用される脆弱性です。対策として、URLのホワイトリスト検証、内部ネットワークへのアクセス制限、DNSリバインディング対策を推奨します。',
167
+ severity: 'high',
168
+ category: 'injection',
169
+ references: ['https://owasp.org/www-community/attacks/Server_Side_Request_Forgery'],
170
+ },
171
+ 'CWE-200': {
172
+ id: 'CWE-200',
173
+ name: 'Exposure of Sensitive Information to an Unauthorized Actor',
174
+ nameJa: '権限のない者への機密情報の露出',
175
+ description: 'Exposure of Sensitive Information to an Unauthorized Actor',
176
+ explanation: 'エラーメッセージ、ログ、APIレスポンスなどを通じて機密情報が露出する脆弱性です。スタックトレース、データベース構造、内部IPアドレスなどが漏洩します。対策として、エラーハンドリングの適切な実装、本番環境でのデバッグ情報の無効化を推奨します。',
177
+ severity: 'medium',
178
+ category: 'info-disclosure',
179
+ references: ['https://cwe.mitre.org/data/definitions/200.html'],
180
+ },
181
+ 'CWE-119': {
182
+ id: 'CWE-119',
183
+ name: 'Improper Restriction of Operations within the Bounds of a Memory Buffer',
184
+ nameJa: 'バッファオーバーフロー',
185
+ description: 'Improper Restriction of Operations within the Bounds of a Memory Buffer',
186
+ explanation: 'メモリバッファの境界を超えた読み書きが行われる脆弱性です。クラッシュ、任意コード実行、情報漏洩につながります。C/C++で主に発生します。対策として、安全な文字列操作関数の使用、境界チェック、ASLRとDEPの有効化を推奨します。',
187
+ severity: 'critical',
188
+ category: 'memory',
189
+ references: ['https://cwe.mitre.org/data/definitions/119.html'],
190
+ },
191
+ 'CWE-416': {
192
+ id: 'CWE-416',
193
+ name: 'Use After Free',
194
+ nameJa: '解放後使用',
195
+ description: 'Use After Free',
196
+ explanation: 'メモリが解放された後にそのメモリにアクセスする脆弱性です。クラッシュや任意コード実行につながります。対策として、解放後のポインタのNULL化、スマートポインタの使用、メモリ安全な言語の採用を推奨します。',
197
+ severity: 'critical',
198
+ category: 'memory',
199
+ references: ['https://cwe.mitre.org/data/definitions/416.html'],
200
+ },
201
+ 'CWE-476': {
202
+ id: 'CWE-476',
203
+ name: 'NULL Pointer Dereference',
204
+ nameJa: 'NULLポインタ参照',
205
+ description: 'NULL Pointer Dereference',
206
+ explanation: 'NULLポインタを参照してしまう脆弱性です。アプリケーションのクラッシュを引き起こします。対策として、ポインタ使用前のNULLチェック、Optional型の使用を推奨します。',
207
+ severity: 'medium',
208
+ category: 'memory',
209
+ references: ['https://cwe.mitre.org/data/definitions/476.html'],
210
+ },
211
+ 'CWE-190': {
212
+ id: 'CWE-190',
213
+ name: 'Integer Overflow or Wraparound',
214
+ nameJa: '整数オーバーフロー',
215
+ description: 'Integer Overflow or Wraparound',
216
+ explanation: '整数演算の結果が型の最大値を超えてオーバーフローする脆弱性です。予期しない動作やバッファオーバーフローにつながります。対策として、演算前の境界チェック、安全な算術ライブラリの使用を推奨します。',
217
+ severity: 'high',
218
+ category: 'memory',
219
+ references: ['https://cwe.mitre.org/data/definitions/190.html'],
220
+ },
221
+ 'CWE-77': {
222
+ id: 'CWE-77',
223
+ name: 'Command Injection',
224
+ nameJa: 'コマンドインジェクション',
225
+ description: "Improper Neutralization of Special Elements used in a Command ('Command Injection')",
226
+ explanation: 'コマンド文字列にユーザー入力が適切にエスケープされずに含まれることで、追加のコマンドが実行される脆弱性です。対策として、シェル呼び出しの回避、パラメータ化された実行、入力のホワイトリスト検証を推奨します。',
227
+ severity: 'critical',
228
+ category: 'injection',
229
+ references: ['https://cwe.mitre.org/data/definitions/77.html'],
230
+ },
231
+ 'CWE-601': {
232
+ id: 'CWE-601',
233
+ name: "URL Redirection to Untrusted Site ('Open Redirect')",
234
+ nameJa: 'オープンリダイレクト',
235
+ description: "URL Redirection to Untrusted Site ('Open Redirect')",
236
+ explanation: 'リダイレクト先URLがユーザー制御可能で、フィッシングサイトへの誘導に悪用される脆弱性です。対策として、リダイレクト先のホワイトリスト検証、相対パスのみの許可を推奨します。',
237
+ severity: 'medium',
238
+ category: 'redirect',
239
+ references: ['https://cwe.mitre.org/data/definitions/601.html'],
240
+ },
241
+ 'CWE-732': {
242
+ id: 'CWE-732',
243
+ name: 'Incorrect Permission Assignment for Critical Resource',
244
+ nameJa: '重要なリソースに対する不適切なパーミッション設定',
245
+ description: 'Incorrect Permission Assignment for Critical Resource',
246
+ explanation: '機密ファイルやリソースに過剰なアクセス権限が付与されている脆弱性です。対策として、最小権限の原則の適用、適切なファイルパーミッションの設定を推奨します。',
247
+ severity: 'medium',
248
+ category: 'config',
249
+ references: ['https://cwe.mitre.org/data/definitions/732.html'],
250
+ },
251
+ 'CWE-20': {
252
+ id: 'CWE-20',
253
+ name: 'Improper Input Validation',
254
+ nameJa: '不適切な入力検証',
255
+ description: 'Improper Input Validation',
256
+ explanation: 'ユーザー入力が適切に検証されずに使用される脆弱性の総称です。多くのインジェクション脆弱性の根本原因となります。対策として、すべての入力の検証、ホワイトリストアプローチ、型変換時のエラーハンドリングを推奨します。',
257
+ severity: 'high',
258
+ category: 'validation',
259
+ references: ['https://cwe.mitre.org/data/definitions/20.html'],
260
+ },
261
+ };
262
+ /**
263
+ * Map CWE ID to CWE information
264
+ */
265
+ export function mapCWE(cweId) {
266
+ // Normalize ID format
267
+ const normalizedId = cweId.toUpperCase().startsWith('CWE-')
268
+ ? cweId.toUpperCase()
269
+ : `CWE-${cweId}`;
270
+ return CWE_DATABASE[normalizedId] ?? null;
271
+ }
272
+ /**
273
+ * Get all CWE entries
274
+ */
275
+ export function getAllCWEs() {
276
+ return Object.values(CWE_DATABASE);
277
+ }
278
+ /**
279
+ * Get CWE entries by category
280
+ */
281
+ export function getCWEsByCategory(category) {
282
+ return Object.values(CWE_DATABASE).filter((cwe) => cwe.category === category);
283
+ }
284
+ /**
285
+ * Get CWE entries by severity
286
+ */
287
+ export function getCWEsBySeverity(severity) {
288
+ return Object.values(CWE_DATABASE).filter((cwe) => cwe.severity === severity);
289
+ }
290
+ /**
291
+ * Extract CWE IDs from text
292
+ */
293
+ export function extractCWEIds(text) {
294
+ const regex = /CWE-\d+/gi;
295
+ const matches = text.match(regex) ?? [];
296
+ return [...new Set(matches.map((m) => m.toUpperCase()))];
297
+ }
298
+ /**
299
+ * Check if CWE ID is known
300
+ */
301
+ export function isCWEKnown(cweId) {
302
+ return mapCWE(cweId) !== null;
303
+ }
304
+ /**
305
+ * Get CWE severity
306
+ */
307
+ export function getCWESeverity(cweId) {
308
+ const info = mapCWE(cweId);
309
+ return info?.severity ?? null;
310
+ }
311
+ /**
312
+ * Get CWE explanation (Japanese)
313
+ */
314
+ export function getCWEExplanation(cweId) {
315
+ const info = mapCWE(cweId);
316
+ return info?.explanation ?? null;
317
+ }
318
+ /**
319
+ * CWE categories
320
+ */
321
+ export const CWE_CATEGORIES = [
322
+ 'injection',
323
+ 'auth',
324
+ 'crypto',
325
+ 'file',
326
+ 'secrets',
327
+ 'memory',
328
+ 'info-disclosure',
329
+ 'config',
330
+ 'validation',
331
+ 'redirect',
332
+ ];
333
+ //# sourceMappingURL=cwe-mapper.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cwe-mapper.js","sourceRoot":"","sources":["../../src/codeql/cwe-mapper.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgBH;;;GAGG;AACH,MAAM,YAAY,GAA4B;IAC5C,QAAQ,EAAE;QACR,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,4BAA4B;QAClC,MAAM,EAAE,sBAAsB;QAC9B,WAAW,EAAE,6DAA6D;QAC1E,WAAW,EACT,oLAAoL;QACtL,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,CAAC,8CAA8C,CAAC;KAC7D;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,oEAAoE;QACjF,WAAW,EACT,yIAAyI;QAC3I,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,CAAC,uDAAuD,CAAC;KACtE;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,mEAAmE;QAChF,WAAW,EACT,qIAAqI;QACvI,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,CAAC,2DAA2D,CAAC;KAC1E;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,gFAAgF;QAC7F,WAAW,EACT,gIAAgI;QAClI,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,wDAAwD,CAAC;KACvE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,mCAAmC;QACzC,MAAM,EAAE,0BAA0B;QAClC,WAAW,EAAE,mCAAmC;QAChD,WAAW,EACT,sIAAsI;QACxI,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,8CAA8C,CAAC;KAC7D;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,yBAAyB;QACtC,WAAW,EACT,gIAAgI;QAClI,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,8CAA8C;QACpD,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,8CAA8C;QAC3D,WAAW,EACT,6GAA6G;QAC/G,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,uBAAuB;QACpC,WAAW,EACT,oGAAoG;QACtG,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,+BAA+B;QACrC,MAAM,EAAE,kBAAkB;QAC1B,WAAW,EAAE,+BAA+B;QAC5C,WAAW,EACT,wHAAwH;QAC1H,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,sCAAsC;QAC5C,MAAM,EAAE,cAAc;QACtB,WAAW,EAAE,sCAAsC;QACnD,WAAW,EACT,mGAAmG;QACrG,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,kDAAkD;QACxD,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,kDAAkD;QAC/D,WAAW,EACT,qIAAqI;QACvI,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,mCAAmC;QACzC,MAAM,EAAE,uBAAuB;QAC/B,WAAW,EAAE,mCAAmC;QAChD,WAAW,EACT,uIAAuI;QACzI,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,CAAC,iLAAiL,CAAC;KAChM;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,yDAAyD;QAC/D,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,2DAA2D;QACxE,WAAW,EACT,sIAAsI;QACxI,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,CAAC,gDAAgD,CAAC;KAC/D;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,+BAA+B;QACrC,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,+BAA+B;QAC5C,WAAW,EACT,yFAAyF;QAC3F,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,sBAAsB;QAC9B,WAAW,EAAE,iDAAiD;QAC9D,WAAW,EACT,yIAAyI;QAC3I,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,0EAA0E,CAAC;KACzF;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,oCAAoC;QAC1C,MAAM,EAAE,2BAA2B;QACnC,WAAW,EAAE,oCAAoC;QACjD,WAAW,EACT,kIAAkI;QACpI,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,CAAC,qEAAqE,CAAC;KACpF;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,4DAA4D;QAClE,MAAM,EAAE,iBAAiB;QACzB,WAAW,EAAE,4DAA4D;QACzE,WAAW,EACT,2HAA2H;QAC7H,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,iBAAiB;QAC3B,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,yEAAyE;QAC/E,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,yEAAyE;QACtF,WAAW,EACT,qHAAqH;QACvH,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EACT,uGAAuG;QACzG,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,0BAA0B;QACvC,WAAW,EACT,yFAAyF;QAC3F,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,gCAAgC;QACtC,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,gCAAgC;QAC7C,WAAW,EACT,kGAAkG;QACpG,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,cAAc;QACtB,WAAW,EAAE,qFAAqF;QAClG,WAAW,EACT,wGAAwG;QAC1G,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,CAAC,gDAAgD,CAAC;KAC/D;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,qDAAqD;QAC3D,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,qDAAqD;QAClE,WAAW,EACT,wFAAwF;QAC1F,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,uDAAuD;QAC7D,MAAM,EAAE,0BAA0B;QAClC,WAAW,EAAE,uDAAuD;QACpE,WAAW,EACT,8EAA8E;QAChF,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,CAAC,iDAAiD,CAAC;KAChE;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,2BAA2B;QACxC,WAAW,EACT,2GAA2G;QAC7G,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,CAAC,gDAAgD,CAAC;KAC/D;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,sBAAsB;IACtB,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE;QACrB,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC;IAEnB,OAAO,YAAY,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA6B;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,WAAW,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,WAAW;IACX,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS;IACT,QAAQ;IACR,iBAAiB;IACjB,QAAQ;IACR,YAAY;IACZ,UAAU;CACF,CAAC"}
@@ -0,0 +1,11 @@
1
+ /**
2
+ * CodeQL Module - SARIF integration and security analysis
3
+ *
4
+ * Implements: REQ-CODEQL-001〜006, DES-CODEQL-001〜006
5
+ * @see DES-DX-v3.1.0 Section CodeQL Module
6
+ */
7
+ export * from './types.js';
8
+ export * from './sarif-parser.js';
9
+ export * from './cwe-mapper.js';
10
+ export * from './result-aggregator.js';
11
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/codeql/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC"}
@@ -0,0 +1,11 @@
1
+ /**
2
+ * CodeQL Module - SARIF integration and security analysis
3
+ *
4
+ * Implements: REQ-CODEQL-001〜006, DES-CODEQL-001〜006
5
+ * @see DES-DX-v3.1.0 Section CodeQL Module
6
+ */
7
+ export * from './types.js';
8
+ export * from './sarif-parser.js';
9
+ export * from './cwe-mapper.js';
10
+ export * from './result-aggregator.js';
11
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/codeql/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC"}