@nahisaho/musubix-security 1.8.0 → 1.8.1

package/dist/remediation/secure-code-transformer.d.ts

@@ -0,0 +1,222 @@
+/**
+ * @fileoverview Secure Code Transformer
+ * @module @nahisaho/musubix-security/remediation/secure-code-transformer
+ *
+ * Transforms insecure code patterns into secure alternatives using
+ * AST-based transformations and secure coding patterns.
+ */
+import type { SourceLocation, Vulnerability } from '../types/index.js';
+/**
+ * Code transformation
+ */
+export interface CodeTransformation {
+    /** Transformation ID */
+    id: string;
+    /** Transformation name */
+    name: string;
+    /** Category */
+    category: TransformationCategory;
+    /** Pattern to match */
+    pattern: CodePattern;
+    /** Replacement pattern */
+    replacement: ReplacementPattern;
+    /** Description */
+    description: string;
+    /** Risk level */
+    riskLevel: 'safe' | 'caution' | 'review-required';
+    /** Applicable languages */
+    languages: string[];
+    /** Required imports */
+    imports?: ImportSpec[];
+}
+/**
+ * Transformation category
+ */
+export type TransformationCategory = 'input-validation' | 'output-encoding' | 'authentication' | 'authorization' | 'cryptography' | 'data-protection' | 'error-handling' | 'logging' | 'session-management' | 'general';
+/**
+ * Code pattern
+ */
+export interface CodePattern {
+    /** Pattern type */
+    type: 'regex' | 'ast' | 'function-call' | 'api-usage';
+    /** Pattern value */
+    value: string;
+    /** Flags (for regex) */
+    flags?: string;
+    /** Context requirements */
+    context?: PatternContext;
+}
+/**
+ * Pattern context
+ */
+export interface PatternContext {
+    /** Must be inside function */
+    insideFunction?: boolean;
+    /** Must be inside class */
+    insideClass?: boolean;
+    /** Must have specific imports */
+    hasImports?: string[];
+    /** File extension */
+    fileExtension?: string[];
+}
+/**
+ * Replacement pattern
+ */
+export interface ReplacementPattern {
+    /** Replacement type */
+    type: 'template' | 'function' | 'snippet';
+    /** Template/snippet value */
+    value: string;
+    /** Capture group mappings */
+    captures?: Record<string, string>;
+    /** Wrap existing code */
+    wrapExisting?: boolean;
+}
+/**
+ * Import specification
+ */
+export interface ImportSpec {
+    /** Module name */
+    module: string;
+    /** Named imports */
+    named?: string[];
+    /** Default import */
+    default?: string;
+    /** Is type import */
+    typeOnly?: boolean;
+}
+/**
+ * Transformation result
+ */
+export interface TransformationResult {
+    /** Whether transformation succeeded */
+    success: boolean;
+    /** Original code */
+    originalCode: string;
+    /** Transformed code */
+    transformedCode: string;
+    /** Applied transformations */
+    transformationsApplied: AppliedTransformation[];
+    /** Warnings */
+    warnings: string[];
+    /** Errors */
+    errors: string[];
+    /** Required imports */
+    requiredImports: ImportSpec[];
+}
+/**
+ * Applied transformation
+ */
+export interface AppliedTransformation {
+    /** Transformation ID */
+    transformationId: string;
+    /** Location in code */
+    location: SourceLocation;
+    /** Original code snippet */
+    original: string;
+    /** Replacement code */
+    replacement: string;
+}
+/**
+ * Transformer options
+ */
+export interface SecureCodeTransformerOptions {
+    /** Custom transformations */
+    customTransformations?: CodeTransformation[];
+    /** Enable specific categories */
+    enabledCategories?: TransformationCategory[];
+    /** Target language */
+    language?: string;
+    /** Preserve formatting */
+    preserveFormatting?: boolean;
+    /** Dry run (preview only) */
+    dryRun?: boolean;
+}
+/**
+ * Transform options
+ */
+export interface TransformOptions {
+    /** Only apply specific transformations */
+    onlyTransformations?: string[];
+    /** Exclude transformations */
+    excludeTransformations?: string[];
+    /** Target specific vulnerabilities */
+    targetVulnerabilities?: Vulnerability[];
+    /** Max transformations */
+    maxTransformations?: number;
+}
+/**
+ * Transforms insecure code patterns to secure alternatives
+ *
+ * @example
+ * ```typescript
+ * const transformer = createSecureCodeTransformer();
+ * const result = transformer.transform(code, { targetVulnerabilities: [...] });
+ * console.log(result.transformedCode);
+ * ```
+ */
+export declare class SecureCodeTransformer {
+    private transformations;
+    private options;
+    constructor(options?: SecureCodeTransformerOptions);
+    /**
+     * Transform code using security patterns
+     */
+    transform(code: string, options?: TransformOptions): TransformationResult;
+    /**
+     * Transform code for specific vulnerability
+     */
+    transformForVulnerability(code: string, vulnerability: Vulnerability): TransformationResult;
+    /**
+     * Get available transformations
+     */
+    getAvailableTransformations(): CodeTransformation[];
+    /**
+     * Get transformations by category
+     */
+    getTransformationsByCategory(category: TransformationCategory): CodeTransformation[];
+    /**
+     * Add custom transformation
+     */
+    addTransformation(transformation: CodeTransformation): void;
+    /**
+     * Remove transformation
+     */
+    removeTransformation(id: string): boolean;
+    /**
+     * Preview transformation without applying
+     */
+    preview(code: string, transformationId: string): {
+        matches: Array<{
+            location: SourceLocation;
+            original: string;
+            preview: string;
+        }>;
+        wouldApply: boolean;
+    };
+    /**
+     * Validate code after transformation
+     */
+    validateTransformation(_originalCode: string, transformedCode: string): {
+        valid: boolean;
+        issues: string[];
+    };
+    private getApplicableTransformations;
+    private applyTransformation;
+    private generateReplacement;
+    private addImports;
+    private mapVulnerabilityToCategory;
+}
+/**
+ * Create a secure code transformer
+ */
+export declare function createSecureCodeTransformer(options?: SecureCodeTransformerOptions): SecureCodeTransformer;
+/**
+ * Quick transform code
+ */
+export declare function quickTransform(code: string): TransformationResult;
+/**
+ * Get all built-in transformations
+ */
+export declare function getBuiltInTransformations(): CodeTransformation[];
+//# sourceMappingURL=secure-code-transformer.d.ts.map

package/dist/remediation/secure-code-transformer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-code-transformer.d.ts","sourceRoot":"","sources":["../../src/remediation/secure-code-transformer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAMvE;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe;IACf,QAAQ,EAAE,sBAAsB,CAAC;IACjC,uBAAuB;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,0BAA0B;IAC1B,WAAW,EAAE,kBAAkB,CAAC;IAChC,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB;IACjB,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB,CAAC;IAClD,2BAA2B;IAC3B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,uBAAuB;IACvB,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAC9B,kBAAkB,GAClB,iBAAiB,GACjB,gBAAgB,GAChB,eAAe,GACf,cAAc,GACd,iBAAiB,GACjB,gBAAgB,GAChB,SAAS,GACT,oBAAoB,GACpB,SAAS,CAAC;AAEd;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mBAAmB;IACnB,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,eAAe,GAAG,WAAW,CAAC;IACtD,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,8BAA8B;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,qBAAqB;IACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,uBAAuB;IACvB,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAC1C,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,yBAAyB;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,kBAAkB;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,qBAAqB;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,8BAA8B;IAC9B,sBAAsB,EAAE,qBAAqB,EAAE,CAAC;IAChD,eAAe;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,uBAAuB;IACvB,eAAe,EAAE,UAAU,EAAE,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,wBAAwB;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,uBAAuB;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,6BAA6B;IAC7B,qBAAqB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC7C,iCAAiC;IACjC,iBAAiB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC7C,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,6BAA6B;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,8BAA8B;IAC9B,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,sCAAsC;IACtC,qBAAqB,CAAC,EAAE,aAAa,EAAE,CAAC;IACxC,0BAA0B;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AA0OD;;;;;;;;;GASG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,eAAe,CAAkC;IACzD,OAAO,CAAC,OAAO,CAEb;gBAEU,OAAO,GAAE,4BAAiC;IA6BtD;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,oBAAoB;IA2D7E;;OAEG;IACH,yBAAyB,CACvB,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,aAAa,GAC3B,oBAAoB;IAWvB;;OAEG;IACH,2BAA2B,IAAI,kBAAkB,EAAE;IAInD;;OAEG;IACH,4BAA4B,CAAC,QAAQ,EAAE,sBAAsB,GAAG,kBAAkB,EAAE;IAKpF;;OAEG;IACH,iBAAiB,CAAC,cAAc,EAAE,kBAAkB,GAAG,IAAI;IAI3D;;OAEG;IACH,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIzC;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG;QAC/C,OAAO,EAAE,KAAK,CAAC;YAAE,QAAQ,EAAE,cAAc,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAChF,UAAU,EAAE,OAAO,CAAC;KACrB;IA8DD;;OAEG;IACH,sBAAsB,CACpB,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,MAAM,GACtB;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE;IAuCvC,OAAO,CAAC,4BAA4B;IAkCpC,OAAO,CAAC,mBAAmB;IAsF3B,OAAO,CAAC,mBAAmB;IAmB3B,OAAO,CAAC,UAAU;IAkDlB,OAAO,CAAC,0BAA0B;CAenC;AAMD;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,CAAC,EAAE,4BAA4B,GACrC,qBAAqB,CAEvB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAGjE;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,kBAAkB,EAAE,CAEhE"}