@nahisaho/musubix-security 1.8.0 → 1.8.5

package/dist/analyzers/ai/prompt-injection-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-injection-detector.js","sourceRoot":"","sources":["../../../src/analyzers/ai/prompt-injection-detector.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA2FH;;GAEG;AACH,MAAM,kBAAkB,GAAuB;IAC7C,4BAA4B;IAC5B;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,6EAA6E;QACpF,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,uDAAuD;KACrE;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,sCAAsC;QAC7C,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,qCAAqC;KACnD;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,qDAAqD;QAC5D,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,oCAAoC;KAClD;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,yFAAyF;QAChG,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,qCAAqC;KACnD;IAED,qBAAqB;IACrB;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,iFAAiF;QACxF,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,2EAA2E;QAClF,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,6EAA6E;QACpF,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,+CAA+C;KAC7D;IAED,uBAAuB;IACvB;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,oEAAoE;QAC3E,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,aAAa;QACvB,WAAW,EAAE,8CAA8C;KAC5D;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,sDAAsD;QAC7D,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,aAAa;QACvB,WAAW,EAAE,yCAAyC;KACvD;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,+CAA+C;QACtD,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,aAAa;QACvB,WAAW,EAAE,+BAA+B;KAC7C;IAED,oBAAoB;IACpB;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,2GAA2G;QAClH,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,2CAA2C;KACzD;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,2GAA2G;QAClH,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,+BAA+B;KAC7C;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAAG;IACvB,MAAM,EAAE;QACN,mCAAmC;QACnC,4BAA4B;QAC5B,gBAAgB;QAChB,cAAc;QACd,qCAAqC;KACtC;IACD,SAAS,EAAE;QACT,6BAA6B;QAC7B,aAAa;QACb,iBAAiB;QACjB,iDAAiD;KAClD;IACD,cAAc,EAAE;QACd,eAAe;QACf,gBAAgB;QAChB,eAAe;KAChB;IACD,WAAW,EAAE;QACX,sBAAsB;QACtB,mBAAmB;QACnB,0BAA0B;KAC3B;IACD,WAAW,EAAE;QACX,kBAAkB;QAClB,yCAAyC;QACzC,cAAc;KACf;IACD,SAAS,EAAE;QACT,kBAAkB;QAClB,oBAAoB;QACpB,YAAY;QACZ,qBAAqB;KACtB;IACD,UAAU,EAAE;QACV,oBAAoB;QACpB,cAAc;QACd,kBAAkB;KACnB;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAC1B,OAAO,CAAyB;IAChC,QAAQ,CAAqB;IAErC,YAAY,UAAkC,EAAE;QAC9C,IAAI,CAAC,OAAO,GAAG;YACb,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;YAC9C,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG;YAC3C,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;SACzC,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG;YACd,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7E,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,QAAgB;QACzC,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,0BAA0B;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAExD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,8CAA8C;YAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAEvE,+BAA+B;YAC/B,MAAM,gBAAgB,GAAsB,EAAE,CAAC;YAE/C,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;gBAChC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACpC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;oBACxE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,gBAAgB,CAAC,IAAI,CAAC;4BACpB,SAAS,EAAE,OAAO,CAAC,EAAE;4BACrB,WAAW,EAAE,OAAO,CAAC,IAAI;4BACzB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;4BACrB,QAAQ,EAAE;gCACR,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;gCACvB,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;6BAC1C;4BACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,qCAAqC;YACrC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;gBAExE,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,EAAE,CAAC;oBACtD,MAAM,aAAa,GAAiC;wBAClD,EAAE,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;wBACnE,IAAI,EAAE,IAAI,CAAC,0BAA0B,CAAC,gBAAgB,CAAC;wBACvD,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;wBAC5D,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,WAAW,EAAE,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;wBACjE,cAAc,EAAE,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;wBACvE,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC;qBAC/D,CAAC;oBAEF,OAAO,CAAC,IAAI,CAAC;wBACX,aAAa;wBACb,UAAU;wBACV,QAAQ,EAAE,gBAAgB;wBAC1B,WAAW,EAAE,QAAQ;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,IAAY,EAAE,QAAgB;QAC7C,MAAM,SAAS,GAAkB,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAA6B,EAAE,CAAC;YAC/F,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,KAA6B,CAAC;gBAClC,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAEvD,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBACnD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;oBACrE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;oBAEhD,SAAS,CAAC,IAAI,CAAC;wBACb,OAAO;wBACP,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,SAAS,EAAE,UAAU;4BACrB,OAAO,EAAE,UAAU;4BACnB,WAAW,EAAE,CAAC;4BACd,SAAS,EAAE,WAAW,CAAC,MAAM;yBAC9B;wBACD,kBAAkB,EAAE,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;wBACvE,qBAAqB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;wBAC7E,YAAY,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;wBAClE,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC;qBACpD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,IAAY,EAAE,SAAiB,EAAE,MAAgB;QACpE,+CAA+C;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;QAE3E,MAAM,kBAAkB,GAAG;YACzB,wCAAwC;YACxC,oCAAoC;YACpC,6BAA6B;YAC7B,6BAA6B;YAC7B,6BAA6B;YAC7B,uBAAuB;YACvB,2CAA2C;SAC5C,CAAC;QAEF,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,IAAY,EAAE,SAAiB,EAAE,MAAgB;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC;QAEpF,MAAM,oBAAoB,GAAG;YAC3B,sCAAsC;YACtC,8BAA8B;YAC9B,yBAAyB;YACzB,mCAAmC;SACpC,CAAC;QAEF,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,IAAY,EACZ,SAAiB,EACjB,MAAgB;QAEhB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,CAAC;QAEnF,MAAM,iBAAiB,GAAG;YACxB,kCAAkC;YAClC,6BAA6B;YAC7B,mCAAmC;YACnC,sCAAsC;YACtC,4BAA4B;SAC7B,CAAC;QAEF,MAAM,cAAc,GAAG;YACrB,4BAA4B;YAC5B,gCAAgC;SACjC,CAAC;QAEF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAEjE,IAAI,YAAY,IAAI,SAAS;YAAE,OAAO,OAAO,CAAC;QAC9C,IAAI,YAAY;YAAE,OAAO,YAAY,CAAC;QACtC,IAAI,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,IAAY,EAAE,SAAiB;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,CAAC;QAEnF,MAAM,aAAa,GAAG;YACpB,iCAAiC;YACjC,sCAAsC;YACtC,gBAAgB;YAChB,mBAAmB;YACnB,cAAc;SACf,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,KAAa,EAAE,KAAe,EAAE,QAAqB;QAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,QAAqB,EAAE,QAA2B;QAC5E,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC,2CAA2C;QAEjE,iCAAiC;QACjC,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YAC3C,UAAU,IAAI,GAAG,CAAC;QACpB,CAAC;aAAM,IAAI,QAAQ,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YAC7C,UAAU,IAAI,GAAG,CAAC;QACpB,CAAC;QAED,iCAAiC;QACjC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QAEnD,kCAAkC;QAClC,IAAI,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACnC,UAAU,IAAI,GAAG,CAAC;QACpB,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACK,0BAA0B,CAChC,QAA2B;QAE3B,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,WAAW,CAAC;QACzD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACnF,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAqB,EAAE,QAA2B;QAC1E,mDAAmD;QACnD,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YAC3E,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,4BAA4B;QAC5B,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACzC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;YACnE,OAAO,UAAU,EAAE,QAAQ,IAAI,QAAQ,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,IAAI,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,UAAU,CAAC;QAC9D,IAAI,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAEtD,2BAA2B;QAC3B,IAAI,QAAQ,CAAC,YAAY,KAAK,OAAO;YAAE,OAAO,QAAQ,CAAC;QAEvD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,QAAqB,EAAE,QAA2B;QAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,CAAC,IAAI,CAAC,iBAAiB,QAAQ,CAAC,OAAO,YAAY,CAAC,CAAC;QAE1D,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,MAAM,uCAAuC,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,QAAqB,EAAE,SAA4B;QAChF,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YACjC,eAAe,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QAC5F,CAAC;QAED,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YAC3C,eAAe,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;YAC/E,eAAe,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QACzF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACpC,eAAe,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QACvF,CAAC;QAED,eAAe,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAEvE,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,KAAe,EAAE,QAAwB;QAClE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,OAAgC;QAChD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5B,EAAE,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE;YAC3B,IAAI,EAAE,kBAA2B;YACjC,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ;YACvC,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB;YAC7C,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ;YACvC,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,WAAW;YAC7C,cAAc,EAAE,MAAM,CAAC,aAAa,CAAC,cAAc;YACnD,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,gBAAgB;YACzD,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,WAAW;YAC7C,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAgC;IAEhC,OAAO,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC"}

package/dist/analyzers/api/api-security-analyzer.d.ts

@@ -0,0 +1,263 @@
+/**
+ * @fileoverview API Security Analyzer - OpenAPI/REST API security analysis
+ * @module @nahisaho/musubix-security/analyzers/api/api-security-analyzer
+ * @trace DES-SEC3-API-001, REQ-SEC3-API-001
+ */
+import type { Vulnerability, Severity } from '../../types/vulnerability.js';
+/**
+ * API endpoint information
+ */
+export interface APIEndpoint {
+    path: string;
+    method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'OPTIONS' | 'HEAD';
+    operationId?: string;
+    summary?: string;
+    tags?: string[];
+    parameters?: APIParameter[];
+    requestBody?: APIRequestBody;
+    responses?: Record<string, APIResponse>;
+    security?: SecurityRequirement[];
+}
+/**
+ * API parameter
+ */
+export interface APIParameter {
+    name: string;
+    in: 'path' | 'query' | 'header' | 'cookie';
+    required?: boolean;
+    schema?: SchemaObject;
+    description?: string;
+}
+/**
+ * API request body
+ */
+export interface APIRequestBody {
+    required?: boolean;
+    content?: Record<string, {
+        schema?: SchemaObject;
+    }>;
+}
+/**
+ * API response
+ */
+export interface APIResponse {
+    description: string;
+    content?: Record<string, {
+        schema?: SchemaObject;
+    }>;
+}
+/**
+ * Schema object (simplified)
+ */
+export interface SchemaObject {
+    type?: string;
+    format?: string;
+    pattern?: string;
+    minimum?: number;
+    maximum?: number;
+    minLength?: number;
+    maxLength?: number;
+    enum?: any[];
+    properties?: Record<string, SchemaObject>;
+    required?: string[];
+    items?: SchemaObject;
+}
+/**
+ * Security requirement
+ */
+export interface SecurityRequirement {
+    [name: string]: string[];
+}
+/**
+ * API security issue
+ */
+export interface APISecurityIssue {
+    id: string;
+    severity: Severity;
+    category: APISecurityCategory;
+    endpoint?: string;
+    method?: string;
+    title: string;
+    description: string;
+    recommendation: string;
+    owasp?: string[];
+    cwe?: string[];
+}
+/**
+ * API security category
+ */
+export type APISecurityCategory = 'authentication' | 'authorization' | 'injection' | 'data-exposure' | 'rate-limiting' | 'cors' | 'transport-security' | 'input-validation' | 'error-handling' | 'logging' | 'deprecated-api' | 'misconfiguration';
+/**
+ * API security analysis result
+ */
+export interface APISecurityResult {
+    timestamp: Date;
+    specVersion?: string;
+    title?: string;
+    endpoints: number;
+    issues: APISecurityIssue[];
+    coverage: SecurityCoverage;
+    score: number;
+    summary: APISecuritySummary;
+}
+/**
+ * Security coverage metrics
+ */
+export interface SecurityCoverage {
+    endpointsWithAuth: number;
+    endpointsWithoutAuth: number;
+    endpointsWithValidation: number;
+    endpointsWithRateLimiting: number;
+    totalEndpoints: number;
+    authCoverage: number;
+    validationCoverage: number;
+}
+/**
+ * API security summary
+ */
+export interface APISecuritySummary {
+    criticalIssues: number;
+    highIssues: number;
+    mediumIssues: number;
+    lowIssues: number;
+    topCategories: Array<{
+        category: APISecurityCategory;
+        count: number;
+    }>;
+    recommendations: string[];
+}
+/**
+ * API security analyzer options
+ */
+export interface APISecurityOptions {
+    checkAuth?: boolean;
+    checkInjection?: boolean;
+    checkDataExposure?: boolean;
+    checkRateLimiting?: boolean;
+    checkCORS?: boolean;
+    skipPaths?: string[];
+    customRules?: APISecurityRule[];
+}
+/**
+ * Custom API security rule
+ */
+export interface APISecurityRule {
+    id: string;
+    name: string;
+    severity: Severity;
+    category: APISecurityCategory;
+    check: (endpoint: APIEndpoint, spec: OpenAPISpec) => boolean;
+    message: string;
+    recommendation: string;
+}
+/**
+ * OpenAPI specification (simplified)
+ */
+export interface OpenAPISpec {
+    openapi?: string;
+    swagger?: string;
+    info?: {
+        title?: string;
+        version?: string;
+    };
+    servers?: Array<{
+        url: string;
+        description?: string;
+    }>;
+    paths?: Record<string, PathItem>;
+    components?: {
+        securitySchemes?: Record<string, SecurityScheme>;
+        schemas?: Record<string, SchemaObject>;
+    };
+    security?: SecurityRequirement[];
+}
+/**
+ * Path item
+ */
+interface PathItem {
+    get?: OperationObject;
+    post?: OperationObject;
+    put?: OperationObject;
+    patch?: OperationObject;
+    delete?: OperationObject;
+    options?: OperationObject;
+    head?: OperationObject;
+    parameters?: APIParameter[];
+}
+/**
+ * Operation object
+ */
+interface OperationObject {
+    operationId?: string;
+    summary?: string;
+    description?: string;
+    tags?: string[];
+    parameters?: APIParameter[];
+    requestBody?: APIRequestBody;
+    responses?: Record<string, APIResponse>;
+    security?: SecurityRequirement[];
+    deprecated?: boolean;
+}
+/**
+ * Security scheme
+ */
+interface SecurityScheme {
+    type: 'apiKey' | 'http' | 'oauth2' | 'openIdConnect';
+    description?: string;
+    name?: string;
+    in?: 'query' | 'header' | 'cookie';
+    scheme?: string;
+    bearerFormat?: string;
+}
+/**
+ * API Security Analyzer
+ * @trace DES-SEC3-API-001
+ */
+export declare class APISecurityAnalyzer {
+    private options;
+    private rules;
+    constructor(options?: APISecurityOptions);
+    /**
+     * Analyze OpenAPI specification
+     * @trace REQ-SEC3-API-001
+     */
+    analyze(spec: OpenAPISpec | string): Promise<APISecurityResult>;
+    /**
+     * Analyze from file path
+     */
+    analyzeFile(filePath: string): Promise<APISecurityResult>;
+    /**
+     * Extract endpoints from spec
+     */
+    private extractEndpoints;
+    /**
+     * Check if rule should run based on options
+     */
+    private shouldRunRule;
+    /**
+     * Calculate security coverage
+     */
+    private calculateCoverage;
+    /**
+     * Calculate security score
+     */
+    private calculateScore;
+    /**
+     * Generate summary
+     */
+    private generateSummary;
+    /**
+     * Simple YAML parser (for basic OpenAPI specs)
+     */
+    private parseSimpleYaml;
+    /**
+     * Convert issues to vulnerabilities
+     */
+    toVulnerabilities(result: APISecurityResult): Vulnerability[];
+}
+/**
+ * Create API security analyzer instance
+ */
+export declare function createAPISecurityAnalyzer(options?: APISecurityOptions): APISecurityAnalyzer;
+export {};
+//# sourceMappingURL=api-security-analyzer.d.ts.map

package/dist/analyzers/api/api-security-analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-security-analyzer.d.ts","sourceRoot":"","sources":["../../../src/analyzers/api/api-security-analyzer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAiB,MAAM,8BAA8B,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,gBAAgB,GAChB,eAAe,GACf,WAAW,GACX,eAAe,GACf,eAAe,GACf,MAAM,GACN,oBAAoB,GACpB,kBAAkB,GAClB,gBAAgB,GAChB,SAAS,GACT,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;IAChC,yBAAyB,EAAE,MAAM,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,mBAAmB,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE;QACL,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE;QACX,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;KACxC,CAAC;IACF,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAClC;AAED;;GAEG;AACH,UAAU,QAAQ;IAChB,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,UAAU,eAAe;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACjC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,UAAU,cAAc;IACtB,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,eAAe,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAkRD;;;GAGG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,KAAK,CAAuB;gBAExB,OAAO,GAAE,kBAAuB;IAc5C;;;OAGG;IACG,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA2ErE;;OAEG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAgB/D;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA4BxB;;OAEG;IACH,OAAO,CAAC,aAAa;IAmBrB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAsCzB;;OAEG;IACH,OAAO,CAAC,cAAc;IAmCtB;;OAEG;IACH,OAAO,CAAC,eAAe;IA6BvB;;OAEG;IACH,OAAO,CAAC,eAAe;IA2CvB;;OAEG;IACH,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa,EAAE;CAsB9D;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,mBAAmB,CAE3F"}