@nahisaho/musubix-security 1.8.0 → 1.8.5

package/dist/types/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/types/pipeline.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/types/result.d.ts

@@ -0,0 +1,134 @@
+/**
+ * @fileoverview Result aggregation type definitions
+ * @module @nahisaho/musubix-security/types/result
+ * @trace DES-SEC2-ORCH-003, REQ-SEC2-REPORT-001
+ */
+import type { Vulnerability, Severity } from './vulnerability.js';
+import type { TaintPath } from './taint.js';
+import type { Secret } from './secret.js';
+import type { AuditResult } from './dependency.js';
+/**
+ * Detection source type
+ */
+export type DetectionSource = 'sast' | 'taint' | 'secret' | 'dependency' | 'container' | 'iac' | 'ai' | 'neuro-symbolic';
+/**
+ * Aggregated vulnerability with source tracking
+ */
+export interface AggregatedVulnerability extends Vulnerability {
+    /** Detection sources (may be multiple) */
+    sources: DetectionSource[];
+    /** Original vulnerability IDs before aggregation */
+    originalIds: string[];
+    /** Whether this is a duplicate detection */
+    isDuplicate: boolean;
+    /** Priority score (calculated from severity, confidence, etc.) */
+    priorityScore: number;
+    /** Risk score (0-100) */
+    riskScore: number;
+    /** Related findings (similar vulnerabilities) */
+    relatedFindings?: string[];
+}
+/**
+ * Analysis result from any analyzer
+ */
+export interface AnalysisResult {
+    /** Result type identifier */
+    type: DetectionSource;
+    /** Vulnerabilities found */
+    vulnerabilities: Vulnerability[];
+    /** Taint paths (if taint analysis) */
+    taintPaths?: TaintPath[];
+    /** Secrets (if secret detection) */
+    secrets?: Secret[];
+    /** Audit result (if dependency audit) */
+    auditResult?: AuditResult;
+    /** Analysis duration in milliseconds */
+    duration: number;
+    /** Timestamp */
+    timestamp: Date;
+}
+/**
+ * Aggregated result combining all analyzers
+ * @trace DES-SEC2-ORCH-003
+ */
+export interface AggregatedResult {
+    /** Aggregated vulnerabilities (deduplicated and prioritized) */
+    vulnerabilities: AggregatedVulnerability[];
+    /** Total risk score (0-100) */
+    riskScore: number;
+    /** Summary by severity */
+    bySeverity: Record<Severity, number>;
+    /** Summary by source */
+    bySource: Record<DetectionSource, number>;
+    /** Duplicates removed */
+    duplicatesRemoved: number;
+    /** Analysis sources included */
+    sources: DetectionSource[];
+    /** Aggregation timestamp */
+    aggregatedAt: Date;
+    /** Aggregation duration */
+    aggregationDuration: number;
+}
+/**
+ * Deduplication rule
+ */
+export interface DeduplicationRule {
+    /** Rule ID */
+    id: string;
+    /** Fields to compare */
+    compareFields: (keyof Vulnerability)[];
+    /** Similarity threshold (0.0-1.0) */
+    similarityThreshold: number;
+    /** Merge strategy when duplicates found */
+    mergeStrategy: 'keep-first' | 'keep-highest-confidence' | 'merge';
+}
+/**
+ * Prioritization criteria
+ */
+export interface PrioritizationCriteria {
+    /** Severity weight */
+    severityWeight: number;
+    /** Confidence weight */
+    confidenceWeight: number;
+    /** Exploitability weight */
+    exploitabilityWeight: number;
+    /** Impact weight */
+    impactWeight: number;
+    /** Custom scoring function */
+    customScorer?: (vuln: Vulnerability) => number;
+}
+/**
+ * Default prioritization criteria
+ */
+export declare const DEFAULT_PRIORITIZATION: PrioritizationCriteria;
+/**
+ * Severity weights for scoring
+ */
+export declare const SEVERITY_SCORES: Record<Severity, number>;
+/**
+ * Result aggregator interface
+ * @trace DES-SEC2-ORCH-003
+ */
+export interface IResultAggregator {
+    /**
+     * Aggregate results from multiple analyzers
+     */
+    aggregate(results: AnalysisResult[]): AggregatedResult;
+    /**
+     * Deduplicate vulnerabilities
+     */
+    deduplicate(vulnerabilities: Vulnerability[], rules?: DeduplicationRule[]): Vulnerability[];
+    /**
+     * Prioritize vulnerabilities
+     */
+    prioritize(vulnerabilities: Vulnerability[], criteria?: PrioritizationCriteria): Vulnerability[];
+    /**
+     * Calculate overall risk score
+     */
+    calculateRiskScore(vulnerabilities: Vulnerability[]): number;
+    /**
+     * Merge similar vulnerabilities
+     */
+    mergeSimilar(vuln1: Vulnerability, vuln2: Vulnerability): Vulnerability;
+}
+//# sourceMappingURL=result.d.ts.map

package/dist/types/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/types/result.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,MAAM,GACN,OAAO,GACP,QAAQ,GACR,YAAY,GACZ,WAAW,GACX,KAAK,GACL,IAAI,GACJ,gBAAgB,CAAC;AAErB;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,0CAA0C;IAC1C,OAAO,EAAE,eAAe,EAAE,CAAC;IAE3B,oDAAoD;IACpD,WAAW,EAAE,MAAM,EAAE,CAAC;IAEtB,4CAA4C;IAC5C,WAAW,EAAE,OAAO,CAAC;IAErB,kEAAkE;IAClE,aAAa,EAAE,MAAM,CAAC;IAEtB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAElB,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,IAAI,EAAE,eAAe,CAAC;IAEtB,4BAA4B;IAC5B,eAAe,EAAE,aAAa,EAAE,CAAC;IAEjC,sCAAsC;IACtC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IAEzB,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,yCAAyC;IACzC,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IAEjB,gBAAgB;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,eAAe,EAAE,uBAAuB,EAAE,CAAC;IAE3C,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAElB,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAErC,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAE1C,yBAAyB;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAE1B,gCAAgC;IAChC,OAAO,EAAE,eAAe,EAAE,CAAC;IAE3B,4BAA4B;IAC5B,YAAY,EAAE,IAAI,CAAC;IAEnB,2BAA2B;IAC3B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,cAAc;IACd,EAAE,EAAE,MAAM,CAAC;IAEX,wBAAwB;IACxB,aAAa,EAAE,CAAC,MAAM,aAAa,CAAC,EAAE,CAAC;IAEvC,qCAAqC;IACrC,mBAAmB,EAAE,MAAM,CAAC;IAE5B,2CAA2C;IAC3C,aAAa,EAAE,YAAY,GAAG,yBAAyB,GAAG,OAAO,CAAC;CACnE;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IAEvB,wBAAwB;IACxB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,4BAA4B;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAE7B,oBAAoB;IACpB,YAAY,EAAE,MAAM,CAAC;IAErB,8BAA8B;IAC9B,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,MAAM,CAAC;CAChD;AAED;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,sBAKpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAMpD,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,gBAAgB,CAAC;IAEvD;;OAEG;IACH,WAAW,CACT,eAAe,EAAE,aAAa,EAAE,EAChC,KAAK,CAAC,EAAE,iBAAiB,EAAE,GAC1B,aAAa,EAAE,CAAC;IAEnB;;OAEG;IACH,UAAU,CACR,eAAe,EAAE,aAAa,EAAE,EAChC,QAAQ,CAAC,EAAE,sBAAsB,GAChC,aAAa,EAAE,CAAC;IAEnB;;OAEG;IACH,kBAAkB,CAAC,eAAe,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAE7D;;OAEG;IACH,YAAY,CACV,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,aAAa,GACnB,aAAa,CAAC;CAClB"}

package/dist/types/result.js

@@ -0,0 +1,25 @@
+/**
+ * @fileoverview Result aggregation type definitions
+ * @module @nahisaho/musubix-security/types/result
+ * @trace DES-SEC2-ORCH-003, REQ-SEC2-REPORT-001
+ */
+/**
+ * Default prioritization criteria
+ */
+export const DEFAULT_PRIORITIZATION = {
+    severityWeight: 0.4,
+    confidenceWeight: 0.3,
+    exploitabilityWeight: 0.2,
+    impactWeight: 0.1,
+};
+/**
+ * Severity weights for scoring
+ */
+export const SEVERITY_SCORES = {
+    critical: 100,
+    high: 80,
+    medium: 50,
+    low: 20,
+    info: 5,
+};
+//# sourceMappingURL=result.js.map

package/dist/types/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/types/result.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwIH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D,cAAc,EAAE,GAAG;IACnB,gBAAgB,EAAE,GAAG;IACrB,oBAAoB,EAAE,GAAG;IACzB,YAAY,EAAE,GAAG;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAA6B;IACvD,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,EAAE;IACV,GAAG,EAAE,EAAE;IACP,IAAI,EAAE,CAAC;CACR,CAAC"}

package/dist/types/vulnerability.d.ts

@@ -6,11 +6,11 @@
 /**
  * OWASP Top 10 (2021) vulnerability categories
  */
-export type OWASPCategory = 'A01:2021' | 'A02:2021' | 'A03:2021' | 'A04:2021' | 'A05:2021' | 'A06:2021' | 'A07:2021' | 'A08:2021' | 'A09:2021' | 'A10:2021';
+export type OWASPCategory = 'A01:2021' | 'A02:2021' | 'A03:2021' | 'A04:2021' | 'A05:2021' | 'A06:2021' | 'A07:2021' | 'A08:2021' | 'A09:2021' | 'A10:2021' | 'A00:Unknown';
 /**
  * Vulnerability type classification
  */
-export type VulnerabilityType = 'injection' | 'xss' | 'broken-access' | 'broken-auth' | 'sensitive-exposure' | 'xxe' | 'misconfig' | 'insecure-deser' | 'vuln-components' | 'insufficient-logging' | 'ssrf' | 'path-traversal' | 'command-injection' | 'code-injection' | 'open-redirect' | 'prototype-pollution';
+export type VulnerabilityType = 'injection' | 'xss' | 'broken-access' | 'broken-auth' | 'sensitive-exposure' | 'xxe' | 'misconfig' | 'insecure-deser' | 'vuln-components' | 'insufficient-logging' | 'ssrf' | 'path-traversal' | 'command-injection' | 'code-injection' | 'open-redirect' | 'prototype-pollution' | 'prompt-injection' | 'dependency' | 'configuration' | 'zero-day' | 'data-flow';
 /**
  * Severity levels for vulnerabilities
  */

package/dist/types/vulnerability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vulnerability.d.ts","sourceRoot":"","sources":["../../src/types/vulnerability.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,CAAC;AAEf;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,WAAW,GACX,KAAK,GACL,eAAe,GACf,aAAa,GACb,oBAAoB,GACpB,KAAK,GACL,WAAW,GACX,gBAAgB,GAChB,iBAAiB,GACjB,sBAAsB,GACtB,MAAM,GACN,gBAAgB,GAChB,mBAAmB,GACnB,gBAAgB,GAChB,eAAe,GACf,qBAAqB,CAAC;AAE1B;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvE;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,wCAAwC;IACxC,IAAI,EAAE,iBAAiB,CAAC;IACxB,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,+BAA+B;IAC/B,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,2BAA2B;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,UAAU,EAAE,IAAI,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC5B,sBAAsB;IACtB,QAAQ,CAAC,EAAE,CAAC,cAAc,GAAG,YAAY,GAAG,QAAQ,CAAC,EAAE,CAAC;IACxD,+BAA+B;IAC/B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6BAA6B;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,8BAA8B;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,wBAAwB;IACxB,OAAO,EAAE,WAAW,CAAC;IACrB,0BAA0B;IAC1B,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,IAAI,EAAE,iBAAiB,CAAC;IACxB,uBAAuB;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,mBAAmB;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,+BAA+B;IAC/B,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC"}
+{"version":3,"file":"vulnerability.d.ts","sourceRoot":"","sources":["../../src/types/vulnerability.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,aAAa,CAAC;AAElB;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,WAAW,GACX,KAAK,GACL,eAAe,GACf,aAAa,GACb,oBAAoB,GACpB,KAAK,GACL,WAAW,GACX,gBAAgB,GAChB,iBAAiB,GACjB,sBAAsB,GACtB,MAAM,GACN,gBAAgB,GAChB,mBAAmB,GACnB,gBAAgB,GAChB,eAAe,GACf,qBAAqB,GAErB,kBAAkB,GAClB,YAAY,GACZ,eAAe,GACf,UAAU,GACV,WAAW,CAAC;AAEhB;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvE;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,wCAAwC;IACxC,IAAI,EAAE,iBAAiB,CAAC;IACxB,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,+BAA+B;IAC/B,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,2BAA2B;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,UAAU,EAAE,IAAI,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC5B,sBAAsB;IACtB,QAAQ,CAAC,EAAE,CAAC,cAAc,GAAG,YAAY,GAAG,QAAQ,CAAC,EAAE,CAAC;IACxD,+BAA+B;IAC/B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6BAA6B;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,8BAA8B;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,wBAAwB;IACxB,OAAO,EAAE,WAAW,CAAC;IACrB,0BAA0B;IAC1B,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,IAAI,EAAE,iBAAiB,CAAC;IACxB,uBAAuB;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,mBAAmB;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,+BAA+B;IAC/B,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC"}

package/dist/types/zero-day.d.ts

@@ -0,0 +1,146 @@
+/**
+ * @fileoverview Zero-day detection type definitions
+ * @module @nahisaho/musubix-security/types/zero-day
+ * @trace DES-SEC2-SAST-003, REQ-SEC2-SAST-003
+ */
+import type { SourceLocation } from './vulnerability.js';
+/**
+ * Deviation type for zero-day candidates
+ */
+export type DeviationType = 'pattern-mismatch' | 'anomaly' | 'unsafe-practice';
+/**
+ * LLM analysis recommendation
+ */
+export type LLMRecommendation = 'review' | 'investigate' | 'safe';
+/**
+ * LLM analysis result for zero-day detection
+ * @trace REQ-SEC2-SAST-003
+ */
+export interface LLMAnalysisResult {
+    /** Vulnerability likelihood (0.0-1.0) */
+    vulnerabilityLikelihood: number;
+    /** Reasoning for the assessment */
+    reasoning: string;
+    /** Recommended action */
+    recommendedAction: LLMRecommendation;
+    /** Potential CWEs (educated guess) */
+    potentialCWEs: string[];
+    /** Similar known vulnerabilities */
+    similarVulnerabilities?: string[];
+}
+/**
+ * Risk factor contributing to zero-day score
+ */
+export interface RiskFactor {
+    /** Factor name */
+    name: string;
+    /** Weight in scoring (0.0-1.0) */
+    weight: number;
+    /** Description of the factor */
+    description: string;
+    /** Score for this factor (0-100) */
+    score: number;
+}
+/**
+ * Risk assessment for zero-day candidate
+ */
+export interface RiskAssessment {
+    /** Overall risk score (0-100) */
+    score: number;
+    /** Individual risk factors */
+    factors: RiskFactor[];
+    /** Recommendation based on score */
+    recommendation: LLMRecommendation;
+    /** Confidence in assessment (0.0-1.0) */
+    confidence: number;
+}
+/**
+ * Zero-day vulnerability candidate
+ * @trace REQ-SEC2-SAST-003
+ */
+export interface ZeroDayCandidate {
+    /** Unique identifier */
+    id: string;
+    /** Source code location */
+    location: SourceLocation;
+    /** Code snippet containing potential vulnerability */
+    codeSnippet: string;
+    /** Type of deviation detected */
+    deviationType: DeviationType;
+    /** Detection confidence (0.0-1.0) */
+    confidence: number;
+    /** LLM assessment (if performed) */
+    llmAssessment?: LLMAnalysisResult;
+    /** Severity is always 'potential' for zero-days */
+    severity: 'potential';
+    /** Explanation of why this was flagged */
+    explanation: string;
+    /** AST pattern that triggered detection */
+    triggerPattern?: string;
+    /** Risk assessment */
+    riskAssessment?: RiskAssessment;
+    /** Detection timestamp */
+    detectedAt: Date;
+    /** Related known patterns (for comparison) */
+    relatedPatterns?: string[];
+}
+/**
+ * Zero-day detection options
+ */
+export interface ZeroDayDetectionOptions {
+    /** Enable LLM analysis for candidates */
+    enableLLMAnalysis?: boolean;
+    /** Minimum confidence threshold (0.0-1.0) */
+    minConfidence?: number;
+    /** Maximum candidates to report */
+    maxCandidates?: number;
+    /** Risk score threshold (0-100) */
+    riskThreshold?: number;
+    /** Include pattern comparison */
+    includePatternComparison?: boolean;
+}
+/**
+ * Zero-day detection result
+ */
+export interface ZeroDayResult {
+    /** Detected candidates */
+    candidates: ZeroDayCandidate[];
+    /** Files analyzed */
+    filesAnalyzed: number;
+    /** Patterns compared */
+    patternsCompared: number;
+    /** LLM analyses performed */
+    llmAnalysesPerformed: number;
+    /** Analysis duration in milliseconds */
+    duration: number;
+    /** Summary statistics */
+    summary: {
+        totalCandidates: number;
+        highRisk: number;
+        mediumRisk: number;
+        lowRisk: number;
+    };
+}
+/**
+ * Zero-day detector interface
+ * @trace DES-SEC2-SAST-003
+ */
+export interface IZeroDayDetector {
+    /**
+     * Detect potential zero-day vulnerabilities
+     */
+    detect(files: string[], options?: ZeroDayDetectionOptions): Promise<ZeroDayResult>;
+    /**
+     * Analyze a specific code snippet for zero-day patterns
+     */
+    analyzeSnippet(code: string, context?: string): Promise<ZeroDayCandidate | null>;
+    /**
+     * Assess risk of a candidate
+     */
+    assessRisk(candidate: ZeroDayCandidate): Promise<RiskAssessment>;
+    /**
+     * Get LLM analysis for a candidate
+     */
+    getLLMAnalysis(candidate: ZeroDayCandidate): Promise<LLMAnalysisResult>;
+}
+//# sourceMappingURL=zero-day.d.ts.map

package/dist/types/zero-day.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-day.d.ts","sourceRoot":"","sources":["../../src/types/zero-day.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,kBAAkB,GAClB,SAAS,GACT,iBAAiB,CAAC;AAEtB;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,aAAa,GACb,MAAM,CAAC;AAEX;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,uBAAuB,EAAE,MAAM,CAAC;IAEhC,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAElB,yBAAyB;IACzB,iBAAiB,EAAE,iBAAiB,CAAC;IAErC,sCAAsC;IACtC,aAAa,EAAE,MAAM,EAAE,CAAC;IAExB,oCAAoC;IACpC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IAEf,gCAAgC;IAChC,WAAW,EAAE,MAAM,CAAC;IAEpB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IAEd,8BAA8B;IAC9B,OAAO,EAAE,UAAU,EAAE,CAAC;IAEtB,oCAAoC;IACpC,cAAc,EAAE,iBAAiB,CAAC;IAElC,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IAEX,2BAA2B;IAC3B,QAAQ,EAAE,cAAc,CAAC;IAEzB,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAC;IAEpB,iCAAiC;IACjC,aAAa,EAAE,aAAa,CAAC;IAE7B,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IAEnB,oCAAoC;IACpC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAElC,mDAAmD;IACnD,QAAQ,EAAE,WAAW,CAAC;IAEtB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IAEpB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,sBAAsB;IACtB,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,0BAA0B;IAC1B,UAAU,EAAE,IAAI,CAAC;IAEjB,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,yCAAyC;IACzC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,mCAAmC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,mCAAmC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,iCAAiC;IACjC,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,0BAA0B;IAC1B,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAE/B,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC;IAEtB,wBAAwB;IACxB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,6BAA6B;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAE7B,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,OAAO,EAAE;QACP,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,MAAM,CACJ,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,aAAa,CAAC,CAAC;IAE1B;;OAEG;IACH,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAEpC;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAEjE;;OAEG;IACH,cAAc,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACzE"}

package/dist/types/zero-day.js

@@ -0,0 +1,7 @@
+/**
+ * @fileoverview Zero-day detection type definitions
+ * @module @nahisaho/musubix-security/types/zero-day
+ * @trace DES-SEC2-SAST-003, REQ-SEC2-SAST-003
+ */
+export {};
+//# sourceMappingURL=zero-day.js.map

package/dist/types/zero-day.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-day.js","sourceRoot":"","sources":["../../src/types/zero-day.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nahisaho/musubix-security",
-  "version": "1.8.0",
+  "version": "1.8.5",
   "description": "Security analysis and vulnerability detection for MUSUBIX - Neuro-Symbolic AI Integration",
   "type": "module",
   "main": "./dist/index.js",
@@ -82,6 +82,6 @@
   "devDependencies": {
     "@types/node": "^20.0.0",
     "typescript": "^5.4.0",
-    "vitest": "^2.0.0"
+    "vitest": "^4.0.16"
   }
 }