@nahisaho/musubix-security 1.8.0

package/dist/analysis/vulnerability-scanner.js

@@ -0,0 +1,417 @@
+/**
+ * @fileoverview Vulnerability scanner - static analysis for security vulnerabilities
+ * @module @nahisaho/musubix-security/analysis/vulnerability-scanner
+ * @trace REQ-SEC-SCAN-001, REQ-SEC-SCAN-002, REQ-SEC-SCAN-003
+ */
+import { SyntaxKind } from 'ts-morph';
+import { getASTParser } from '../infrastructure/ast-parser.js';
+import { createFileScanner } from '../infrastructure/file-scanner.js';
+/**
+ * Generate vulnerability ID
+ */
+let vulnCounter = 0;
+function generateVulnId() {
+    const date = new Date();
+    const dateStr = date.toISOString().slice(0, 10).replace(/-/g, '');
+    return `VULN-${dateStr}-${String(++vulnCounter).padStart(3, '0')}`;
+}
+/**
+ * Reset vulnerability counter (for testing)
+ */
+export function resetVulnCounter() {
+    vulnCounter = 0;
+}
+/**
+ * SQL Injection detector
+ * @trace REQ-SEC-SCAN-002
+ */
+const sqlInjectionDetector = {
+    ruleId: 'SEC-001',
+    detect(sourceFile, parser) {
+        const vulnerabilities = [];
+        const calls = sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression);
+        for (const call of calls) {
+            const funcName = parser.getFunctionName(call);
+            const sqlMethods = ['query', 'execute', 'raw', 'exec'];
+            if (funcName && sqlMethods.includes(funcName)) {
+                const args = call.getArguments();
+                if (args.length > 0) {
+                    const firstArg = args[0];
+                    // Check for template literal (potential string concatenation)
+                    if (firstArg.getKind() === SyntaxKind.TemplateExpression) {
+                        vulnerabilities.push({
+                            id: generateVulnId(),
+                            type: 'injection',
+                            severity: 'critical',
+                            cwes: ['CWE-89'],
+                            owasp: ['A03:2021'],
+                            location: parser.getLocation(call),
+                            description: 'Potential SQL injection: Template literal used in SQL query',
+                            recommendation: 'Use parameterized queries instead of string interpolation',
+                            confidence: 0.85,
+                            ruleId: this.ruleId,
+                            codeSnippet: parser.extractSnippet(call),
+                            detectedAt: new Date(),
+                        });
+                    }
+                    // Check for binary expression (string concatenation)
+                    if (firstArg.getKind() === SyntaxKind.BinaryExpression) {
+                        vulnerabilities.push({
+                            id: generateVulnId(),
+                            type: 'injection',
+                            severity: 'critical',
+                            cwes: ['CWE-89'],
+                            owasp: ['A03:2021'],
+                            location: parser.getLocation(call),
+                            description: 'Potential SQL injection: String concatenation in SQL query',
+                            recommendation: 'Use parameterized queries instead of string concatenation',
+                            confidence: 0.9,
+                            ruleId: this.ruleId,
+                            codeSnippet: parser.extractSnippet(call),
+                            detectedAt: new Date(),
+                        });
+                    }
+                }
+            }
+        }
+        return vulnerabilities;
+    },
+};
+/**
+ * Command injection detector
+ */
+const commandInjectionDetector = {
+    ruleId: 'SEC-002',
+    detect(sourceFile, parser) {
+        const vulnerabilities = [];
+        const calls = sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression);
+        for (const call of calls) {
+            const funcName = parser.getFunctionName(call);
+            const cmdMethods = ['exec', 'execSync', 'spawn', 'spawnSync', 'execFile'];
+            if (funcName && cmdMethods.includes(funcName)) {
+                const args = call.getArguments();
+                if (args.length > 0) {
+                    const firstArg = args[0];
+                    // Check for template literal or binary expression
+                    if (firstArg.getKind() === SyntaxKind.TemplateExpression ||
+                        firstArg.getKind() === SyntaxKind.BinaryExpression) {
+                        vulnerabilities.push({
+                            id: generateVulnId(),
+                            type: 'command-injection',
+                            severity: 'critical',
+                            cwes: ['CWE-78'],
+                            owasp: ['A03:2021'],
+                            location: parser.getLocation(call),
+                            description: 'Potential command injection: Unsafe command construction',
+                            recommendation: 'Use execFile with array arguments or properly escape shell arguments',
+                            confidence: 0.85,
+                            ruleId: this.ruleId,
+                            codeSnippet: parser.extractSnippet(call),
+                            detectedAt: new Date(),
+                        });
+                    }
+                }
+            }
+        }
+        return vulnerabilities;
+    },
+};
+/**
+ * Path traversal detector
+ */
+const pathTraversalDetector = {
+    ruleId: 'SEC-003',
+    detect(sourceFile, parser) {
+        const vulnerabilities = [];
+        const calls = sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression);
+        for (const call of calls) {
+            const funcName = parser.getFunctionName(call);
+            const fsMethods = [
+                'readFile', 'readFileSync', 'writeFile', 'writeFileSync',
+                'readdir', 'readdirSync', 'unlink', 'unlinkSync',
+                'stat', 'statSync', 'access', 'accessSync',
+            ];
+            if (funcName && fsMethods.includes(funcName)) {
+                const args = call.getArguments();
+                if (args.length > 0) {
+                    const firstArg = args[0];
+                    // Check for template literal or binary expression
+                    if (firstArg.getKind() === SyntaxKind.TemplateExpression ||
+                        firstArg.getKind() === SyntaxKind.BinaryExpression) {
+                        vulnerabilities.push({
+                            id: generateVulnId(),
+                            type: 'path-traversal',
+                            severity: 'high',
+                            cwes: ['CWE-22'],
+                            owasp: ['A01:2021'],
+                            location: parser.getLocation(call),
+                            description: 'Potential path traversal: User input may be used in file path',
+                            recommendation: 'Validate and sanitize file paths, use path.resolve() with base directory check',
+                            confidence: 0.75,
+                            ruleId: this.ruleId,
+                            codeSnippet: parser.extractSnippet(call),
+                            detectedAt: new Date(),
+                        });
+                    }
+                }
+            }
+        }
+        return vulnerabilities;
+    },
+};
+/**
+ * XSS detector
+ */
+const xssDetector = {
+    ruleId: 'SEC-004',
+    detect(sourceFile, parser) {
+        const vulnerabilities = [];
+        const calls = sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression);
+        for (const call of calls) {
+            const funcName = parser.getFunctionName(call);
+            const receiverName = parser.getReceiverName(call);
+            // Check res.send(), res.write(), res.end() with template literals
+            if (receiverName === 'res' &&
+                funcName &&
+                ['send', 'write', 'end', 'render'].includes(funcName)) {
+                const args = call.getArguments();
+                if (args.length > 0) {
+                    const firstArg = args[0];
+                    if (firstArg.getKind() === SyntaxKind.TemplateExpression) {
+                        vulnerabilities.push({
+                            id: generateVulnId(),
+                            type: 'xss',
+                            severity: 'high',
+                            cwes: ['CWE-79'],
+                            owasp: ['A03:2021'],
+                            location: parser.getLocation(call),
+                            description: 'Potential XSS: Unescaped output to response',
+                            recommendation: 'Use HTML escaping or a template engine with auto-escaping',
+                            confidence: 0.7,
+                            ruleId: this.ruleId,
+                            codeSnippet: parser.extractSnippet(call),
+                            detectedAt: new Date(),
+                        });
+                    }
+                }
+            }
+            // Check innerHTML assignment (requires property access analysis)
+            const expr = call.getExpression();
+            if (expr.getText().includes('innerHTML')) {
+                vulnerabilities.push({
+                    id: generateVulnId(),
+                    type: 'xss',
+                    severity: 'high',
+                    cwes: ['CWE-79'],
+                    owasp: ['A03:2021'],
+                    location: parser.getLocation(call),
+                    description: 'Potential XSS: innerHTML assignment detected',
+                    recommendation: 'Use textContent or properly sanitize HTML content',
+                    confidence: 0.8,
+                    ruleId: this.ruleId,
+                    codeSnippet: parser.extractSnippet(call),
+                    detectedAt: new Date(),
+                });
+            }
+        }
+        return vulnerabilities;
+    },
+};
+/**
+ * Eval detector
+ */
+const evalDetector = {
+    ruleId: 'SEC-005',
+    detect(sourceFile, parser) {
+        const vulnerabilities = [];
+        const calls = sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression);
+        for (const call of calls) {
+            const funcName = parser.getFunctionName(call);
+            if (funcName === 'eval' || funcName === 'Function') {
+                vulnerabilities.push({
+                    id: generateVulnId(),
+                    type: 'code-injection',
+                    severity: 'critical',
+                    cwes: ['CWE-94', 'CWE-95'],
+                    owasp: ['A03:2021'],
+                    location: parser.getLocation(call),
+                    description: `Potential code injection: ${funcName}() usage detected`,
+                    recommendation: 'Avoid eval() and new Function(). Use safer alternatives.',
+                    confidence: 0.95,
+                    ruleId: this.ruleId,
+                    codeSnippet: parser.extractSnippet(call),
+                    detectedAt: new Date(),
+                });
+            }
+        }
+        return vulnerabilities;
+    },
+};
+/**
+ * Prototype pollution detector
+ */
+const prototypePollutionDetector = {
+    ruleId: 'SEC-006',
+    detect(sourceFile, parser) {
+        const vulnerabilities = [];
+        const calls = sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression);
+        for (const call of calls) {
+            const funcName = parser.getFunctionName(call);
+            // Object.assign with user input
+            if (funcName === 'assign') {
+                const receiverName = parser.getReceiverName(call);
+                if (receiverName === 'Object') {
+                    // Check if first argument is Object.prototype or {}
+                    vulnerabilities.push({
+                        id: generateVulnId(),
+                        type: 'prototype-pollution',
+                        severity: 'high',
+                        cwes: ['CWE-1321'],
+                        owasp: ['A08:2021'],
+                        location: parser.getLocation(call),
+                        description: 'Potential prototype pollution: Object.assign() with external input',
+                        recommendation: 'Validate object keys, use Map instead, or freeze prototype',
+                        confidence: 0.6,
+                        ruleId: this.ruleId,
+                        codeSnippet: parser.extractSnippet(call),
+                        detectedAt: new Date(),
+                    });
+                }
+            }
+        }
+        // Check for __proto__ access
+        const propertyAccess = sourceFile.getDescendantsOfKind(SyntaxKind.PropertyAccessExpression);
+        for (const access of propertyAccess) {
+            if (access.getName() === '__proto__') {
+                vulnerabilities.push({
+                    id: generateVulnId(),
+                    type: 'prototype-pollution',
+                    severity: 'high',
+                    cwes: ['CWE-1321'],
+                    owasp: ['A08:2021'],
+                    location: parser.getLocation(access),
+                    description: 'Potential prototype pollution: __proto__ access detected',
+                    recommendation: 'Avoid __proto__ access, use Object.getPrototypeOf() if needed',
+                    confidence: 0.85,
+                    ruleId: this.ruleId,
+                    codeSnippet: parser.extractSnippet(access),
+                    detectedAt: new Date(),
+                });
+            }
+        }
+        return vulnerabilities;
+    },
+};
+/**
+ * All built-in detectors
+ */
+const DETECTORS = [
+    sqlInjectionDetector,
+    commandInjectionDetector,
+    pathTraversalDetector,
+    xssDetector,
+    evalDetector,
+    prototypePollutionDetector,
+];
+/**
+ * Vulnerability scanner
+ */
+export class VulnerabilityScanner {
+    parser;
+    fileScanner;
+    detectors;
+    constructor(options) {
+        this.parser = getASTParser(options?.tsConfigPath);
+        this.fileScanner = createFileScanner();
+        this.detectors = [...DETECTORS];
+    }
+    /**
+     * Scan a single file
+     */
+    scanFile(filePath) {
+        const sourceFile = this.parser.parseFile(filePath);
+        const vulnerabilities = [];
+        for (const detector of this.detectors) {
+            const detected = detector.detect(sourceFile, this.parser);
+            vulnerabilities.push(...detected);
+        }
+        return vulnerabilities;
+    }
+    /**
+     * Scan a directory
+     */
+    async scanDirectory(rootPath, options) {
+        const startTime = Date.now();
+        const files = await this.fileScanner.scan(rootPath);
+        const vulnerabilities = [];
+        let scannedFiles = 0;
+        let skippedFiles = 0;
+        for (const file of files) {
+            // Apply exclude patterns
+            if (options?.excludePatterns?.some((p) => file.relativePath.includes(p))) {
+                skippedFiles++;
+                continue;
+            }
+            // Apply max file size
+            if (options?.maxFileSize && file.size > options.maxFileSize) {
+                skippedFiles++;
+                continue;
+            }
+            try {
+                const fileVulns = this.scanFile(file.path);
+                // Apply severity filter
+                const filtered = options?.severityFilter
+                    ? fileVulns.filter((v) => options.severityFilter.includes(v.severity))
+                    : fileVulns;
+                vulnerabilities.push(...filtered);
+                scannedFiles++;
+            }
+            catch (error) {
+                console.warn(`Warning: Failed to scan ${file.path}: ${error}`);
+                skippedFiles++;
+            }
+        }
+        const duration = Date.now() - startTime;
+        return {
+            vulnerabilities,
+            scannedFiles,
+            skippedFiles,
+            duration,
+            timestamp: new Date(),
+            options: options ?? {},
+            summary: {
+                critical: vulnerabilities.filter((v) => v.severity === 'critical').length,
+                high: vulnerabilities.filter((v) => v.severity === 'high').length,
+                medium: vulnerabilities.filter((v) => v.severity === 'medium').length,
+                low: vulnerabilities.filter((v) => v.severity === 'low').length,
+                info: vulnerabilities.filter((v) => v.severity === 'info').length,
+                total: vulnerabilities.length,
+            },
+        };
+    }
+    /**
+     * Add a custom detector
+     */
+    addDetector(detector) {
+        this.detectors.push(detector);
+    }
+    /**
+     * Get list of rule IDs
+     */
+    getRuleIds() {
+        return this.detectors.map((d) => d.ruleId);
+    }
+    /**
+     * Get number of rules
+     */
+    getRuleCount() {
+        return this.detectors.length;
+    }
+}
+/**
+ * Create a vulnerability scanner
+ */
+export function createVulnerabilityScanner(options) {
+    return new VulnerabilityScanner(options);
+}
+//# sourceMappingURL=vulnerability-scanner.js.map

package/dist/analysis/vulnerability-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vulnerability-scanner.js","sourceRoot":"","sources":["../../src/analysis/vulnerability-scanner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAMtC,OAAO,EAAa,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAe,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAUnF;;GAEG;AACH,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClE,OAAO,QAAQ,OAAO,IAAI,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,WAAW,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,oBAAoB,GAA0B;IAClD,MAAM,EAAE,SAAS;IACjB,MAAM,CAAC,UAAsB,EAAE,MAAiB;QAC9C,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAEzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAEvD,IAAI,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAEzB,8DAA8D;oBAC9D,IAAI,QAAQ,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,kBAAkB,EAAE,CAAC;wBACzD,eAAe,CAAC,IAAI,CAAC;4BACnB,EAAE,EAAE,cAAc,EAAE;4BACpB,IAAI,EAAE,WAAW;4BACjB,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,CAAC,QAAQ,CAAC;4BAChB,KAAK,EAAE,CAAC,UAAU,CAAC;4BACnB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;4BAClC,WAAW,EAAE,6DAA6D;4BAC1E,cAAc,EAAE,2DAA2D;4BAC3E,UAAU,EAAE,IAAI;4BAChB,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;4BACxC,UAAU,EAAE,IAAI,IAAI,EAAE;yBACvB,CAAC,CAAC;oBACL,CAAC;oBAED,qDAAqD;oBACrD,IAAI,QAAQ,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,gBAAgB,EAAE,CAAC;wBACvD,eAAe,CAAC,IAAI,CAAC;4BACnB,EAAE,EAAE,cAAc,EAAE;4BACpB,IAAI,EAAE,WAAW;4BACjB,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,CAAC,QAAQ,CAAC;4BAChB,KAAK,EAAE,CAAC,UAAU,CAAC;4BACnB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;4BAClC,WAAW,EAAE,4DAA4D;4BACzE,cAAc,EAAE,2DAA2D;4BAC3E,UAAU,EAAE,GAAG;4BACf,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;4BACxC,UAAU,EAAE,IAAI,IAAI,EAAE;yBACvB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,wBAAwB,GAA0B;IACtD,MAAM,EAAE,SAAS;IACjB,MAAM,CAAC,UAAsB,EAAE,MAAiB;QAC9C,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAEzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;YAE1E,IAAI,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAEzB,kDAAkD;oBAClD,IACE,QAAQ,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,kBAAkB;wBACpD,QAAQ,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,gBAAgB,EAClD,CAAC;wBACD,eAAe,CAAC,IAAI,CAAC;4BACnB,EAAE,EAAE,cAAc,EAAE;4BACpB,IAAI,EAAE,mBAAmB;4BACzB,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,CAAC,QAAQ,CAAC;4BAChB,KAAK,EAAE,CAAC,UAAU,CAAC;4BACnB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;4BAClC,WAAW,EAAE,0DAA0D;4BACvE,cAAc,EAAE,sEAAsE;4BACtF,UAAU,EAAE,IAAI;4BAChB,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;4BACxC,UAAU,EAAE,IAAI,IAAI,EAAE;yBACvB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,qBAAqB,GAA0B;IACnD,MAAM,EAAE,SAAS;IACjB,MAAM,CAAC,UAAsB,EAAE,MAAiB;QAC9C,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAEzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG;gBAChB,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe;gBACxD,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY;gBAChD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY;aAC3C,CAAC;YAEF,IAAI,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAEzB,kDAAkD;oBAClD,IACE,QAAQ,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,kBAAkB;wBACpD,QAAQ,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,gBAAgB,EAClD,CAAC;wBACD,eAAe,CAAC,IAAI,CAAC;4BACnB,EAAE,EAAE,cAAc,EAAE;4BACpB,IAAI,EAAE,gBAAgB;4BACtB,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,CAAC,QAAQ,CAAC;4BAChB,KAAK,EAAE,CAAC,UAAU,CAAC;4BACnB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;4BAClC,WAAW,EAAE,+DAA+D;4BAC5E,cAAc,EAAE,gFAAgF;4BAChG,UAAU,EAAE,IAAI;4BAChB,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;4BACxC,UAAU,EAAE,IAAI,IAAI,EAAE;yBACvB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,GAA0B;IACzC,MAAM,EAAE,SAAS;IACjB,MAAM,CAAC,UAAsB,EAAE,MAAiB;QAC9C,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAEzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAElD,kEAAkE;YAClE,IACE,YAAY,KAAK,KAAK;gBACtB,QAAQ;gBACR,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACrD,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBACzB,IAAI,QAAQ,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,kBAAkB,EAAE,CAAC;wBACzD,eAAe,CAAC,IAAI,CAAC;4BACnB,EAAE,EAAE,cAAc,EAAE;4BACpB,IAAI,EAAE,KAAK;4BACX,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,CAAC,QAAQ,CAAC;4BAChB,KAAK,EAAE,CAAC,UAAU,CAAC;4BACnB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;4BAClC,WAAW,EAAE,6CAA6C;4BAC1D,cAAc,EAAE,2DAA2D;4BAC3E,UAAU,EAAE,GAAG;4BACf,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;4BACxC,UAAU,EAAE,IAAI,IAAI,EAAE;yBACvB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzC,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,cAAc,EAAE;oBACpB,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,KAAK,EAAE,CAAC,UAAU,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;oBAClC,WAAW,EAAE,8CAA8C;oBAC3D,cAAc,EAAE,mDAAmD;oBACnE,UAAU,EAAE,GAAG;oBACf,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;oBACxC,UAAU,EAAE,IAAI,IAAI,EAAE;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,YAAY,GAA0B;IAC1C,MAAM,EAAE,SAAS;IACjB,MAAM,CAAC,UAAsB,EAAE,MAAiB;QAC9C,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAEzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAE9C,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACnD,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,cAAc,EAAE;oBACpB,IAAI,EAAE,gBAAgB;oBACtB,QAAQ,EAAE,UAAU;oBACpB,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;oBAC1B,KAAK,EAAE,CAAC,UAAU,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;oBAClC,WAAW,EAAE,6BAA6B,QAAQ,mBAAmB;oBACrE,cAAc,EAAE,0DAA0D;oBAC1E,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;oBACxC,UAAU,EAAE,IAAI,IAAI,EAAE;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,0BAA0B,GAA0B;IACxD,MAAM,EAAE,SAAS;IACjB,MAAM,CAAC,UAAsB,EAAE,MAAiB;QAC9C,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAEzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAE9C,gCAAgC;YAChC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBAClD,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;oBAC9B,oDAAoD;oBACpD,eAAe,CAAC,IAAI,CAAC;wBACnB,EAAE,EAAE,cAAc,EAAE;wBACpB,IAAI,EAAE,qBAAqB;wBAC3B,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,CAAC,UAAU,CAAC;wBAClB,KAAK,EAAE,CAAC,UAAU,CAAC;wBACnB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;wBAClC,WAAW,EAAE,oEAAoE;wBACjF,cAAc,EAAE,4DAA4D;wBAC5E,UAAU,EAAE,GAAG;wBACf,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;wBACxC,UAAU,EAAE,IAAI,IAAI,EAAE;qBACvB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,cAAc,GAAG,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC5F,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,WAAW,EAAE,CAAC;gBACrC,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,cAAc,EAAE;oBACpB,IAAI,EAAE,qBAAqB;oBAC3B,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,CAAC,UAAU,CAAC;oBAClB,KAAK,EAAE,CAAC,UAAU,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;oBACpC,WAAW,EAAE,0DAA0D;oBACvE,cAAc,EAAE,+DAA+D;oBAC/E,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;oBAC1C,UAAU,EAAE,IAAI,IAAI,EAAE;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,SAAS,GAA4B;IACzC,oBAAoB;IACpB,wBAAwB;IACxB,qBAAqB;IACrB,WAAW;IACX,YAAY;IACZ,0BAA0B;CAC3B,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACvB,MAAM,CAAY;IAClB,WAAW,CAAc;IACzB,SAAS,CAA0B;IAE3C,YAAY,OAAmC;QAC7C,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,iBAAiB,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,eAAe,GAAoB,EAAE,CAAC;QAE5C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1D,eAAe,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,OAAqB;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpD,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,yBAAyB;YACzB,IAAI,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,YAAY,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,sBAAsB;YACtB,IAAI,OAAO,EAAE,WAAW,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC5D,YAAY,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAE3C,wBAAwB;gBACxB,MAAM,QAAQ,GAAG,OAAO,EAAE,cAAc;oBACtC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,cAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;oBACvE,CAAC,CAAC,SAAS,CAAC;gBAEd,eAAe,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBAClC,YAAY,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;gBAC/D,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,OAAO;YACL,eAAe;YACf,YAAY;YACZ,YAAY;YACZ,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,OAAO,EAAE,OAAO,IAAI,EAAE;YACtB,OAAO,EAAE;gBACP,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;gBACzE,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;gBACjE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;gBACrE,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;gBAC/D,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;gBACjE,KAAK,EAAE,eAAe,CAAC,MAAM;aAC9B;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAA+B;QACzC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAC/B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmC;IAC5E,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC"}

package/dist/cli/commands.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @fileoverview Security CLI commands
+ * @module @nahisaho/musubix-security/cli
+ * @trace REQ-SEC-CLI-001
+ */
+import { Command } from 'commander';
+/**
+ * Create security CLI command
+ */
+export declare function createSecurityCLI(): Command;
+/**
+ * Run CLI
+ */
+export declare function runCLI(args?: string[]): Promise<void>;
+//# sourceMappingURL=commands.d.ts.map

package/dist/cli/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgKpC;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAsR3C;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,IAAI,GAAE,MAAM,EAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzE"}