@nahisaho/musubix-security 1.8.0

package/dist/infrastructure/ast-parser.d.ts

@@ -0,0 +1,87 @@
+/**
+ * @fileoverview TypeScript AST parser using ts-morph
+ * @module @nahisaho/musubix-security/infrastructure/ast-parser
+ * @trace REQ-SEC-SCAN-001, REQ-SEC-TAINT-001
+ */
+import { Project, SourceFile, Node, CallExpression, Identifier } from 'ts-morph';
+import type { SourceLocation } from '../types/index.js';
+/**
+ * AST Parser service for TypeScript/JavaScript analysis
+ */
+export declare class ASTParser {
+    private project;
+    private cache;
+    constructor(tsConfigPath?: string);
+    /**
+     * Parse a file and return its AST
+     */
+    parseFile(filePath: string): SourceFile;
+    /**
+     * Parse source code string
+     */
+    parseCode(code: string, fileName?: string): SourceFile;
+    /**
+     * Get source location from a node
+     */
+    getLocation(node: Node): SourceLocation;
+    /**
+     * Find all function calls in a file
+     */
+    findCallExpressions(sourceFile: SourceFile): CallExpression[];
+    /**
+     * Find all string literals in a file
+     */
+    findStringLiterals(sourceFile: SourceFile): Node[];
+    /**
+     * Find all identifiers in a file
+     */
+    findIdentifiers(sourceFile: SourceFile): Identifier[];
+    /**
+     * Get function/method name from a call expression
+     */
+    getFunctionName(callExpr: CallExpression): string | undefined;
+    /**
+     * Get the receiver object name for a method call
+     */
+    getReceiverName(callExpr: CallExpression): string | undefined;
+    /**
+     * Check if a node is inside a specific function/method
+     */
+    getEnclosingFunction(node: Node): Node | undefined;
+    /**
+     * Extract code snippet around a node
+     */
+    extractSnippet(node: Node, contextLines?: number): string;
+    /**
+     * Check if node represents user input source
+     */
+    isUserInputSource(callExpr: CallExpression): boolean;
+    /**
+     * Check if node is a dangerous sink
+     */
+    isDangerousSink(callExpr: CallExpression): {
+        isDangerous: boolean;
+        category?: string;
+    };
+    /**
+     * Clear cache for a file
+     */
+    invalidateCache(filePath: string): void;
+    /**
+     * Clear all caches
+     */
+    clearCache(): void;
+    /**
+     * Get project instance for advanced usage
+     */
+    getProject(): Project;
+}
+/**
+ * Get or create AST parser instance
+ */
+export declare function getASTParser(tsConfigPath?: string): ASTParser;
+/**
+ * Reset parser instance (for testing)
+ */
+export declare function resetASTParser(): void;
+//# sourceMappingURL=ast-parser.d.ts.map

package/dist/infrastructure/ast-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast-parser.d.ts","sourceRoot":"","sources":["../../src/infrastructure/ast-parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAc,cAAc,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;GAEG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,KAAK,CAAsC;gBAEvC,YAAY,CAAC,EAAE,MAAM;IAajC;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU;IAWvC;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAY,GAAG,UAAU;IAIzD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,cAAc;IAgBvC;;OAEG;IACH,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,cAAc,EAAE;IAI7D;;OAEG;IACH,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,EAAE;IAQlD;;OAEG;IACH,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,EAAE;IAIrD;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS;IAwB7D;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS;IAa7D;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,SAAS;IASlD;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,SAAI,GAAG,MAAM;IAYpD;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO;IAsCpD;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG;QAAE,WAAW,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;IAyDtF;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQvC;;OAEG;IACH,UAAU,IAAI,IAAI;IAOlB;;OAEG;IACH,UAAU,IAAI,OAAO;CAGtB;AAOD;;GAEG;AACH,wBAAgB,YAAY,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAK7D;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAKrC"}

package/dist/infrastructure/ast-parser.js

@@ -0,0 +1,273 @@
+/**
+ * @fileoverview TypeScript AST parser using ts-morph
+ * @module @nahisaho/musubix-security/infrastructure/ast-parser
+ * @trace REQ-SEC-SCAN-001, REQ-SEC-TAINT-001
+ */
+import { Project, Node, SyntaxKind } from 'ts-morph';
+/**
+ * AST Parser service for TypeScript/JavaScript analysis
+ */
+export class ASTParser {
+    project;
+    cache = new Map();
+    constructor(tsConfigPath) {
+        this.project = new Project({
+            tsConfigFilePath: tsConfigPath,
+            skipAddingFilesFromTsConfig: true,
+            compilerOptions: {
+                allowJs: true,
+                checkJs: false,
+                noEmit: true,
+                skipLibCheck: true,
+            },
+        });
+    }
+    /**
+     * Parse a file and return its AST
+     */
+    parseFile(filePath) {
+        const cached = this.cache.get(filePath);
+        if (cached) {
+            return cached;
+        }
+        const sourceFile = this.project.addSourceFileAtPath(filePath);
+        this.cache.set(filePath, sourceFile);
+        return sourceFile;
+    }
+    /**
+     * Parse source code string
+     */
+    parseCode(code, fileName = 'temp.ts') {
+        return this.project.createSourceFile(fileName, code, { overwrite: true });
+    }
+    /**
+     * Get source location from a node
+     */
+    getLocation(node) {
+        const sourceFile = node.getSourceFile();
+        const start = node.getStart();
+        const end = node.getEnd();
+        const startPos = sourceFile.getLineAndColumnAtPos(start);
+        const endPos = sourceFile.getLineAndColumnAtPos(end);
+        return {
+            file: sourceFile.getFilePath(),
+            startLine: startPos.line,
+            endLine: endPos.line,
+            startColumn: startPos.column - 1, // Convert to 0-based
+            endColumn: endPos.column - 1,
+        };
+    }
+    /**
+     * Find all function calls in a file
+     */
+    findCallExpressions(sourceFile) {
+        return sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression);
+    }
+    /**
+     * Find all string literals in a file
+     */
+    findStringLiterals(sourceFile) {
+        return [
+            ...sourceFile.getDescendantsOfKind(SyntaxKind.StringLiteral),
+            ...sourceFile.getDescendantsOfKind(SyntaxKind.NoSubstitutionTemplateLiteral),
+            ...sourceFile.getDescendantsOfKind(SyntaxKind.TemplateExpression),
+        ];
+    }
+    /**
+     * Find all identifiers in a file
+     */
+    findIdentifiers(sourceFile) {
+        return sourceFile.getDescendantsOfKind(SyntaxKind.Identifier);
+    }
+    /**
+     * Get function/method name from a call expression
+     */
+    getFunctionName(callExpr) {
+        const expr = callExpr.getExpression();
+        // Direct function call: functionName()
+        if (Node.isIdentifier(expr)) {
+            return expr.getText();
+        }
+        // Method call: obj.methodName()
+        if (Node.isPropertyAccessExpression(expr)) {
+            return expr.getName();
+        }
+        // Element access: obj['methodName']()
+        if (Node.isElementAccessExpression(expr)) {
+            const arg = expr.getArgumentExpression();
+            if (arg && Node.isStringLiteral(arg)) {
+                return arg.getLiteralValue();
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Get the receiver object name for a method call
+     */
+    getReceiverName(callExpr) {
+        const expr = callExpr.getExpression();
+        if (Node.isPropertyAccessExpression(expr)) {
+            const receiver = expr.getExpression();
+            if (Node.isIdentifier(receiver)) {
+                return receiver.getText();
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Check if a node is inside a specific function/method
+     */
+    getEnclosingFunction(node) {
+        return node.getFirstAncestor((ancestor) => Node.isFunctionDeclaration(ancestor) ||
+            Node.isFunctionExpression(ancestor) ||
+            Node.isArrowFunction(ancestor) ||
+            Node.isMethodDeclaration(ancestor));
+    }
+    /**
+     * Extract code snippet around a node
+     */
+    extractSnippet(node, contextLines = 2) {
+        const sourceFile = node.getSourceFile();
+        const fullText = sourceFile.getFullText();
+        const lines = fullText.split('\n');
+        const location = this.getLocation(node);
+        const startLine = Math.max(0, location.startLine - 1 - contextLines);
+        const endLine = Math.min(lines.length, location.endLine + contextLines);
+        return lines.slice(startLine, endLine).join('\n');
+    }
+    /**
+     * Check if node represents user input source
+     */
+    isUserInputSource(callExpr) {
+        const funcName = this.getFunctionName(callExpr);
+        const receiverName = this.getReceiverName(callExpr);
+        // Common user input patterns
+        const userInputPatterns = [
+            // Express.js
+            { receiver: 'req', methods: ['body', 'query', 'params', 'headers', 'cookies'] },
+            // Koa
+            { receiver: 'ctx', methods: ['request', 'query', 'params'] },
+            // DOM
+            { receiver: 'document', methods: ['getElementById', 'querySelector', 'querySelectorAll'] },
+            // Forms
+            { receiver: undefined, methods: ['prompt', 'confirm'] },
+        ];
+        for (const pattern of userInputPatterns) {
+            if (pattern.receiver && receiverName !== pattern.receiver)
+                continue;
+            if (funcName && pattern.methods.includes(funcName)) {
+                return true;
+            }
+        }
+        // Property access on request objects
+        const expr = callExpr.getExpression();
+        if (Node.isPropertyAccessExpression(expr)) {
+            const receiver = expr.getExpression();
+            if (Node.isPropertyAccessExpression(receiver)) {
+                const text = receiver.getText();
+                if (text.includes('req.') || text.includes('request.') || text.includes('ctx.')) {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+    /**
+     * Check if node is a dangerous sink
+     */
+    isDangerousSink(callExpr) {
+        const funcName = this.getFunctionName(callExpr);
+        const receiverName = this.getReceiverName(callExpr);
+        const dangerousSinks = {
+            // SQL
+            query: [
+                { receiver: 'db', category: 'sql-query' },
+                { receiver: 'connection', category: 'sql-query' },
+                { receiver: 'pool', category: 'sql-query' },
+            ],
+            execute: [{ receiver: 'db', category: 'sql-query' }],
+            raw: [{ receiver: 'knex', category: 'sql-query' }],
+            // Command execution
+            exec: [
+                { receiver: 'child_process', category: 'command-exec' },
+                { receiver: undefined, category: 'command-exec' },
+            ],
+            execSync: [{ receiver: 'child_process', category: 'command-exec' }],
+            spawn: [{ receiver: 'child_process', category: 'command-exec' }],
+            // File system
+            readFile: [{ receiver: 'fs', category: 'file-read' }],
+            readFileSync: [{ receiver: 'fs', category: 'file-read' }],
+            writeFile: [{ receiver: 'fs', category: 'file-write' }],
+            writeFileSync: [{ receiver: 'fs', category: 'file-write' }],
+            // Eval/code execution
+            eval: [{ receiver: undefined, category: 'eval' }],
+            Function: [{ receiver: undefined, category: 'eval' }],
+            // HTML output
+            innerHTML: [{ receiver: undefined, category: 'html-output' }],
+            html: [{ receiver: undefined, category: 'html-output' }],
+            render: [{ receiver: 'res', category: 'html-output' }],
+            send: [{ receiver: 'res', category: 'html-output' }],
+            // Redirects
+            redirect: [{ receiver: 'res', category: 'redirect' }],
+            // Deserialization
+            parse: [{ receiver: 'JSON', category: 'deserialization' }],
+            deserialize: [{ receiver: undefined, category: 'deserialization' }],
+        };
+        if (funcName && dangerousSinks[funcName]) {
+            for (const sink of dangerousSinks[funcName]) {
+                if (!sink.receiver || sink.receiver === receiverName) {
+                    return { isDangerous: true, category: sink.category };
+                }
+            }
+        }
+        return { isDangerous: false };
+    }
+    /**
+     * Clear cache for a file
+     */
+    invalidateCache(filePath) {
+        this.cache.delete(filePath);
+        const sourceFile = this.project.getSourceFile(filePath);
+        if (sourceFile) {
+            this.project.removeSourceFile(sourceFile);
+        }
+    }
+    /**
+     * Clear all caches
+     */
+    clearCache() {
+        this.cache.clear();
+        for (const sourceFile of this.project.getSourceFiles()) {
+            this.project.removeSourceFile(sourceFile);
+        }
+    }
+    /**
+     * Get project instance for advanced usage
+     */
+    getProject() {
+        return this.project;
+    }
+}
+/**
+ * Singleton instance
+ */
+let parserInstance = null;
+/**
+ * Get or create AST parser instance
+ */
+export function getASTParser(tsConfigPath) {
+    if (!parserInstance) {
+        parserInstance = new ASTParser(tsConfigPath);
+    }
+    return parserInstance;
+}
+/**
+ * Reset parser instance (for testing)
+ */
+export function resetASTParser() {
+    if (parserInstance) {
+        parserInstance.clearCache();
+        parserInstance = null;
+    }
+}
+//# sourceMappingURL=ast-parser.js.map

package/dist/infrastructure/ast-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast-parser.js","sourceRoot":"","sources":["../../src/infrastructure/ast-parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAc,IAAI,EAAE,UAAU,EAA8B,MAAM,UAAU,CAAC;AAG7F;;GAEG;AACH,MAAM,OAAO,SAAS;IACZ,OAAO,CAAU;IACjB,KAAK,GAA4B,IAAI,GAAG,EAAE,CAAC;IAEnD,YAAY,YAAqB;QAC/B,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC;YACzB,gBAAgB,EAAE,YAAY;YAC9B,2BAA2B,EAAE,IAAI;YACjC,eAAe,EAAE;gBACf,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,YAAY,EAAE,IAAI;aACnB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,QAAgB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,IAAY,EAAE,QAAQ,GAAG,SAAS;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAU;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,UAAU,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAErD,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,WAAW,EAAE;YAC9B,SAAS,EAAE,QAAQ,CAAC,IAAI;YACxB,OAAO,EAAE,MAAM,CAAC,IAAI;YACpB,WAAW,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,qBAAqB;YACvD,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;SAC7B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,UAAsB;QACxC,OAAO,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,UAAsB;QACvC,OAAO;YACL,GAAG,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,aAAa,CAAC;YAC5D,GAAG,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,6BAA6B,CAAC;YAC5E,GAAG,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,kBAAkB,CAAC;SAClE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,UAAsB;QACpC,OAAO,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAwB;QACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QAEtC,uCAAuC;QACvC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;QAED,gCAAgC;QAChC,IAAI,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACzC,IAAI,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,OAAO,GAAG,CAAC,eAAe,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAwB;QACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QAEtC,IAAI,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChC,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,IAAU;QAC7B,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,CACxC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC;YACpC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;YACnC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;YAC9B,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,IAAU,EAAE,YAAY,GAAG,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC;QAExE,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,QAAwB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEpD,6BAA6B;QAC7B,MAAM,iBAAiB,GAAG;YACxB,aAAa;YACb,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE;YAC/E,MAAM;YACN,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;YAC5D,MAAM;YACN,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,CAAC,EAAE;YAC1F,QAAQ;YACR,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;SACxD,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,QAAQ,IAAI,YAAY,KAAK,OAAO,CAAC,QAAQ;gBAAE,SAAS;YACpE,IAAI,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAChC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChF,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAwB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEpD,MAAM,cAAc,GAA8D;YAChF,MAAM;YACN,KAAK,EAAE;gBACL,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE;gBACzC,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE;gBACjD,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE;aAC5C;YACD,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;YACpD,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;YAElD,oBAAoB;YACpB,IAAI,EAAE;gBACJ,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE;gBACvD,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE;aAClD;YACD,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;YACnE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;YAEhE,cAAc;YACd,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;YACrD,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;YACzD,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;YACvD,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;YAE3D,sBAAsB;YACtB,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YACjD,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAErD,cAAc;YACd,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC7D,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YACxD,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YACtD,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAEpD,YAAY;YACZ,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YAErD,kBAAkB;YAClB,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;YAC1D,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;SACpE,CAAC;QAEF,IAAI,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBACrD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAgB;QAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED;;GAEG;AACH,IAAI,cAAc,GAAqB,IAAI,CAAC;AAE5C;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,YAAqB;IAChD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,cAAc,EAAE,CAAC;QACnB,cAAc,CAAC,UAAU,EAAE,CAAC;QAC5B,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/infrastructure/cache.d.ts

@@ -0,0 +1,100 @@
+/**
+ * @fileoverview Caching infrastructure
+ * @module @nahisaho/musubix-security/infrastructure/cache
+ * @trace REQ-SEC-CACHE-001
+ */
+import type { CacheStrategy } from '../types/index.js';
+/**
+ * Cache statistics
+ */
+export interface CacheStats {
+    hits: number;
+    misses: number;
+    size: number;
+    entryCount: number;
+    hitRate: number;
+}
+/**
+ * Cache options
+ */
+export interface CacheOptions {
+    /** Cache strategy */
+    strategy: CacheStrategy;
+    /** Cache directory for file strategy */
+    cacheDir?: string;
+    /** TTL in seconds */
+    ttlSeconds?: number;
+    /** Maximum cache size in bytes */
+    maxSizeBytes?: number;
+}
+/**
+ * Abstract cache interface
+ */
+export interface ICache<T = unknown> {
+    get(key: string): Promise<T | undefined>;
+    set(key: string, value: T, ttlSeconds?: number): Promise<void>;
+    has(key: string): Promise<boolean>;
+    delete(key: string): Promise<boolean>;
+    clear(): Promise<void>;
+    getStats(): CacheStats | Promise<CacheStats>;
+}
+/**
+ * Memory cache implementation
+ */
+export declare class MemoryCache<T = unknown> implements ICache<T> {
+    private cache;
+    private stats;
+    private maxSizeBytes;
+    private defaultTtlSeconds;
+    private currentSize;
+    constructor(options?: CacheOptions);
+    get(key: string): Promise<T | undefined>;
+    set(key: string, value: T, ttlSeconds?: number): Promise<void>;
+    has(key: string): Promise<boolean>;
+    delete(key: string): Promise<boolean>;
+    clear(): Promise<void>;
+    getStats(): CacheStats;
+    private evictOldest;
+}
+/**
+ * File-based cache implementation
+ */
+export declare class FileCache<T = unknown> implements ICache<T> {
+    private stats;
+    private cacheDir;
+    private defaultTtlSeconds;
+    private initialized;
+    constructor(options: CacheOptions);
+    private ensureDir;
+    private getCachePath;
+    get(key: string): Promise<T | undefined>;
+    set(key: string, value: T, ttlSeconds?: number): Promise<void>;
+    has(key: string): Promise<boolean>;
+    delete(key: string): Promise<boolean>;
+    clear(): Promise<void>;
+    getStats(): Promise<CacheStats>;
+}
+/**
+ * No-op cache implementation
+ */
+export declare class NoopCache<T = unknown> implements ICache<T> {
+    get(_key: string): Promise<T | undefined>;
+    set(_key: string, _value: T): Promise<void>;
+    has(_key: string): Promise<boolean>;
+    delete(_key: string): Promise<boolean>;
+    clear(): Promise<void>;
+    getStats(): CacheStats;
+}
+/**
+ * Create a cache instance based on options
+ */
+export declare function createCache<T = unknown>(options: CacheOptions): ICache<T>;
+/**
+ * Generate a cache key from multiple parts
+ */
+export declare function cacheKey(...parts: (string | number | boolean | undefined | null)[]): string;
+/**
+ * Generate a hash for a file's content
+ */
+export declare function contentHash(content: string): string;
+//# sourceMappingURL=cache.d.ts.map

package/dist/infrastructure/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/infrastructure/cache.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAavD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qBAAqB;IACrB,QAAQ,EAAE,aAAa,CAAC;IACxB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,MAAM,CAAC,CAAC,GAAG,OAAO;IACjC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,qBAAa,WAAW,CAAC,CAAC,GAAG,OAAO,CAAE,YAAW,MAAM,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,WAAW,CAAK;gBAEZ,OAAO,GAAE,YAAqC;IAKpD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAoBxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4B9D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWlC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAM5B,QAAQ,IAAI,UAAU;IAWtB,OAAO,CAAC,WAAW;CAiBpB;AAED;;GAEG;AACH,qBAAa,SAAS,CAAC,CAAC,GAAG,OAAO,CAAE,YAAW,MAAM,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE,YAAY;YASnB,SAAS;IAMvB,OAAO,CAAC,YAAY;IAKd,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAsBxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB9D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKlC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAetB,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC;CA6BtC;AAED;;GAEG;AACH,qBAAa,SAAS,CAAC,CAAC,GAAG,OAAO,CAAE,YAAW,MAAM,CAAC,CAAC,CAAC;IAChD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAIzC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAInC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAItC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,QAAQ,IAAI,UAAU;CASvB;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,CAWzE;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,GAAG,KAAK,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC,EAAE,GAAG,MAAM,CAK3F;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD"}