@nahisaho/musubix-security 2.0.1 → 2.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (363) hide show
  1. package/dist/analysis/enhanced-taint-analyzer.d.ts +120 -0
  2. package/dist/analysis/enhanced-taint-analyzer.d.ts.map +1 -0
  3. package/dist/analysis/enhanced-taint-analyzer.js +450 -0
  4. package/dist/analysis/enhanced-taint-analyzer.js.map +1 -0
  5. package/dist/analysis/index.d.ts +1 -0
  6. package/dist/analysis/index.d.ts.map +1 -1
  7. package/dist/analysis/index.js +1 -0
  8. package/dist/analysis/index.js.map +1 -1
  9. package/dist/analysis/interprocedural/call-graph-builder.d.ts +192 -0
  10. package/dist/analysis/interprocedural/call-graph-builder.d.ts.map +1 -0
  11. package/dist/analysis/interprocedural/call-graph-builder.js +510 -0
  12. package/dist/analysis/interprocedural/call-graph-builder.js.map +1 -0
  13. package/dist/analysis/interprocedural/dfg-adapter.d.ts +166 -0
  14. package/dist/analysis/interprocedural/dfg-adapter.d.ts.map +1 -0
  15. package/dist/analysis/interprocedural/dfg-adapter.js +455 -0
  16. package/dist/analysis/interprocedural/dfg-adapter.js.map +1 -0
  17. package/dist/analysis/interprocedural/index.d.ts +9 -0
  18. package/dist/analysis/interprocedural/index.d.ts.map +1 -0
  19. package/dist/analysis/interprocedural/index.js +9 -0
  20. package/dist/analysis/interprocedural/index.js.map +1 -0
  21. package/dist/analysis/interprocedural/taint-propagator.d.ts +250 -0
  22. package/dist/analysis/interprocedural/taint-propagator.d.ts.map +1 -0
  23. package/dist/analysis/interprocedural/taint-propagator.js +435 -0
  24. package/dist/analysis/interprocedural/taint-propagator.js.map +1 -0
  25. package/dist/analysis/sanitizers/command-sanitizers.d.ts +12 -0
  26. package/dist/analysis/sanitizers/command-sanitizers.d.ts.map +1 -0
  27. package/dist/analysis/sanitizers/command-sanitizers.js +123 -0
  28. package/dist/analysis/sanitizers/command-sanitizers.js.map +1 -0
  29. package/dist/analysis/sanitizers/html-sanitizers.d.ts +12 -0
  30. package/dist/analysis/sanitizers/html-sanitizers.d.ts.map +1 -0
  31. package/dist/analysis/sanitizers/html-sanitizers.js +213 -0
  32. package/dist/analysis/sanitizers/html-sanitizers.js.map +1 -0
  33. package/dist/analysis/sanitizers/index.d.ts +35 -0
  34. package/dist/analysis/sanitizers/index.d.ts.map +1 -0
  35. package/dist/analysis/sanitizers/index.js +59 -0
  36. package/dist/analysis/sanitizers/index.js.map +1 -0
  37. package/dist/analysis/sanitizers/path-sanitizers.d.ts +12 -0
  38. package/dist/analysis/sanitizers/path-sanitizers.d.ts.map +1 -0
  39. package/dist/analysis/sanitizers/path-sanitizers.js +163 -0
  40. package/dist/analysis/sanitizers/path-sanitizers.js.map +1 -0
  41. package/dist/analysis/sanitizers/sql-sanitizers.d.ts +12 -0
  42. package/dist/analysis/sanitizers/sql-sanitizers.d.ts.map +1 -0
  43. package/dist/analysis/sanitizers/sql-sanitizers.js +216 -0
  44. package/dist/analysis/sanitizers/sql-sanitizers.js.map +1 -0
  45. package/dist/analysis/sanitizers/types.d.ts +78 -0
  46. package/dist/analysis/sanitizers/types.d.ts.map +1 -0
  47. package/dist/analysis/sanitizers/types.js +7 -0
  48. package/dist/analysis/sanitizers/types.js.map +1 -0
  49. package/dist/analysis/sanitizers/validation-sanitizers.d.ts +12 -0
  50. package/dist/analysis/sanitizers/validation-sanitizers.d.ts.map +1 -0
  51. package/dist/analysis/sanitizers/validation-sanitizers.js +268 -0
  52. package/dist/analysis/sanitizers/validation-sanitizers.js.map +1 -0
  53. package/dist/analysis/sinks/code-eval.d.ts +12 -0
  54. package/dist/analysis/sinks/code-eval.d.ts.map +1 -0
  55. package/dist/analysis/sinks/code-eval.js +231 -0
  56. package/dist/analysis/sinks/code-eval.js.map +1 -0
  57. package/dist/analysis/sinks/command-exec.d.ts +12 -0
  58. package/dist/analysis/sinks/command-exec.d.ts.map +1 -0
  59. package/dist/analysis/sinks/command-exec.js +187 -0
  60. package/dist/analysis/sinks/command-exec.js.map +1 -0
  61. package/dist/analysis/sinks/file-operations.d.ts +12 -0
  62. package/dist/analysis/sinks/file-operations.d.ts.map +1 -0
  63. package/dist/analysis/sinks/file-operations.js +239 -0
  64. package/dist/analysis/sinks/file-operations.js.map +1 -0
  65. package/dist/analysis/sinks/html-output.d.ts +12 -0
  66. package/dist/analysis/sinks/html-output.d.ts.map +1 -0
  67. package/dist/analysis/sinks/html-output.js +256 -0
  68. package/dist/analysis/sinks/html-output.js.map +1 -0
  69. package/dist/analysis/sinks/index.d.ts +30 -0
  70. package/dist/analysis/sinks/index.d.ts.map +1 -0
  71. package/dist/analysis/sinks/index.js +46 -0
  72. package/dist/analysis/sinks/index.js.map +1 -0
  73. package/dist/analysis/sinks/sql-query.d.ts +12 -0
  74. package/dist/analysis/sinks/sql-query.d.ts.map +1 -0
  75. package/dist/analysis/sinks/sql-query.js +209 -0
  76. package/dist/analysis/sinks/sql-query.js.map +1 -0
  77. package/dist/analysis/sinks/types.d.ts +97 -0
  78. package/dist/analysis/sinks/types.d.ts.map +1 -0
  79. package/dist/analysis/sinks/types.js +7 -0
  80. package/dist/analysis/sinks/types.js.map +1 -0
  81. package/dist/analysis/sources/database.d.ts +12 -0
  82. package/dist/analysis/sources/database.d.ts.map +1 -0
  83. package/dist/analysis/sources/database.js +211 -0
  84. package/dist/analysis/sources/database.js.map +1 -0
  85. package/dist/analysis/sources/environment.d.ts +12 -0
  86. package/dist/analysis/sources/environment.d.ts.map +1 -0
  87. package/dist/analysis/sources/environment.js +158 -0
  88. package/dist/analysis/sources/environment.js.map +1 -0
  89. package/dist/analysis/sources/file-system.d.ts +12 -0
  90. package/dist/analysis/sources/file-system.d.ts.map +1 -0
  91. package/dist/analysis/sources/file-system.js +180 -0
  92. package/dist/analysis/sources/file-system.js.map +1 -0
  93. package/dist/analysis/sources/http-request.d.ts +12 -0
  94. package/dist/analysis/sources/http-request.d.ts.map +1 -0
  95. package/dist/analysis/sources/http-request.js +179 -0
  96. package/dist/analysis/sources/http-request.js.map +1 -0
  97. package/dist/analysis/sources/index.d.ts +26 -0
  98. package/dist/analysis/sources/index.d.ts.map +1 -0
  99. package/dist/analysis/sources/index.js +40 -0
  100. package/dist/analysis/sources/index.js.map +1 -0
  101. package/dist/analysis/sources/types.d.ts +93 -0
  102. package/dist/analysis/sources/types.d.ts.map +1 -0
  103. package/dist/analysis/sources/types.js +7 -0
  104. package/dist/analysis/sources/types.js.map +1 -0
  105. package/dist/analysis/sources/user-input.d.ts +12 -0
  106. package/dist/analysis/sources/user-input.d.ts.map +1 -0
  107. package/dist/analysis/sources/user-input.js +261 -0
  108. package/dist/analysis/sources/user-input.js.map +1 -0
  109. package/dist/cve/cpe-matcher.d.ts +183 -0
  110. package/dist/cve/cpe-matcher.d.ts.map +1 -0
  111. package/dist/cve/cpe-matcher.js +396 -0
  112. package/dist/cve/cpe-matcher.js.map +1 -0
  113. package/dist/cve/cve-cache.d.ts +225 -0
  114. package/dist/cve/cve-cache.d.ts.map +1 -0
  115. package/dist/cve/cve-cache.js +452 -0
  116. package/dist/cve/cve-cache.js.map +1 -0
  117. package/dist/cve/cve-cache.test.d.ts +6 -0
  118. package/dist/cve/cve-cache.test.d.ts.map +1 -0
  119. package/dist/cve/cve-cache.test.js +363 -0
  120. package/dist/cve/cve-cache.test.js.map +1 -0
  121. package/dist/cve/dependency-parser.d.ts +204 -0
  122. package/dist/cve/dependency-parser.d.ts.map +1 -0
  123. package/dist/cve/dependency-parser.js +338 -0
  124. package/dist/cve/dependency-parser.js.map +1 -0
  125. package/dist/cve/index.d.ts +20 -0
  126. package/dist/cve/index.d.ts.map +1 -0
  127. package/dist/cve/index.js +13 -0
  128. package/dist/cve/index.js.map +1 -0
  129. package/dist/cve/nvd-client.d.ts +137 -0
  130. package/dist/cve/nvd-client.d.ts.map +1 -0
  131. package/dist/cve/nvd-client.js +333 -0
  132. package/dist/cve/nvd-client.js.map +1 -0
  133. package/dist/cve/rate-limiter.d.ts +194 -0
  134. package/dist/cve/rate-limiter.d.ts.map +1 -0
  135. package/dist/cve/rate-limiter.js +276 -0
  136. package/dist/cve/rate-limiter.js.map +1 -0
  137. package/dist/cve/report-generator.d.ts +145 -0
  138. package/dist/cve/report-generator.d.ts.map +1 -0
  139. package/dist/cve/report-generator.js +377 -0
  140. package/dist/cve/report-generator.js.map +1 -0
  141. package/dist/cve/report-generator.test.d.ts +6 -0
  142. package/dist/cve/report-generator.test.d.ts.map +1 -0
  143. package/dist/cve/report-generator.test.js +275 -0
  144. package/dist/cve/report-generator.test.js.map +1 -0
  145. package/dist/cve/vulnerability-scanner.d.ts +198 -0
  146. package/dist/cve/vulnerability-scanner.d.ts.map +1 -0
  147. package/dist/cve/vulnerability-scanner.js +311 -0
  148. package/dist/cve/vulnerability-scanner.js.map +1 -0
  149. package/dist/cve/vulnerability-scanner.test.d.ts +6 -0
  150. package/dist/cve/vulnerability-scanner.test.d.ts.map +1 -0
  151. package/dist/cve/vulnerability-scanner.test.js +329 -0
  152. package/dist/cve/vulnerability-scanner.test.js.map +1 -0
  153. package/dist/index.d.ts +1 -0
  154. package/dist/index.d.ts.map +1 -1
  155. package/dist/index.js +4 -0
  156. package/dist/index.js.map +1 -1
  157. package/dist/rules/config/config-parser.d.ts +119 -0
  158. package/dist/rules/config/config-parser.d.ts.map +1 -0
  159. package/dist/rules/config/config-parser.js +376 -0
  160. package/dist/rules/config/config-parser.js.map +1 -0
  161. package/dist/rules/config/index.d.ts +8 -0
  162. package/dist/rules/config/index.d.ts.map +1 -0
  163. package/dist/rules/config/index.js +8 -0
  164. package/dist/rules/config/index.js.map +1 -0
  165. package/dist/rules/config/profiles.d.ts +85 -0
  166. package/dist/rules/config/profiles.d.ts.map +1 -0
  167. package/dist/rules/config/profiles.js +226 -0
  168. package/dist/rules/config/profiles.js.map +1 -0
  169. package/dist/rules/cwe/cwe-119-buffer-overflow.d.ts +9 -0
  170. package/dist/rules/cwe/cwe-119-buffer-overflow.d.ts.map +1 -0
  171. package/dist/rules/cwe/cwe-119-buffer-overflow.js +54 -0
  172. package/dist/rules/cwe/cwe-119-buffer-overflow.js.map +1 -0
  173. package/dist/rules/cwe/cwe-125-oob-read.d.ts +20 -0
  174. package/dist/rules/cwe/cwe-125-oob-read.d.ts.map +1 -0
  175. package/dist/rules/cwe/cwe-125-oob-read.js +247 -0
  176. package/dist/rules/cwe/cwe-125-oob-read.js.map +1 -0
  177. package/dist/rules/cwe/cwe-190-integer-overflow.d.ts +9 -0
  178. package/dist/rules/cwe/cwe-190-integer-overflow.d.ts.map +1 -0
  179. package/dist/rules/cwe/cwe-190-integer-overflow.js +55 -0
  180. package/dist/rules/cwe/cwe-190-integer-overflow.js.map +1 -0
  181. package/dist/rules/cwe/cwe-20-input-validation.d.ts +21 -0
  182. package/dist/rules/cwe/cwe-20-input-validation.d.ts.map +1 -0
  183. package/dist/rules/cwe/cwe-20-input-validation.js +342 -0
  184. package/dist/rules/cwe/cwe-20-input-validation.js.map +1 -0
  185. package/dist/rules/cwe/cwe-22-path-traversal.d.ts +20 -0
  186. package/dist/rules/cwe/cwe-22-path-traversal.d.ts.map +1 -0
  187. package/dist/rules/cwe/cwe-22-path-traversal.js +306 -0
  188. package/dist/rules/cwe/cwe-22-path-traversal.js.map +1 -0
  189. package/dist/rules/cwe/cwe-269-improper-privilege.d.ts +9 -0
  190. package/dist/rules/cwe/cwe-269-improper-privilege.d.ts.map +1 -0
  191. package/dist/rules/cwe/cwe-269-improper-privilege.js +58 -0
  192. package/dist/rules/cwe/cwe-269-improper-privilege.js.map +1 -0
  193. package/dist/rules/cwe/cwe-276-default-permissions.d.ts +9 -0
  194. package/dist/rules/cwe/cwe-276-default-permissions.d.ts.map +1 -0
  195. package/dist/rules/cwe/cwe-276-default-permissions.js +54 -0
  196. package/dist/rules/cwe/cwe-276-default-permissions.js.map +1 -0
  197. package/dist/rules/cwe/cwe-287-improper-auth.d.ts +9 -0
  198. package/dist/rules/cwe/cwe-287-improper-auth.d.ts.map +1 -0
  199. package/dist/rules/cwe/cwe-287-improper-auth.js +57 -0
  200. package/dist/rules/cwe/cwe-287-improper-auth.js.map +1 -0
  201. package/dist/rules/cwe/cwe-306-missing-auth-critical.d.ts +9 -0
  202. package/dist/rules/cwe/cwe-306-missing-auth-critical.d.ts.map +1 -0
  203. package/dist/rules/cwe/cwe-306-missing-auth-critical.js +53 -0
  204. package/dist/rules/cwe/cwe-306-missing-auth-critical.js.map +1 -0
  205. package/dist/rules/cwe/cwe-352-csrf.d.ts +9 -0
  206. package/dist/rules/cwe/cwe-352-csrf.d.ts.map +1 -0
  207. package/dist/rules/cwe/cwe-352-csrf.js +51 -0
  208. package/dist/rules/cwe/cwe-352-csrf.js.map +1 -0
  209. package/dist/rules/cwe/cwe-362-race-condition.d.ts +9 -0
  210. package/dist/rules/cwe/cwe-362-race-condition.d.ts.map +1 -0
  211. package/dist/rules/cwe/cwe-362-race-condition.js +55 -0
  212. package/dist/rules/cwe/cwe-362-race-condition.js.map +1 -0
  213. package/dist/rules/cwe/cwe-416-use-after-free.d.ts +23 -0
  214. package/dist/rules/cwe/cwe-416-use-after-free.d.ts.map +1 -0
  215. package/dist/rules/cwe/cwe-416-use-after-free.js +402 -0
  216. package/dist/rules/cwe/cwe-416-use-after-free.js.map +1 -0
  217. package/dist/rules/cwe/cwe-434-file-upload.d.ts +9 -0
  218. package/dist/rules/cwe/cwe-434-file-upload.d.ts.map +1 -0
  219. package/dist/rules/cwe/cwe-434-file-upload.js +55 -0
  220. package/dist/rules/cwe/cwe-434-file-upload.js.map +1 -0
  221. package/dist/rules/cwe/cwe-476-null-deref.d.ts +9 -0
  222. package/dist/rules/cwe/cwe-476-null-deref.d.ts.map +1 -0
  223. package/dist/rules/cwe/cwe-476-null-deref.js +55 -0
  224. package/dist/rules/cwe/cwe-476-null-deref.js.map +1 -0
  225. package/dist/rules/cwe/cwe-502-deserialization.d.ts +9 -0
  226. package/dist/rules/cwe/cwe-502-deserialization.d.ts.map +1 -0
  227. package/dist/rules/cwe/cwe-502-deserialization.js +57 -0
  228. package/dist/rules/cwe/cwe-502-deserialization.js.map +1 -0
  229. package/dist/rules/cwe/cwe-77-command-injection.d.ts +9 -0
  230. package/dist/rules/cwe/cwe-77-command-injection.d.ts.map +1 -0
  231. package/dist/rules/cwe/cwe-77-command-injection.js +55 -0
  232. package/dist/rules/cwe/cwe-77-command-injection.js.map +1 -0
  233. package/dist/rules/cwe/cwe-78-command-injection.d.ts +20 -0
  234. package/dist/rules/cwe/cwe-78-command-injection.d.ts.map +1 -0
  235. package/dist/rules/cwe/cwe-78-command-injection.js +259 -0
  236. package/dist/rules/cwe/cwe-78-command-injection.js.map +1 -0
  237. package/dist/rules/cwe/cwe-787-oob-write.d.ts +21 -0
  238. package/dist/rules/cwe/cwe-787-oob-write.d.ts.map +1 -0
  239. package/dist/rules/cwe/cwe-787-oob-write.js +321 -0
  240. package/dist/rules/cwe/cwe-787-oob-write.js.map +1 -0
  241. package/dist/rules/cwe/cwe-79-xss.d.ts +22 -0
  242. package/dist/rules/cwe/cwe-79-xss.d.ts.map +1 -0
  243. package/dist/rules/cwe/cwe-79-xss.js +386 -0
  244. package/dist/rules/cwe/cwe-79-xss.js.map +1 -0
  245. package/dist/rules/cwe/cwe-798-hardcoded-credentials.d.ts +9 -0
  246. package/dist/rules/cwe/cwe-798-hardcoded-credentials.d.ts.map +1 -0
  247. package/dist/rules/cwe/cwe-798-hardcoded-credentials.js +58 -0
  248. package/dist/rules/cwe/cwe-798-hardcoded-credentials.js.map +1 -0
  249. package/dist/rules/cwe/cwe-862-missing-auth.d.ts +9 -0
  250. package/dist/rules/cwe/cwe-862-missing-auth.d.ts.map +1 -0
  251. package/dist/rules/cwe/cwe-862-missing-auth.js +55 -0
  252. package/dist/rules/cwe/cwe-862-missing-auth.js.map +1 -0
  253. package/dist/rules/cwe/cwe-863-incorrect-auth.d.ts +9 -0
  254. package/dist/rules/cwe/cwe-863-incorrect-auth.d.ts.map +1 -0
  255. package/dist/rules/cwe/cwe-863-incorrect-auth.js +58 -0
  256. package/dist/rules/cwe/cwe-863-incorrect-auth.js.map +1 -0
  257. package/dist/rules/cwe/cwe-89-sql-injection.d.ts +21 -0
  258. package/dist/rules/cwe/cwe-89-sql-injection.d.ts.map +1 -0
  259. package/dist/rules/cwe/cwe-89-sql-injection.js +456 -0
  260. package/dist/rules/cwe/cwe-89-sql-injection.js.map +1 -0
  261. package/dist/rules/cwe/cwe-918-ssrf.d.ts +9 -0
  262. package/dist/rules/cwe/cwe-918-ssrf.d.ts.map +1 -0
  263. package/dist/rules/cwe/cwe-918-ssrf.js +59 -0
  264. package/dist/rules/cwe/cwe-918-ssrf.js.map +1 -0
  265. package/dist/rules/cwe/cwe-94-code-injection.d.ts +9 -0
  266. package/dist/rules/cwe/cwe-94-code-injection.d.ts.map +1 -0
  267. package/dist/rules/cwe/cwe-94-code-injection.js +59 -0
  268. package/dist/rules/cwe/cwe-94-code-injection.js.map +1 -0
  269. package/dist/rules/cwe/index.d.ts +43 -0
  270. package/dist/rules/cwe/index.d.ts.map +1 -0
  271. package/dist/rules/cwe/index.js +99 -0
  272. package/dist/rules/cwe/index.js.map +1 -0
  273. package/dist/rules/engine/index.d.ts +10 -0
  274. package/dist/rules/engine/index.d.ts.map +1 -0
  275. package/dist/rules/engine/index.js +9 -0
  276. package/dist/rules/engine/index.js.map +1 -0
  277. package/dist/rules/engine/rule-context.d.ts +99 -0
  278. package/dist/rules/engine/rule-context.d.ts.map +1 -0
  279. package/dist/rules/engine/rule-context.js +175 -0
  280. package/dist/rules/engine/rule-context.js.map +1 -0
  281. package/dist/rules/engine/rule-engine.d.ts +132 -0
  282. package/dist/rules/engine/rule-engine.d.ts.map +1 -0
  283. package/dist/rules/engine/rule-engine.js +379 -0
  284. package/dist/rules/engine/rule-engine.js.map +1 -0
  285. package/dist/rules/engine/rule-registry.d.ts +133 -0
  286. package/dist/rules/engine/rule-registry.d.ts.map +1 -0
  287. package/dist/rules/engine/rule-registry.js +281 -0
  288. package/dist/rules/engine/rule-registry.js.map +1 -0
  289. package/dist/rules/index.d.ts +14 -0
  290. package/dist/rules/index.d.ts.map +1 -0
  291. package/dist/rules/index.js +16 -0
  292. package/dist/rules/index.js.map +1 -0
  293. package/dist/rules/owasp/a01-broken-access-control.d.ts +19 -0
  294. package/dist/rules/owasp/a01-broken-access-control.d.ts.map +1 -0
  295. package/dist/rules/owasp/a01-broken-access-control.js +295 -0
  296. package/dist/rules/owasp/a01-broken-access-control.js.map +1 -0
  297. package/dist/rules/owasp/a02-cryptographic-failures.d.ts +19 -0
  298. package/dist/rules/owasp/a02-cryptographic-failures.d.ts.map +1 -0
  299. package/dist/rules/owasp/a02-cryptographic-failures.js +327 -0
  300. package/dist/rules/owasp/a02-cryptographic-failures.js.map +1 -0
  301. package/dist/rules/owasp/a03-injection.d.ts +21 -0
  302. package/dist/rules/owasp/a03-injection.d.ts.map +1 -0
  303. package/dist/rules/owasp/a03-injection.js +342 -0
  304. package/dist/rules/owasp/a03-injection.js.map +1 -0
  305. package/dist/rules/owasp/a04-insecure-design.d.ts +19 -0
  306. package/dist/rules/owasp/a04-insecure-design.d.ts.map +1 -0
  307. package/dist/rules/owasp/a04-insecure-design.js +403 -0
  308. package/dist/rules/owasp/a04-insecure-design.js.map +1 -0
  309. package/dist/rules/owasp/a05-security-misconfiguration.d.ts +19 -0
  310. package/dist/rules/owasp/a05-security-misconfiguration.d.ts.map +1 -0
  311. package/dist/rules/owasp/a05-security-misconfiguration.js +371 -0
  312. package/dist/rules/owasp/a05-security-misconfiguration.js.map +1 -0
  313. package/dist/rules/owasp/a06-vulnerable-components.d.ts +18 -0
  314. package/dist/rules/owasp/a06-vulnerable-components.d.ts.map +1 -0
  315. package/dist/rules/owasp/a06-vulnerable-components.js +243 -0
  316. package/dist/rules/owasp/a06-vulnerable-components.js.map +1 -0
  317. package/dist/rules/owasp/a07-auth-failures.d.ts +19 -0
  318. package/dist/rules/owasp/a07-auth-failures.d.ts.map +1 -0
  319. package/dist/rules/owasp/a07-auth-failures.js +300 -0
  320. package/dist/rules/owasp/a07-auth-failures.js.map +1 -0
  321. package/dist/rules/owasp/a08-integrity-failures.d.ts +18 -0
  322. package/dist/rules/owasp/a08-integrity-failures.d.ts.map +1 -0
  323. package/dist/rules/owasp/a08-integrity-failures.js +306 -0
  324. package/dist/rules/owasp/a08-integrity-failures.js.map +1 -0
  325. package/dist/rules/owasp/a09-logging-failures.d.ts +18 -0
  326. package/dist/rules/owasp/a09-logging-failures.d.ts.map +1 -0
  327. package/dist/rules/owasp/a09-logging-failures.js +339 -0
  328. package/dist/rules/owasp/a09-logging-failures.js.map +1 -0
  329. package/dist/rules/owasp/a10-ssrf.d.ts +18 -0
  330. package/dist/rules/owasp/a10-ssrf.d.ts.map +1 -0
  331. package/dist/rules/owasp/a10-ssrf.js +349 -0
  332. package/dist/rules/owasp/a10-ssrf.js.map +1 -0
  333. package/dist/rules/owasp/index.d.ts +20 -0
  334. package/dist/rules/owasp/index.d.ts.map +1 -0
  335. package/dist/rules/owasp/index.js +53 -0
  336. package/dist/rules/owasp/index.js.map +1 -0
  337. package/dist/rules/types.d.ts +277 -0
  338. package/dist/rules/types.d.ts.map +1 -0
  339. package/dist/rules/types.js +34 -0
  340. package/dist/rules/types.js.map +1 -0
  341. package/dist/tests/integration/epic-integration.test.d.ts +7 -0
  342. package/dist/tests/integration/epic-integration.test.d.ts.map +1 -0
  343. package/dist/tests/integration/epic-integration.test.js +390 -0
  344. package/dist/tests/integration/epic-integration.test.js.map +1 -0
  345. package/dist/tests/rules/cwe/cwe-top25-1-13.test.d.ts +2 -0
  346. package/dist/tests/rules/cwe/cwe-top25-1-13.test.d.ts.map +1 -0
  347. package/dist/tests/rules/cwe/cwe-top25-1-13.test.js +154 -0
  348. package/dist/tests/rules/cwe/cwe-top25-1-13.test.js.map +1 -0
  349. package/dist/tests/rules/cwe/cwe-top25-14-25.test.d.ts +2 -0
  350. package/dist/tests/rules/cwe/cwe-top25-14-25.test.d.ts.map +1 -0
  351. package/dist/tests/rules/cwe/cwe-top25-14-25.test.js +121 -0
  352. package/dist/tests/rules/cwe/cwe-top25-14-25.test.js.map +1 -0
  353. package/dist/types/cve.d.ts +278 -0
  354. package/dist/types/cve.d.ts.map +1 -0
  355. package/dist/types/cve.js +7 -0
  356. package/dist/types/cve.js.map +1 -0
  357. package/dist/types/index.d.ts +2 -0
  358. package/dist/types/index.d.ts.map +1 -1
  359. package/dist/types/rule.d.ts +245 -0
  360. package/dist/types/rule.d.ts.map +1 -0
  361. package/dist/types/rule.js +7 -0
  362. package/dist/types/rule.js.map +1 -0
  363. package/package.json +1 -1
@@ -0,0 +1,43 @@
1
+ /**
2
+ * @fileoverview CWE Top 25 Rules Index
3
+ * @module @nahisaho/musubix-security/rules/cwe
4
+ * @trace TSK-RULE-005, TSK-RULE-006
5
+ */
6
+ export { cwe787OutOfBoundsWrite } from './cwe-787-oob-write.js';
7
+ export { cwe79XSS } from './cwe-79-xss.js';
8
+ export { cwe89SQLInjection } from './cwe-89-sql-injection.js';
9
+ export { cwe416UseAfterFree } from './cwe-416-use-after-free.js';
10
+ export { cwe78CommandInjection } from './cwe-78-command-injection.js';
11
+ export { cwe20InputValidation } from './cwe-20-input-validation.js';
12
+ export { cwe125OutOfBoundsRead } from './cwe-125-oob-read.js';
13
+ export { cwe22PathTraversal } from './cwe-22-path-traversal.js';
14
+ export { cwe352CSRF } from './cwe-352-csrf.js';
15
+ export { cwe434FileUpload } from './cwe-434-file-upload.js';
16
+ export { cwe862MissingAuth } from './cwe-862-missing-auth.js';
17
+ export { cwe476NullDeref } from './cwe-476-null-deref.js';
18
+ export { cwe287ImproperAuth } from './cwe-287-improper-auth.js';
19
+ export { cwe190IntegerOverflow } from './cwe-190-integer-overflow.js';
20
+ export { cwe502Deserialization } from './cwe-502-deserialization.js';
21
+ export { cwe77CommandInjection } from './cwe-77-command-injection.js';
22
+ export { cwe119BufferOverflow } from './cwe-119-buffer-overflow.js';
23
+ export { cwe798HardcodedCredentials } from './cwe-798-hardcoded-credentials.js';
24
+ export { cwe918SSRF } from './cwe-918-ssrf.js';
25
+ export { cwe306MissingAuthCritical } from './cwe-306-missing-auth-critical.js';
26
+ export { cwe362RaceCondition } from './cwe-362-race-condition.js';
27
+ export { cwe269ImproperPrivilege } from './cwe-269-improper-privilege.js';
28
+ export { cwe94CodeInjection } from './cwe-94-code-injection.js';
29
+ export { cwe863IncorrectAuth } from './cwe-863-incorrect-auth.js';
30
+ export { cwe276DefaultPermissions } from './cwe-276-default-permissions.js';
31
+ /**
32
+ * CWE Top 25 Rules (1-13)
33
+ */
34
+ export declare const cweTop25Rules1to13: import("../types.js").SecurityRule[];
35
+ /**
36
+ * CWE Top 25 Rules (14-25)
37
+ */
38
+ export declare const cweTop25Rules14to25: import("../types.js").SecurityRule[];
39
+ /**
40
+ * All CWE Top 25 rules
41
+ */
42
+ export declare const cweTop25Rules: import("../types.js").SecurityRule[];
43
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/rules/cwe/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AA+B5E;;GAEG;AACH,eAAO,MAAM,kBAAkB,sCAc9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,sCAa/B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,sCAAkD,CAAC"}
@@ -0,0 +1,99 @@
1
+ /**
2
+ * @fileoverview CWE Top 25 Rules Index
3
+ * @module @nahisaho/musubix-security/rules/cwe
4
+ * @trace TSK-RULE-005, TSK-RULE-006
5
+ */
6
+ // CWE Top 25 (1-13)
7
+ export { cwe787OutOfBoundsWrite } from './cwe-787-oob-write.js';
8
+ export { cwe79XSS } from './cwe-79-xss.js';
9
+ export { cwe89SQLInjection } from './cwe-89-sql-injection.js';
10
+ export { cwe416UseAfterFree } from './cwe-416-use-after-free.js';
11
+ export { cwe78CommandInjection } from './cwe-78-command-injection.js';
12
+ export { cwe20InputValidation } from './cwe-20-input-validation.js';
13
+ export { cwe125OutOfBoundsRead } from './cwe-125-oob-read.js';
14
+ export { cwe22PathTraversal } from './cwe-22-path-traversal.js';
15
+ export { cwe352CSRF } from './cwe-352-csrf.js';
16
+ export { cwe434FileUpload } from './cwe-434-file-upload.js';
17
+ export { cwe862MissingAuth } from './cwe-862-missing-auth.js';
18
+ export { cwe476NullDeref } from './cwe-476-null-deref.js';
19
+ export { cwe287ImproperAuth } from './cwe-287-improper-auth.js';
20
+ // CWE Top 25 (14-25)
21
+ export { cwe190IntegerOverflow } from './cwe-190-integer-overflow.js';
22
+ export { cwe502Deserialization } from './cwe-502-deserialization.js';
23
+ export { cwe77CommandInjection } from './cwe-77-command-injection.js';
24
+ export { cwe119BufferOverflow } from './cwe-119-buffer-overflow.js';
25
+ export { cwe798HardcodedCredentials } from './cwe-798-hardcoded-credentials.js';
26
+ export { cwe918SSRF } from './cwe-918-ssrf.js';
27
+ export { cwe306MissingAuthCritical } from './cwe-306-missing-auth-critical.js';
28
+ export { cwe362RaceCondition } from './cwe-362-race-condition.js';
29
+ export { cwe269ImproperPrivilege } from './cwe-269-improper-privilege.js';
30
+ export { cwe94CodeInjection } from './cwe-94-code-injection.js';
31
+ export { cwe863IncorrectAuth } from './cwe-863-incorrect-auth.js';
32
+ export { cwe276DefaultPermissions } from './cwe-276-default-permissions.js';
33
+ // Import for array exports (1-13)
34
+ import { cwe787OutOfBoundsWrite } from './cwe-787-oob-write.js';
35
+ import { cwe79XSS } from './cwe-79-xss.js';
36
+ import { cwe89SQLInjection } from './cwe-89-sql-injection.js';
37
+ import { cwe416UseAfterFree } from './cwe-416-use-after-free.js';
38
+ import { cwe78CommandInjection } from './cwe-78-command-injection.js';
39
+ import { cwe20InputValidation } from './cwe-20-input-validation.js';
40
+ import { cwe125OutOfBoundsRead } from './cwe-125-oob-read.js';
41
+ import { cwe22PathTraversal } from './cwe-22-path-traversal.js';
42
+ import { cwe352CSRF } from './cwe-352-csrf.js';
43
+ import { cwe434FileUpload } from './cwe-434-file-upload.js';
44
+ import { cwe862MissingAuth } from './cwe-862-missing-auth.js';
45
+ import { cwe476NullDeref } from './cwe-476-null-deref.js';
46
+ import { cwe287ImproperAuth } from './cwe-287-improper-auth.js';
47
+ // Import for array exports (14-25)
48
+ import { cwe190IntegerOverflow } from './cwe-190-integer-overflow.js';
49
+ import { cwe502Deserialization } from './cwe-502-deserialization.js';
50
+ import { cwe77CommandInjection } from './cwe-77-command-injection.js';
51
+ import { cwe119BufferOverflow } from './cwe-119-buffer-overflow.js';
52
+ import { cwe798HardcodedCredentials } from './cwe-798-hardcoded-credentials.js';
53
+ import { cwe918SSRF } from './cwe-918-ssrf.js';
54
+ import { cwe306MissingAuthCritical } from './cwe-306-missing-auth-critical.js';
55
+ import { cwe362RaceCondition } from './cwe-362-race-condition.js';
56
+ import { cwe269ImproperPrivilege } from './cwe-269-improper-privilege.js';
57
+ import { cwe94CodeInjection } from './cwe-94-code-injection.js';
58
+ import { cwe863IncorrectAuth } from './cwe-863-incorrect-auth.js';
59
+ import { cwe276DefaultPermissions } from './cwe-276-default-permissions.js';
60
+ /**
61
+ * CWE Top 25 Rules (1-13)
62
+ */
63
+ export const cweTop25Rules1to13 = [
64
+ cwe787OutOfBoundsWrite,
65
+ cwe79XSS,
66
+ cwe89SQLInjection,
67
+ cwe416UseAfterFree,
68
+ cwe78CommandInjection,
69
+ cwe20InputValidation,
70
+ cwe125OutOfBoundsRead,
71
+ cwe22PathTraversal,
72
+ cwe352CSRF,
73
+ cwe434FileUpload,
74
+ cwe862MissingAuth,
75
+ cwe476NullDeref,
76
+ cwe287ImproperAuth,
77
+ ];
78
+ /**
79
+ * CWE Top 25 Rules (14-25)
80
+ */
81
+ export const cweTop25Rules14to25 = [
82
+ cwe190IntegerOverflow,
83
+ cwe502Deserialization,
84
+ cwe77CommandInjection,
85
+ cwe119BufferOverflow,
86
+ cwe798HardcodedCredentials,
87
+ cwe918SSRF,
88
+ cwe306MissingAuthCritical,
89
+ cwe362RaceCondition,
90
+ cwe269ImproperPrivilege,
91
+ cwe94CodeInjection,
92
+ cwe863IncorrectAuth,
93
+ cwe276DefaultPermissions,
94
+ ];
95
+ /**
96
+ * All CWE Top 25 rules
97
+ */
98
+ export const cweTop25Rules = [...cweTop25Rules1to13, ...cweTop25Rules14to25];
99
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rules/cwe/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,oBAAoB;AACpB,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,qBAAqB;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,kCAAkC;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,mCAAmC;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,sBAAsB;IACtB,QAAQ;IACR,iBAAiB;IACjB,kBAAkB;IAClB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB;IACrB,kBAAkB;IAClB,UAAU;IACV,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,qBAAqB;IACrB,qBAAqB;IACrB,qBAAqB;IACrB,oBAAoB;IACpB,0BAA0B;IAC1B,UAAU;IACV,yBAAyB;IACzB,mBAAmB;IACnB,uBAAuB;IACvB,kBAAkB;IAClB,mBAAmB;IACnB,wBAAwB;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAG,kBAAkB,EAAE,GAAG,mBAAmB,CAAC,CAAC"}
@@ -0,0 +1,10 @@
1
+ /**
2
+ * @fileoverview Rule Engine Module Exports
3
+ * @module @nahisaho/musubix-security/rules/engine
4
+ */
5
+ export type { RuleEngineOptions, RuleEngineProgress, RuleEngineResult, RuleEngineError, RuleEngineSummary, } from './rule-engine.js';
6
+ export type { RuleContextBuildOptions, } from './rule-context.js';
7
+ export { RuleEngine, createRuleEngine } from './rule-engine.js';
8
+ export { RuleContextBuilder, createContextBuilder } from './rule-context.js';
9
+ export { RuleRegistry, getGlobalRegistry, createRegistry } from './rule-registry.js';
10
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/rules/engine/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}
@@ -0,0 +1,9 @@
1
+ /**
2
+ * @fileoverview Rule Engine Module Exports
3
+ * @module @nahisaho/musubix-security/rules/engine
4
+ */
5
+ // Classes
6
+ export { RuleEngine, createRuleEngine } from './rule-engine.js';
7
+ export { RuleContextBuilder, createContextBuilder } from './rule-context.js';
8
+ export { RuleRegistry, getGlobalRegistry, createRegistry } from './rule-registry.js';
9
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rules/engine/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH,UAAU;AACV,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}
@@ -0,0 +1,99 @@
1
+ /**
2
+ * @fileoverview Rule Context Builder
3
+ * @module @nahisaho/musubix-security/rules/engine/rule-context
4
+ * @trace REQ-RULE-003
5
+ */
6
+ import { Project, SourceFile } from 'ts-morph';
7
+ import type { RuleContext, RuleConfig, RuleFinding, RuleResult } from '../types.js';
8
+ /**
9
+ * Options for building rule context
10
+ */
11
+ export interface RuleContextBuildOptions {
12
+ /** Project root directory */
13
+ projectRoot?: string;
14
+ /** Rule configuration */
15
+ config?: Partial<RuleConfig>;
16
+ /** Previous rule results */
17
+ previousResults?: Map<string, RuleResult>;
18
+ /** Existing ts-morph Project */
19
+ project?: Project;
20
+ }
21
+ /**
22
+ * Internal context implementation
23
+ */
24
+ declare class RuleContextImpl implements RuleContext {
25
+ filePath: string;
26
+ sourceCode: string;
27
+ sourceFile: SourceFile;
28
+ projectRoot: string;
29
+ config: RuleConfig;
30
+ previousResults: Map<string, RuleResult>;
31
+ private currentRuleId;
32
+ private findings;
33
+ constructor(filePath: string, sourceCode: string, sourceFile: SourceFile, projectRoot: string, config: RuleConfig, previousResults: Map<string, RuleResult>);
34
+ /**
35
+ * Set current rule ID (called by engine before rule execution)
36
+ */
37
+ setCurrentRule(ruleId: string): void;
38
+ /**
39
+ * Get collected findings
40
+ */
41
+ getFindings(): RuleFinding[];
42
+ /**
43
+ * Report a finding
44
+ */
45
+ report(finding: Omit<RuleFinding, 'id' | 'ruleId'>): void;
46
+ /**
47
+ * Get option value for current rule
48
+ */
49
+ getOption<T>(key: string, defaultValue: T): T;
50
+ }
51
+ /**
52
+ * Rule Context Builder
53
+ * Builds context for rule execution
54
+ */
55
+ export declare class RuleContextBuilder {
56
+ private projectRoot;
57
+ private config;
58
+ private previousResults;
59
+ private project;
60
+ constructor();
61
+ /**
62
+ * Set project root
63
+ */
64
+ withProjectRoot(projectRoot: string): this;
65
+ /**
66
+ * Set configuration
67
+ */
68
+ withConfig(config: Partial<RuleConfig>): this;
69
+ /**
70
+ * Set previous results
71
+ */
72
+ withPreviousResults(results: Map<string, RuleResult>): this;
73
+ /**
74
+ * Use existing ts-morph Project
75
+ */
76
+ withProject(project: Project): this;
77
+ /**
78
+ * Enable taint analysis
79
+ */
80
+ withTaintAnalysis(enabled?: boolean): this;
81
+ /**
82
+ * Enable DFG analysis
83
+ */
84
+ withDFG(enabled?: boolean): this;
85
+ /**
86
+ * Build context for a file
87
+ */
88
+ build(filePath: string): Promise<RuleContextImpl>;
89
+ /**
90
+ * Build context from source code string
91
+ */
92
+ buildFromSource(filePath: string, sourceCode: string): RuleContextImpl;
93
+ }
94
+ /**
95
+ * Create a context builder
96
+ */
97
+ export declare function createContextBuilder(): RuleContextBuilder;
98
+ export {};
99
+ //# sourceMappingURL=rule-context.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"rule-context.d.ts","sourceRoot":"","sources":["../../../src/rules/engine/rule-context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAI/C,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACX,MAAM,aAAa,CAAC;AAErB;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7B,4BAA4B;IAC5B,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1C,gCAAgC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,cAAM,eAAgB,YAAW,WAAW;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEzC,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,QAAQ,CAAqB;gBAGnC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,EAClB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC;IAU1C;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKpC;;OAEG;IACH,WAAW,IAAI,WAAW,EAAE;IAI5B;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,QAAQ,CAAC,GAAG,IAAI;IAQzD;;OAEG;IACH,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC;CAO9C;AAED;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,eAAe,CAAsC;IAC7D,OAAO,CAAC,OAAO,CAAwB;;IAevC;;OAEG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAK1C;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI;IAK7C;;OAEG;IACH,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,IAAI;IAK3D;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAKnC;;OAEG;IACH,iBAAiB,CAAC,OAAO,GAAE,OAAc,GAAG,IAAI;IAKhD;;OAEG;IACH,OAAO,CAAC,OAAO,GAAE,OAAc,GAAG,IAAI;IAKtC;;OAEG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAgCvD;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,eAAe;CAyBvE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,kBAAkB,CAEzD"}
@@ -0,0 +1,175 @@
1
+ /**
2
+ * @fileoverview Rule Context Builder
3
+ * @module @nahisaho/musubix-security/rules/engine/rule-context
4
+ * @trace REQ-RULE-003
5
+ */
6
+ import { Project } from 'ts-morph';
7
+ import * as fs from 'node:fs';
8
+ import * as path from 'node:path';
9
+ import * as crypto from 'node:crypto';
10
+ /**
11
+ * Internal context implementation
12
+ */
13
+ class RuleContextImpl {
14
+ filePath;
15
+ sourceCode;
16
+ sourceFile;
17
+ projectRoot;
18
+ config;
19
+ previousResults;
20
+ currentRuleId = '';
21
+ findings = [];
22
+ constructor(filePath, sourceCode, sourceFile, projectRoot, config, previousResults) {
23
+ this.filePath = filePath;
24
+ this.sourceCode = sourceCode;
25
+ this.sourceFile = sourceFile;
26
+ this.projectRoot = projectRoot;
27
+ this.config = config;
28
+ this.previousResults = previousResults;
29
+ }
30
+ /**
31
+ * Set current rule ID (called by engine before rule execution)
32
+ */
33
+ setCurrentRule(ruleId) {
34
+ this.currentRuleId = ruleId;
35
+ this.findings = [];
36
+ }
37
+ /**
38
+ * Get collected findings
39
+ */
40
+ getFindings() {
41
+ return this.findings;
42
+ }
43
+ /**
44
+ * Report a finding
45
+ */
46
+ report(finding) {
47
+ this.findings.push({
48
+ ...finding,
49
+ id: crypto.randomUUID(),
50
+ ruleId: this.currentRuleId,
51
+ });
52
+ }
53
+ /**
54
+ * Get option value for current rule
55
+ */
56
+ getOption(key, defaultValue) {
57
+ const ruleSettings = this.config.rules[this.currentRuleId];
58
+ if (ruleSettings?.options && key in ruleSettings.options) {
59
+ return ruleSettings.options[key];
60
+ }
61
+ return defaultValue;
62
+ }
63
+ }
64
+ /**
65
+ * Rule Context Builder
66
+ * Builds context for rule execution
67
+ */
68
+ export class RuleContextBuilder {
69
+ projectRoot = process.cwd();
70
+ config;
71
+ previousResults = new Map();
72
+ project = null;
73
+ constructor() {
74
+ // Import DEFAULT_RULE_CONFIG dynamically to avoid circular dependency
75
+ this.config = {
76
+ profile: 'standard',
77
+ rules: {},
78
+ exclude: ['**/node_modules/**', '**/dist/**', '**/*.test.ts', '**/*.spec.ts'],
79
+ include: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx'],
80
+ severityThreshold: 'info',
81
+ enableTaintAnalysis: false,
82
+ enableDFG: false,
83
+ };
84
+ }
85
+ /**
86
+ * Set project root
87
+ */
88
+ withProjectRoot(projectRoot) {
89
+ this.projectRoot = projectRoot;
90
+ return this;
91
+ }
92
+ /**
93
+ * Set configuration
94
+ */
95
+ withConfig(config) {
96
+ this.config = { ...this.config, ...config };
97
+ return this;
98
+ }
99
+ /**
100
+ * Set previous results
101
+ */
102
+ withPreviousResults(results) {
103
+ this.previousResults = results;
104
+ return this;
105
+ }
106
+ /**
107
+ * Use existing ts-morph Project
108
+ */
109
+ withProject(project) {
110
+ this.project = project;
111
+ return this;
112
+ }
113
+ /**
114
+ * Enable taint analysis
115
+ */
116
+ withTaintAnalysis(enabled = true) {
117
+ this.config.enableTaintAnalysis = enabled;
118
+ return this;
119
+ }
120
+ /**
121
+ * Enable DFG analysis
122
+ */
123
+ withDFG(enabled = true) {
124
+ this.config.enableDFG = enabled;
125
+ return this;
126
+ }
127
+ /**
128
+ * Build context for a file
129
+ */
130
+ async build(filePath) {
131
+ const absolutePath = path.isAbsolute(filePath)
132
+ ? filePath
133
+ : path.resolve(this.projectRoot, filePath);
134
+ // Read source code
135
+ const sourceCode = await fs.promises.readFile(absolutePath, 'utf-8');
136
+ // Get or create Project
137
+ const project = this.project ?? new Project({
138
+ useInMemoryFileSystem: false,
139
+ skipFileDependencyResolution: true,
140
+ });
141
+ // Get or create SourceFile
142
+ let sourceFile = project.getSourceFile(absolutePath);
143
+ if (!sourceFile) {
144
+ sourceFile = project.createSourceFile(absolutePath, sourceCode, {
145
+ overwrite: true,
146
+ });
147
+ }
148
+ return new RuleContextImpl(absolutePath, sourceCode, sourceFile, this.projectRoot, this.config, this.previousResults);
149
+ }
150
+ /**
151
+ * Build context from source code string
152
+ */
153
+ buildFromSource(filePath, sourceCode) {
154
+ const absolutePath = path.isAbsolute(filePath)
155
+ ? filePath
156
+ : path.resolve(this.projectRoot, filePath);
157
+ // Get or create Project
158
+ const project = this.project ?? new Project({
159
+ useInMemoryFileSystem: true,
160
+ skipFileDependencyResolution: true,
161
+ });
162
+ // Create SourceFile
163
+ const sourceFile = project.createSourceFile(absolutePath, sourceCode, {
164
+ overwrite: true,
165
+ });
166
+ return new RuleContextImpl(absolutePath, sourceCode, sourceFile, this.projectRoot, this.config, this.previousResults);
167
+ }
168
+ }
169
+ /**
170
+ * Create a context builder
171
+ */
172
+ export function createContextBuilder() {
173
+ return new RuleContextBuilder();
174
+ }
175
+ //# sourceMappingURL=rule-context.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"rule-context.js","sourceRoot":"","sources":["../../../src/rules/engine/rule-context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAc,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAsBtC;;GAEG;AACH,MAAM,eAAe;IACnB,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,UAAU,CAAa;IACvB,WAAW,CAAS;IACpB,MAAM,CAAa;IACnB,eAAe,CAA0B;IAEjC,aAAa,GAAW,EAAE,CAAC;IAC3B,QAAQ,GAAkB,EAAE,CAAC;IAErC,YACE,QAAgB,EAChB,UAAkB,EAClB,UAAsB,EACtB,WAAmB,EACnB,MAAkB,EAClB,eAAwC;QAExC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAc;QAC3B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAA2C;QAChD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,GAAG,OAAO;YACV,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,MAAM,EAAE,IAAI,CAAC,aAAa;SAC3B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAI,GAAW,EAAE,YAAe;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,YAAY,EAAE,OAAO,IAAI,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YACzD,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAM,CAAC;QACxC,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACrB,WAAW,GAAW,OAAO,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,CAAa;IACnB,eAAe,GAA4B,IAAI,GAAG,EAAE,CAAC;IACrD,OAAO,GAAmB,IAAI,CAAC;IAEvC;QACE,sEAAsE;QACtE,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,CAAC,oBAAoB,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC;YAC7E,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;YACvD,iBAAiB,EAAE,MAAM;YACzB,mBAAmB,EAAE,KAAK;YAC1B,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,WAAmB;QACjC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,MAA2B;QACpC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,OAAgC;QAClD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,UAAmB,IAAI;QACvC,IAAI,CAAC,MAAM,CAAC,mBAAmB,GAAG,OAAO,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,UAAmB,IAAI;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC5C,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7C,mBAAmB;QACnB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAErE,wBAAwB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,OAAO,CAAC;YAC1C,qBAAqB,EAAE,KAAK;YAC5B,4BAA4B,EAAE,IAAI;SACnC,CAAC,CAAC;QAEH,2BAA2B;QAC3B,IAAI,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,YAAY,EAAE,UAAU,EAAE;gBAC9D,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,eAAe,CACxB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,eAAe,CACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAgB,EAAE,UAAkB;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC5C,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7C,wBAAwB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,OAAO,CAAC;YAC1C,qBAAqB,EAAE,IAAI;YAC3B,4BAA4B,EAAE,IAAI;SACnC,CAAC,CAAC;QAEH,oBAAoB;QACpB,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,YAAY,EAAE,UAAU,EAAE;YACpE,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,OAAO,IAAI,eAAe,CACxB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,eAAe,CACrB,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,kBAAkB,EAAE,CAAC;AAClC,CAAC"}
@@ -0,0 +1,132 @@
1
+ /**
2
+ * @fileoverview Security Rule Engine
3
+ * @module @nahisaho/musubix-security/rules/engine/rule-engine
4
+ * @trace REQ-RULE-001, REQ-RULE-002, REQ-RULE-004
5
+ */
6
+ import type { RuleResult, RuleFinding, RuleConfig, RuleSeverity } from '../types.js';
7
+ import { RuleRegistry } from './rule-registry.js';
8
+ /**
9
+ * Rule engine options
10
+ */
11
+ export interface RuleEngineOptions {
12
+ /** Rule registry to use */
13
+ registry?: RuleRegistry;
14
+ /** Project root directory */
15
+ projectRoot?: string;
16
+ /** Number of concurrent file processing */
17
+ concurrency?: number;
18
+ /** Progress callback */
19
+ onProgress?: (progress: RuleEngineProgress) => void;
20
+ /** File processed callback */
21
+ onFileProcessed?: (filePath: string, findings: RuleFinding[]) => void;
22
+ /** Abort signal */
23
+ signal?: AbortSignal;
24
+ }
25
+ /**
26
+ * Progress information
27
+ */
28
+ export interface RuleEngineProgress {
29
+ phase: 'init' | 'scanning' | 'analyzing' | 'complete';
30
+ totalFiles: number;
31
+ processedFiles: number;
32
+ totalRules: number;
33
+ currentFile?: string;
34
+ currentRule?: string;
35
+ findingsCount: number;
36
+ }
37
+ /**
38
+ * Engine run result
39
+ */
40
+ export interface RuleEngineResult {
41
+ /** All findings */
42
+ findings: RuleFinding[];
43
+ /** Results by rule */
44
+ resultsByRule: Map<string, RuleResult>;
45
+ /** Results by file */
46
+ resultsByFile: Map<string, RuleFinding[]>;
47
+ /** Files processed */
48
+ filesProcessed: number;
49
+ /** Total execution time in ms */
50
+ executionTimeMs: number;
51
+ /** Errors encountered */
52
+ errors: RuleEngineError[];
53
+ /** Summary statistics */
54
+ summary: RuleEngineSummary;
55
+ }
56
+ /**
57
+ * Engine error
58
+ */
59
+ export interface RuleEngineError {
60
+ type: 'file' | 'rule' | 'system';
61
+ filePath?: string;
62
+ ruleId?: string;
63
+ message: string;
64
+ stack?: string;
65
+ }
66
+ /**
67
+ * Summary statistics
68
+ */
69
+ export interface RuleEngineSummary {
70
+ totalFindings: number;
71
+ bySeverity: Record<RuleSeverity, number>;
72
+ byRule: Record<string, number>;
73
+ byCategory: Record<string, number>;
74
+ }
75
+ /**
76
+ * Security Rule Engine
77
+ * Main orchestrator for running security rules against source files
78
+ */
79
+ export declare class RuleEngine {
80
+ private registry;
81
+ private projectRoot;
82
+ private concurrency;
83
+ private onProgress?;
84
+ private onFileProcessed?;
85
+ private signal?;
86
+ constructor(options?: RuleEngineOptions);
87
+ /**
88
+ * Run rules against files
89
+ */
90
+ run(config: RuleConfig): Promise<RuleEngineResult>;
91
+ /**
92
+ * Run rules against a single file
93
+ */
94
+ runOnFile(filePath: string, config: RuleConfig): Promise<RuleFinding[]>;
95
+ /**
96
+ * Run rules against source code string
97
+ */
98
+ runOnSource(sourceCode: string, config: RuleConfig, fileName?: string): Promise<RuleFinding[]>;
99
+ /**
100
+ * Process a single file
101
+ */
102
+ private processFile;
103
+ /**
104
+ * Get files to scan
105
+ */
106
+ private getFilesToScan;
107
+ /**
108
+ * Walk directory recursively
109
+ */
110
+ private walkDirectory;
111
+ /**
112
+ * Get rules to run based on config
113
+ */
114
+ private getRulesToRun;
115
+ /**
116
+ * Get rules for a profile
117
+ */
118
+ private getProfileRules;
119
+ /**
120
+ * Calculate summary statistics
121
+ */
122
+ private calculateSummary;
123
+ /**
124
+ * Emit progress
125
+ */
126
+ private emitProgress;
127
+ }
128
+ /**
129
+ * Create a rule engine
130
+ */
131
+ export declare function createRuleEngine(options?: RuleEngineOptions): RuleEngine;
132
+ //# sourceMappingURL=rule-engine.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"rule-engine.d.ts","sourceRoot":"","sources":["../../../src/rules/engine/rule-engine.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAEV,UAAU,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACb,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAC;AAGrE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACpD,8BAA8B;IAC9B,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC;IACtE,mBAAmB;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,CAAC;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB;IACnB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,sBAAsB;IACtB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,sBAAsB;IACtB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1C,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,yBAAyB;IACzB,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED;;;GAGG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,UAAU,CAAC,CAAyC;IAC5D,OAAO,CAAC,eAAe,CAAC,CAAsD;IAC9E,OAAO,CAAC,MAAM,CAAC,CAAc;gBAEjB,OAAO,GAAE,iBAAsB;IAS3C;;OAEG;IACG,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2HxD;;OAEG;IACG,SAAS,CACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,WAAW,EAAE,CAAC;IAWzB;;OAEG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,UAAU,EAClB,QAAQ,GAAE,MAAuB,GAChC,OAAO,CAAC,WAAW,EAAE,CAAC;IA8BzB;;OAEG;YACW,WAAW;IAqEzB;;OAEG;YACW,cAAc;IA2B5B;;OAEG;YACW,aAAa;IAyB3B;;OAEG;IACH,OAAO,CAAC,aAAa;IA2BrB;;OAEG;IACH,OAAO,CAAC,eAAe;IAuBvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA2CxB;;OAEG;IACH,OAAO,CAAC,YAAY;CAGrB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,iBAAsB,GAAG,UAAU,CAE5E"}