@nahisaho/musubix-security 2.0.1 → 2.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/analysis/enhanced-taint-analyzer.d.ts +120 -0
- package/dist/analysis/enhanced-taint-analyzer.d.ts.map +1 -0
- package/dist/analysis/enhanced-taint-analyzer.js +450 -0
- package/dist/analysis/enhanced-taint-analyzer.js.map +1 -0
- package/dist/analysis/index.d.ts +1 -0
- package/dist/analysis/index.d.ts.map +1 -1
- package/dist/analysis/index.js +1 -0
- package/dist/analysis/index.js.map +1 -1
- package/dist/analysis/interprocedural/call-graph-builder.d.ts +192 -0
- package/dist/analysis/interprocedural/call-graph-builder.d.ts.map +1 -0
- package/dist/analysis/interprocedural/call-graph-builder.js +510 -0
- package/dist/analysis/interprocedural/call-graph-builder.js.map +1 -0
- package/dist/analysis/interprocedural/dfg-adapter.d.ts +166 -0
- package/dist/analysis/interprocedural/dfg-adapter.d.ts.map +1 -0
- package/dist/analysis/interprocedural/dfg-adapter.js +455 -0
- package/dist/analysis/interprocedural/dfg-adapter.js.map +1 -0
- package/dist/analysis/interprocedural/index.d.ts +9 -0
- package/dist/analysis/interprocedural/index.d.ts.map +1 -0
- package/dist/analysis/interprocedural/index.js +9 -0
- package/dist/analysis/interprocedural/index.js.map +1 -0
- package/dist/analysis/interprocedural/taint-propagator.d.ts +250 -0
- package/dist/analysis/interprocedural/taint-propagator.d.ts.map +1 -0
- package/dist/analysis/interprocedural/taint-propagator.js +435 -0
- package/dist/analysis/interprocedural/taint-propagator.js.map +1 -0
- package/dist/analysis/sanitizers/command-sanitizers.d.ts +12 -0
- package/dist/analysis/sanitizers/command-sanitizers.d.ts.map +1 -0
- package/dist/analysis/sanitizers/command-sanitizers.js +123 -0
- package/dist/analysis/sanitizers/command-sanitizers.js.map +1 -0
- package/dist/analysis/sanitizers/html-sanitizers.d.ts +12 -0
- package/dist/analysis/sanitizers/html-sanitizers.d.ts.map +1 -0
- package/dist/analysis/sanitizers/html-sanitizers.js +213 -0
- package/dist/analysis/sanitizers/html-sanitizers.js.map +1 -0
- package/dist/analysis/sanitizers/index.d.ts +35 -0
- package/dist/analysis/sanitizers/index.d.ts.map +1 -0
- package/dist/analysis/sanitizers/index.js +59 -0
- package/dist/analysis/sanitizers/index.js.map +1 -0
- package/dist/analysis/sanitizers/path-sanitizers.d.ts +12 -0
- package/dist/analysis/sanitizers/path-sanitizers.d.ts.map +1 -0
- package/dist/analysis/sanitizers/path-sanitizers.js +163 -0
- package/dist/analysis/sanitizers/path-sanitizers.js.map +1 -0
- package/dist/analysis/sanitizers/sql-sanitizers.d.ts +12 -0
- package/dist/analysis/sanitizers/sql-sanitizers.d.ts.map +1 -0
- package/dist/analysis/sanitizers/sql-sanitizers.js +216 -0
- package/dist/analysis/sanitizers/sql-sanitizers.js.map +1 -0
- package/dist/analysis/sanitizers/types.d.ts +78 -0
- package/dist/analysis/sanitizers/types.d.ts.map +1 -0
- package/dist/analysis/sanitizers/types.js +7 -0
- package/dist/analysis/sanitizers/types.js.map +1 -0
- package/dist/analysis/sanitizers/validation-sanitizers.d.ts +12 -0
- package/dist/analysis/sanitizers/validation-sanitizers.d.ts.map +1 -0
- package/dist/analysis/sanitizers/validation-sanitizers.js +268 -0
- package/dist/analysis/sanitizers/validation-sanitizers.js.map +1 -0
- package/dist/analysis/sinks/code-eval.d.ts +12 -0
- package/dist/analysis/sinks/code-eval.d.ts.map +1 -0
- package/dist/analysis/sinks/code-eval.js +231 -0
- package/dist/analysis/sinks/code-eval.js.map +1 -0
- package/dist/analysis/sinks/command-exec.d.ts +12 -0
- package/dist/analysis/sinks/command-exec.d.ts.map +1 -0
- package/dist/analysis/sinks/command-exec.js +187 -0
- package/dist/analysis/sinks/command-exec.js.map +1 -0
- package/dist/analysis/sinks/file-operations.d.ts +12 -0
- package/dist/analysis/sinks/file-operations.d.ts.map +1 -0
- package/dist/analysis/sinks/file-operations.js +239 -0
- package/dist/analysis/sinks/file-operations.js.map +1 -0
- package/dist/analysis/sinks/html-output.d.ts +12 -0
- package/dist/analysis/sinks/html-output.d.ts.map +1 -0
- package/dist/analysis/sinks/html-output.js +256 -0
- package/dist/analysis/sinks/html-output.js.map +1 -0
- package/dist/analysis/sinks/index.d.ts +30 -0
- package/dist/analysis/sinks/index.d.ts.map +1 -0
- package/dist/analysis/sinks/index.js +46 -0
- package/dist/analysis/sinks/index.js.map +1 -0
- package/dist/analysis/sinks/sql-query.d.ts +12 -0
- package/dist/analysis/sinks/sql-query.d.ts.map +1 -0
- package/dist/analysis/sinks/sql-query.js +209 -0
- package/dist/analysis/sinks/sql-query.js.map +1 -0
- package/dist/analysis/sinks/types.d.ts +97 -0
- package/dist/analysis/sinks/types.d.ts.map +1 -0
- package/dist/analysis/sinks/types.js +7 -0
- package/dist/analysis/sinks/types.js.map +1 -0
- package/dist/analysis/sources/database.d.ts +12 -0
- package/dist/analysis/sources/database.d.ts.map +1 -0
- package/dist/analysis/sources/database.js +211 -0
- package/dist/analysis/sources/database.js.map +1 -0
- package/dist/analysis/sources/environment.d.ts +12 -0
- package/dist/analysis/sources/environment.d.ts.map +1 -0
- package/dist/analysis/sources/environment.js +158 -0
- package/dist/analysis/sources/environment.js.map +1 -0
- package/dist/analysis/sources/file-system.d.ts +12 -0
- package/dist/analysis/sources/file-system.d.ts.map +1 -0
- package/dist/analysis/sources/file-system.js +180 -0
- package/dist/analysis/sources/file-system.js.map +1 -0
- package/dist/analysis/sources/http-request.d.ts +12 -0
- package/dist/analysis/sources/http-request.d.ts.map +1 -0
- package/dist/analysis/sources/http-request.js +179 -0
- package/dist/analysis/sources/http-request.js.map +1 -0
- package/dist/analysis/sources/index.d.ts +26 -0
- package/dist/analysis/sources/index.d.ts.map +1 -0
- package/dist/analysis/sources/index.js +40 -0
- package/dist/analysis/sources/index.js.map +1 -0
- package/dist/analysis/sources/types.d.ts +93 -0
- package/dist/analysis/sources/types.d.ts.map +1 -0
- package/dist/analysis/sources/types.js +7 -0
- package/dist/analysis/sources/types.js.map +1 -0
- package/dist/analysis/sources/user-input.d.ts +12 -0
- package/dist/analysis/sources/user-input.d.ts.map +1 -0
- package/dist/analysis/sources/user-input.js +261 -0
- package/dist/analysis/sources/user-input.js.map +1 -0
- package/dist/cve/cpe-matcher.d.ts +183 -0
- package/dist/cve/cpe-matcher.d.ts.map +1 -0
- package/dist/cve/cpe-matcher.js +396 -0
- package/dist/cve/cpe-matcher.js.map +1 -0
- package/dist/cve/cve-cache.d.ts +225 -0
- package/dist/cve/cve-cache.d.ts.map +1 -0
- package/dist/cve/cve-cache.js +452 -0
- package/dist/cve/cve-cache.js.map +1 -0
- package/dist/cve/cve-cache.test.d.ts +6 -0
- package/dist/cve/cve-cache.test.d.ts.map +1 -0
- package/dist/cve/cve-cache.test.js +363 -0
- package/dist/cve/cve-cache.test.js.map +1 -0
- package/dist/cve/dependency-parser.d.ts +204 -0
- package/dist/cve/dependency-parser.d.ts.map +1 -0
- package/dist/cve/dependency-parser.js +338 -0
- package/dist/cve/dependency-parser.js.map +1 -0
- package/dist/cve/index.d.ts +20 -0
- package/dist/cve/index.d.ts.map +1 -0
- package/dist/cve/index.js +13 -0
- package/dist/cve/index.js.map +1 -0
- package/dist/cve/nvd-client.d.ts +137 -0
- package/dist/cve/nvd-client.d.ts.map +1 -0
- package/dist/cve/nvd-client.js +333 -0
- package/dist/cve/nvd-client.js.map +1 -0
- package/dist/cve/rate-limiter.d.ts +194 -0
- package/dist/cve/rate-limiter.d.ts.map +1 -0
- package/dist/cve/rate-limiter.js +276 -0
- package/dist/cve/rate-limiter.js.map +1 -0
- package/dist/cve/report-generator.d.ts +145 -0
- package/dist/cve/report-generator.d.ts.map +1 -0
- package/dist/cve/report-generator.js +377 -0
- package/dist/cve/report-generator.js.map +1 -0
- package/dist/cve/report-generator.test.d.ts +6 -0
- package/dist/cve/report-generator.test.d.ts.map +1 -0
- package/dist/cve/report-generator.test.js +275 -0
- package/dist/cve/report-generator.test.js.map +1 -0
- package/dist/cve/vulnerability-scanner.d.ts +198 -0
- package/dist/cve/vulnerability-scanner.d.ts.map +1 -0
- package/dist/cve/vulnerability-scanner.js +311 -0
- package/dist/cve/vulnerability-scanner.js.map +1 -0
- package/dist/cve/vulnerability-scanner.test.d.ts +6 -0
- package/dist/cve/vulnerability-scanner.test.d.ts.map +1 -0
- package/dist/cve/vulnerability-scanner.test.js +329 -0
- package/dist/cve/vulnerability-scanner.test.js.map +1 -0
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +4 -0
- package/dist/index.js.map +1 -1
- package/dist/rules/config/config-parser.d.ts +119 -0
- package/dist/rules/config/config-parser.d.ts.map +1 -0
- package/dist/rules/config/config-parser.js +376 -0
- package/dist/rules/config/config-parser.js.map +1 -0
- package/dist/rules/config/index.d.ts +8 -0
- package/dist/rules/config/index.d.ts.map +1 -0
- package/dist/rules/config/index.js +8 -0
- package/dist/rules/config/index.js.map +1 -0
- package/dist/rules/config/profiles.d.ts +85 -0
- package/dist/rules/config/profiles.d.ts.map +1 -0
- package/dist/rules/config/profiles.js +226 -0
- package/dist/rules/config/profiles.js.map +1 -0
- package/dist/rules/cwe/cwe-119-buffer-overflow.d.ts +9 -0
- package/dist/rules/cwe/cwe-119-buffer-overflow.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-119-buffer-overflow.js +54 -0
- package/dist/rules/cwe/cwe-119-buffer-overflow.js.map +1 -0
- package/dist/rules/cwe/cwe-125-oob-read.d.ts +20 -0
- package/dist/rules/cwe/cwe-125-oob-read.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-125-oob-read.js +247 -0
- package/dist/rules/cwe/cwe-125-oob-read.js.map +1 -0
- package/dist/rules/cwe/cwe-190-integer-overflow.d.ts +9 -0
- package/dist/rules/cwe/cwe-190-integer-overflow.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-190-integer-overflow.js +55 -0
- package/dist/rules/cwe/cwe-190-integer-overflow.js.map +1 -0
- package/dist/rules/cwe/cwe-20-input-validation.d.ts +21 -0
- package/dist/rules/cwe/cwe-20-input-validation.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-20-input-validation.js +342 -0
- package/dist/rules/cwe/cwe-20-input-validation.js.map +1 -0
- package/dist/rules/cwe/cwe-22-path-traversal.d.ts +20 -0
- package/dist/rules/cwe/cwe-22-path-traversal.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-22-path-traversal.js +306 -0
- package/dist/rules/cwe/cwe-22-path-traversal.js.map +1 -0
- package/dist/rules/cwe/cwe-269-improper-privilege.d.ts +9 -0
- package/dist/rules/cwe/cwe-269-improper-privilege.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-269-improper-privilege.js +58 -0
- package/dist/rules/cwe/cwe-269-improper-privilege.js.map +1 -0
- package/dist/rules/cwe/cwe-276-default-permissions.d.ts +9 -0
- package/dist/rules/cwe/cwe-276-default-permissions.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-276-default-permissions.js +54 -0
- package/dist/rules/cwe/cwe-276-default-permissions.js.map +1 -0
- package/dist/rules/cwe/cwe-287-improper-auth.d.ts +9 -0
- package/dist/rules/cwe/cwe-287-improper-auth.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-287-improper-auth.js +57 -0
- package/dist/rules/cwe/cwe-287-improper-auth.js.map +1 -0
- package/dist/rules/cwe/cwe-306-missing-auth-critical.d.ts +9 -0
- package/dist/rules/cwe/cwe-306-missing-auth-critical.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-306-missing-auth-critical.js +53 -0
- package/dist/rules/cwe/cwe-306-missing-auth-critical.js.map +1 -0
- package/dist/rules/cwe/cwe-352-csrf.d.ts +9 -0
- package/dist/rules/cwe/cwe-352-csrf.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-352-csrf.js +51 -0
- package/dist/rules/cwe/cwe-352-csrf.js.map +1 -0
- package/dist/rules/cwe/cwe-362-race-condition.d.ts +9 -0
- package/dist/rules/cwe/cwe-362-race-condition.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-362-race-condition.js +55 -0
- package/dist/rules/cwe/cwe-362-race-condition.js.map +1 -0
- package/dist/rules/cwe/cwe-416-use-after-free.d.ts +23 -0
- package/dist/rules/cwe/cwe-416-use-after-free.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-416-use-after-free.js +402 -0
- package/dist/rules/cwe/cwe-416-use-after-free.js.map +1 -0
- package/dist/rules/cwe/cwe-434-file-upload.d.ts +9 -0
- package/dist/rules/cwe/cwe-434-file-upload.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-434-file-upload.js +55 -0
- package/dist/rules/cwe/cwe-434-file-upload.js.map +1 -0
- package/dist/rules/cwe/cwe-476-null-deref.d.ts +9 -0
- package/dist/rules/cwe/cwe-476-null-deref.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-476-null-deref.js +55 -0
- package/dist/rules/cwe/cwe-476-null-deref.js.map +1 -0
- package/dist/rules/cwe/cwe-502-deserialization.d.ts +9 -0
- package/dist/rules/cwe/cwe-502-deserialization.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-502-deserialization.js +57 -0
- package/dist/rules/cwe/cwe-502-deserialization.js.map +1 -0
- package/dist/rules/cwe/cwe-77-command-injection.d.ts +9 -0
- package/dist/rules/cwe/cwe-77-command-injection.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-77-command-injection.js +55 -0
- package/dist/rules/cwe/cwe-77-command-injection.js.map +1 -0
- package/dist/rules/cwe/cwe-78-command-injection.d.ts +20 -0
- package/dist/rules/cwe/cwe-78-command-injection.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-78-command-injection.js +259 -0
- package/dist/rules/cwe/cwe-78-command-injection.js.map +1 -0
- package/dist/rules/cwe/cwe-787-oob-write.d.ts +21 -0
- package/dist/rules/cwe/cwe-787-oob-write.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-787-oob-write.js +321 -0
- package/dist/rules/cwe/cwe-787-oob-write.js.map +1 -0
- package/dist/rules/cwe/cwe-79-xss.d.ts +22 -0
- package/dist/rules/cwe/cwe-79-xss.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-79-xss.js +386 -0
- package/dist/rules/cwe/cwe-79-xss.js.map +1 -0
- package/dist/rules/cwe/cwe-798-hardcoded-credentials.d.ts +9 -0
- package/dist/rules/cwe/cwe-798-hardcoded-credentials.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-798-hardcoded-credentials.js +58 -0
- package/dist/rules/cwe/cwe-798-hardcoded-credentials.js.map +1 -0
- package/dist/rules/cwe/cwe-862-missing-auth.d.ts +9 -0
- package/dist/rules/cwe/cwe-862-missing-auth.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-862-missing-auth.js +55 -0
- package/dist/rules/cwe/cwe-862-missing-auth.js.map +1 -0
- package/dist/rules/cwe/cwe-863-incorrect-auth.d.ts +9 -0
- package/dist/rules/cwe/cwe-863-incorrect-auth.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-863-incorrect-auth.js +58 -0
- package/dist/rules/cwe/cwe-863-incorrect-auth.js.map +1 -0
- package/dist/rules/cwe/cwe-89-sql-injection.d.ts +21 -0
- package/dist/rules/cwe/cwe-89-sql-injection.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-89-sql-injection.js +456 -0
- package/dist/rules/cwe/cwe-89-sql-injection.js.map +1 -0
- package/dist/rules/cwe/cwe-918-ssrf.d.ts +9 -0
- package/dist/rules/cwe/cwe-918-ssrf.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-918-ssrf.js +59 -0
- package/dist/rules/cwe/cwe-918-ssrf.js.map +1 -0
- package/dist/rules/cwe/cwe-94-code-injection.d.ts +9 -0
- package/dist/rules/cwe/cwe-94-code-injection.d.ts.map +1 -0
- package/dist/rules/cwe/cwe-94-code-injection.js +59 -0
- package/dist/rules/cwe/cwe-94-code-injection.js.map +1 -0
- package/dist/rules/cwe/index.d.ts +43 -0
- package/dist/rules/cwe/index.d.ts.map +1 -0
- package/dist/rules/cwe/index.js +99 -0
- package/dist/rules/cwe/index.js.map +1 -0
- package/dist/rules/engine/index.d.ts +10 -0
- package/dist/rules/engine/index.d.ts.map +1 -0
- package/dist/rules/engine/index.js +9 -0
- package/dist/rules/engine/index.js.map +1 -0
- package/dist/rules/engine/rule-context.d.ts +99 -0
- package/dist/rules/engine/rule-context.d.ts.map +1 -0
- package/dist/rules/engine/rule-context.js +175 -0
- package/dist/rules/engine/rule-context.js.map +1 -0
- package/dist/rules/engine/rule-engine.d.ts +132 -0
- package/dist/rules/engine/rule-engine.d.ts.map +1 -0
- package/dist/rules/engine/rule-engine.js +379 -0
- package/dist/rules/engine/rule-engine.js.map +1 -0
- package/dist/rules/engine/rule-registry.d.ts +133 -0
- package/dist/rules/engine/rule-registry.d.ts.map +1 -0
- package/dist/rules/engine/rule-registry.js +281 -0
- package/dist/rules/engine/rule-registry.js.map +1 -0
- package/dist/rules/index.d.ts +14 -0
- package/dist/rules/index.d.ts.map +1 -0
- package/dist/rules/index.js +16 -0
- package/dist/rules/index.js.map +1 -0
- package/dist/rules/owasp/a01-broken-access-control.d.ts +19 -0
- package/dist/rules/owasp/a01-broken-access-control.d.ts.map +1 -0
- package/dist/rules/owasp/a01-broken-access-control.js +295 -0
- package/dist/rules/owasp/a01-broken-access-control.js.map +1 -0
- package/dist/rules/owasp/a02-cryptographic-failures.d.ts +19 -0
- package/dist/rules/owasp/a02-cryptographic-failures.d.ts.map +1 -0
- package/dist/rules/owasp/a02-cryptographic-failures.js +327 -0
- package/dist/rules/owasp/a02-cryptographic-failures.js.map +1 -0
- package/dist/rules/owasp/a03-injection.d.ts +21 -0
- package/dist/rules/owasp/a03-injection.d.ts.map +1 -0
- package/dist/rules/owasp/a03-injection.js +342 -0
- package/dist/rules/owasp/a03-injection.js.map +1 -0
- package/dist/rules/owasp/a04-insecure-design.d.ts +19 -0
- package/dist/rules/owasp/a04-insecure-design.d.ts.map +1 -0
- package/dist/rules/owasp/a04-insecure-design.js +403 -0
- package/dist/rules/owasp/a04-insecure-design.js.map +1 -0
- package/dist/rules/owasp/a05-security-misconfiguration.d.ts +19 -0
- package/dist/rules/owasp/a05-security-misconfiguration.d.ts.map +1 -0
- package/dist/rules/owasp/a05-security-misconfiguration.js +371 -0
- package/dist/rules/owasp/a05-security-misconfiguration.js.map +1 -0
- package/dist/rules/owasp/a06-vulnerable-components.d.ts +18 -0
- package/dist/rules/owasp/a06-vulnerable-components.d.ts.map +1 -0
- package/dist/rules/owasp/a06-vulnerable-components.js +243 -0
- package/dist/rules/owasp/a06-vulnerable-components.js.map +1 -0
- package/dist/rules/owasp/a07-auth-failures.d.ts +19 -0
- package/dist/rules/owasp/a07-auth-failures.d.ts.map +1 -0
- package/dist/rules/owasp/a07-auth-failures.js +300 -0
- package/dist/rules/owasp/a07-auth-failures.js.map +1 -0
- package/dist/rules/owasp/a08-integrity-failures.d.ts +18 -0
- package/dist/rules/owasp/a08-integrity-failures.d.ts.map +1 -0
- package/dist/rules/owasp/a08-integrity-failures.js +306 -0
- package/dist/rules/owasp/a08-integrity-failures.js.map +1 -0
- package/dist/rules/owasp/a09-logging-failures.d.ts +18 -0
- package/dist/rules/owasp/a09-logging-failures.d.ts.map +1 -0
- package/dist/rules/owasp/a09-logging-failures.js +339 -0
- package/dist/rules/owasp/a09-logging-failures.js.map +1 -0
- package/dist/rules/owasp/a10-ssrf.d.ts +18 -0
- package/dist/rules/owasp/a10-ssrf.d.ts.map +1 -0
- package/dist/rules/owasp/a10-ssrf.js +349 -0
- package/dist/rules/owasp/a10-ssrf.js.map +1 -0
- package/dist/rules/owasp/index.d.ts +20 -0
- package/dist/rules/owasp/index.d.ts.map +1 -0
- package/dist/rules/owasp/index.js +53 -0
- package/dist/rules/owasp/index.js.map +1 -0
- package/dist/rules/types.d.ts +277 -0
- package/dist/rules/types.d.ts.map +1 -0
- package/dist/rules/types.js +34 -0
- package/dist/rules/types.js.map +1 -0
- package/dist/tests/integration/epic-integration.test.d.ts +7 -0
- package/dist/tests/integration/epic-integration.test.d.ts.map +1 -0
- package/dist/tests/integration/epic-integration.test.js +390 -0
- package/dist/tests/integration/epic-integration.test.js.map +1 -0
- package/dist/tests/rules/cwe/cwe-top25-1-13.test.d.ts +2 -0
- package/dist/tests/rules/cwe/cwe-top25-1-13.test.d.ts.map +1 -0
- package/dist/tests/rules/cwe/cwe-top25-1-13.test.js +154 -0
- package/dist/tests/rules/cwe/cwe-top25-1-13.test.js.map +1 -0
- package/dist/tests/rules/cwe/cwe-top25-14-25.test.d.ts +2 -0
- package/dist/tests/rules/cwe/cwe-top25-14-25.test.d.ts.map +1 -0
- package/dist/tests/rules/cwe/cwe-top25-14-25.test.js +121 -0
- package/dist/tests/rules/cwe/cwe-top25-14-25.test.js.map +1 -0
- package/dist/types/cve.d.ts +278 -0
- package/dist/types/cve.d.ts.map +1 -0
- package/dist/types/cve.js +7 -0
- package/dist/types/cve.js.map +1 -0
- package/dist/types/index.d.ts +2 -0
- package/dist/types/index.d.ts.map +1 -1
- package/dist/types/rule.d.ts +245 -0
- package/dist/types/rule.d.ts.map +1 -0
- package/dist/types/rule.js +7 -0
- package/dist/types/rule.js.map +1 -0
- package/package.json +1 -1
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @fileoverview CWE Top 25 Rules Index
|
|
3
|
+
* @module @nahisaho/musubix-security/rules/cwe
|
|
4
|
+
* @trace TSK-RULE-005, TSK-RULE-006
|
|
5
|
+
*/
|
|
6
|
+
export { cwe787OutOfBoundsWrite } from './cwe-787-oob-write.js';
|
|
7
|
+
export { cwe79XSS } from './cwe-79-xss.js';
|
|
8
|
+
export { cwe89SQLInjection } from './cwe-89-sql-injection.js';
|
|
9
|
+
export { cwe416UseAfterFree } from './cwe-416-use-after-free.js';
|
|
10
|
+
export { cwe78CommandInjection } from './cwe-78-command-injection.js';
|
|
11
|
+
export { cwe20InputValidation } from './cwe-20-input-validation.js';
|
|
12
|
+
export { cwe125OutOfBoundsRead } from './cwe-125-oob-read.js';
|
|
13
|
+
export { cwe22PathTraversal } from './cwe-22-path-traversal.js';
|
|
14
|
+
export { cwe352CSRF } from './cwe-352-csrf.js';
|
|
15
|
+
export { cwe434FileUpload } from './cwe-434-file-upload.js';
|
|
16
|
+
export { cwe862MissingAuth } from './cwe-862-missing-auth.js';
|
|
17
|
+
export { cwe476NullDeref } from './cwe-476-null-deref.js';
|
|
18
|
+
export { cwe287ImproperAuth } from './cwe-287-improper-auth.js';
|
|
19
|
+
export { cwe190IntegerOverflow } from './cwe-190-integer-overflow.js';
|
|
20
|
+
export { cwe502Deserialization } from './cwe-502-deserialization.js';
|
|
21
|
+
export { cwe77CommandInjection } from './cwe-77-command-injection.js';
|
|
22
|
+
export { cwe119BufferOverflow } from './cwe-119-buffer-overflow.js';
|
|
23
|
+
export { cwe798HardcodedCredentials } from './cwe-798-hardcoded-credentials.js';
|
|
24
|
+
export { cwe918SSRF } from './cwe-918-ssrf.js';
|
|
25
|
+
export { cwe306MissingAuthCritical } from './cwe-306-missing-auth-critical.js';
|
|
26
|
+
export { cwe362RaceCondition } from './cwe-362-race-condition.js';
|
|
27
|
+
export { cwe269ImproperPrivilege } from './cwe-269-improper-privilege.js';
|
|
28
|
+
export { cwe94CodeInjection } from './cwe-94-code-injection.js';
|
|
29
|
+
export { cwe863IncorrectAuth } from './cwe-863-incorrect-auth.js';
|
|
30
|
+
export { cwe276DefaultPermissions } from './cwe-276-default-permissions.js';
|
|
31
|
+
/**
|
|
32
|
+
* CWE Top 25 Rules (1-13)
|
|
33
|
+
*/
|
|
34
|
+
export declare const cweTop25Rules1to13: import("../types.js").SecurityRule[];
|
|
35
|
+
/**
|
|
36
|
+
* CWE Top 25 Rules (14-25)
|
|
37
|
+
*/
|
|
38
|
+
export declare const cweTop25Rules14to25: import("../types.js").SecurityRule[];
|
|
39
|
+
/**
|
|
40
|
+
* All CWE Top 25 rules
|
|
41
|
+
*/
|
|
42
|
+
export declare const cweTop25Rules: import("../types.js").SecurityRule[];
|
|
43
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/rules/cwe/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AA+B5E;;GAEG;AACH,eAAO,MAAM,kBAAkB,sCAc9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,sCAa/B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,sCAAkD,CAAC"}
|
|
@@ -0,0 +1,99 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @fileoverview CWE Top 25 Rules Index
|
|
3
|
+
* @module @nahisaho/musubix-security/rules/cwe
|
|
4
|
+
* @trace TSK-RULE-005, TSK-RULE-006
|
|
5
|
+
*/
|
|
6
|
+
// CWE Top 25 (1-13)
|
|
7
|
+
export { cwe787OutOfBoundsWrite } from './cwe-787-oob-write.js';
|
|
8
|
+
export { cwe79XSS } from './cwe-79-xss.js';
|
|
9
|
+
export { cwe89SQLInjection } from './cwe-89-sql-injection.js';
|
|
10
|
+
export { cwe416UseAfterFree } from './cwe-416-use-after-free.js';
|
|
11
|
+
export { cwe78CommandInjection } from './cwe-78-command-injection.js';
|
|
12
|
+
export { cwe20InputValidation } from './cwe-20-input-validation.js';
|
|
13
|
+
export { cwe125OutOfBoundsRead } from './cwe-125-oob-read.js';
|
|
14
|
+
export { cwe22PathTraversal } from './cwe-22-path-traversal.js';
|
|
15
|
+
export { cwe352CSRF } from './cwe-352-csrf.js';
|
|
16
|
+
export { cwe434FileUpload } from './cwe-434-file-upload.js';
|
|
17
|
+
export { cwe862MissingAuth } from './cwe-862-missing-auth.js';
|
|
18
|
+
export { cwe476NullDeref } from './cwe-476-null-deref.js';
|
|
19
|
+
export { cwe287ImproperAuth } from './cwe-287-improper-auth.js';
|
|
20
|
+
// CWE Top 25 (14-25)
|
|
21
|
+
export { cwe190IntegerOverflow } from './cwe-190-integer-overflow.js';
|
|
22
|
+
export { cwe502Deserialization } from './cwe-502-deserialization.js';
|
|
23
|
+
export { cwe77CommandInjection } from './cwe-77-command-injection.js';
|
|
24
|
+
export { cwe119BufferOverflow } from './cwe-119-buffer-overflow.js';
|
|
25
|
+
export { cwe798HardcodedCredentials } from './cwe-798-hardcoded-credentials.js';
|
|
26
|
+
export { cwe918SSRF } from './cwe-918-ssrf.js';
|
|
27
|
+
export { cwe306MissingAuthCritical } from './cwe-306-missing-auth-critical.js';
|
|
28
|
+
export { cwe362RaceCondition } from './cwe-362-race-condition.js';
|
|
29
|
+
export { cwe269ImproperPrivilege } from './cwe-269-improper-privilege.js';
|
|
30
|
+
export { cwe94CodeInjection } from './cwe-94-code-injection.js';
|
|
31
|
+
export { cwe863IncorrectAuth } from './cwe-863-incorrect-auth.js';
|
|
32
|
+
export { cwe276DefaultPermissions } from './cwe-276-default-permissions.js';
|
|
33
|
+
// Import for array exports (1-13)
|
|
34
|
+
import { cwe787OutOfBoundsWrite } from './cwe-787-oob-write.js';
|
|
35
|
+
import { cwe79XSS } from './cwe-79-xss.js';
|
|
36
|
+
import { cwe89SQLInjection } from './cwe-89-sql-injection.js';
|
|
37
|
+
import { cwe416UseAfterFree } from './cwe-416-use-after-free.js';
|
|
38
|
+
import { cwe78CommandInjection } from './cwe-78-command-injection.js';
|
|
39
|
+
import { cwe20InputValidation } from './cwe-20-input-validation.js';
|
|
40
|
+
import { cwe125OutOfBoundsRead } from './cwe-125-oob-read.js';
|
|
41
|
+
import { cwe22PathTraversal } from './cwe-22-path-traversal.js';
|
|
42
|
+
import { cwe352CSRF } from './cwe-352-csrf.js';
|
|
43
|
+
import { cwe434FileUpload } from './cwe-434-file-upload.js';
|
|
44
|
+
import { cwe862MissingAuth } from './cwe-862-missing-auth.js';
|
|
45
|
+
import { cwe476NullDeref } from './cwe-476-null-deref.js';
|
|
46
|
+
import { cwe287ImproperAuth } from './cwe-287-improper-auth.js';
|
|
47
|
+
// Import for array exports (14-25)
|
|
48
|
+
import { cwe190IntegerOverflow } from './cwe-190-integer-overflow.js';
|
|
49
|
+
import { cwe502Deserialization } from './cwe-502-deserialization.js';
|
|
50
|
+
import { cwe77CommandInjection } from './cwe-77-command-injection.js';
|
|
51
|
+
import { cwe119BufferOverflow } from './cwe-119-buffer-overflow.js';
|
|
52
|
+
import { cwe798HardcodedCredentials } from './cwe-798-hardcoded-credentials.js';
|
|
53
|
+
import { cwe918SSRF } from './cwe-918-ssrf.js';
|
|
54
|
+
import { cwe306MissingAuthCritical } from './cwe-306-missing-auth-critical.js';
|
|
55
|
+
import { cwe362RaceCondition } from './cwe-362-race-condition.js';
|
|
56
|
+
import { cwe269ImproperPrivilege } from './cwe-269-improper-privilege.js';
|
|
57
|
+
import { cwe94CodeInjection } from './cwe-94-code-injection.js';
|
|
58
|
+
import { cwe863IncorrectAuth } from './cwe-863-incorrect-auth.js';
|
|
59
|
+
import { cwe276DefaultPermissions } from './cwe-276-default-permissions.js';
|
|
60
|
+
/**
|
|
61
|
+
* CWE Top 25 Rules (1-13)
|
|
62
|
+
*/
|
|
63
|
+
export const cweTop25Rules1to13 = [
|
|
64
|
+
cwe787OutOfBoundsWrite,
|
|
65
|
+
cwe79XSS,
|
|
66
|
+
cwe89SQLInjection,
|
|
67
|
+
cwe416UseAfterFree,
|
|
68
|
+
cwe78CommandInjection,
|
|
69
|
+
cwe20InputValidation,
|
|
70
|
+
cwe125OutOfBoundsRead,
|
|
71
|
+
cwe22PathTraversal,
|
|
72
|
+
cwe352CSRF,
|
|
73
|
+
cwe434FileUpload,
|
|
74
|
+
cwe862MissingAuth,
|
|
75
|
+
cwe476NullDeref,
|
|
76
|
+
cwe287ImproperAuth,
|
|
77
|
+
];
|
|
78
|
+
/**
|
|
79
|
+
* CWE Top 25 Rules (14-25)
|
|
80
|
+
*/
|
|
81
|
+
export const cweTop25Rules14to25 = [
|
|
82
|
+
cwe190IntegerOverflow,
|
|
83
|
+
cwe502Deserialization,
|
|
84
|
+
cwe77CommandInjection,
|
|
85
|
+
cwe119BufferOverflow,
|
|
86
|
+
cwe798HardcodedCredentials,
|
|
87
|
+
cwe918SSRF,
|
|
88
|
+
cwe306MissingAuthCritical,
|
|
89
|
+
cwe362RaceCondition,
|
|
90
|
+
cwe269ImproperPrivilege,
|
|
91
|
+
cwe94CodeInjection,
|
|
92
|
+
cwe863IncorrectAuth,
|
|
93
|
+
cwe276DefaultPermissions,
|
|
94
|
+
];
|
|
95
|
+
/**
|
|
96
|
+
* All CWE Top 25 rules
|
|
97
|
+
*/
|
|
98
|
+
export const cweTop25Rules = [...cweTop25Rules1to13, ...cweTop25Rules14to25];
|
|
99
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rules/cwe/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,oBAAoB;AACpB,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,qBAAqB;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,kCAAkC;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,mCAAmC;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,sBAAsB;IACtB,QAAQ;IACR,iBAAiB;IACjB,kBAAkB;IAClB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB;IACrB,kBAAkB;IAClB,UAAU;IACV,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,qBAAqB;IACrB,qBAAqB;IACrB,qBAAqB;IACrB,oBAAoB;IACpB,0BAA0B;IAC1B,UAAU;IACV,yBAAyB;IACzB,mBAAmB;IACnB,uBAAuB;IACvB,kBAAkB;IAClB,mBAAmB;IACnB,wBAAwB;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAG,kBAAkB,EAAE,GAAG,mBAAmB,CAAC,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @fileoverview Rule Engine Module Exports
|
|
3
|
+
* @module @nahisaho/musubix-security/rules/engine
|
|
4
|
+
*/
|
|
5
|
+
export type { RuleEngineOptions, RuleEngineProgress, RuleEngineResult, RuleEngineError, RuleEngineSummary, } from './rule-engine.js';
|
|
6
|
+
export type { RuleContextBuildOptions, } from './rule-context.js';
|
|
7
|
+
export { RuleEngine, createRuleEngine } from './rule-engine.js';
|
|
8
|
+
export { RuleContextBuilder, createContextBuilder } from './rule-context.js';
|
|
9
|
+
export { RuleRegistry, getGlobalRegistry, createRegistry } from './rule-registry.js';
|
|
10
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/rules/engine/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @fileoverview Rule Engine Module Exports
|
|
3
|
+
* @module @nahisaho/musubix-security/rules/engine
|
|
4
|
+
*/
|
|
5
|
+
// Classes
|
|
6
|
+
export { RuleEngine, createRuleEngine } from './rule-engine.js';
|
|
7
|
+
export { RuleContextBuilder, createContextBuilder } from './rule-context.js';
|
|
8
|
+
export { RuleRegistry, getGlobalRegistry, createRegistry } from './rule-registry.js';
|
|
9
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rules/engine/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH,UAAU;AACV,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}
|
|
@@ -0,0 +1,99 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @fileoverview Rule Context Builder
|
|
3
|
+
* @module @nahisaho/musubix-security/rules/engine/rule-context
|
|
4
|
+
* @trace REQ-RULE-003
|
|
5
|
+
*/
|
|
6
|
+
import { Project, SourceFile } from 'ts-morph';
|
|
7
|
+
import type { RuleContext, RuleConfig, RuleFinding, RuleResult } from '../types.js';
|
|
8
|
+
/**
|
|
9
|
+
* Options for building rule context
|
|
10
|
+
*/
|
|
11
|
+
export interface RuleContextBuildOptions {
|
|
12
|
+
/** Project root directory */
|
|
13
|
+
projectRoot?: string;
|
|
14
|
+
/** Rule configuration */
|
|
15
|
+
config?: Partial<RuleConfig>;
|
|
16
|
+
/** Previous rule results */
|
|
17
|
+
previousResults?: Map<string, RuleResult>;
|
|
18
|
+
/** Existing ts-morph Project */
|
|
19
|
+
project?: Project;
|
|
20
|
+
}
|
|
21
|
+
/**
|
|
22
|
+
* Internal context implementation
|
|
23
|
+
*/
|
|
24
|
+
declare class RuleContextImpl implements RuleContext {
|
|
25
|
+
filePath: string;
|
|
26
|
+
sourceCode: string;
|
|
27
|
+
sourceFile: SourceFile;
|
|
28
|
+
projectRoot: string;
|
|
29
|
+
config: RuleConfig;
|
|
30
|
+
previousResults: Map<string, RuleResult>;
|
|
31
|
+
private currentRuleId;
|
|
32
|
+
private findings;
|
|
33
|
+
constructor(filePath: string, sourceCode: string, sourceFile: SourceFile, projectRoot: string, config: RuleConfig, previousResults: Map<string, RuleResult>);
|
|
34
|
+
/**
|
|
35
|
+
* Set current rule ID (called by engine before rule execution)
|
|
36
|
+
*/
|
|
37
|
+
setCurrentRule(ruleId: string): void;
|
|
38
|
+
/**
|
|
39
|
+
* Get collected findings
|
|
40
|
+
*/
|
|
41
|
+
getFindings(): RuleFinding[];
|
|
42
|
+
/**
|
|
43
|
+
* Report a finding
|
|
44
|
+
*/
|
|
45
|
+
report(finding: Omit<RuleFinding, 'id' | 'ruleId'>): void;
|
|
46
|
+
/**
|
|
47
|
+
* Get option value for current rule
|
|
48
|
+
*/
|
|
49
|
+
getOption<T>(key: string, defaultValue: T): T;
|
|
50
|
+
}
|
|
51
|
+
/**
|
|
52
|
+
* Rule Context Builder
|
|
53
|
+
* Builds context for rule execution
|
|
54
|
+
*/
|
|
55
|
+
export declare class RuleContextBuilder {
|
|
56
|
+
private projectRoot;
|
|
57
|
+
private config;
|
|
58
|
+
private previousResults;
|
|
59
|
+
private project;
|
|
60
|
+
constructor();
|
|
61
|
+
/**
|
|
62
|
+
* Set project root
|
|
63
|
+
*/
|
|
64
|
+
withProjectRoot(projectRoot: string): this;
|
|
65
|
+
/**
|
|
66
|
+
* Set configuration
|
|
67
|
+
*/
|
|
68
|
+
withConfig(config: Partial<RuleConfig>): this;
|
|
69
|
+
/**
|
|
70
|
+
* Set previous results
|
|
71
|
+
*/
|
|
72
|
+
withPreviousResults(results: Map<string, RuleResult>): this;
|
|
73
|
+
/**
|
|
74
|
+
* Use existing ts-morph Project
|
|
75
|
+
*/
|
|
76
|
+
withProject(project: Project): this;
|
|
77
|
+
/**
|
|
78
|
+
* Enable taint analysis
|
|
79
|
+
*/
|
|
80
|
+
withTaintAnalysis(enabled?: boolean): this;
|
|
81
|
+
/**
|
|
82
|
+
* Enable DFG analysis
|
|
83
|
+
*/
|
|
84
|
+
withDFG(enabled?: boolean): this;
|
|
85
|
+
/**
|
|
86
|
+
* Build context for a file
|
|
87
|
+
*/
|
|
88
|
+
build(filePath: string): Promise<RuleContextImpl>;
|
|
89
|
+
/**
|
|
90
|
+
* Build context from source code string
|
|
91
|
+
*/
|
|
92
|
+
buildFromSource(filePath: string, sourceCode: string): RuleContextImpl;
|
|
93
|
+
}
|
|
94
|
+
/**
|
|
95
|
+
* Create a context builder
|
|
96
|
+
*/
|
|
97
|
+
export declare function createContextBuilder(): RuleContextBuilder;
|
|
98
|
+
export {};
|
|
99
|
+
//# sourceMappingURL=rule-context.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rule-context.d.ts","sourceRoot":"","sources":["../../../src/rules/engine/rule-context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAI/C,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACX,MAAM,aAAa,CAAC;AAErB;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7B,4BAA4B;IAC5B,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1C,gCAAgC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,cAAM,eAAgB,YAAW,WAAW;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEzC,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,QAAQ,CAAqB;gBAGnC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,EAClB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC;IAU1C;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKpC;;OAEG;IACH,WAAW,IAAI,WAAW,EAAE;IAI5B;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,QAAQ,CAAC,GAAG,IAAI;IAQzD;;OAEG;IACH,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC;CAO9C;AAED;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,eAAe,CAAsC;IAC7D,OAAO,CAAC,OAAO,CAAwB;;IAevC;;OAEG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAK1C;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI;IAK7C;;OAEG;IACH,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,IAAI;IAK3D;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAKnC;;OAEG;IACH,iBAAiB,CAAC,OAAO,GAAE,OAAc,GAAG,IAAI;IAKhD;;OAEG;IACH,OAAO,CAAC,OAAO,GAAE,OAAc,GAAG,IAAI;IAKtC;;OAEG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAgCvD;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,eAAe;CAyBvE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,kBAAkB,CAEzD"}
|
|
@@ -0,0 +1,175 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @fileoverview Rule Context Builder
|
|
3
|
+
* @module @nahisaho/musubix-security/rules/engine/rule-context
|
|
4
|
+
* @trace REQ-RULE-003
|
|
5
|
+
*/
|
|
6
|
+
import { Project } from 'ts-morph';
|
|
7
|
+
import * as fs from 'node:fs';
|
|
8
|
+
import * as path from 'node:path';
|
|
9
|
+
import * as crypto from 'node:crypto';
|
|
10
|
+
/**
|
|
11
|
+
* Internal context implementation
|
|
12
|
+
*/
|
|
13
|
+
class RuleContextImpl {
|
|
14
|
+
filePath;
|
|
15
|
+
sourceCode;
|
|
16
|
+
sourceFile;
|
|
17
|
+
projectRoot;
|
|
18
|
+
config;
|
|
19
|
+
previousResults;
|
|
20
|
+
currentRuleId = '';
|
|
21
|
+
findings = [];
|
|
22
|
+
constructor(filePath, sourceCode, sourceFile, projectRoot, config, previousResults) {
|
|
23
|
+
this.filePath = filePath;
|
|
24
|
+
this.sourceCode = sourceCode;
|
|
25
|
+
this.sourceFile = sourceFile;
|
|
26
|
+
this.projectRoot = projectRoot;
|
|
27
|
+
this.config = config;
|
|
28
|
+
this.previousResults = previousResults;
|
|
29
|
+
}
|
|
30
|
+
/**
|
|
31
|
+
* Set current rule ID (called by engine before rule execution)
|
|
32
|
+
*/
|
|
33
|
+
setCurrentRule(ruleId) {
|
|
34
|
+
this.currentRuleId = ruleId;
|
|
35
|
+
this.findings = [];
|
|
36
|
+
}
|
|
37
|
+
/**
|
|
38
|
+
* Get collected findings
|
|
39
|
+
*/
|
|
40
|
+
getFindings() {
|
|
41
|
+
return this.findings;
|
|
42
|
+
}
|
|
43
|
+
/**
|
|
44
|
+
* Report a finding
|
|
45
|
+
*/
|
|
46
|
+
report(finding) {
|
|
47
|
+
this.findings.push({
|
|
48
|
+
...finding,
|
|
49
|
+
id: crypto.randomUUID(),
|
|
50
|
+
ruleId: this.currentRuleId,
|
|
51
|
+
});
|
|
52
|
+
}
|
|
53
|
+
/**
|
|
54
|
+
* Get option value for current rule
|
|
55
|
+
*/
|
|
56
|
+
getOption(key, defaultValue) {
|
|
57
|
+
const ruleSettings = this.config.rules[this.currentRuleId];
|
|
58
|
+
if (ruleSettings?.options && key in ruleSettings.options) {
|
|
59
|
+
return ruleSettings.options[key];
|
|
60
|
+
}
|
|
61
|
+
return defaultValue;
|
|
62
|
+
}
|
|
63
|
+
}
|
|
64
|
+
/**
|
|
65
|
+
* Rule Context Builder
|
|
66
|
+
* Builds context for rule execution
|
|
67
|
+
*/
|
|
68
|
+
export class RuleContextBuilder {
|
|
69
|
+
projectRoot = process.cwd();
|
|
70
|
+
config;
|
|
71
|
+
previousResults = new Map();
|
|
72
|
+
project = null;
|
|
73
|
+
constructor() {
|
|
74
|
+
// Import DEFAULT_RULE_CONFIG dynamically to avoid circular dependency
|
|
75
|
+
this.config = {
|
|
76
|
+
profile: 'standard',
|
|
77
|
+
rules: {},
|
|
78
|
+
exclude: ['**/node_modules/**', '**/dist/**', '**/*.test.ts', '**/*.spec.ts'],
|
|
79
|
+
include: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx'],
|
|
80
|
+
severityThreshold: 'info',
|
|
81
|
+
enableTaintAnalysis: false,
|
|
82
|
+
enableDFG: false,
|
|
83
|
+
};
|
|
84
|
+
}
|
|
85
|
+
/**
|
|
86
|
+
* Set project root
|
|
87
|
+
*/
|
|
88
|
+
withProjectRoot(projectRoot) {
|
|
89
|
+
this.projectRoot = projectRoot;
|
|
90
|
+
return this;
|
|
91
|
+
}
|
|
92
|
+
/**
|
|
93
|
+
* Set configuration
|
|
94
|
+
*/
|
|
95
|
+
withConfig(config) {
|
|
96
|
+
this.config = { ...this.config, ...config };
|
|
97
|
+
return this;
|
|
98
|
+
}
|
|
99
|
+
/**
|
|
100
|
+
* Set previous results
|
|
101
|
+
*/
|
|
102
|
+
withPreviousResults(results) {
|
|
103
|
+
this.previousResults = results;
|
|
104
|
+
return this;
|
|
105
|
+
}
|
|
106
|
+
/**
|
|
107
|
+
* Use existing ts-morph Project
|
|
108
|
+
*/
|
|
109
|
+
withProject(project) {
|
|
110
|
+
this.project = project;
|
|
111
|
+
return this;
|
|
112
|
+
}
|
|
113
|
+
/**
|
|
114
|
+
* Enable taint analysis
|
|
115
|
+
*/
|
|
116
|
+
withTaintAnalysis(enabled = true) {
|
|
117
|
+
this.config.enableTaintAnalysis = enabled;
|
|
118
|
+
return this;
|
|
119
|
+
}
|
|
120
|
+
/**
|
|
121
|
+
* Enable DFG analysis
|
|
122
|
+
*/
|
|
123
|
+
withDFG(enabled = true) {
|
|
124
|
+
this.config.enableDFG = enabled;
|
|
125
|
+
return this;
|
|
126
|
+
}
|
|
127
|
+
/**
|
|
128
|
+
* Build context for a file
|
|
129
|
+
*/
|
|
130
|
+
async build(filePath) {
|
|
131
|
+
const absolutePath = path.isAbsolute(filePath)
|
|
132
|
+
? filePath
|
|
133
|
+
: path.resolve(this.projectRoot, filePath);
|
|
134
|
+
// Read source code
|
|
135
|
+
const sourceCode = await fs.promises.readFile(absolutePath, 'utf-8');
|
|
136
|
+
// Get or create Project
|
|
137
|
+
const project = this.project ?? new Project({
|
|
138
|
+
useInMemoryFileSystem: false,
|
|
139
|
+
skipFileDependencyResolution: true,
|
|
140
|
+
});
|
|
141
|
+
// Get or create SourceFile
|
|
142
|
+
let sourceFile = project.getSourceFile(absolutePath);
|
|
143
|
+
if (!sourceFile) {
|
|
144
|
+
sourceFile = project.createSourceFile(absolutePath, sourceCode, {
|
|
145
|
+
overwrite: true,
|
|
146
|
+
});
|
|
147
|
+
}
|
|
148
|
+
return new RuleContextImpl(absolutePath, sourceCode, sourceFile, this.projectRoot, this.config, this.previousResults);
|
|
149
|
+
}
|
|
150
|
+
/**
|
|
151
|
+
* Build context from source code string
|
|
152
|
+
*/
|
|
153
|
+
buildFromSource(filePath, sourceCode) {
|
|
154
|
+
const absolutePath = path.isAbsolute(filePath)
|
|
155
|
+
? filePath
|
|
156
|
+
: path.resolve(this.projectRoot, filePath);
|
|
157
|
+
// Get or create Project
|
|
158
|
+
const project = this.project ?? new Project({
|
|
159
|
+
useInMemoryFileSystem: true,
|
|
160
|
+
skipFileDependencyResolution: true,
|
|
161
|
+
});
|
|
162
|
+
// Create SourceFile
|
|
163
|
+
const sourceFile = project.createSourceFile(absolutePath, sourceCode, {
|
|
164
|
+
overwrite: true,
|
|
165
|
+
});
|
|
166
|
+
return new RuleContextImpl(absolutePath, sourceCode, sourceFile, this.projectRoot, this.config, this.previousResults);
|
|
167
|
+
}
|
|
168
|
+
}
|
|
169
|
+
/**
|
|
170
|
+
* Create a context builder
|
|
171
|
+
*/
|
|
172
|
+
export function createContextBuilder() {
|
|
173
|
+
return new RuleContextBuilder();
|
|
174
|
+
}
|
|
175
|
+
//# sourceMappingURL=rule-context.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rule-context.js","sourceRoot":"","sources":["../../../src/rules/engine/rule-context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAc,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAsBtC;;GAEG;AACH,MAAM,eAAe;IACnB,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,UAAU,CAAa;IACvB,WAAW,CAAS;IACpB,MAAM,CAAa;IACnB,eAAe,CAA0B;IAEjC,aAAa,GAAW,EAAE,CAAC;IAC3B,QAAQ,GAAkB,EAAE,CAAC;IAErC,YACE,QAAgB,EAChB,UAAkB,EAClB,UAAsB,EACtB,WAAmB,EACnB,MAAkB,EAClB,eAAwC;QAExC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAc;QAC3B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAA2C;QAChD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,GAAG,OAAO;YACV,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,MAAM,EAAE,IAAI,CAAC,aAAa;SAC3B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAI,GAAW,EAAE,YAAe;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,YAAY,EAAE,OAAO,IAAI,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YACzD,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAM,CAAC;QACxC,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACrB,WAAW,GAAW,OAAO,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,CAAa;IACnB,eAAe,GAA4B,IAAI,GAAG,EAAE,CAAC;IACrD,OAAO,GAAmB,IAAI,CAAC;IAEvC;QACE,sEAAsE;QACtE,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,CAAC,oBAAoB,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC;YAC7E,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;YACvD,iBAAiB,EAAE,MAAM;YACzB,mBAAmB,EAAE,KAAK;YAC1B,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,WAAmB;QACjC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,MAA2B;QACpC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,OAAgC;QAClD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,UAAmB,IAAI;QACvC,IAAI,CAAC,MAAM,CAAC,mBAAmB,GAAG,OAAO,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,UAAmB,IAAI;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC5C,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7C,mBAAmB;QACnB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAErE,wBAAwB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,OAAO,CAAC;YAC1C,qBAAqB,EAAE,KAAK;YAC5B,4BAA4B,EAAE,IAAI;SACnC,CAAC,CAAC;QAEH,2BAA2B;QAC3B,IAAI,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,YAAY,EAAE,UAAU,EAAE;gBAC9D,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,eAAe,CACxB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,eAAe,CACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAgB,EAAE,UAAkB;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC5C,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7C,wBAAwB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,OAAO,CAAC;YAC1C,qBAAqB,EAAE,IAAI;YAC3B,4BAA4B,EAAE,IAAI;SACnC,CAAC,CAAC;QAEH,oBAAoB;QACpB,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,YAAY,EAAE,UAAU,EAAE;YACpE,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,OAAO,IAAI,eAAe,CACxB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,eAAe,CACrB,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,kBAAkB,EAAE,CAAC;AAClC,CAAC"}
|
|
@@ -0,0 +1,132 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @fileoverview Security Rule Engine
|
|
3
|
+
* @module @nahisaho/musubix-security/rules/engine/rule-engine
|
|
4
|
+
* @trace REQ-RULE-001, REQ-RULE-002, REQ-RULE-004
|
|
5
|
+
*/
|
|
6
|
+
import type { RuleResult, RuleFinding, RuleConfig, RuleSeverity } from '../types.js';
|
|
7
|
+
import { RuleRegistry } from './rule-registry.js';
|
|
8
|
+
/**
|
|
9
|
+
* Rule engine options
|
|
10
|
+
*/
|
|
11
|
+
export interface RuleEngineOptions {
|
|
12
|
+
/** Rule registry to use */
|
|
13
|
+
registry?: RuleRegistry;
|
|
14
|
+
/** Project root directory */
|
|
15
|
+
projectRoot?: string;
|
|
16
|
+
/** Number of concurrent file processing */
|
|
17
|
+
concurrency?: number;
|
|
18
|
+
/** Progress callback */
|
|
19
|
+
onProgress?: (progress: RuleEngineProgress) => void;
|
|
20
|
+
/** File processed callback */
|
|
21
|
+
onFileProcessed?: (filePath: string, findings: RuleFinding[]) => void;
|
|
22
|
+
/** Abort signal */
|
|
23
|
+
signal?: AbortSignal;
|
|
24
|
+
}
|
|
25
|
+
/**
|
|
26
|
+
* Progress information
|
|
27
|
+
*/
|
|
28
|
+
export interface RuleEngineProgress {
|
|
29
|
+
phase: 'init' | 'scanning' | 'analyzing' | 'complete';
|
|
30
|
+
totalFiles: number;
|
|
31
|
+
processedFiles: number;
|
|
32
|
+
totalRules: number;
|
|
33
|
+
currentFile?: string;
|
|
34
|
+
currentRule?: string;
|
|
35
|
+
findingsCount: number;
|
|
36
|
+
}
|
|
37
|
+
/**
|
|
38
|
+
* Engine run result
|
|
39
|
+
*/
|
|
40
|
+
export interface RuleEngineResult {
|
|
41
|
+
/** All findings */
|
|
42
|
+
findings: RuleFinding[];
|
|
43
|
+
/** Results by rule */
|
|
44
|
+
resultsByRule: Map<string, RuleResult>;
|
|
45
|
+
/** Results by file */
|
|
46
|
+
resultsByFile: Map<string, RuleFinding[]>;
|
|
47
|
+
/** Files processed */
|
|
48
|
+
filesProcessed: number;
|
|
49
|
+
/** Total execution time in ms */
|
|
50
|
+
executionTimeMs: number;
|
|
51
|
+
/** Errors encountered */
|
|
52
|
+
errors: RuleEngineError[];
|
|
53
|
+
/** Summary statistics */
|
|
54
|
+
summary: RuleEngineSummary;
|
|
55
|
+
}
|
|
56
|
+
/**
|
|
57
|
+
* Engine error
|
|
58
|
+
*/
|
|
59
|
+
export interface RuleEngineError {
|
|
60
|
+
type: 'file' | 'rule' | 'system';
|
|
61
|
+
filePath?: string;
|
|
62
|
+
ruleId?: string;
|
|
63
|
+
message: string;
|
|
64
|
+
stack?: string;
|
|
65
|
+
}
|
|
66
|
+
/**
|
|
67
|
+
* Summary statistics
|
|
68
|
+
*/
|
|
69
|
+
export interface RuleEngineSummary {
|
|
70
|
+
totalFindings: number;
|
|
71
|
+
bySeverity: Record<RuleSeverity, number>;
|
|
72
|
+
byRule: Record<string, number>;
|
|
73
|
+
byCategory: Record<string, number>;
|
|
74
|
+
}
|
|
75
|
+
/**
|
|
76
|
+
* Security Rule Engine
|
|
77
|
+
* Main orchestrator for running security rules against source files
|
|
78
|
+
*/
|
|
79
|
+
export declare class RuleEngine {
|
|
80
|
+
private registry;
|
|
81
|
+
private projectRoot;
|
|
82
|
+
private concurrency;
|
|
83
|
+
private onProgress?;
|
|
84
|
+
private onFileProcessed?;
|
|
85
|
+
private signal?;
|
|
86
|
+
constructor(options?: RuleEngineOptions);
|
|
87
|
+
/**
|
|
88
|
+
* Run rules against files
|
|
89
|
+
*/
|
|
90
|
+
run(config: RuleConfig): Promise<RuleEngineResult>;
|
|
91
|
+
/**
|
|
92
|
+
* Run rules against a single file
|
|
93
|
+
*/
|
|
94
|
+
runOnFile(filePath: string, config: RuleConfig): Promise<RuleFinding[]>;
|
|
95
|
+
/**
|
|
96
|
+
* Run rules against source code string
|
|
97
|
+
*/
|
|
98
|
+
runOnSource(sourceCode: string, config: RuleConfig, fileName?: string): Promise<RuleFinding[]>;
|
|
99
|
+
/**
|
|
100
|
+
* Process a single file
|
|
101
|
+
*/
|
|
102
|
+
private processFile;
|
|
103
|
+
/**
|
|
104
|
+
* Get files to scan
|
|
105
|
+
*/
|
|
106
|
+
private getFilesToScan;
|
|
107
|
+
/**
|
|
108
|
+
* Walk directory recursively
|
|
109
|
+
*/
|
|
110
|
+
private walkDirectory;
|
|
111
|
+
/**
|
|
112
|
+
* Get rules to run based on config
|
|
113
|
+
*/
|
|
114
|
+
private getRulesToRun;
|
|
115
|
+
/**
|
|
116
|
+
* Get rules for a profile
|
|
117
|
+
*/
|
|
118
|
+
private getProfileRules;
|
|
119
|
+
/**
|
|
120
|
+
* Calculate summary statistics
|
|
121
|
+
*/
|
|
122
|
+
private calculateSummary;
|
|
123
|
+
/**
|
|
124
|
+
* Emit progress
|
|
125
|
+
*/
|
|
126
|
+
private emitProgress;
|
|
127
|
+
}
|
|
128
|
+
/**
|
|
129
|
+
* Create a rule engine
|
|
130
|
+
*/
|
|
131
|
+
export declare function createRuleEngine(options?: RuleEngineOptions): RuleEngine;
|
|
132
|
+
//# sourceMappingURL=rule-engine.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rule-engine.d.ts","sourceRoot":"","sources":["../../../src/rules/engine/rule-engine.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAEV,UAAU,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACb,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAC;AAGrE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACpD,8BAA8B;IAC9B,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC;IACtE,mBAAmB;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,CAAC;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB;IACnB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,sBAAsB;IACtB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,sBAAsB;IACtB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1C,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,yBAAyB;IACzB,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED;;;GAGG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,UAAU,CAAC,CAAyC;IAC5D,OAAO,CAAC,eAAe,CAAC,CAAsD;IAC9E,OAAO,CAAC,MAAM,CAAC,CAAc;gBAEjB,OAAO,GAAE,iBAAsB;IAS3C;;OAEG;IACG,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2HxD;;OAEG;IACG,SAAS,CACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,WAAW,EAAE,CAAC;IAWzB;;OAEG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,UAAU,EAClB,QAAQ,GAAE,MAAuB,GAChC,OAAO,CAAC,WAAW,EAAE,CAAC;IA8BzB;;OAEG;YACW,WAAW;IAqEzB;;OAEG;YACW,cAAc;IA2B5B;;OAEG;YACW,aAAa;IAyB3B;;OAEG;IACH,OAAO,CAAC,aAAa;IA2BrB;;OAEG;IACH,OAAO,CAAC,eAAe;IAuBvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA2CxB;;OAEG;IACH,OAAO,CAAC,YAAY;CAGrB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,iBAAsB,GAAG,UAAU,CAE5E"}
|