@next-secure-check/core 0.1.0 → 0.2.0

package/dist/context-classifier.d.ts

@@ -0,0 +1,7 @@
+import type { FindingContext } from "./types.js";
+export type FileContextClassification = {
+    context: FindingContext;
+    contextReason: string;
+};
+export declare function classifyFileContext(filePath: string): FileContextClassification;
+//# sourceMappingURL=context-classifier.d.ts.map

package/dist/context-classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-classifier.d.ts","sourceRoot":"","sources":["../src/context-classifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,EAAE,cAAc,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,yBAAyB,CA8E/E"}

package/dist/context-classifier.js

@@ -0,0 +1,120 @@
+export function classifyFileContext(filePath) {
+    const normalizedPath = normalizeContextPath(filePath);
+    const basename = normalizedPath.split("/").at(-1) ?? normalizedPath;
+    if (matchesTestCode(normalizedPath, basename)) {
+        return {
+            context: "test-code",
+            contextReason: "matched test/spec file path"
+        };
+    }
+    if (matchesExampleCode(normalizedPath)) {
+        return {
+            context: "example-code",
+            contextReason: "matched example/demo path"
+        };
+    }
+    if (matchesDocsCode(normalizedPath, basename)) {
+        return {
+            context: "docs-code",
+            contextReason: "matched docs or markdown path"
+        };
+    }
+    if (normalizedPath.startsWith(".github/workflows/")) {
+        return {
+            context: "github-actions",
+            contextReason: "matched GitHub Actions workflow path"
+        };
+    }
+    if (matchesReleaseTooling(normalizedPath, basename)) {
+        return {
+            context: "release-tooling",
+            contextReason: "matched release/tooling path"
+        };
+    }
+    if (matchesCliTooling(normalizedPath)) {
+        return {
+            context: "cli-tooling",
+            contextReason: "matched CLI tooling path"
+        };
+    }
+    if (matchesGeneratedCode(normalizedPath)) {
+        return {
+            context: "generated-code",
+            contextReason: "matched generated/build output path"
+        };
+    }
+    if (matchesTemplateCode(normalizedPath)) {
+        return {
+            context: "template-code",
+            contextReason: "matched template/fixture path"
+        };
+    }
+    if (matchesApiCode(normalizedPath)) {
+        return {
+            context: "api-code",
+            contextReason: "matched Next.js API route path"
+        };
+    }
+    if (matchesAppCode(normalizedPath)) {
+        return {
+            context: "app-code",
+            contextReason: "matched Next.js app/page runtime path"
+        };
+    }
+    return {
+        context: "unknown",
+        contextReason: "no known file context pattern matched"
+    };
+}
+function normalizeContextPath(filePath) {
+    return filePath.replace(/\\/g, "/").replace(/^\.\//, "");
+}
+function matchesApiCode(filePath) {
+    return (filePath.startsWith("app/api/") ||
+        filePath.startsWith("src/app/api/") ||
+        filePath.startsWith("pages/api/") ||
+        /^apps\/[^/]+\/app\/api\//.test(filePath) ||
+        /^apps\/[^/]+\/src\/app\/api\//.test(filePath) ||
+        /^apps\/[^/]+\/pages\/api\//.test(filePath));
+}
+function matchesAppCode(filePath) {
+    return (filePath.startsWith("app/") ||
+        filePath.startsWith("pages/") ||
+        filePath.startsWith("src/app/") ||
+        filePath.startsWith("src/pages/") ||
+        /^apps\/[^/]+\/app\//.test(filePath) ||
+        /^apps\/[^/]+\/src\/app\//.test(filePath) ||
+        /^apps\/[^/]+\/pages\//.test(filePath) ||
+        /^packages\/[^/]+\/app\//.test(filePath) ||
+        /^packages\/[^/]+\/src\/app\//.test(filePath));
+}
+function matchesTestCode(filePath, basename) {
+    return (filePath.startsWith("__tests__/") ||
+        filePath.includes("/__tests__/") ||
+        /\.(test|spec)\.(ts|tsx|js|jsx)$/.test(basename));
+}
+function matchesExampleCode(filePath) {
+    return (filePath.startsWith("examples/") ||
+        /^apps\/[^/]+\/examples\//.test(filePath) ||
+        /^apps\/[^/]+\/app\/examples\//.test(filePath));
+}
+function matchesDocsCode(filePath, basename) {
+    return filePath.startsWith("docs/") || /\.mdx?$/.test(basename);
+}
+function matchesReleaseTooling(filePath, basename) {
+    return (/^\.github\/[^/]+\.(js|ts)$/.test(filePath) ||
+        filePath.startsWith("scripts/release/") ||
+        /^changeset/i.test(basename));
+}
+function matchesCliTooling(filePath) {
+    return (filePath.startsWith("cli/") ||
+        filePath.startsWith("src/cli/") ||
+        filePath.startsWith("packages/cli/"));
+}
+function matchesGeneratedCode(filePath) {
+    return filePath.startsWith("dist/") || filePath.startsWith(".next/") || filePath.startsWith("generated/");
+}
+function matchesTemplateCode(filePath) {
+    return filePath.startsWith("templates/") || filePath.startsWith("fixtures/");
+}
+//# sourceMappingURL=context-classifier.js.map

package/dist/context-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-classifier.js","sourceRoot":"","sources":["../src/context-classifier.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC;IAEpE,IAAI,eAAe,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,aAAa,EAAE,6BAA6B;SAC7C,CAAC;IACJ,CAAC;IAED,IAAI,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,OAAO,EAAE,cAAc;YACvB,aAAa,EAAE,2BAA2B;SAC3C,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,aAAa,EAAE,+BAA+B;SAC/C,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,gBAAgB;YACzB,aAAa,EAAE,sCAAsC;SACtD,CAAC;IACJ,CAAC;IAED,IAAI,qBAAqB,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,8BAA8B;SAC9C,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,CAAC,cAAc,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,0BAA0B;SAC1C,CAAC;IACJ,CAAC;IAED,IAAI,oBAAoB,CAAC,cAAc,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,gBAAgB;YACzB,aAAa,EAAE,qCAAqC;SACrD,CAAC;IACJ,CAAC;IAED,IAAI,mBAAmB,CAAC,cAAc,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,OAAO,EAAE,eAAe;YACxB,aAAa,EAAE,+BAA+B;SAC/C,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,aAAa,EAAE,gCAAgC;SAChD,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,aAAa,EAAE,uCAAuC;SACvD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,aAAa,EAAE,uCAAuC;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,CACL,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAC/B,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC;QACnC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;QACjC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC;QACzC,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9C,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,CACL,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3B,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC7B,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAC/B,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;QACjC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACpC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC;QACzC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACtC,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACxC,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,QAAgB;IACzD,OAAO,CACL,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;QACjC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;QAChC,iCAAiC,CAAC,IAAI,CAAC,QAAQ,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,CACL,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;QAChC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC;QACzC,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,QAAgB;IACzD,OAAO,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,QAAgB;IAC/D,OAAO,CACL,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3C,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC;QACvC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,CACL,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3B,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAC/B,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,OAAO,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC"}

package/dist/context-tuning.d.ts

@@ -0,0 +1,3 @@
+import type { Finding } from "./types.js";
+export declare function applyContextTuning(finding: Finding): Finding;
+//# sourceMappingURL=context-tuning.d.ts.map

package/dist/context-tuning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-tuning.d.ts","sourceRoot":"","sources":["../src/context-tuning.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,OAAO,EAA4B,MAAM,YAAY,CAAC;AAQhF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAuB5D"}

package/dist/context-tuning.js

@@ -0,0 +1,261 @@
+export function applyContextTuning(finding) {
+    const adjustment = getContextAdjustment(finding);
+    if (!adjustment) {
+        return finding;
+    }
+    const tunedSeverity = adjustment.severity ?? finding.severity;
+    const tunedConfidence = adjustment.confidence ?? finding.confidence;
+    const severityChanged = tunedSeverity !== finding.severity;
+    const confidenceChanged = tunedConfidence !== finding.confidence;
+    if (!severityChanged && !confidenceChanged) {
+        return finding;
+    }
+    return {
+        ...finding,
+        severity: tunedSeverity,
+        confidence: tunedConfidence,
+        originalSeverity: severityChanged ? finding.severity : finding.originalSeverity,
+        originalConfidence: confidenceChanged ? finding.confidence : finding.originalConfidence,
+        contextAdjustmentReason: adjustment.reason
+    };
+}
+function getContextAdjustment(finding) {
+    switch (finding.ruleId) {
+        case "injection/command-exec":
+            return commandExecAdjustment(finding.context);
+        case "injection/raw-sql-concat":
+            return rawSqlAdjustment(finding);
+        case "auth/admin-route-without-auth":
+            return adminRouteAdjustment(finding);
+        case "auth/password-without-hashing-library":
+            return passwordAdjustment(finding);
+        case "upload/missing-file-type-validation":
+        case "upload/missing-file-size-limit":
+            return uploadAdjustment(finding);
+        case "xss/dangerously-set-inner-html":
+            return dangerouslySetHtmlAdjustment(finding);
+        case "config/next-powered-by-header":
+            return nextPoweredByHeaderAdjustment(finding.context);
+        case "validation/api-route-without-validation":
+            return validationAdjustment(finding.context);
+        case "auth/login-without-rate-limit":
+        case "auth/register-without-rate-limit":
+            return authRateLimitAdjustment(finding.context);
+        default:
+            return undefined;
+    }
+}
+function commandExecAdjustment(context) {
+    switch (context) {
+        case "release-tooling":
+            return {
+                severity: "LOW",
+                confidence: "LOW",
+                reason: "lowered command execution finding in release/tooling context"
+            };
+        case "cli-tooling":
+            return {
+                severity: "MEDIUM",
+                confidence: "MEDIUM",
+                reason: "lowered command execution finding in CLI tooling context"
+            };
+        case "example-code":
+        case "template-code":
+            return {
+                severity: "MEDIUM",
+                confidence: "LOW",
+                reason: "lowered command execution finding in example/template context"
+            };
+        default:
+            return undefined;
+    }
+}
+function rawSqlAdjustment(finding) {
+    switch (finding.context) {
+        case "app-code":
+            if (isUiOrComponentPath(finding.filePath)) {
+                return {
+                    severity: "MEDIUM",
+                    confidence: "LOW",
+                    reason: "lowered raw SQL finding in app component/UI context"
+                };
+            }
+            return undefined;
+        case "docs-code":
+        case "example-code":
+        case "template-code":
+            return {
+                severity: "MEDIUM",
+                confidence: "LOW",
+                reason: "lowered raw SQL finding in docs/example/template context"
+            };
+        default:
+            return undefined;
+    }
+}
+function passwordAdjustment(finding) {
+    switch (finding.context) {
+        case "app-code":
+            if (isUiOrComponentPath(finding.filePath)) {
+                return {
+                    severity: "MEDIUM",
+                    confidence: "LOW",
+                    reason: "lowered password-handling finding in app component/UI context"
+                };
+            }
+            return undefined;
+        case "docs-code":
+        case "example-code":
+        case "template-code":
+            return {
+                severity: "LOW",
+                confidence: "LOW",
+                reason: "lowered password-handling finding in docs/example/template context"
+            };
+        default:
+            return undefined;
+    }
+}
+function uploadAdjustment(finding) {
+    switch (finding.context) {
+        case "app-code":
+            if (isUiOrComponentPath(finding.filePath)) {
+                return {
+                    severity: "MEDIUM",
+                    confidence: "LOW",
+                    reason: "lowered upload validation finding in app component/UI context"
+                };
+            }
+            return undefined;
+        case "docs-code":
+        case "example-code":
+        case "template-code":
+            return {
+                severity: "LOW",
+                confidence: "LOW",
+                reason: "lowered upload validation finding in docs/example/template context"
+            };
+        default:
+            return undefined;
+    }
+}
+function dangerouslySetHtmlAdjustment(finding) {
+    switch (finding.context) {
+        case "docs-code":
+        case "example-code":
+        case "template-code":
+            return {
+                severity: "MEDIUM",
+                confidence: "LOW",
+                reason: "lowered dangerouslySetInnerHTML finding in docs/example/template context"
+            };
+        case "app-code":
+            if (isDemoStoryOrFixturePath(finding.filePath)) {
+                return {
+                    confidence: "LOW",
+                    reason: "lowered dangerouslySetInnerHTML confidence in demo/story/fixture app context"
+                };
+            }
+            if (isUiOrComponentPath(finding.filePath) && !hasExplicitUserControlledHtmlSignal(finding.evidence)) {
+                return {
+                    confidence: "LOW",
+                    reason: "lowered dangerouslySetInnerHTML confidence in app component/UI context"
+                };
+            }
+            return undefined;
+        default:
+            return undefined;
+    }
+}
+function nextPoweredByHeaderAdjustment(context) {
+    switch (context) {
+        case "docs-code":
+        case "example-code":
+        case "template-code":
+            return {
+                severity: "LOW",
+                confidence: "LOW",
+                reason: "lowered powered-by header finding in docs/example/template context"
+            };
+        default:
+            return undefined;
+    }
+}
+function adminRouteAdjustment(finding) {
+    switch (finding.context) {
+        case "app-code":
+            if (isApiRoutePath(finding.filePath)) {
+                return undefined;
+            }
+            return {
+                severity: "MEDIUM",
+                confidence: "LOW",
+                reason: "lowered admin route finding in non-API app component context"
+            };
+        case "docs-code":
+        case "example-code":
+        case "template-code":
+            return {
+                severity: "LOW",
+                confidence: "LOW",
+                reason: "lowered admin route finding in docs/example/template context"
+            };
+        default:
+            return undefined;
+    }
+}
+function isApiRoutePath(filePath) {
+    const normalizedPath = normalizePath(filePath);
+    return (normalizedPath.startsWith("app/api/") ||
+        normalizedPath.startsWith("src/app/api/") ||
+        normalizedPath.startsWith("pages/api/") ||
+        /^apps\/[^/]+\/app\/api\//.test(normalizedPath) ||
+        /^apps\/[^/]+\/src\/app\/api\//.test(normalizedPath) ||
+        /^apps\/[^/]+\/pages\/api\//.test(normalizedPath));
+}
+function isUiOrComponentPath(filePath) {
+    const normalizedPath = normalizePath(filePath);
+    return (!isApiRoutePath(normalizedPath) &&
+        (normalizedPath.includes("/components/") ||
+            normalizedPath.includes("/component/") ||
+            normalizedPath.includes("/ui/") ||
+            normalizedPath.endsWith(".tsx") ||
+            normalizedPath.endsWith(".jsx")));
+}
+function isDemoStoryOrFixturePath(filePath) {
+    const normalizedPath = normalizePath(filePath);
+    return /(^|\/)(demo|demos|storybook|stories|fixtures|examples)(\/|\.|$)/i.test(normalizedPath) || /\.stories\.(tsx|jsx|ts|js)$/.test(normalizedPath);
+}
+function hasExplicitUserControlledHtmlSignal(evidence) {
+    return /\b(userInput|searchParams|params|body|request|req|query)\b/i.test(evidence ?? "");
+}
+function normalizePath(filePath) {
+    return filePath.replace(/\\/g, "/").replace(/^\.\//, "");
+}
+function validationAdjustment(context) {
+    switch (context) {
+        case "example-code":
+        case "template-code":
+            return {
+                severity: "LOW",
+                confidence: "LOW",
+                reason: "lowered API validation finding in example/template context"
+            };
+        default:
+            return undefined;
+    }
+}
+function authRateLimitAdjustment(context) {
+    switch (context) {
+        case "example-code":
+        case "template-code":
+            return {
+                severity: "LOW",
+                confidence: "LOW",
+                reason: "lowered auth rate-limit finding in example/template context"
+            };
+        default:
+            return undefined;
+    }
+}
+//# sourceMappingURL=context-tuning.js.map

package/dist/context-tuning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-tuning.js","sourceRoot":"","sources":["../src/context-tuning.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAC9D,MAAM,eAAe,GAAG,UAAU,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;IACpE,MAAM,eAAe,GAAG,aAAa,KAAK,OAAO,CAAC,QAAQ,CAAC;IAC3D,MAAM,iBAAiB,GAAG,eAAe,KAAK,OAAO,CAAC,UAAU,CAAC;IAEjE,IAAI,CAAC,eAAe,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QACV,QAAQ,EAAE,aAAa;QACvB,UAAU,EAAE,eAAe;QAC3B,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC/E,kBAAkB,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB;QACvF,uBAAuB,EAAE,UAAU,CAAC,MAAM;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB;IAC5C,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,wBAAwB;YAC3B,OAAO,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,0BAA0B;YAC7B,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,KAAK,+BAA+B;YAClC,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACvC,KAAK,uCAAuC;YAC1C,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACrC,KAAK,qCAAqC,CAAC;QAC3C,KAAK,gCAAgC;YACnC,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,KAAK,gCAAgC;YACnC,OAAO,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAC/C,KAAK,+BAA+B;YAClC,OAAO,6BAA6B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,KAAK,yCAAyC;YAC5C,OAAO,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,KAAK,+BAA+B,CAAC;QACrC,KAAK,kCAAkC;YACrC,OAAO,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAmC;IAChE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,iBAAiB;YACpB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,8DAA8D;aACvE,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,QAAQ;gBACpB,MAAM,EAAE,0DAA0D;aACnE,CAAC;QACJ,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,+DAA+D;aACxE,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgB;IACxC,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,UAAU;YACb,IAAI,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,OAAO;oBACL,QAAQ,EAAE,QAAQ;oBAClB,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,qDAAqD;iBAC9D,CAAC;YACJ,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,0DAA0D;aACnE,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,UAAU;YACb,IAAI,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,OAAO;oBACL,QAAQ,EAAE,QAAQ;oBAClB,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,+DAA+D;iBACxE,CAAC;YACJ,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,oEAAoE;aAC7E,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgB;IACxC,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,UAAU;YACb,IAAI,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,OAAO;oBACL,QAAQ,EAAE,QAAQ;oBAClB,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,+DAA+D;iBACxE,CAAC;YACJ,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,oEAAoE;aAC7E,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAgB;IACpD,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,0EAA0E;aACnF,CAAC;QACJ,KAAK,UAAU;YACb,IAAI,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/C,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,8EAA8E;iBACvF,CAAC;YACJ,CAAC;YAED,IAAI,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpG,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,wEAAwE;iBACjF,CAAC;YACJ,CAAC;YAED,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAmC;IACxE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,oEAAoE;aAC7E,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB;IAC5C,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,UAAU;YACb,IAAI,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,8DAA8D;aACvE,CAAC;QACJ,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,8DAA8D;aACvE,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,CACL,cAAc,CAAC,UAAU,CAAC,UAAU,CAAC;QACrC,cAAc,CAAC,UAAU,CAAC,cAAc,CAAC;QACzC,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC;QACvC,0BAA0B,CAAC,IAAI,CAAC,cAAc,CAAC;QAC/C,+BAA+B,CAAC,IAAI,CAAC,cAAc,CAAC;QACpD,4BAA4B,CAAC,IAAI,CAAC,cAAc,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,CACL,CAAC,cAAc,CAAC,cAAc,CAAC;QAC/B,CAAC,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC;YACtC,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC;YACtC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC/B,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC/B,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB;IAChD,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,kEAAkE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACvJ,CAAC;AAED,SAAS,mCAAmC,CAAC,QAA4B;IACvE,OAAO,6DAA6D,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAmC;IAC/D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,4DAA4D;aACrE,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAmC;IAClE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,6DAA6D;aACtE,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,7 @@
-export type { Confidence, Finding, ProjectInfo, RiskLevel, Rule, ScanContext, ScanOptions, ScanResult, ScanSummary, Severity, SourceFile } from "./types.js";
+export type { Confidence, Finding, FindingContext, ProjectInfo, RiskLevel, Rule, ScanContext, ScanOptions, ScanResult, ScanSummary, Severity, SourceFile } from "./types.js";
+export { classifyFileContext } from "./context-classifier.js";
+export type { FileContextClassification } from "./context-classifier.js";
+export { applyContextTuning } from "./context-tuning.js";
 export { collectFiles, normalizePath } from "./file-collector.js";
 export { detectProject } from "./project-detector.js";
 export { riskLevelForScore, summarizeFindings } from "./score.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,UAAU,EACV,OAAO,EACP,WAAW,EACX,SAAS,EACT,IAAI,EACJ,WAAW,EACX,WAAW,EACX,UAAU,EACV,WAAW,EACX,QAAQ,EACR,UAAU,EACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE/D,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,SAAU,GAAG,OAAO,YAAY,EAAE,UAAU,CA0BnH"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,UAAU,EACV,OAAO,EACP,cAAc,EACd,WAAW,EACX,SAAS,EACT,IAAI,EACJ,WAAW,EACX,WAAW,EACX,UAAU,EACV,WAAW,EACX,QAAQ,EACR,UAAU,EACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE/D,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,SAAU,GAAG,OAAO,YAAY,EAAE,UAAU,CA0BnH"}

package/dist/index.js

@@ -1,3 +1,5 @@
+export { classifyFileContext } from "./context-classifier.js";
+export { applyContextTuning } from "./context-tuning.js";
 export { collectFiles, normalizePath } from "./file-collector.js";
 export { detectProject } from "./project-detector.js";
 export { riskLevelForScore, summarizeFindings } from "./score.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE/D,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,WAAW,GAAG,OAAO;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,SAAS;SACpB;QACD,OAAO,EAAE;YACP,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;SACR;QACD,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE;YACR,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,WAAW;SACZ;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE/D,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,WAAW,GAAG,OAAO;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,SAAS;SACpB;QACD,OAAO,EAAE;YACP,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;SACR;QACD,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE;YACR,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,WAAW;SACZ;KACF,CAAC;AACJ,CAAC"}

package/dist/scanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAA8B,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtF,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CA4BpG;AAED,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAU5E"}
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAA8B,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtF,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAiCpG;AAED,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAU5E"}

package/dist/scanner.js

@@ -1,5 +1,7 @@
 import { access, stat } from "node:fs/promises";
 import path from "node:path";
+import { classifyFileContext } from "./context-classifier.js";
+import { applyContextTuning } from "./context-tuning.js";
 import { collectFiles } from "./file-collector.js";
 import { detectProject } from "./project-detector.js";
 import { summarizeFindings } from "./score.js";
@@ -19,7 +21,7 @@ export async function scanProject(targetPath, options = {}) {
         project: detection.project,
         packageJson: detection.packageJson
     };
-    const findings = sortFindings(await runRules(rules, context));
+    const findings = sortFindings(applyContextTuningToFindings(enrichFindingsWithContext(await runRules(rules, context)), options.contextTuning ?? "standard"));
     return {
         project: detection.project,
         summary: summarizeFindings(findings),
@@ -47,6 +49,22 @@ async function runRules(rules, context) {
     }
     return findings;
 }
+function enrichFindingsWithContext(findings) {
+    return findings.map((finding) => {
+        const classification = classifyFileContext(finding.filePath);
+        return {
+            ...finding,
+            context: classification.context,
+            contextReason: classification.contextReason
+        };
+    });
+}
+function applyContextTuningToFindings(findings, contextTuning) {
+    if (contextTuning === "off") {
+        return findings;
+    }
+    return findings.map((finding) => applyContextTuning(finding));
+}
 function normalizeCategories(categories) {
     return new Set((categories ?? []).map((category) => category.trim()).filter(Boolean));
 }

package/dist/scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAAkB,EAAE,UAAuB,EAAE;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE;QACzC,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAgB;QAC3B,UAAU;QACV,QAAQ;QACR,KAAK;QACL,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;KACnC,CAAC;IACF,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAE9D,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QACpC,QAAQ;QACR,QAAQ,EAAE;YACR,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO;SAC5C;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEtC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAa,EAAE,OAAoB;IACzD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAqB;IAChD,OAAO,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,YAAY,CAAC,QAAmB;IACvC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAAkB,EAAE,UAAuB,EAAE;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE;QACzC,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAgB;QAC3B,UAAU;QACV,QAAQ;QACR,KAAK;QACL,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;KACnC,CAAC;IACF,MAAM,QAAQ,GAAG,YAAY,CAC3B,4BAA4B,CAC1B,yBAAyB,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,EACzD,OAAO,CAAC,aAAa,IAAI,UAAU,CACpC,CACF,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QACpC,QAAQ;QACR,QAAQ,EAAE;YACR,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO;SAC5C;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEtC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAa,EAAE,OAAoB;IACzD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAmB;IACpD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE7D,OAAO;YACL,GAAG,OAAO;YACV,OAAO,EAAE,cAAc,CAAC,OAAO;YAC/B,aAAa,EAAE,cAAc,CAAC,aAAa;SAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAmB,EAAE,aAAwD;IACjH,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAqB;IAChD,OAAO,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,YAAY,CAAC,QAAmB;IACvC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/types.d.ts

@@ -1,6 +1,7 @@
 export type Severity = "HIGH" | "MEDIUM" | "LOW" | "INFO";
 export type Confidence = "HIGH" | "MEDIUM" | "LOW";
 export type RiskLevel = "excellent" | "good" | "medium" | "high" | "critical";
+export type FindingContext = "app-code" | "api-code" | "test-code" | "example-code" | "docs-code" | "github-actions" | "release-tooling" | "cli-tooling" | "generated-code" | "template-code" | "unknown";
 export type ProjectInfo = {
     name?: string;
     framework: "nextjs" | "react" | "node" | "unknown";
@@ -13,8 +14,13 @@ export type Finding = {
     title: string;
     severity: Severity;
     confidence: Confidence;
+    originalSeverity?: Severity;
+    originalConfidence?: Confidence;
+    contextAdjustmentReason?: string;
     category: string;
     filePath: string;
+    context?: FindingContext;
+    contextReason?: string;
     line?: number;
     column?: number;
     evidence?: string;
@@ -68,6 +74,7 @@ export type Rule = {
 };
 export type ScanOptions = {
     categories?: string[];
+    contextTuning?: "standard" | "off";
     excludePaths?: string[];
     rules?: Rule[];
     toolVersion?: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE1D,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEnD,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9E,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,MAAM,CAAC,EAAE,KAAK,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IAC/C,QAAQ,EAAE,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,SAAS,CAAC;CAC7D,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,CAAC,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACzC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,IAAI,GAAG;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC;CAC5D,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE1D,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEnD,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9E,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,UAAU,GACV,WAAW,GACX,cAAc,GACd,WAAW,GACX,gBAAgB,GAChB,iBAAiB,GACjB,aAAa,GACb,gBAAgB,GAChB,eAAe,GACf,SAAS,CAAC;AAEd,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,MAAM,CAAC,EAAE,KAAK,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IAC/C,QAAQ,EAAE,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,SAAS,CAAC;CAC7D,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,gBAAgB,CAAC,EAAE,QAAQ,CAAC;IAC5B,kBAAkB,CAAC,EAAE,UAAU,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,CAAC,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACzC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,IAAI,GAAG;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC;CAC5D,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@next-secure-check/core",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Core scanning engine for next-secure-check",
   "keywords": [
     "nextjs",