@node9/proxy 2.33.2 → 2.34.0

package/dist/dashboard.mjs

@@ -968,6 +968,95 @@ function expandPlainParam(p) {
   if (recorded !== void 0) return recorded;
   return HOME_VARIABLES.has(p.Param?.Value) ? "~" : void 0;
 }
+function functionBodies(f) {
+  const out = /* @__PURE__ */ new Map();
+  syntax.Walk(f, (node) => {
+    const n = node;
+    if (n && syntax.NodeType(n) === "FuncDecl" && n.Name?.Value && n.Body) {
+      const list = out.get(n.Name.Value) ?? [];
+      list.push(n.Body);
+      out.set(n.Name.Value, list);
+    }
+    return true;
+  });
+  return out;
+}
+function rebindsPositionals(body) {
+  let found = false;
+  syntax.Walk(body, (node) => {
+    const n = node;
+    if (found || !n) return false;
+    if (syntax.NodeType(n) === "CallExpr") {
+      const words = (n.Args || []).map((a) => resolveWordLiteral(a));
+      if (words[0] === "shift") found = true;
+      else if (words[0] === "set" && words.slice(1).some((w) => w === null || w === "--" || !/^[-+]/.test(w)))
+        found = true;
+    }
+    return !found;
+  });
+  return found;
+}
+function tableBindings() {
+  if (!assignmentTable) return "";
+  const out = [];
+  for (const [name, rec] of assignmentTable)
+    if (rec.at < currentStmtOffset) out.push(`${name}=${rec.value ?? "\0"}`);
+  return out.sort().join("
");
+}
+function walkWithCalls(f, visit) {
+  const bodies = functionBodies(f);
+  if (bodies.size === 0) {
+    syntax.Walk(f, visit);
+    return;
+  }
+  const seenCalls = /* @__PURE__ */ new Set();
+  const inline = (call) => {
+    const words = (call.Args || []).map((a) => resolveWordLiteral(a));
+    const list = words[0] ? bodies.get(words[0]) : void 0;
+    if (!list || callDepth >= MAX_CALL_DEPTH) return;
+    const args = words.slice(1);
+    const key = `${words[0]}\0${JSON.stringify(args)}\0${tableBindings()}`;
+    if (seenCalls.has(key)) return;
+    seenCalls.add(key);
+    const outerTable = assignmentTable;
+    const outerOffset = currentStmtOffset;
+    for (const body of list) {
+      if (callWalks >= MAX_CALL_WALKS) return;
+      callWalks++;
+      const table = /* @__PURE__ */ new Map();
+      for (const [name, rec] of outerTable ?? [])
+        if (rec.at < outerOffset) table.set(name, { value: rec.value, at: -1 });
+      for (const name of ["1", "2", "3", "4", "5", "6", "7", "8", "9", "@", "*", "#"])
+        table.delete(name);
+      if (!rebindsPositionals(body)) {
+        args.slice(0, 9).forEach((value, i) => table.set(String(i + 1), { value, at: -1 }));
+        if (args.length === 1) {
+          table.set("@", { value: args[0], at: -1 });
+          table.set("*", { value: args[0], at: -1 });
+        }
+        table.set("#", { value: String(args.length), at: -1 });
+      }
+      assignmentTable = table;
+      currentStmtOffset = Number.MAX_SAFE_INTEGER;
+      callDepth++;
+      try {
+        if (body.Cmd && syntax.NodeType(body.Cmd) === "Block") recordTopLevelAssignments(body.Cmd);
+        syntax.Walk(body, step);
+      } finally {
+        callDepth--;
+        assignmentTable = outerTable;
+        currentStmtOffset = outerOffset;
+      }
+    }
+  };
+  const step = (node) => {
+    if (!node) return false;
+    const go = visit(node);
+    if (go !== false && syntax.NodeType(node) === "CallExpr") inline(node);
+    return go;
+  };
+  syntax.Walk(f, step);
+}
 function resolveWordLiteral(w) {
   const parts = w?.Parts || [];
   let s = "";
@@ -1042,6 +1131,7 @@ function analyzeFsOperationImpl(command, depth = 0) {
   if (depth === 0) {
     seenPayloads = /* @__PURE__ */ new Set();
     payloadBudget = PAYLOAD_BUDGET;
+    if (callDepth === 0) callWalks = 0;
   }
   assignmentTable = new Map(
     [...outerTable ?? []].map(([k, r]) => [k, { value: r.value, at: -1 }])
@@ -1049,7 +1139,7 @@ function analyzeFsOperationImpl(command, depth = 0) {
   currentStmtOffset = Number.MAX_SAFE_INTEGER;
   try {
     recordTopLevelAssignments(f);
-    syntax.Walk(f, (node) => {
+    walkWithCalls(f, (node) => {
       if (!node || result?.verdict === "block") return false;
       const n = node;
       const nodeType = syntax.NodeType(n);
@@ -1924,16 +2014,21 @@ function looksGenerated(value, minLength, minEntropy, lettersOnlyAllowed = false
   if (EMAIL_VALUE_RE.test(value)) return false;
   if (looksLikeJoinedWords(value) || hasSequentialRun(value)) return false;
   if (PATH_VALUE_RE.test(value) || DOTTED_REFERENCE_RE.test(value)) return false;
+  if (CONCATENATION_RE.test(value)) return false;
   if (rejectedByStructuredValidator(value)) return false;
   return shannonEntropy(value) >= minEntropy;
 }
 function nameHoldsCredential(name) {
   return !FIXTURE_NAME_RE.test(name) && !DERIVATIVE_NAME_RE.test(name);
 }
+function isOtpDocSecret(value) {
+  return OTP_DOC_SECRETS.has(value.replace(/=+$/, "").toUpperCase());
+}
 function validateQueryCredential(raw) {
   const value = capturedValue(raw, QUERY_CREDENTIAL_VALUE_RE);
   if (value === null) return false;
-  if (OTP_SECRET_RE.test(value)) return looksGenerated(value, 16, 3, true);
+  if (OTP_SECRET_RE.test(value))
+    return !isOtpDocSecret(value) && looksGenerated(value, 16, 3, true);
   if (!/[0-9]/.test(value) || !/[A-Za-z]/.test(value)) return false;
   return looksGenerated(value, 12, 3);
 }
@@ -1947,13 +2042,40 @@ function keywordEndsAPart(name) {
 }
 function validateAssignedSecret(raw, before = "") {
   const value = capturedValue(raw, ASSIGNED_SECRET_VALUE_RE);
-  const name = capturedValue(raw, ASSIGNED_SECRET_NAME_RE);
+  const name = capturedValue(raw, ASSIGNED_SECRET_NAME_RE)?.replace(/^_+/, "") ?? null;
   if (value === null || name === null) return false;
-  if (!keywordEndsAPart(name) || ARN_CONTEXT_RE.test(before)) return false;
-  const prefix = before.match(/[A-Za-z0-9_]*$/)?.[0] ?? "";
+  if (!keywordEndsAPart(name)) return false;
+  if (ARN_CONTEXT_RE.test(before)) return false;
+  const prefix = (before.match(/[A-Za-z0-9_]*$/)?.[0] ?? "") + (raw.startsWith("_") ? "_" : "");
   if (!nameHoldsCredential(prefix + name)) return false;
   return looksGenerated(value, 12, 3.5);
 }
+function validateBasicCredential(raw) {
+  const b64 = capturedValue(raw, BASIC_VALUE_RE);
+  if (b64 === null) return false;
+  const bare = b64.replace(/=+$/, "");
+  if (bare.length % 4 === 1) return false;
+  const bytes = Buffer.from(b64, "base64");
+  if (bytes.toString("base64").replace(/=+$/, "") !== bare) return false;
+  const text = bytes.toString("utf8");
+  if (!Buffer.from(text, "utf8").equals(bytes)) return false;
+  for (let i = 0; i < text.length; i++) {
+    const c = text.charCodeAt(i);
+    if (c < 32 || c === 127) return false;
+  }
+  const pair = BASIC_PAIR_RE.exec(text);
+  if (!pair) return false;
+  const password = pair[2];
+  if (!/[0-9]/.test(password) || !/[A-Za-z]/.test(password)) return false;
+  const lower2 = password.toLowerCase();
+  if (DLP_STOPWORDS.some((sw) => lower2.includes(sw)) || hasSequentialRun(password)) return false;
+  return shannonEntropy(password) >= 3;
+}
+function validateOtpSecret(raw) {
+  const secret = capturedValue(raw, OTP_CAPTURE_RE);
+  if (secret === null || isOtpDocSecret(secret)) return false;
+  return looksGenerated(secret.replace(/=+$/, ""), 16, 3, true);
+}
 function assertBuiltinPatternsAreSafe() {
   for (const p of DLP_PATTERNS) {
     if (!safeRegex3(p.regex.source)) {
@@ -2429,7 +2551,7 @@ function matchCanaryArgs(args, values) {
     return null;
   }
 }
-var aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, BUILTIN_SHIELDS, SSRF_MAX_HOST, METADATA_ADDRESSES, METADATA_HOSTNAMES, v4Octets, CHECK_TEXT, VERDICTS, CHECK_VERDICT_RANK, ALL, BUILTIN_DANGEROUS_WORDS, PRODUCT_CHECKS, SHIELD_RULE_NAME, SHIELD_RULES_FOLDED_INTO_PRODUCT, CHECKS, CHECK_BY_ID, LEGACY_TO_ID, LEGACY_READERS, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, defaultExpansionOps, VARIABLE_READERS, FS_READ_TOOLS, GREP_SHAPE, PATTERN_VERBS, PATTERN_VERB_NAMES, GREP_FILE_OPERANDS, READER_VALUE_LETTERS, FILE_OPERAND_FLAGS, SCP_VALUE_FLAGS, TAR_VALUE_LETTERS, ZIP_VALUE_LETTERS, RSYNC_VALUE_LETTERS, RSYNC_SKIP, CP_VALUE_LETTERS, INSTALL_VALUE_LETTERS, COPY_VERBS, TAR_MODE_WORD, COPY_VERB_HEADS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, AST_FS_REGEX_RULES, COMMAND_WRAPPERS, INLINE_INTERPRETER, RUNNER_WRAPPERS, _listOps, WRAPPER_TAKES_TARGET, FIND_EXEC_FLAGS, FS_MUTATION_TOOLS, HOME_VARIABLES, assignmentTable, currentStmtOffset, PAYLOAD_BUDGET, payloadBudget, seenPayloads, UNANALYSABLE_NESTING, ASSIGNMENT_HEADS, AND_OP, OR_OP, AND_OR_OPS, FS_OP_CACHE_MAX, fsOpCache, REDIR_TRUNCATE_OPS, REDIR_FILE_IN_OPS, REDIR_HEREDOC_OPS, FIND_OPTIONS, COPY_RULE_OF, isReaderWord, positionalAfter, NONE, UNKNOWN, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, FORBIDDEN_PATH_SEGMENTS, BASH_TOOL_NAMES, MCP_EXECUTORS, BUILTIN_FIELDS, ARGV_FIELDS, BARE_WORD, MAX_ARGV_CHARACTERS, syntax2, WRITES, READS, DUP_OUT, HERE_STRING, AND, OR, DEFAULT_OPS, LEGACY_SYSTEM_PATH_RE, BIP39_ENGLISH, indices, IBAN_LENGTH, B58, B58_INDEX, XPRV_VERSIONS, B62, CRC32_TABLE, GITHUB_TOKEN_RE, B64URL, B64URL_INDEX, CASK_TWO_ZERO_SUFFIX, CASK_FOUR_ZERO_SUFFIX, INVISIBLE_RE, INVISIBLE_ONE, HOMOGLYPHS, HOMOGLYPH_RE, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, REFERENCE_VALUE_RE, IDENTIFIER_VALUE_RE, PATH_VALUE_RE, DOTTED_REFERENCE_RE, EMAIL_VALUE_RE, FIXTURE_NAME_RE, DERIVATIVE_NAME_RE, QUERY_CREDENTIAL_VALUE_RE, OTP_SECRET_RE, ASSIGNED_SECRET_VALUE_RE, ASSIGNED_SECRET_NAME_RE, NAME_KEYWORD_RE, ARN_CONTEXT_RE, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, SENSITIVE_PATH_REGEXES, MAX_DEPTH2, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, syntax3, TUNING_FIELDS, MAP_GOVERNED, KNOB_GOVERNED, CONFIGURABLE_CHECK_IDS, SOURCE_COMMANDS, MAX_DESTINATIONS, MAX_SCAN_CHARS, EMAIL_RE, URL_RE, IBAN_RE, RECIPIENT_KEYS, MASKED_KINDS, ENTRY_RE, syntax4, PUBLISH, OWN_HEADS, TERMINAL_ESCAPE_RE, CANARY_MIN_LENGTH, MAX_TEXT, MAX_DEPTH4, MAX_JSON_PARSE, URL_DEPTH, B64_DEPTH, MIN_SEGMENT, SEPARATORS, stripSeparators, looksText, CANARY_DECODERS, VIEWS, LONG_OUTPUT_THRESHOLD_BYTES;
+var aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, BUILTIN_SHIELDS, SSRF_MAX_HOST, METADATA_ADDRESSES, METADATA_HOSTNAMES, v4Octets, CHECK_TEXT, VERDICTS, CHECK_VERDICT_RANK, ALL, BUILTIN_DANGEROUS_WORDS, PRODUCT_CHECKS, SHIELD_RULE_NAME, SHIELD_RULES_FOLDED_INTO_PRODUCT, CHECKS, CHECK_BY_ID, LEGACY_TO_ID, LEGACY_READERS, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, defaultExpansionOps, VARIABLE_READERS, FS_READ_TOOLS, GREP_SHAPE, PATTERN_VERBS, PATTERN_VERB_NAMES, GREP_FILE_OPERANDS, READER_VALUE_LETTERS, FILE_OPERAND_FLAGS, SCP_VALUE_FLAGS, TAR_VALUE_LETTERS, ZIP_VALUE_LETTERS, RSYNC_VALUE_LETTERS, RSYNC_SKIP, CP_VALUE_LETTERS, INSTALL_VALUE_LETTERS, COPY_VERBS, TAR_MODE_WORD, COPY_VERB_HEADS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, AST_FS_REGEX_RULES, COMMAND_WRAPPERS, INLINE_INTERPRETER, RUNNER_WRAPPERS, _listOps, WRAPPER_TAKES_TARGET, FIND_EXEC_FLAGS, FS_MUTATION_TOOLS, HOME_VARIABLES, assignmentTable, currentStmtOffset, PAYLOAD_BUDGET, payloadBudget, seenPayloads, UNANALYSABLE_NESTING, ASSIGNMENT_HEADS, AND_OP, OR_OP, AND_OR_OPS, MAX_CALL_DEPTH, MAX_CALL_WALKS, callDepth, callWalks, FS_OP_CACHE_MAX, fsOpCache, REDIR_TRUNCATE_OPS, REDIR_FILE_IN_OPS, REDIR_HEREDOC_OPS, FIND_OPTIONS, COPY_RULE_OF, isReaderWord, positionalAfter, NONE, UNKNOWN, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, FORBIDDEN_PATH_SEGMENTS, BASH_TOOL_NAMES, MCP_EXECUTORS, BUILTIN_FIELDS, ARGV_FIELDS, BARE_WORD, MAX_ARGV_CHARACTERS, syntax2, WRITES, READS, DUP_OUT, HERE_STRING, AND, OR, DEFAULT_OPS, SYSTEM_DIRS, UPLOAD_SYSTEM_DIRS, LEGACY_SYSTEM_PATH_RE, BIP39_ENGLISH, indices, IBAN_LENGTH, B58, B58_INDEX, XPRV_VERSIONS, B62, CRC32_TABLE, GITHUB_TOKEN_RE, B64URL, B64URL_INDEX, CASK_TWO_ZERO_SUFFIX, CASK_FOUR_ZERO_SUFFIX, INVISIBLE_RE, INVISIBLE_ONE, HOMOGLYPHS, HOMOGLYPH_RE, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, REFERENCE_VALUE_RE, IDENTIFIER_VALUE_RE, PATH_VALUE_RE, DOTTED_REFERENCE_RE, CONCATENATION_RE, EMAIL_VALUE_RE, FIXTURE_NAME_RE, DERIVATIVE_NAME_RE, QUERY_CREDENTIAL_VALUE_RE, OTP_SECRET_RE, OTP_DOC_SECRETS, ASSIGNED_SECRET_VALUE_RE, ASSIGNED_SECRET_NAME_RE, NAME_KEYWORD_RE, ARN_CONTEXT_RE, BASIC_VALUE_RE, BASIC_PAIR_RE, OTP_CAPTURE_RE, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, SENSITIVE_PATH_REGEXES, MAX_DEPTH2, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, syntax3, EDITOR_HEADS, MANAGER_HEADS, TUNING_FIELDS, MAP_GOVERNED, KNOB_GOVERNED, CONFIGURABLE_CHECK_IDS, SOURCE_COMMANDS, MAX_DESTINATIONS, MAX_SCAN_CHARS, EMAIL_RE, URL_RE, IBAN_RE, RECIPIENT_KEYS, MASKED_KINDS, ENTRY_RE, syntax4, PUBLISH, OWN_HEADS, TERMINAL_ESCAPE_RE, CANARY_MIN_LENGTH, MAX_TEXT, MAX_DEPTH4, MAX_JSON_PARSE, URL_DEPTH, B64_DEPTH, MIN_SEGMENT, SEPARATORS, stripSeparators, looksText, CANARY_DECODERS, VIEWS, LONG_OUTPUT_THRESHOLD_BYTES;
 var init_dist = __esm({
   "packages/policy-engine/dist/index.mjs"() {
     "use strict";
@@ -3221,6 +3343,11 @@ var init_dist = __esm({
         example: "cat /etc/shadow",
         advice: "Keep Review, or choose Block when agents must never read system password hashes."
       },
+      "files.system-dirs": {
+        plain: "The agent writes, creates or deletes a file in a system directory, or sends a system file in a request. /usr/local and a container working directory under /usr/src are ordinary project space and are not included.",
+        example: "wget -O /usr/bin/tool https://example.com/tool",
+        advice: "Keep Review on a workstation. A container image build that installs into /usr can set it to Log."
+      },
       // ── Commands ──────────────────────────────────────────────────────────────
       "commands.inline-exec": {
         plain: "The agent runs a small program written inside the command itself.",
@@ -3417,7 +3544,7 @@ var init_dist = __esm({
         advice: "Fixed at Block. A person accepts the change on the machine (node9 mcp pin update)."
       },
       "loading.malicious-package": {
-        plain: "The agent installs a package that the public malicious-package database (OSV) lists, or one published minutes ago.",
+        plain: "The agent installs a package that the public malicious-package database (OSV) lists, or one published minutes ago. Covers npm, PyPI, RubyGems, crates.io, Go, NuGet, Maven, Packagist and VS Code extensions; the publish-age and install-script signals are npm and PyPI only.",
         example: "npm install of a package flagged as malware",
         advice: "Keep Block for known-malicious packages; brand-new packages already stop for Review."
       }
@@ -3455,6 +3582,15 @@ var init_dist = __esm({
         defaultValue: "review",
         legacy: ["review-password-hash-read"]
       },
+      {
+        id: "files.system-dirs",
+        group: "files",
+        title: "System directories",
+        catches: "Writes, new files and removals under /usr, /etc, /boot, /bin, /sbin, /lib and /var/log, and uploads of system files",
+        values: ALL,
+        defaultValue: "review",
+        legacy: ["review-system-dir-mutation", "review-system-file-upload"]
+      },
       // ── Commands ────────────────────────────────────────────────────────────
       {
         id: "commands.inline-exec",
@@ -4580,6 +4716,10 @@ var init_dist = __esm({
     AND_OP = probeBinOp("a && b");
     OR_OP = probeBinOp("a || b");
     AND_OR_OPS = new Set([AND_OP, OR_OP].filter((o) => o !== null));
+    MAX_CALL_DEPTH = 4;
+    MAX_CALL_WALKS = 256;
+    callDepth = 0;
+    callWalks = 0;
     FS_OP_CACHE_MAX = 5e3;
     fsOpCache = /* @__PURE__ */ new Map();
     REDIR_TRUNCATE_OPS = /* @__PURE__ */ new Set([deriveRedirOp(">_f")]);
@@ -4641,6 +4781,17 @@ var init_dist = __esm({
         (s) => parseShared(`echo ${s}`).Stmts[0].Cmd.Args[1].Parts[0].Exp.Op
       )
     );
+    SYSTEM_DIRS = [
+      "/usr",
+      "/etc",
+      "/boot",
+      "/bin",
+      "/sbin",
+      "/lib",
+      "/lib64",
+      "/var/log"
+    ];
+    UPLOAD_SYSTEM_DIRS = [...SYSTEM_DIRS, "/proc", "/sys", "/root"];
     LEGACY_SYSTEM_PATH_RE = /^(?:[a-zA-Z]:)?\/etc\/(?:passwd|shadow|sudoers)$/;
     BIP39_ENGLISH = `abandon
 ability
@@ -6897,15 +7048,20 @@ zoo`.split("\n");
     IDENTIFIER_VALUE_RE = /^[A-Za-z_.-]+$/;
     PATH_VALUE_RE = /^(?:\/|\.{1,2}\/|~\/)/;
     DOTTED_REFERENCE_RE = /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/;
+    CONCATENATION_RE = /^\+[A-Za-z_$][\w$]*\./;
     EMAIL_VALUE_RE = /^[^@\s]+@[^@\s]+\.[A-Za-z]{2,}$/;
     FIXTURE_NAME_RE = /(?:fake|dummy|example|sample|mock|stub|placeholder|test)/i;
-    DERIVATIVE_NAME_RE = /(?:hash|digest|id|type|name|url|uri|path|file|len|length|count|size|ttl|expires?|expiry|age|date|time|format|field|header|param)$/i;
+    DERIVATIVE_NAME_RE = /(?:hash|digest|fingerprint|thumbprint|checksum|id|type|name|url|uri|path|file|len|length|count|size|ttl|expires?|expiry|age|date|time|format|field|header|param)$/i;
     QUERY_CREDENTIAL_VALUE_RE = /=([A-Za-z0-9%+/_.~-]{8,512}={0,2})$/;
     OTP_SECRET_RE = /^[A-Z2-7]{16,}=*$/i;
-    ASSIGNED_SECRET_VALUE_RE = /(?::=|=>|[:=])[ \t]{0,8}["'`]?([A-Za-z0-9+/_.!@#$%^*~-]{12,512}={0,2})$/;
+    OTP_DOC_SECRETS = /* @__PURE__ */ new Set(["JBSWY3DPEHPK3PXP", "GEZDGNBVGY3TQOJQ"]);
+    ASSIGNED_SECRET_VALUE_RE = /(?::=|=>|[:=])[ \t]{0,8}\\?["'`]?([A-Za-z0-9+/_.!@#$%^*~-]{12,512}={0,2})$/;
     ASSIGNED_SECRET_NAME_RE = /^([A-Za-z0-9_]+)/;
-    NAME_KEYWORD_RE = /^(?:password|passphrase|passwd|pwd|secret|token|api[_-]?key|auth[_-]?key|private[_-]?key|access[_-]?key|client[_-]?secret)/i;
+    NAME_KEYWORD_RE = /^(?:password|passphrase|passwd|pwd|secret|token|api[_-]?key|auth[_-]?key|private[_-]?key|access[_-]?key|client[_-]?secret|consumer[_-]?key|app[_-]?key|signing[_-]?key|encryption[_-]?key|master[_-]?key|jsapi[_-]?ticket|pass)/i;
     ARN_CONTEXT_RE = /\barn:[A-Za-z0-9-]*:[^\s"'`]*$/i;
+    BASIC_VALUE_RE = /([A-Za-z0-9+/]{8,512}={0,2})$/;
+    BASIC_PAIR_RE = /^([^:\s]{1,128}):(\S{8,256})$/;
+    OTP_CAPTURE_RE = /["']([A-Z2-7]{16,128}=*)["']$/i;
     DLP_PATTERNS = [
       // ── AWS ───────────────────────────────────────────────────────────────────
       {
@@ -7243,6 +7399,22 @@ zoo`.split("\n");
         contextBoost: true,
         minEntropy: 3
       },
+      // ── HTTP Basic credential ─────────────────────────────────────────────────
+      // `Authorization: Basic <base64 of user:password>`, or the bare scheme in a
+      // config list. The validator decodes the value and accepts only a
+      // `user:password` whose password looks generated (letters and digits, 8+
+      // characters, the query-credential rule), so prose ("Basic authentication")
+      // and documentation pairs (`admin:changeme`, `user:pass1234`) stay allowed.
+      // review: the same weight as a bare Bearer token.
+      {
+        name: "HTTP Basic Credential",
+        regex: /\bBasic[ \t]{1,8}([A-Za-z0-9+/]{8,512}={0,2})/i,
+        severity: "review",
+        keywords: ["basic"],
+        validate: validateBasicCredential,
+        redactGroup: 1,
+        argumentsOnly: true
+      },
       // ── Resend ────────────────────────────────────────────────────────────────
       {
         name: "Resend API Key",
@@ -7384,6 +7556,19 @@ zoo`.split("\n");
         validate: validateQueryCredential,
         argumentsOnly: true
       },
+      // ── OTP secret in a constructor ───────────────────────────────────────────
+      // `ROTP::TOTP.new('<base32>')`, `pyotp.TOTP("<base32>")`, `new HOTP('...')`:
+      // the shared secret of a one-time-password generator written as a literal.
+      // The otpauth URI form is `Credential in URL Query`. review.
+      {
+        name: "OTP Secret",
+        regex: /\b(?:TOTP|HOTP|OTP)(?:\.new|\.create)?[ \t]{0,8}\(?[ \t]{0,8}["']([A-Z2-7]{16,128}=*)["']/i,
+        severity: "review",
+        keywords: ["otp"],
+        validate: validateOtpSecret,
+        redactGroup: 1,
+        argumentsOnly: true
+      },
       // ── Secret assigned to a telling name ─────────────────────────────────────
       // `password: ...`, `JWT_SECRET=...`, `api_key = "..."`. The name alone is
       // not a finding: most such lines hold a reference (`process.env.X`), a
@@ -7391,12 +7576,14 @@ zoo`.split("\n");
       // generated: 12+ characters, not an identifier, Shannon entropy of 3.5
       // bits per character or more. review, never block (node9Firewall#348,
       // item 4). Tuned on CredData's public split; its look-alike lines are the
-      // negative control.
+      // negative control. A quote may be escaped (`\"access_token\":\"...\"`):
+      // JSON written inside a string literal. The two optional quotes after the
+      // name are written out, not as a counted group, to keep star height 1.
       {
         name: "Assigned Secret",
-        regex: /(?:password|passphrase|passwd|pwd|secret|token|api[_-]?key|auth[_-]?key|private[_-]?key|access[_-]?key|client[_-]?secret)[A-Za-z0-9_]{0,40}["'\]]{0,2}[ \t]{0,8}(?::=|=>|[:=])[ \t]{0,8}["'`]?([A-Za-z0-9+/_.!@#$%^*~-]{12,512}={0,2})/i,
+        regex: /(?:password|passphrase|passwd|pwd|secret|token|api[_-]?key|auth[_-]?key|private[_-]?key|access[_-]?key|client[_-]?secret|consumer[_-]?key|app[_-]?key|signing[_-]?key|encryption[_-]?key|master[_-]?key|jsapi[_-]?ticket|\bpass(?![A-Za-z0-9])|_pass(?![A-Za-z0-9]))[A-Za-z0-9_]{0,40}\\?["'\]]?\\?["'\]]?[ \t]{0,8}(?::=|=>|[:=])[ \t]{0,8}\\?["'`]?([A-Za-z0-9+/_.!@#$%^*~-]{12,512}={0,2})/i,
         severity: "review",
-        keywords: ["password", "passphrase", "passwd", "pwd", "secret", "token", "key"],
+        keywords: ["pass", "pwd", "secret", "token", "key", "ticket"],
         validate: validateAssignedSecret,
         argumentsOnly: true
       }
@@ -7458,6 +7645,35 @@ zoo`.split("\n");
     MAX_STRING_BYTES = 1e5;
     MAX_JSON_PARSE_BYTES = 1e4;
     ({ syntax: syntax3 } = mvdanSh3);
+    EDITOR_HEADS = ["code", "code-insiders", "codium", "vscodium", "cursor"];
+    MANAGER_HEADS = /* @__PURE__ */ new Set([
+      "gem",
+      "bundle",
+      "cargo",
+      "go",
+      "dotnet",
+      "nuget",
+      "mvn",
+      "mvnw",
+      "composer",
+      ...EDITOR_HEADS,
+      "npm",
+      "npx",
+      "pnpm",
+      "yarn",
+      "bun",
+      "bunx",
+      "pip",
+      "pip3",
+      "pipx",
+      "python",
+      "python3",
+      "py",
+      "uv",
+      "uvx",
+      "poetry",
+      "pipenv"
+    ]);
     TUNING_FIELDS = [
       { checkId: "network.unknown-host", name: "allow", legacy: ["egress", "allow"] },
       { checkId: "network.unknown-host", name: "deny", legacy: ["egress", "deny"] },
@@ -7516,6 +7732,7 @@ zoo`.split("\n");
     MAP_GOVERNED = /* @__PURE__ */ new Set([
       "files.shell-startup",
       "files.password-hashes",
+      "files.system-dirs",
       "commands.inline-exec",
       "commands.eval-dynamic",
       "commands.curl-pipe-shell",