@oculum/scanner 1.0.12 → 1.0.13

package/dist/detect/ai-code/endpoint-protection.js

@@ -0,0 +1,349 @@
+"use strict";
+/**
+ * Layer 2: AI Endpoint Protection Detection
+ * Detects AI/LLM endpoints without proper authentication or rate limiting
+ *
+ * Covers:
+ * - M5.2: AI endpoints without auth/rate limiting
+ * - Cost-bearing AI endpoints exposed publicly
+ * - Missing rate limiting on AI routes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectAIEndpointProtection = detectAIEndpointProtection;
+exports.isRouteFile = isRouteFile;
+exports.hasAIApiCalls = hasAIApiCalls;
+exports.hasAuthentication = hasAuthentication;
+exports.hasRateLimiting = hasRateLimiting;
+const file_classifier_1 = require("../../parse/file-classifier");
+const BASE_CONFIDENCE = 0.50;
+// ============================================================================
+// Context Detection
+// ============================================================================
+/**
+ * Check if file is a route/API handler
+ */
+function isRouteFile(filePath) {
+    const routePatterns = [
+        /\/api\/.*\.(ts|js)$/i,
+        /\/routes?\/.*\.(ts|js)$/i,
+        /route\.(ts|js)$/i,
+        /\/pages\/api\/.*\.(ts|js)$/i,
+        /\/app\/.*\/route\.(ts|js)$/i,
+        /\.(controller|handler)\.(ts|js)$/i,
+    ];
+    return routePatterns.some(p => p.test(filePath));
+}
+/**
+ * Check if content contains AI/LLM API calls
+ */
+function hasAIApiCalls(content) {
+    const aiPatterns = [
+        // OpenAI
+        /openai\.chat\.completions?\.create/i,
+        /openai\.completions?\.create/i,
+        /openai\.embeddings?\.create/i,
+        // Anthropic
+        /anthropic\.messages\.create/i,
+        /anthropic\.completions?\.create/i,
+        // Vercel AI SDK
+        /\bgenerateText\s*\(/i,
+        /\bstreamText\s*\(/i,
+        /\bgenerateObject\s*\(/i,
+        /\bstreamObject\s*\(/i,
+        // Generic patterns
+        /\.create\s*\(\s*\{[^}]*model\s*:/i,
+        /ChatCompletion|MessageCreate/i,
+        // LangChain
+        /\.invoke\s*\([^)]*\)/i,
+        /ChatOpenAI|ChatAnthropic|ChatModel/i,
+        // Other providers
+        /replicate\.run/i,
+        /cohere\.(?:generate|chat)/i,
+        /mistral\.chat/i,
+    ];
+    return aiPatterns.some(p => p.test(content));
+}
+/**
+ * Check if there's authentication in the route
+ */
+function hasAuthentication(content) {
+    const authPatterns = [
+        // Session/user checks
+        /getSession|getServerSession|getCurrentUser/i,
+        /auth\(\)|requireAuth|withAuth|ensureAuth/i,
+        /verifyToken|validateToken|checkToken/i,
+        /req\.user|request\.user|context\.user/i,
+        /isAuthenticated|checkAuth/i,
+        // Header checks
+        /Authorization.*Bearer/i,
+        /headers\[['"`]authorization['"`]\]/i,
+        /getHeader\(['"`]authorization['"`]\)/i,
+        // API key validation
+        /apiKey|api_key|x-api-key/i,
+        // Clerk/NextAuth/Auth0
+        /currentUser\(\)|auth\(\)\.protect/i,
+        /getAuth\(\)|clerkClient/i,
+        // User ID extraction (implies auth)
+        /userId|user\.id|currentUserId/i,
+        // 401/403 responses
+        /status\(401\)|status\(403\)/i,
+        /Unauthorized|Forbidden/i,
+    ];
+    return authPatterns.some(p => p.test(content));
+}
+/**
+ * Check if there's rate limiting
+ */
+function hasRateLimiting(content) {
+    const rateLimitPatterns = [
+        // Rate limit middleware/libraries
+        /rateLimit|rateLimiter/i,
+        /express-rate-limit/i,
+        /upstash.*ratelimit|@upstash\/ratelimit/i,
+        /rate-limiter-flexible/i,
+        // Custom rate limiting
+        /throttle|Throttle/i,
+        /requestsPerMinute|requestsPerHour/i,
+        /maxRequests|requestLimit/i,
+        // Rate limit headers
+        /X-RateLimit|x-ratelimit/i,
+        /Retry-After/i,
+        // 429 responses
+        /status\(429\)|\.status === 429/i,
+        /Too Many Requests|TooManyRequests/i,
+        // Sliding window/token bucket
+        /slidingWindow|tokenBucket|fixedWindow/i,
+    ];
+    return rateLimitPatterns.some(p => p.test(content));
+}
+/**
+ * Check if this is a BYOK (Bring Your Own Key) endpoint
+ * BYOK endpoints have lower risk since user pays for their own usage
+ */
+function isBYOKEndpoint(content) {
+    const byokPatterns = [
+        /req\.body\.(?:apiKey|api_key|openaiKey|anthropicKey)/i,
+        /request\.(?:apiKey|api_key|openaiKey|anthropicKey)/i,
+        /userApiKey|user_api_key|clientApiKey/i,
+        /['"`](?:apiKey|api_key|openai_key|anthropic_key)['"`]\s*:/i,
+        // Headers with user's key
+        /headers\[['"`]x-openai-key['"`]\]/i,
+        /headers\[['"`]x-api-key['"`]\]/i,
+        // Destructuring from request body
+        /const\s*\{\s*[^}]*apiKey[^}]*\}\s*=\s*await\s*(?:request|req)\.json\(\)/i,
+        /const\s*\{\s*[^}]*api_key[^}]*\}\s*=\s*await\s*(?:request|req)\.json\(\)/i,
+        // OpenAI/Anthropic client with user-provided key
+        /new\s+OpenAI\s*\(\s*\{\s*apiKey\s*[,}]/i,
+        /new\s+Anthropic\s*\(\s*\{\s*apiKey\s*[,}]/i,
+    ];
+    return byokPatterns.some(p => p.test(content));
+}
+/**
+ * Check if route is protected by middleware (from config)
+ */
+function isProtectedByMiddleware(filePath, middlewareConfig) {
+    if (!middlewareConfig?.protectedPaths)
+        return false;
+    // Extract route path from file path
+    const routePath = filePath
+        .replace(/.*\/(pages|app)\/api/, '/api')
+        .replace(/.*\/routes?/, '')
+        .replace(/\/route\.(ts|js)$/, '')
+        .replace(/\.(ts|js)$/, '')
+        .replace(/\[([^\]]+)\]/g, ':$1');
+    return middlewareConfig.protectedPaths.some(p => routePath.startsWith(p));
+}
+/**
+ * Check if this is an internal/admin-only route
+ */
+function isInternalRoute(filePath, content) {
+    const internalPatterns = [
+        /\/internal\//i,
+        /\/admin\//i,
+        /\/_internal\//i,
+        // Content checks
+        /adminOnly|internalOnly|isAdmin/i,
+        /process\.env\.INTERNAL_SECRET/i,
+    ];
+    return internalPatterns.some(p => p.test(filePath) || p.test(content));
+}
+/**
+ * Get surrounding context
+ */
+function getSurroundingContext(content, lineIndex, windowSize = 50) {
+    const lines = content.split('\n');
+    const start = Math.max(0, lineIndex - windowSize);
+    const end = Math.min(lines.length, lineIndex + windowSize);
+    return lines.slice(start, end).join('\n');
+}
+/**
+ * Route handler patterns by framework
+ */
+const ROUTE_HANDLER_PATTERNS = [
+    // Next.js App Router
+    {
+        name: 'Next.js App Router AI endpoint',
+        pattern: /export\s+(?:async\s+)?function\s+(GET|POST|PUT|PATCH|DELETE)\s*\(/gi,
+        framework: 'nextjs_app',
+        description: 'Next.js App Router endpoint with AI API calls lacks protection.',
+        suggestedFix: 'Add authentication check at start of handler. Consider using middleware for auth and rate limiting.',
+    },
+    // Next.js Pages Router
+    {
+        name: 'Next.js Pages API route',
+        pattern: /export\s+default\s+(?:async\s+)?function\s*(?:\w+\s*)?\([^)]*req/gi,
+        framework: 'nextjs_pages',
+        description: 'Next.js Pages API route with AI calls lacks protection.',
+        suggestedFix: 'Add authentication: const session = await getServerSession(req, res, authOptions); if (!session) return res.status(401).json({error: "Unauthorized"})',
+    },
+    // Express
+    {
+        name: 'Express AI route',
+        pattern: /(?:app|router)\.(get|post|put|patch|delete)\s*\(\s*['"`][^'"`]+['"`]\s*,/gi,
+        framework: 'express',
+        description: 'Express route with AI API calls lacks middleware protection.',
+        suggestedFix: 'Add authentication and rate limiting middleware: app.post("/api/chat", authMiddleware, rateLimiter, handler)',
+    },
+    // Fastify
+    {
+        name: 'Fastify AI route',
+        pattern: /fastify\.(get|post|put|patch|delete)\s*\(\s*['"`][^'"`]+['"`]/gi,
+        framework: 'fastify',
+        description: 'Fastify route with AI calls lacks protection.',
+        suggestedFix: 'Add preHandler hooks for auth and rate limiting: { preHandler: [authenticate, rateLimit] }',
+    },
+    // Generic handler exports
+    {
+        name: 'API handler with AI calls',
+        pattern: /export\s+(?:const|async\s+function)\s+(?:handler|apiHandler)\s*[=:]/gi,
+        framework: 'generic',
+        description: 'API handler with AI calls may lack protection.',
+        suggestedFix: 'Ensure authentication and rate limiting are applied before AI API calls.',
+    },
+];
+/**
+ * Main detection function for AI endpoint protection issues
+ */
+function detectAIEndpointProtection(content, filePath, options = {}) {
+    const vulnerabilities = [];
+    // Skip non-applicable files
+    if ((0, file_classifier_1.isScannerOrFixtureFile)(filePath))
+        return vulnerabilities;
+    if ((0, file_classifier_1.isDocumentationFile)(filePath))
+        return vulnerabilities;
+    // Only scan route files that have AI API calls
+    if (!isRouteFile(filePath) || !hasAIApiCalls(content)) {
+        return vulnerabilities;
+    }
+    const lines = options?.parsed?.lines ?? content.split('\n');
+    const isTestFile = (0, file_classifier_1.isTestOrMockFile)(filePath);
+    const isExample = (0, file_classifier_1.isExampleDirectory)(filePath);
+    // Check file-level protection
+    const fileHasAuth = hasAuthentication(content);
+    const fileHasRateLimit = hasRateLimiting(content);
+    const isByok = isBYOKEndpoint(content);
+    const isInternal = isInternalRoute(filePath, content);
+    const isMiddlewareProtected = isProtectedByMiddleware(filePath, options.middlewareConfig);
+    // Scan for route handler patterns
+    for (const pattern of ROUTE_HANDLER_PATTERNS) {
+        const regex = new RegExp(pattern.pattern.source, pattern.pattern.flags);
+        let match;
+        while ((match = regex.exec(content)) !== null) {
+            const lineNumber = content.substring(0, match.index).split('\n').length;
+            const lineContent = lines[lineNumber - 1]?.trim() || '';
+            // Skip comments
+            if ((0, file_classifier_1.isComment)(lineContent))
+                continue;
+            // Get surrounding context
+            const context = getSurroundingContext(content, lineNumber - 1, 50);
+            // Check for local protection patterns (within handler)
+            const handlerHasAuth = hasAuthentication(context);
+            const handlerHasRateLimit = hasRateLimiting(context);
+            // Calculate severity based on protection status
+            let severity;
+            const notes = [];
+            if (isMiddlewareProtected || isInternal) {
+                severity = 'info';
+                notes.push(isMiddlewareProtected ? 'Protected by middleware' : 'Internal route');
+            }
+            else if (handlerHasAuth || fileHasAuth) {
+                if (handlerHasRateLimit || fileHasRateLimit) {
+                    // Has both auth and rate limiting
+                    severity = 'info';
+                    notes.push('Has authentication and rate limiting');
+                }
+                else {
+                    // Has auth but no rate limiting
+                    severity = 'low';
+                    notes.push('Has authentication but missing rate limiting');
+                }
+            }
+            else if (handlerHasRateLimit || fileHasRateLimit) {
+                // Has rate limiting but no auth
+                severity = 'medium';
+                notes.push('Has rate limiting but missing authentication');
+            }
+            else {
+                // No protection at all
+                severity = 'high';
+                notes.push('Missing authentication and rate limiting');
+            }
+            // BYOK endpoints have lower risk - user provides own API key
+            if (isByok && severity !== 'info') {
+                // BYOK with auth = info (user pays for own usage, access controlled)
+                // BYOK without auth = low (potential abuse but user still pays)
+                if (handlerHasAuth || fileHasAuth) {
+                    severity = 'info';
+                    notes.push('BYOK endpoint with authentication - user pays for their own usage');
+                }
+                else {
+                    severity = 'low';
+                    notes.push('BYOK endpoint without auth - potential abuse but user provides API key');
+                }
+            }
+            // Downgrade test files
+            if (isTestFile) {
+                severity = 'info';
+                notes.push('in test file');
+            }
+            // Downgrade example/demo directories - these are tutorials, not production code
+            if (isExample && severity !== 'info') {
+                severity = 'info';
+                notes.push('in example/demo directory - tutorial code');
+            }
+            // Build description
+            let description = pattern.description;
+            if (notes.length > 0) {
+                description += ` (${notes.join('; ')})`;
+            }
+            // Determine suggested fix based on what's missing
+            let suggestedFix = pattern.suggestedFix;
+            if (handlerHasAuth && !handlerHasRateLimit) {
+                suggestedFix = 'Add rate limiting to prevent cost abuse: npm install express-rate-limit or use Upstash ratelimit for serverless.';
+            }
+            vulnerabilities.push({
+                id: `ai-endpoint-${filePath}-${lineNumber}-${pattern.name.replace(/\s+/g, '-')}`,
+                filePath,
+                lineNumber,
+                lineContent,
+                severity,
+                category: 'ai_endpoint_unprotected',
+                title: pattern.name,
+                description,
+                suggestedFix,
+                confidence: severity === 'info' ? 'low' : 'medium',
+                layer: 2,
+                source: 'ai_code',
+                requiresAIValidation: severity !== 'info',
+                baseConfidence: BASE_CONFIDENCE,
+            });
+            // Only report one finding per file (file-level issue)
+            break;
+        }
+        // Only process if we found a route handler (avoid duplicate patterns)
+        if (vulnerabilities.length > 0)
+            break;
+    }
+    return vulnerabilities;
+}
+//# sourceMappingURL=endpoint-protection.js.map

package/dist/detect/ai-code/endpoint-protection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-protection.js","sourceRoot":"","sources":["../../../src/detect/ai-code/endpoint-protection.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAkQH,gEAwIC;AAGQ,kCAAW;AAAE,sCAAa;AAAE,8CAAiB;AAAE,0CAAe;AAxYvE,iEAMoC;AAEpC,MAAM,eAAe,GAAG,IAAI,CAAA;AAE5B,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,aAAa,GAAG;QACpB,sBAAsB;QACtB,0BAA0B;QAC1B,kBAAkB;QAClB,6BAA6B;QAC7B,6BAA6B;QAC7B,mCAAmC;KACpC,CAAA;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AAClD,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,UAAU,GAAG;QACjB,SAAS;QACT,qCAAqC;QACrC,+BAA+B;QAC/B,8BAA8B;QAC9B,YAAY;QACZ,8BAA8B;QAC9B,kCAAkC;QAClC,gBAAgB;QAChB,sBAAsB;QACtB,oBAAoB;QACpB,wBAAwB;QACxB,sBAAsB;QACtB,mBAAmB;QACnB,mCAAmC;QACnC,+BAA+B;QAC/B,YAAY;QACZ,uBAAuB;QACvB,qCAAqC;QACrC,kBAAkB;QAClB,iBAAiB;QACjB,4BAA4B;QAC5B,gBAAgB;KACjB,CAAA;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,YAAY,GAAG;QACnB,sBAAsB;QACtB,6CAA6C;QAC7C,2CAA2C;QAC3C,uCAAuC;QACvC,wCAAwC;QACxC,4BAA4B;QAC5B,gBAAgB;QAChB,wBAAwB;QACxB,qCAAqC;QACrC,uCAAuC;QACvC,qBAAqB;QACrB,2BAA2B;QAC3B,uBAAuB;QACvB,oCAAoC;QACpC,0BAA0B;QAC1B,oCAAoC;QACpC,gCAAgC;QAChC,oBAAoB;QACpB,8BAA8B;QAC9B,yBAAyB;KAC1B,CAAA;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,iBAAiB,GAAG;QACxB,kCAAkC;QAClC,wBAAwB;QACxB,qBAAqB;QACrB,yCAAyC;QACzC,wBAAwB;QACxB,uBAAuB;QACvB,oBAAoB;QACpB,oCAAoC;QACpC,2BAA2B;QAC3B,qBAAqB;QACrB,0BAA0B;QAC1B,cAAc;QACd,gBAAgB;QAChB,iCAAiC;QACjC,oCAAoC;QACpC,8BAA8B;QAC9B,wCAAwC;KACzC,CAAA;IACD,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACrD,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,YAAY,GAAG;QACnB,uDAAuD;QACvD,qDAAqD;QACrD,uCAAuC;QACvC,4DAA4D;QAC5D,0BAA0B;QAC1B,oCAAoC;QACpC,iCAAiC;QACjC,kCAAkC;QAClC,0EAA0E;QAC1E,2EAA2E;QAC3E,iDAAiD;QACjD,yCAAyC;QACzC,4CAA4C;KAC7C,CAAA;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,gBAAuC;IAEvC,IAAI,CAAC,gBAAgB,EAAE,cAAc;QAAE,OAAO,KAAK,CAAA;IAEnD,oCAAoC;IACpC,MAAM,SAAS,GAAG,QAAQ;SACvB,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC;SACvC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IAElC,OAAO,gBAAgB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,OAAe;IACxD,MAAM,gBAAgB,GAAG;QACvB,eAAe;QACf,YAAY;QACZ,gBAAgB;QAChB,iBAAiB;QACjB,iCAAiC;QACjC,gCAAgC;KACjC,CAAA;IACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACxE,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,OAAe,EAAE,SAAiB,EAAE,aAAqB,EAAE;IACxF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC,CAAA;IAC1D,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC3C,CAAC;AAcD;;GAEG;AACH,MAAM,sBAAsB,GAAgC;IAC1D,qBAAqB;IACrB;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,qEAAqE;QAC9E,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,iEAAiE;QAC9E,YAAY,EAAE,qGAAqG;KACpH;IACD,uBAAuB;IACvB;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,oEAAoE;QAC7E,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,yDAAyD;QACtE,YAAY,EAAE,uJAAuJ;KACtK;IACD,UAAU;IACV;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,4EAA4E;QACrF,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,8DAA8D;QAC3E,YAAY,EAAE,8GAA8G;KAC7H;IACD,UAAU;IACV;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,iEAAiE;QAC1E,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,+CAA+C;QAC5D,YAAY,EAAE,4FAA4F;KAC3G;IACD,0BAA0B;IAC1B;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,uEAAuE;QAChF,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,gDAAgD;QAC7D,YAAY,EAAE,0EAA0E;KACzF;CACF,CAAA;AAWD;;GAEG;AACH,SAAgB,0BAA0B,CACxC,OAAe,EACf,QAAgB,EAChB,UAAqC,EAAE;IAEvC,MAAM,eAAe,GAAoB,EAAE,CAAA;IAE3C,4BAA4B;IAC5B,IAAI,IAAA,wCAAsB,EAAC,QAAQ,CAAC;QAAE,OAAO,eAAe,CAAA;IAC5D,IAAI,IAAA,qCAAmB,EAAC,QAAQ,CAAC;QAAE,OAAO,eAAe,CAAA;IAEzD,+CAA+C;IAC/C,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,OAAO,eAAe,CAAA;IACxB,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC3D,MAAM,UAAU,GAAG,IAAA,kCAAgB,EAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,IAAA,oCAAkB,EAAC,QAAQ,CAAC,CAAA;IAE9C,8BAA8B;IAC9B,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,gBAAgB,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACrD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAEzF,kCAAkC;IAClC,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,CAAA;QAET,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEvD,gBAAgB;YAChB,IAAI,IAAA,2BAAS,EAAC,WAAW,CAAC;gBAAE,SAAQ;YAEpC,0BAA0B;YAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,UAAU,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;YAElE,uDAAuD;YACvD,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;YACjD,MAAM,mBAAmB,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;YAEpD,gDAAgD;YAChD,IAAI,QAA+B,CAAA;YACnC,MAAM,KAAK,GAAa,EAAE,CAAA;YAE1B,IAAI,qBAAqB,IAAI,UAAU,EAAE,CAAC;gBACxC,QAAQ,GAAG,MAAM,CAAA;gBACjB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAA;YAClF,CAAC;iBAAM,IAAI,cAAc,IAAI,WAAW,EAAE,CAAC;gBACzC,IAAI,mBAAmB,IAAI,gBAAgB,EAAE,CAAC;oBAC5C,kCAAkC;oBAClC,QAAQ,GAAG,MAAM,CAAA;oBACjB,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;gBACpD,CAAC;qBAAM,CAAC;oBACN,gCAAgC;oBAChC,QAAQ,GAAG,KAAK,CAAA;oBAChB,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAA;gBAC5D,CAAC;YACH,CAAC;iBAAM,IAAI,mBAAmB,IAAI,gBAAgB,EAAE,CAAC;gBACnD,gCAAgC;gBAChC,QAAQ,GAAG,QAAQ,CAAA;gBACnB,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAA;YAC5D,CAAC;iBAAM,CAAC;gBACN,uBAAuB;gBACvB,QAAQ,GAAG,MAAM,CAAA;gBACjB,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAA;YACxD,CAAC;YAED,6DAA6D;YAC7D,IAAI,MAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAClC,qEAAqE;gBACrE,gEAAgE;gBAChE,IAAI,cAAc,IAAI,WAAW,EAAE,CAAC;oBAClC,QAAQ,GAAG,MAAM,CAAA;oBACjB,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAA;gBACjF,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,KAAK,CAAA;oBAChB,KAAK,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAA;gBACtF,CAAC;YACH,CAAC;YAED,uBAAuB;YACvB,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,CAAA;gBACjB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAC5B,CAAC;YAED,gFAAgF;YAChF,IAAI,SAAS,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACrC,QAAQ,GAAG,MAAM,CAAA;gBACjB,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAA;YACzD,CAAC;YAED,oBAAoB;YACpB,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,WAAW,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;YACzC,CAAC;YAED,kDAAkD;YAClD,IAAI,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA;YACvC,IAAI,cAAc,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3C,YAAY,GAAG,kHAAkH,CAAA;YACnI,CAAC;YAED,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,eAAe,QAAQ,IAAI,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;gBAChF,QAAQ;gBACR,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,QAAQ,EAAE,yBAAyB;gBACnC,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW;gBACX,YAAY;gBACZ,UAAU,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;gBAClD,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,SAAkB;gBAC1B,oBAAoB,EAAE,QAAQ,KAAK,MAAM;gBACzC,cAAc,EAAE,eAAe;aAChC,CAAC,CAAA;YAEF,sDAAsD;YACtD,MAAK;QACP,CAAC;QAED,sEAAsE;QACtE,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;YAAE,MAAK;IACvC,CAAC;IAED,OAAO,eAAe,CAAA;AACxB,CAAC"}

package/dist/detect/ai-code/execution-sinks.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Layer 2: AI Execution Sink Detection
+ * Detects patterns where LLM output is fed into dangerous execution sinks
+ *
+ * Covers B2: Unsafe execution of model output (LLM02)
+ *
+ * Sinks include:
+ * - Code execution: eval(), Function(), vm.runInContext()
+ * - Shell execution: exec(), spawn(), child_process
+ * - SQL builders: .query(), .execute(), .raw()
+ * - Template rendering: innerHTML, dangerouslySetInnerHTML
+ */
+import type { Vulnerability } from '../../shared/types';
+import type { ParsedFile } from '../../shared/parsed-file';
+/**
+ * Main detection function for LLM output execution sinks
+ */
+export declare function detectAIExecutionSinks(content: string, filePath: string, options?: {
+    parsed?: ParsedFile;
+}): Vulnerability[];
+//# sourceMappingURL=execution-sinks.d.ts.map

package/dist/detect/ai-code/execution-sinks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-sinks.d.ts","sourceRoot":"","sources":["../../../src/detect/ai-code/execution-sinks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAyB,MAAM,oBAAoB,CAAA;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAyjC1D;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,UAAU,CAAA;CAAE,GAChC,aAAa,EAAE,CA+MjB"}