@oculum/scanner 1.0.12 → 1.0.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (961) hide show
  1. package/dist/detect/ai-code/agent-tools.d.ts +22 -0
  2. package/dist/detect/ai-code/agent-tools.d.ts.map +1 -0
  3. package/dist/detect/ai-code/agent-tools.js +1509 -0
  4. package/dist/detect/ai-code/agent-tools.js.map +1 -0
  5. package/dist/detect/ai-code/byok-patterns.d.ts +15 -0
  6. package/dist/detect/ai-code/byok-patterns.d.ts.map +1 -0
  7. package/dist/detect/ai-code/byok-patterns.js +313 -0
  8. package/dist/detect/ai-code/byok-patterns.js.map +1 -0
  9. package/dist/detect/ai-code/endpoint-protection.d.ts +38 -0
  10. package/dist/detect/ai-code/endpoint-protection.d.ts.map +1 -0
  11. package/dist/detect/ai-code/endpoint-protection.js +349 -0
  12. package/dist/detect/ai-code/endpoint-protection.js.map +1 -0
  13. package/dist/detect/ai-code/execution-sinks.d.ts +21 -0
  14. package/dist/detect/ai-code/execution-sinks.d.ts.map +1 -0
  15. package/dist/detect/ai-code/execution-sinks.js +1158 -0
  16. package/dist/detect/ai-code/execution-sinks.js.map +1 -0
  17. package/dist/detect/ai-code/fingerprinting.d.ts +10 -0
  18. package/dist/detect/ai-code/fingerprinting.d.ts.map +1 -0
  19. package/dist/detect/ai-code/fingerprinting.js +665 -0
  20. package/dist/detect/ai-code/fingerprinting.js.map +1 -0
  21. package/dist/detect/ai-code/index.d.ts +12 -0
  22. package/dist/detect/ai-code/index.d.ts.map +1 -0
  23. package/dist/detect/ai-code/index.js +26 -0
  24. package/dist/detect/ai-code/index.js.map +1 -0
  25. package/dist/detect/ai-code/mcp-security.d.ts +20 -0
  26. package/dist/detect/ai-code/mcp-security.d.ts.map +1 -0
  27. package/dist/detect/ai-code/mcp-security.js +880 -0
  28. package/dist/detect/ai-code/mcp-security.js.map +1 -0
  29. package/dist/detect/ai-code/model-supply-chain.d.ts +23 -0
  30. package/dist/detect/ai-code/model-supply-chain.d.ts.map +1 -0
  31. package/dist/detect/ai-code/model-supply-chain.js +447 -0
  32. package/dist/detect/ai-code/model-supply-chain.js.map +1 -0
  33. package/dist/detect/ai-code/package-hallucination.d.ts +22 -0
  34. package/dist/detect/ai-code/package-hallucination.d.ts.map +1 -0
  35. package/dist/detect/ai-code/package-hallucination.js +841 -0
  36. package/dist/detect/ai-code/package-hallucination.js.map +1 -0
  37. package/dist/detect/ai-code/prompt-hygiene.d.ts +22 -0
  38. package/dist/detect/ai-code/prompt-hygiene.d.ts.map +1 -0
  39. package/dist/detect/ai-code/prompt-hygiene.js +1177 -0
  40. package/dist/detect/ai-code/prompt-hygiene.js.map +1 -0
  41. package/dist/detect/ai-code/rag-safety.d.ts +24 -0
  42. package/dist/detect/ai-code/rag-safety.d.ts.map +1 -0
  43. package/dist/detect/ai-code/rag-safety.js +913 -0
  44. package/dist/detect/ai-code/rag-safety.js.map +1 -0
  45. package/dist/detect/ai-code/schema-validation.d.ts +28 -0
  46. package/dist/detect/ai-code/schema-validation.d.ts.map +1 -0
  47. package/dist/detect/ai-code/schema-validation.js +378 -0
  48. package/dist/detect/ai-code/schema-validation.js.map +1 -0
  49. package/dist/detect/config/agent-skill-injection.d.ts +27 -0
  50. package/dist/detect/config/agent-skill-injection.d.ts.map +1 -0
  51. package/dist/detect/config/agent-skill-injection.js +472 -0
  52. package/dist/detect/config/agent-skill-injection.js.map +1 -0
  53. package/dist/detect/config/comments.d.ts +11 -0
  54. package/dist/detect/config/comments.d.ts.map +1 -0
  55. package/dist/detect/config/comments.js +206 -0
  56. package/dist/detect/config/comments.js.map +1 -0
  57. package/dist/detect/config/file-flags.d.ts +10 -0
  58. package/dist/detect/config/file-flags.d.ts.map +1 -0
  59. package/dist/detect/config/file-flags.js +124 -0
  60. package/dist/detect/config/file-flags.js.map +1 -0
  61. package/dist/detect/config/index.d.ts +7 -0
  62. package/dist/detect/config/index.d.ts.map +1 -0
  63. package/dist/detect/config/index.js +17 -0
  64. package/dist/detect/config/index.js.map +1 -0
  65. package/dist/detect/config/osv-check.d.ts +75 -0
  66. package/dist/detect/config/osv-check.d.ts.map +1 -0
  67. package/dist/detect/config/osv-check.js +309 -0
  68. package/dist/detect/config/osv-check.js.map +1 -0
  69. package/dist/detect/config/package-check.d.ts +63 -0
  70. package/dist/detect/config/package-check.d.ts.map +1 -0
  71. package/dist/detect/config/package-check.js +509 -0
  72. package/dist/detect/config/package-check.js.map +1 -0
  73. package/dist/detect/config/urls.d.ts +11 -0
  74. package/dist/detect/config/urls.d.ts.map +1 -0
  75. package/dist/detect/config/urls.js +450 -0
  76. package/dist/detect/config/urls.js.map +1 -0
  77. package/dist/detect/index.d.ts +37 -0
  78. package/dist/detect/index.d.ts.map +1 -0
  79. package/dist/detect/index.js +77 -0
  80. package/dist/detect/index.js.map +1 -0
  81. package/dist/detect/secrets/config-audit.d.ts +11 -0
  82. package/dist/detect/secrets/config-audit.d.ts.map +1 -0
  83. package/dist/detect/secrets/config-audit.js +315 -0
  84. package/dist/detect/secrets/config-audit.js.map +1 -0
  85. package/dist/detect/secrets/config-mcp-audit.d.ts +23 -0
  86. package/dist/detect/secrets/config-mcp-audit.d.ts.map +1 -0
  87. package/dist/detect/secrets/config-mcp-audit.js +243 -0
  88. package/dist/detect/secrets/config-mcp-audit.js.map +1 -0
  89. package/dist/detect/secrets/entropy.d.ts +11 -0
  90. package/dist/detect/secrets/entropy.d.ts.map +1 -0
  91. package/dist/detect/secrets/entropy.js +751 -0
  92. package/dist/detect/secrets/entropy.js.map +1 -0
  93. package/dist/detect/secrets/index.d.ts +36 -0
  94. package/dist/detect/secrets/index.d.ts.map +1 -0
  95. package/dist/detect/secrets/index.js +174 -0
  96. package/dist/detect/secrets/index.js.map +1 -0
  97. package/dist/detect/secrets/patterns.d.ts +11 -0
  98. package/dist/detect/secrets/patterns.d.ts.map +1 -0
  99. package/dist/detect/secrets/patterns.js +518 -0
  100. package/dist/detect/secrets/patterns.js.map +1 -0
  101. package/dist/detect/secrets/weak-crypto.d.ts +10 -0
  102. package/dist/detect/secrets/weak-crypto.d.ts.map +1 -0
  103. package/dist/detect/secrets/weak-crypto.js +432 -0
  104. package/dist/detect/secrets/weak-crypto.js.map +1 -0
  105. package/dist/detect/structural/auth-patterns.d.ts +22 -0
  106. package/dist/detect/structural/auth-patterns.d.ts.map +1 -0
  107. package/dist/detect/structural/auth-patterns.js +533 -0
  108. package/dist/detect/structural/auth-patterns.js.map +1 -0
  109. package/dist/detect/structural/dangerous-functions/child-process.d.ts +16 -0
  110. package/dist/detect/structural/dangerous-functions/child-process.d.ts.map +1 -0
  111. package/dist/detect/structural/dangerous-functions/child-process.js +74 -0
  112. package/dist/detect/structural/dangerous-functions/child-process.js.map +1 -0
  113. package/dist/detect/structural/dangerous-functions/dom-xss.d.ts +34 -0
  114. package/dist/detect/structural/dangerous-functions/dom-xss.d.ts.map +1 -0
  115. package/dist/detect/structural/dangerous-functions/dom-xss.js +230 -0
  116. package/dist/detect/structural/dangerous-functions/dom-xss.js.map +1 -0
  117. package/dist/detect/structural/dangerous-functions/index.d.ts +16 -0
  118. package/dist/detect/structural/dangerous-functions/index.d.ts.map +1 -0
  119. package/dist/detect/structural/dangerous-functions/index.js +1193 -0
  120. package/dist/detect/structural/dangerous-functions/index.js.map +1 -0
  121. package/dist/detect/structural/dangerous-functions/json-parse.d.ts +31 -0
  122. package/dist/detect/structural/dangerous-functions/json-parse.d.ts.map +1 -0
  123. package/dist/detect/structural/dangerous-functions/json-parse.js +326 -0
  124. package/dist/detect/structural/dangerous-functions/json-parse.js.map +1 -0
  125. package/dist/detect/structural/dangerous-functions/math-random.d.ts +111 -0
  126. package/dist/detect/structural/dangerous-functions/math-random.d.ts.map +1 -0
  127. package/dist/detect/structural/dangerous-functions/math-random.js +684 -0
  128. package/dist/detect/structural/dangerous-functions/math-random.js.map +1 -0
  129. package/dist/detect/structural/dangerous-functions/patterns.d.ts +21 -0
  130. package/dist/detect/structural/dangerous-functions/patterns.d.ts.map +1 -0
  131. package/dist/detect/structural/dangerous-functions/patterns.js +163 -0
  132. package/dist/detect/structural/dangerous-functions/patterns.js.map +1 -0
  133. package/dist/detect/structural/dangerous-functions/request-validation.d.ts +13 -0
  134. package/dist/detect/structural/dangerous-functions/request-validation.d.ts.map +1 -0
  135. package/dist/detect/structural/dangerous-functions/request-validation.js +126 -0
  136. package/dist/detect/structural/dangerous-functions/request-validation.js.map +1 -0
  137. package/dist/detect/structural/dangerous-functions/utils/control-flow.d.ts +24 -0
  138. package/dist/detect/structural/dangerous-functions/utils/control-flow.d.ts.map +1 -0
  139. package/dist/detect/structural/dangerous-functions/utils/control-flow.js +70 -0
  140. package/dist/detect/structural/dangerous-functions/utils/control-flow.js.map +1 -0
  141. package/dist/detect/structural/dangerous-functions/utils/helpers.d.ts +31 -0
  142. package/dist/detect/structural/dangerous-functions/utils/helpers.d.ts.map +1 -0
  143. package/dist/detect/structural/dangerous-functions/utils/helpers.js +147 -0
  144. package/dist/detect/structural/dangerous-functions/utils/helpers.js.map +1 -0
  145. package/dist/detect/structural/dangerous-functions/utils/index.d.ts +9 -0
  146. package/dist/detect/structural/dangerous-functions/utils/index.d.ts.map +1 -0
  147. package/dist/detect/structural/dangerous-functions/utils/index.js +23 -0
  148. package/dist/detect/structural/dangerous-functions/utils/index.js.map +1 -0
  149. package/dist/detect/structural/dangerous-functions/utils/schema-validation.d.ts +22 -0
  150. package/dist/detect/structural/dangerous-functions/utils/schema-validation.d.ts.map +1 -0
  151. package/dist/detect/structural/dangerous-functions/utils/schema-validation.js +102 -0
  152. package/dist/detect/structural/dangerous-functions/utils/schema-validation.js.map +1 -0
  153. package/dist/detect/structural/data-exposure.d.ts +19 -0
  154. package/dist/detect/structural/data-exposure.d.ts.map +1 -0
  155. package/dist/detect/structural/data-exposure.js +262 -0
  156. package/dist/detect/structural/data-exposure.js.map +1 -0
  157. package/dist/detect/structural/framework-checks.d.ts +10 -0
  158. package/dist/detect/structural/framework-checks.d.ts.map +1 -0
  159. package/dist/detect/structural/framework-checks.js +389 -0
  160. package/dist/detect/structural/framework-checks.js.map +1 -0
  161. package/dist/detect/structural/index.d.ts +71 -0
  162. package/dist/detect/structural/index.d.ts.map +1 -0
  163. package/dist/detect/structural/index.js +510 -0
  164. package/dist/detect/structural/index.js.map +1 -0
  165. package/dist/detect/structural/log-injection.d.ts +18 -0
  166. package/dist/detect/structural/log-injection.d.ts.map +1 -0
  167. package/dist/detect/structural/log-injection.js +217 -0
  168. package/dist/detect/structural/log-injection.js.map +1 -0
  169. package/dist/detect/structural/logic-gates.d.ts +10 -0
  170. package/dist/detect/structural/logic-gates.d.ts.map +1 -0
  171. package/dist/detect/structural/logic-gates.js +227 -0
  172. package/dist/detect/structural/logic-gates.js.map +1 -0
  173. package/dist/detect/structural/risky-imports.d.ts +10 -0
  174. package/dist/detect/structural/risky-imports.d.ts.map +1 -0
  175. package/dist/detect/structural/risky-imports.js +168 -0
  176. package/dist/detect/structural/risky-imports.js.map +1 -0
  177. package/dist/detect/structural/security-headers.d.ts +18 -0
  178. package/dist/detect/structural/security-headers.d.ts.map +1 -0
  179. package/dist/detect/structural/security-headers.js +196 -0
  180. package/dist/detect/structural/security-headers.js.map +1 -0
  181. package/dist/detect/structural/ssrf-detection.d.ts +18 -0
  182. package/dist/detect/structural/ssrf-detection.d.ts.map +1 -0
  183. package/dist/detect/structural/ssrf-detection.js +263 -0
  184. package/dist/detect/structural/ssrf-detection.js.map +1 -0
  185. package/dist/detect/structural/variables.d.ts +11 -0
  186. package/dist/detect/structural/variables.d.ts.map +1 -0
  187. package/dist/detect/structural/variables.js +159 -0
  188. package/dist/detect/structural/variables.js.map +1 -0
  189. package/dist/detect/structural/xxe-detection.d.ts +18 -0
  190. package/dist/detect/structural/xxe-detection.d.ts.map +1 -0
  191. package/dist/detect/structural/xxe-detection.js +245 -0
  192. package/dist/detect/structural/xxe-detection.js.map +1 -0
  193. package/dist/index.d.ts +17 -64
  194. package/dist/index.d.ts.map +1 -1
  195. package/dist/index.js +49 -1034
  196. package/dist/index.js.map +1 -1
  197. package/dist/layer2/framework-checks.d.ts.map +1 -1
  198. package/dist/layer2/framework-checks.js +1 -8
  199. package/dist/layer2/framework-checks.js.map +1 -1
  200. package/dist/layer2/index.d.ts +4 -0
  201. package/dist/layer2/index.d.ts.map +1 -1
  202. package/dist/layer2/index.js +50 -1
  203. package/dist/layer2/index.js.map +1 -1
  204. package/dist/layer2/log-injection.d.ts +18 -0
  205. package/dist/layer2/log-injection.d.ts.map +1 -0
  206. package/dist/layer2/log-injection.js +214 -0
  207. package/dist/layer2/log-injection.js.map +1 -0
  208. package/dist/layer2/security-headers.d.ts +18 -0
  209. package/dist/layer2/security-headers.d.ts.map +1 -0
  210. package/dist/layer2/security-headers.js +187 -0
  211. package/dist/layer2/security-headers.js.map +1 -0
  212. package/dist/layer2/ssrf-detection.d.ts +18 -0
  213. package/dist/layer2/ssrf-detection.d.ts.map +1 -0
  214. package/dist/layer2/ssrf-detection.js +252 -0
  215. package/dist/layer2/ssrf-detection.js.map +1 -0
  216. package/dist/layer2/xxe-detection.d.ts +18 -0
  217. package/dist/layer2/xxe-detection.d.ts.map +1 -0
  218. package/dist/layer2/xxe-detection.js +242 -0
  219. package/dist/layer2/xxe-detection.js.map +1 -0
  220. package/dist/layer3/anthropic/prompts/index.d.ts +1 -1
  221. package/dist/layer3/anthropic/prompts/index.d.ts.map +1 -1
  222. package/dist/layer3/anthropic/prompts/index.js +3 -1
  223. package/dist/layer3/anthropic/prompts/index.js.map +1 -1
  224. package/dist/layer3/anthropic/prompts/modules/ai-patterns.d.ts +19 -0
  225. package/dist/layer3/anthropic/prompts/modules/ai-patterns.d.ts.map +1 -0
  226. package/dist/layer3/anthropic/prompts/modules/ai-patterns.js +156 -0
  227. package/dist/layer3/anthropic/prompts/modules/ai-patterns.js.map +1 -0
  228. package/dist/layer3/anthropic/prompts/modules/auth-access.d.ts +9 -0
  229. package/dist/layer3/anthropic/prompts/modules/auth-access.d.ts.map +1 -0
  230. package/dist/layer3/anthropic/prompts/modules/auth-access.js +25 -0
  231. package/dist/layer3/anthropic/prompts/modules/auth-access.js.map +1 -0
  232. package/dist/layer3/anthropic/prompts/modules/common.d.ts +11 -0
  233. package/dist/layer3/anthropic/prompts/modules/common.d.ts.map +1 -0
  234. package/dist/layer3/anthropic/prompts/modules/common.js +152 -0
  235. package/dist/layer3/anthropic/prompts/modules/common.js.map +1 -0
  236. package/dist/layer3/anthropic/prompts/modules/index.d.ts +54 -0
  237. package/dist/layer3/anthropic/prompts/modules/index.d.ts.map +1 -0
  238. package/dist/layer3/anthropic/prompts/modules/index.js +185 -0
  239. package/dist/layer3/anthropic/prompts/modules/index.js.map +1 -0
  240. package/dist/layer3/anthropic/prompts/modules/owasp-classic.d.ts +8 -0
  241. package/dist/layer3/anthropic/prompts/modules/owasp-classic.d.ts.map +1 -0
  242. package/dist/layer3/anthropic/prompts/modules/owasp-classic.js +84 -0
  243. package/dist/layer3/anthropic/prompts/modules/owasp-classic.js.map +1 -0
  244. package/dist/layer3/anthropic/prompts/modules/secrets-crypto.d.ts +8 -0
  245. package/dist/layer3/anthropic/prompts/modules/secrets-crypto.d.ts.map +1 -0
  246. package/dist/layer3/anthropic/prompts/modules/secrets-crypto.js +68 -0
  247. package/dist/layer3/anthropic/prompts/modules/secrets-crypto.js.map +1 -0
  248. package/dist/layer3/anthropic/prompts/modules/xss-prompt.d.ts +8 -0
  249. package/dist/layer3/anthropic/prompts/modules/xss-prompt.d.ts.map +1 -0
  250. package/dist/layer3/anthropic/prompts/modules/xss-prompt.js +22 -0
  251. package/dist/layer3/anthropic/prompts/modules/xss-prompt.js.map +1 -0
  252. package/dist/layer3/anthropic/prompts/validation.d.ts +9 -3
  253. package/dist/layer3/anthropic/prompts/validation.d.ts.map +1 -1
  254. package/dist/layer3/anthropic/prompts/validation.js +14 -410
  255. package/dist/layer3/anthropic/prompts/validation.js.map +1 -1
  256. package/dist/layer3/anthropic/providers/anthropic.d.ts.map +1 -1
  257. package/dist/layer3/anthropic/providers/anthropic.js +6 -3
  258. package/dist/layer3/anthropic/providers/anthropic.js.map +1 -1
  259. package/dist/layer3/anthropic/providers/openai.d.ts.map +1 -1
  260. package/dist/layer3/anthropic/providers/openai.js +6 -3
  261. package/dist/layer3/anthropic/providers/openai.js.map +1 -1
  262. package/dist/layer3/anthropic/request-builder.d.ts +11 -4
  263. package/dist/layer3/anthropic/request-builder.d.ts.map +1 -1
  264. package/dist/layer3/anthropic/request-builder.js +32 -16
  265. package/dist/layer3/anthropic/request-builder.js.map +1 -1
  266. package/dist/layer3/anthropic/utils/context-extractor.d.ts +55 -0
  267. package/dist/layer3/anthropic/utils/context-extractor.d.ts.map +1 -0
  268. package/dist/layer3/anthropic/utils/context-extractor.js +161 -0
  269. package/dist/layer3/anthropic/utils/context-extractor.js.map +1 -0
  270. package/dist/layer3/anthropic/utils/index.d.ts +2 -0
  271. package/dist/layer3/anthropic/utils/index.d.ts.map +1 -1
  272. package/dist/layer3/anthropic/utils/index.js +4 -1
  273. package/dist/layer3/anthropic/utils/index.js.map +1 -1
  274. package/dist/model/auth-helper-detector.d.ts +56 -0
  275. package/dist/model/auth-helper-detector.d.ts.map +1 -0
  276. package/dist/model/auth-helper-detector.js +360 -0
  277. package/dist/model/auth-helper-detector.js.map +1 -0
  278. package/dist/model/cross-file-taint.d.ts +40 -0
  279. package/dist/model/cross-file-taint.d.ts.map +1 -0
  280. package/dist/model/cross-file-taint.js +290 -0
  281. package/dist/model/cross-file-taint.js.map +1 -0
  282. package/dist/model/framework-models/django.d.ts +9 -0
  283. package/dist/model/framework-models/django.d.ts.map +1 -0
  284. package/dist/model/framework-models/django.js +82 -0
  285. package/dist/model/framework-models/django.js.map +1 -0
  286. package/dist/model/framework-models/express.d.ts +9 -0
  287. package/dist/model/framework-models/express.d.ts.map +1 -0
  288. package/dist/model/framework-models/express.js +52 -0
  289. package/dist/model/framework-models/express.js.map +1 -0
  290. package/dist/model/framework-models/index.d.ts +20 -0
  291. package/dist/model/framework-models/index.d.ts.map +1 -0
  292. package/dist/model/framework-models/index.js +102 -0
  293. package/dist/model/framework-models/index.js.map +1 -0
  294. package/dist/model/framework-models/nextjs.d.ts +9 -0
  295. package/dist/model/framework-models/nextjs.d.ts.map +1 -0
  296. package/dist/model/framework-models/nextjs.js +71 -0
  297. package/dist/model/framework-models/nextjs.js.map +1 -0
  298. package/dist/model/framework-models/prisma.d.ts +10 -0
  299. package/dist/model/framework-models/prisma.d.ts.map +1 -0
  300. package/dist/model/framework-models/prisma.js +54 -0
  301. package/dist/model/framework-models/prisma.js.map +1 -0
  302. package/dist/model/framework-models/react.d.ts +9 -0
  303. package/dist/model/framework-models/react.d.ts.map +1 -0
  304. package/dist/model/framework-models/react.js +67 -0
  305. package/dist/model/framework-models/react.js.map +1 -0
  306. package/dist/model/framework-models/sequelize.d.ts +9 -0
  307. package/dist/model/framework-models/sequelize.d.ts.map +1 -0
  308. package/dist/model/framework-models/sequelize.js +62 -0
  309. package/dist/model/framework-models/sequelize.js.map +1 -0
  310. package/dist/model/framework-models/types.d.ts +43 -0
  311. package/dist/model/framework-models/types.d.ts.map +1 -0
  312. package/dist/model/framework-models/types.js +10 -0
  313. package/dist/model/framework-models/types.js.map +1 -0
  314. package/dist/model/function-classifier.d.ts +32 -0
  315. package/dist/model/function-classifier.d.ts.map +1 -0
  316. package/dist/model/function-classifier.js +143 -0
  317. package/dist/model/function-classifier.js.map +1 -0
  318. package/dist/model/import-resolver.d.ts +45 -0
  319. package/dist/model/import-resolver.d.ts.map +1 -0
  320. package/dist/model/import-resolver.js +410 -0
  321. package/dist/model/import-resolver.js.map +1 -0
  322. package/dist/model/imported-auth-detector.d.ts +38 -0
  323. package/dist/model/imported-auth-detector.d.ts.map +1 -0
  324. package/dist/model/imported-auth-detector.js +199 -0
  325. package/dist/model/imported-auth-detector.js.map +1 -0
  326. package/dist/model/index.d.ts +63 -0
  327. package/dist/model/index.d.ts.map +1 -0
  328. package/dist/model/index.js +272 -0
  329. package/dist/model/index.js.map +1 -0
  330. package/dist/model/middleware-detector.d.ts +55 -0
  331. package/dist/model/middleware-detector.d.ts.map +1 -0
  332. package/dist/model/middleware-detector.js +382 -0
  333. package/dist/model/middleware-detector.js.map +1 -0
  334. package/dist/model/module-graph.d.ts +46 -0
  335. package/dist/model/module-graph.d.ts.map +1 -0
  336. package/dist/model/module-graph.js +187 -0
  337. package/dist/model/module-graph.js.map +1 -0
  338. package/dist/model/oauth-flow-detector.d.ts +41 -0
  339. package/dist/model/oauth-flow-detector.d.ts.map +1 -0
  340. package/dist/model/oauth-flow-detector.js +202 -0
  341. package/dist/model/oauth-flow-detector.js.map +1 -0
  342. package/dist/model/project-context.d.ts +119 -0
  343. package/dist/model/project-context.d.ts.map +1 -0
  344. package/dist/model/project-context.js +534 -0
  345. package/dist/model/project-context.js.map +1 -0
  346. package/dist/model/route-auth-resolver.d.ts +27 -0
  347. package/dist/model/route-auth-resolver.d.ts.map +1 -0
  348. package/dist/model/route-auth-resolver.js +182 -0
  349. package/dist/model/route-auth-resolver.js.map +1 -0
  350. package/dist/model/route-discovery/express.d.ts +25 -0
  351. package/dist/model/route-discovery/express.d.ts.map +1 -0
  352. package/dist/model/route-discovery/express.js +225 -0
  353. package/dist/model/route-discovery/express.js.map +1 -0
  354. package/dist/model/route-discovery/index.d.ts +21 -0
  355. package/dist/model/route-discovery/index.d.ts.map +1 -0
  356. package/dist/model/route-discovery/index.js +67 -0
  357. package/dist/model/route-discovery/index.js.map +1 -0
  358. package/dist/model/route-discovery/nextjs.d.ts +16 -0
  359. package/dist/model/route-discovery/nextjs.d.ts.map +1 -0
  360. package/dist/model/route-discovery/nextjs.js +179 -0
  361. package/dist/model/route-discovery/nextjs.js.map +1 -0
  362. package/dist/model/route-discovery/python.d.ts +16 -0
  363. package/dist/model/route-discovery/python.d.ts.map +1 -0
  364. package/dist/model/route-discovery/python.js +181 -0
  365. package/dist/model/route-discovery/python.js.map +1 -0
  366. package/dist/model/route-discovery/types.d.ts +36 -0
  367. package/dist/model/route-discovery/types.d.ts.map +1 -0
  368. package/dist/model/route-discovery/types.js +16 -0
  369. package/dist/model/route-discovery/types.js.map +1 -0
  370. package/dist/model/route-discovery/utils.d.ts +18 -0
  371. package/dist/model/route-discovery/utils.d.ts.map +1 -0
  372. package/dist/model/route-discovery/utils.js +55 -0
  373. package/dist/model/route-discovery/utils.js.map +1 -0
  374. package/dist/model/route-hierarchy.d.ts +50 -0
  375. package/dist/model/route-hierarchy.d.ts.map +1 -0
  376. package/dist/model/route-hierarchy.js +226 -0
  377. package/dist/model/route-hierarchy.js.map +1 -0
  378. package/dist/model/sanitiser-detection.d.ts +27 -0
  379. package/dist/model/sanitiser-detection.d.ts.map +1 -0
  380. package/dist/model/sanitiser-detection.js +224 -0
  381. package/dist/model/sanitiser-detection.js.map +1 -0
  382. package/dist/model/sink-matcher.d.ts +17 -0
  383. package/dist/model/sink-matcher.d.ts.map +1 -0
  384. package/dist/model/sink-matcher.js +141 -0
  385. package/dist/model/sink-matcher.js.map +1 -0
  386. package/dist/model/sink-patterns.d.ts +19 -0
  387. package/dist/model/sink-patterns.d.ts.map +1 -0
  388. package/dist/model/sink-patterns.js +88 -0
  389. package/dist/model/sink-patterns.js.map +1 -0
  390. package/dist/model/source-discovery.d.ts +15 -0
  391. package/dist/model/source-discovery.d.ts.map +1 -0
  392. package/dist/model/source-discovery.js +170 -0
  393. package/dist/model/source-discovery.js.map +1 -0
  394. package/dist/model/taint-tracker.d.ts +21 -0
  395. package/dist/model/taint-tracker.d.ts.map +1 -0
  396. package/dist/model/taint-tracker.js +281 -0
  397. package/dist/model/taint-tracker.js.map +1 -0
  398. package/dist/model/taint-types.d.ts +74 -0
  399. package/dist/model/taint-types.d.ts.map +1 -0
  400. package/dist/model/taint-types.js +9 -0
  401. package/dist/model/taint-types.js.map +1 -0
  402. package/dist/model/trpc-analyzer.d.ts +78 -0
  403. package/dist/model/trpc-analyzer.d.ts.map +1 -0
  404. package/dist/model/trpc-analyzer.js +297 -0
  405. package/dist/model/trpc-analyzer.js.map +1 -0
  406. package/dist/parse/file-classifier.d.ts +228 -0
  407. package/dist/parse/file-classifier.d.ts.map +1 -0
  408. package/dist/parse/file-classifier.js +933 -0
  409. package/dist/parse/file-classifier.js.map +1 -0
  410. package/dist/parse/path-exclusions.d.ts +55 -0
  411. package/dist/parse/path-exclusions.d.ts.map +1 -0
  412. package/dist/parse/path-exclusions.js +224 -0
  413. package/dist/parse/path-exclusions.js.map +1 -0
  414. package/dist/pipeline/config.d.ts +39 -0
  415. package/dist/pipeline/config.d.ts.map +1 -0
  416. package/dist/pipeline/config.js +46 -0
  417. package/dist/pipeline/config.js.map +1 -0
  418. package/dist/pipeline/index.d.ts +34 -0
  419. package/dist/pipeline/index.d.ts.map +1 -0
  420. package/dist/pipeline/index.js +377 -0
  421. package/dist/pipeline/index.js.map +1 -0
  422. package/dist/pipeline/modes/incremental.d.ts +66 -0
  423. package/dist/pipeline/modes/incremental.d.ts.map +1 -0
  424. package/dist/pipeline/modes/incremental.js +200 -0
  425. package/dist/pipeline/modes/incremental.js.map +1 -0
  426. package/dist/postprocess/aggregation.d.ts +14 -0
  427. package/dist/postprocess/aggregation.d.ts.map +1 -0
  428. package/dist/postprocess/aggregation.js +63 -0
  429. package/dist/postprocess/aggregation.js.map +1 -0
  430. package/dist/postprocess/contradictions.d.ts +18 -0
  431. package/dist/postprocess/contradictions.d.ts.map +1 -0
  432. package/dist/postprocess/contradictions.js +99 -0
  433. package/dist/postprocess/contradictions.js.map +1 -0
  434. package/dist/postprocess/dedup.d.ts +13 -0
  435. package/dist/postprocess/dedup.d.ts.map +1 -0
  436. package/dist/postprocess/dedup.js +58 -0
  437. package/dist/postprocess/dedup.js.map +1 -0
  438. package/dist/postprocess/filtering/context-adjustments.d.ts +23 -0
  439. package/dist/postprocess/filtering/context-adjustments.d.ts.map +1 -0
  440. package/dist/postprocess/filtering/context-adjustments.js +100 -0
  441. package/dist/postprocess/filtering/context-adjustments.js.map +1 -0
  442. package/dist/postprocess/filtering/index.d.ts +3 -0
  443. package/dist/postprocess/filtering/index.d.ts.map +1 -0
  444. package/dist/postprocess/filtering/index.js +8 -0
  445. package/dist/postprocess/filtering/index.js.map +1 -0
  446. package/dist/postprocess/filtering/pipeline.d.ts +48 -0
  447. package/dist/postprocess/filtering/pipeline.d.ts.map +1 -0
  448. package/dist/postprocess/filtering/pipeline.js +76 -0
  449. package/dist/postprocess/filtering/pipeline.js.map +1 -0
  450. package/dist/postprocess/index.d.ts +41 -0
  451. package/dist/postprocess/index.d.ts.map +1 -0
  452. package/dist/postprocess/index.js +85 -0
  453. package/dist/postprocess/index.js.map +1 -0
  454. package/dist/postprocess/suppression/config-loader.d.ts +74 -0
  455. package/dist/postprocess/suppression/config-loader.d.ts.map +1 -0
  456. package/dist/postprocess/suppression/config-loader.js +424 -0
  457. package/dist/postprocess/suppression/config-loader.js.map +1 -0
  458. package/dist/postprocess/suppression/hash.d.ts +48 -0
  459. package/dist/postprocess/suppression/hash.d.ts.map +1 -0
  460. package/dist/postprocess/suppression/hash.js +88 -0
  461. package/dist/postprocess/suppression/hash.js.map +1 -0
  462. package/dist/postprocess/suppression/index.d.ts +11 -0
  463. package/dist/postprocess/suppression/index.d.ts.map +1 -0
  464. package/dist/postprocess/suppression/index.js +39 -0
  465. package/dist/postprocess/suppression/index.js.map +1 -0
  466. package/dist/postprocess/suppression/inline-parser.d.ts +39 -0
  467. package/dist/postprocess/suppression/inline-parser.d.ts.map +1 -0
  468. package/dist/postprocess/suppression/inline-parser.js +218 -0
  469. package/dist/postprocess/suppression/inline-parser.js.map +1 -0
  470. package/dist/postprocess/suppression/manager.d.ts +94 -0
  471. package/dist/postprocess/suppression/manager.d.ts.map +1 -0
  472. package/dist/postprocess/suppression/manager.js +292 -0
  473. package/dist/postprocess/suppression/manager.js.map +1 -0
  474. package/dist/postprocess/suppression/types.d.ts +151 -0
  475. package/dist/postprocess/suppression/types.d.ts.map +1 -0
  476. package/dist/postprocess/suppression/types.js +28 -0
  477. package/dist/postprocess/suppression/types.js.map +1 -0
  478. package/dist/postprocess/validation-cap.d.ts +17 -0
  479. package/dist/postprocess/validation-cap.d.ts.map +1 -0
  480. package/dist/postprocess/validation-cap.js +64 -0
  481. package/dist/postprocess/validation-cap.js.map +1 -0
  482. package/dist/report/build-result.d.ts +33 -0
  483. package/dist/report/build-result.d.ts.map +1 -0
  484. package/dist/report/build-result.js +59 -0
  485. package/dist/report/build-result.js.map +1 -0
  486. package/dist/report/enrichment.d.ts +19 -0
  487. package/dist/report/enrichment.d.ts.map +1 -0
  488. package/dist/report/enrichment.js +44 -0
  489. package/dist/report/enrichment.js.map +1 -0
  490. package/dist/report/formatters/ai-context.d.ts +23 -0
  491. package/dist/report/formatters/ai-context.d.ts.map +1 -0
  492. package/dist/report/formatters/ai-context.js +238 -0
  493. package/dist/report/formatters/ai-context.js.map +1 -0
  494. package/dist/report/formatters/cli-terminal.d.ts +65 -0
  495. package/dist/report/formatters/cli-terminal.d.ts.map +1 -0
  496. package/dist/report/formatters/cli-terminal.js +735 -0
  497. package/dist/report/formatters/cli-terminal.js.map +1 -0
  498. package/dist/report/formatters/github-comment.d.ts +41 -0
  499. package/dist/report/formatters/github-comment.d.ts.map +1 -0
  500. package/dist/report/formatters/github-comment.js +370 -0
  501. package/dist/report/formatters/github-comment.js.map +1 -0
  502. package/dist/report/formatters/grouping.d.ts +52 -0
  503. package/dist/report/formatters/grouping.d.ts.map +1 -0
  504. package/dist/report/formatters/grouping.js +152 -0
  505. package/dist/report/formatters/grouping.js.map +1 -0
  506. package/dist/report/formatters/ide/claude-code.d.ts +17 -0
  507. package/dist/report/formatters/ide/claude-code.d.ts.map +1 -0
  508. package/dist/report/formatters/ide/claude-code.js +94 -0
  509. package/dist/report/formatters/ide/claude-code.js.map +1 -0
  510. package/dist/report/formatters/ide/cursor.d.ts +13 -0
  511. package/dist/report/formatters/ide/cursor.d.ts.map +1 -0
  512. package/dist/report/formatters/ide/cursor.js +125 -0
  513. package/dist/report/formatters/ide/cursor.js.map +1 -0
  514. package/dist/report/formatters/ide/index.d.ts +62 -0
  515. package/dist/report/formatters/ide/index.d.ts.map +1 -0
  516. package/dist/report/formatters/ide/index.js +184 -0
  517. package/dist/report/formatters/ide/index.js.map +1 -0
  518. package/dist/report/formatters/ide/windsurf.d.ts +13 -0
  519. package/dist/report/formatters/ide/windsurf.d.ts.map +1 -0
  520. package/dist/report/formatters/ide/windsurf.js +117 -0
  521. package/dist/report/formatters/ide/windsurf.js.map +1 -0
  522. package/dist/report/formatters/index.d.ts +11 -0
  523. package/dist/report/formatters/index.d.ts.map +1 -0
  524. package/dist/report/formatters/index.js +54 -0
  525. package/dist/report/formatters/index.js.map +1 -0
  526. package/dist/report/formatters/vscode-diagnostic.d.ts +103 -0
  527. package/dist/report/formatters/vscode-diagnostic.d.ts.map +1 -0
  528. package/dist/report/formatters/vscode-diagnostic.js +151 -0
  529. package/dist/report/formatters/vscode-diagnostic.js.map +1 -0
  530. package/dist/report/summary.d.ts +27 -0
  531. package/dist/report/summary.d.ts.map +1 -0
  532. package/dist/report/summary.js +57 -0
  533. package/dist/report/summary.js.map +1 -0
  534. package/dist/rules/metadata.d.ts.map +1 -1
  535. package/dist/rules/metadata.js +66 -0
  536. package/dist/rules/metadata.js.map +1 -1
  537. package/dist/score/adjustments.d.ts +22 -0
  538. package/dist/score/adjustments.d.ts.map +1 -0
  539. package/dist/score/adjustments.js +373 -0
  540. package/dist/score/adjustments.js.map +1 -0
  541. package/dist/score/auto-dismiss.d.ts +28 -0
  542. package/dist/score/auto-dismiss.d.ts.map +1 -0
  543. package/dist/score/auto-dismiss.js +200 -0
  544. package/dist/score/auto-dismiss.js.map +1 -0
  545. package/dist/score/confidence.d.ts +19 -0
  546. package/dist/score/confidence.d.ts.map +1 -0
  547. package/dist/score/confidence.js +52 -0
  548. package/dist/score/confidence.js.map +1 -0
  549. package/dist/score/index.d.ts +61 -0
  550. package/dist/score/index.d.ts.map +1 -0
  551. package/dist/score/index.js +250 -0
  552. package/dist/score/index.js.map +1 -0
  553. package/dist/score/types.d.ts +160 -0
  554. package/dist/score/types.d.ts.map +1 -0
  555. package/dist/score/types.js +14 -0
  556. package/dist/score/types.js.map +1 -0
  557. package/dist/shared/ai-context/index.d.ts +6 -0
  558. package/dist/shared/ai-context/index.d.ts.map +1 -0
  559. package/dist/shared/ai-context/index.js +13 -0
  560. package/dist/shared/ai-context/index.js.map +1 -0
  561. package/dist/shared/ai-context/manager.d.ts +67 -0
  562. package/dist/shared/ai-context/manager.d.ts.map +1 -0
  563. package/dist/shared/ai-context/manager.js +104 -0
  564. package/dist/shared/ai-context/manager.js.map +1 -0
  565. package/dist/shared/baseline/diff.d.ts +32 -0
  566. package/dist/shared/baseline/diff.d.ts.map +1 -0
  567. package/dist/shared/baseline/diff.js +119 -0
  568. package/dist/shared/baseline/diff.js.map +1 -0
  569. package/dist/shared/baseline/index.d.ts +9 -0
  570. package/dist/shared/baseline/index.d.ts.map +1 -0
  571. package/dist/shared/baseline/index.js +19 -0
  572. package/dist/shared/baseline/index.js.map +1 -0
  573. package/dist/shared/baseline/manager.d.ts +67 -0
  574. package/dist/shared/baseline/manager.d.ts.map +1 -0
  575. package/dist/shared/baseline/manager.js +180 -0
  576. package/dist/shared/baseline/manager.js.map +1 -0
  577. package/dist/shared/baseline/types.d.ts +91 -0
  578. package/dist/shared/baseline/types.d.ts.map +1 -0
  579. package/dist/shared/baseline/types.js +12 -0
  580. package/dist/shared/baseline/types.js.map +1 -0
  581. package/dist/shared/category-filter.d.ts +125 -0
  582. package/dist/shared/category-filter.d.ts.map +1 -0
  583. package/dist/shared/category-filter.js +360 -0
  584. package/dist/shared/category-filter.js.map +1 -0
  585. package/dist/shared/code-analysis.d.ts +39 -0
  586. package/dist/shared/code-analysis.d.ts.map +1 -0
  587. package/dist/shared/code-analysis.js +159 -0
  588. package/dist/shared/code-analysis.js.map +1 -0
  589. package/dist/shared/comment-analyzer.d.ts +38 -0
  590. package/dist/shared/comment-analyzer.d.ts.map +1 -0
  591. package/dist/shared/comment-analyzer.js +218 -0
  592. package/dist/shared/comment-analyzer.js.map +1 -0
  593. package/dist/shared/diff-detector.d.ts +53 -0
  594. package/dist/shared/diff-detector.d.ts.map +1 -0
  595. package/dist/shared/diff-detector.js +104 -0
  596. package/dist/shared/diff-detector.js.map +1 -0
  597. package/dist/shared/diff-parser.d.ts +80 -0
  598. package/dist/shared/diff-parser.d.ts.map +1 -0
  599. package/dist/shared/diff-parser.js +202 -0
  600. package/dist/shared/diff-parser.js.map +1 -0
  601. package/dist/shared/environment-context.d.ts +76 -0
  602. package/dist/shared/environment-context.d.ts.map +1 -0
  603. package/dist/shared/environment-context.js +271 -0
  604. package/dist/shared/environment-context.js.map +1 -0
  605. package/dist/shared/intent-detector.d.ts +66 -0
  606. package/dist/shared/intent-detector.d.ts.map +1 -0
  607. package/dist/shared/intent-detector.js +282 -0
  608. package/dist/shared/intent-detector.js.map +1 -0
  609. package/dist/shared/parsed-file.d.ts +51 -0
  610. package/dist/shared/parsed-file.d.ts.map +1 -0
  611. package/dist/shared/parsed-file.js +95 -0
  612. package/dist/shared/parsed-file.js.map +1 -0
  613. package/dist/shared/registry-clients.d.ts +93 -0
  614. package/dist/shared/registry-clients.d.ts.map +1 -0
  615. package/dist/shared/registry-clients.js +273 -0
  616. package/dist/shared/registry-clients.js.map +1 -0
  617. package/dist/shared/rules/framework-fixes.d.ts +48 -0
  618. package/dist/shared/rules/framework-fixes.d.ts.map +1 -0
  619. package/dist/shared/rules/framework-fixes.js +439 -0
  620. package/dist/shared/rules/framework-fixes.js.map +1 -0
  621. package/dist/shared/rules/index.d.ts +8 -0
  622. package/dist/shared/rules/index.d.ts.map +1 -0
  623. package/dist/shared/rules/index.js +18 -0
  624. package/dist/shared/rules/index.js.map +1 -0
  625. package/dist/shared/rules/metadata.d.ts +43 -0
  626. package/dist/shared/rules/metadata.d.ts.map +1 -0
  627. package/dist/shared/rules/metadata.js +819 -0
  628. package/dist/shared/rules/metadata.js.map +1 -0
  629. package/dist/shared/schema-semantics.d.ts +45 -0
  630. package/dist/shared/schema-semantics.d.ts.map +1 -0
  631. package/dist/shared/schema-semantics.js +193 -0
  632. package/dist/shared/schema-semantics.js.map +1 -0
  633. package/dist/shared/types.d.ts +337 -0
  634. package/dist/shared/types.d.ts.map +1 -0
  635. package/dist/shared/types.js +126 -0
  636. package/dist/shared/types.js.map +1 -0
  637. package/dist/tiers.d.ts +2 -2
  638. package/dist/tiers.d.ts.map +1 -1
  639. package/dist/tiers.js +10 -0
  640. package/dist/tiers.js.map +1 -1
  641. package/dist/types.d.ts +1 -1
  642. package/dist/types.d.ts.map +1 -1
  643. package/dist/types.js.map +1 -1
  644. package/dist/validate/clients.d.ts +44 -0
  645. package/dist/validate/clients.d.ts.map +1 -0
  646. package/dist/validate/clients.js +81 -0
  647. package/dist/validate/clients.js.map +1 -0
  648. package/dist/validate/index.d.ts +41 -0
  649. package/dist/validate/index.d.ts.map +1 -0
  650. package/dist/validate/index.js +141 -0
  651. package/dist/validate/index.js.map +1 -0
  652. package/dist/validate/prompts/index.d.ts +8 -0
  653. package/dist/validate/prompts/index.d.ts.map +1 -0
  654. package/dist/validate/prompts/index.js +16 -0
  655. package/dist/validate/prompts/index.js.map +1 -0
  656. package/dist/validate/prompts/modules/ai-patterns.d.ts +19 -0
  657. package/dist/validate/prompts/modules/ai-patterns.d.ts.map +1 -0
  658. package/dist/validate/prompts/modules/ai-patterns.js +156 -0
  659. package/dist/validate/prompts/modules/ai-patterns.js.map +1 -0
  660. package/dist/validate/prompts/modules/auth-access.d.ts +9 -0
  661. package/dist/validate/prompts/modules/auth-access.d.ts.map +1 -0
  662. package/dist/validate/prompts/modules/auth-access.js +25 -0
  663. package/dist/validate/prompts/modules/auth-access.js.map +1 -0
  664. package/dist/validate/prompts/modules/common.d.ts +11 -0
  665. package/dist/validate/prompts/modules/common.d.ts.map +1 -0
  666. package/dist/validate/prompts/modules/common.js +186 -0
  667. package/dist/validate/prompts/modules/common.js.map +1 -0
  668. package/dist/validate/prompts/modules/index.d.ts +54 -0
  669. package/dist/validate/prompts/modules/index.d.ts.map +1 -0
  670. package/dist/validate/prompts/modules/index.js +186 -0
  671. package/dist/validate/prompts/modules/index.js.map +1 -0
  672. package/dist/validate/prompts/modules/owasp-classic.d.ts +8 -0
  673. package/dist/validate/prompts/modules/owasp-classic.d.ts.map +1 -0
  674. package/dist/validate/prompts/modules/owasp-classic.js +84 -0
  675. package/dist/validate/prompts/modules/owasp-classic.js.map +1 -0
  676. package/dist/validate/prompts/modules/secrets-crypto.d.ts +8 -0
  677. package/dist/validate/prompts/modules/secrets-crypto.d.ts.map +1 -0
  678. package/dist/validate/prompts/modules/secrets-crypto.js +68 -0
  679. package/dist/validate/prompts/modules/secrets-crypto.js.map +1 -0
  680. package/dist/validate/prompts/modules/xss-prompt.d.ts +8 -0
  681. package/dist/validate/prompts/modules/xss-prompt.d.ts.map +1 -0
  682. package/dist/validate/prompts/modules/xss-prompt.js +22 -0
  683. package/dist/validate/prompts/modules/xss-prompt.js.map +1 -0
  684. package/dist/validate/prompts/semantic-analysis.d.ts +15 -0
  685. package/dist/validate/prompts/semantic-analysis.d.ts.map +1 -0
  686. package/dist/validate/prompts/semantic-analysis.js +169 -0
  687. package/dist/validate/prompts/semantic-analysis.js.map +1 -0
  688. package/dist/validate/prompts/validation.d.ts +18 -0
  689. package/dist/validate/prompts/validation.d.ts.map +1 -0
  690. package/dist/validate/prompts/validation.js +25 -0
  691. package/dist/validate/prompts/validation.js.map +1 -0
  692. package/dist/validate/providers/anthropic.d.ts +17 -0
  693. package/dist/validate/providers/anthropic.d.ts.map +1 -0
  694. package/dist/validate/providers/anthropic.js +260 -0
  695. package/dist/validate/providers/anthropic.js.map +1 -0
  696. package/dist/validate/providers/index.d.ts +8 -0
  697. package/dist/validate/providers/index.d.ts.map +1 -0
  698. package/dist/validate/providers/index.js +13 -0
  699. package/dist/validate/providers/index.js.map +1 -0
  700. package/dist/validate/providers/openai.d.ts +14 -0
  701. package/dist/validate/providers/openai.d.ts.map +1 -0
  702. package/dist/validate/providers/openai.js +336 -0
  703. package/dist/validate/providers/openai.js.map +1 -0
  704. package/dist/validate/request-builder.d.ts +61 -0
  705. package/dist/validate/request-builder.d.ts.map +1 -0
  706. package/dist/validate/request-builder.js +346 -0
  707. package/dist/validate/request-builder.js.map +1 -0
  708. package/dist/validate/types.d.ts +88 -0
  709. package/dist/validate/types.d.ts.map +1 -0
  710. package/dist/validate/types.js +38 -0
  711. package/dist/validate/types.js.map +1 -0
  712. package/dist/validate/utils/context-extractor.d.ts +55 -0
  713. package/dist/validate/utils/context-extractor.d.ts.map +1 -0
  714. package/dist/validate/utils/context-extractor.js +161 -0
  715. package/dist/validate/utils/context-extractor.js.map +1 -0
  716. package/dist/validate/utils/index.d.ts +11 -0
  717. package/dist/validate/utils/index.d.ts.map +1 -0
  718. package/dist/validate/utils/index.js +27 -0
  719. package/dist/validate/utils/index.js.map +1 -0
  720. package/dist/validate/utils/path-helpers.d.ts +21 -0
  721. package/dist/validate/utils/path-helpers.d.ts.map +1 -0
  722. package/dist/validate/utils/path-helpers.js +69 -0
  723. package/dist/validate/utils/path-helpers.js.map +1 -0
  724. package/dist/validate/utils/response-parser.d.ts +40 -0
  725. package/dist/validate/utils/response-parser.d.ts.map +1 -0
  726. package/dist/validate/utils/response-parser.js +286 -0
  727. package/dist/validate/utils/response-parser.js.map +1 -0
  728. package/dist/validate/utils/retry.d.ts +15 -0
  729. package/dist/validate/utils/retry.d.ts.map +1 -0
  730. package/dist/validate/utils/retry.js +62 -0
  731. package/dist/validate/utils/retry.js.map +1 -0
  732. package/package.json +8 -7
  733. package/src/__tests__/benchmark/fixtures/layer1/agent-skill-injection.ts +204 -0
  734. package/src/__tests__/benchmark/fixtures/layer1/index.ts +3 -0
  735. package/src/__tests__/benchmark/fixtures/layer2/index.ts +15 -0
  736. package/src/__tests__/benchmark/fixtures/layer2/log-injection.ts +147 -0
  737. package/src/__tests__/benchmark/fixtures/layer2/security-headers.ts +197 -0
  738. package/src/__tests__/benchmark/fixtures/layer2/ssrf-detection.ts +210 -0
  739. package/src/__tests__/benchmark/fixtures/layer2/xxe-detection.ts +195 -0
  740. package/src/__tests__/benchmark/run-depth-validation.ts +3 -3
  741. package/src/__tests__/benchmark/run-real-world-test.ts +4 -4
  742. package/src/__tests__/benchmark/types.ts +1 -1
  743. package/src/__tests__/benchmark/utils/test-runner.ts +3 -3
  744. package/src/__tests__/category-filter.test.ts +2 -2
  745. package/src/__tests__/context-engine/cross-file-taint.test.ts +284 -0
  746. package/src/__tests__/context-engine/framework-models.test.ts +457 -0
  747. package/src/__tests__/context-engine/function-classifier.test.ts +146 -0
  748. package/src/__tests__/context-engine/import-resolver.test.ts +328 -0
  749. package/src/__tests__/context-engine/integration.test.ts +320 -0
  750. package/src/__tests__/context-engine/module-graph.test.ts +159 -0
  751. package/src/__tests__/context-engine/route-discovery/auth-resolver.test.ts +353 -0
  752. package/src/__tests__/context-engine/route-discovery/express.test.ts +150 -0
  753. package/src/__tests__/context-engine/route-discovery/nextjs.test.ts +138 -0
  754. package/src/__tests__/context-engine/route-discovery/python.test.ts +95 -0
  755. package/src/__tests__/context-engine/sanitiser-detection.test.ts +187 -0
  756. package/src/__tests__/context-engine/sink-matcher.test.ts +251 -0
  757. package/src/__tests__/context-engine/source-discovery.test.ts +186 -0
  758. package/src/__tests__/context-engine/taint-tracker.test.ts +182 -0
  759. package/src/__tests__/regression/agent-skill-benign.test.ts +174 -0
  760. package/src/__tests__/regression/known-false-positives.test.ts +312 -4
  761. package/src/__tests__/score/adjustments.test.ts +385 -0
  762. package/src/__tests__/score/confidence.test.ts +283 -0
  763. package/src/__tests__/score/framework-scoring.test.ts +275 -0
  764. package/src/__tests__/score/route-scoring.test.ts +156 -0
  765. package/src/__tests__/score/scoring-integration.test.ts +165 -0
  766. package/src/__tests__/score/taint-adjustments.test.ts +244 -0
  767. package/src/__tests__/snapshots/__snapshots__/anthropic-validation-refactor.test.ts.snap +37 -49
  768. package/src/__tests__/snapshots/__snapshots__/dangerous-functions-refactor.test.ts.snap +52 -0
  769. package/src/__tests__/snapshots/__snapshots__/scan-depth.test.ts.snap +3 -3
  770. package/src/__tests__/snapshots/anthropic-validation-refactor.test.ts +2 -2
  771. package/src/__tests__/snapshots/dangerous-functions-refactor.test.ts +1 -1
  772. package/src/__tests__/snapshots/scan-depth.test.ts +3 -3
  773. package/src/__tests__/validate/route-annotations.test.ts +138 -0
  774. package/src/__tests__/validation/analyze-results.ts +1 -1
  775. package/src/__tests__/validation/extract-for-triage.ts +1 -1
  776. package/src/__tests__/validation/fp-deep-analysis.ts +1 -1
  777. package/src/{layer2/ai-agent-tools.ts → detect/ai-code/agent-tools.ts} +23 -3
  778. package/src/{layer2 → detect/ai-code}/byok-patterns.ts +17 -5
  779. package/src/{layer2/ai-endpoint-protection.ts → detect/ai-code/endpoint-protection.ts} +8 -4
  780. package/src/{layer2/ai-execution-sinks.ts → detect/ai-code/execution-sinks.ts} +8 -4
  781. package/src/{layer2/ai-fingerprinting.ts → detect/ai-code/fingerprinting.ts} +20 -4
  782. package/src/detect/ai-code/index.ts +11 -0
  783. package/src/{layer2/ai-mcp-security.ts → detect/ai-code/mcp-security.ts} +7 -3
  784. package/src/{layer2 → detect/ai-code}/model-supply-chain.ts +7 -3
  785. package/src/{layer2/ai-package-hallucination.ts → detect/ai-code/package-hallucination.ts} +18 -3
  786. package/src/{layer2/ai-prompt-hygiene.ts → detect/ai-code/prompt-hygiene.ts} +25 -3
  787. package/src/{layer2/ai-rag-safety.ts → detect/ai-code/rag-safety.ts} +7 -3
  788. package/src/{layer2/ai-schema-validation.ts → detect/ai-code/schema-validation.ts} +7 -3
  789. package/src/detect/config/agent-skill-injection.ts +551 -0
  790. package/src/{layer1 → detect/config}/comments.ts +6 -2
  791. package/src/{layer1 → detect/config}/file-flags.ts +9 -3
  792. package/src/detect/config/index.ts +6 -0
  793. package/src/{layer3 → detect/config}/osv-check.ts +3 -2
  794. package/src/{layer3 → detect/config}/package-check.ts +3 -2
  795. package/src/{layer1 → detect/config}/urls.ts +12 -5
  796. package/src/detect/index.ts +131 -0
  797. package/src/{layer1 → detect/secrets}/config-audit.ts +7 -2
  798. package/src/{layer1 → detect/secrets}/config-mcp-audit.ts +8 -3
  799. package/src/{layer1 → detect/secrets}/entropy.ts +23 -11
  800. package/src/{layer1 → detect/secrets}/index.ts +31 -30
  801. package/src/{layer1 → detect/secrets}/patterns.ts +10 -3
  802. package/src/{layer1 → detect/secrets}/weak-crypto.ts +7 -2
  803. package/src/{layer2/auth-antipatterns.ts → detect/structural/auth-patterns.ts} +23 -11
  804. package/src/{layer2 → detect/structural}/dangerous-functions/dom-xss.ts +1 -1
  805. package/src/{layer2 → detect/structural}/dangerous-functions/index.ts +47 -24
  806. package/src/{layer2 → detect/structural}/dangerous-functions/json-parse.ts +10 -2
  807. package/src/{layer2 → detect/structural}/dangerous-functions/math-random.ts +2 -2
  808. package/src/{layer2 → detect/structural}/dangerous-functions/patterns.ts +1 -1
  809. package/src/{layer2 → detect/structural}/dangerous-functions/request-validation.ts +10 -2
  810. package/src/{layer2 → detect/structural}/dangerous-functions/utils/control-flow.ts +2 -2
  811. package/src/{layer2 → detect/structural}/data-exposure.ts +11 -3
  812. package/src/{layer2 → detect/structural}/framework-checks.ts +10 -11
  813. package/src/{layer2 → detect/structural}/index.ts +80 -77
  814. package/src/detect/structural/log-injection.ts +254 -0
  815. package/src/{layer2 → detect/structural}/logic-gates.ts +13 -5
  816. package/src/{layer2 → detect/structural}/risky-imports.ts +7 -3
  817. package/src/detect/structural/security-headers.ts +231 -0
  818. package/src/detect/structural/ssrf-detection.ts +300 -0
  819. package/src/{layer2 → detect/structural}/variables.ts +7 -3
  820. package/src/detect/structural/xxe-detection.ts +295 -0
  821. package/src/index.ts +39 -1291
  822. package/src/{utils → model}/auth-helper-detector.ts +1 -1
  823. package/src/model/cross-file-taint.ts +374 -0
  824. package/src/model/framework-models/django.ts +82 -0
  825. package/src/model/framework-models/express.ts +54 -0
  826. package/src/model/framework-models/index.ts +116 -0
  827. package/src/model/framework-models/nextjs.ts +69 -0
  828. package/src/model/framework-models/prisma.ts +57 -0
  829. package/src/model/framework-models/react.ts +63 -0
  830. package/src/model/framework-models/sequelize.ts +63 -0
  831. package/src/model/framework-models/types.ts +46 -0
  832. package/src/model/function-classifier.ts +184 -0
  833. package/src/model/import-resolver.ts +453 -0
  834. package/src/{utils → model}/imported-auth-detector.ts +21 -85
  835. package/src/model/index.ts +353 -0
  836. package/src/{utils → model}/middleware-detector.ts +156 -17
  837. package/src/model/module-graph.ts +254 -0
  838. package/src/{utils → model}/oauth-flow-detector.ts +1 -1
  839. package/src/{utils/project-context-builder.ts → model/project-context.ts} +1 -1
  840. package/src/model/route-auth-resolver.ts +216 -0
  841. package/src/model/route-discovery/express.ts +251 -0
  842. package/src/model/route-discovery/index.ts +83 -0
  843. package/src/model/route-discovery/nextjs.ts +216 -0
  844. package/src/model/route-discovery/python.ts +214 -0
  845. package/src/model/route-discovery/types.ts +48 -0
  846. package/src/model/route-discovery/utils.ts +54 -0
  847. package/src/model/sanitiser-detection.ts +268 -0
  848. package/src/model/sink-matcher.ts +178 -0
  849. package/src/model/sink-patterns.ts +109 -0
  850. package/src/model/source-discovery.ts +209 -0
  851. package/src/model/taint-tracker.ts +333 -0
  852. package/src/model/taint-types.ts +149 -0
  853. package/src/{utils → model}/trpc-analyzer.ts +1 -1
  854. package/src/{utils/context-helpers.ts → parse/file-classifier.ts} +54 -0
  855. package/src/{utils → parse}/path-exclusions.ts +1 -1
  856. package/src/pipeline/config.ts +81 -0
  857. package/src/pipeline/index.ts +437 -0
  858. package/src/{modes → pipeline/modes}/incremental.ts +5 -5
  859. package/src/postprocess/aggregation.ts +74 -0
  860. package/src/postprocess/contradictions.ts +128 -0
  861. package/src/postprocess/dedup.ts +62 -0
  862. package/src/{filtering → postprocess/filtering}/__tests__/pipeline.test.ts +1 -1
  863. package/src/{filtering → postprocess/filtering}/context-adjustments.ts +2 -2
  864. package/src/{filtering → postprocess/filtering}/pipeline.ts +2 -2
  865. package/src/postprocess/index.ts +118 -0
  866. package/src/{suppression → postprocess/suppression}/config-loader.ts +1 -1
  867. package/src/{suppression → postprocess/suppression}/hash.ts +1 -1
  868. package/src/{suppression → postprocess/suppression}/inline-parser.ts +1 -1
  869. package/src/{suppression → postprocess/suppression}/manager.ts +1 -1
  870. package/src/{suppression → postprocess/suppression}/types.ts +2 -2
  871. package/src/postprocess/validation-cap.ts +66 -0
  872. package/src/report/build-result.ts +94 -0
  873. package/src/report/enrichment.ts +52 -0
  874. package/src/{formatters → report/formatters}/ai-context.ts +1 -1
  875. package/src/{formatters → report/formatters}/cli-terminal.ts +11 -11
  876. package/src/{formatters → report/formatters}/github-comment.ts +1 -1
  877. package/src/{formatters → report/formatters}/grouping.ts +8 -8
  878. package/src/{formatters → report/formatters}/ide/claude-code.ts +1 -1
  879. package/src/{formatters → report/formatters}/ide/cursor.ts +1 -1
  880. package/src/{formatters → report/formatters}/ide/windsurf.ts +1 -1
  881. package/src/{formatters → report/formatters}/vscode-diagnostic.ts +1 -1
  882. package/src/report/summary.ts +70 -0
  883. package/src/score/adjustments.ts +387 -0
  884. package/src/{layer3/anthropic → score}/auto-dismiss.ts +15 -14
  885. package/src/score/confidence.ts +66 -0
  886. package/src/score/index.ts +316 -0
  887. package/src/score/types.ts +187 -0
  888. package/src/{baseline → shared/baseline}/__tests__/diff.test.ts +2 -2
  889. package/src/{baseline → shared/baseline}/diff.ts +1 -1
  890. package/src/{baseline → shared/baseline}/manager.ts +1 -1
  891. package/src/{category-filter.ts → shared/category-filter.ts} +1 -1
  892. package/src/{utils → shared}/code-analysis.ts +1 -1
  893. package/src/{rules → shared/rules}/__tests__/metadata.test.ts +7 -0
  894. package/src/{rules → shared/rules}/framework-fixes.ts +1 -1
  895. package/src/{rules → shared/rules}/metadata.ts +94 -0
  896. package/src/{types.ts → shared/types.ts} +22 -5
  897. package/src/tiers.ts +18 -1
  898. package/src/validate/__tests__/context-extractor.test.ts +191 -0
  899. package/src/validate/__tests__/prompt-assembly.test.ts +233 -0
  900. package/src/validate/__tests__/request-builder.test.ts +347 -0
  901. package/src/{layer3/anthropic → validate}/index.ts +8 -7
  902. package/src/{layer3/anthropic → validate}/prompts/index.ts +2 -0
  903. package/src/validate/prompts/modules/ai-patterns.ts +153 -0
  904. package/src/validate/prompts/modules/auth-access.ts +22 -0
  905. package/src/validate/prompts/modules/common.ts +183 -0
  906. package/src/validate/prompts/modules/index.ts +204 -0
  907. package/src/validate/prompts/modules/owasp-classic.ts +81 -0
  908. package/src/validate/prompts/modules/secrets-crypto.ts +65 -0
  909. package/src/validate/prompts/modules/xss-prompt.ts +19 -0
  910. package/src/validate/prompts/validation.ts +20 -0
  911. package/src/{layer3/anthropic → validate}/providers/anthropic.ts +28 -27
  912. package/src/validate/providers/index.ts +8 -0
  913. package/src/{layer3/anthropic → validate}/providers/openai.ts +30 -25
  914. package/src/validate/request-builder.ts +448 -0
  915. package/src/{layer3/anthropic → validate}/types.ts +1 -1
  916. package/src/validate/utils/context-extractor.ts +220 -0
  917. package/src/{layer3/anthropic → validate}/utils/index.ts +10 -0
  918. package/src/{layer3/anthropic → validate}/utils/response-parser.ts +2 -1
  919. package/src/layer3/anthropic/prompts/validation.ts +0 -419
  920. package/src/layer3/anthropic/providers/index.ts +0 -8
  921. package/src/layer3/anthropic/request-builder.ts +0 -150
  922. package/src/layer3/index.ts +0 -168
  923. /package/src/{layer3 → detect/config}/__tests__/osv-check.test.ts +0 -0
  924. /package/src/{layer2 → detect/structural}/__tests__/math-random-enhanced.test.ts +0 -0
  925. /package/src/{layer2 → detect/structural}/dangerous-functions/child-process.ts +0 -0
  926. /package/src/{layer2 → detect/structural}/dangerous-functions/utils/helpers.ts +0 -0
  927. /package/src/{layer2 → detect/structural}/dangerous-functions/utils/index.ts +0 -0
  928. /package/src/{layer2 → detect/structural}/dangerous-functions/utils/schema-validation.ts +0 -0
  929. /package/src/{utils → model}/route-hierarchy.ts +0 -0
  930. /package/src/{filtering → postprocess/filtering}/index.ts +0 -0
  931. /package/src/{suppression → postprocess/suppression}/__tests__/config-loader.test.ts +0 -0
  932. /package/src/{suppression → postprocess/suppression}/__tests__/hash.test.ts +0 -0
  933. /package/src/{suppression → postprocess/suppression}/__tests__/inline-parser.test.ts +0 -0
  934. /package/src/{suppression → postprocess/suppression}/__tests__/manager.test.ts +0 -0
  935. /package/src/{suppression → postprocess/suppression}/index.ts +0 -0
  936. /package/src/{formatters → report/formatters}/__tests__/ai-context.test.ts +0 -0
  937. /package/src/{formatters → report/formatters}/ide/__tests__/ide.test.ts +0 -0
  938. /package/src/{formatters → report/formatters}/ide/index.ts +0 -0
  939. /package/src/{formatters → report/formatters}/index.ts +0 -0
  940. /package/src/{utils → shared}/__tests__/code-analysis.test.ts +0 -0
  941. /package/src/{utils → shared}/__tests__/parsed-file.test.ts +0 -0
  942. /package/src/{ai-context → shared/ai-context}/__tests__/manager.test.ts +0 -0
  943. /package/src/{ai-context → shared/ai-context}/index.ts +0 -0
  944. /package/src/{ai-context → shared/ai-context}/manager.ts +0 -0
  945. /package/src/{baseline → shared/baseline}/__tests__/manager.test.ts +0 -0
  946. /package/src/{baseline → shared/baseline}/index.ts +0 -0
  947. /package/src/{baseline → shared/baseline}/types.ts +0 -0
  948. /package/src/{utils → shared}/comment-analyzer.ts +0 -0
  949. /package/src/{utils → shared}/diff-detector.ts +0 -0
  950. /package/src/{utils → shared}/diff-parser.ts +0 -0
  951. /package/src/{utils → shared}/environment-context.ts +0 -0
  952. /package/src/{utils → shared}/intent-detector.ts +0 -0
  953. /package/src/{utils → shared}/parsed-file.ts +0 -0
  954. /package/src/{utils → shared}/registry-clients.ts +0 -0
  955. /package/src/{rules → shared/rules}/__tests__/framework-fixes.test.ts +0 -0
  956. /package/src/{rules → shared/rules}/index.ts +0 -0
  957. /package/src/{utils → shared}/schema-semantics.ts +0 -0
  958. /package/src/{layer3/anthropic → validate}/clients.ts +0 -0
  959. /package/src/{layer3/anthropic → validate}/prompts/semantic-analysis.ts +0 -0
  960. /package/src/{layer3/anthropic → validate}/utils/path-helpers.ts +0 -0
  961. /package/src/{layer3/anthropic → validate}/utils/retry.ts +0 -0
@@ -0,0 +1 @@
1
+ {"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../src/shared/rules/metadata.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAi4BH,0CAEC;AAKD,4CAEC;AAKD,kCAEC;AAh4BD;;GAEG;AACU,QAAA,aAAa,GAAgD;IACxE,6EAA6E;IAC7E,wBAAwB;IACxB,6EAA6E;IAC7E,gBAAgB,EAAE;QAChB,IAAI,EAAE,kBAAkB;QACxB,YAAY,EACV,4KAA4K;QAC9K,QAAQ,EAAE;YACR,gDAAgD;YAChD,wDAAwD;YACxD,oEAAoE;YACpE,mEAAmE;YACnE,6DAA6D;SAC9D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,4EAA4E;YAC5E,iDAAiD;SAClD;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,qKAAqK;QACvK,QAAQ,EAAE;YACR,+DAA+D;YAC/D,qDAAqD;YACrD,iGAAiG;YACjG,kDAAkD;SACnD;QACD,QAAQ,EAAE,wEAAwE;QAClF,UAAU,EAAE;YACV,4EAA4E;YAC5E,iDAAiD;SAClD;KACF;IAED,kBAAkB,EAAE;QAClB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,0JAA0J;QAC5J,QAAQ,EAAE;YACR,6DAA6D;YAC7D,+EAA+E;YAC/E,kEAAkE;YAClE,kFAAkF;SACnF;QACD,QAAQ,EAAE,2EAA2E;QACrF,UAAU,EAAE;YACV,kKAAkK;SACnK;KACF;IAED,6EAA6E;IAC7E,4BAA4B;IAC5B,6EAA6E;IAC7E,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,6JAA6J;QAC/J,QAAQ,EAAE;YACR,gFAAgF;YAChF,kDAAkD;YAClD,kDAAkD;YAClD,6DAA6D;SAC9D;QACD,QAAQ,EAAE,mDAAmD;QAC7D,UAAU,EAAE;YACV,uDAAuD;YACvD,gDAAgD;SACjD;KACF;IAED,GAAG,EAAE;QACH,IAAI,EAAE,4BAA4B;QAClC,YAAY,EACV,+IAA+I;QACjJ,QAAQ,EAAE;YACR,gDAAgD;YAChD,8DAA8D;YAC9D,4EAA4E;YAC5E,iDAAiD;SAClD;QACD,QAAQ,EAAE,uDAAuD;QACjE,UAAU,EAAE;YACV,8CAA8C;YAC9C,gDAAgD;SACjD;KACF;IAED,iBAAiB,EAAE;QACjB,IAAI,EAAE,mBAAmB;QACzB,YAAY,EACV,kLAAkL;QACpL,QAAQ,EAAE;YACR,qDAAqD;YACrD,mFAAmF;YACnF,yDAAyD;YACzD,wEAAwE;SACzE;QACD,QAAQ,EAAE,mDAAmD;QAC7D,UAAU,EAAE;YACV,2DAA2D;YAC3D,gDAAgD;SACjD;KACF;IAED,6EAA6E;IAC7E,iCAAiC;IACjC,6EAA6E;IAC7E,YAAY,EAAE;QACZ,IAAI,EAAE,wBAAwB;QAC9B,YAAY,EACV,mIAAmI;QACrI,QAAQ,EAAE;YACR,qDAAqD;YACrD,8DAA8D;YAC9D,+EAA+E;YAC/E,yFAAyF;SAC1F;QACD,QAAQ,EAAE,mDAAmD;QAC7D,UAAU,EAAE;YACV,6EAA6E;YAC7E,iDAAiD;SAClD;KACF;IAED,eAAe,EAAE;QACf,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,4JAA4J;QAC9J,QAAQ,EAAE;YACR,mDAAmD;YACnD,yDAAyD;YACzD,0EAA0E;YAC1E,sDAAsD;SACvD;QACD,QAAQ,EAAE,0DAA0D;QACpE,UAAU,EAAE;YACV,+HAA+H;YAC/H,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,gBAAgB;IAChB,6EAA6E;IAC7E,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,+IAA+I;QACjJ,QAAQ,EAAE;YACR,2DAA2D;YAC3D,8DAA8D;YAC9D,gEAAgE;YAChE,sEAAsE;SACvE;QACD,QAAQ,EAAE,oDAAoD;QAC9D,UAAU,EAAE;YACV,oKAAoK;YACpK,iDAAiD;SAClD;KACF;IAED,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,4IAA4I;QAC9I,QAAQ,EAAE;YACR,2DAA2D;YAC3D,6DAA6D;YAC7D,kEAAkE;YAClE,8DAA8D;SAC/D;QACD,QAAQ,EAAE,uEAAuE;QACjF,UAAU,EAAE;YACV,wJAAwJ;SACzJ;KACF;IAED,6EAA6E;IAC7E,iCAAiC;IACjC,6EAA6E;IAC7E,eAAe,EAAE;QACf,IAAI,EAAE,wBAAwB;QAC9B,YAAY,EACV,8JAA8J;QAChK,QAAQ,EAAE;YACR,yEAAyE;YACzE,6EAA6E;YAC7E,4DAA4D;YAC5D,qDAAqD;SACtD;QACD,QAAQ,EAAE,8DAA8D;QACxE,UAAU,EAAE;YACV,wJAAwJ;YACxJ,gDAAgD;SACjD;KACF;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,6JAA6J;QAC/J,QAAQ,EAAE;YACR,uEAAuE;YACvE,mDAAmD;YACnD,wFAAwF;YACxF,+CAA+C;SAChD;QACD,QAAQ,EAAE,oDAAoD;QAC9D,UAAU,EAAE;YACV,mEAAmE;YACnE,iDAAiD;SAClD;KACF;IAED,cAAc,EAAE;QACd,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,4IAA4I;QAC9I,QAAQ,EAAE;YACR,4DAA4D;YAC5D,8CAA8C;YAC9C,4DAA4D;YAC5D,gDAAgD;SACjD;QACD,QAAQ,EAAE,4DAA4D;QACtE,UAAU,EAAE;YACV,gFAAgF;YAChF,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,iCAAiC;IACjC,6EAA6E;IAC7E,kBAAkB,EAAE;QAClB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EACV,6IAA6I;QAC/I,QAAQ,EAAE;YACR,gEAAgE;YAChE,gGAAgG;YAChG,0EAA0E;YAC1E,sEAAsE;SACvE;QACD,QAAQ,EAAE,qEAAqE;QAC/E,UAAU,EAAE;YACV,wDAAwD;YACxD,gDAAgD;SACjD;KACF;IAED,WAAW,EAAE;QACX,IAAI,EAAE,mBAAmB;QACzB,YAAY,EACV,kKAAkK;QACpK,QAAQ,EAAE;YACR,kEAAkE;YAClE,wFAAwF;YACxF,kDAAkD;YAClD,wDAAwD;SACzD;QACD,QAAQ,EAAE,+DAA+D;QACzE,UAAU,EAAE;YACV,sIAAsI;YACtI,iDAAiD;SAClD;KACF;IAED,cAAc,EAAE;QACd,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,+HAA+H;QACjI,QAAQ,EAAE;YACR,iDAAiD;YACjD,4DAA4D;YAC5D,iDAAiD;YACjD,4DAA4D;SAC7D;QACD,QAAQ,EAAE,oDAAoD;QAC9D,UAAU,EAAE;YACV,wDAAwD;YACxD,gDAAgD;SACjD;KACF;IAED,6EAA6E;IAC7E,8BAA8B;IAC9B,6EAA6E;IAC7E,kBAAkB,EAAE;QAClB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EACV,mJAAmJ;QACrJ,QAAQ,EAAE;YACR,qEAAqE;YACrE,6EAA6E;YAC7E,8DAA8D;YAC9D,sEAAsE;SACvE;QACD,QAAQ,EAAE,uEAAuE;QACjF,UAAU,EAAE;YACV,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,yBAAyB;IACzB,6EAA6E;IAC7E,UAAU,EAAE;QACV,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,2JAA2J;QAC7J,QAAQ,EAAE;YACR,sDAAsD;YACtD,6CAA6C;YAC7C,sDAAsD;YACtD,yDAAyD;SAC1D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,wCAAwC;SACzC;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,4KAA4K;QAC9K,QAAQ,EAAE;YACR,qEAAqE;YACrE,0EAA0E;YAC1E,+DAA+D;YAC/D,kEAAkE;SACnE;QACD,QAAQ,EAAE,+DAA+D;QACzE,UAAU,EAAE;YACV,6EAA6E;YAC7E,yDAAyD;SAC1D;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,4HAA4H;QAC9H,QAAQ,EAAE;YACR,qDAAqD;YACrD,kEAAkE;YAClE,sDAAsD;YACtD,sDAAsD;SACvD;QACD,QAAQ,EAAE,yDAAyD;QACnE,UAAU,EAAE;YACV,6EAA6E;YAC7E,iEAAiE;SAClE;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,wBAAwB;QAC9B,YAAY,EACV,8JAA8J;QAChK,QAAQ,EAAE;YACR,0DAA0D;YAC1D,+DAA+D;YAC/D,iEAAiE;YACjE,6DAA6D;SAC9D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,6EAA6E;YAC7E,yDAAyD;SAC1D;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,yIAAyI;QAC3I,QAAQ,EAAE;YACR,uDAAuD;YACvD,iEAAiE;YACjE,gEAAgE;YAChE,0DAA0D;SAC3D;QACD,QAAQ,EAAE,4DAA4D;QACtE,UAAU,EAAE;YACV,6EAA6E;YAC7E,yEAAyE;SAC1E;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,kJAAkJ;QACpJ,QAAQ,EAAE;YACR,uDAAuD;YACvD,0CAA0C;YAC1C,iDAAiD;YACjD,iDAAiD;SAClD;QACD,QAAQ,EAAE,uDAAuD;QACjE,UAAU,EAAE;YACV,6EAA6E;YAC7E,0BAA0B;SAC3B;KACF;IAED,kBAAkB,EAAE;QAClB,IAAI,EAAE,8BAA8B;QACpC,YAAY,EACV,gLAAgL;QAClL,QAAQ,EAAE;YACR,wEAAwE;YACxE,yDAAyD;YACzD,mEAAmE;YACnE,qDAAqD;SACtD;QACD,QAAQ,EAAE,uDAAuD;QACjE,UAAU,EAAE;YACV,6EAA6E;YAC7E,iEAAiE;SAClE;KACF;IAED,6EAA6E;IAC7E,+BAA+B;IAC/B,6EAA6E;IAC7E,wBAAwB,EAAE;QACxB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,uNAAuN;QACzN,QAAQ,EAAE;YACR,wEAAwE;YACxE,8EAA8E;YAC9E,sDAAsD;YACtD,qEAAqE;SACtE;QACD,QAAQ,EAAE,6EAA6E;QACvF,UAAU,EAAE;YACV,kCAAkC;YAClC,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,yMAAyM;QAC3M,QAAQ,EAAE;YACR,yDAAyD;YACzD,yDAAyD;YACzD,sEAAsE;YACtE,2DAA2D;SAC5D;QACD,QAAQ,EAAE,uEAAuE;QACjF,UAAU,EAAE;YACV,6EAA6E;YAC7E,gEAAgE;SACjE;KACF;IAED,kBAAkB,EAAE;QAClB,IAAI,EAAE,iBAAiB;QACvB,YAAY,EACV,yJAAyJ;QAC3J,QAAQ,EAAE;YACR,qEAAqE;YACrE,iDAAiD;YACjD,4CAA4C;YAC5C,qEAAqE;SACtE;QACD,QAAQ,EAAE,kEAAkE;QAC5E,UAAU,EAAE;YACV,yEAAyE;YACzE,+FAA+F;SAChG;KACF;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EACV,2MAA2M;QAC7M,QAAQ,EAAE;YACR,+EAA+E;YAC/E,wDAAwD;YACxD,+DAA+D;YAC/D,wEAAwE;SACzE;QACD,QAAQ,EAAE,sEAAsE;QAChF,UAAU,EAAE;YACV,qDAAqD;YACrD,yDAAyD;YACzD,gFAAgF;SACjF;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,4JAA4J;QAC9J,QAAQ,EAAE;YACR,kEAAkE;YAClE,sEAAsE;YACtE,2DAA2D;YAC3D,kDAAkD;SACnD;QACD,QAAQ,EAAE,6DAA6D;QACvE,UAAU,EAAE;YACV,qDAAqD;YACrD,iDAAiD;SAClD;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,qKAAqK;QACvK,QAAQ,EAAE;YACR,+DAA+D;YAC/D,4DAA4D;YAC5D,6DAA6D;YAC7D,4DAA4D;SAC7D;QACD,QAAQ,EAAE,+DAA+D;QACzE,UAAU,EAAE;YACV,qDAAqD;YACrD,iDAAiD;YACjD,yDAAyD;SAC1D;KACF;IAED,6EAA6E;IAC7E,8BAA8B;IAC9B,6EAA6E;IAC7E,4BAA4B,EAAE;QAC5B,IAAI,EAAE,gCAAgC;QACtC,YAAY,EACV,8LAA8L;QAChM,QAAQ,EAAE;YACR,sDAAsD;YACtD,qDAAqD;YACrD,wEAAwE;YACxE,0DAA0D;SAC3D;QACD,QAAQ,EAAE,qEAAqE;QAC/E,UAAU,EAAE;YACV,qDAAqD;YACrD,yDAAyD;YACzD,kCAAkC;SACnC;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,iLAAiL;QACnL,QAAQ,EAAE;YACR,0EAA0E;YAC1E,oDAAoD;YACpD,wCAAwC;YACxC,6CAA6C;SAC9C;QACD,QAAQ,EAAE,gEAAgE;QAC1E,UAAU,EAAE;YACV,0DAA0D;YAC1D,iDAAiD;SAClD;KACF;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,6BAA6B;QACnC,YAAY,EACV,oKAAoK;QACtK,QAAQ,EAAE;YACR,2CAA2C;YAC3C,kDAAkD;YAClD,iDAAiD;YACjD,8DAA8D;SAC/D;QACD,QAAQ,EAAE,2DAA2D;QACrE,UAAU,EAAE;YACV,iDAAiD;YACjD,4EAA4E;SAC7E;KACF;IAED,yBAAyB,EAAE;QACzB,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,0KAA0K;QAC5K,QAAQ,EAAE;YACR,+CAA+C;YAC/C,0DAA0D;YAC1D,4CAA4C;YAC5C,6CAA6C;SAC9C;QACD,QAAQ,EAAE,8EAA8E;QACxF,UAAU,EAAE;YACV,qDAAqD;YACrD,iDAAiD;SAClD;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,gLAAgL;QAClL,QAAQ,EAAE;YACR,qDAAqD;YACrD,sDAAsD;YACtD,2CAA2C;YAC3C,0CAA0C;SAC3C;QACD,QAAQ,EAAE,2DAA2D;QACrE,UAAU,EAAE;YACV,yDAAyD;YACzD,6EAA6E;SAC9E;KACF;IAED,0BAA0B,EAAE;QAC1B,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,wLAAwL;QAC1L,QAAQ,EAAE;YACR,qDAAqD;YACrD,gEAAgE;YAChE,2DAA2D;YAC3D,kEAAkE;SACnE;QACD,QAAQ,EAAE,0EAA0E;QACpF,UAAU,EAAE;YACV,gEAAgE;YAChE,kCAAkC;SACnC;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,iCAAiC;QACvC,YAAY,EACV,yLAAyL;QAC3L,QAAQ,EAAE;YACR,mDAAmD;YACnD,oDAAoD;YACpD,0DAA0D;YAC1D,+CAA+C;SAChD;QACD,QAAQ,EAAE,6EAA6E;QACvF,UAAU,EAAE;YACV,yDAAyD;YACzD,6EAA6E;SAC9E;KACF;IAED,oBAAoB,EAAE;QACpB,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,qMAAqM;QACvM,QAAQ,EAAE;YACR,iFAAiF;YACjF,0EAA0E;YAC1E,oEAAoE;YACpE,uEAAuE;SACxE;QACD,QAAQ,EAAE,wEAAwE;QAClF,UAAU,EAAE;YACV,6CAA6C;YAC7C,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,oBAAoB,EAAE;QACpB,IAAI,EAAE,mBAAmB;QACzB,YAAY,EACV,uLAAuL;QACzL,QAAQ,EAAE;YACR,wDAAwD;YACxD,gEAAgE;YAChE,yDAAyD;YACzD,mDAAmD;YACnD,2CAA2C;SAC5C;QACD,QAAQ,EAAE,gEAAgE;QAC1E,UAAU,EAAE;YACV,kBAAkB;YAClB,qCAAqC;YACrC,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,+BAA+B;IAC/B,6EAA6E;IAC7E,oBAAoB,EAAE;QACpB,IAAI,EAAE,sBAAsB;QAC5B,YAAY,EACV,+MAA+M;QACjN,QAAQ,EAAE;YACR,6DAA6D;YAC7D,uDAAuD;YACvD,qDAAqD;YACrD,4DAA4D;YAC5D,8CAA8C;SAC/C;QACD,QAAQ,EAAE,oEAAoE;QAC9E,UAAU,EAAE;YACV,qEAAqE;YACrE,iDAAiD;YACjD,+CAA+C;SAChD;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,wNAAwN;QAC1N,QAAQ,EAAE;YACR,0EAA0E;YAC1E,wDAAwD;YACxD,oDAAoD;YACpD,gDAAgD;YAChD,0DAA0D;SAC3D;QACD,QAAQ,EAAE,sEAAsE;QAChF,UAAU,EAAE;YACV,qEAAqE;YACrE,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,oBAAoB,EAAE;QACpB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,yOAAyO;QAC3O,QAAQ,EAAE;YACR,oDAAoD;YACpD,iEAAiE;YACjE,wDAAwD;YACxD,+CAA+C;YAC/C,kDAAkD;SACnD;QACD,QAAQ,EAAE,kEAAkE;QAC5E,UAAU,EAAE;YACV,gEAAgE;YAChE,gDAAgD;YAChD,8CAA8C;SAC/C;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,iRAAiR;QACnR,QAAQ,EAAE;YACR,6DAA6D;YAC7D,mDAAmD;YACnD,qDAAqD;YACrD,4CAA4C;YAC5C,6DAA6D;SAC9D;QACD,QAAQ,EAAE,mFAAmF;QAC7F,UAAU,EAAE;YACV,yDAAyD;YACzD,iDAAiD;YACjD,2CAA2C;SAC5C;KACF;IACD,6EAA6E;IAC7E,sDAAsD;IACtD,6EAA6E;IAC7E,wBAAwB,EAAE;QACxB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,iKAAiK;QACnK,QAAQ,EAAE;YACR,2DAA2D;YAC3D,gEAAgE;YAChE,+DAA+D;YAC/D,6CAA6C;YAC7C,8DAA8D;SAC/D;QACD,QAAQ,EAAE,6DAA6D;QACvE,UAAU,EAAE;YACV,+CAA+C;YAC/C,iDAAiD;SAClD;KACF;IAED,IAAI,EAAE;QACJ,IAAI,EAAE,oCAAoC;QAC1C,YAAY,EACV,yMAAyM;QAC3M,QAAQ,EAAE;YACR,iFAAiF;YACjF,0DAA0D;YAC1D,6EAA6E;YAC7E,yDAAyD;YACzD,uDAAuD;SACxD;QACD,QAAQ,EAAE,4EAA4E;QACtF,UAAU,EAAE;YACV,qEAAqE;YACrE,iDAAiD;SAClD;KACF;IAED,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,wKAAwK;QAC1K,QAAQ,EAAE;YACR,2FAA2F;YAC3F,sEAAsE;YACtE,6DAA6D;YAC7D,6DAA6D;SAC9D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,uDAAuD;YACvD,iDAAiD;SAClD;KACF;IAED,GAAG,EAAE;QACH,IAAI,EAAE,qCAAqC;QAC3C,YAAY,EACV,gMAAgM;QAClM,QAAQ,EAAE;YACR,uDAAuD;YACvD,yDAAyD;YACzD,8FAA8F;YAC9F,wCAAwC;YACxC,gEAAgE;SACjE;QACD,QAAQ,EAAE,8DAA8D;QACxE,UAAU,EAAE;YACV,sFAAsF;YACtF,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,4BAA4B;IAC5B,6EAA6E;IAC7E,kBAAkB,EAAE;QAClB,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,wPAAwP;QAC1P,QAAQ,EAAE;YACR,4EAA4E;YAC5E,6EAA6E;YAC7E,mEAAmE;YACnE,6EAA6E;YAC7E,4DAA4D;SAC7D;QACD,QAAQ,EAAE,+FAA+F;QACzG,UAAU,EAAE;YACV,6EAA6E;YAC7E,gDAAgD;SACjD;KACF;CACF,CAAA;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,QAA+B;IAC7D,OAAO,qBAAa,CAAC,QAAQ,CAAC,CAAA;AAChC,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,qBAAa,CAA4B,CAAA;AAC9D,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,QAA+B;IACzD,OAAO,QAAQ,IAAI,qBAAa,CAAA;AAClC,CAAC"}
@@ -0,0 +1,45 @@
1
+ /**
2
+ * Schema Semantics Utility
3
+ * Understands validation schema logic, particularly Zod/Yup/Joi patterns
4
+ *
5
+ * This addresses false positives where OR validation (either A or B required)
6
+ * is flagged as "bypass" when individual fields are marked optional.
7
+ *
8
+ * Key insight: `.optional()` + `.refine()` = OR validation, not bypass
9
+ */
10
+ export interface SchemaAnalysis {
11
+ /** Whether the schema has cross-field refinement/validation */
12
+ hasRefinement: boolean;
13
+ /** Type of refinement detected */
14
+ refinementType?: 'or_logic' | 'super_refine' | 'custom_validation' | 'none';
15
+ /** Number of optional fields in the schema */
16
+ optionalFieldCount: number;
17
+ /** Whether this looks like legitimate OR validation */
18
+ isOrValidation: boolean;
19
+ }
20
+ /**
21
+ * Analyze a validation schema for OR-logic refinement patterns
22
+ *
23
+ * @param content - The full file content
24
+ * @param lineNumber - The 0-indexed line number where the pattern was found
25
+ * @returns SchemaAnalysis with refinement information
26
+ */
27
+ export declare function analyzeSchemaSemantics(content: string, lineNumber: number): SchemaAnalysis;
28
+ /**
29
+ * Check if a line with .optional() is part of legitimate OR validation
30
+ *
31
+ * @param content - The full file content
32
+ * @param lineNumber - The 0-indexed line number where .optional() was found
33
+ * @returns true if this is part of OR validation (not a bypass)
34
+ */
35
+ export declare function isLegitimateOrValidation(content: string, lineNumber: number): boolean;
36
+ /**
37
+ * Check if a 2FA-related field with .optional() has proper OR validation
38
+ * Specifically for 2FA patterns where either totpCode OR backupCode is required
39
+ *
40
+ * @param content - The full file content
41
+ * @param lineNumber - The 0-indexed line number
42
+ * @returns true if this is legitimate 2FA OR validation
43
+ */
44
+ export declare function is2FAOrValidation(content: string, lineNumber: number): boolean;
45
+ //# sourceMappingURL=schema-semantics.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schema-semantics.d.ts","sourceRoot":"","sources":["../../src/shared/schema-semantics.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,aAAa,EAAE,OAAO,CAAA;IACtB,kCAAkC;IAClC,cAAc,CAAC,EAAE,UAAU,GAAG,cAAc,GAAG,mBAAmB,GAAG,MAAM,CAAA;IAC3E,8CAA8C;IAC9C,kBAAkB,EAAE,MAAM,CAAA;IAC1B,uDAAuD;IACvD,cAAc,EAAE,OAAO,CAAA;CACxB;AAuGD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,cAAc,CAuChB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAGT;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAiCT"}
@@ -0,0 +1,193 @@
1
+ "use strict";
2
+ /**
3
+ * Schema Semantics Utility
4
+ * Understands validation schema logic, particularly Zod/Yup/Joi patterns
5
+ *
6
+ * This addresses false positives where OR validation (either A or B required)
7
+ * is flagged as "bypass" when individual fields are marked optional.
8
+ *
9
+ * Key insight: `.optional()` + `.refine()` = OR validation, not bypass
10
+ */
11
+ Object.defineProperty(exports, "__esModule", { value: true });
12
+ exports.analyzeSchemaSemantics = analyzeSchemaSemantics;
13
+ exports.isLegitimateOrValidation = isLegitimateOrValidation;
14
+ exports.is2FAOrValidation = is2FAOrValidation;
15
+ /**
16
+ * Patterns that indicate cross-field validation refinements
17
+ */
18
+ const REFINEMENT_PATTERNS = [
19
+ // Zod .refine() with OR logic
20
+ /\.refine\s*\(\s*\([^)]*\)\s*=>\s*[^,]*\|\|/,
21
+ /\.refine\s*\(\s*\(\s*\{\s*\w+\s*,/, // Destructured refine
22
+ /\.refine\s*\(\s*\(?data\)?\s*=>/, // data => refine
23
+ // Zod .superRefine()
24
+ /\.superRefine\s*\(/,
25
+ // Yup .test() with cross-field validation
26
+ /\.test\s*\(\s*['"][^'"]+['"]\s*,\s*['"][^'"]+['"]\s*,\s*function/,
27
+ /\.test\s*\(\s*['"][^'"]+['"]\s*,\s*['"][^'"]+['"]\s*,\s*\([^)]*\)\s*=>/,
28
+ // Joi custom validation
29
+ /\.custom\s*\(/,
30
+ /Joi\.alternatives\s*\(\)/,
31
+ /\.xor\s*\(/,
32
+ /\.or\s*\(/,
33
+ ];
34
+ /**
35
+ * Patterns indicating OR logic in refinement callbacks
36
+ */
37
+ const OR_LOGIC_PATTERNS = [
38
+ // Direct OR in refine: (data) => data.a || data.b
39
+ /=>\s*[^,;]*\|\|/,
40
+ // Negated AND: !(a && b)
41
+ /=>\s*!\s*\([^)]*&&/,
42
+ // Ternary with OR
43
+ /\?\s*[^:]*\|\|/,
44
+ ];
45
+ /**
46
+ * Find the start of a schema definition containing a given line
47
+ */
48
+ function findSchemaStart(lines, lineNumber) {
49
+ // Look backwards for schema definition patterns
50
+ const schemaStartPatterns = [
51
+ /(?:const|let|var)\s+\w+\s*=\s*z\.object\s*\(/,
52
+ /(?:const|let|var)\s+\w+\s*=\s*Yup\.object\s*\(/,
53
+ /(?:const|let|var)\s+\w+\s*=\s*Joi\.object\s*\(/,
54
+ /export\s+(?:const|let|var)\s+\w+\s*=\s*z\.object\s*\(/,
55
+ /z\.object\s*\(\s*\{/,
56
+ /Yup\.object\s*\(\s*\{/,
57
+ /Joi\.object\s*\(\s*\{/,
58
+ ];
59
+ for (let i = lineNumber; i >= 0; i--) {
60
+ if (schemaStartPatterns.some(pattern => pattern.test(lines[i]))) {
61
+ return i;
62
+ }
63
+ // Don't look back more than 50 lines
64
+ if (lineNumber - i > 50)
65
+ break;
66
+ }
67
+ return Math.max(0, lineNumber - 10);
68
+ }
69
+ /**
70
+ * Find the end of a schema definition containing a given line
71
+ */
72
+ function findSchemaEnd(lines, schemaStart) {
73
+ let braceCount = 0;
74
+ let inSchema = false;
75
+ for (let i = schemaStart; i < lines.length; i++) {
76
+ const line = lines[i];
77
+ // Count braces/parens
78
+ for (const char of line) {
79
+ if (char === '(' || char === '{') {
80
+ braceCount++;
81
+ inSchema = true;
82
+ }
83
+ else if (char === ')' || char === '}') {
84
+ braceCount--;
85
+ }
86
+ }
87
+ // Schema ends when we return to zero brace count after entering
88
+ if (inSchema && braceCount === 0) {
89
+ return i + 1;
90
+ }
91
+ // Don't look forward more than 100 lines
92
+ if (i - schemaStart > 100)
93
+ break;
94
+ }
95
+ return Math.min(lines.length, schemaStart + 50);
96
+ }
97
+ /**
98
+ * Count .optional() calls in content
99
+ */
100
+ function countOptionalFields(content) {
101
+ const matches = content.match(/\.optional\s*\(\s*\)/g);
102
+ return matches ? matches.length : 0;
103
+ }
104
+ /**
105
+ * Analyze a validation schema for OR-logic refinement patterns
106
+ *
107
+ * @param content - The full file content
108
+ * @param lineNumber - The 0-indexed line number where the pattern was found
109
+ * @returns SchemaAnalysis with refinement information
110
+ */
111
+ function analyzeSchemaSemantics(content, lineNumber) {
112
+ const lines = content.split('\n');
113
+ // Find the schema boundaries
114
+ const schemaStart = findSchemaStart(lines, lineNumber);
115
+ const schemaEnd = findSchemaEnd(lines, schemaStart);
116
+ // Extract schema content
117
+ const schemaLines = lines.slice(schemaStart, schemaEnd);
118
+ const schemaContent = schemaLines.join('\n');
119
+ // Check for refinement patterns
120
+ const hasRefine = REFINEMENT_PATTERNS.some(pattern => pattern.test(schemaContent));
121
+ const hasSuperRefine = /\.superRefine\s*\(/.test(schemaContent);
122
+ const hasOrLogic = OR_LOGIC_PATTERNS.some(pattern => pattern.test(schemaContent));
123
+ // Count optional fields
124
+ const optionalCount = countOptionalFields(schemaContent);
125
+ // Determine if this is OR validation
126
+ // OR validation pattern: multiple optional fields + refine with || logic
127
+ const isOrValidation = optionalCount >= 2 && hasRefine && hasOrLogic;
128
+ // Determine refinement type
129
+ let refinementType = 'none';
130
+ if (hasSuperRefine) {
131
+ refinementType = 'super_refine';
132
+ }
133
+ else if (hasOrLogic && hasRefine) {
134
+ refinementType = 'or_logic';
135
+ }
136
+ else if (hasRefine) {
137
+ refinementType = 'custom_validation';
138
+ }
139
+ return {
140
+ hasRefinement: hasRefine || hasSuperRefine,
141
+ refinementType,
142
+ optionalFieldCount: optionalCount,
143
+ isOrValidation,
144
+ };
145
+ }
146
+ /**
147
+ * Check if a line with .optional() is part of legitimate OR validation
148
+ *
149
+ * @param content - The full file content
150
+ * @param lineNumber - The 0-indexed line number where .optional() was found
151
+ * @returns true if this is part of OR validation (not a bypass)
152
+ */
153
+ function isLegitimateOrValidation(content, lineNumber) {
154
+ const analysis = analyzeSchemaSemantics(content, lineNumber);
155
+ return analysis.isOrValidation || analysis.refinementType === 'super_refine';
156
+ }
157
+ /**
158
+ * Check if a 2FA-related field with .optional() has proper OR validation
159
+ * Specifically for 2FA patterns where either totpCode OR backupCode is required
160
+ *
161
+ * @param content - The full file content
162
+ * @param lineNumber - The 0-indexed line number
163
+ * @returns true if this is legitimate 2FA OR validation
164
+ */
165
+ function is2FAOrValidation(content, lineNumber) {
166
+ const lines = content.split('\n');
167
+ const line = lines[lineNumber] || '';
168
+ // Check if this line is about 2FA fields
169
+ const is2FAField = /\b(totp|otp|backupCode|recoveryCode|twoFactor|2fa|mfa)\b/i.test(line);
170
+ if (!is2FAField) {
171
+ return false;
172
+ }
173
+ // Check for OR validation in the schema
174
+ const analysis = analyzeSchemaSemantics(content, lineNumber);
175
+ // If there's refinement with OR logic, this is legitimate
176
+ if (analysis.isOrValidation) {
177
+ return true;
178
+ }
179
+ // Check for specific 2FA OR patterns in nearby content
180
+ const schemaStart = findSchemaStart(lines, lineNumber);
181
+ const schemaEnd = findSchemaEnd(lines, schemaStart);
182
+ const schemaContent = lines.slice(schemaStart, schemaEnd).join('\n');
183
+ // Patterns like: "Either TOTP or backup code required"
184
+ const twoFAOrPatterns = [
185
+ /either.*or.*required/i,
186
+ /totp.*\|\|.*backup/i,
187
+ /backup.*\|\|.*totp/i,
188
+ /code.*\|\|.*code/i,
189
+ /one\s+of.*required/i,
190
+ ];
191
+ return twoFAOrPatterns.some(pattern => pattern.test(schemaContent));
192
+ }
193
+ //# sourceMappingURL=schema-semantics.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schema-semantics.js","sourceRoot":"","sources":["../../src/shared/schema-semantics.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAyHH,wDA0CC;AASD,4DAMC;AAUD,8CAoCC;AAnND;;GAEG;AACH,MAAM,mBAAmB,GAAG;IAC1B,8BAA8B;IAC9B,4CAA4C;IAC5C,mCAAmC,EAAG,sBAAsB;IAC5D,iCAAiC,EAAK,iBAAiB;IAEvD,qBAAqB;IACrB,oBAAoB;IAEpB,0CAA0C;IAC1C,kEAAkE;IAClE,wEAAwE;IAExE,wBAAwB;IACxB,eAAe;IACf,0BAA0B;IAC1B,YAAY;IACZ,WAAW;CACZ,CAAA;AAED;;GAEG;AACH,MAAM,iBAAiB,GAAG;IACxB,kDAAkD;IAClD,iBAAiB;IACjB,yBAAyB;IACzB,oBAAoB;IACpB,kBAAkB;IAClB,gBAAgB;CACjB,CAAA;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAAe,EAAE,UAAkB;IAC1D,gDAAgD;IAChD,MAAM,mBAAmB,GAAG;QAC1B,8CAA8C;QAC9C,gDAAgD;QAChD,gDAAgD;QAChD,uDAAuD;QACvD,qBAAqB;QACrB,uBAAuB;QACvB,uBAAuB;KACxB,CAAA;IAED,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO,CAAC,CAAA;QACV,CAAC;QACD,qCAAqC;QACrC,IAAI,UAAU,GAAG,CAAC,GAAG,EAAE;YAAE,MAAK;IAChC,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,EAAE,CAAC,CAAA;AACrC,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAe,EAAE,WAAmB;IACzD,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,KAAK,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAErB,sBAAsB;QACtB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,UAAU,EAAE,CAAA;gBACZ,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxC,UAAU,EAAE,CAAA;YACd,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,IAAI,QAAQ,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,CAAA;QACd,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,GAAG,WAAW,GAAG,GAAG;YAAE,MAAK;IAClC,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,EAAE,CAAC,CAAA;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;IACtD,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;AACrC,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,sBAAsB,CACpC,OAAe,EACf,UAAkB;IAElB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAEjC,6BAA6B;IAC7B,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IACtD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAEnD,yBAAyB;IACzB,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IACvD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE5C,gCAAgC;IAChC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAA;IAClF,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC/D,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAA;IAEjF,wBAAwB;IACxB,MAAM,aAAa,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAA;IAExD,qCAAqC;IACrC,yEAAyE;IACzE,MAAM,cAAc,GAAG,aAAa,IAAI,CAAC,IAAI,SAAS,IAAI,UAAU,CAAA;IAEpE,4BAA4B;IAC5B,IAAI,cAAc,GAAqC,MAAM,CAAA;IAC7D,IAAI,cAAc,EAAE,CAAC;QACnB,cAAc,GAAG,cAAc,CAAA;IACjC,CAAC;SAAM,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;QACnC,cAAc,GAAG,UAAU,CAAA;IAC7B,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,cAAc,GAAG,mBAAmB,CAAA;IACtC,CAAC;IAED,OAAO;QACL,aAAa,EAAE,SAAS,IAAI,cAAc;QAC1C,cAAc;QACd,kBAAkB,EAAE,aAAa;QACjC,cAAc;KACf,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,wBAAwB,CACtC,OAAe,EACf,UAAkB;IAElB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAC5D,OAAO,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc,KAAK,cAAc,CAAA;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,iBAAiB,CAC/B,OAAe,EACf,UAAkB;IAElB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;IAEpC,yCAAyC;IACzC,MAAM,UAAU,GAAG,2DAA2D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,wCAAwC;IACxC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAE5D,0DAA0D;IAC1D,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,uDAAuD;IACvD,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IACtD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IACnD,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEpE,uDAAuD;IACvD,MAAM,eAAe,GAAG;QACtB,uBAAuB;QACvB,qBAAqB;QACrB,qBAAqB;QACrB,mBAAmB;QACnB,qBAAqB;KACtB,CAAA;IAED,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAA;AACrE,CAAC"}
@@ -0,0 +1,337 @@
1
+ /**
2
+ * Scanner Types and Interfaces
3
+ * Defines the core data structures for the security scanning engine
4
+ */
5
+ export type VulnerabilitySeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';
6
+ export type VulnerabilityCategory = 'hardcoded_secret' | 'high_entropy_string' | 'sensitive_variable' | 'security_bypass' | 'dangerous_function' | 'sql_injection' | 'xss' | 'command_injection' | 'insecure_config' | 'missing_auth' | 'suspicious_package' | 'cors_misconfiguration' | 'root_container' | 'dangerous_file' | 'ai_pattern' | 'sensitive_url' | 'weak_crypto' | 'data_exposure' | 'ai_prompt_injection' | 'ai_unsafe_execution' | 'ai_overpermissive_tool' | 'ai_rag_exfiltration' | 'ai_endpoint_unprotected' | 'ai_schema_mismatch' | 'ai_package_hallucination' | 'ai_rag_corpus_poisoning' | 'ai_rag_pii_leakage' | 'ai_mcp_tool_poisoning' | 'ai_mcp_credential_issue' | 'ai_mcp_confused_deputy' | 'ai_mcp_description_injection' | 'ai_mcp_server_shadowing' | 'ai_mcp_config_secrets' | 'ai_mcp_config_permissions' | 'ai_rag_query_injection' | 'ai_rag_embedding_poisoning' | 'ai_rag_chunk_injection' | 'ai_package_typosquat' | 'ai_package_malicious' | 'ai_unsafe_model_load' | 'ai_unverified_model' | 'ai_unsafe_finetuning' | 'ai_excessive_agency' | 'ai_skill_injection' | 'missing_security_headers' | 'ssrf' | 'log_injection' | 'xxe';
7
+ export type ValidationStatus = 'confirmed' | 'downgraded' | 'dismissed' | 'not_validated';
8
+ export interface Vulnerability {
9
+ id: string;
10
+ filePath: string;
11
+ lineNumber: number;
12
+ lineContent: string;
13
+ severity: VulnerabilitySeverity;
14
+ category: VulnerabilityCategory;
15
+ title: string;
16
+ description: string;
17
+ suggestedFix?: string;
18
+ confidence: 'high' | 'medium' | 'low';
19
+ /** @deprecated Use `source` instead. Kept for backward compatibility. */
20
+ layer: 1 | 2 | 3;
21
+ /** Which detector group produced this finding */
22
+ source?: 'secrets' | 'structural' | 'ai_code' | 'config' | 'validation';
23
+ requiresAIValidation?: boolean;
24
+ validatedByAI?: boolean;
25
+ validationStatus?: ValidationStatus;
26
+ validationNotes?: string;
27
+ originalSeverity?: VulnerabilitySeverity;
28
+ impact?: string;
29
+ evidence?: string;
30
+ fixSteps?: string[];
31
+ references?: string[];
32
+ aiEnhanced?: boolean;
33
+ /** Base confidence score (0.0-1.0) set by the detector. Used by scoring stage. */
34
+ baseConfidence?: number;
35
+ }
36
+ /**
37
+ * Cancellation token for aborting scans gracefully
38
+ * Allows users to stop long-running scans (Ctrl+C) and get partial results
39
+ */
40
+ export interface CancellationToken {
41
+ /** Whether cancellation has been requested */
42
+ cancelled: boolean;
43
+ /** Reason for cancellation (e.g., "User pressed Ctrl+C") */
44
+ reason?: string;
45
+ /** Request cancellation */
46
+ cancel(reason?: string): void;
47
+ /** Register cleanup callback to run when cancelled */
48
+ onCancel(callback: () => void): void;
49
+ }
50
+ /**
51
+ * Create a new cancellation token
52
+ *
53
+ * @example
54
+ * const token = createCancellationToken()
55
+ * process.on('SIGINT', () => token.cancel('User interrupted'))
56
+ * const result = await runScan(files, repo, { cancellationToken: token })
57
+ */
58
+ export declare function createCancellationToken(): CancellationToken;
59
+ export interface ScanFile {
60
+ path: string;
61
+ content: string;
62
+ language: string;
63
+ size: number;
64
+ }
65
+ export interface SeverityCounts {
66
+ critical: number;
67
+ high: number;
68
+ medium: number;
69
+ low: number;
70
+ info: number;
71
+ }
72
+ export type CategoryCounts = Partial<Record<VulnerabilityCategory, number>>;
73
+ /** Summary of a suppressed vulnerability (for --show-suppressed output) */
74
+ export interface SuppressedVulnerabilitySummary {
75
+ /** Finding hash */
76
+ hash: string;
77
+ /** File path */
78
+ filePath: string;
79
+ /** Line number */
80
+ lineNumber: number;
81
+ /** Vulnerability category */
82
+ category: VulnerabilityCategory;
83
+ /** Severity */
84
+ severity: VulnerabilitySeverity;
85
+ /** Title */
86
+ title: string;
87
+ /** How it was suppressed */
88
+ suppressionType: 'inline' | 'config-finding' | 'config-rule';
89
+ /** Reason for suppression */
90
+ suppressionReason: string;
91
+ /** Expiration date (if any) */
92
+ expires?: string;
93
+ }
94
+ export interface ScanResult {
95
+ repoName: string;
96
+ repoUrl: string;
97
+ branch: string;
98
+ filesScanned: number;
99
+ filesSkipped: number;
100
+ vulnerabilities: Vulnerability[];
101
+ severityCounts: SeverityCounts;
102
+ categoryCounts: CategoryCounts;
103
+ hasBlockingIssues: boolean;
104
+ scanDuration: number;
105
+ timestamp: string;
106
+ validationStats?: {
107
+ totalFindings: number;
108
+ validatedFindings: number;
109
+ confirmedFindings: number;
110
+ dismissedFindings: number;
111
+ downgradedFindings: number;
112
+ autoDismissedFindings: number;
113
+ estimatedInputTokens: number;
114
+ estimatedOutputTokens: number;
115
+ estimatedCost: number;
116
+ apiCalls: number;
117
+ cacheCreationTokens: number;
118
+ cacheReadTokens: number;
119
+ cacheHitRate: number;
120
+ };
121
+ cancelled?: boolean;
122
+ cancelReason?: string;
123
+ suppressionStats?: {
124
+ /** Total findings before suppression */
125
+ total: number;
126
+ /** Findings suppressed by inline comments */
127
+ inlineSuppressed: number;
128
+ /** Findings suppressed by config (finding hash) */
129
+ configFindingSuppressed: number;
130
+ /** Findings suppressed by config (rule) */
131
+ configRuleSuppressed: number;
132
+ /** Findings that would have been suppressed but suppression expired */
133
+ expired: number;
134
+ };
135
+ /** Suppressed vulnerabilities (when --show-suppressed is used) */
136
+ suppressedVulnerabilities?: SuppressedVulnerabilitySummary[];
137
+ baselineDiff?: {
138
+ /** When the baseline was created */
139
+ baselineCreatedAt: string;
140
+ /** Git commit of the baseline (if available) */
141
+ baselineCommit?: string;
142
+ /** Number of new findings (not in baseline) */
143
+ newCount: number;
144
+ /** Number of fixed findings (in baseline, not in current) */
145
+ fixedCount: number;
146
+ /** Number of existing findings (in both) */
147
+ existingCount: number;
148
+ /** Details of fixed findings for display */
149
+ fixedFindings: Array<{
150
+ hash: string;
151
+ filePath: string;
152
+ lineNumber: number;
153
+ category: string;
154
+ severity: string;
155
+ title: string;
156
+ }>;
157
+ };
158
+ /** Filter audit trail (when includeFilterAudit option is enabled) */
159
+ filterAuditTrail?: import('../postprocess/filtering/pipeline').AnnotatedFinding[];
160
+ }
161
+ export interface ScanProgress {
162
+ status: 'fetching' | 'layer1' | 'layer2' | 'layer3' | 'validating' | 'complete' | 'failed';
163
+ message: string;
164
+ filesProcessed: number;
165
+ totalFiles: number;
166
+ vulnerabilitiesFound: number;
167
+ }
168
+ export type ProgressCallback = (progress: ScanProgress) => void;
169
+ export interface SecretPattern {
170
+ name: string;
171
+ pattern: RegExp;
172
+ severity: VulnerabilitySeverity;
173
+ description: string;
174
+ }
175
+ export interface ConfigRule {
176
+ name: string;
177
+ filePatterns: string[];
178
+ check: (content: string, filePath: string) => ConfigViolation[];
179
+ }
180
+ export interface ConfigViolation {
181
+ line: number;
182
+ lineContent: string;
183
+ message: string;
184
+ severity: VulnerabilitySeverity;
185
+ }
186
+ export interface SensitiveVariablePattern {
187
+ pattern: RegExp;
188
+ severity: VulnerabilitySeverity;
189
+ description: string;
190
+ }
191
+ export interface AIAnalysisRequest {
192
+ filePath: string;
193
+ content: string;
194
+ context: string;
195
+ }
196
+ export interface AIFinding {
197
+ lineNumber: number;
198
+ lineContent: string;
199
+ severity: VulnerabilitySeverity;
200
+ category: VulnerabilityCategory;
201
+ title: string;
202
+ description: string;
203
+ suggestedFix: string;
204
+ }
205
+ /**
206
+ * DetectorContext provides rich context information to Layer 2 detectors
207
+ * This allows detectors to make smarter decisions based on:
208
+ * - Project-level auth configuration
209
+ * - Framework detection
210
+ * - Per-file context (server vs client, test vs production)
211
+ */
212
+ export interface DetectorContext {
213
+ auth: {
214
+ /** Middleware configuration (if detected) */
215
+ middleware: MiddlewareAuthContextSummary | null;
216
+ /** Auth helpers detected in the project */
217
+ authHelpers: AuthHelperContextSummary;
218
+ /** Public endpoint patterns (health, webhook, etc.) */
219
+ publicEndpoints: string[];
220
+ };
221
+ framework: {
222
+ /** Primary backend framework detected */
223
+ primary: 'nextjs' | 'express' | 'fastify' | 'koa' | 'hono' | 'nestjs' | 'django' | 'flask' | 'rails' | 'unknown' | null;
224
+ /** Frontend framework detected */
225
+ frontend: 'react' | 'vue' | 'svelte' | 'angular' | 'unknown' | null;
226
+ /** Whether the project uses TypeScript */
227
+ hasTypeScript: boolean;
228
+ };
229
+ dataAccess: {
230
+ /** ORM/query builder detected */
231
+ orm: 'prisma' | 'drizzle' | 'typeorm' | 'sequelize' | 'knex' | null;
232
+ /** Whether RLS (Row-Level Security) is detected */
233
+ hasRLS: boolean;
234
+ /** Validation library detected */
235
+ validationLib: 'zod' | 'yup' | 'joi' | 'valibot' | null;
236
+ };
237
+ file: {
238
+ /** Whether this file is server-only (not bundled to client) */
239
+ isServerOnly: boolean;
240
+ /** Whether this file is client-bundled (exposed to browser) */
241
+ isClientBundled: boolean;
242
+ /** Whether this file is a test/mock/fixture file */
243
+ isTestFile: boolean;
244
+ /** Whether this file is a config file */
245
+ isConfigFile: boolean;
246
+ /** Whether this file is in a tooling directory */
247
+ isToolingDir: boolean;
248
+ };
249
+ }
250
+ /** Simplified middleware auth config for DetectorContext */
251
+ export interface MiddlewareAuthContextSummary {
252
+ /** Whether auth middleware was detected */
253
+ hasAuthMiddleware: boolean;
254
+ /** The type of auth detected */
255
+ authType: 'clerk' | 'nextauth' | 'auth0' | 'supabase' | 'custom' | 'unknown' | null;
256
+ /** Protected path patterns */
257
+ protectedPaths: string[];
258
+ /** Public/excluded path patterns */
259
+ publicPaths: string[];
260
+ }
261
+ /** Simplified auth helper context for DetectorContext */
262
+ export interface AuthHelperContextSummary {
263
+ /** Whether the project has throwing auth helpers */
264
+ hasThrowingHelpers: boolean;
265
+ /** Names of throwing auth helpers */
266
+ throwingHelperNames: string[];
267
+ }
268
+ /**
269
+ * Create an empty/default DetectorContext
270
+ * Useful for tests or when context isn't available
271
+ */
272
+ export declare function createEmptyDetectorContext(): DetectorContext;
273
+ export declare const SCANNABLE_EXTENSIONS: string[];
274
+ export declare const SPECIAL_FILES: string[];
275
+ export declare const MAX_FILE_SIZE: number;
276
+ /**
277
+ * Scan mode determines the depth and cost of the scan
278
+ *
279
+ * - full: Complete scan with AI validation on all files (initial onboarding, deep audits)
280
+ * - incremental: Focused scan on changed files only (CI/CD, fast feedback)
281
+ */
282
+ export type ScanMode = 'full' | 'incremental';
283
+ /**
284
+ * Scan depth controls AI usage independent of full vs incremental mode
285
+ *
286
+ * - local: Layer 1 + Layer 2 only. No AI validation, no Layer 3.
287
+ * Only Tier A (core) findings are surfaced.
288
+ * Target: <5s for typical PR scans.
289
+ *
290
+ * - verified: Layer 1 + Layer 2 + AI validation on selected findings. No Layer 3.
291
+ * Tier A is surfaced directly, Tier B goes through AI validation.
292
+ * Target: <15s with <10 AI calls.
293
+ *
294
+ * - deep: Layer 1 + Layer 2 + AI validation + Layer 3 semantic analysis.
295
+ * Full analysis for initial onboarding or deep security audits.
296
+ * Target: Complete thoroughness, cost secondary.
297
+ *
298
+ * ## Workflow Profile Recommendations:
299
+ *
300
+ * | Workflow | Default Depth | Rationale |
301
+ * |----------------|---------------|--------------------------------------|
302
+ * | GitHub PR | local | Fast feedback, high-signal findings |
303
+ * | VS Code | verified | Interactive, balance depth + speed |
304
+ * | CLI (default) | local | Fast local scans |
305
+ * | CLI --deep | deep | Thorough analysis when requested |
306
+ * | Onboarding | deep | Full picture on first scan |
307
+ */
308
+ export type ScanDepth = 'local' | 'verified' | 'deep';
309
+ export interface ScanModeConfig {
310
+ /** The scan mode */
311
+ mode: ScanMode;
312
+ /** For incremental scans: paths of changed files */
313
+ changedFiles?: string[];
314
+ /** For incremental scans: base commit/branch to diff against */
315
+ baseBranch?: string;
316
+ /** Whether to skip AI validation entirely (for very fast scans) */
317
+ skipAIValidation?: boolean;
318
+ /** Whether to skip Layer 3 deep analysis (reduces cost) */
319
+ skipLayer3?: boolean;
320
+ /** Maximum files to send to AI validation (cost control) */
321
+ maxAIValidationFiles?: number;
322
+ /** Maximum files for Layer 3 analysis (cost control) */
323
+ maxLayer3Files?: number;
324
+ /** Scan depth mode (cheap/validated/deep) - controls AI usage */
325
+ scanDepth?: ScanDepth;
326
+ /** Whether to exclude test files from scanning (default: true) */
327
+ excludeTestFiles?: boolean;
328
+ /** Whether to exclude seed files from scanning (default: true) */
329
+ excludeSeedFiles?: boolean;
330
+ /** Custom file path patterns to exclude (glob format) */
331
+ customExclusions?: string[];
332
+ }
333
+ /**
334
+ * Default configurations for each scan mode
335
+ */
336
+ export declare const SCAN_MODE_DEFAULTS: Record<ScanMode, Partial<ScanModeConfig>>;
337
+ //# sourceMappingURL=types.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAA;AAEnF,MAAM,MAAM,qBAAqB,GAC7B,kBAAkB,GAClB,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,GACpB,eAAe,GACf,KAAK,GACL,mBAAmB,GACnB,iBAAiB,GACjB,cAAc,GACd,oBAAoB,GACpB,uBAAuB,GACvB,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,eAAe,GACf,aAAa,GACb,eAAe,GAEf,qBAAqB,GACrB,qBAAqB,GACrB,wBAAwB,GAExB,qBAAqB,GACrB,yBAAyB,GACzB,oBAAoB,GAEpB,0BAA0B,GAC1B,yBAAyB,GACzB,oBAAoB,GACpB,uBAAuB,GACvB,yBAAyB,GACzB,wBAAwB,GAExB,8BAA8B,GAC9B,yBAAyB,GACzB,uBAAuB,GACvB,2BAA2B,GAC3B,wBAAwB,GACxB,4BAA4B,GAC5B,wBAAwB,GACxB,sBAAsB,GACtB,sBAAsB,GAEtB,sBAAsB,GACtB,qBAAqB,GACrB,sBAAsB,GACtB,qBAAqB,GAErB,oBAAoB,GAEpB,0BAA0B,GAC1B,MAAM,GACN,eAAe,GACf,KAAK,CAAA;AAET,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,eAAe,CAAA;AAEzF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;IACrC,yEAAyE;IACzE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAChB,iDAAiD;IACjD,MAAM,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,CAAA;IACvE,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAG9B,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gBAAgB,CAAC,EAAE,qBAAqB,CAAA;IAGxC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,UAAU,CAAC,EAAE,OAAO,CAAA;IAEpB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,SAAS,EAAE,OAAO,CAAA;IAClB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,2BAA2B;IAC3B,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI,CAAA;CACrC;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI,iBAAiB,CA8B3D;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;CACb;AAGD,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAA;AAE3E,2EAA2E;AAC3E,MAAM,WAAW,8BAA8B;IAC7C,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,6BAA6B;IAC7B,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,eAAe;IACf,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,YAAY;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,4BAA4B;IAC5B,eAAe,EAAE,QAAQ,GAAG,gBAAgB,GAAG,aAAa,CAAA;IAC5D,6BAA6B;IAC7B,iBAAiB,EAAE,MAAM,CAAA;IACzB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,aAAa,EAAE,CAAA;IAGhC,cAAc,EAAE,cAAc,CAAA;IAC9B,cAAc,EAAE,cAAc,CAAA;IAC9B,iBAAiB,EAAE,OAAO,CAAA;IAE1B,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IAGjB,eAAe,CAAC,EAAE;QAChB,aAAa,EAAE,MAAM,CAAA;QACrB,iBAAiB,EAAE,MAAM,CAAA;QACzB,iBAAiB,EAAE,MAAM,CAAA;QACzB,iBAAiB,EAAE,MAAM,CAAA;QACzB,kBAAkB,EAAE,MAAM,CAAA;QAC1B,qBAAqB,EAAE,MAAM,CAAA;QAC7B,oBAAoB,EAAE,MAAM,CAAA;QAC5B,qBAAqB,EAAE,MAAM,CAAA;QAC7B,aAAa,EAAE,MAAM,CAAA;QACrB,QAAQ,EAAE,MAAM,CAAA;QAChB,mBAAmB,EAAE,MAAM,CAAA;QAC3B,eAAe,EAAE,MAAM,CAAA;QACvB,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;IAGD,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IAGrB,gBAAgB,CAAC,EAAE;QACjB,wCAAwC;QACxC,KAAK,EAAE,MAAM,CAAA;QACb,6CAA6C;QAC7C,gBAAgB,EAAE,MAAM,CAAA;QACxB,mDAAmD;QACnD,uBAAuB,EAAE,MAAM,CAAA;QAC/B,2CAA2C;QAC3C,oBAAoB,EAAE,MAAM,CAAA;QAC5B,uEAAuE;QACvE,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,kEAAkE;IAClE,yBAAyB,CAAC,EAAE,8BAA8B,EAAE,CAAA;IAG5D,YAAY,CAAC,EAAE;QACb,oCAAoC;QACpC,iBAAiB,EAAE,MAAM,CAAA;QACzB,gDAAgD;QAChD,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,+CAA+C;QAC/C,QAAQ,EAAE,MAAM,CAAA;QAChB,6DAA6D;QAC7D,UAAU,EAAE,MAAM,CAAA;QAClB,4CAA4C;QAC5C,aAAa,EAAE,MAAM,CAAA;QACrB,4CAA4C;QAC5C,aAAa,EAAE,KAAK,CAAC;YACnB,IAAI,EAAE,MAAM,CAAA;YACZ,QAAQ,EAAE,MAAM,CAAA;YAChB,UAAU,EAAE,MAAM,CAAA;YAClB,QAAQ,EAAE,MAAM,CAAA;YAChB,QAAQ,EAAE,MAAM,CAAA;YAChB,KAAK,EAAE,MAAM,CAAA;SACd,CAAC,CAAA;KACH,CAAA;IAED,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,OAAO,mCAAmC,EAAE,gBAAgB,EAAE,CAAA;CAClF;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAA;IAC1F,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,oBAAoB,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAA;AAG/D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,WAAW,EAAE,MAAM,CAAA;CACpB;AAGD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,eAAe,EAAE,CAAA;CAChE;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,qBAAqB,CAAA;CAChC;AAGD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,WAAW,EAAE,MAAM,CAAA;CACpB;AAGD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;CACrB;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAE9B,IAAI,EAAE;QACJ,6CAA6C;QAC7C,UAAU,EAAE,4BAA4B,GAAG,IAAI,CAAA;QAC/C,2CAA2C;QAC3C,WAAW,EAAE,wBAAwB,CAAA;QACrC,uDAAuD;QACvD,eAAe,EAAE,MAAM,EAAE,CAAA;KAC1B,CAAA;IAGD,SAAS,EAAE;QACT,yCAAyC;QACzC,OAAO,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAA;QACvH,kCAAkC;QAClC,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,CAAA;QACnE,0CAA0C;QAC1C,aAAa,EAAE,OAAO,CAAA;KACvB,CAAA;IAGD,UAAU,EAAE;QACV,iCAAiC;QACjC,GAAG,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;QACnE,mDAAmD;QACnD,MAAM,EAAE,OAAO,CAAA;QACf,kCAAkC;QAClC,aAAa,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,IAAI,CAAA;KACxD,CAAA;IAGD,IAAI,EAAE;QACJ,+DAA+D;QAC/D,YAAY,EAAE,OAAO,CAAA;QACrB,+DAA+D;QAC/D,eAAe,EAAE,OAAO,CAAA;QACxB,oDAAoD;QACpD,UAAU,EAAE,OAAO,CAAA;QACnB,yCAAyC;QACzC,YAAY,EAAE,OAAO,CAAA;QACrB,kDAAkD;QAClD,YAAY,EAAE,OAAO,CAAA;KACtB,CAAA;CACF;AAED,4DAA4D;AAC5D,MAAM,WAAW,4BAA4B;IAC3C,2CAA2C;IAC3C,iBAAiB,EAAE,OAAO,CAAA;IAC1B,gCAAgC;IAChC,QAAQ,EAAE,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAA;IACnF,8BAA8B;IAC9B,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,oCAAoC;IACpC,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,yDAAyD;AACzD,MAAM,WAAW,wBAAwB;IACvC,oDAAoD;IACpD,kBAAkB,EAAE,OAAO,CAAA;IAC3B,qCAAqC;IACrC,mBAAmB,EAAE,MAAM,EAAE,CAAA;CAC9B;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,eAAe,CA4B5D;AAGD,eAAO,MAAM,oBAAoB,UAMhC,CAAA;AAGD,eAAO,MAAM,aAAa,UAazB,CAAA;AAGD,eAAO,MAAM,aAAa,QAAY,CAAA;AAMtC;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,aAAa,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAA;AAErD,MAAM,WAAW,cAAc;IAC7B,oBAAoB;IACpB,IAAI,EAAE,QAAQ,CAAA;IAEd,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IAEvB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B,2DAA2D;IAC3D,UAAU,CAAC,EAAE,OAAO,CAAA;IAEpB,4DAA4D;IAC5D,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB,iEAAiE;IACjE,SAAS,CAAC,EAAE,SAAS,CAAA;IAErB,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B,yDAAyD;IACzD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;CAC5B;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAexE,CAAA"}