@oculum/scanner 1.0.14 → 1.0.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/detect/ai-code/index.d.ts +6 -11
- package/dist/detect/ai-code/index.d.ts.map +1 -1
- package/dist/detect/ai-code/index.js +6 -24
- package/dist/detect/ai-code/index.js.map +1 -1
- package/dist/detect/ast-rules/agent-tools-ast.d.ts +14 -0
- package/dist/detect/ast-rules/agent-tools-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/agent-tools-ast.js +809 -0
- package/dist/detect/ast-rules/agent-tools-ast.js.map +1 -0
- package/dist/detect/ast-rules/ai-fingerprinting-ast.d.ts +14 -0
- package/dist/detect/ast-rules/ai-fingerprinting-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/ai-fingerprinting-ast.js +344 -0
- package/dist/detect/ast-rules/ai-fingerprinting-ast.js.map +1 -0
- package/dist/detect/ast-rules/auth-patterns-ast.d.ts +14 -0
- package/dist/detect/ast-rules/auth-patterns-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/auth-patterns-ast.js +280 -0
- package/dist/detect/ast-rules/auth-patterns-ast.js.map +1 -0
- package/dist/detect/ast-rules/byok-ast.d.ts +13 -0
- package/dist/detect/ast-rules/byok-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/byok-ast.js +180 -0
- package/dist/detect/ast-rules/byok-ast.js.map +1 -0
- package/dist/detect/ast-rules/child-process-ast.d.ts +13 -0
- package/dist/detect/ast-rules/child-process-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/child-process-ast.js +252 -0
- package/dist/detect/ast-rules/child-process-ast.js.map +1 -0
- package/dist/detect/ast-rules/dangerous-eval-ast.d.ts +13 -0
- package/dist/detect/ast-rules/dangerous-eval-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/dangerous-eval-ast.js +218 -0
- package/dist/detect/ast-rules/dangerous-eval-ast.js.map +1 -0
- package/dist/detect/ast-rules/data-exposure-ast.d.ts +13 -0
- package/dist/detect/ast-rules/data-exposure-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/data-exposure-ast.js +158 -0
- package/dist/detect/ast-rules/data-exposure-ast.js.map +1 -0
- package/dist/detect/ast-rules/dom-xss-ast.d.ts +14 -0
- package/dist/detect/ast-rules/dom-xss-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/dom-xss-ast.js +217 -0
- package/dist/detect/ast-rules/dom-xss-ast.js.map +1 -0
- package/dist/detect/ast-rules/endpoint-protection-ast.d.ts +13 -0
- package/dist/detect/ast-rules/endpoint-protection-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/endpoint-protection-ast.js +228 -0
- package/dist/detect/ast-rules/endpoint-protection-ast.js.map +1 -0
- package/dist/detect/ast-rules/entropy-ast.d.ts +17 -0
- package/dist/detect/ast-rules/entropy-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/entropy-ast.js +265 -0
- package/dist/detect/ast-rules/entropy-ast.js.map +1 -0
- package/dist/detect/ast-rules/flask-debug-ast.d.ts +10 -0
- package/dist/detect/ast-rules/flask-debug-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/flask-debug-ast.js +125 -0
- package/dist/detect/ast-rules/flask-debug-ast.js.map +1 -0
- package/dist/detect/ast-rules/framework-checks-ast.d.ts +13 -0
- package/dist/detect/ast-rules/framework-checks-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/framework-checks-ast.js +185 -0
- package/dist/detect/ast-rules/framework-checks-ast.js.map +1 -0
- package/dist/detect/ast-rules/helpers/call-analysis.d.ts +62 -0
- package/dist/detect/ast-rules/helpers/call-analysis.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/call-analysis.js +217 -0
- package/dist/detect/ast-rules/helpers/call-analysis.js.map +1 -0
- package/dist/detect/ast-rules/helpers/context-detection.d.ts +33 -0
- package/dist/detect/ast-rules/helpers/context-detection.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/context-detection.js +256 -0
- package/dist/detect/ast-rules/helpers/context-detection.js.map +1 -0
- package/dist/detect/ast-rules/helpers/control-flow.d.ts +40 -0
- package/dist/detect/ast-rules/helpers/control-flow.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/control-flow.js +174 -0
- package/dist/detect/ast-rules/helpers/control-flow.js.map +1 -0
- package/dist/detect/ast-rules/helpers/import-analysis.d.ts +43 -0
- package/dist/detect/ast-rules/helpers/import-analysis.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/import-analysis.js +149 -0
- package/dist/detect/ast-rules/helpers/import-analysis.js.map +1 -0
- package/dist/detect/ast-rules/helpers/index.d.ts +16 -0
- package/dist/detect/ast-rules/helpers/index.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/index.js +112 -0
- package/dist/detect/ast-rules/helpers/index.js.map +1 -0
- package/dist/detect/ast-rules/helpers/python-helpers.d.ts +215 -0
- package/dist/detect/ast-rules/helpers/python-helpers.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/python-helpers.js +935 -0
- package/dist/detect/ast-rules/helpers/python-helpers.js.map +1 -0
- package/dist/detect/ast-rules/helpers/scope-analysis.d.ts +50 -0
- package/dist/detect/ast-rules/helpers/scope-analysis.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/scope-analysis.js +194 -0
- package/dist/detect/ast-rules/helpers/scope-analysis.js.map +1 -0
- package/dist/detect/ast-rules/helpers/string-analysis.d.ts +57 -0
- package/dist/detect/ast-rules/helpers/string-analysis.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/string-analysis.js +184 -0
- package/dist/detect/ast-rules/helpers/string-analysis.js.map +1 -0
- package/dist/detect/ast-rules/helpers/type-extraction.d.ts +44 -0
- package/dist/detect/ast-rules/helpers/type-extraction.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/type-extraction.js +125 -0
- package/dist/detect/ast-rules/helpers/type-extraction.js.map +1 -0
- package/dist/detect/ast-rules/helpers/user-input.d.ts +35 -0
- package/dist/detect/ast-rules/helpers/user-input.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/user-input.js +243 -0
- package/dist/detect/ast-rules/helpers/user-input.js.map +1 -0
- package/dist/detect/ast-rules/index.d.ts +112 -0
- package/dist/detect/ast-rules/index.d.ts.map +1 -0
- package/dist/detect/ast-rules/index.js +232 -0
- package/dist/detect/ast-rules/index.js.map +1 -0
- package/dist/detect/ast-rules/json-parse-ast.d.ts +13 -0
- package/dist/detect/ast-rules/json-parse-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/json-parse-ast.js +143 -0
- package/dist/detect/ast-rules/json-parse-ast.js.map +1 -0
- package/dist/detect/ast-rules/log-injection-ast.d.ts +14 -0
- package/dist/detect/ast-rules/log-injection-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/log-injection-ast.js +235 -0
- package/dist/detect/ast-rules/log-injection-ast.js.map +1 -0
- package/dist/detect/ast-rules/logic-gates-ast.d.ts +14 -0
- package/dist/detect/ast-rules/logic-gates-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/logic-gates-ast.js +312 -0
- package/dist/detect/ast-rules/logic-gates-ast.js.map +1 -0
- package/dist/detect/ast-rules/mcp-security-ast.d.ts +14 -0
- package/dist/detect/ast-rules/mcp-security-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/mcp-security-ast.js +755 -0
- package/dist/detect/ast-rules/mcp-security-ast.js.map +1 -0
- package/dist/detect/ast-rules/model-supply-chain-ast.d.ts +13 -0
- package/dist/detect/ast-rules/model-supply-chain-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/model-supply-chain-ast.js +188 -0
- package/dist/detect/ast-rules/model-supply-chain-ast.js.map +1 -0
- package/dist/detect/ast-rules/package-hallucination-ast.d.ts +13 -0
- package/dist/detect/ast-rules/package-hallucination-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/package-hallucination-ast.js +607 -0
- package/dist/detect/ast-rules/package-hallucination-ast.js.map +1 -0
- package/dist/detect/ast-rules/prompt-hygiene-ast.d.ts +15 -0
- package/dist/detect/ast-rules/prompt-hygiene-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/prompt-hygiene-ast.js +332 -0
- package/dist/detect/ast-rules/prompt-hygiene-ast.js.map +1 -0
- package/dist/detect/ast-rules/rag-safety-ast.d.ts +18 -0
- package/dist/detect/ast-rules/rag-safety-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/rag-safety-ast.js +640 -0
- package/dist/detect/ast-rules/rag-safety-ast.js.map +1 -0
- package/dist/detect/ast-rules/request-validation-ast.d.ts +13 -0
- package/dist/detect/ast-rules/request-validation-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/request-validation-ast.js +116 -0
- package/dist/detect/ast-rules/request-validation-ast.js.map +1 -0
- package/dist/detect/ast-rules/risky-imports-ast.d.ts +14 -0
- package/dist/detect/ast-rules/risky-imports-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/risky-imports-ast.js +114 -0
- package/dist/detect/ast-rules/risky-imports-ast.js.map +1 -0
- package/dist/detect/ast-rules/schema-validation-ast.d.ts +14 -0
- package/dist/detect/ast-rules/schema-validation-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/schema-validation-ast.js +233 -0
- package/dist/detect/ast-rules/schema-validation-ast.js.map +1 -0
- package/dist/detect/ast-rules/secret-patterns-ast.d.ts +17 -0
- package/dist/detect/ast-rules/secret-patterns-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/secret-patterns-ast.js +199 -0
- package/dist/detect/ast-rules/secret-patterns-ast.js.map +1 -0
- package/dist/detect/ast-rules/security-headers-ast.d.ts +14 -0
- package/dist/detect/ast-rules/security-headers-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/security-headers-ast.js +187 -0
- package/dist/detect/ast-rules/security-headers-ast.js.map +1 -0
- package/dist/detect/ast-rules/sql-injection-ast.d.ts +17 -0
- package/dist/detect/ast-rules/sql-injection-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/sql-injection-ast.js +497 -0
- package/dist/detect/ast-rules/sql-injection-ast.js.map +1 -0
- package/dist/detect/ast-rules/ssrf-ast.d.ts +14 -0
- package/dist/detect/ast-rules/ssrf-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/ssrf-ast.js +573 -0
- package/dist/detect/ast-rules/ssrf-ast.js.map +1 -0
- package/dist/detect/ast-rules/taint-fix-templates.d.ts +18 -0
- package/dist/detect/ast-rules/taint-fix-templates.d.ts.map +1 -0
- package/dist/detect/ast-rules/taint-fix-templates.js +92 -0
- package/dist/detect/ast-rules/taint-fix-templates.js.map +1 -0
- package/dist/detect/ast-rules/taint-flow-ast.d.ts +24 -0
- package/dist/detect/ast-rules/taint-flow-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/taint-flow-ast.js +340 -0
- package/dist/detect/ast-rules/taint-flow-ast.js.map +1 -0
- package/dist/detect/ast-rules/variables-ast.d.ts +24 -0
- package/dist/detect/ast-rules/variables-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/variables-ast.js +362 -0
- package/dist/detect/ast-rules/variables-ast.js.map +1 -0
- package/dist/detect/ast-rules/weak-crypto-ast.d.ts +15 -0
- package/dist/detect/ast-rules/weak-crypto-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/weak-crypto-ast.js +406 -0
- package/dist/detect/ast-rules/weak-crypto-ast.js.map +1 -0
- package/dist/detect/ast-rules/xxe-ast.d.ts +13 -0
- package/dist/detect/ast-rules/xxe-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/xxe-ast.js +157 -0
- package/dist/detect/ast-rules/xxe-ast.js.map +1 -0
- package/dist/detect/config/agent-skill-injection.d.ts.map +1 -1
- package/dist/detect/config/agent-skill-injection.js +2 -24
- package/dist/detect/config/agent-skill-injection.js.map +1 -1
- package/dist/detect/config/index.d.ts +1 -0
- package/dist/detect/config/index.d.ts.map +1 -1
- package/dist/detect/config/index.js +3 -1
- package/dist/detect/config/index.js.map +1 -1
- package/dist/detect/config/osv-check.d.ts.map +1 -1
- package/dist/detect/config/osv-check.js +6 -1
- package/dist/detect/config/osv-check.js.map +1 -1
- package/dist/detect/config/package-check.d.ts.map +1 -1
- package/dist/detect/config/package-check.js +6 -1
- package/dist/detect/config/package-check.js.map +1 -1
- package/dist/detect/config/rules-file-backdoor.d.ts +36 -0
- package/dist/detect/config/rules-file-backdoor.d.ts.map +1 -0
- package/dist/detect/config/rules-file-backdoor.js +379 -0
- package/dist/detect/config/rules-file-backdoor.js.map +1 -0
- package/dist/detect/index.d.ts +43 -6
- package/dist/detect/index.d.ts.map +1 -1
- package/dist/detect/index.js +70 -7
- package/dist/detect/index.js.map +1 -1
- package/dist/detect/secrets/config-audit.d.ts.map +1 -1
- package/dist/detect/secrets/config-audit.js +36 -3
- package/dist/detect/secrets/config-audit.js.map +1 -1
- package/dist/detect/secrets/entropy.d.ts.map +1 -1
- package/dist/detect/secrets/entropy.js +180 -0
- package/dist/detect/secrets/entropy.js.map +1 -1
- package/dist/detect/secrets/index.d.ts +0 -2
- package/dist/detect/secrets/index.d.ts.map +1 -1
- package/dist/detect/secrets/index.js +7 -17
- package/dist/detect/secrets/index.js.map +1 -1
- package/dist/detect/structural/index.d.ts +15 -28
- package/dist/detect/structural/index.d.ts.map +1 -1
- package/dist/detect/structural/index.js +20 -497
- package/dist/detect/structural/index.js.map +1 -1
- package/dist/index.d.ts +3 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +9 -1
- package/dist/index.js.map +1 -1
- package/dist/model/auth-helper-detector.d.ts.map +1 -1
- package/dist/model/auth-helper-detector.js +2 -7
- package/dist/model/auth-helper-detector.js.map +1 -1
- package/dist/model/import-resolver.d.ts.map +1 -1
- package/dist/model/import-resolver.js +94 -0
- package/dist/model/import-resolver.js.map +1 -1
- package/dist/model/imported-auth-detector.js +8 -8
- package/dist/model/imported-auth-detector.js.map +1 -1
- package/dist/model/index.d.ts +8 -0
- package/dist/model/index.d.ts.map +1 -1
- package/dist/model/index.js +198 -73
- package/dist/model/index.js.map +1 -1
- package/dist/model/module-graph.d.ts.map +1 -1
- package/dist/model/module-graph.js +22 -9
- package/dist/model/module-graph.js.map +1 -1
- package/dist/model/project-context.d.ts +1 -1
- package/dist/model/project-context.d.ts.map +1 -1
- package/dist/model/project-context.js +34 -0
- package/dist/model/project-context.js.map +1 -1
- package/dist/model/route-auth-resolver.d.ts.map +1 -1
- package/dist/model/route-auth-resolver.js +17 -2
- package/dist/model/route-auth-resolver.js.map +1 -1
- package/dist/model/route-discovery/index.js +1 -1
- package/dist/model/route-discovery/index.js.map +1 -1
- package/dist/model/route-discovery/nextjs.js +1 -1
- package/dist/model/route-discovery/nextjs.js.map +1 -1
- package/dist/model/route-discovery/python.d.ts +6 -3
- package/dist/model/route-discovery/python.d.ts.map +1 -1
- package/dist/model/route-discovery/python.js +132 -9
- package/dist/model/route-discovery/python.js.map +1 -1
- package/dist/model/route-discovery/types.d.ts +1 -1
- package/dist/model/route-discovery/types.d.ts.map +1 -1
- package/dist/model/route-discovery/utils.d.ts +8 -0
- package/dist/model/route-discovery/utils.d.ts.map +1 -1
- package/dist/model/route-discovery/utils.js +70 -0
- package/dist/model/route-discovery/utils.js.map +1 -1
- package/dist/model/taint-types.d.ts +0 -4
- package/dist/model/taint-types.d.ts.map +1 -1
- package/dist/parse/ast.d.ts +58 -0
- package/dist/parse/ast.d.ts.map +1 -0
- package/dist/parse/ast.js +230 -0
- package/dist/parse/ast.js.map +1 -0
- package/dist/parse/call-graph.d.ts +41 -0
- package/dist/parse/call-graph.d.ts.map +1 -0
- package/dist/parse/call-graph.js +386 -0
- package/dist/parse/call-graph.js.map +1 -0
- package/dist/parse/file-classifier.d.ts +11 -0
- package/dist/parse/file-classifier.d.ts.map +1 -1
- package/dist/parse/file-classifier.js +63 -15
- package/dist/parse/file-classifier.js.map +1 -1
- package/dist/parse/node-index.d.ts +32 -0
- package/dist/parse/node-index.d.ts.map +1 -0
- package/dist/parse/node-index.js +103 -0
- package/dist/parse/node-index.js.map +1 -0
- package/dist/parse/type-extractor.d.ts +50 -0
- package/dist/parse/type-extractor.d.ts.map +1 -0
- package/dist/parse/type-extractor.js +243 -0
- package/dist/parse/type-extractor.js.map +1 -0
- package/dist/pipeline/config.d.ts +7 -1
- package/dist/pipeline/config.d.ts.map +1 -1
- package/dist/pipeline/config.js.map +1 -1
- package/dist/pipeline/index.d.ts +3 -3
- package/dist/pipeline/index.d.ts.map +1 -1
- package/dist/pipeline/index.js +192 -64
- package/dist/pipeline/index.js.map +1 -1
- package/dist/pipeline/modes/incremental.d.ts.map +1 -1
- package/dist/pipeline/modes/incremental.js +2 -7
- package/dist/pipeline/modes/incremental.js.map +1 -1
- package/dist/postprocess/dedup.d.ts +5 -2
- package/dist/postprocess/dedup.d.ts.map +1 -1
- package/dist/postprocess/dedup.js +47 -16
- package/dist/postprocess/dedup.js.map +1 -1
- package/dist/report/build-result.d.ts +9 -4
- package/dist/report/build-result.d.ts.map +1 -1
- package/dist/report/build-result.js +15 -4
- package/dist/report/build-result.js.map +1 -1
- package/dist/report/formatters/cli-terminal.d.ts +1 -1
- package/dist/report/formatters/cli-terminal.d.ts.map +1 -1
- package/dist/report/formatters/cli-terminal.js +434 -231
- package/dist/report/formatters/cli-terminal.js.map +1 -1
- package/dist/report/sanitize.d.ts +10 -0
- package/dist/report/sanitize.d.ts.map +1 -0
- package/dist/report/sanitize.js +19 -0
- package/dist/report/sanitize.js.map +1 -0
- package/dist/score/adjustments.d.ts +20 -2
- package/dist/score/adjustments.d.ts.map +1 -1
- package/dist/score/adjustments.js +108 -37
- package/dist/score/adjustments.js.map +1 -1
- package/dist/score/confidence.d.ts +6 -0
- package/dist/score/confidence.d.ts.map +1 -1
- package/dist/score/confidence.js +10 -4
- package/dist/score/confidence.js.map +1 -1
- package/dist/score/evidence.d.ts +25 -0
- package/dist/score/evidence.d.ts.map +1 -0
- package/dist/score/evidence.js +51 -0
- package/dist/score/evidence.js.map +1 -0
- package/dist/score/index.d.ts +3 -1
- package/dist/score/index.d.ts.map +1 -1
- package/dist/score/index.js +25 -50
- package/dist/score/index.js.map +1 -1
- package/dist/score/types.d.ts +5 -1
- package/dist/score/types.d.ts.map +1 -1
- package/dist/shared/category-filter.d.ts.map +1 -1
- package/dist/shared/category-filter.js +12 -0
- package/dist/shared/category-filter.js.map +1 -1
- package/dist/shared/regex-utils.d.ts +3 -0
- package/dist/shared/regex-utils.d.ts.map +1 -0
- package/dist/shared/regex-utils.js +8 -0
- package/dist/shared/regex-utils.js.map +1 -0
- package/dist/shared/registry-clients.d.ts +7 -0
- package/dist/shared/registry-clients.d.ts.map +1 -1
- package/dist/shared/registry-clients.js +94 -17
- package/dist/shared/registry-clients.js.map +1 -1
- package/dist/shared/rules/metadata.d.ts.map +1 -1
- package/dist/shared/rules/metadata.js +17 -0
- package/dist/shared/rules/metadata.js.map +1 -1
- package/dist/shared/types.d.ts +59 -15
- package/dist/shared/types.d.ts.map +1 -1
- package/dist/shared/types.js +38 -21
- package/dist/shared/types.js.map +1 -1
- package/dist/taint/async-flow.d.ts +44 -0
- package/dist/taint/async-flow.d.ts.map +1 -0
- package/dist/taint/async-flow.js +271 -0
- package/dist/taint/async-flow.js.map +1 -0
- package/dist/taint/cfg-builder.d.ts +35 -0
- package/dist/taint/cfg-builder.d.ts.map +1 -0
- package/dist/taint/cfg-builder.js +980 -0
- package/dist/taint/cfg-builder.js.map +1 -0
- package/dist/taint/cfg-types.d.ts +76 -0
- package/dist/taint/cfg-types.d.ts.map +1 -0
- package/dist/taint/cfg-types.js +13 -0
- package/dist/taint/cfg-types.js.map +1 -0
- package/dist/taint/constant-propagation.d.ts +34 -0
- package/dist/taint/constant-propagation.d.ts.map +1 -0
- package/dist/taint/constant-propagation.js +164 -0
- package/dist/taint/constant-propagation.js.map +1 -0
- package/dist/taint/cross-file-analyzer.d.ts +27 -0
- package/dist/taint/cross-file-analyzer.d.ts.map +1 -0
- package/dist/taint/cross-file-analyzer.js +99 -0
- package/dist/taint/cross-file-analyzer.js.map +1 -0
- package/dist/taint/cross-file-index.d.ts +59 -0
- package/dist/taint/cross-file-index.d.ts.map +1 -0
- package/dist/taint/cross-file-index.js +183 -0
- package/dist/taint/cross-file-index.js.map +1 -0
- package/dist/taint/def-use.d.ts +27 -0
- package/dist/taint/def-use.d.ts.map +1 -0
- package/dist/taint/def-use.js +519 -0
- package/dist/taint/def-use.js.map +1 -0
- package/dist/taint/file-analysis-cache.d.ts +47 -0
- package/dist/taint/file-analysis-cache.d.ts.map +1 -0
- package/dist/taint/file-analysis-cache.js +107 -0
- package/dist/taint/file-analysis-cache.js.map +1 -0
- package/dist/taint/framework-models.d.ts +77 -0
- package/dist/taint/framework-models.d.ts.map +1 -0
- package/dist/taint/framework-models.js +258 -0
- package/dist/taint/framework-models.js.map +1 -0
- package/dist/taint/helpers.d.ts +31 -0
- package/dist/taint/helpers.d.ts.map +1 -0
- package/dist/taint/helpers.js +130 -0
- package/dist/taint/helpers.js.map +1 -0
- package/dist/taint/index.d.ts +28 -0
- package/dist/taint/index.d.ts.map +1 -0
- package/dist/taint/index.js +77 -0
- package/dist/taint/index.js.map +1 -0
- package/dist/taint/llm-registry.d.ts +47 -0
- package/dist/taint/llm-registry.d.ts.map +1 -0
- package/dist/taint/llm-registry.js +152 -0
- package/dist/taint/llm-registry.js.map +1 -0
- package/dist/taint/llm-risk-scoring.d.ts +54 -0
- package/dist/taint/llm-risk-scoring.d.ts.map +1 -0
- package/dist/taint/llm-risk-scoring.js +376 -0
- package/dist/taint/llm-risk-scoring.js.map +1 -0
- package/dist/taint/propagation-types.d.ts +104 -0
- package/dist/taint/propagation-types.d.ts.map +1 -0
- package/dist/taint/propagation-types.js +98 -0
- package/dist/taint/propagation-types.js.map +1 -0
- package/dist/taint/propagation.d.ts +111 -0
- package/dist/taint/propagation.d.ts.map +1 -0
- package/dist/taint/propagation.js +1576 -0
- package/dist/taint/propagation.js.map +1 -0
- package/dist/taint/sanitizer-registry.d.ts +26 -0
- package/dist/taint/sanitizer-registry.d.ts.map +1 -0
- package/dist/taint/sanitizer-registry.js +422 -0
- package/dist/taint/sanitizer-registry.js.map +1 -0
- package/dist/taint/sink-classifier.d.ts +27 -0
- package/dist/taint/sink-classifier.d.ts.map +1 -0
- package/dist/taint/sink-classifier.js +1166 -0
- package/dist/taint/sink-classifier.js.map +1 -0
- package/dist/taint/source-classifier.d.ts +29 -0
- package/dist/taint/source-classifier.d.ts.map +1 -0
- package/dist/taint/source-classifier.js +814 -0
- package/dist/taint/source-classifier.js.map +1 -0
- package/dist/taint/taint-analyzer.d.ts +33 -0
- package/dist/taint/taint-analyzer.d.ts.map +1 -0
- package/dist/taint/taint-analyzer.js +88 -0
- package/dist/taint/taint-analyzer.js.map +1 -0
- package/dist/taint/taint-summary.d.ts +37 -0
- package/dist/taint/taint-summary.d.ts.map +1 -0
- package/dist/taint/taint-summary.js +293 -0
- package/dist/taint/taint-summary.js.map +1 -0
- package/dist/taint/types.d.ts +47 -0
- package/dist/taint/types.d.ts.map +1 -0
- package/dist/taint/types.js +19 -0
- package/dist/taint/types.js.map +1 -0
- package/dist/validate/clients.d.ts +2 -1
- package/dist/validate/clients.d.ts.map +1 -1
- package/dist/validate/clients.js +3 -2
- package/dist/validate/clients.js.map +1 -1
- package/dist/validate/index.d.ts +5 -6
- package/dist/validate/index.d.ts.map +1 -1
- package/dist/validate/index.js +22 -21
- package/dist/validate/index.js.map +1 -1
- package/dist/validate/prompts/modules/ai-patterns.d.ts +1 -1
- package/dist/validate/prompts/modules/ai-patterns.d.ts.map +1 -1
- package/dist/validate/prompts/modules/ai-patterns.js +16 -0
- package/dist/validate/prompts/modules/ai-patterns.js.map +1 -1
- package/dist/validate/prompts/modules/common.d.ts +1 -1
- package/dist/validate/prompts/modules/common.d.ts.map +1 -1
- package/dist/validate/prompts/modules/common.js +12 -3
- package/dist/validate/prompts/modules/common.js.map +1 -1
- package/dist/validate/providers/anthropic.d.ts +4 -4
- package/dist/validate/providers/anthropic.d.ts.map +1 -1
- package/dist/validate/providers/anthropic.js +85 -58
- package/dist/validate/providers/anthropic.js.map +1 -1
- package/dist/validate/providers/openai.d.ts +4 -4
- package/dist/validate/providers/openai.d.ts.map +1 -1
- package/dist/validate/providers/openai.js +149 -99
- package/dist/validate/providers/openai.js.map +1 -1
- package/dist/validate/request-builder.d.ts +2 -8
- package/dist/validate/request-builder.d.ts.map +1 -1
- package/dist/validate/request-builder.js +4 -34
- package/dist/validate/request-builder.js.map +1 -1
- package/dist/validate/types.d.ts +9 -0
- package/dist/validate/types.d.ts.map +1 -1
- package/dist/validate/types.js.map +1 -1
- package/dist/validate/utils/path-helpers.js +2 -2
- package/dist/validate/utils/path-helpers.js.map +1 -1
- package/dist/validate/utils/response-parser.d.ts +10 -0
- package/dist/validate/utils/response-parser.d.ts.map +1 -1
- package/dist/validate/utils/response-parser.js +21 -2
- package/dist/validate/utils/response-parser.js.map +1 -1
- package/dist/validate/utils/retry.d.ts.map +1 -1
- package/dist/validate/utils/retry.js +19 -4
- package/dist/validate/utils/retry.js.map +1 -1
- package/package.json +7 -4
- package/src/__tests__/benchmark/fixtures/layer2/ai-execution-sinks.ts +1 -1
- package/src/__tests__/benchmark/planted-benchmark.test.ts +337 -0
- package/src/__tests__/benchmark/utils/test-runner.ts +38 -4
- package/src/__tests__/category-filter.test.ts +5 -1
- package/src/__tests__/context-engine/route-discovery/python.test.ts +726 -0
- package/src/__tests__/detect/ast-rules.test.ts +1043 -0
- package/src/__tests__/detect/offline-mode.test.ts +147 -0
- package/src/__tests__/detect/python-ast-rules.test.ts +569 -0
- package/src/__tests__/detect/python-helpers.test.ts +536 -0
- package/src/__tests__/detect/python-sast-rules.test.ts +453 -0
- package/src/__tests__/detect/rules-file-backdoor-decoders.test.ts +151 -0
- package/src/__tests__/detect/rules-file-backdoor.test.ts +284 -0
- package/src/__tests__/detect/taint-fix-templates.test.ts +150 -0
- package/src/__tests__/detect/taint-path-serialization.test.ts +170 -0
- package/src/__tests__/parse/call-graph.test.ts +300 -0
- package/src/__tests__/parse/python-parser.test.ts +274 -0
- package/src/__tests__/regression/known-false-positives.test.ts +491 -9
- package/src/__tests__/regression/rules-file-backdoor.test.ts +137 -0
- package/src/__tests__/score/adjustments.test.ts +34 -16
- package/src/__tests__/score/confidence.test.ts +84 -57
- package/src/__tests__/score/evidence-scoring.test.ts +249 -0
- package/src/__tests__/score/evidence.test.ts +144 -0
- package/src/__tests__/score/scoring-integration.test.ts +56 -34
- package/src/__tests__/score/taint-adjustments.test.ts +14 -228
- package/src/__tests__/snapshots/__snapshots__/scan-depth.test.ts.snap +65 -59
- package/src/__tests__/snapshots/scan-depth.test.ts +39 -7
- package/src/__tests__/taint/async-flow.test.ts +247 -0
- package/src/__tests__/taint/cfg-builder.test.ts +835 -0
- package/src/__tests__/taint/constant-propagation.test.ts +302 -0
- package/src/__tests__/taint/cross-file-index.test.ts +683 -0
- package/src/__tests__/taint/cross-file-integration.test.ts +275 -0
- package/src/__tests__/taint/cross-file-propagation.test.ts +910 -0
- package/src/__tests__/taint/def-use.test.ts +132 -0
- package/src/__tests__/taint/field-sensitive-sinks.test.ts +179 -0
- package/src/__tests__/taint/field-sensitivity.test.ts +342 -0
- package/src/__tests__/taint/file-analysis-cache.test.ts +290 -0
- package/src/__tests__/taint/framework-models.test.ts +227 -0
- package/src/__tests__/taint/llm-flow-graph.test.ts +850 -0
- package/src/__tests__/taint/llm-risk-scoring.test.ts +439 -0
- package/src/__tests__/taint/performance-parity.test.ts +315 -0
- package/src/__tests__/taint/propagation.test.ts +621 -0
- package/src/__tests__/taint/python-cross-file.test.ts +494 -0
- package/src/__tests__/taint/python-taint.test.ts +1344 -0
- package/src/__tests__/taint/sanitizer-registry.test.ts +304 -0
- package/src/__tests__/taint/sanitizer-regression.test.ts +111 -0
- package/src/__tests__/taint/sink-classifier.test.ts +537 -0
- package/src/__tests__/taint/source-classifier.test.ts +367 -0
- package/src/__tests__/taint/taint-pipeline.test.ts +418 -0
- package/src/__tests__/taint/taint-smoke.test.ts +400 -0
- package/src/__tests__/taint/taint-summary.test.ts +472 -0
- package/src/detect/ai-code/index.ts +6 -11
- package/src/detect/ast-rules/agent-tools-ast.ts +861 -0
- package/src/detect/ast-rules/ai-fingerprinting-ast.ts +451 -0
- package/src/detect/ast-rules/auth-patterns-ast.ts +304 -0
- package/src/detect/ast-rules/byok-ast.ts +195 -0
- package/src/detect/ast-rules/child-process-ast.ts +276 -0
- package/src/detect/ast-rules/dangerous-eval-ast.ts +227 -0
- package/src/detect/ast-rules/data-exposure-ast.ts +162 -0
- package/src/detect/ast-rules/dom-xss-ast.ts +260 -0
- package/src/detect/ast-rules/endpoint-protection-ast.ts +231 -0
- package/src/detect/ast-rules/entropy-ast.ts +268 -0
- package/src/detect/ast-rules/flask-debug-ast.ts +148 -0
- package/src/detect/ast-rules/framework-checks-ast.ts +200 -0
- package/src/detect/ast-rules/helpers/call-analysis.ts +256 -0
- package/src/detect/ast-rules/helpers/context-detection.ts +277 -0
- package/src/detect/ast-rules/helpers/control-flow.ts +179 -0
- package/src/detect/ast-rules/helpers/import-analysis.ts +185 -0
- package/src/detect/ast-rules/helpers/index.ts +133 -0
- package/src/detect/ast-rules/helpers/python-helpers.ts +1054 -0
- package/src/detect/ast-rules/helpers/scope-analysis.ts +224 -0
- package/src/detect/ast-rules/helpers/string-analysis.ts +215 -0
- package/src/detect/ast-rules/helpers/type-extraction.ts +138 -0
- package/src/detect/ast-rules/helpers/user-input.ts +256 -0
- package/src/detect/ast-rules/index.ts +311 -0
- package/src/detect/ast-rules/json-parse-ast.ts +162 -0
- package/src/detect/ast-rules/log-injection-ast.ts +243 -0
- package/src/detect/ast-rules/logic-gates-ast.ts +343 -0
- package/src/detect/ast-rules/mcp-security-ast.ts +808 -0
- package/src/detect/ast-rules/model-supply-chain-ast.ts +202 -0
- package/src/detect/ast-rules/package-hallucination-ast.ts +664 -0
- package/src/detect/ast-rules/prompt-hygiene-ast.ts +329 -0
- package/src/detect/ast-rules/rag-safety-ast.ts +689 -0
- package/src/detect/ast-rules/request-validation-ast.ts +122 -0
- package/src/detect/ast-rules/risky-imports-ast.ts +133 -0
- package/src/detect/ast-rules/schema-validation-ast.ts +244 -0
- package/src/detect/ast-rules/secret-patterns-ast.ts +223 -0
- package/src/detect/ast-rules/security-headers-ast.ts +206 -0
- package/src/detect/ast-rules/sql-injection-ast.ts +614 -0
- package/src/detect/ast-rules/ssrf-ast.ts +601 -0
- package/src/detect/ast-rules/taint-fix-templates.ts +108 -0
- package/src/detect/ast-rules/taint-flow-ast.ts +416 -0
- package/src/detect/ast-rules/variables-ast.ts +446 -0
- package/src/detect/ast-rules/weak-crypto-ast.ts +441 -0
- package/src/detect/ast-rules/xxe-ast.ts +184 -0
- package/src/detect/config/agent-skill-injection.ts +2 -24
- package/src/detect/config/index.ts +1 -0
- package/src/detect/config/osv-check.ts +6 -1
- package/src/detect/config/package-check.ts +6 -1
- package/src/detect/config/rules-file-backdoor.ts +438 -0
- package/src/detect/index.ts +146 -52
- package/src/detect/secrets/config-audit.ts +37 -3
- package/src/detect/secrets/entropy.ts +195 -0
- package/src/detect/secrets/index.ts +7 -16
- package/src/detect/structural/index.ts +23 -566
- package/src/index.ts +7 -0
- package/src/model/auth-helper-detector.ts +1 -7
- package/src/model/import-resolver.ts +104 -0
- package/src/model/imported-auth-detector.ts +1 -1
- package/src/model/index.ts +240 -80
- package/src/model/module-graph.ts +17 -5
- package/src/model/project-context.ts +28 -1
- package/src/model/route-auth-resolver.ts +18 -3
- package/src/model/route-discovery/index.ts +1 -1
- package/src/model/route-discovery/nextjs.ts +1 -1
- package/src/model/route-discovery/python.ts +156 -9
- package/src/model/route-discovery/types.ts +1 -1
- package/src/model/route-discovery/utils.ts +73 -0
- package/src/model/taint-types.ts +1 -6
- package/src/parse/ast.ts +271 -0
- package/src/parse/call-graph.ts +419 -0
- package/src/parse/file-classifier.ts +69 -15
- package/src/parse/node-index.ts +118 -0
- package/src/parse/type-extractor.ts +293 -0
- package/src/pipeline/config.ts +7 -0
- package/src/pipeline/index.ts +464 -199
- package/src/pipeline/modes/incremental.ts +1 -7
- package/src/postprocess/dedup.ts +48 -17
- package/src/report/build-result.ts +57 -29
- package/src/report/formatters/cli-terminal.ts +731 -415
- package/src/report/sanitize.ts +27 -0
- package/src/score/adjustments.ts +113 -40
- package/src/score/confidence.ts +10 -5
- package/src/score/evidence.ts +55 -0
- package/src/score/index.ts +27 -55
- package/src/score/types.ts +4 -0
- package/src/shared/category-filter.ts +12 -0
- package/src/shared/regex-utils.ts +4 -0
- package/src/shared/registry-clients.ts +106 -18
- package/src/shared/rules/__tests__/metadata.test.ts +5 -1
- package/src/shared/rules/metadata.ts +19 -0
- package/src/shared/types.ts +372 -253
- package/src/taint/async-flow.ts +301 -0
- package/src/taint/cfg-builder.ts +1127 -0
- package/src/taint/cfg-types.ts +110 -0
- package/src/taint/constant-propagation.ts +170 -0
- package/src/taint/cross-file-analyzer.ts +118 -0
- package/src/taint/cross-file-index.ts +275 -0
- package/src/taint/def-use.ts +556 -0
- package/src/taint/file-analysis-cache.ts +145 -0
- package/src/taint/framework-models.ts +313 -0
- package/src/taint/helpers.ts +138 -0
- package/src/taint/index.ts +71 -0
- package/src/taint/llm-registry.ts +174 -0
- package/src/taint/llm-risk-scoring.ts +412 -0
- package/src/taint/propagation-types.ts +188 -0
- package/src/taint/propagation.ts +1750 -0
- package/src/taint/sanitizer-registry.ts +490 -0
- package/src/taint/sink-classifier.ts +1402 -0
- package/src/taint/source-classifier.ts +859 -0
- package/src/taint/taint-analyzer.ts +112 -0
- package/src/taint/taint-summary.ts +341 -0
- package/src/taint/types.ts +86 -0
- package/src/validate/clients.ts +3 -2
- package/src/validate/index.ts +89 -53
- package/src/validate/prompts/modules/ai-patterns.ts +16 -0
- package/src/validate/prompts/modules/common.ts +12 -3
- package/src/validate/providers/anthropic.ts +254 -148
- package/src/validate/providers/openai.ts +363 -218
- package/src/validate/request-builder.ts +2 -45
- package/src/validate/types.ts +9 -0
- package/src/validate/utils/path-helpers.ts +2 -2
- package/src/validate/utils/response-parser.ts +32 -3
- package/src/validate/utils/retry.ts +19 -4
- package/dist/ai-context/index.d.ts +0 -6
- package/dist/ai-context/index.d.ts.map +0 -1
- package/dist/ai-context/index.js +0 -13
- package/dist/ai-context/index.js.map +0 -1
- package/dist/ai-context/manager.d.ts +0 -67
- package/dist/ai-context/manager.d.ts.map +0 -1
- package/dist/ai-context/manager.js +0 -104
- package/dist/ai-context/manager.js.map +0 -1
- package/dist/baseline/diff.d.ts +0 -32
- package/dist/baseline/diff.d.ts.map +0 -1
- package/dist/baseline/diff.js +0 -119
- package/dist/baseline/diff.js.map +0 -1
- package/dist/baseline/index.d.ts +0 -9
- package/dist/baseline/index.d.ts.map +0 -1
- package/dist/baseline/index.js +0 -19
- package/dist/baseline/index.js.map +0 -1
- package/dist/baseline/manager.d.ts +0 -67
- package/dist/baseline/manager.d.ts.map +0 -1
- package/dist/baseline/manager.js +0 -180
- package/dist/baseline/manager.js.map +0 -1
- package/dist/baseline/types.d.ts +0 -91
- package/dist/baseline/types.d.ts.map +0 -1
- package/dist/baseline/types.js +0 -12
- package/dist/baseline/types.js.map +0 -1
- package/dist/category-filter.d.ts +0 -125
- package/dist/category-filter.d.ts.map +0 -1
- package/dist/category-filter.js +0 -360
- package/dist/category-filter.js.map +0 -1
- package/dist/detect/ai-code/agent-tools.d.ts +0 -22
- package/dist/detect/ai-code/agent-tools.d.ts.map +0 -1
- package/dist/detect/ai-code/agent-tools.js +0 -1509
- package/dist/detect/ai-code/agent-tools.js.map +0 -1
- package/dist/detect/ai-code/byok-patterns.d.ts +0 -15
- package/dist/detect/ai-code/byok-patterns.d.ts.map +0 -1
- package/dist/detect/ai-code/byok-patterns.js +0 -313
- package/dist/detect/ai-code/byok-patterns.js.map +0 -1
- package/dist/detect/ai-code/endpoint-protection.d.ts +0 -38
- package/dist/detect/ai-code/endpoint-protection.d.ts.map +0 -1
- package/dist/detect/ai-code/endpoint-protection.js +0 -349
- package/dist/detect/ai-code/endpoint-protection.js.map +0 -1
- package/dist/detect/ai-code/execution-sinks.d.ts +0 -21
- package/dist/detect/ai-code/execution-sinks.d.ts.map +0 -1
- package/dist/detect/ai-code/execution-sinks.js +0 -1158
- package/dist/detect/ai-code/execution-sinks.js.map +0 -1
- package/dist/detect/ai-code/fingerprinting.d.ts +0 -10
- package/dist/detect/ai-code/fingerprinting.d.ts.map +0 -1
- package/dist/detect/ai-code/fingerprinting.js +0 -665
- package/dist/detect/ai-code/fingerprinting.js.map +0 -1
- package/dist/detect/ai-code/mcp-security.d.ts +0 -20
- package/dist/detect/ai-code/mcp-security.d.ts.map +0 -1
- package/dist/detect/ai-code/mcp-security.js +0 -880
- package/dist/detect/ai-code/mcp-security.js.map +0 -1
- package/dist/detect/ai-code/model-supply-chain.d.ts +0 -23
- package/dist/detect/ai-code/model-supply-chain.d.ts.map +0 -1
- package/dist/detect/ai-code/model-supply-chain.js +0 -447
- package/dist/detect/ai-code/model-supply-chain.js.map +0 -1
- package/dist/detect/ai-code/package-hallucination.d.ts +0 -22
- package/dist/detect/ai-code/package-hallucination.d.ts.map +0 -1
- package/dist/detect/ai-code/package-hallucination.js +0 -841
- package/dist/detect/ai-code/package-hallucination.js.map +0 -1
- package/dist/detect/ai-code/prompt-hygiene.d.ts +0 -22
- package/dist/detect/ai-code/prompt-hygiene.d.ts.map +0 -1
- package/dist/detect/ai-code/prompt-hygiene.js +0 -1177
- package/dist/detect/ai-code/prompt-hygiene.js.map +0 -1
- package/dist/detect/ai-code/rag-safety.d.ts +0 -24
- package/dist/detect/ai-code/rag-safety.d.ts.map +0 -1
- package/dist/detect/ai-code/rag-safety.js +0 -913
- package/dist/detect/ai-code/rag-safety.js.map +0 -1
- package/dist/detect/ai-code/schema-validation.d.ts +0 -28
- package/dist/detect/ai-code/schema-validation.d.ts.map +0 -1
- package/dist/detect/ai-code/schema-validation.js +0 -378
- package/dist/detect/ai-code/schema-validation.js.map +0 -1
- package/dist/detect/secrets/patterns.d.ts +0 -11
- package/dist/detect/secrets/patterns.d.ts.map +0 -1
- package/dist/detect/secrets/patterns.js +0 -518
- package/dist/detect/secrets/patterns.js.map +0 -1
- package/dist/detect/secrets/weak-crypto.d.ts +0 -10
- package/dist/detect/secrets/weak-crypto.d.ts.map +0 -1
- package/dist/detect/secrets/weak-crypto.js +0 -432
- package/dist/detect/secrets/weak-crypto.js.map +0 -1
- package/dist/detect/structural/auth-patterns.d.ts +0 -22
- package/dist/detect/structural/auth-patterns.d.ts.map +0 -1
- package/dist/detect/structural/auth-patterns.js +0 -533
- package/dist/detect/structural/auth-patterns.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/child-process.d.ts +0 -16
- package/dist/detect/structural/dangerous-functions/child-process.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/child-process.js +0 -74
- package/dist/detect/structural/dangerous-functions/child-process.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/dom-xss.d.ts +0 -34
- package/dist/detect/structural/dangerous-functions/dom-xss.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/dom-xss.js +0 -230
- package/dist/detect/structural/dangerous-functions/dom-xss.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/index.d.ts +0 -16
- package/dist/detect/structural/dangerous-functions/index.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/index.js +0 -1193
- package/dist/detect/structural/dangerous-functions/index.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/json-parse.d.ts +0 -31
- package/dist/detect/structural/dangerous-functions/json-parse.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/json-parse.js +0 -326
- package/dist/detect/structural/dangerous-functions/json-parse.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/math-random.d.ts +0 -111
- package/dist/detect/structural/dangerous-functions/math-random.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/math-random.js +0 -684
- package/dist/detect/structural/dangerous-functions/math-random.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/patterns.d.ts +0 -21
- package/dist/detect/structural/dangerous-functions/patterns.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/patterns.js +0 -163
- package/dist/detect/structural/dangerous-functions/patterns.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/request-validation.d.ts +0 -13
- package/dist/detect/structural/dangerous-functions/request-validation.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/request-validation.js +0 -126
- package/dist/detect/structural/dangerous-functions/request-validation.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/control-flow.d.ts +0 -24
- package/dist/detect/structural/dangerous-functions/utils/control-flow.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/control-flow.js +0 -70
- package/dist/detect/structural/dangerous-functions/utils/control-flow.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/helpers.d.ts +0 -31
- package/dist/detect/structural/dangerous-functions/utils/helpers.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/helpers.js +0 -147
- package/dist/detect/structural/dangerous-functions/utils/helpers.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/index.d.ts +0 -9
- package/dist/detect/structural/dangerous-functions/utils/index.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/index.js +0 -23
- package/dist/detect/structural/dangerous-functions/utils/index.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/schema-validation.d.ts +0 -22
- package/dist/detect/structural/dangerous-functions/utils/schema-validation.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/schema-validation.js +0 -102
- package/dist/detect/structural/dangerous-functions/utils/schema-validation.js.map +0 -1
- package/dist/detect/structural/data-exposure.d.ts +0 -19
- package/dist/detect/structural/data-exposure.d.ts.map +0 -1
- package/dist/detect/structural/data-exposure.js +0 -262
- package/dist/detect/structural/data-exposure.js.map +0 -1
- package/dist/detect/structural/framework-checks.d.ts +0 -10
- package/dist/detect/structural/framework-checks.d.ts.map +0 -1
- package/dist/detect/structural/framework-checks.js +0 -389
- package/dist/detect/structural/framework-checks.js.map +0 -1
- package/dist/detect/structural/log-injection.d.ts +0 -18
- package/dist/detect/structural/log-injection.d.ts.map +0 -1
- package/dist/detect/structural/log-injection.js +0 -217
- package/dist/detect/structural/log-injection.js.map +0 -1
- package/dist/detect/structural/logic-gates.d.ts +0 -10
- package/dist/detect/structural/logic-gates.d.ts.map +0 -1
- package/dist/detect/structural/logic-gates.js +0 -227
- package/dist/detect/structural/logic-gates.js.map +0 -1
- package/dist/detect/structural/risky-imports.d.ts +0 -10
- package/dist/detect/structural/risky-imports.d.ts.map +0 -1
- package/dist/detect/structural/risky-imports.js +0 -168
- package/dist/detect/structural/risky-imports.js.map +0 -1
- package/dist/detect/structural/security-headers.d.ts +0 -18
- package/dist/detect/structural/security-headers.d.ts.map +0 -1
- package/dist/detect/structural/security-headers.js +0 -196
- package/dist/detect/structural/security-headers.js.map +0 -1
- package/dist/detect/structural/ssrf-detection.d.ts +0 -18
- package/dist/detect/structural/ssrf-detection.d.ts.map +0 -1
- package/dist/detect/structural/ssrf-detection.js +0 -263
- package/dist/detect/structural/ssrf-detection.js.map +0 -1
- package/dist/detect/structural/variables.d.ts +0 -11
- package/dist/detect/structural/variables.d.ts.map +0 -1
- package/dist/detect/structural/variables.js +0 -159
- package/dist/detect/structural/variables.js.map +0 -1
- package/dist/detect/structural/xxe-detection.d.ts +0 -18
- package/dist/detect/structural/xxe-detection.d.ts.map +0 -1
- package/dist/detect/structural/xxe-detection.js +0 -245
- package/dist/detect/structural/xxe-detection.js.map +0 -1
- package/dist/filtering/context-adjustments.d.ts +0 -23
- package/dist/filtering/context-adjustments.d.ts.map +0 -1
- package/dist/filtering/context-adjustments.js +0 -100
- package/dist/filtering/context-adjustments.js.map +0 -1
- package/dist/filtering/index.d.ts +0 -3
- package/dist/filtering/index.d.ts.map +0 -1
- package/dist/filtering/index.js +0 -8
- package/dist/filtering/index.js.map +0 -1
- package/dist/filtering/pipeline.d.ts +0 -48
- package/dist/filtering/pipeline.d.ts.map +0 -1
- package/dist/filtering/pipeline.js +0 -76
- package/dist/filtering/pipeline.js.map +0 -1
- package/dist/formatters/ai-context.d.ts +0 -23
- package/dist/formatters/ai-context.d.ts.map +0 -1
- package/dist/formatters/ai-context.js +0 -238
- package/dist/formatters/ai-context.js.map +0 -1
- package/dist/formatters/cli-terminal.d.ts +0 -65
- package/dist/formatters/cli-terminal.d.ts.map +0 -1
- package/dist/formatters/cli-terminal.js +0 -735
- package/dist/formatters/cli-terminal.js.map +0 -1
- package/dist/formatters/github-comment.d.ts +0 -41
- package/dist/formatters/github-comment.d.ts.map +0 -1
- package/dist/formatters/github-comment.js +0 -370
- package/dist/formatters/github-comment.js.map +0 -1
- package/dist/formatters/grouping.d.ts +0 -52
- package/dist/formatters/grouping.d.ts.map +0 -1
- package/dist/formatters/grouping.js +0 -152
- package/dist/formatters/grouping.js.map +0 -1
- package/dist/formatters/ide/claude-code.d.ts +0 -17
- package/dist/formatters/ide/claude-code.d.ts.map +0 -1
- package/dist/formatters/ide/claude-code.js +0 -94
- package/dist/formatters/ide/claude-code.js.map +0 -1
- package/dist/formatters/ide/cursor.d.ts +0 -13
- package/dist/formatters/ide/cursor.d.ts.map +0 -1
- package/dist/formatters/ide/cursor.js +0 -125
- package/dist/formatters/ide/cursor.js.map +0 -1
- package/dist/formatters/ide/index.d.ts +0 -62
- package/dist/formatters/ide/index.d.ts.map +0 -1
- package/dist/formatters/ide/index.js +0 -184
- package/dist/formatters/ide/index.js.map +0 -1
- package/dist/formatters/ide/windsurf.d.ts +0 -13
- package/dist/formatters/ide/windsurf.d.ts.map +0 -1
- package/dist/formatters/ide/windsurf.js +0 -117
- package/dist/formatters/ide/windsurf.js.map +0 -1
- package/dist/formatters/index.d.ts +0 -11
- package/dist/formatters/index.d.ts.map +0 -1
- package/dist/formatters/index.js +0 -54
- package/dist/formatters/index.js.map +0 -1
- package/dist/formatters/vscode-diagnostic.d.ts +0 -103
- package/dist/formatters/vscode-diagnostic.d.ts.map +0 -1
- package/dist/formatters/vscode-diagnostic.js +0 -151
- package/dist/formatters/vscode-diagnostic.js.map +0 -1
- package/dist/layer1/comments.d.ts +0 -11
- package/dist/layer1/comments.d.ts.map +0 -1
- package/dist/layer1/comments.js +0 -203
- package/dist/layer1/comments.js.map +0 -1
- package/dist/layer1/config-audit.d.ts +0 -11
- package/dist/layer1/config-audit.d.ts.map +0 -1
- package/dist/layer1/config-audit.js +0 -311
- package/dist/layer1/config-audit.js.map +0 -1
- package/dist/layer1/config-mcp-audit.d.ts +0 -23
- package/dist/layer1/config-mcp-audit.d.ts.map +0 -1
- package/dist/layer1/config-mcp-audit.js +0 -239
- package/dist/layer1/config-mcp-audit.js.map +0 -1
- package/dist/layer1/entropy.d.ts +0 -11
- package/dist/layer1/entropy.d.ts.map +0 -1
- package/dist/layer1/entropy.js +0 -741
- package/dist/layer1/entropy.js.map +0 -1
- package/dist/layer1/file-flags.d.ts +0 -10
- package/dist/layer1/file-flags.d.ts.map +0 -1
- package/dist/layer1/file-flags.js +0 -119
- package/dist/layer1/file-flags.js.map +0 -1
- package/dist/layer1/index.d.ts +0 -38
- package/dist/layer1/index.d.ts.map +0 -1
- package/dist/layer1/index.js +0 -170
- package/dist/layer1/index.js.map +0 -1
- package/dist/layer1/patterns.d.ts +0 -11
- package/dist/layer1/patterns.d.ts.map +0 -1
- package/dist/layer1/patterns.js +0 -512
- package/dist/layer1/patterns.js.map +0 -1
- package/dist/layer1/urls.d.ts +0 -11
- package/dist/layer1/urls.d.ts.map +0 -1
- package/dist/layer1/urls.js +0 -444
- package/dist/layer1/urls.js.map +0 -1
- package/dist/layer1/weak-crypto.d.ts +0 -10
- package/dist/layer1/weak-crypto.d.ts.map +0 -1
- package/dist/layer1/weak-crypto.js +0 -428
- package/dist/layer1/weak-crypto.js.map +0 -1
- package/dist/layer2/ai-agent-tools.d.ts +0 -22
- package/dist/layer2/ai-agent-tools.d.ts.map +0 -1
- package/dist/layer2/ai-agent-tools.js +0 -1490
- package/dist/layer2/ai-agent-tools.js.map +0 -1
- package/dist/layer2/ai-endpoint-protection.d.ts +0 -38
- package/dist/layer2/ai-endpoint-protection.d.ts.map +0 -1
- package/dist/layer2/ai-endpoint-protection.js +0 -346
- package/dist/layer2/ai-endpoint-protection.js.map +0 -1
- package/dist/layer2/ai-execution-sinks.d.ts +0 -21
- package/dist/layer2/ai-execution-sinks.d.ts.map +0 -1
- package/dist/layer2/ai-execution-sinks.js +0 -1155
- package/dist/layer2/ai-execution-sinks.js.map +0 -1
- package/dist/layer2/ai-fingerprinting.d.ts +0 -10
- package/dist/layer2/ai-fingerprinting.d.ts.map +0 -1
- package/dist/layer2/ai-fingerprinting.js +0 -650
- package/dist/layer2/ai-fingerprinting.js.map +0 -1
- package/dist/layer2/ai-mcp-security.d.ts +0 -20
- package/dist/layer2/ai-mcp-security.d.ts.map +0 -1
- package/dist/layer2/ai-mcp-security.js +0 -877
- package/dist/layer2/ai-mcp-security.js.map +0 -1
- package/dist/layer2/ai-package-hallucination.d.ts +0 -22
- package/dist/layer2/ai-package-hallucination.d.ts.map +0 -1
- package/dist/layer2/ai-package-hallucination.js +0 -828
- package/dist/layer2/ai-package-hallucination.js.map +0 -1
- package/dist/layer2/ai-prompt-hygiene.d.ts +0 -22
- package/dist/layer2/ai-prompt-hygiene.d.ts.map +0 -1
- package/dist/layer2/ai-prompt-hygiene.js +0 -1156
- package/dist/layer2/ai-prompt-hygiene.js.map +0 -1
- package/dist/layer2/ai-rag-safety.d.ts +0 -24
- package/dist/layer2/ai-rag-safety.d.ts.map +0 -1
- package/dist/layer2/ai-rag-safety.js +0 -910
- package/dist/layer2/ai-rag-safety.js.map +0 -1
- package/dist/layer2/ai-schema-validation.d.ts +0 -28
- package/dist/layer2/ai-schema-validation.d.ts.map +0 -1
- package/dist/layer2/ai-schema-validation.js +0 -375
- package/dist/layer2/ai-schema-validation.js.map +0 -1
- package/dist/layer2/auth-antipatterns.d.ts +0 -22
- package/dist/layer2/auth-antipatterns.d.ts.map +0 -1
- package/dist/layer2/auth-antipatterns.js +0 -522
- package/dist/layer2/auth-antipatterns.js.map +0 -1
- package/dist/layer2/byok-patterns.d.ts +0 -15
- package/dist/layer2/byok-patterns.d.ts.map +0 -1
- package/dist/layer2/byok-patterns.js +0 -302
- package/dist/layer2/byok-patterns.js.map +0 -1
- package/dist/layer2/dangerous-functions/child-process.d.ts +0 -16
- package/dist/layer2/dangerous-functions/child-process.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/child-process.js +0 -74
- package/dist/layer2/dangerous-functions/child-process.js.map +0 -1
- package/dist/layer2/dangerous-functions/dom-xss.d.ts +0 -34
- package/dist/layer2/dangerous-functions/dom-xss.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/dom-xss.js +0 -230
- package/dist/layer2/dangerous-functions/dom-xss.js.map +0 -1
- package/dist/layer2/dangerous-functions/index.d.ts +0 -16
- package/dist/layer2/dangerous-functions/index.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/index.js +0 -1152
- package/dist/layer2/dangerous-functions/index.js.map +0 -1
- package/dist/layer2/dangerous-functions/json-parse.d.ts +0 -31
- package/dist/layer2/dangerous-functions/json-parse.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/json-parse.js +0 -319
- package/dist/layer2/dangerous-functions/json-parse.js.map +0 -1
- package/dist/layer2/dangerous-functions/math-random.d.ts +0 -111
- package/dist/layer2/dangerous-functions/math-random.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/math-random.js +0 -684
- package/dist/layer2/dangerous-functions/math-random.js.map +0 -1
- package/dist/layer2/dangerous-functions/patterns.d.ts +0 -21
- package/dist/layer2/dangerous-functions/patterns.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/patterns.js +0 -163
- package/dist/layer2/dangerous-functions/patterns.js.map +0 -1
- package/dist/layer2/dangerous-functions/request-validation.d.ts +0 -13
- package/dist/layer2/dangerous-functions/request-validation.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/request-validation.js +0 -119
- package/dist/layer2/dangerous-functions/request-validation.js.map +0 -1
- package/dist/layer2/dangerous-functions/utils/control-flow.d.ts +0 -24
- package/dist/layer2/dangerous-functions/utils/control-flow.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/utils/control-flow.js +0 -70
- package/dist/layer2/dangerous-functions/utils/control-flow.js.map +0 -1
- package/dist/layer2/dangerous-functions/utils/helpers.d.ts +0 -31
- package/dist/layer2/dangerous-functions/utils/helpers.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/utils/helpers.js +0 -147
- package/dist/layer2/dangerous-functions/utils/helpers.js.map +0 -1
- package/dist/layer2/dangerous-functions/utils/index.d.ts +0 -9
- package/dist/layer2/dangerous-functions/utils/index.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/utils/index.js +0 -23
- package/dist/layer2/dangerous-functions/utils/index.js.map +0 -1
- package/dist/layer2/dangerous-functions/utils/schema-validation.d.ts +0 -22
- package/dist/layer2/dangerous-functions/utils/schema-validation.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/utils/schema-validation.js +0 -102
- package/dist/layer2/dangerous-functions/utils/schema-validation.js.map +0 -1
- package/dist/layer2/data-exposure.d.ts +0 -19
- package/dist/layer2/data-exposure.d.ts.map +0 -1
- package/dist/layer2/data-exposure.js +0 -255
- package/dist/layer2/data-exposure.js.map +0 -1
- package/dist/layer2/framework-checks.d.ts +0 -10
- package/dist/layer2/framework-checks.d.ts.map +0 -1
- package/dist/layer2/framework-checks.js +0 -384
- package/dist/layer2/framework-checks.js.map +0 -1
- package/dist/layer2/index.d.ts +0 -74
- package/dist/layer2/index.d.ts.map +0 -1
- package/dist/layer2/index.js +0 -544
- package/dist/layer2/index.js.map +0 -1
- package/dist/layer2/log-injection.d.ts +0 -18
- package/dist/layer2/log-injection.d.ts.map +0 -1
- package/dist/layer2/log-injection.js +0 -214
- package/dist/layer2/log-injection.js.map +0 -1
- package/dist/layer2/logic-gates.d.ts +0 -10
- package/dist/layer2/logic-gates.d.ts.map +0 -1
- package/dist/layer2/logic-gates.js +0 -220
- package/dist/layer2/logic-gates.js.map +0 -1
- package/dist/layer2/model-supply-chain.d.ts +0 -23
- package/dist/layer2/model-supply-chain.d.ts.map +0 -1
- package/dist/layer2/model-supply-chain.js +0 -444
- package/dist/layer2/model-supply-chain.js.map +0 -1
- package/dist/layer2/risky-imports.d.ts +0 -10
- package/dist/layer2/risky-imports.d.ts.map +0 -1
- package/dist/layer2/risky-imports.js +0 -165
- package/dist/layer2/risky-imports.js.map +0 -1
- package/dist/layer2/security-headers.d.ts +0 -18
- package/dist/layer2/security-headers.d.ts.map +0 -1
- package/dist/layer2/security-headers.js +0 -187
- package/dist/layer2/security-headers.js.map +0 -1
- package/dist/layer2/ssrf-detection.d.ts +0 -18
- package/dist/layer2/ssrf-detection.d.ts.map +0 -1
- package/dist/layer2/ssrf-detection.js +0 -252
- package/dist/layer2/ssrf-detection.js.map +0 -1
- package/dist/layer2/variables.d.ts +0 -11
- package/dist/layer2/variables.d.ts.map +0 -1
- package/dist/layer2/variables.js +0 -156
- package/dist/layer2/variables.js.map +0 -1
- package/dist/layer2/xxe-detection.d.ts +0 -18
- package/dist/layer2/xxe-detection.d.ts.map +0 -1
- package/dist/layer2/xxe-detection.js +0 -242
- package/dist/layer2/xxe-detection.js.map +0 -1
- package/dist/layer3/anthropic/auto-dismiss.d.ts +0 -24
- package/dist/layer3/anthropic/auto-dismiss.d.ts.map +0 -1
- package/dist/layer3/anthropic/auto-dismiss.js +0 -199
- package/dist/layer3/anthropic/auto-dismiss.js.map +0 -1
- package/dist/layer3/anthropic/clients.d.ts +0 -44
- package/dist/layer3/anthropic/clients.d.ts.map +0 -1
- package/dist/layer3/anthropic/clients.js +0 -81
- package/dist/layer3/anthropic/clients.js.map +0 -1
- package/dist/layer3/anthropic/index.d.ts +0 -41
- package/dist/layer3/anthropic/index.d.ts.map +0 -1
- package/dist/layer3/anthropic/index.js +0 -141
- package/dist/layer3/anthropic/index.js.map +0 -1
- package/dist/layer3/anthropic/prompts/index.d.ts +0 -8
- package/dist/layer3/anthropic/prompts/index.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/index.js +0 -16
- package/dist/layer3/anthropic/prompts/index.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/ai-patterns.d.ts +0 -19
- package/dist/layer3/anthropic/prompts/modules/ai-patterns.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/ai-patterns.js +0 -156
- package/dist/layer3/anthropic/prompts/modules/ai-patterns.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/auth-access.d.ts +0 -9
- package/dist/layer3/anthropic/prompts/modules/auth-access.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/auth-access.js +0 -25
- package/dist/layer3/anthropic/prompts/modules/auth-access.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/common.d.ts +0 -11
- package/dist/layer3/anthropic/prompts/modules/common.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/common.js +0 -152
- package/dist/layer3/anthropic/prompts/modules/common.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/index.d.ts +0 -54
- package/dist/layer3/anthropic/prompts/modules/index.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/index.js +0 -185
- package/dist/layer3/anthropic/prompts/modules/index.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/owasp-classic.d.ts +0 -8
- package/dist/layer3/anthropic/prompts/modules/owasp-classic.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/owasp-classic.js +0 -84
- package/dist/layer3/anthropic/prompts/modules/owasp-classic.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/secrets-crypto.d.ts +0 -8
- package/dist/layer3/anthropic/prompts/modules/secrets-crypto.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/secrets-crypto.js +0 -68
- package/dist/layer3/anthropic/prompts/modules/secrets-crypto.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/xss-prompt.d.ts +0 -8
- package/dist/layer3/anthropic/prompts/modules/xss-prompt.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/xss-prompt.js +0 -22
- package/dist/layer3/anthropic/prompts/modules/xss-prompt.js.map +0 -1
- package/dist/layer3/anthropic/prompts/semantic-analysis.d.ts +0 -15
- package/dist/layer3/anthropic/prompts/semantic-analysis.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/semantic-analysis.js +0 -169
- package/dist/layer3/anthropic/prompts/semantic-analysis.js.map +0 -1
- package/dist/layer3/anthropic/prompts/validation.d.ts +0 -18
- package/dist/layer3/anthropic/prompts/validation.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/validation.js +0 -25
- package/dist/layer3/anthropic/prompts/validation.js.map +0 -1
- package/dist/layer3/anthropic/providers/anthropic.d.ts +0 -21
- package/dist/layer3/anthropic/providers/anthropic.d.ts.map +0 -1
- package/dist/layer3/anthropic/providers/anthropic.js +0 -269
- package/dist/layer3/anthropic/providers/anthropic.js.map +0 -1
- package/dist/layer3/anthropic/providers/index.d.ts +0 -8
- package/dist/layer3/anthropic/providers/index.d.ts.map +0 -1
- package/dist/layer3/anthropic/providers/index.js +0 -15
- package/dist/layer3/anthropic/providers/index.js.map +0 -1
- package/dist/layer3/anthropic/providers/openai.d.ts +0 -18
- package/dist/layer3/anthropic/providers/openai.d.ts.map +0 -1
- package/dist/layer3/anthropic/providers/openai.js +0 -343
- package/dist/layer3/anthropic/providers/openai.js.map +0 -1
- package/dist/layer3/anthropic/request-builder.d.ts +0 -27
- package/dist/layer3/anthropic/request-builder.d.ts.map +0 -1
- package/dist/layer3/anthropic/request-builder.js +0 -150
- package/dist/layer3/anthropic/request-builder.js.map +0 -1
- package/dist/layer3/anthropic/types.d.ts +0 -88
- package/dist/layer3/anthropic/types.d.ts.map +0 -1
- package/dist/layer3/anthropic/types.js +0 -38
- package/dist/layer3/anthropic/types.js.map +0 -1
- package/dist/layer3/anthropic/utils/context-extractor.d.ts +0 -55
- package/dist/layer3/anthropic/utils/context-extractor.d.ts.map +0 -1
- package/dist/layer3/anthropic/utils/context-extractor.js +0 -161
- package/dist/layer3/anthropic/utils/context-extractor.js.map +0 -1
- package/dist/layer3/anthropic/utils/index.d.ts +0 -11
- package/dist/layer3/anthropic/utils/index.d.ts.map +0 -1
- package/dist/layer3/anthropic/utils/index.js +0 -27
- package/dist/layer3/anthropic/utils/index.js.map +0 -1
- package/dist/layer3/anthropic/utils/path-helpers.d.ts +0 -21
- package/dist/layer3/anthropic/utils/path-helpers.d.ts.map +0 -1
- package/dist/layer3/anthropic/utils/path-helpers.js +0 -69
- package/dist/layer3/anthropic/utils/path-helpers.js.map +0 -1
- package/dist/layer3/anthropic/utils/response-parser.d.ts +0 -40
- package/dist/layer3/anthropic/utils/response-parser.d.ts.map +0 -1
- package/dist/layer3/anthropic/utils/response-parser.js +0 -285
- package/dist/layer3/anthropic/utils/response-parser.js.map +0 -1
- package/dist/layer3/anthropic/utils/retry.d.ts +0 -15
- package/dist/layer3/anthropic/utils/retry.d.ts.map +0 -1
- package/dist/layer3/anthropic/utils/retry.js +0 -62
- package/dist/layer3/anthropic/utils/retry.js.map +0 -1
- package/dist/layer3/index.d.ts +0 -27
- package/dist/layer3/index.d.ts.map +0 -1
- package/dist/layer3/index.js +0 -150
- package/dist/layer3/index.js.map +0 -1
- package/dist/layer3/osv-check.d.ts +0 -75
- package/dist/layer3/osv-check.d.ts.map +0 -1
- package/dist/layer3/osv-check.js +0 -308
- package/dist/layer3/osv-check.js.map +0 -1
- package/dist/layer3/package-check.d.ts +0 -63
- package/dist/layer3/package-check.d.ts.map +0 -1
- package/dist/layer3/package-check.js +0 -508
- package/dist/layer3/package-check.js.map +0 -1
- package/dist/model/cross-file-taint.d.ts +0 -40
- package/dist/model/cross-file-taint.d.ts.map +0 -1
- package/dist/model/cross-file-taint.js +0 -290
- package/dist/model/cross-file-taint.js.map +0 -1
- package/dist/model/function-classifier.d.ts +0 -32
- package/dist/model/function-classifier.d.ts.map +0 -1
- package/dist/model/function-classifier.js +0 -143
- package/dist/model/function-classifier.js.map +0 -1
- package/dist/model/sanitiser-detection.d.ts +0 -27
- package/dist/model/sanitiser-detection.d.ts.map +0 -1
- package/dist/model/sanitiser-detection.js +0 -224
- package/dist/model/sanitiser-detection.js.map +0 -1
- package/dist/model/sink-matcher.d.ts +0 -17
- package/dist/model/sink-matcher.d.ts.map +0 -1
- package/dist/model/sink-matcher.js +0 -141
- package/dist/model/sink-matcher.js.map +0 -1
- package/dist/model/sink-patterns.d.ts +0 -19
- package/dist/model/sink-patterns.d.ts.map +0 -1
- package/dist/model/sink-patterns.js +0 -88
- package/dist/model/sink-patterns.js.map +0 -1
- package/dist/model/source-discovery.d.ts +0 -15
- package/dist/model/source-discovery.d.ts.map +0 -1
- package/dist/model/source-discovery.js +0 -170
- package/dist/model/source-discovery.js.map +0 -1
- package/dist/model/taint-tracker.d.ts +0 -21
- package/dist/model/taint-tracker.d.ts.map +0 -1
- package/dist/model/taint-tracker.js +0 -281
- package/dist/model/taint-tracker.js.map +0 -1
- package/dist/modes/incremental.d.ts +0 -66
- package/dist/modes/incremental.d.ts.map +0 -1
- package/dist/modes/incremental.js +0 -200
- package/dist/modes/incremental.js.map +0 -1
- package/dist/rules/framework-fixes.d.ts +0 -48
- package/dist/rules/framework-fixes.d.ts.map +0 -1
- package/dist/rules/framework-fixes.js +0 -439
- package/dist/rules/framework-fixes.js.map +0 -1
- package/dist/rules/index.d.ts +0 -8
- package/dist/rules/index.d.ts.map +0 -1
- package/dist/rules/index.js +0 -18
- package/dist/rules/index.js.map +0 -1
- package/dist/rules/metadata.d.ts +0 -43
- package/dist/rules/metadata.d.ts.map +0 -1
- package/dist/rules/metadata.js +0 -800
- package/dist/rules/metadata.js.map +0 -1
- package/dist/score/auto-dismiss.d.ts +0 -28
- package/dist/score/auto-dismiss.d.ts.map +0 -1
- package/dist/score/auto-dismiss.js +0 -200
- package/dist/score/auto-dismiss.js.map +0 -1
- package/dist/suppression/config-loader.d.ts +0 -74
- package/dist/suppression/config-loader.d.ts.map +0 -1
- package/dist/suppression/config-loader.js +0 -424
- package/dist/suppression/config-loader.js.map +0 -1
- package/dist/suppression/hash.d.ts +0 -48
- package/dist/suppression/hash.d.ts.map +0 -1
- package/dist/suppression/hash.js +0 -88
- package/dist/suppression/hash.js.map +0 -1
- package/dist/suppression/index.d.ts +0 -11
- package/dist/suppression/index.d.ts.map +0 -1
- package/dist/suppression/index.js +0 -39
- package/dist/suppression/index.js.map +0 -1
- package/dist/suppression/inline-parser.d.ts +0 -39
- package/dist/suppression/inline-parser.d.ts.map +0 -1
- package/dist/suppression/inline-parser.js +0 -218
- package/dist/suppression/inline-parser.js.map +0 -1
- package/dist/suppression/manager.d.ts +0 -94
- package/dist/suppression/manager.d.ts.map +0 -1
- package/dist/suppression/manager.js +0 -292
- package/dist/suppression/manager.js.map +0 -1
- package/dist/suppression/types.d.ts +0 -151
- package/dist/suppression/types.d.ts.map +0 -1
- package/dist/suppression/types.js +0 -28
- package/dist/suppression/types.js.map +0 -1
- package/dist/types.d.ts +0 -331
- package/dist/types.d.ts.map +0 -1
- package/dist/types.js +0 -124
- package/dist/types.js.map +0 -1
- package/dist/utils/auth-helper-detector.d.ts +0 -56
- package/dist/utils/auth-helper-detector.d.ts.map +0 -1
- package/dist/utils/auth-helper-detector.js +0 -360
- package/dist/utils/auth-helper-detector.js.map +0 -1
- package/dist/utils/code-analysis.d.ts +0 -39
- package/dist/utils/code-analysis.d.ts.map +0 -1
- package/dist/utils/code-analysis.js +0 -159
- package/dist/utils/code-analysis.js.map +0 -1
- package/dist/utils/comment-analyzer.d.ts +0 -38
- package/dist/utils/comment-analyzer.d.ts.map +0 -1
- package/dist/utils/comment-analyzer.js +0 -218
- package/dist/utils/comment-analyzer.js.map +0 -1
- package/dist/utils/context-helpers.d.ts +0 -219
- package/dist/utils/context-helpers.d.ts.map +0 -1
- package/dist/utils/context-helpers.js +0 -886
- package/dist/utils/context-helpers.js.map +0 -1
- package/dist/utils/diff-detector.d.ts +0 -53
- package/dist/utils/diff-detector.d.ts.map +0 -1
- package/dist/utils/diff-detector.js +0 -104
- package/dist/utils/diff-detector.js.map +0 -1
- package/dist/utils/diff-parser.d.ts +0 -80
- package/dist/utils/diff-parser.d.ts.map +0 -1
- package/dist/utils/diff-parser.js +0 -202
- package/dist/utils/diff-parser.js.map +0 -1
- package/dist/utils/environment-context.d.ts +0 -76
- package/dist/utils/environment-context.d.ts.map +0 -1
- package/dist/utils/environment-context.js +0 -271
- package/dist/utils/environment-context.js.map +0 -1
- package/dist/utils/imported-auth-detector.d.ts +0 -37
- package/dist/utils/imported-auth-detector.d.ts.map +0 -1
- package/dist/utils/imported-auth-detector.js +0 -251
- package/dist/utils/imported-auth-detector.js.map +0 -1
- package/dist/utils/intent-detector.d.ts +0 -66
- package/dist/utils/intent-detector.d.ts.map +0 -1
- package/dist/utils/intent-detector.js +0 -282
- package/dist/utils/intent-detector.js.map +0 -1
- package/dist/utils/middleware-detector.d.ts +0 -55
- package/dist/utils/middleware-detector.d.ts.map +0 -1
- package/dist/utils/middleware-detector.js +0 -260
- package/dist/utils/middleware-detector.js.map +0 -1
- package/dist/utils/oauth-flow-detector.d.ts +0 -41
- package/dist/utils/oauth-flow-detector.d.ts.map +0 -1
- package/dist/utils/oauth-flow-detector.js +0 -202
- package/dist/utils/oauth-flow-detector.js.map +0 -1
- package/dist/utils/parsed-file.d.ts +0 -51
- package/dist/utils/parsed-file.d.ts.map +0 -1
- package/dist/utils/parsed-file.js +0 -95
- package/dist/utils/parsed-file.js.map +0 -1
- package/dist/utils/path-exclusions.d.ts +0 -55
- package/dist/utils/path-exclusions.d.ts.map +0 -1
- package/dist/utils/path-exclusions.js +0 -224
- package/dist/utils/path-exclusions.js.map +0 -1
- package/dist/utils/project-context-builder.d.ts +0 -119
- package/dist/utils/project-context-builder.d.ts.map +0 -1
- package/dist/utils/project-context-builder.js +0 -534
- package/dist/utils/project-context-builder.js.map +0 -1
- package/dist/utils/registry-clients.d.ts +0 -93
- package/dist/utils/registry-clients.d.ts.map +0 -1
- package/dist/utils/registry-clients.js +0 -273
- package/dist/utils/registry-clients.js.map +0 -1
- package/dist/utils/route-hierarchy.d.ts +0 -50
- package/dist/utils/route-hierarchy.d.ts.map +0 -1
- package/dist/utils/route-hierarchy.js +0 -226
- package/dist/utils/route-hierarchy.js.map +0 -1
- package/dist/utils/schema-semantics.d.ts +0 -45
- package/dist/utils/schema-semantics.d.ts.map +0 -1
- package/dist/utils/schema-semantics.js +0 -193
- package/dist/utils/schema-semantics.js.map +0 -1
- package/dist/utils/trpc-analyzer.d.ts +0 -78
- package/dist/utils/trpc-analyzer.d.ts.map +0 -1
- package/dist/utils/trpc-analyzer.js +0 -297
- package/dist/utils/trpc-analyzer.js.map +0 -1
- package/src/__tests__/context-engine/cross-file-taint.test.ts +0 -284
- package/src/__tests__/context-engine/function-classifier.test.ts +0 -146
- package/src/__tests__/context-engine/integration.test.ts +0 -320
- package/src/__tests__/context-engine/sanitiser-detection.test.ts +0 -187
- package/src/__tests__/context-engine/sink-matcher.test.ts +0 -251
- package/src/__tests__/context-engine/source-discovery.test.ts +0 -186
- package/src/__tests__/context-engine/taint-tracker.test.ts +0 -182
- package/src/__tests__/snapshots/__snapshots__/anthropic-validation-refactor.test.ts.snap +0 -750
- package/src/__tests__/snapshots/__snapshots__/dangerous-functions-refactor.test.ts.snap +0 -555
- package/src/__tests__/snapshots/anthropic-validation-refactor.test.ts +0 -321
- package/src/__tests__/snapshots/dangerous-functions-refactor.test.ts +0 -439
- package/src/detect/ai-code/agent-tools.ts +0 -1662
- package/src/detect/ai-code/byok-patterns.ts +0 -354
- package/src/detect/ai-code/endpoint-protection.ts +0 -406
- package/src/detect/ai-code/execution-sinks.ts +0 -1310
- package/src/detect/ai-code/fingerprinting.ts +0 -774
- package/src/detect/ai-code/mcp-security.ts +0 -937
- package/src/detect/ai-code/model-supply-chain.ts +0 -535
- package/src/detect/ai-code/package-hallucination.ts +0 -955
- package/src/detect/ai-code/prompt-hygiene.ts +0 -1314
- package/src/detect/ai-code/rag-safety.ts +0 -977
- package/src/detect/ai-code/schema-validation.ts +0 -427
- package/src/detect/secrets/patterns.ts +0 -561
- package/src/detect/secrets/weak-crypto.ts +0 -485
- package/src/detect/structural/__tests__/math-random-enhanced.test.ts +0 -405
- package/src/detect/structural/auth-patterns.ts +0 -621
- package/src/detect/structural/dangerous-functions/child-process.ts +0 -98
- package/src/detect/structural/dangerous-functions/dom-xss.ts +0 -292
- package/src/detect/structural/dangerous-functions/index.ts +0 -1556
- package/src/detect/structural/dangerous-functions/json-parse.ts +0 -393
- package/src/detect/structural/dangerous-functions/math-random.ts +0 -789
- package/src/detect/structural/dangerous-functions/patterns.ts +0 -176
- package/src/detect/structural/dangerous-functions/request-validation.ts +0 -153
- package/src/detect/structural/dangerous-functions/utils/control-flow.ts +0 -35
- package/src/detect/structural/dangerous-functions/utils/helpers.ts +0 -170
- package/src/detect/structural/dangerous-functions/utils/index.ts +0 -25
- package/src/detect/structural/dangerous-functions/utils/schema-validation.ts +0 -106
- package/src/detect/structural/data-exposure.ts +0 -302
- package/src/detect/structural/framework-checks.ts +0 -439
- package/src/detect/structural/log-injection.ts +0 -254
- package/src/detect/structural/logic-gates.ts +0 -256
- package/src/detect/structural/risky-imports.ts +0 -197
- package/src/detect/structural/security-headers.ts +0 -231
- package/src/detect/structural/ssrf-detection.ts +0 -300
- package/src/detect/structural/variables.ts +0 -177
- package/src/detect/structural/xxe-detection.ts +0 -295
- package/src/model/cross-file-taint.ts +0 -374
- package/src/model/function-classifier.ts +0 -184
- package/src/model/sanitiser-detection.ts +0 -268
- package/src/model/sink-matcher.ts +0 -178
- package/src/model/sink-patterns.ts +0 -109
- package/src/model/source-discovery.ts +0 -209
- package/src/model/taint-tracker.ts +0 -333
- package/src/score/auto-dismiss.ts +0 -224
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"agent-tools.js","sourceRoot":"","sources":["../../../src/detect/ai-code/agent-tools.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AA88BH,gDAmqBC;AA7mDD,iEAMoC;AAEpC,MAAM,eAAe,GAAG,IAAI,CAAA;AAE5B,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E;;GAEG;AACH,SAAS,iBAAiB,CAAC,QAAgB,EAAE,OAAe;IAC1D,uBAAuB;IACvB,MAAM,iBAAiB,GAAG;QACxB,2CAA2C;QAC3C,yCAAyC;QACzC,8CAA8C;KAC/C,CAAA;IAED,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,qDAAqD;IACrD,MAAM,sBAAsB,GAAG;QAC7B,QAAQ,EAA8B,mBAAmB;QACzD,sBAAsB,EAAe,uBAAuB;QAC5D,kBAAkB,EAAoB,wBAAwB;QAC9D,kBAAkB,EAAoB,gBAAgB;QACtD,sBAAsB,EAAgB,oBAAoB;QAC1D,iBAAiB,EAAqB,uBAAuB;QAC7D,iBAAiB,EAAqB,cAAc;QACpD,8BAA8B,EAAQ,kBAAkB;QACxD,4BAA4B,EAAU,0BAA0B;QAChE,iBAAiB,EAAqB,4BAA4B;QAClE,6BAA6B,EAAS,uBAAuB;QAC7D,sBAAsB,EAAgB,aAAa;KACpD,CAAA;IAED,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAChC,OAAe,EACf,UAAkB,EAClB,aAAqB,EAAE;IAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC,CAAA;IAE/D,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACnD,SAAS;QACT,OAAO;KACR,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;GAEG;AACH,SAAS,0BAA0B,CAAC,OAAe;IACjD,MAAM,mBAAmB,GAAG;QAC1B,cAAc;QACd,SAAS;QACT,cAAc;QACd,YAAY;QACZ,gBAAgB;QAChB,gBAAgB;QAChB,eAAe;QACf,sBAAsB;QACtB,oBAAoB;QACpB,YAAY;QACZ,gBAAgB;KACjB,CAAA;IAED,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACvD,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CAAC,OAAe;IACnD,MAAM,qBAAqB,GAAG;QAC5B,gBAAgB;QAChB,WAAW;QACX,aAAa;QACb,QAAQ;QACR,sBAAsB;QACtB,mBAAmB;QACnB,cAAc;QACd,cAAc;QACd,SAAS;QACT,iBAAiB;QACjB,YAAY;KACb,CAAA;IAED,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACzD,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAAC,OAAe,EAAE,QAAgB;IAClE,+BAA+B;IAC/B,MAAM,WAAW,GAAG;QAClB,YAAY;QACZ,wBAAwB;QACxB,oBAAoB;QACpB,gBAAgB;QAChB,UAAU;KACX,CAAA;IAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,0CAA0C;IAC1C,MAAM,oBAAoB,GAAG;QAC3B,4BAA4B;QAC5B,yBAAyB;QACzB,yCAAyC;QACzC,eAAe;QACf,uBAAuB;KACxB,CAAA;IAED,mCAAmC;IACnC,MAAM,qBAAqB,GAAG;QAC5B,gCAAgC;QAChC,+BAA+B;QAC/B,iCAAiC;QACjC,gDAAgD;QAChD,mBAAmB;QACnB,6CAA6C;KAC9C,CAAA;IAED,MAAM,eAAe,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACvE,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAEzE,4DAA4D;IAC5D,OAAO,eAAe,IAAI,gBAAgB,CAAA;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,2BAA2B,GAAG;IAClC,wCAAwC;IACxC,UAAU;IACV,kBAAkB;IAClB,cAAc;IACd,gBAAgB;IAChB,uBAAuB;IACvB,aAAa;IACb,eAAe;IACf,aAAa;IAEb,kDAAkD;IAClD,8DAA8D;IAC9D,kCAAkC;IAClC,mEAAmE;IAEnE,4BAA4B;IAC5B,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,uBAAuB;IACvB,0BAA0B;IAE1B,gCAAgC;IAChC,+BAA+B;IAC/B,yBAAyB;IACzB,yBAAyB;IAEzB,+BAA+B;IAC/B,2CAA2C;IAC3C,UAAU;IACV,gCAAgC,EAAG,kCAAkC;IAErE,2BAA2B;IAC3B,kDAAkD;IAClD,iEAAiE;CAClE,CAAA;AAED;;GAEG;AACH,MAAM,yBAAyB,GAAG;IAChC,0DAA0D;IAC1D,sDAAsD;IACtD,4DAA4D;IAC5D,mDAAmD;IAEnD,mBAAmB;IACnB,iEAAiE;IACjE,uCAAuC;IAEvC,oCAAoC;IACpC,8CAA8C;CAC/C,CAAA;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,OAAe;IAC5C,4BAA4B;IAC5B,MAAM,SAAS,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IAE5B,sCAAsC;IACtC,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACnE,OAAO,CAAC,MAAM,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,mBAAmB,GAAG;QAC1B,eAAe;QACf,eAAe;QACf,cAAc;QACd,eAAe;QACf,cAAc;QACd,kBAAkB;QAClB,oBAAoB;QACpB,YAAY;QACZ,YAAY;QACZ,gBAAgB;QAChB,gBAAgB;QAChB,iBAAiB;QACjB,gBAAgB;QAChB,UAAU;QACV,WAAW;QACX,WAAW;KACZ,CAAA;IAED,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACvD,CAAC;AAoBD,MAAM,4BAA4B,GAAkB;IAClD,gDAAgD;IAChD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,oGAAoG;QAC7G,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,+GAA+G;QAC5H,YAAY,EAAE,kIAAkI;QAChJ,oBAAoB,EAAE,IAAI;KAC3B;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,iHAAiH;QAC1H,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,0GAA0G;QACvH,YAAY,EAAE,8IAA8I;QAC5J,oBAAoB,EAAE,IAAI;KAC3B;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,qHAAqH;QAC9H,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,4EAA4E;QACzF,YAAY,EAAE,wGAAwG;QACtH,oBAAoB,EAAE,IAAI;QAC1B,mBAAmB,EAAE,IAAI;KAC1B;IAED,6CAA6C;IAC7C;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,yGAAyG;QAClH,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,qIAAqI;QAClJ,YAAY,EAAE,uHAAuH;QACrI,oBAAoB,EAAE,IAAI;KAC3B;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,yEAAyE;QAClF,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,gGAAgG;QAC7G,YAAY,EAAE,iFAAiF;QAC/F,oBAAoB,EAAE,IAAI;KAC3B;IAED,6CAA6C;IAC7C;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,gHAAgH;QACzH,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,0FAA0F;QACvG,YAAY,EAAE,oHAAoH;QAClI,oBAAoB,EAAE,IAAI;KAC3B;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,uGAAuG;QAChH,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,mFAAmF;QAChG,YAAY,EAAE,8HAA8H;QAC5I,oBAAoB,EAAE,IAAI;KAC3B;IAED,4CAA4C;IAC5C;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,oGAAoG;QAC7G,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,0EAA0E;QACvF,YAAY,EAAE,qIAAqI;QACnJ,oBAAoB,EAAE,IAAI;KAC3B;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,wEAAwE;QACjF,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,gDAAgD;QAC7D,YAAY,EAAE,kGAAkG;QAChH,oBAAoB,EAAE,IAAI;KAC3B;IAED,uCAAuC;IACvC;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,qGAAqG;QAC9G,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,qFAAqF;QAClG,YAAY,EAAE,0HAA0H;QACxI,mBAAmB,EAAE,IAAI;QACzB,qBAAqB,EAAE,IAAI;KAC5B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,iEAAiE;QAC1E,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,yFAAyF;QACtG,YAAY,EAAE,uGAAuG;QACrH,mBAAmB,EAAE,IAAI;QACzB,qBAAqB,EAAE,IAAI;KAC5B;IAED,6CAA6C;IAC7C;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,+FAA+F;QACxG,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,+GAA+G;QAC5H,YAAY,EAAE,8GAA8G;QAC5H,oBAAoB,EAAE,IAAI;KAC3B;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,oGAAoG;QAC7G,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,6FAA6F;QAC1G,YAAY,EAAE,gHAAgH;QAC9H,oBAAoB,EAAE,IAAI;KAC3B;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,uHAAuH;QAChI,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,kFAAkF;QAC/F,YAAY,EAAE,2GAA2G;QACzH,oBAAoB,EAAE,IAAI;KAC3B;IAED,gDAAgD;IAChD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,6CAA6C;QACtD,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,sFAAsF;QACnG,YAAY,EAAE,6GAA6G;QAC3H,mBAAmB,EAAE,IAAI;KAC1B;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,yFAAyF;QAClG,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,sGAAsG;QACnH,YAAY,EAAE,oGAAoG;QAClH,oBAAoB,EAAE,IAAI;KAC3B;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,4FAA4F;QACzG,YAAY,EAAE,6FAA6F;QAC3G,mBAAmB,EAAE,IAAI;KAC1B;CACF,CAAA;AAeD;;GAEG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,aAAa,GAAG;QACpB,mCAAmC,EAAG,OAAO;QAC7C,oCAAoC;QACpC,qCAAqC;QACrC,+BAA+B;KAChC,CAAA;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC3C,MAAM,eAAe,GAAG;QACtB,4BAA4B,EAAG,kBAAkB;QACjD,oCAAoC;QACpC,mCAAmC;KACpC,CAAA;IACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACnD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,aAAa,GAAG;QACpB,4BAA4B;QAC5B,8BAA8B;QAC9B,gCAAgC;QAChC,iCAAiC;QACjC,2DAA2D;QAC3D,+BAA+B;KAChC,CAAA;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,cAAc,GAAG;QACrB,2BAA2B;QAC3B,uBAAuB;QACvB,0BAA0B;QAC1B,0BAA0B;KAC3B,CAAA;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AAClD,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,cAAc,GAAG;QACrB,2BAA2B;QAC3B,uBAAuB;QACvB,mBAAmB;QACnB,iBAAiB;QACjB,yBAAyB;KAC1B,CAAA;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,wBAAwB,GAA6B;IACzD,uDAAuD;IACvD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,mNAAmN;QAC5N,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,6JAA6J;QAC1K,YAAY,EAAE,8KAA8K;QAC5L,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,6NAA6N;QACtO,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,kHAAkH;QAC/H,YAAY,EAAE,oLAAoL;QAClM,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,wKAAwK;QACjL,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,wFAAwF;QACrG,YAAY,EAAE,4HAA4H;QAC1I,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,mJAAmJ;QAC5J,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,8EAA8E;QAC3F,YAAY,EAAE,uFAAuF;QACrG,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,0CAA0C;QAChD,OAAO,EAAE,wJAAwJ;QACjK,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,6GAA6G;QAC1H,YAAY,EAAE,6EAA6E;QAC3F,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,yCAAyC;QAC/C,OAAO,EAAE,uKAAuK;QAChL,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,4FAA4F;QACzG,YAAY,EAAE,8GAA8G;QAC5H,SAAS,EAAE,SAAS;KACrB;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,0BAA0B,GAA6B;IAC3D,oDAAoD;IACpD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,2JAA2J;QACpK,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,uHAAuH;QACpI,YAAY,EAAE,2GAA2G;QACzH,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,kGAAkG;QAC3G,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,uFAAuF;QACpG,YAAY,EAAE,uFAAuF;QACrG,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,OAAO,EAAE,+HAA+H;QACxI,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,wFAAwF;QACrG,YAAY,EAAE,2EAA2E;QACzF,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,8CAA8C;QACpD,OAAO,EAAE,gIAAgI;QACzI,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,qGAAqG;QAClH,YAAY,EAAE,sFAAsF;QACpG,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,mGAAmG;QAC5G,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,mGAAmG;QAChH,YAAY,EAAE,qHAAqH;QACnI,SAAS,EAAE,SAAS;KACrB;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,yBAAyB,GAA6B;IAC1D,6DAA6D;IAC7D;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,wOAAwO;QACjP,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,iHAAiH;QAC9H,YAAY,EAAE,4EAA4E;QAC1F,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,wMAAwM;QACjN,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,iGAAiG;QAC9G,YAAY,EAAE,sHAAsH;QACpI,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,kMAAkM;QAC3M,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,iGAAiG;QAC9G,YAAY,EAAE,iGAAiG;QAC/G,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,yHAAyH;QAClI,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,sGAAsG;QACnH,YAAY,EAAE,uFAAuF;QACrG,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,wIAAwI;QACjJ,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,oFAAoF;QACjG,YAAY,EAAE,qEAAqE;QACnF,SAAS,EAAE,SAAS;KACrB;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,iCAAiC,GAA6B;IAClE,gCAAgC;IAChC;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,kHAAkH;QAC3H,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,8JAA8J;QAC3K,YAAY,EAAE,oIAAoI;QAClJ,SAAS,EAAE,SAAS;KACrB;IACD,8CAA8C;IAC9C;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,iGAAiG;QAC1G,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,mIAAmI;QAChJ,YAAY,EAAE,+HAA+H;QAC7I,SAAS,EAAE,SAAS;KACrB;IACD,mCAAmC;IACnC;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,sHAAsH;QAC/H,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,oGAAoG;QACjH,YAAY,EAAE,+HAA+H;QAC7I,SAAS,EAAE,SAAS;KACrB;IACD,0CAA0C;IAC1C;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,sEAAsE;QAC/E,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,0FAA0F;QACvG,YAAY,EAAE,yGAAyG;QACvH,SAAS,EAAE,SAAS;KACrB;IACD,2CAA2C;IAC3C;QACE,IAAI,EAAE,uCAAuC;QAC7C,OAAO,EAAE,uIAAuI;QAChJ,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,sGAAsG;QACnH,YAAY,EAAE,4GAA4G;QAC1H,SAAS,EAAE,SAAS;KACrB;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,6BAA6B,GAA6B;IAC9D,qCAAqC;IACrC;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,wFAAwF;QACjG,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,gJAAgJ;QAC7J,YAAY,EAAE,uJAAuJ;QACrK,SAAS,EAAE,SAAS;KACrB;IACD,8BAA8B;IAC9B;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,6DAA6D;QACtE,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,mHAAmH;QAChI,YAAY,EAAE,sHAAsH;QACpI,SAAS,EAAE,SAAS;KACrB;IACD,0BAA0B;IAC1B;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,sEAAsE;QAC/E,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,wHAAwH;QACrI,YAAY,EAAE,4IAA4I;QAC1J,SAAS,EAAE,SAAS;KACrB;IACD,sCAAsC;IACtC;QACE,IAAI,EAAE,yCAAyC;QAC/C,OAAO,EAAE,sGAAsG;QAC/G,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,yFAAyF;QACtG,YAAY,EAAE,mGAAmG;QACjH,SAAS,EAAE,SAAS;KACrB;IACD,kCAAkC;IAClC;QACE,IAAI,EAAE,uCAAuC;QAC7C,OAAO,EAAE,sEAAsE;QAC/E,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,sGAAsG;QACnH,YAAY,EAAE,0FAA0F;QACxG,SAAS,EAAE,SAAS;KACrB;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,wBAAwB,GAA6B;IACzD,kDAAkD;IAClD;QACE,IAAI,EAAE,0CAA0C;QAChD,OAAO,EAAE,+KAA+K;QACxL,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,0FAA0F;QACvG,YAAY,EAAE,uJAAuJ;QACrK,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,qHAAqH;QAC9H,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,sGAAsG;QACnH,YAAY,EAAE,oHAAoH;QAClI,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,0CAA0C;QAChD,OAAO,EAAE,2IAA2I;QACpJ,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,6FAA6F;QAC1G,YAAY,EAAE,4GAA4G;QAC1H,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,2CAA2C;QACjD,OAAO,EAAE,kGAAkG;QAC3G,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,gFAAgF;QAC7F,YAAY,EAAE,uGAAuG;QACrH,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,OAAO,EAAE,sFAAsF;QAC/F,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,gGAAgG;QAC7G,YAAY,EAAE,2EAA2E;QACzF,SAAS,EAAE,QAAQ;KACpB;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,2DAA2D;QACpE,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,6FAA6F;QAC1G,YAAY,EAAE,yEAAyE;QACvF,SAAS,EAAE,WAAW;KACvB;CACF,CAAA;AAED;;GAEG;AACH,MAAM,yBAAyB,GAA6B;IAC1D,gDAAgD;IAChD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,oFAAoF;QAC7F,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,qJAAqJ;QAClK,YAAY,EAAE,+GAA+G;QAC7H,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,oFAAoF;QAC7F,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,kHAAkH;QAC/H,YAAY,EAAE,sFAAsF;QACpG,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,6DAA6D;QACtE,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,sFAAsF;QACnG,YAAY,EAAE,uGAAuG;QACrH,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,uDAAuD;QAChE,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,8GAA8G;QAC3H,YAAY,EAAE,iIAAiI;QAC/I,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,0DAA0D;QACnE,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,0FAA0F;QACvG,YAAY,EAAE,yHAAyH;QACvI,SAAS,EAAE,SAAS;KACrB;IAED,wCAAwC;IACxC;QACE,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,iDAAiD;QAC1D,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,mHAAmH;QAChI,YAAY,EAAE,wFAAwF;QACtG,SAAS,EAAE,QAAQ;KACpB;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,8EAA8E;QACvF,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,4GAA4G;QACzH,YAAY,EAAE,qHAAqH;QACnI,SAAS,EAAE,QAAQ;KACpB;IAED,yCAAyC;IACzC;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,kGAAkG;QAC3G,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,oHAAoH;QACjI,YAAY,EAAE,uHAAuH;QACrI,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,6CAA6C;QACtD,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,gHAAgH;QAC7H,YAAY,EAAE,2HAA2H;QACzI,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,4CAA4C;QAClD,OAAO,EAAE,iEAAiE;QAC1E,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,qGAAqG;QAClH,YAAY,EAAE,0HAA0H;QACxI,SAAS,EAAE,SAAS;KACrB;IAED,2CAA2C;IAC3C;QACE,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,oDAAoD;QAC7D,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,+FAA+F;QAC5G,YAAY,EAAE,sHAAsH;QACpI,SAAS,EAAE,WAAW;KACvB;IAED,gDAAgD;IAChD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,6CAA6C;QACtD,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,mIAAmI;QAChJ,YAAY,EAAE,iHAAiH;QAC/H,SAAS,EAAE,SAAS;KACrB;CACF,CAAA;AAED;;GAEG;AACH,MAAM,qBAAqB,GAAkB;IAC3C;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,8IAA8I;QACvJ,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,2GAA2G;QACxH,YAAY,EAAE,kGAAkG;QAChH,mBAAmB,EAAE,IAAI;KAC1B;CACF,CAAA;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,kBAAkB,CAChC,OAAe,EACf,QAAgB,EAChB,OAAiC;IAEjC,MAAM,eAAe,GAAoB,EAAE,CAAA;IAE3C,4BAA4B;IAC5B,IAAI,IAAA,wCAAsB,EAAC,QAAQ,CAAC;QAAE,OAAO,eAAe,CAAA;IAE5D,6DAA6D;IAC7D,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,eAAe,CAAA;IACxB,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC3D,MAAM,UAAU,GAAG,IAAA,kCAAgB,EAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,IAAA,oCAAkB,EAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,IAAA,+BAAa,EAAC,QAAQ,CAAC,CAAA;IAEzC,2CAA2C;IAC3C,KAAK,MAAM,OAAO,IAAI,4BAA4B,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,CAAA;QAET,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEvD,gBAAgB;YAChB,IAAI,IAAA,2BAAS,EAAC,WAAW,CAAC;gBAAE,SAAQ;YAEpC,mBAAmB;YACnB,MAAM,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAElE,yCAAyC;YACzC,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;YAChD,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;YAC9C,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAA;YAC1D,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAA;YAE9D,wCAAwC;YACxC,IAAI,WAAW,GAAG,IAAI,CAAA;YACtB,IAAI,oBAAoB,GAAG,KAAK,CAAA;YAChC,MAAM,kBAAkB,GAAa,EAAE,CAAA;YAEvC,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBACjC,IAAI,SAAS,EAAE,CAAC;oBACd,6DAA6D;gBAC/D,CAAC;qBAAM,IAAI,OAAO,EAAE,CAAC;oBACnB,yCAAyC;oBACzC,oBAAoB,GAAG,IAAI,CAAA;oBAC3B,kBAAkB,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAA;oBAC/F,WAAW,GAAG,KAAK,CAAA;gBACrB,CAAC;qBAAM,CAAC;oBACN,WAAW,GAAG,KAAK,CAAA;oBACnB,kBAAkB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;gBAChD,CAAC;YACH,CAAC;YACD,IAAI,OAAO,CAAC,mBAAmB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACnD,WAAW,GAAG,KAAK,CAAA;gBACnB,kBAAkB,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;YACtD,CAAC;YACD,IAAI,OAAO,CAAC,qBAAqB,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACvD,WAAW,GAAG,KAAK,CAAA;gBACnB,kBAAkB,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;YAC5D,CAAC;YAED,wEAAwE;YACxE,IAAI,WAAW;gBAAE,SAAQ;YAEzB,qBAAqB;YACrB,IAAI,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAA;YACnC,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YAE9D,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,CAAA;YACnB,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,wCAAwC;gBACxC,QAAQ,GAAG,MAAM,CAAA;YACnB,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,6DAA6D;gBAC7D,qDAAqD;gBACrD,QAAQ,GAAG,MAAM,CAAA;YACnB,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,wEAAwE;gBACxE,QAAQ,GAAG,MAAM,CAAA;YACnB,CAAC;iBAAM,IAAI,oBAAoB,IAAI,cAAc,IAAI,gBAAgB,EAAE,CAAC;gBACtE,iCAAiC;gBACjC,IAAI,QAAQ,KAAK,UAAU;oBAAE,QAAQ,GAAG,MAAM,CAAA;qBACzC,IAAI,QAAQ,KAAK,MAAM;oBAAE,QAAQ,GAAG,QAAQ,CAAA;YACnD,CAAC;YAED,oBAAoB;YACpB,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACrC,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,WAAW,IAAI,aAAa,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;YAC9D,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,WAAW,IAAI,qDAAqD,CAAA;YACtE,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,WAAW,IAAI,6EAA6E,CAAA;YAC9F,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,WAAW,IAAI,oEAAoE,CAAA;YACrF,CAAC;YAED,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,WAAW,QAAQ,IAAI,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE;gBAC3D,QAAQ;gBACR,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,QAAQ,EAAE,wBAAwB;gBAClC,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW;gBACX,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,QAAQ;gBACpB,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,SAAkB;gBAC1B,oBAAoB,EAAE,IAAI,EAAE,sCAAsC;gBAClE,cAAc,EAAE,eAAe;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,CAAA;QAET,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEvD,gBAAgB;YAChB,IAAI,IAAA,2BAAS,EAAC,WAAW,CAAC;gBAAE,SAAQ;YAEpC,mBAAmB;YACnB,MAAM,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAElE,oCAAoC;YACpC,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAA;YAE1D,kCAAkC;YAClC,IAAI,cAAc;gBAAE,SAAQ;YAE5B,IAAI,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAA;YACnC,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YAErC,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;YAED,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,gBAAgB,QAAQ,IAAI,UAAU,EAAE;gBAC5C,QAAQ;gBACR,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,QAAQ,EAAE,wBAAwB;gBAClC,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW;gBACX,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,KAAK,EAAE,mCAAmC;gBACtD,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,SAAkB;gBAC1B,oBAAoB,EAAE,IAAI;gBAC1B,cAAc,EAAE,eAAe;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,KAAK,MAAM,OAAO,IAAI,yBAAyB,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,CAAA;QAET,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEvD,gBAAgB;YAChB,IAAI,IAAA,2BAAS,EAAC,WAAW,CAAC;gBAAE,SAAQ;YAEpC,gDAAgD;YAChD,MAAM,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAElE,wBAAwB;YACxB,IAAI,WAAW,GAAG,KAAK,CAAA;YACvB,IAAI,oBAAoB,GAAG,KAAK,CAAA;YAChC,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YAErC,yBAAyB;YACzB,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,oBAAoB,GAAG,IAAI,CAAA;gBAC3B,WAAW,IAAI,sCAAsC,CAAA;YACvD,CAAC;YAED,8BAA8B;YAC9B,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,oBAAoB,GAAG,IAAI,CAAA;gBAC3B,WAAW,IAAI,wBAAwB,CAAA;YACzC,CAAC;YAED,0BAA0B;YAC1B,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,oBAAoB,GAAG,IAAI,CAAA;gBAC3B,WAAW,IAAI,2BAA2B,CAAA;YAC5C,CAAC;YAED,2CAA2C;YAC3C,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtE,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjC,WAAW,GAAG,IAAI,CAAA;oBAClB,WAAW,IAAI,sCAAsC,CAAA;gBACvD,CAAC;YACH,CAAC;YAED,sBAAsB;YACtB,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,oBAAoB,GAAG,IAAI,CAAA;gBAC3B,WAAW,IAAI,8BAA8B,CAAA;YAC/C,CAAC;YAED,qBAAqB;YACrB,IAAI,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAA;YACnC,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YAE9D,IAAI,WAAW,EAAE,CAAC;gBAChB,QAAQ,GAAG,MAAM,CAAA;YACnB,CAAC;iBAAM,IAAI,UAAU,EAAE,CAAC;gBACtB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,+BAA+B,CAAA;YAChD,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;iBAAM,IAAI,oBAAoB,EAAE,CAAC;gBAChC,2CAA2C;gBAC3C,IAAI,QAAQ,KAAK,UAAU;oBAAE,QAAQ,GAAG,MAAM,CAAA;qBACzC,IAAI,QAAQ,KAAK,MAAM;oBAAE,QAAQ,GAAG,QAAQ,CAAA;qBAC5C,IAAI,QAAQ,KAAK,QAAQ;oBAAE,QAAQ,GAAG,KAAK,CAAA;YAClD,CAAC;YAED,wDAAwD;YACxD,IAAI,WAAW,IAAI,QAAQ,KAAK,MAAM;gBAAE,SAAQ;YAEhD,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,aAAa,QAAQ,IAAI,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;gBAC9E,QAAQ;gBACR,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW;gBACX,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;gBAClD,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,SAAkB;gBAC1B,oBAAoB,EAAE,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK;gBAC/D,cAAc,EAAE,eAAe;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,CAAA;QAET,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEvD,gBAAgB;YAChB,IAAI,IAAA,2BAAS,EAAC,WAAW,CAAC;gBAAE,SAAQ;YAEpC,0BAA0B;YAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAElE,6CAA6C;YAC7C,MAAM,aAAa,GAAG,kHAAkH,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACtJ,MAAM,iBAAiB,GAAG,4EAA4E,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAEpH,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACrC,IAAI,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAA;YAEnC,IAAI,aAAa,IAAI,iBAAiB,EAAE,CAAC;gBACvC,QAAQ,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAA;gBACrD,WAAW,IAAI,uEAAuE,CAAA;YACxF,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,+BAA+B,CAAA;YAChD,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;YAED,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,eAAe,QAAQ,IAAI,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;gBAChF,QAAQ;gBACR,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW;gBACX,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACvD,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,SAAkB;gBAC1B,oBAAoB,EAAE,QAAQ,KAAK,MAAM;gBACzC,cAAc,EAAE,eAAe;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK,MAAM,OAAO,IAAI,0BAA0B,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,CAAA;QAET,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEvD,gBAAgB;YAChB,IAAI,IAAA,2BAAS,EAAC,WAAW,CAAC;gBAAE,SAAQ;YAEpC,oEAAoE;YACpE,IAAI,OAAO,CAAC,IAAI,KAAK,qCAAqC,EAAE,CAAC;gBAC3D,6DAA6D;gBAC7D,MAAM,WAAW;gBACf,uCAAuC;gBACvC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACjC,yBAAyB;oBACzB,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACtC,kCAAkC;oBAClC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;oBACjC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC;oBACnC,iCAAiC;oBACjC,iDAAiD,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAA;gBAE9H,IAAI,WAAW,EAAE,CAAC;oBAChB,SAAQ,CAAC,mDAAmD;gBAC9D,CAAC;YACH,CAAC;YAED,0BAA0B;YAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAElE,qCAAqC;YACrC,MAAM,SAAS,GAAG,4CAA4C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC5E,MAAM,YAAY,GAAG,8FAA8F,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAEjI,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACrC,IAAI,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAA;YAEnC,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAA;gBACpF,WAAW,IAAI,iCAAiC,CAAA;YAClD,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,QAAQ,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAA;gBACpF,WAAW,IAAI,kCAAkC,CAAA;YACnD,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,+BAA+B,CAAA;YAChD,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;YAED,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,iBAAiB,QAAQ,IAAI,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;gBAClF,QAAQ;gBACR,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW;gBACX,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,QAAQ;gBACpB,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,SAAkB;gBAC1B,oBAAoB,EAAE,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK;gBAC/D,cAAc,EAAE,eAAe;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,KAAK,MAAM,OAAO,IAAI,yBAAyB,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,CAAA;QAET,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEvD,gBAAgB;YAChB,IAAI,IAAA,2BAAS,EAAC,WAAW,CAAC;gBAAE,SAAQ;YAEpC,0BAA0B;YAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAElE,gCAAgC;YAChC,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAA;YAC1D,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAA;YAE9D,0BAA0B;YAC1B,IAAI,cAAc,IAAI,gBAAgB;gBAAE,SAAQ;YAEhD,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACrC,IAAI,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAA;YAEnC,IAAI,cAAc,IAAI,gBAAgB,EAAE,CAAC;gBACvC,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAA;gBACjD,WAAW,IAAI,cAAc,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,6BAA6B,CAAA;YAC7F,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,+BAA+B,CAAA;YAChD,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;YAED,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,iBAAiB,QAAQ,IAAI,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;gBAClF,QAAQ;gBACR,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW;gBACX,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,QAAQ;gBACpB,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,SAAkB;gBAC1B,oBAAoB,EAAE,QAAQ,KAAK,MAAM;gBACzC,cAAc,EAAE,eAAe;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,CAAA;QAET,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEvD,gBAAgB;YAChB,IAAI,IAAA,2BAAS,EAAC,WAAW,CAAC;gBAAE,SAAQ;YAEpC,2DAA2D;YAC3D,uFAAuF;YACvF,IAAI,OAAO,CAAC,IAAI,KAAK,sCAAsC,EAAE,CAAC;gBAC5D,MAAM,YAAY,GAAG;oBACnB,oEAAoE;oBACpE,6FAA6F;oBAC7F,wBAAwB,EAAE,yBAAyB;oBACnD,4BAA4B;oBAC5B,0BAA0B;oBAC1B,iCAAiC;oBACjC,4CAA4C;oBAC5C,gDAAgD;oBAChD,wBAAwB;oBACxB,0CAA0C;oBAC1C,kCAAkC;oBAClC,wCAAwC;oBACxC,wCAAwC;iBACzC,CAAA;gBACD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;oBAChD,SAAQ,CAAC,8DAA8D;gBACzE,CAAC;YACH,CAAC;YAED,0BAA0B;YAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAElE,+BAA+B;YAC/B,MAAM,aAAa,GAAG,gEAAgE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACpG,MAAM,aAAa,GAAG,+DAA+D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAEnG,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACrC,IAAI,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAA;YAEnC,IAAI,aAAa,IAAI,aAAa,EAAE,CAAC;gBACnC,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAA;gBACjD,WAAW,IAAI,aAAa,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,0BAA0B,CAAA;YACxF,CAAC;YAED,qCAAqC;YACrC,IAAI,kBAAkB,CAAC,OAAO,CAAC,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjE,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAA;gBACpF,WAAW,IAAI,yCAAyC,CAAA;YAC1D,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,+BAA+B,CAAA;YAChD,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;YAED,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,gBAAgB,QAAQ,IAAI,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;gBACjF,QAAQ;gBACR,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW;gBACX,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,QAAQ;gBACpB,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,SAAkB;gBAC1B,oBAAoB,EAAE,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK;gBAC/D,cAAc,EAAE,eAAe;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,KAAK,MAAM,OAAO,IAAI,iCAAiC,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,CAAA;QAET,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEvD,gBAAgB;YAChB,IAAI,IAAA,2BAAS,EAAC,WAAW,CAAC;gBAAE,SAAQ;YAEpC,0BAA0B;YAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAElE,uCAAuC;YACvC,MAAM,aAAa,GAAG,qEAAqE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACzG,MAAM,eAAe,GAAG,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAE/E,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACrC,IAAI,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAA;YAEnC,IAAI,aAAa,EAAE,CAAC;gBAClB,QAAQ,GAAG,KAAK,CAAA;gBAChB,WAAW,IAAI,qEAAqE,CAAA;YACtF,CAAC;iBAAM,IAAI,eAAe,EAAE,CAAC;gBAC3B,QAAQ,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAA;gBACpF,WAAW,IAAI,kCAAkC,CAAA;YACnD,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,+BAA+B,CAAA;YAChD,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;YAED,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,2BAA2B,QAAQ,IAAI,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;gBAC5F,QAAQ;gBACR,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW;gBACX,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACvD,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,SAAkB;gBAC1B,oBAAoB,EAAE,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK;gBAC/D,cAAc,EAAE,eAAe;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK,MAAM,OAAO,IAAI,6BAA6B,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,CAAA;QAET,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;YACvE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAEvD,gBAAgB;YAChB,IAAI,IAAA,2BAAS,EAAC,WAAW,CAAC;gBAAE,SAAQ;YAEpC,0BAA0B;YAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAElE,wCAAwC;YACxC,MAAM,iBAAiB,GAAG,oEAAoE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC5G,MAAM,UAAU,GAAG,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAEtF,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACrC,IAAI,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAA;YAEnC,IAAI,iBAAiB,EAAE,CAAC;gBACtB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,iCAAiC,CAAA;YAClD,CAAC;iBAAM,IAAI,UAAU,EAAE,CAAC;gBACtB,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAA;gBACjD,WAAW,IAAI,0EAA0E,CAAA;YAC3F,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,+BAA+B,CAAA;YAChD,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,QAAQ,GAAG,MAAM,CAAA;gBACjB,WAAW,IAAI,kBAAkB,CAAA;YACnC,CAAC;YAED,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,2BAA2B,QAAQ,IAAI,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;gBAC5F,QAAQ;gBACR,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW;gBACX,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,QAAQ;gBACpB,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,SAAkB;gBAC1B,oBAAoB,EAAE,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK;gBAC/D,cAAc,EAAE,eAAe;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAA;AACxB,CAAC"}
|
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Layer 2: BYOK (Bring Your Own Key) Pattern Detection
|
|
3
|
-
* Distinguishes per-user BYOK flows from central/shared key storage
|
|
4
|
-
* BYOK is often a feature, not a vulnerability - severity depends on context
|
|
5
|
-
*/
|
|
6
|
-
import type { Vulnerability } from '../../shared/types';
|
|
7
|
-
import type { ParsedFile } from '../../shared/parsed-file';
|
|
8
|
-
import type { MiddlewareAuthConfig } from '../../model/middleware-detector';
|
|
9
|
-
/**
|
|
10
|
-
* Detect BYOK patterns and classify their risk level
|
|
11
|
-
*/
|
|
12
|
-
export declare function detectBYOKPatterns(content: string, filePath: string, middlewareConfig?: MiddlewareAuthConfig, options?: {
|
|
13
|
-
parsed?: ParsedFile;
|
|
14
|
-
}): Vulnerability[];
|
|
15
|
-
//# sourceMappingURL=byok-patterns.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"byok-patterns.d.ts","sourceRoot":"","sources":["../../../src/detect/ai-code/byok-patterns.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAyB,MAAM,oBAAoB,CAAA;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAqN3E;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,gBAAgB,CAAC,EAAE,oBAAoB,EACvC,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,UAAU,CAAA;CAAE,GAChC,aAAa,EAAE,CA4HjB"}
|
|
@@ -1,313 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
/**
|
|
3
|
-
* Layer 2: BYOK (Bring Your Own Key) Pattern Detection
|
|
4
|
-
* Distinguishes per-user BYOK flows from central/shared key storage
|
|
5
|
-
* BYOK is often a feature, not a vulnerability - severity depends on context
|
|
6
|
-
*/
|
|
7
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
8
|
-
exports.detectBYOKPatterns = detectBYOKPatterns;
|
|
9
|
-
const file_classifier_1 = require("../../parse/file-classifier");
|
|
10
|
-
const middleware_detector_1 = require("../../model/middleware-detector");
|
|
11
|
-
const BASE_CONFIDENCE_STORAGE = 0.50;
|
|
12
|
-
const BASE_CONFIDENCE_TRANSIENT = 0.25;
|
|
13
|
-
/**
|
|
14
|
-
* Check if line contains example/placeholder API key patterns
|
|
15
|
-
*/
|
|
16
|
-
function isExampleCredential(line) {
|
|
17
|
-
const examplePatterns = [
|
|
18
|
-
/your[-_]?api[-_]?key/i,
|
|
19
|
-
/example[-_]?api[-_]?key/i,
|
|
20
|
-
/sample[-_]?key/i,
|
|
21
|
-
/replace[-_]?with/i,
|
|
22
|
-
/placeholder/i,
|
|
23
|
-
/your[-_]?secret/i,
|
|
24
|
-
/example[-_]?secret/i,
|
|
25
|
-
/<.*api.*key.*>/i, // <YOUR_API_KEY>
|
|
26
|
-
/\[.*api.*key.*\]/i, // [API_KEY]
|
|
27
|
-
/xxx+/i,
|
|
28
|
-
/demo[-_]?key/i,
|
|
29
|
-
/test[-_]?key/i,
|
|
30
|
-
/fake[-_]?key/i,
|
|
31
|
-
/mock[-_]?key/i,
|
|
32
|
-
];
|
|
33
|
-
return examplePatterns.some(p => p.test(line));
|
|
34
|
-
}
|
|
35
|
-
const BYOK_PATTERNS = [
|
|
36
|
-
// OpenAI API key patterns
|
|
37
|
-
{
|
|
38
|
-
name: 'User-provided OpenAI API key',
|
|
39
|
-
pattern: /(?:openai|api).*key.*(?:req\.|body\.|params\.|input\.|user)|(?:req\.|body\.|params\.).*(?:openai|api).*key/gi,
|
|
40
|
-
keyType: 'openai',
|
|
41
|
-
description: 'User-provided OpenAI API key detected',
|
|
42
|
-
},
|
|
43
|
-
{
|
|
44
|
-
name: 'OpenAI key from request',
|
|
45
|
-
pattern: /new\s+OpenAI\s*\(\s*\{[^}]*apiKey\s*:\s*(?:req|body|params|input)/gi,
|
|
46
|
-
keyType: 'openai',
|
|
47
|
-
description: 'OpenAI client initialized with user-provided key',
|
|
48
|
-
},
|
|
49
|
-
// Anthropic API key patterns
|
|
50
|
-
{
|
|
51
|
-
name: 'User-provided Anthropic API key',
|
|
52
|
-
pattern: /(?:anthropic|claude).*key.*(?:req\.|body\.|params\.|input\.|user)|(?:req\.|body\.|params\.).*(?:anthropic|claude).*key/gi,
|
|
53
|
-
keyType: 'anthropic',
|
|
54
|
-
description: 'User-provided Anthropic API key detected',
|
|
55
|
-
},
|
|
56
|
-
{
|
|
57
|
-
name: 'Anthropic key from request',
|
|
58
|
-
pattern: /new\s+Anthropic\s*\(\s*\{[^}]*apiKey\s*:\s*(?:req|body|params|input)/gi,
|
|
59
|
-
keyType: 'anthropic',
|
|
60
|
-
description: 'Anthropic client initialized with user-provided key',
|
|
61
|
-
},
|
|
62
|
-
// Generic AI key patterns
|
|
63
|
-
{
|
|
64
|
-
name: 'User-provided AI API key',
|
|
65
|
-
pattern: /(?:ai|llm|model).*(?:api)?.*key.*(?:req\.|body\.|params\.|input\.)/gi,
|
|
66
|
-
keyType: 'generic_ai',
|
|
67
|
-
description: 'User-provided AI API key detected',
|
|
68
|
-
},
|
|
69
|
-
// Generic key patterns (more cautious)
|
|
70
|
-
{
|
|
71
|
-
name: 'API key from user input',
|
|
72
|
-
pattern: /apiKey\s*[=:]\s*(?:req|body|params|input)\./gi,
|
|
73
|
-
keyType: 'generic',
|
|
74
|
-
description: 'API key received from user input',
|
|
75
|
-
},
|
|
76
|
-
];
|
|
77
|
-
/**
|
|
78
|
-
* Check if file has explicit authentication checks
|
|
79
|
-
*/
|
|
80
|
-
function hasExplicitAuthCheck(content) {
|
|
81
|
-
const authPatterns = [
|
|
82
|
-
// Common auth check functions
|
|
83
|
-
/getCurrentUser(Id)?\s*\(/i,
|
|
84
|
-
/getSession\s*\(/i,
|
|
85
|
-
/getServerSession\s*\(/i,
|
|
86
|
-
/auth\s*\(\s*\)/i,
|
|
87
|
-
/requireAuth\s*\(/i,
|
|
88
|
-
/verifyToken\s*\(/i,
|
|
89
|
-
/isAuthenticated/i,
|
|
90
|
-
/checkAuth\s*\(/i,
|
|
91
|
-
/withAuth\s*\(/i,
|
|
92
|
-
// Request user checks
|
|
93
|
-
/req\.user|request\.user/i,
|
|
94
|
-
/context\.user/i,
|
|
95
|
-
// Supabase auth
|
|
96
|
-
/supabase\.auth\.getUser/i,
|
|
97
|
-
/supabase\.auth\.getSession/i,
|
|
98
|
-
// NextAuth
|
|
99
|
-
/getServerSession\s*\(/i,
|
|
100
|
-
/useSession\s*\(/i,
|
|
101
|
-
// Clerk
|
|
102
|
-
/currentUser\s*\(/i,
|
|
103
|
-
/auth\(\)\.protect/i,
|
|
104
|
-
];
|
|
105
|
-
return authPatterns.some(p => p.test(content));
|
|
106
|
-
}
|
|
107
|
-
/**
|
|
108
|
-
* Check if key appears to be stored to database
|
|
109
|
-
*/
|
|
110
|
-
function isKeyStoredToDatabase(content, lineNumber) {
|
|
111
|
-
const lines = content.split('\n');
|
|
112
|
-
const startLine = Math.max(0, lineNumber - 5);
|
|
113
|
-
const endLine = Math.min(lines.length, lineNumber + 15);
|
|
114
|
-
const context = lines.slice(startLine, endLine).join('\n');
|
|
115
|
-
// Patterns indicating database storage operations
|
|
116
|
-
// NOTE: We use specific patterns to avoid false positives with API calls like
|
|
117
|
-
// openai.chat.completions.create() or anthropic.messages.create()
|
|
118
|
-
const storagePatterns = [
|
|
119
|
-
/\.insert\s*\(/i,
|
|
120
|
-
/\.update\s*\(/i,
|
|
121
|
-
/\.upsert\s*\(/i,
|
|
122
|
-
/\.save\s*\(/i,
|
|
123
|
-
/INSERT\s+INTO/i,
|
|
124
|
-
/UPDATE\s+.*SET/i,
|
|
125
|
-
// ORM-specific patterns - must have table/model context
|
|
126
|
-
/prisma\.\w+\.create\s*\(/i,
|
|
127
|
-
/supabase\.from\(.*\)\.(?:insert|update|upsert)/i,
|
|
128
|
-
/db\.\w+\.create\s*\(/i,
|
|
129
|
-
/knex\(.*\)\.insert/i,
|
|
130
|
-
/\.collection\(.*\)\.(?:insertOne|updateOne|save)/i, // MongoDB
|
|
131
|
-
/sequelize\..*\.create\s*\(/i,
|
|
132
|
-
// localStorage/sessionStorage (client-side storage)
|
|
133
|
-
/localStorage\.setItem/i,
|
|
134
|
-
/sessionStorage\.setItem/i,
|
|
135
|
-
];
|
|
136
|
-
// Exclude AI SDK patterns that use .create() for API calls, not storage
|
|
137
|
-
const aiApiPatterns = [
|
|
138
|
-
/openai\..*\.create/i,
|
|
139
|
-
/anthropic\..*\.create/i,
|
|
140
|
-
/\.chat\.completions\.create/i,
|
|
141
|
-
/\.messages\.create/i,
|
|
142
|
-
/\.completions\.create/i,
|
|
143
|
-
/\.embeddings\.create/i,
|
|
144
|
-
];
|
|
145
|
-
const hasStoragePattern = storagePatterns.some(p => p.test(context));
|
|
146
|
-
const hasAiApiPattern = aiApiPatterns.some(p => p.test(context));
|
|
147
|
-
// Only consider it storage if we have storage patterns but NOT AI API patterns
|
|
148
|
-
// If both are present, check if storage patterns are separate from AI patterns
|
|
149
|
-
if (hasStoragePattern && hasAiApiPattern) {
|
|
150
|
-
// Check if there's a clear database storage operation separate from AI calls
|
|
151
|
-
// Look for keywords like 'user', 'key', 'credential' near storage patterns
|
|
152
|
-
return /(?:insert|update|upsert|save).*(?:apiKey|api_key|key|credential)/i.test(context) ||
|
|
153
|
-
/(?:apiKey|api_key|key|credential).*(?:insert|update|upsert|save)/i.test(context);
|
|
154
|
-
}
|
|
155
|
-
return hasStoragePattern;
|
|
156
|
-
}
|
|
157
|
-
/**
|
|
158
|
-
* Check if key is only used transiently (same request, not stored)
|
|
159
|
-
*/
|
|
160
|
-
function isTransientKeyUsage(content, lineNumber) {
|
|
161
|
-
const lines = content.split('\n');
|
|
162
|
-
const startLine = Math.max(0, lineNumber - 3);
|
|
163
|
-
const endLine = Math.min(lines.length, lineNumber + 20);
|
|
164
|
-
const context = lines.slice(startLine, endLine).join('\n');
|
|
165
|
-
// Transient usage patterns - key used immediately then discarded
|
|
166
|
-
const transientPatterns = [
|
|
167
|
-
/new\s+(?:OpenAI|Anthropic)\s*\(/i, // Immediate client creation
|
|
168
|
-
/\.create\s*\(\s*\{[^}]*messages/i, // Immediate API call
|
|
169
|
-
/\.completions\.create/i,
|
|
170
|
-
/\.messages\.create/i,
|
|
171
|
-
/await\s+(?:openai|anthropic|client)\./i,
|
|
172
|
-
];
|
|
173
|
-
// If we see API calls but no storage, it's transient
|
|
174
|
-
const hasApiCalls = transientPatterns.some(p => p.test(context));
|
|
175
|
-
const hasStorage = isKeyStoredToDatabase(content, lineNumber);
|
|
176
|
-
return hasApiCalls && !hasStorage;
|
|
177
|
-
}
|
|
178
|
-
/**
|
|
179
|
-
* Check if key appears to be logged (bad practice)
|
|
180
|
-
*/
|
|
181
|
-
function isKeyLogged(content, lineNumber) {
|
|
182
|
-
const lines = content.split('\n');
|
|
183
|
-
const startLine = Math.max(0, lineNumber - 3);
|
|
184
|
-
const endLine = Math.min(lines.length, lineNumber + 10);
|
|
185
|
-
const context = lines.slice(startLine, endLine).join('\n');
|
|
186
|
-
const loggingPatterns = [
|
|
187
|
-
/console\.(log|info|debug|warn|error)\s*\([^)]*(?:apiKey|api_key|key)/i,
|
|
188
|
-
/logger\.(log|info|debug|warn|error)\s*\([^)]*(?:apiKey|api_key|key)/i,
|
|
189
|
-
/\.(log|info|debug|warn|error)\s*\(.*(?:apiKey|api_key|key)/i,
|
|
190
|
-
];
|
|
191
|
-
return loggingPatterns.some(p => p.test(context));
|
|
192
|
-
}
|
|
193
|
-
/**
|
|
194
|
-
* Detect BYOK patterns and classify their risk level
|
|
195
|
-
*/
|
|
196
|
-
function detectBYOKPatterns(content, filePath, middlewareConfig, options) {
|
|
197
|
-
const vulnerabilities = [];
|
|
198
|
-
// Skip scanner/fixture files to avoid self-detection
|
|
199
|
-
if ((0, file_classifier_1.isScannerOrFixtureFile)(filePath))
|
|
200
|
-
return vulnerabilities;
|
|
201
|
-
const lines = options?.parsed?.lines ?? content.split('\n');
|
|
202
|
-
const isTestFile = (0, file_classifier_1.isTestOrMockFile)(filePath);
|
|
203
|
-
// Skip example/demo files entirely - they contain placeholder credentials by design
|
|
204
|
-
if ((0, file_classifier_1.isExampleFile)(filePath)) {
|
|
205
|
-
return vulnerabilities;
|
|
206
|
-
}
|
|
207
|
-
// Check route protection
|
|
208
|
-
const routePath = (0, middleware_detector_1.getRoutePathFromFile)(filePath);
|
|
209
|
-
const middlewareProtection = routePath && middlewareConfig
|
|
210
|
-
? (0, middleware_detector_1.isRouteProtectedByMiddleware)(routePath, middlewareConfig)
|
|
211
|
-
: { isProtected: false, reason: '' };
|
|
212
|
-
// Check for user scoping patterns in the file
|
|
213
|
-
const userScoping = (0, middleware_detector_1.detectUserScopingPatterns)(content);
|
|
214
|
-
// Check for explicit auth in file content (more reliable than middleware detection)
|
|
215
|
-
const hasExplicitAuth = hasExplicitAuthCheck(content);
|
|
216
|
-
lines.forEach((line, index) => {
|
|
217
|
-
if ((0, file_classifier_1.isComment)(line))
|
|
218
|
-
return;
|
|
219
|
-
// Skip lines with example/placeholder credentials
|
|
220
|
-
if (isExampleCredential(line) || (0, file_classifier_1.isPlaceholderValue)('', line)) {
|
|
221
|
-
return;
|
|
222
|
-
}
|
|
223
|
-
for (const pattern of BYOK_PATTERNS) {
|
|
224
|
-
const regex = new RegExp(pattern.pattern.source, pattern.pattern.flags);
|
|
225
|
-
if (regex.test(line)) {
|
|
226
|
-
// Determine context
|
|
227
|
-
const isAuthenticated = middlewareProtection.isProtected || hasExplicitAuth;
|
|
228
|
-
const isUserScoped = userScoping.hasUserScoping;
|
|
229
|
-
const isStoredCentrally = isKeyStoredToDatabase(content, index);
|
|
230
|
-
const isTransient = isTransientKeyUsage(content, index);
|
|
231
|
-
// Determine severity based on context
|
|
232
|
-
let severity;
|
|
233
|
-
let description;
|
|
234
|
-
let suggestedFix;
|
|
235
|
-
let baseConfidence;
|
|
236
|
-
if (isAuthenticated && isTransient) {
|
|
237
|
-
// Authenticated and transient - this is the IDEAL BYOK pattern
|
|
238
|
-
// Check if key is being logged (bad practice)
|
|
239
|
-
const keyLogged = isKeyLogged(content, index);
|
|
240
|
-
if (keyLogged) {
|
|
241
|
-
severity = 'low';
|
|
242
|
-
description = `BYOK feature detected: ${pattern.description}. Keys are used transiently (good!) but appear to be logged (avoid logging API keys, even in debug).`;
|
|
243
|
-
suggestedFix = 'Remove logging of API keys. Best practices: (1) Validate API key format, (2) Add per-user rate limiting.';
|
|
244
|
-
baseConfidence = BASE_CONFIDENCE_STORAGE;
|
|
245
|
-
}
|
|
246
|
-
else {
|
|
247
|
-
// IDEAL PATTERN: Authenticated + transient + no logging = no issue
|
|
248
|
-
// Skip emitting a finding entirely for the ideal case
|
|
249
|
-
continue;
|
|
250
|
-
}
|
|
251
|
-
}
|
|
252
|
-
else if (!isAuthenticated && isTransient) {
|
|
253
|
-
// Unauthenticated but transient - still lower risk than storage
|
|
254
|
-
severity = 'low';
|
|
255
|
-
description = `BYOK feature detected: ${pattern.description}. Keys are used transiently (not stored). Consider adding authentication or rate limiting.`;
|
|
256
|
-
suggestedFix = 'Consider adding authentication. If intentionally public: add rate limiting, key format validation, and usage tracking.';
|
|
257
|
-
baseConfidence = BASE_CONFIDENCE_TRANSIENT;
|
|
258
|
-
}
|
|
259
|
-
else if (!isAuthenticated && isStoredCentrally) {
|
|
260
|
-
// Unauthenticated AND storing keys - this is the real risk
|
|
261
|
-
severity = 'medium';
|
|
262
|
-
description = `${pattern.description}. This endpoint appears to lack authentication AND stores keys. This could allow unauthorized key storage.`;
|
|
263
|
-
suggestedFix = 'Add authentication. Ensure stored keys are scoped by user_id with proper access controls.';
|
|
264
|
-
baseConfidence = BASE_CONFIDENCE_STORAGE;
|
|
265
|
-
}
|
|
266
|
-
else if (isStoredCentrally && !isUserScoped) {
|
|
267
|
-
// Authenticated but keys stored without user scoping - medium risk
|
|
268
|
-
severity = 'medium';
|
|
269
|
-
description = `${pattern.description}. Keys appear to be stored centrally without user-scoping, which could lead to cross-tenant key access.`;
|
|
270
|
-
suggestedFix = 'Ensure stored keys are scoped by user_id. Add proper access controls to prevent users from accessing other users\' keys.';
|
|
271
|
-
baseConfidence = BASE_CONFIDENCE_STORAGE;
|
|
272
|
-
}
|
|
273
|
-
else if (isAuthenticated && isUserScoped) {
|
|
274
|
-
// Authenticated and user-scoped with storage - generally okay
|
|
275
|
-
severity = 'info';
|
|
276
|
-
description = `${pattern.description}. Route is authenticated and operations appear user-scoped. If keys are stored, consider encryption at rest.`;
|
|
277
|
-
suggestedFix = 'If storing keys: consider encryption at rest. Add rate limiting to prevent cost abuse.';
|
|
278
|
-
baseConfidence = BASE_CONFIDENCE_STORAGE;
|
|
279
|
-
}
|
|
280
|
-
else {
|
|
281
|
-
// Authenticated but unclear scoping - needs review, but low priority
|
|
282
|
-
severity = 'info';
|
|
283
|
-
description = `${pattern.description}. Route is authenticated. This appears to be a BYOK feature.`;
|
|
284
|
-
suggestedFix = 'Verify user-scoping for stored keys. Add rate limiting for cost control.';
|
|
285
|
-
baseConfidence = BASE_CONFIDENCE_TRANSIENT;
|
|
286
|
-
}
|
|
287
|
-
// Downgrade test files
|
|
288
|
-
if (isTestFile) {
|
|
289
|
-
severity = 'info';
|
|
290
|
-
description = `${description} (in test file)`;
|
|
291
|
-
}
|
|
292
|
-
vulnerabilities.push({
|
|
293
|
-
id: `byok-${filePath}-${index + 1}-${pattern.name}`,
|
|
294
|
-
filePath,
|
|
295
|
-
lineNumber: index + 1,
|
|
296
|
-
lineContent: line.trim(),
|
|
297
|
-
severity,
|
|
298
|
-
category: 'ai_pattern',
|
|
299
|
-
title: `BYOK: ${pattern.name}`,
|
|
300
|
-
description,
|
|
301
|
-
suggestedFix,
|
|
302
|
-
confidence: isTestFile ? 'low' : 'medium',
|
|
303
|
-
layer: 2,
|
|
304
|
-
source: 'ai_code',
|
|
305
|
-
baseConfidence,
|
|
306
|
-
});
|
|
307
|
-
break; // One finding per line
|
|
308
|
-
}
|
|
309
|
-
}
|
|
310
|
-
});
|
|
311
|
-
return vulnerabilities;
|
|
312
|
-
}
|
|
313
|
-
//# sourceMappingURL=byok-patterns.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"byok-patterns.js","sourceRoot":"","sources":["../../../src/detect/ai-code/byok-patterns.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AA4NH,gDAiIC;AAxVD,iEAAoI;AACpI,yEAA+H;AAE/H,MAAM,uBAAuB,GAAG,IAAI,CAAA;AACpC,MAAM,yBAAyB,GAAG,IAAI,CAAA;AAEtC;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,eAAe,GAAG;QACtB,uBAAuB;QACvB,0BAA0B;QAC1B,iBAAiB;QACjB,mBAAmB;QACnB,cAAc;QACd,kBAAkB;QAClB,qBAAqB;QACrB,iBAAiB,EAAQ,iBAAiB;QAC1C,mBAAmB,EAAM,YAAY;QACrC,OAAO;QACP,eAAe;QACf,eAAe;QACf,eAAe;QACf,eAAe;KAChB,CAAA;IACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAChD,CAAC;AASD,MAAM,aAAa,GAAkB;IACnC,0BAA0B;IAC1B;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,8GAA8G;QACvH,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,uCAAuC;KACrD;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,qEAAqE;QAC9E,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kDAAkD;KAChE;IAED,6BAA6B;IAC7B;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,0HAA0H;QACnI,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,0CAA0C;KACxD;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,wEAAwE;QACjF,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,qDAAqD;KACnE;IAED,0BAA0B;IAC1B;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,sEAAsE;QAC/E,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,mCAAmC;KACjD;IAED,uCAAuC;IACvC;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,kCAAkC;KAChD;CACF,CAAA;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC3C,MAAM,YAAY,GAAG;QACnB,8BAA8B;QAC9B,2BAA2B;QAC3B,kBAAkB;QAClB,wBAAwB;QACxB,iBAAiB;QACjB,mBAAmB;QACnB,mBAAmB;QACnB,kBAAkB;QAClB,iBAAiB;QACjB,gBAAgB;QAChB,sBAAsB;QACtB,0BAA0B;QAC1B,gBAAgB;QAChB,gBAAgB;QAChB,0BAA0B;QAC1B,6BAA6B;QAC7B,WAAW;QACX,wBAAwB;QACxB,kBAAkB;QAClB,QAAQ;QACR,mBAAmB;QACnB,oBAAoB;KACrB,CAAA;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,OAAe,EAAE,UAAkB;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,EAAE,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE1D,kDAAkD;IAClD,8EAA8E;IAC9E,kEAAkE;IAClE,MAAM,eAAe,GAAG;QACtB,gBAAgB;QAChB,gBAAgB;QAChB,gBAAgB;QAChB,cAAc;QACd,gBAAgB;QAChB,iBAAiB;QACjB,wDAAwD;QACxD,2BAA2B;QAC3B,iDAAiD;QACjD,uBAAuB;QACvB,qBAAqB;QACrB,mDAAmD,EAAG,UAAU;QAChE,6BAA6B;QAC7B,oDAAoD;QACpD,wBAAwB;QACxB,0BAA0B;KAC3B,CAAA;IAED,wEAAwE;IACxE,MAAM,aAAa,GAAG;QACpB,qBAAqB;QACrB,wBAAwB;QACxB,8BAA8B;QAC9B,qBAAqB;QACrB,wBAAwB;QACxB,uBAAuB;KACxB,CAAA;IAED,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACpE,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAEhE,+EAA+E;IAC/E,+EAA+E;IAC/E,IAAI,iBAAiB,IAAI,eAAe,EAAE,CAAC;QACzC,6EAA6E;QAC7E,2EAA2E;QAC3E,OAAO,mEAAmE,CAAC,IAAI,CAAC,OAAO,CAAC;YACjF,mEAAmE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1F,CAAC;IAED,OAAO,iBAAiB,CAAA;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,OAAe,EAAE,UAAkB;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,EAAE,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE1D,iEAAiE;IACjE,MAAM,iBAAiB,GAAG;QACxB,kCAAkC,EAAO,4BAA4B;QACrE,kCAAkC,EAAQ,qBAAqB;QAC/D,wBAAwB;QACxB,qBAAqB;QACrB,wCAAwC;KACzC,CAAA;IAED,qDAAqD;IACrD,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAE7D,OAAO,WAAW,IAAI,CAAC,UAAU,CAAA;AACnC,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,OAAe,EAAE,UAAkB;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,EAAE,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE1D,MAAM,eAAe,GAAG;QACtB,uEAAuE;QACvE,sEAAsE;QACtE,6DAA6D;KAC9D,CAAA;IAED,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AACnD,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAChC,OAAe,EACf,QAAgB,EAChB,gBAAuC,EACvC,OAAiC;IAEjC,MAAM,eAAe,GAAoB,EAAE,CAAA;IAE3C,qDAAqD;IACrD,IAAI,IAAA,wCAAsB,EAAC,QAAQ,CAAC;QAAE,OAAO,eAAe,CAAA;IAE5D,MAAM,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC3D,MAAM,UAAU,GAAG,IAAA,kCAAgB,EAAC,QAAQ,CAAC,CAAA;IAE7C,oFAAoF;IACpF,IAAI,IAAA,+BAAa,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,eAAe,CAAA;IACxB,CAAC;IAED,yBAAyB;IACzB,MAAM,SAAS,GAAG,IAAA,0CAAoB,EAAC,QAAQ,CAAC,CAAA;IAChD,MAAM,oBAAoB,GAAG,SAAS,IAAI,gBAAgB;QACxD,CAAC,CAAC,IAAA,kDAA4B,EAAC,SAAS,EAAE,gBAAgB,CAAC;QAC3D,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IAEtC,8CAA8C;IAC9C,MAAM,WAAW,GAAG,IAAA,+CAAyB,EAAC,OAAO,CAAC,CAAA;IAEtD,oFAAoF;IACpF,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;IAErD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,IAAA,2BAAS,EAAC,IAAI,CAAC;YAAE,OAAM;QAE3B,kDAAkD;QAClD,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,IAAA,oCAAkB,EAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAM;QACR,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAEvE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,oBAAoB;gBACpB,MAAM,eAAe,GAAG,oBAAoB,CAAC,WAAW,IAAI,eAAe,CAAA;gBAC3E,MAAM,YAAY,GAAG,WAAW,CAAC,cAAc,CAAA;gBAC/C,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBAC/D,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBAEvD,sCAAsC;gBACtC,IAAI,QAA+B,CAAA;gBACnC,IAAI,WAAmB,CAAA;gBACvB,IAAI,YAAoB,CAAA;gBACxB,IAAI,cAAsB,CAAA;gBAE1B,IAAI,eAAe,IAAI,WAAW,EAAE,CAAC;oBACnC,+DAA+D;oBAC/D,8CAA8C;oBAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;oBAC7C,IAAI,SAAS,EAAE,CAAC;wBACd,QAAQ,GAAG,KAAK,CAAA;wBAChB,WAAW,GAAG,0BAA0B,OAAO,CAAC,WAAW,sGAAsG,CAAA;wBACjK,YAAY,GAAG,0GAA0G,CAAA;wBACzH,cAAc,GAAG,uBAAuB,CAAA;oBAC1C,CAAC;yBAAM,CAAC;wBACN,mEAAmE;wBACnE,sDAAsD;wBACtD,SAAQ;oBACV,CAAC;gBACH,CAAC;qBAAM,IAAI,CAAC,eAAe,IAAI,WAAW,EAAE,CAAC;oBAC3C,gEAAgE;oBAChE,QAAQ,GAAG,KAAK,CAAA;oBAChB,WAAW,GAAG,0BAA0B,OAAO,CAAC,WAAW,4FAA4F,CAAA;oBACvJ,YAAY,GAAG,wHAAwH,CAAA;oBACvI,cAAc,GAAG,yBAAyB,CAAA;gBAC5C,CAAC;qBAAM,IAAI,CAAC,eAAe,IAAI,iBAAiB,EAAE,CAAC;oBACjD,2DAA2D;oBAC3D,QAAQ,GAAG,QAAQ,CAAA;oBACnB,WAAW,GAAG,GAAG,OAAO,CAAC,WAAW,4GAA4G,CAAA;oBAChJ,YAAY,GAAG,2FAA2F,CAAA;oBAC1G,cAAc,GAAG,uBAAuB,CAAA;gBAC1C,CAAC;qBAAM,IAAI,iBAAiB,IAAI,CAAC,YAAY,EAAE,CAAC;oBAC9C,mEAAmE;oBACnE,QAAQ,GAAG,QAAQ,CAAA;oBACnB,WAAW,GAAG,GAAG,OAAO,CAAC,WAAW,yGAAyG,CAAA;oBAC7I,YAAY,GAAG,0HAA0H,CAAA;oBACzI,cAAc,GAAG,uBAAuB,CAAA;gBAC1C,CAAC;qBAAM,IAAI,eAAe,IAAI,YAAY,EAAE,CAAC;oBAC3C,8DAA8D;oBAC9D,QAAQ,GAAG,MAAM,CAAA;oBACjB,WAAW,GAAG,GAAG,OAAO,CAAC,WAAW,8GAA8G,CAAA;oBAClJ,YAAY,GAAG,wFAAwF,CAAA;oBACvG,cAAc,GAAG,uBAAuB,CAAA;gBAC1C,CAAC;qBAAM,CAAC;oBACN,qEAAqE;oBACrE,QAAQ,GAAG,MAAM,CAAA;oBACjB,WAAW,GAAG,GAAG,OAAO,CAAC,WAAW,8DAA8D,CAAA;oBAClG,YAAY,GAAG,0EAA0E,CAAA;oBACzF,cAAc,GAAG,yBAAyB,CAAA;gBAC5C,CAAC;gBAED,uBAAuB;gBACvB,IAAI,UAAU,EAAE,CAAC;oBACf,QAAQ,GAAG,MAAM,CAAA;oBACjB,WAAW,GAAG,GAAG,WAAW,iBAAiB,CAAA;gBAC/C,CAAC;gBAED,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,QAAQ,QAAQ,IAAI,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE;oBACnD,QAAQ;oBACR,UAAU,EAAE,KAAK,GAAG,CAAC;oBACrB,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE;oBACxB,QAAQ;oBACR,QAAQ,EAAE,YAAY;oBACtB,KAAK,EAAE,SAAS,OAAO,CAAC,IAAI,EAAE;oBAC9B,WAAW;oBACX,YAAY;oBACZ,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;oBACzC,KAAK,EAAE,CAAC;oBACV,MAAM,EAAE,SAAkB;oBACxB,cAAc;iBACf,CAAC,CAAA;gBAEF,MAAK,CAAC,uBAAuB;YAC/B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,eAAe,CAAA;AACxB,CAAC"}
|
|
@@ -1,38 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Layer 2: AI Endpoint Protection Detection
|
|
3
|
-
* Detects AI/LLM endpoints without proper authentication or rate limiting
|
|
4
|
-
*
|
|
5
|
-
* Covers:
|
|
6
|
-
* - M5.2: AI endpoints without auth/rate limiting
|
|
7
|
-
* - Cost-bearing AI endpoints exposed publicly
|
|
8
|
-
* - Missing rate limiting on AI routes
|
|
9
|
-
*/
|
|
10
|
-
import type { Vulnerability } from '../../shared/types';
|
|
11
|
-
import type { ParsedFile } from '../../shared/parsed-file';
|
|
12
|
-
import type { MiddlewareAuthConfig } from '../../model/middleware-detector';
|
|
13
|
-
/**
|
|
14
|
-
* Check if file is a route/API handler
|
|
15
|
-
*/
|
|
16
|
-
declare function isRouteFile(filePath: string): boolean;
|
|
17
|
-
/**
|
|
18
|
-
* Check if content contains AI/LLM API calls
|
|
19
|
-
*/
|
|
20
|
-
declare function hasAIApiCalls(content: string): boolean;
|
|
21
|
-
/**
|
|
22
|
-
* Check if there's authentication in the route
|
|
23
|
-
*/
|
|
24
|
-
declare function hasAuthentication(content: string): boolean;
|
|
25
|
-
/**
|
|
26
|
-
* Check if there's rate limiting
|
|
27
|
-
*/
|
|
28
|
-
declare function hasRateLimiting(content: string): boolean;
|
|
29
|
-
export interface EndpointProtectionOptions {
|
|
30
|
-
middlewareConfig?: MiddlewareAuthConfig;
|
|
31
|
-
parsed?: ParsedFile;
|
|
32
|
-
}
|
|
33
|
-
/**
|
|
34
|
-
* Main detection function for AI endpoint protection issues
|
|
35
|
-
*/
|
|
36
|
-
export declare function detectAIEndpointProtection(content: string, filePath: string, options?: EndpointProtectionOptions): Vulnerability[];
|
|
37
|
-
export { isRouteFile, hasAIApiCalls, hasAuthentication, hasRateLimiting };
|
|
38
|
-
//# sourceMappingURL=endpoint-protection.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"endpoint-protection.d.ts","sourceRoot":"","sources":["../../../src/detect/ai-code/endpoint-protection.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAyB,MAAM,oBAAoB,CAAA;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAe3E;;GAEG;AACH,iBAAS,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU9C;AAED;;GAEG;AACH,iBAAS,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CA0B/C;AAED;;GAEG;AACH,iBAAS,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAwBnD;AAED;;GAEG;AACH,iBAAS,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAqBjD;AAoID,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;IACvC,MAAM,CAAC,EAAE,UAAU,CAAA;CACpB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,yBAA8B,GACtC,aAAa,EAAE,CAoIjB;AAGD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAA"}
|