@oculum/scanner 1.0.14 → 1.0.15

package/dist/detect/ast-rules/prompt-hygiene-ast.js

@@ -0,0 +1,332 @@
+"use strict";
+/**
+ * AST-Based AI Prompt Hygiene Detection
+ *
+ * Detects secrets in LLM prompts.
+ *
+ * Note: Prompt injection rules (ast-prompt-injection, ast-indirect-injection,
+ * ast-prompt-encoding-bypass) have been replaced by taint-engine-backed
+ * detection in taint-flow-ast.ts (Phase 4: LLM Flow Graph).
+ *
+ * Remaining rule:
+ * - ast-prompt-secret: Secret variable names in prompts (pattern-matching,
+ *   not data flow — taint engine doesn't track secret names)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_1 = require("./index");
+const context_detection_1 = require("./helpers/context-detection");
+const scope_analysis_1 = require("./helpers/scope-analysis");
+const file_classifier_1 = require("../../parse/file-classifier");
+const python_helpers_1 = require("./helpers/python-helpers");
+// ============================================================================
+// Helpers
+// ============================================================================
+/** Check if variable name suggests a secret */
+function isSecretVariableName(name) {
+    return /api[_-]?key|secret[_-]?key|access[_-]?token|auth[_-]?token|password|credential|private[_-]?key|bearer|jwt|oauth|^sk_|^pk_|token$|secret$/i.test(name);
+}
+/** Get enclosing function body text */
+function getEnclosingBodyText(node, content) {
+    let current = node.parent;
+    while (current) {
+        if (/function_declaration|arrow_function|function_expression|method_definition|function_definition/.test(current.type)) {
+            const bodyNode = current.childForFieldName('body') ?? current;
+            return content.substring(bodyNode.startIndex, bodyNode.endIndex);
+        }
+        current = current.parent;
+    }
+    return content;
+}
+/** Get enclosing function name */
+function getEnclosingFunctionName(node) {
+    let current = node.parent;
+    while (current) {
+        if (/function_declaration|method_definition|function_definition/.test(current.type)) {
+            return current.childForFieldName('name')?.text ?? null;
+        }
+        if (/arrow_function|function_expression/.test(current.type)) {
+            const parent = current.parent;
+            if (parent?.type === 'variable_declarator') {
+                return parent.childForFieldName('name')?.text ?? null;
+            }
+            if (parent?.type === 'pair') {
+                return parent.childForFieldName('key')?.text ?? null;
+            }
+        }
+        current = current.parent;
+    }
+    return null;
+}
+/** Check if node is inside an HTTP auth header context (Authorization: Bearer ${apiKey}) */
+function isInHttpAuthContext(node) {
+    let current = node.parent;
+    while (current) {
+        // Check if we're inside a property/pair that's named like an auth header
+        if (current.type === 'pair' || current.type === 'property') {
+            const key = current.childForFieldName('key');
+            if (key) {
+                const keyText = key.text.replace(/['"]/g, '').toLowerCase();
+                if (/^(authorization|api[_-]?key|x-api-key|token|bearer|x-auth-token|api_key)$/.test(keyText))
+                    return true;
+            }
+        }
+        // Python keyword_argument: headers={"Authorization": f"Bearer {key}"}
+        if (current.type === 'keyword_argument') {
+            const name = current.childForFieldName('name');
+            if (name && /^(headers|auth|authorization)$/i.test(name.text))
+                return true;
+        }
+        // Check assignment to auth-like variable
+        if (current.type === 'assignment_expression' || current.type === 'assignment' || current.type === 'variable_declarator') {
+            const left = current.childForFieldName('left') ?? current.childForFieldName('name');
+            if (left) {
+                const leftText = left.text.toLowerCase();
+                if (/^(auth|authorization|bearer|api_?key|token|header)/i.test(leftText))
+                    return true;
+            }
+        }
+        // Stop at function boundary
+        if (/function_declaration|arrow_function|function_expression|method_definition|function_definition/.test(current.type))
+            break;
+        current = current.parent;
+    }
+    // Also check if the surrounding template literal contains "Authorization" or "Bearer"
+    let tmpl = node.parent;
+    while (tmpl) {
+        if (tmpl.type === 'template_string' || (tmpl.type === 'string' && tmpl.text.startsWith('f'))) {
+            const tmplText = tmpl.text;
+            if (/authorization|bearer/i.test(tmplText))
+                return true;
+            break;
+        }
+        if (tmpl.type === 'template_substitution' || tmpl.type === 'interpolation') {
+            tmpl = tmpl.parent;
+            continue;
+        }
+        break;
+    }
+    return false;
+}
+/** Check if enclosing function is a credential utility (not an LLM prompt builder) */
+function isCredentialUtilityFunction(node) {
+    const fnName = getEnclosingFunctionName(node);
+    if (!fnName)
+        return false;
+    return /^(get|create|refresh|validate|verify|check|fetch|retrieve|init|setup|configure)(Auth|Token|Credential|ApiKey|Api_?Key|Session|Headers?|Client)$/i.test(fnName);
+}
+/** Check if node is in direct LLM prompt context (not just any function with LLM keywords) */
+function isInDirectPromptContext(node) {
+    let current = node.parent;
+    while (current) {
+        // Inside a messages array construction
+        if (current.type === 'pair' || current.type === 'property') {
+            const key = current.childForFieldName('key');
+            if (key) {
+                const keyText = key.text.replace(/['"]/g, '').toLowerCase();
+                if (/^(content|prompt|system|instructions|input|text)$/.test(keyText)) {
+                    // Check if the pair's parent object is inside a messages array or LLM call
+                    let objParent = current.parent;
+                    while (objParent) {
+                        if (objParent.type === 'array' || objParent.type === 'list') {
+                            // Check if this array is assigned to "messages" or similar
+                            const arrParent = objParent.parent;
+                            if (arrParent?.type === 'pair' || arrParent?.type === 'property') {
+                                const arrKey = arrParent.childForFieldName('key');
+                                if (arrKey && /^(messages|prompt)/i.test(arrKey.text.replace(/['"]/g, '')))
+                                    return true;
+                            }
+                        }
+                        if (/function_declaration|arrow_function|function_expression|method_definition|function_definition/.test(objParent.type))
+                            break;
+                        objParent = objParent.parent;
+                    }
+                    return true;
+                }
+            }
+        }
+        // Python keyword_argument for content=/prompt=/system=
+        if (current.type === 'keyword_argument') {
+            const name = current.childForFieldName('name');
+            if (name && /^(content|prompt|system|instructions|input|text)$/i.test(name.text))
+                return true;
+        }
+        // Assignment to prompt-like variable
+        if (current.type === 'assignment_expression' || current.type === 'assignment' || current.type === 'variable_declarator') {
+            const left = current.childForFieldName('left') ?? current.childForFieldName('name');
+            if (left) {
+                const leftText = left.text.toLowerCase();
+                if (/prompt|system_message|user_message|instruction/i.test(leftText))
+                    return true;
+            }
+        }
+        // Stop at function boundary
+        if (/function_declaration|arrow_function|function_expression|method_definition|function_definition/.test(current.type))
+            break;
+        current = current.parent;
+    }
+    return false;
+}
+// ============================================================================
+// AST Rule: Secrets in Prompt Context
+// ============================================================================
+(0, index_1.registerASTRule)({
+    id: 'ast-prompt-secret',
+    title: 'Secret variable flows into LLM prompt',
+    description: 'Secret variable interpolated into LLM prompt exposes credentials to model provider.',
+    severity: 'high',
+    category: 'hardcoded_secret',
+    suggestedFix: 'Remove secrets from prompts. If the AI needs to use an API, make the call server-side.',
+    languages: ['javascript', 'typescript', 'tsx', 'python'],
+    confidence: 'medium',
+    baseConfidence: 0.40,
+    layer: 2,
+    source: 'ai_code',
+    detect(ast, content, nodeIndex) {
+        if ((0, file_classifier_1.isScannerOrFixtureFile)(ast.filePath))
+            return [];
+        const root = ast.tree.rootNode;
+        const isTestFile = (0, file_classifier_1.isTestOrMockFile)(ast.filePath);
+        const matches = [];
+        // --- Python branch ---
+        if (ast.language === 'python') {
+            // Quick pre-check: skip files without LLM/prompt context
+            if (!/openai|anthropic|langchain|messages|prompt|system|ChatCompletion|ChatOpenAI/i.test(content))
+                return [];
+            // Find f-strings with secret interpolation in prompt context
+            for (const node of (0, index_1.getNodes)(nodeIndex, 'string')) {
+                if (!(0, python_helpers_1.isPythonFString)(node))
+                    continue;
+                const { dynamicParts } = (0, python_helpers_1.getPythonFStringParts)(node);
+                if (dynamicParts.length === 0)
+                    continue;
+                // Check if any interpolation contains a secret-named variable
+                for (const interpNode of dynamicParts) {
+                    const expr = interpNode.namedChildren[0];
+                    if (!expr || expr.type !== 'identifier')
+                        continue;
+                    if (!isSecretVariableName(expr.text))
+                        continue;
+                    // Skip if in HTTP auth header context
+                    if (isInHttpAuthContext(interpNode))
+                        continue;
+                    // Skip if enclosing function is a credential utility
+                    if (isCredentialUtilityFunction(interpNode))
+                        continue;
+                    // Check prompt context
+                    const bodyText = getEnclosingBodyText(node, content);
+                    if (!/messages|prompt|system|content|role.*system|\.chat\.|\.messages\.|ChatCompletion|create\(/i.test(bodyText))
+                        continue;
+                    // Prefer direct prompt context when available
+                    if (!isInDirectPromptContext(interpNode)) {
+                        if (!/\.chat\.|\.messages\.|ChatCompletion|completions\.create|\.invoke\(|\.predict\(/i.test(bodyText))
+                            continue;
+                    }
+                    matches.push({
+                        node: interpNode,
+                        severity: isTestFile ? 'low' : 'high',
+                        note: `Secret variable "${expr.text}" interpolated into LLM prompt.`,
+                    });
+                }
+            }
+            // Find .format() calls with secret args in prompt context
+            for (const node of (0, index_1.getNodes)(nodeIndex, 'call')) {
+                const fn = node.childForFieldName('function');
+                if (!fn || fn.type !== 'attribute')
+                    continue;
+                const attr = fn.childForFieldName('attribute');
+                if (attr?.text !== 'format')
+                    continue;
+                const obj = fn.childForFieldName('object');
+                if (!obj || obj.type !== 'string')
+                    continue;
+                const argList = node.childForFieldName('arguments');
+                if (!argList)
+                    continue;
+                // Check if any format arg is a secret variable
+                for (const arg of argList.namedChildren) {
+                    let argName = '';
+                    if (arg.type === 'identifier')
+                        argName = arg.text;
+                    else if (arg.type === 'keyword_argument') {
+                        const val = arg.childForFieldName('value');
+                        if (val?.type === 'identifier')
+                            argName = val.text;
+                    }
+                    if (!argName || !isSecretVariableName(argName))
+                        continue;
+                    // Skip if in HTTP auth header context
+                    if (isInHttpAuthContext(arg))
+                        continue;
+                    // Skip if enclosing function is a credential utility
+                    if (isCredentialUtilityFunction(arg))
+                        continue;
+                    const bodyText = getEnclosingBodyText(node, content);
+                    if (!/messages|prompt|system|content|role.*system|ChatCompletion|create\(/i.test(bodyText))
+                        continue;
+                    // Prefer direct prompt context
+                    if (!isInDirectPromptContext(arg)) {
+                        if (!/\.chat\.|\.messages\.|ChatCompletion|completions\.create|\.invoke\(|\.predict\(/i.test(bodyText))
+                            continue;
+                    }
+                    matches.push({
+                        node: arg,
+                        severity: isTestFile ? 'low' : 'high',
+                        note: `Secret variable "${argName}" interpolated into LLM prompt via .format().`,
+                    });
+                }
+            }
+            return matches;
+        }
+        // --- JS/TS branch ---
+        if (!(0, context_detection_1.isLLMContextFile)(root, content))
+            return [];
+        // Collect secret variable declarations
+        const vars = (0, scope_analysis_1.collectVariableDeclarations)(root);
+        const secretVars = new Map();
+        for (const [name, binding] of vars) {
+            if (isSecretVariableName(name)) {
+                // Skip env var references and test/mock values
+                const initText = binding.initValue?.text ?? '';
+                if (/process\.env|import\.meta\.env/i.test(initText))
+                    continue;
+                if (/example|sample|demo|placeholder|your[_-]|test|mock|fake/i.test(initText))
+                    continue;
+                secretVars.set(name, binding.declarationNode);
+            }
+        }
+        if (secretVars.size === 0)
+            return [];
+        // Find template interpolations that reference secret variables
+        for (const node of (0, index_1.getNodes)(nodeIndex, 'template_substitution')) {
+            const expr = node.namedChildren[0];
+            if (!expr)
+                continue;
+            const varName = expr.type === 'identifier' ? expr.text : null;
+            if (!varName || !secretVars.has(varName))
+                continue;
+            // Skip if in HTTP auth header context (Authorization: Bearer ${apiKey})
+            if (isInHttpAuthContext(node))
+                continue;
+            // Skip if enclosing function is a credential utility
+            if (isCredentialUtilityFunction(node))
+                continue;
+            // Check if in prompt context — require direct proximity, not just function-level keywords
+            const bodyText = getEnclosingBodyText(node, content);
+            if (!/messages|prompt|system|content|role.*system|\.chat\.|\.messages\./i.test(bodyText))
+                continue;
+            // Additional check: prefer direct prompt context when available
+            if (!isInDirectPromptContext(node)) {
+                // Fall back to body-level check only if there are strong LLM indicators
+                if (!/\.chat\.|\.messages\.|ChatCompletion|completions\.create|generateText|streamText/i.test(bodyText))
+                    continue;
+            }
+            matches.push({
+                node,
+                severity: isTestFile ? 'low' : 'high',
+                note: `Secret variable "${varName}" interpolated into LLM prompt.`,
+            });
+        }
+        return matches;
+    },
+});
+//# sourceMappingURL=prompt-hygiene-ast.js.map

package/dist/detect/ast-rules/prompt-hygiene-ast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-hygiene-ast.js","sourceRoot":"","sources":["../../../src/detect/ast-rules/prompt-hygiene-ast.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAGH,mCAAsF;AACtF,mEAA8D;AAC9D,6DAAsE;AACtE,iEAAsF;AACtF,6DAA2G;AAE3G,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,+CAA+C;AAC/C,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,2IAA2I,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC/J,CAAC;AAED,uCAAuC;AACvC,SAAS,oBAAoB,CAAC,IAAsC,EAAE,OAAe;IACnF,IAAI,OAAO,GAA4C,IAAI,CAAC,MAAM,CAAA;IAClE,OAAO,OAAO,EAAE,CAAC;QACf,IAAI,+FAA+F,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACvH,MAAM,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,OAAO,CAAA;YAC7D,OAAO,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAClE,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,MAAM,CAAA;IAC1B,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,kCAAkC;AAClC,SAAS,wBAAwB,CAAC,IAAsC;IACtE,IAAI,OAAO,GAA4C,IAAI,CAAC,MAAM,CAAA;IAClE,OAAO,OAAO,EAAE,CAAC;QACf,IAAI,4DAA4D,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACpF,OAAO,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,IAAI,CAAA;QACxD,CAAC;QACD,IAAI,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;YAC7B,IAAI,MAAM,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC3C,OAAO,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,IAAI,CAAA;YACvD,CAAC;YACD,IAAI,MAAM,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,CAAA;YACtD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,MAAM,CAAA;IAC1B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,4FAA4F;AAC5F,SAAS,mBAAmB,CAAC,IAAsC;IACjE,IAAI,OAAO,GAA4C,IAAI,CAAC,MAAM,CAAA;IAClE,OAAO,OAAO,EAAE,CAAC;QACf,yEAAyE;QACzE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;YAC5C,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;gBAC3D,IAAI,2EAA2E,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,OAAO,IAAI,CAAA;YAC5G,CAAC;QACH,CAAC;QACD,sEAAsE;QACtE,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAC9C,IAAI,IAAI,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAA;QAC5E,CAAC;QACD,yCAAyC;QACzC,IAAI,OAAO,CAAC,IAAI,KAAK,uBAAuB,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACxH,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YACnF,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;gBACxC,IAAI,qDAAqD,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAA;YACvF,CAAC;QACH,CAAC;QACD,4BAA4B;QAC5B,IAAI,+FAA+F,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAK;QAC7H,OAAO,GAAG,OAAO,CAAC,MAAM,CAAA;IAC1B,CAAC;IACD,sFAAsF;IACtF,IAAI,IAAI,GAA4C,IAAI,CAAC,MAAM,CAAA;IAC/D,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAA;YAC1B,IAAI,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAA;YACvD,MAAK;QACP,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC3E,IAAI,GAAG,IAAI,CAAC,MAAM,CAAA;YAClB,SAAQ;QACV,CAAC;QACD,MAAK;IACP,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,sFAAsF;AACtF,SAAS,2BAA2B,CAAC,IAAsC;IACzE,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,OAAO,kJAAkJ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AACxK,CAAC;AAED,8FAA8F;AAC9F,SAAS,uBAAuB,CAAC,IAAsC;IACrE,IAAI,OAAO,GAA4C,IAAI,CAAC,MAAM,CAAA;IAClE,OAAO,OAAO,EAAE,CAAC;QACf,uCAAuC;QACvC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;YAC5C,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;gBAC3D,IAAI,mDAAmD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtE,2EAA2E;oBAC3E,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,CAAA;oBAC9B,OAAO,SAAS,EAAE,CAAC;wBACjB,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BAC5D,2DAA2D;4BAC3D,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAA;4BAClC,IAAI,SAAS,EAAE,IAAI,KAAK,MAAM,IAAI,SAAS,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;gCACjE,MAAM,MAAM,GAAG,SAAS,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;gCACjD,IAAI,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oCAAE,OAAO,IAAI,CAAA;4BACzF,CAAC;wBACH,CAAC;wBACD,IAAI,+FAA+F,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;4BAAE,MAAK;wBAC/H,SAAS,GAAG,SAAS,CAAC,MAAM,CAAA;oBAC9B,CAAC;oBACD,OAAO,IAAI,CAAA;gBACb,CAAC;YACH,CAAC;QACH,CAAC;QACD,uDAAuD;QACvD,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAC9C,IAAI,IAAI,IAAI,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAA;QAC/F,CAAC;QACD,qCAAqC;QACrC,IAAI,OAAO,CAAC,IAAI,KAAK,uBAAuB,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACxH,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YACnF,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;gBACxC,IAAI,iDAAiD,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAA;YACnF,CAAC;QACH,CAAC;QACD,4BAA4B;QAC5B,IAAI,+FAA+F,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAK;QAC7H,OAAO,GAAG,OAAO,CAAC,MAAM,CAAA;IAC1B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,+EAA+E;AAC/E,sCAAsC;AACtC,+EAA+E;AAE/E,IAAA,uBAAe,EAAC;IACd,EAAE,EAAE,mBAAmB;IACvB,KAAK,EAAE,uCAAuC;IAC9C,WAAW,EAAE,qFAAqF;IAClG,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,kBAAkB;IAC5B,YAAY,EAAE,wFAAwF;IACtG,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC;IACxD,UAAU,EAAE,QAAQ;IACpB,cAAc,EAAE,IAAI;IACpB,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,SAAS;IACjB,MAAM,CAAC,GAAc,EAAE,OAAe,EAAE,SAAqB;QAC3D,IAAI,IAAA,wCAAsB,EAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAA;QAEnD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAA;QAE9B,MAAM,UAAU,GAAG,IAAA,kCAAgB,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACjD,MAAM,OAAO,GAAmB,EAAE,CAAA;QAElC,wBAAwB;QACxB,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9B,yDAAyD;YACzD,IAAI,CAAC,8EAA8E,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,EAAE,CAAA;YAE5G,6DAA6D;YAC7D,KAAK,MAAM,IAAI,IAAI,IAAA,gBAAQ,EAAC,SAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,IAAA,gCAAe,EAAC,IAAI,CAAC;oBAAE,SAAQ;gBAEpC,MAAM,EAAE,YAAY,EAAE,GAAG,IAAA,sCAAqB,EAAC,IAAI,CAAC,CAAA;gBACpD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAQ;gBAEvC,8DAA8D;gBAC9D,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;oBACxC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;wBAAE,SAAQ;oBACjD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,SAAQ;oBAE9C,sCAAsC;oBACtC,IAAI,mBAAmB,CAAC,UAAU,CAAC;wBAAE,SAAQ;oBAE7C,qDAAqD;oBACrD,IAAI,2BAA2B,CAAC,UAAU,CAAC;wBAAE,SAAQ;oBAErD,uBAAuB;oBACvB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;oBACpD,IAAI,CAAC,4FAA4F,CAAC,IAAI,CAAC,QAAQ,CAAC;wBAAE,SAAQ;oBAE1H,8CAA8C;oBAC9C,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;wBACzC,IAAI,CAAC,kFAAkF,CAAC,IAAI,CAAC,QAAQ,CAAC;4BAAE,SAAQ;oBAClH,CAAC;oBAED,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;wBACrC,IAAI,EAAE,oBAAoB,IAAI,CAAC,IAAI,iCAAiC;qBACrE,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAED,0DAA0D;YAC1D,KAAK,MAAM,IAAI,IAAI,IAAA,gBAAQ,EAAC,SAAU,EAAE,MAAM,CAAC,EAAE,CAAC;gBAChD,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;gBAC7C,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW;oBAAE,SAAQ;gBAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;gBAC9C,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ;oBAAE,SAAQ;gBACrC,MAAM,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;gBAC1C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAQ;gBAE3C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;gBACnD,IAAI,CAAC,OAAO;oBAAE,SAAQ;gBAEtB,+CAA+C;gBAC/C,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;oBACxC,IAAI,OAAO,GAAG,EAAE,CAAA;oBAChB,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;wBAAE,OAAO,GAAG,GAAG,CAAC,IAAI,CAAA;yBAC5C,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;wBACzC,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;wBAC1C,IAAI,GAAG,EAAE,IAAI,KAAK,YAAY;4BAAE,OAAO,GAAG,GAAG,CAAC,IAAI,CAAA;oBACpD,CAAC;oBACD,IAAI,CAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;wBAAE,SAAQ;oBAExD,sCAAsC;oBACtC,IAAI,mBAAmB,CAAC,GAAG,CAAC;wBAAE,SAAQ;oBAEtC,qDAAqD;oBACrD,IAAI,2BAA2B,CAAC,GAAG,CAAC;wBAAE,SAAQ;oBAE9C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;oBACpD,IAAI,CAAC,sEAAsE,CAAC,IAAI,CAAC,QAAQ,CAAC;wBAAE,SAAQ;oBAEpG,+BAA+B;oBAC/B,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;wBAClC,IAAI,CAAC,kFAAkF,CAAC,IAAI,CAAC,QAAQ,CAAC;4BAAE,SAAQ;oBAClH,CAAC;oBAED,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,GAAG;wBACT,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;wBACrC,IAAI,EAAE,oBAAoB,OAAO,+CAA+C;qBACjF,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC,IAAA,oCAAgB,EAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,EAAE,CAAA;QAE/C,uCAAuC;QACvC,MAAM,IAAI,GAAG,IAAA,4CAA2B,EAAC,IAAI,CAAC,CAAA;QAC9C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4C,CAAA;QACtE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACnC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,+CAA+C;gBAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAA;gBAC9C,IAAI,iCAAiC,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,SAAQ;gBAC9D,IAAI,0DAA0D,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,SAAQ;gBACvF,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;YAC/C,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAEpC,+DAA+D;QAC/D,KAAK,MAAM,IAAI,IAAI,IAAA,gBAAQ,EAAC,SAAU,EAAE,uBAAuB,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;YAClC,IAAI,CAAC,IAAI;gBAAE,SAAQ;YAEnB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;YAC7D,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAQ;YAElD,wEAAwE;YACxE,IAAI,mBAAmB,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAEvC,qDAAqD;YACrD,IAAI,2BAA2B,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAE/C,0FAA0F;YAC1F,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACpD,IAAI,CAAC,oEAAoE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAQ;YAElG,gEAAgE;YAChE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,wEAAwE;gBACxE,IAAI,CAAC,mFAAmF,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,SAAQ;YACnH,CAAC;YAED,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;gBACrC,IAAI,EAAE,oBAAoB,OAAO,iCAAiC;aACnE,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAA"}

package/dist/detect/ast-rules/rag-safety-ast.d.ts

@@ -0,0 +1,18 @@
+/**
+ * AST-Based RAG Safety Detection
+ *
+ * Migrates ai-code/rag-safety.ts from regex to AST.
+ * Detects data exfiltration risks in RAG systems.
+ *
+ * AST advantages:
+ * - Structurally detects vector store queries without filter arguments
+ * - Resolves call chains (retriever.invoke, collection.query)
+ * - Checks for access control scoping in enclosing function
+ * - Distinguishes client-side fuzzy search from vector stores
+ */
+/**
+ * Check if the file path indicates library/framework code that adapts
+ * or implements vector store operations (not application endpoints).
+ */
+export declare function isLibraryOrFrameworkPath(filePath: string): boolean;
+//# sourceMappingURL=rag-safety-ast.d.ts.map

package/dist/detect/ast-rules/rag-safety-ast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rag-safety-ast.d.ts","sourceRoot":"","sources":["../../../src/detect/ast-rules/rag-safety-ast.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAmBH;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAElE"}