@oculum/scanner 1.0.14 → 1.0.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/detect/ai-code/index.d.ts +6 -11
- package/dist/detect/ai-code/index.d.ts.map +1 -1
- package/dist/detect/ai-code/index.js +6 -24
- package/dist/detect/ai-code/index.js.map +1 -1
- package/dist/detect/ast-rules/agent-tools-ast.d.ts +14 -0
- package/dist/detect/ast-rules/agent-tools-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/agent-tools-ast.js +809 -0
- package/dist/detect/ast-rules/agent-tools-ast.js.map +1 -0
- package/dist/detect/ast-rules/ai-fingerprinting-ast.d.ts +14 -0
- package/dist/detect/ast-rules/ai-fingerprinting-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/ai-fingerprinting-ast.js +344 -0
- package/dist/detect/ast-rules/ai-fingerprinting-ast.js.map +1 -0
- package/dist/detect/ast-rules/auth-patterns-ast.d.ts +14 -0
- package/dist/detect/ast-rules/auth-patterns-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/auth-patterns-ast.js +280 -0
- package/dist/detect/ast-rules/auth-patterns-ast.js.map +1 -0
- package/dist/detect/ast-rules/byok-ast.d.ts +13 -0
- package/dist/detect/ast-rules/byok-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/byok-ast.js +180 -0
- package/dist/detect/ast-rules/byok-ast.js.map +1 -0
- package/dist/detect/ast-rules/child-process-ast.d.ts +13 -0
- package/dist/detect/ast-rules/child-process-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/child-process-ast.js +252 -0
- package/dist/detect/ast-rules/child-process-ast.js.map +1 -0
- package/dist/detect/ast-rules/dangerous-eval-ast.d.ts +13 -0
- package/dist/detect/ast-rules/dangerous-eval-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/dangerous-eval-ast.js +218 -0
- package/dist/detect/ast-rules/dangerous-eval-ast.js.map +1 -0
- package/dist/detect/ast-rules/data-exposure-ast.d.ts +13 -0
- package/dist/detect/ast-rules/data-exposure-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/data-exposure-ast.js +158 -0
- package/dist/detect/ast-rules/data-exposure-ast.js.map +1 -0
- package/dist/detect/ast-rules/dom-xss-ast.d.ts +14 -0
- package/dist/detect/ast-rules/dom-xss-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/dom-xss-ast.js +217 -0
- package/dist/detect/ast-rules/dom-xss-ast.js.map +1 -0
- package/dist/detect/ast-rules/endpoint-protection-ast.d.ts +13 -0
- package/dist/detect/ast-rules/endpoint-protection-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/endpoint-protection-ast.js +228 -0
- package/dist/detect/ast-rules/endpoint-protection-ast.js.map +1 -0
- package/dist/detect/ast-rules/entropy-ast.d.ts +17 -0
- package/dist/detect/ast-rules/entropy-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/entropy-ast.js +265 -0
- package/dist/detect/ast-rules/entropy-ast.js.map +1 -0
- package/dist/detect/ast-rules/flask-debug-ast.d.ts +10 -0
- package/dist/detect/ast-rules/flask-debug-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/flask-debug-ast.js +125 -0
- package/dist/detect/ast-rules/flask-debug-ast.js.map +1 -0
- package/dist/detect/ast-rules/framework-checks-ast.d.ts +13 -0
- package/dist/detect/ast-rules/framework-checks-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/framework-checks-ast.js +185 -0
- package/dist/detect/ast-rules/framework-checks-ast.js.map +1 -0
- package/dist/detect/ast-rules/helpers/call-analysis.d.ts +62 -0
- package/dist/detect/ast-rules/helpers/call-analysis.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/call-analysis.js +217 -0
- package/dist/detect/ast-rules/helpers/call-analysis.js.map +1 -0
- package/dist/detect/ast-rules/helpers/context-detection.d.ts +33 -0
- package/dist/detect/ast-rules/helpers/context-detection.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/context-detection.js +256 -0
- package/dist/detect/ast-rules/helpers/context-detection.js.map +1 -0
- package/dist/detect/ast-rules/helpers/control-flow.d.ts +40 -0
- package/dist/detect/ast-rules/helpers/control-flow.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/control-flow.js +174 -0
- package/dist/detect/ast-rules/helpers/control-flow.js.map +1 -0
- package/dist/detect/ast-rules/helpers/import-analysis.d.ts +43 -0
- package/dist/detect/ast-rules/helpers/import-analysis.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/import-analysis.js +149 -0
- package/dist/detect/ast-rules/helpers/import-analysis.js.map +1 -0
- package/dist/detect/ast-rules/helpers/index.d.ts +16 -0
- package/dist/detect/ast-rules/helpers/index.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/index.js +112 -0
- package/dist/detect/ast-rules/helpers/index.js.map +1 -0
- package/dist/detect/ast-rules/helpers/python-helpers.d.ts +215 -0
- package/dist/detect/ast-rules/helpers/python-helpers.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/python-helpers.js +935 -0
- package/dist/detect/ast-rules/helpers/python-helpers.js.map +1 -0
- package/dist/detect/ast-rules/helpers/scope-analysis.d.ts +50 -0
- package/dist/detect/ast-rules/helpers/scope-analysis.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/scope-analysis.js +194 -0
- package/dist/detect/ast-rules/helpers/scope-analysis.js.map +1 -0
- package/dist/detect/ast-rules/helpers/string-analysis.d.ts +57 -0
- package/dist/detect/ast-rules/helpers/string-analysis.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/string-analysis.js +184 -0
- package/dist/detect/ast-rules/helpers/string-analysis.js.map +1 -0
- package/dist/detect/ast-rules/helpers/type-extraction.d.ts +44 -0
- package/dist/detect/ast-rules/helpers/type-extraction.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/type-extraction.js +125 -0
- package/dist/detect/ast-rules/helpers/type-extraction.js.map +1 -0
- package/dist/detect/ast-rules/helpers/user-input.d.ts +35 -0
- package/dist/detect/ast-rules/helpers/user-input.d.ts.map +1 -0
- package/dist/detect/ast-rules/helpers/user-input.js +243 -0
- package/dist/detect/ast-rules/helpers/user-input.js.map +1 -0
- package/dist/detect/ast-rules/index.d.ts +112 -0
- package/dist/detect/ast-rules/index.d.ts.map +1 -0
- package/dist/detect/ast-rules/index.js +232 -0
- package/dist/detect/ast-rules/index.js.map +1 -0
- package/dist/detect/ast-rules/json-parse-ast.d.ts +13 -0
- package/dist/detect/ast-rules/json-parse-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/json-parse-ast.js +143 -0
- package/dist/detect/ast-rules/json-parse-ast.js.map +1 -0
- package/dist/detect/ast-rules/log-injection-ast.d.ts +14 -0
- package/dist/detect/ast-rules/log-injection-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/log-injection-ast.js +235 -0
- package/dist/detect/ast-rules/log-injection-ast.js.map +1 -0
- package/dist/detect/ast-rules/logic-gates-ast.d.ts +14 -0
- package/dist/detect/ast-rules/logic-gates-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/logic-gates-ast.js +312 -0
- package/dist/detect/ast-rules/logic-gates-ast.js.map +1 -0
- package/dist/detect/ast-rules/mcp-security-ast.d.ts +14 -0
- package/dist/detect/ast-rules/mcp-security-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/mcp-security-ast.js +755 -0
- package/dist/detect/ast-rules/mcp-security-ast.js.map +1 -0
- package/dist/detect/ast-rules/model-supply-chain-ast.d.ts +13 -0
- package/dist/detect/ast-rules/model-supply-chain-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/model-supply-chain-ast.js +188 -0
- package/dist/detect/ast-rules/model-supply-chain-ast.js.map +1 -0
- package/dist/detect/ast-rules/package-hallucination-ast.d.ts +13 -0
- package/dist/detect/ast-rules/package-hallucination-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/package-hallucination-ast.js +607 -0
- package/dist/detect/ast-rules/package-hallucination-ast.js.map +1 -0
- package/dist/detect/ast-rules/prompt-hygiene-ast.d.ts +15 -0
- package/dist/detect/ast-rules/prompt-hygiene-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/prompt-hygiene-ast.js +332 -0
- package/dist/detect/ast-rules/prompt-hygiene-ast.js.map +1 -0
- package/dist/detect/ast-rules/rag-safety-ast.d.ts +18 -0
- package/dist/detect/ast-rules/rag-safety-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/rag-safety-ast.js +640 -0
- package/dist/detect/ast-rules/rag-safety-ast.js.map +1 -0
- package/dist/detect/ast-rules/request-validation-ast.d.ts +13 -0
- package/dist/detect/ast-rules/request-validation-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/request-validation-ast.js +116 -0
- package/dist/detect/ast-rules/request-validation-ast.js.map +1 -0
- package/dist/detect/ast-rules/risky-imports-ast.d.ts +14 -0
- package/dist/detect/ast-rules/risky-imports-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/risky-imports-ast.js +114 -0
- package/dist/detect/ast-rules/risky-imports-ast.js.map +1 -0
- package/dist/detect/ast-rules/schema-validation-ast.d.ts +14 -0
- package/dist/detect/ast-rules/schema-validation-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/schema-validation-ast.js +233 -0
- package/dist/detect/ast-rules/schema-validation-ast.js.map +1 -0
- package/dist/detect/ast-rules/secret-patterns-ast.d.ts +17 -0
- package/dist/detect/ast-rules/secret-patterns-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/secret-patterns-ast.js +199 -0
- package/dist/detect/ast-rules/secret-patterns-ast.js.map +1 -0
- package/dist/detect/ast-rules/security-headers-ast.d.ts +14 -0
- package/dist/detect/ast-rules/security-headers-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/security-headers-ast.js +187 -0
- package/dist/detect/ast-rules/security-headers-ast.js.map +1 -0
- package/dist/detect/ast-rules/sql-injection-ast.d.ts +17 -0
- package/dist/detect/ast-rules/sql-injection-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/sql-injection-ast.js +497 -0
- package/dist/detect/ast-rules/sql-injection-ast.js.map +1 -0
- package/dist/detect/ast-rules/ssrf-ast.d.ts +14 -0
- package/dist/detect/ast-rules/ssrf-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/ssrf-ast.js +573 -0
- package/dist/detect/ast-rules/ssrf-ast.js.map +1 -0
- package/dist/detect/ast-rules/taint-fix-templates.d.ts +18 -0
- package/dist/detect/ast-rules/taint-fix-templates.d.ts.map +1 -0
- package/dist/detect/ast-rules/taint-fix-templates.js +92 -0
- package/dist/detect/ast-rules/taint-fix-templates.js.map +1 -0
- package/dist/detect/ast-rules/taint-flow-ast.d.ts +24 -0
- package/dist/detect/ast-rules/taint-flow-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/taint-flow-ast.js +340 -0
- package/dist/detect/ast-rules/taint-flow-ast.js.map +1 -0
- package/dist/detect/ast-rules/variables-ast.d.ts +24 -0
- package/dist/detect/ast-rules/variables-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/variables-ast.js +362 -0
- package/dist/detect/ast-rules/variables-ast.js.map +1 -0
- package/dist/detect/ast-rules/weak-crypto-ast.d.ts +15 -0
- package/dist/detect/ast-rules/weak-crypto-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/weak-crypto-ast.js +406 -0
- package/dist/detect/ast-rules/weak-crypto-ast.js.map +1 -0
- package/dist/detect/ast-rules/xxe-ast.d.ts +13 -0
- package/dist/detect/ast-rules/xxe-ast.d.ts.map +1 -0
- package/dist/detect/ast-rules/xxe-ast.js +157 -0
- package/dist/detect/ast-rules/xxe-ast.js.map +1 -0
- package/dist/detect/config/agent-skill-injection.d.ts.map +1 -1
- package/dist/detect/config/agent-skill-injection.js +2 -24
- package/dist/detect/config/agent-skill-injection.js.map +1 -1
- package/dist/detect/config/index.d.ts +1 -0
- package/dist/detect/config/index.d.ts.map +1 -1
- package/dist/detect/config/index.js +3 -1
- package/dist/detect/config/index.js.map +1 -1
- package/dist/detect/config/osv-check.d.ts.map +1 -1
- package/dist/detect/config/osv-check.js +6 -1
- package/dist/detect/config/osv-check.js.map +1 -1
- package/dist/detect/config/package-check.d.ts.map +1 -1
- package/dist/detect/config/package-check.js +6 -1
- package/dist/detect/config/package-check.js.map +1 -1
- package/dist/detect/config/rules-file-backdoor.d.ts +36 -0
- package/dist/detect/config/rules-file-backdoor.d.ts.map +1 -0
- package/dist/detect/config/rules-file-backdoor.js +379 -0
- package/dist/detect/config/rules-file-backdoor.js.map +1 -0
- package/dist/detect/index.d.ts +43 -6
- package/dist/detect/index.d.ts.map +1 -1
- package/dist/detect/index.js +70 -7
- package/dist/detect/index.js.map +1 -1
- package/dist/detect/secrets/config-audit.d.ts.map +1 -1
- package/dist/detect/secrets/config-audit.js +36 -3
- package/dist/detect/secrets/config-audit.js.map +1 -1
- package/dist/detect/secrets/entropy.d.ts.map +1 -1
- package/dist/detect/secrets/entropy.js +180 -0
- package/dist/detect/secrets/entropy.js.map +1 -1
- package/dist/detect/secrets/index.d.ts +0 -2
- package/dist/detect/secrets/index.d.ts.map +1 -1
- package/dist/detect/secrets/index.js +7 -17
- package/dist/detect/secrets/index.js.map +1 -1
- package/dist/detect/structural/index.d.ts +15 -28
- package/dist/detect/structural/index.d.ts.map +1 -1
- package/dist/detect/structural/index.js +20 -497
- package/dist/detect/structural/index.js.map +1 -1
- package/dist/index.d.ts +3 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +9 -1
- package/dist/index.js.map +1 -1
- package/dist/model/auth-helper-detector.d.ts.map +1 -1
- package/dist/model/auth-helper-detector.js +2 -7
- package/dist/model/auth-helper-detector.js.map +1 -1
- package/dist/model/import-resolver.d.ts.map +1 -1
- package/dist/model/import-resolver.js +94 -0
- package/dist/model/import-resolver.js.map +1 -1
- package/dist/model/imported-auth-detector.js +8 -8
- package/dist/model/imported-auth-detector.js.map +1 -1
- package/dist/model/index.d.ts +8 -0
- package/dist/model/index.d.ts.map +1 -1
- package/dist/model/index.js +198 -73
- package/dist/model/index.js.map +1 -1
- package/dist/model/module-graph.d.ts.map +1 -1
- package/dist/model/module-graph.js +22 -9
- package/dist/model/module-graph.js.map +1 -1
- package/dist/model/project-context.d.ts +1 -1
- package/dist/model/project-context.d.ts.map +1 -1
- package/dist/model/project-context.js +34 -0
- package/dist/model/project-context.js.map +1 -1
- package/dist/model/route-auth-resolver.d.ts.map +1 -1
- package/dist/model/route-auth-resolver.js +17 -2
- package/dist/model/route-auth-resolver.js.map +1 -1
- package/dist/model/route-discovery/index.js +1 -1
- package/dist/model/route-discovery/index.js.map +1 -1
- package/dist/model/route-discovery/nextjs.js +1 -1
- package/dist/model/route-discovery/nextjs.js.map +1 -1
- package/dist/model/route-discovery/python.d.ts +6 -3
- package/dist/model/route-discovery/python.d.ts.map +1 -1
- package/dist/model/route-discovery/python.js +132 -9
- package/dist/model/route-discovery/python.js.map +1 -1
- package/dist/model/route-discovery/types.d.ts +1 -1
- package/dist/model/route-discovery/types.d.ts.map +1 -1
- package/dist/model/route-discovery/utils.d.ts +8 -0
- package/dist/model/route-discovery/utils.d.ts.map +1 -1
- package/dist/model/route-discovery/utils.js +70 -0
- package/dist/model/route-discovery/utils.js.map +1 -1
- package/dist/model/taint-types.d.ts +0 -4
- package/dist/model/taint-types.d.ts.map +1 -1
- package/dist/parse/ast.d.ts +58 -0
- package/dist/parse/ast.d.ts.map +1 -0
- package/dist/parse/ast.js +230 -0
- package/dist/parse/ast.js.map +1 -0
- package/dist/parse/call-graph.d.ts +41 -0
- package/dist/parse/call-graph.d.ts.map +1 -0
- package/dist/parse/call-graph.js +386 -0
- package/dist/parse/call-graph.js.map +1 -0
- package/dist/parse/file-classifier.d.ts +11 -0
- package/dist/parse/file-classifier.d.ts.map +1 -1
- package/dist/parse/file-classifier.js +63 -15
- package/dist/parse/file-classifier.js.map +1 -1
- package/dist/parse/node-index.d.ts +32 -0
- package/dist/parse/node-index.d.ts.map +1 -0
- package/dist/parse/node-index.js +103 -0
- package/dist/parse/node-index.js.map +1 -0
- package/dist/parse/type-extractor.d.ts +50 -0
- package/dist/parse/type-extractor.d.ts.map +1 -0
- package/dist/parse/type-extractor.js +243 -0
- package/dist/parse/type-extractor.js.map +1 -0
- package/dist/pipeline/config.d.ts +7 -1
- package/dist/pipeline/config.d.ts.map +1 -1
- package/dist/pipeline/config.js.map +1 -1
- package/dist/pipeline/index.d.ts +3 -3
- package/dist/pipeline/index.d.ts.map +1 -1
- package/dist/pipeline/index.js +192 -64
- package/dist/pipeline/index.js.map +1 -1
- package/dist/pipeline/modes/incremental.d.ts.map +1 -1
- package/dist/pipeline/modes/incremental.js +2 -7
- package/dist/pipeline/modes/incremental.js.map +1 -1
- package/dist/postprocess/dedup.d.ts +5 -2
- package/dist/postprocess/dedup.d.ts.map +1 -1
- package/dist/postprocess/dedup.js +47 -16
- package/dist/postprocess/dedup.js.map +1 -1
- package/dist/report/build-result.d.ts +9 -4
- package/dist/report/build-result.d.ts.map +1 -1
- package/dist/report/build-result.js +15 -4
- package/dist/report/build-result.js.map +1 -1
- package/dist/report/formatters/cli-terminal.d.ts +1 -1
- package/dist/report/formatters/cli-terminal.d.ts.map +1 -1
- package/dist/report/formatters/cli-terminal.js +434 -231
- package/dist/report/formatters/cli-terminal.js.map +1 -1
- package/dist/report/sanitize.d.ts +10 -0
- package/dist/report/sanitize.d.ts.map +1 -0
- package/dist/report/sanitize.js +19 -0
- package/dist/report/sanitize.js.map +1 -0
- package/dist/score/adjustments.d.ts +20 -2
- package/dist/score/adjustments.d.ts.map +1 -1
- package/dist/score/adjustments.js +108 -37
- package/dist/score/adjustments.js.map +1 -1
- package/dist/score/confidence.d.ts +6 -0
- package/dist/score/confidence.d.ts.map +1 -1
- package/dist/score/confidence.js +10 -4
- package/dist/score/confidence.js.map +1 -1
- package/dist/score/evidence.d.ts +25 -0
- package/dist/score/evidence.d.ts.map +1 -0
- package/dist/score/evidence.js +51 -0
- package/dist/score/evidence.js.map +1 -0
- package/dist/score/index.d.ts +3 -1
- package/dist/score/index.d.ts.map +1 -1
- package/dist/score/index.js +25 -50
- package/dist/score/index.js.map +1 -1
- package/dist/score/types.d.ts +5 -1
- package/dist/score/types.d.ts.map +1 -1
- package/dist/shared/category-filter.d.ts.map +1 -1
- package/dist/shared/category-filter.js +12 -0
- package/dist/shared/category-filter.js.map +1 -1
- package/dist/shared/regex-utils.d.ts +3 -0
- package/dist/shared/regex-utils.d.ts.map +1 -0
- package/dist/shared/regex-utils.js +8 -0
- package/dist/shared/regex-utils.js.map +1 -0
- package/dist/shared/registry-clients.d.ts +7 -0
- package/dist/shared/registry-clients.d.ts.map +1 -1
- package/dist/shared/registry-clients.js +94 -17
- package/dist/shared/registry-clients.js.map +1 -1
- package/dist/shared/rules/metadata.d.ts.map +1 -1
- package/dist/shared/rules/metadata.js +17 -0
- package/dist/shared/rules/metadata.js.map +1 -1
- package/dist/shared/types.d.ts +59 -15
- package/dist/shared/types.d.ts.map +1 -1
- package/dist/shared/types.js +38 -21
- package/dist/shared/types.js.map +1 -1
- package/dist/taint/async-flow.d.ts +44 -0
- package/dist/taint/async-flow.d.ts.map +1 -0
- package/dist/taint/async-flow.js +271 -0
- package/dist/taint/async-flow.js.map +1 -0
- package/dist/taint/cfg-builder.d.ts +35 -0
- package/dist/taint/cfg-builder.d.ts.map +1 -0
- package/dist/taint/cfg-builder.js +980 -0
- package/dist/taint/cfg-builder.js.map +1 -0
- package/dist/taint/cfg-types.d.ts +76 -0
- package/dist/taint/cfg-types.d.ts.map +1 -0
- package/dist/taint/cfg-types.js +13 -0
- package/dist/taint/cfg-types.js.map +1 -0
- package/dist/taint/constant-propagation.d.ts +34 -0
- package/dist/taint/constant-propagation.d.ts.map +1 -0
- package/dist/taint/constant-propagation.js +164 -0
- package/dist/taint/constant-propagation.js.map +1 -0
- package/dist/taint/cross-file-analyzer.d.ts +27 -0
- package/dist/taint/cross-file-analyzer.d.ts.map +1 -0
- package/dist/taint/cross-file-analyzer.js +99 -0
- package/dist/taint/cross-file-analyzer.js.map +1 -0
- package/dist/taint/cross-file-index.d.ts +59 -0
- package/dist/taint/cross-file-index.d.ts.map +1 -0
- package/dist/taint/cross-file-index.js +183 -0
- package/dist/taint/cross-file-index.js.map +1 -0
- package/dist/taint/def-use.d.ts +27 -0
- package/dist/taint/def-use.d.ts.map +1 -0
- package/dist/taint/def-use.js +519 -0
- package/dist/taint/def-use.js.map +1 -0
- package/dist/taint/file-analysis-cache.d.ts +47 -0
- package/dist/taint/file-analysis-cache.d.ts.map +1 -0
- package/dist/taint/file-analysis-cache.js +107 -0
- package/dist/taint/file-analysis-cache.js.map +1 -0
- package/dist/taint/framework-models.d.ts +77 -0
- package/dist/taint/framework-models.d.ts.map +1 -0
- package/dist/taint/framework-models.js +258 -0
- package/dist/taint/framework-models.js.map +1 -0
- package/dist/taint/helpers.d.ts +31 -0
- package/dist/taint/helpers.d.ts.map +1 -0
- package/dist/taint/helpers.js +130 -0
- package/dist/taint/helpers.js.map +1 -0
- package/dist/taint/index.d.ts +28 -0
- package/dist/taint/index.d.ts.map +1 -0
- package/dist/taint/index.js +77 -0
- package/dist/taint/index.js.map +1 -0
- package/dist/taint/llm-registry.d.ts +47 -0
- package/dist/taint/llm-registry.d.ts.map +1 -0
- package/dist/taint/llm-registry.js +152 -0
- package/dist/taint/llm-registry.js.map +1 -0
- package/dist/taint/llm-risk-scoring.d.ts +54 -0
- package/dist/taint/llm-risk-scoring.d.ts.map +1 -0
- package/dist/taint/llm-risk-scoring.js +376 -0
- package/dist/taint/llm-risk-scoring.js.map +1 -0
- package/dist/taint/propagation-types.d.ts +104 -0
- package/dist/taint/propagation-types.d.ts.map +1 -0
- package/dist/taint/propagation-types.js +98 -0
- package/dist/taint/propagation-types.js.map +1 -0
- package/dist/taint/propagation.d.ts +111 -0
- package/dist/taint/propagation.d.ts.map +1 -0
- package/dist/taint/propagation.js +1576 -0
- package/dist/taint/propagation.js.map +1 -0
- package/dist/taint/sanitizer-registry.d.ts +26 -0
- package/dist/taint/sanitizer-registry.d.ts.map +1 -0
- package/dist/taint/sanitizer-registry.js +422 -0
- package/dist/taint/sanitizer-registry.js.map +1 -0
- package/dist/taint/sink-classifier.d.ts +27 -0
- package/dist/taint/sink-classifier.d.ts.map +1 -0
- package/dist/taint/sink-classifier.js +1166 -0
- package/dist/taint/sink-classifier.js.map +1 -0
- package/dist/taint/source-classifier.d.ts +29 -0
- package/dist/taint/source-classifier.d.ts.map +1 -0
- package/dist/taint/source-classifier.js +814 -0
- package/dist/taint/source-classifier.js.map +1 -0
- package/dist/taint/taint-analyzer.d.ts +33 -0
- package/dist/taint/taint-analyzer.d.ts.map +1 -0
- package/dist/taint/taint-analyzer.js +88 -0
- package/dist/taint/taint-analyzer.js.map +1 -0
- package/dist/taint/taint-summary.d.ts +37 -0
- package/dist/taint/taint-summary.d.ts.map +1 -0
- package/dist/taint/taint-summary.js +293 -0
- package/dist/taint/taint-summary.js.map +1 -0
- package/dist/taint/types.d.ts +47 -0
- package/dist/taint/types.d.ts.map +1 -0
- package/dist/taint/types.js +19 -0
- package/dist/taint/types.js.map +1 -0
- package/dist/validate/clients.d.ts +2 -1
- package/dist/validate/clients.d.ts.map +1 -1
- package/dist/validate/clients.js +3 -2
- package/dist/validate/clients.js.map +1 -1
- package/dist/validate/index.d.ts +5 -6
- package/dist/validate/index.d.ts.map +1 -1
- package/dist/validate/index.js +22 -21
- package/dist/validate/index.js.map +1 -1
- package/dist/validate/prompts/modules/ai-patterns.d.ts +1 -1
- package/dist/validate/prompts/modules/ai-patterns.d.ts.map +1 -1
- package/dist/validate/prompts/modules/ai-patterns.js +16 -0
- package/dist/validate/prompts/modules/ai-patterns.js.map +1 -1
- package/dist/validate/prompts/modules/common.d.ts +1 -1
- package/dist/validate/prompts/modules/common.d.ts.map +1 -1
- package/dist/validate/prompts/modules/common.js +12 -3
- package/dist/validate/prompts/modules/common.js.map +1 -1
- package/dist/validate/providers/anthropic.d.ts +4 -4
- package/dist/validate/providers/anthropic.d.ts.map +1 -1
- package/dist/validate/providers/anthropic.js +85 -58
- package/dist/validate/providers/anthropic.js.map +1 -1
- package/dist/validate/providers/openai.d.ts +4 -4
- package/dist/validate/providers/openai.d.ts.map +1 -1
- package/dist/validate/providers/openai.js +149 -99
- package/dist/validate/providers/openai.js.map +1 -1
- package/dist/validate/request-builder.d.ts +2 -8
- package/dist/validate/request-builder.d.ts.map +1 -1
- package/dist/validate/request-builder.js +4 -34
- package/dist/validate/request-builder.js.map +1 -1
- package/dist/validate/types.d.ts +9 -0
- package/dist/validate/types.d.ts.map +1 -1
- package/dist/validate/types.js.map +1 -1
- package/dist/validate/utils/path-helpers.js +2 -2
- package/dist/validate/utils/path-helpers.js.map +1 -1
- package/dist/validate/utils/response-parser.d.ts +10 -0
- package/dist/validate/utils/response-parser.d.ts.map +1 -1
- package/dist/validate/utils/response-parser.js +21 -2
- package/dist/validate/utils/response-parser.js.map +1 -1
- package/dist/validate/utils/retry.d.ts.map +1 -1
- package/dist/validate/utils/retry.js +19 -4
- package/dist/validate/utils/retry.js.map +1 -1
- package/package.json +7 -4
- package/src/__tests__/benchmark/fixtures/layer2/ai-execution-sinks.ts +1 -1
- package/src/__tests__/benchmark/planted-benchmark.test.ts +337 -0
- package/src/__tests__/benchmark/utils/test-runner.ts +38 -4
- package/src/__tests__/category-filter.test.ts +5 -1
- package/src/__tests__/context-engine/route-discovery/python.test.ts +726 -0
- package/src/__tests__/detect/ast-rules.test.ts +1043 -0
- package/src/__tests__/detect/offline-mode.test.ts +147 -0
- package/src/__tests__/detect/python-ast-rules.test.ts +569 -0
- package/src/__tests__/detect/python-helpers.test.ts +536 -0
- package/src/__tests__/detect/python-sast-rules.test.ts +453 -0
- package/src/__tests__/detect/rules-file-backdoor-decoders.test.ts +151 -0
- package/src/__tests__/detect/rules-file-backdoor.test.ts +284 -0
- package/src/__tests__/detect/taint-fix-templates.test.ts +150 -0
- package/src/__tests__/detect/taint-path-serialization.test.ts +170 -0
- package/src/__tests__/parse/call-graph.test.ts +300 -0
- package/src/__tests__/parse/python-parser.test.ts +274 -0
- package/src/__tests__/regression/known-false-positives.test.ts +491 -9
- package/src/__tests__/regression/rules-file-backdoor.test.ts +137 -0
- package/src/__tests__/score/adjustments.test.ts +34 -16
- package/src/__tests__/score/confidence.test.ts +84 -57
- package/src/__tests__/score/evidence-scoring.test.ts +249 -0
- package/src/__tests__/score/evidence.test.ts +144 -0
- package/src/__tests__/score/scoring-integration.test.ts +56 -34
- package/src/__tests__/score/taint-adjustments.test.ts +14 -228
- package/src/__tests__/snapshots/__snapshots__/scan-depth.test.ts.snap +65 -59
- package/src/__tests__/snapshots/scan-depth.test.ts +39 -7
- package/src/__tests__/taint/async-flow.test.ts +247 -0
- package/src/__tests__/taint/cfg-builder.test.ts +835 -0
- package/src/__tests__/taint/constant-propagation.test.ts +302 -0
- package/src/__tests__/taint/cross-file-index.test.ts +683 -0
- package/src/__tests__/taint/cross-file-integration.test.ts +275 -0
- package/src/__tests__/taint/cross-file-propagation.test.ts +910 -0
- package/src/__tests__/taint/def-use.test.ts +132 -0
- package/src/__tests__/taint/field-sensitive-sinks.test.ts +179 -0
- package/src/__tests__/taint/field-sensitivity.test.ts +342 -0
- package/src/__tests__/taint/file-analysis-cache.test.ts +290 -0
- package/src/__tests__/taint/framework-models.test.ts +227 -0
- package/src/__tests__/taint/llm-flow-graph.test.ts +850 -0
- package/src/__tests__/taint/llm-risk-scoring.test.ts +439 -0
- package/src/__tests__/taint/performance-parity.test.ts +315 -0
- package/src/__tests__/taint/propagation.test.ts +621 -0
- package/src/__tests__/taint/python-cross-file.test.ts +494 -0
- package/src/__tests__/taint/python-taint.test.ts +1344 -0
- package/src/__tests__/taint/sanitizer-registry.test.ts +304 -0
- package/src/__tests__/taint/sanitizer-regression.test.ts +111 -0
- package/src/__tests__/taint/sink-classifier.test.ts +537 -0
- package/src/__tests__/taint/source-classifier.test.ts +367 -0
- package/src/__tests__/taint/taint-pipeline.test.ts +418 -0
- package/src/__tests__/taint/taint-smoke.test.ts +400 -0
- package/src/__tests__/taint/taint-summary.test.ts +472 -0
- package/src/detect/ai-code/index.ts +6 -11
- package/src/detect/ast-rules/agent-tools-ast.ts +861 -0
- package/src/detect/ast-rules/ai-fingerprinting-ast.ts +451 -0
- package/src/detect/ast-rules/auth-patterns-ast.ts +304 -0
- package/src/detect/ast-rules/byok-ast.ts +195 -0
- package/src/detect/ast-rules/child-process-ast.ts +276 -0
- package/src/detect/ast-rules/dangerous-eval-ast.ts +227 -0
- package/src/detect/ast-rules/data-exposure-ast.ts +162 -0
- package/src/detect/ast-rules/dom-xss-ast.ts +260 -0
- package/src/detect/ast-rules/endpoint-protection-ast.ts +231 -0
- package/src/detect/ast-rules/entropy-ast.ts +268 -0
- package/src/detect/ast-rules/flask-debug-ast.ts +148 -0
- package/src/detect/ast-rules/framework-checks-ast.ts +200 -0
- package/src/detect/ast-rules/helpers/call-analysis.ts +256 -0
- package/src/detect/ast-rules/helpers/context-detection.ts +277 -0
- package/src/detect/ast-rules/helpers/control-flow.ts +179 -0
- package/src/detect/ast-rules/helpers/import-analysis.ts +185 -0
- package/src/detect/ast-rules/helpers/index.ts +133 -0
- package/src/detect/ast-rules/helpers/python-helpers.ts +1054 -0
- package/src/detect/ast-rules/helpers/scope-analysis.ts +224 -0
- package/src/detect/ast-rules/helpers/string-analysis.ts +215 -0
- package/src/detect/ast-rules/helpers/type-extraction.ts +138 -0
- package/src/detect/ast-rules/helpers/user-input.ts +256 -0
- package/src/detect/ast-rules/index.ts +311 -0
- package/src/detect/ast-rules/json-parse-ast.ts +162 -0
- package/src/detect/ast-rules/log-injection-ast.ts +243 -0
- package/src/detect/ast-rules/logic-gates-ast.ts +343 -0
- package/src/detect/ast-rules/mcp-security-ast.ts +808 -0
- package/src/detect/ast-rules/model-supply-chain-ast.ts +202 -0
- package/src/detect/ast-rules/package-hallucination-ast.ts +664 -0
- package/src/detect/ast-rules/prompt-hygiene-ast.ts +329 -0
- package/src/detect/ast-rules/rag-safety-ast.ts +689 -0
- package/src/detect/ast-rules/request-validation-ast.ts +122 -0
- package/src/detect/ast-rules/risky-imports-ast.ts +133 -0
- package/src/detect/ast-rules/schema-validation-ast.ts +244 -0
- package/src/detect/ast-rules/secret-patterns-ast.ts +223 -0
- package/src/detect/ast-rules/security-headers-ast.ts +206 -0
- package/src/detect/ast-rules/sql-injection-ast.ts +614 -0
- package/src/detect/ast-rules/ssrf-ast.ts +601 -0
- package/src/detect/ast-rules/taint-fix-templates.ts +108 -0
- package/src/detect/ast-rules/taint-flow-ast.ts +416 -0
- package/src/detect/ast-rules/variables-ast.ts +446 -0
- package/src/detect/ast-rules/weak-crypto-ast.ts +441 -0
- package/src/detect/ast-rules/xxe-ast.ts +184 -0
- package/src/detect/config/agent-skill-injection.ts +2 -24
- package/src/detect/config/index.ts +1 -0
- package/src/detect/config/osv-check.ts +6 -1
- package/src/detect/config/package-check.ts +6 -1
- package/src/detect/config/rules-file-backdoor.ts +438 -0
- package/src/detect/index.ts +146 -52
- package/src/detect/secrets/config-audit.ts +37 -3
- package/src/detect/secrets/entropy.ts +195 -0
- package/src/detect/secrets/index.ts +7 -16
- package/src/detect/structural/index.ts +23 -566
- package/src/index.ts +7 -0
- package/src/model/auth-helper-detector.ts +1 -7
- package/src/model/import-resolver.ts +104 -0
- package/src/model/imported-auth-detector.ts +1 -1
- package/src/model/index.ts +240 -80
- package/src/model/module-graph.ts +17 -5
- package/src/model/project-context.ts +28 -1
- package/src/model/route-auth-resolver.ts +18 -3
- package/src/model/route-discovery/index.ts +1 -1
- package/src/model/route-discovery/nextjs.ts +1 -1
- package/src/model/route-discovery/python.ts +156 -9
- package/src/model/route-discovery/types.ts +1 -1
- package/src/model/route-discovery/utils.ts +73 -0
- package/src/model/taint-types.ts +1 -6
- package/src/parse/ast.ts +271 -0
- package/src/parse/call-graph.ts +419 -0
- package/src/parse/file-classifier.ts +69 -15
- package/src/parse/node-index.ts +118 -0
- package/src/parse/type-extractor.ts +293 -0
- package/src/pipeline/config.ts +7 -0
- package/src/pipeline/index.ts +464 -199
- package/src/pipeline/modes/incremental.ts +1 -7
- package/src/postprocess/dedup.ts +48 -17
- package/src/report/build-result.ts +57 -29
- package/src/report/formatters/cli-terminal.ts +731 -415
- package/src/report/sanitize.ts +27 -0
- package/src/score/adjustments.ts +113 -40
- package/src/score/confidence.ts +10 -5
- package/src/score/evidence.ts +55 -0
- package/src/score/index.ts +27 -55
- package/src/score/types.ts +4 -0
- package/src/shared/category-filter.ts +12 -0
- package/src/shared/regex-utils.ts +4 -0
- package/src/shared/registry-clients.ts +106 -18
- package/src/shared/rules/__tests__/metadata.test.ts +5 -1
- package/src/shared/rules/metadata.ts +19 -0
- package/src/shared/types.ts +372 -253
- package/src/taint/async-flow.ts +301 -0
- package/src/taint/cfg-builder.ts +1127 -0
- package/src/taint/cfg-types.ts +110 -0
- package/src/taint/constant-propagation.ts +170 -0
- package/src/taint/cross-file-analyzer.ts +118 -0
- package/src/taint/cross-file-index.ts +275 -0
- package/src/taint/def-use.ts +556 -0
- package/src/taint/file-analysis-cache.ts +145 -0
- package/src/taint/framework-models.ts +313 -0
- package/src/taint/helpers.ts +138 -0
- package/src/taint/index.ts +71 -0
- package/src/taint/llm-registry.ts +174 -0
- package/src/taint/llm-risk-scoring.ts +412 -0
- package/src/taint/propagation-types.ts +188 -0
- package/src/taint/propagation.ts +1750 -0
- package/src/taint/sanitizer-registry.ts +490 -0
- package/src/taint/sink-classifier.ts +1402 -0
- package/src/taint/source-classifier.ts +859 -0
- package/src/taint/taint-analyzer.ts +112 -0
- package/src/taint/taint-summary.ts +341 -0
- package/src/taint/types.ts +86 -0
- package/src/validate/clients.ts +3 -2
- package/src/validate/index.ts +89 -53
- package/src/validate/prompts/modules/ai-patterns.ts +16 -0
- package/src/validate/prompts/modules/common.ts +12 -3
- package/src/validate/providers/anthropic.ts +254 -148
- package/src/validate/providers/openai.ts +363 -218
- package/src/validate/request-builder.ts +2 -45
- package/src/validate/types.ts +9 -0
- package/src/validate/utils/path-helpers.ts +2 -2
- package/src/validate/utils/response-parser.ts +32 -3
- package/src/validate/utils/retry.ts +19 -4
- package/dist/ai-context/index.d.ts +0 -6
- package/dist/ai-context/index.d.ts.map +0 -1
- package/dist/ai-context/index.js +0 -13
- package/dist/ai-context/index.js.map +0 -1
- package/dist/ai-context/manager.d.ts +0 -67
- package/dist/ai-context/manager.d.ts.map +0 -1
- package/dist/ai-context/manager.js +0 -104
- package/dist/ai-context/manager.js.map +0 -1
- package/dist/baseline/diff.d.ts +0 -32
- package/dist/baseline/diff.d.ts.map +0 -1
- package/dist/baseline/diff.js +0 -119
- package/dist/baseline/diff.js.map +0 -1
- package/dist/baseline/index.d.ts +0 -9
- package/dist/baseline/index.d.ts.map +0 -1
- package/dist/baseline/index.js +0 -19
- package/dist/baseline/index.js.map +0 -1
- package/dist/baseline/manager.d.ts +0 -67
- package/dist/baseline/manager.d.ts.map +0 -1
- package/dist/baseline/manager.js +0 -180
- package/dist/baseline/manager.js.map +0 -1
- package/dist/baseline/types.d.ts +0 -91
- package/dist/baseline/types.d.ts.map +0 -1
- package/dist/baseline/types.js +0 -12
- package/dist/baseline/types.js.map +0 -1
- package/dist/category-filter.d.ts +0 -125
- package/dist/category-filter.d.ts.map +0 -1
- package/dist/category-filter.js +0 -360
- package/dist/category-filter.js.map +0 -1
- package/dist/detect/ai-code/agent-tools.d.ts +0 -22
- package/dist/detect/ai-code/agent-tools.d.ts.map +0 -1
- package/dist/detect/ai-code/agent-tools.js +0 -1509
- package/dist/detect/ai-code/agent-tools.js.map +0 -1
- package/dist/detect/ai-code/byok-patterns.d.ts +0 -15
- package/dist/detect/ai-code/byok-patterns.d.ts.map +0 -1
- package/dist/detect/ai-code/byok-patterns.js +0 -313
- package/dist/detect/ai-code/byok-patterns.js.map +0 -1
- package/dist/detect/ai-code/endpoint-protection.d.ts +0 -38
- package/dist/detect/ai-code/endpoint-protection.d.ts.map +0 -1
- package/dist/detect/ai-code/endpoint-protection.js +0 -349
- package/dist/detect/ai-code/endpoint-protection.js.map +0 -1
- package/dist/detect/ai-code/execution-sinks.d.ts +0 -21
- package/dist/detect/ai-code/execution-sinks.d.ts.map +0 -1
- package/dist/detect/ai-code/execution-sinks.js +0 -1158
- package/dist/detect/ai-code/execution-sinks.js.map +0 -1
- package/dist/detect/ai-code/fingerprinting.d.ts +0 -10
- package/dist/detect/ai-code/fingerprinting.d.ts.map +0 -1
- package/dist/detect/ai-code/fingerprinting.js +0 -665
- package/dist/detect/ai-code/fingerprinting.js.map +0 -1
- package/dist/detect/ai-code/mcp-security.d.ts +0 -20
- package/dist/detect/ai-code/mcp-security.d.ts.map +0 -1
- package/dist/detect/ai-code/mcp-security.js +0 -880
- package/dist/detect/ai-code/mcp-security.js.map +0 -1
- package/dist/detect/ai-code/model-supply-chain.d.ts +0 -23
- package/dist/detect/ai-code/model-supply-chain.d.ts.map +0 -1
- package/dist/detect/ai-code/model-supply-chain.js +0 -447
- package/dist/detect/ai-code/model-supply-chain.js.map +0 -1
- package/dist/detect/ai-code/package-hallucination.d.ts +0 -22
- package/dist/detect/ai-code/package-hallucination.d.ts.map +0 -1
- package/dist/detect/ai-code/package-hallucination.js +0 -841
- package/dist/detect/ai-code/package-hallucination.js.map +0 -1
- package/dist/detect/ai-code/prompt-hygiene.d.ts +0 -22
- package/dist/detect/ai-code/prompt-hygiene.d.ts.map +0 -1
- package/dist/detect/ai-code/prompt-hygiene.js +0 -1177
- package/dist/detect/ai-code/prompt-hygiene.js.map +0 -1
- package/dist/detect/ai-code/rag-safety.d.ts +0 -24
- package/dist/detect/ai-code/rag-safety.d.ts.map +0 -1
- package/dist/detect/ai-code/rag-safety.js +0 -913
- package/dist/detect/ai-code/rag-safety.js.map +0 -1
- package/dist/detect/ai-code/schema-validation.d.ts +0 -28
- package/dist/detect/ai-code/schema-validation.d.ts.map +0 -1
- package/dist/detect/ai-code/schema-validation.js +0 -378
- package/dist/detect/ai-code/schema-validation.js.map +0 -1
- package/dist/detect/secrets/patterns.d.ts +0 -11
- package/dist/detect/secrets/patterns.d.ts.map +0 -1
- package/dist/detect/secrets/patterns.js +0 -518
- package/dist/detect/secrets/patterns.js.map +0 -1
- package/dist/detect/secrets/weak-crypto.d.ts +0 -10
- package/dist/detect/secrets/weak-crypto.d.ts.map +0 -1
- package/dist/detect/secrets/weak-crypto.js +0 -432
- package/dist/detect/secrets/weak-crypto.js.map +0 -1
- package/dist/detect/structural/auth-patterns.d.ts +0 -22
- package/dist/detect/structural/auth-patterns.d.ts.map +0 -1
- package/dist/detect/structural/auth-patterns.js +0 -533
- package/dist/detect/structural/auth-patterns.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/child-process.d.ts +0 -16
- package/dist/detect/structural/dangerous-functions/child-process.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/child-process.js +0 -74
- package/dist/detect/structural/dangerous-functions/child-process.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/dom-xss.d.ts +0 -34
- package/dist/detect/structural/dangerous-functions/dom-xss.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/dom-xss.js +0 -230
- package/dist/detect/structural/dangerous-functions/dom-xss.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/index.d.ts +0 -16
- package/dist/detect/structural/dangerous-functions/index.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/index.js +0 -1193
- package/dist/detect/structural/dangerous-functions/index.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/json-parse.d.ts +0 -31
- package/dist/detect/structural/dangerous-functions/json-parse.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/json-parse.js +0 -326
- package/dist/detect/structural/dangerous-functions/json-parse.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/math-random.d.ts +0 -111
- package/dist/detect/structural/dangerous-functions/math-random.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/math-random.js +0 -684
- package/dist/detect/structural/dangerous-functions/math-random.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/patterns.d.ts +0 -21
- package/dist/detect/structural/dangerous-functions/patterns.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/patterns.js +0 -163
- package/dist/detect/structural/dangerous-functions/patterns.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/request-validation.d.ts +0 -13
- package/dist/detect/structural/dangerous-functions/request-validation.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/request-validation.js +0 -126
- package/dist/detect/structural/dangerous-functions/request-validation.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/control-flow.d.ts +0 -24
- package/dist/detect/structural/dangerous-functions/utils/control-flow.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/control-flow.js +0 -70
- package/dist/detect/structural/dangerous-functions/utils/control-flow.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/helpers.d.ts +0 -31
- package/dist/detect/structural/dangerous-functions/utils/helpers.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/helpers.js +0 -147
- package/dist/detect/structural/dangerous-functions/utils/helpers.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/index.d.ts +0 -9
- package/dist/detect/structural/dangerous-functions/utils/index.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/index.js +0 -23
- package/dist/detect/structural/dangerous-functions/utils/index.js.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/schema-validation.d.ts +0 -22
- package/dist/detect/structural/dangerous-functions/utils/schema-validation.d.ts.map +0 -1
- package/dist/detect/structural/dangerous-functions/utils/schema-validation.js +0 -102
- package/dist/detect/structural/dangerous-functions/utils/schema-validation.js.map +0 -1
- package/dist/detect/structural/data-exposure.d.ts +0 -19
- package/dist/detect/structural/data-exposure.d.ts.map +0 -1
- package/dist/detect/structural/data-exposure.js +0 -262
- package/dist/detect/structural/data-exposure.js.map +0 -1
- package/dist/detect/structural/framework-checks.d.ts +0 -10
- package/dist/detect/structural/framework-checks.d.ts.map +0 -1
- package/dist/detect/structural/framework-checks.js +0 -389
- package/dist/detect/structural/framework-checks.js.map +0 -1
- package/dist/detect/structural/log-injection.d.ts +0 -18
- package/dist/detect/structural/log-injection.d.ts.map +0 -1
- package/dist/detect/structural/log-injection.js +0 -217
- package/dist/detect/structural/log-injection.js.map +0 -1
- package/dist/detect/structural/logic-gates.d.ts +0 -10
- package/dist/detect/structural/logic-gates.d.ts.map +0 -1
- package/dist/detect/structural/logic-gates.js +0 -227
- package/dist/detect/structural/logic-gates.js.map +0 -1
- package/dist/detect/structural/risky-imports.d.ts +0 -10
- package/dist/detect/structural/risky-imports.d.ts.map +0 -1
- package/dist/detect/structural/risky-imports.js +0 -168
- package/dist/detect/structural/risky-imports.js.map +0 -1
- package/dist/detect/structural/security-headers.d.ts +0 -18
- package/dist/detect/structural/security-headers.d.ts.map +0 -1
- package/dist/detect/structural/security-headers.js +0 -196
- package/dist/detect/structural/security-headers.js.map +0 -1
- package/dist/detect/structural/ssrf-detection.d.ts +0 -18
- package/dist/detect/structural/ssrf-detection.d.ts.map +0 -1
- package/dist/detect/structural/ssrf-detection.js +0 -263
- package/dist/detect/structural/ssrf-detection.js.map +0 -1
- package/dist/detect/structural/variables.d.ts +0 -11
- package/dist/detect/structural/variables.d.ts.map +0 -1
- package/dist/detect/structural/variables.js +0 -159
- package/dist/detect/structural/variables.js.map +0 -1
- package/dist/detect/structural/xxe-detection.d.ts +0 -18
- package/dist/detect/structural/xxe-detection.d.ts.map +0 -1
- package/dist/detect/structural/xxe-detection.js +0 -245
- package/dist/detect/structural/xxe-detection.js.map +0 -1
- package/dist/filtering/context-adjustments.d.ts +0 -23
- package/dist/filtering/context-adjustments.d.ts.map +0 -1
- package/dist/filtering/context-adjustments.js +0 -100
- package/dist/filtering/context-adjustments.js.map +0 -1
- package/dist/filtering/index.d.ts +0 -3
- package/dist/filtering/index.d.ts.map +0 -1
- package/dist/filtering/index.js +0 -8
- package/dist/filtering/index.js.map +0 -1
- package/dist/filtering/pipeline.d.ts +0 -48
- package/dist/filtering/pipeline.d.ts.map +0 -1
- package/dist/filtering/pipeline.js +0 -76
- package/dist/filtering/pipeline.js.map +0 -1
- package/dist/formatters/ai-context.d.ts +0 -23
- package/dist/formatters/ai-context.d.ts.map +0 -1
- package/dist/formatters/ai-context.js +0 -238
- package/dist/formatters/ai-context.js.map +0 -1
- package/dist/formatters/cli-terminal.d.ts +0 -65
- package/dist/formatters/cli-terminal.d.ts.map +0 -1
- package/dist/formatters/cli-terminal.js +0 -735
- package/dist/formatters/cli-terminal.js.map +0 -1
- package/dist/formatters/github-comment.d.ts +0 -41
- package/dist/formatters/github-comment.d.ts.map +0 -1
- package/dist/formatters/github-comment.js +0 -370
- package/dist/formatters/github-comment.js.map +0 -1
- package/dist/formatters/grouping.d.ts +0 -52
- package/dist/formatters/grouping.d.ts.map +0 -1
- package/dist/formatters/grouping.js +0 -152
- package/dist/formatters/grouping.js.map +0 -1
- package/dist/formatters/ide/claude-code.d.ts +0 -17
- package/dist/formatters/ide/claude-code.d.ts.map +0 -1
- package/dist/formatters/ide/claude-code.js +0 -94
- package/dist/formatters/ide/claude-code.js.map +0 -1
- package/dist/formatters/ide/cursor.d.ts +0 -13
- package/dist/formatters/ide/cursor.d.ts.map +0 -1
- package/dist/formatters/ide/cursor.js +0 -125
- package/dist/formatters/ide/cursor.js.map +0 -1
- package/dist/formatters/ide/index.d.ts +0 -62
- package/dist/formatters/ide/index.d.ts.map +0 -1
- package/dist/formatters/ide/index.js +0 -184
- package/dist/formatters/ide/index.js.map +0 -1
- package/dist/formatters/ide/windsurf.d.ts +0 -13
- package/dist/formatters/ide/windsurf.d.ts.map +0 -1
- package/dist/formatters/ide/windsurf.js +0 -117
- package/dist/formatters/ide/windsurf.js.map +0 -1
- package/dist/formatters/index.d.ts +0 -11
- package/dist/formatters/index.d.ts.map +0 -1
- package/dist/formatters/index.js +0 -54
- package/dist/formatters/index.js.map +0 -1
- package/dist/formatters/vscode-diagnostic.d.ts +0 -103
- package/dist/formatters/vscode-diagnostic.d.ts.map +0 -1
- package/dist/formatters/vscode-diagnostic.js +0 -151
- package/dist/formatters/vscode-diagnostic.js.map +0 -1
- package/dist/layer1/comments.d.ts +0 -11
- package/dist/layer1/comments.d.ts.map +0 -1
- package/dist/layer1/comments.js +0 -203
- package/dist/layer1/comments.js.map +0 -1
- package/dist/layer1/config-audit.d.ts +0 -11
- package/dist/layer1/config-audit.d.ts.map +0 -1
- package/dist/layer1/config-audit.js +0 -311
- package/dist/layer1/config-audit.js.map +0 -1
- package/dist/layer1/config-mcp-audit.d.ts +0 -23
- package/dist/layer1/config-mcp-audit.d.ts.map +0 -1
- package/dist/layer1/config-mcp-audit.js +0 -239
- package/dist/layer1/config-mcp-audit.js.map +0 -1
- package/dist/layer1/entropy.d.ts +0 -11
- package/dist/layer1/entropy.d.ts.map +0 -1
- package/dist/layer1/entropy.js +0 -741
- package/dist/layer1/entropy.js.map +0 -1
- package/dist/layer1/file-flags.d.ts +0 -10
- package/dist/layer1/file-flags.d.ts.map +0 -1
- package/dist/layer1/file-flags.js +0 -119
- package/dist/layer1/file-flags.js.map +0 -1
- package/dist/layer1/index.d.ts +0 -38
- package/dist/layer1/index.d.ts.map +0 -1
- package/dist/layer1/index.js +0 -170
- package/dist/layer1/index.js.map +0 -1
- package/dist/layer1/patterns.d.ts +0 -11
- package/dist/layer1/patterns.d.ts.map +0 -1
- package/dist/layer1/patterns.js +0 -512
- package/dist/layer1/patterns.js.map +0 -1
- package/dist/layer1/urls.d.ts +0 -11
- package/dist/layer1/urls.d.ts.map +0 -1
- package/dist/layer1/urls.js +0 -444
- package/dist/layer1/urls.js.map +0 -1
- package/dist/layer1/weak-crypto.d.ts +0 -10
- package/dist/layer1/weak-crypto.d.ts.map +0 -1
- package/dist/layer1/weak-crypto.js +0 -428
- package/dist/layer1/weak-crypto.js.map +0 -1
- package/dist/layer2/ai-agent-tools.d.ts +0 -22
- package/dist/layer2/ai-agent-tools.d.ts.map +0 -1
- package/dist/layer2/ai-agent-tools.js +0 -1490
- package/dist/layer2/ai-agent-tools.js.map +0 -1
- package/dist/layer2/ai-endpoint-protection.d.ts +0 -38
- package/dist/layer2/ai-endpoint-protection.d.ts.map +0 -1
- package/dist/layer2/ai-endpoint-protection.js +0 -346
- package/dist/layer2/ai-endpoint-protection.js.map +0 -1
- package/dist/layer2/ai-execution-sinks.d.ts +0 -21
- package/dist/layer2/ai-execution-sinks.d.ts.map +0 -1
- package/dist/layer2/ai-execution-sinks.js +0 -1155
- package/dist/layer2/ai-execution-sinks.js.map +0 -1
- package/dist/layer2/ai-fingerprinting.d.ts +0 -10
- package/dist/layer2/ai-fingerprinting.d.ts.map +0 -1
- package/dist/layer2/ai-fingerprinting.js +0 -650
- package/dist/layer2/ai-fingerprinting.js.map +0 -1
- package/dist/layer2/ai-mcp-security.d.ts +0 -20
- package/dist/layer2/ai-mcp-security.d.ts.map +0 -1
- package/dist/layer2/ai-mcp-security.js +0 -877
- package/dist/layer2/ai-mcp-security.js.map +0 -1
- package/dist/layer2/ai-package-hallucination.d.ts +0 -22
- package/dist/layer2/ai-package-hallucination.d.ts.map +0 -1
- package/dist/layer2/ai-package-hallucination.js +0 -828
- package/dist/layer2/ai-package-hallucination.js.map +0 -1
- package/dist/layer2/ai-prompt-hygiene.d.ts +0 -22
- package/dist/layer2/ai-prompt-hygiene.d.ts.map +0 -1
- package/dist/layer2/ai-prompt-hygiene.js +0 -1156
- package/dist/layer2/ai-prompt-hygiene.js.map +0 -1
- package/dist/layer2/ai-rag-safety.d.ts +0 -24
- package/dist/layer2/ai-rag-safety.d.ts.map +0 -1
- package/dist/layer2/ai-rag-safety.js +0 -910
- package/dist/layer2/ai-rag-safety.js.map +0 -1
- package/dist/layer2/ai-schema-validation.d.ts +0 -28
- package/dist/layer2/ai-schema-validation.d.ts.map +0 -1
- package/dist/layer2/ai-schema-validation.js +0 -375
- package/dist/layer2/ai-schema-validation.js.map +0 -1
- package/dist/layer2/auth-antipatterns.d.ts +0 -22
- package/dist/layer2/auth-antipatterns.d.ts.map +0 -1
- package/dist/layer2/auth-antipatterns.js +0 -522
- package/dist/layer2/auth-antipatterns.js.map +0 -1
- package/dist/layer2/byok-patterns.d.ts +0 -15
- package/dist/layer2/byok-patterns.d.ts.map +0 -1
- package/dist/layer2/byok-patterns.js +0 -302
- package/dist/layer2/byok-patterns.js.map +0 -1
- package/dist/layer2/dangerous-functions/child-process.d.ts +0 -16
- package/dist/layer2/dangerous-functions/child-process.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/child-process.js +0 -74
- package/dist/layer2/dangerous-functions/child-process.js.map +0 -1
- package/dist/layer2/dangerous-functions/dom-xss.d.ts +0 -34
- package/dist/layer2/dangerous-functions/dom-xss.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/dom-xss.js +0 -230
- package/dist/layer2/dangerous-functions/dom-xss.js.map +0 -1
- package/dist/layer2/dangerous-functions/index.d.ts +0 -16
- package/dist/layer2/dangerous-functions/index.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/index.js +0 -1152
- package/dist/layer2/dangerous-functions/index.js.map +0 -1
- package/dist/layer2/dangerous-functions/json-parse.d.ts +0 -31
- package/dist/layer2/dangerous-functions/json-parse.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/json-parse.js +0 -319
- package/dist/layer2/dangerous-functions/json-parse.js.map +0 -1
- package/dist/layer2/dangerous-functions/math-random.d.ts +0 -111
- package/dist/layer2/dangerous-functions/math-random.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/math-random.js +0 -684
- package/dist/layer2/dangerous-functions/math-random.js.map +0 -1
- package/dist/layer2/dangerous-functions/patterns.d.ts +0 -21
- package/dist/layer2/dangerous-functions/patterns.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/patterns.js +0 -163
- package/dist/layer2/dangerous-functions/patterns.js.map +0 -1
- package/dist/layer2/dangerous-functions/request-validation.d.ts +0 -13
- package/dist/layer2/dangerous-functions/request-validation.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/request-validation.js +0 -119
- package/dist/layer2/dangerous-functions/request-validation.js.map +0 -1
- package/dist/layer2/dangerous-functions/utils/control-flow.d.ts +0 -24
- package/dist/layer2/dangerous-functions/utils/control-flow.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/utils/control-flow.js +0 -70
- package/dist/layer2/dangerous-functions/utils/control-flow.js.map +0 -1
- package/dist/layer2/dangerous-functions/utils/helpers.d.ts +0 -31
- package/dist/layer2/dangerous-functions/utils/helpers.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/utils/helpers.js +0 -147
- package/dist/layer2/dangerous-functions/utils/helpers.js.map +0 -1
- package/dist/layer2/dangerous-functions/utils/index.d.ts +0 -9
- package/dist/layer2/dangerous-functions/utils/index.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/utils/index.js +0 -23
- package/dist/layer2/dangerous-functions/utils/index.js.map +0 -1
- package/dist/layer2/dangerous-functions/utils/schema-validation.d.ts +0 -22
- package/dist/layer2/dangerous-functions/utils/schema-validation.d.ts.map +0 -1
- package/dist/layer2/dangerous-functions/utils/schema-validation.js +0 -102
- package/dist/layer2/dangerous-functions/utils/schema-validation.js.map +0 -1
- package/dist/layer2/data-exposure.d.ts +0 -19
- package/dist/layer2/data-exposure.d.ts.map +0 -1
- package/dist/layer2/data-exposure.js +0 -255
- package/dist/layer2/data-exposure.js.map +0 -1
- package/dist/layer2/framework-checks.d.ts +0 -10
- package/dist/layer2/framework-checks.d.ts.map +0 -1
- package/dist/layer2/framework-checks.js +0 -384
- package/dist/layer2/framework-checks.js.map +0 -1
- package/dist/layer2/index.d.ts +0 -74
- package/dist/layer2/index.d.ts.map +0 -1
- package/dist/layer2/index.js +0 -544
- package/dist/layer2/index.js.map +0 -1
- package/dist/layer2/log-injection.d.ts +0 -18
- package/dist/layer2/log-injection.d.ts.map +0 -1
- package/dist/layer2/log-injection.js +0 -214
- package/dist/layer2/log-injection.js.map +0 -1
- package/dist/layer2/logic-gates.d.ts +0 -10
- package/dist/layer2/logic-gates.d.ts.map +0 -1
- package/dist/layer2/logic-gates.js +0 -220
- package/dist/layer2/logic-gates.js.map +0 -1
- package/dist/layer2/model-supply-chain.d.ts +0 -23
- package/dist/layer2/model-supply-chain.d.ts.map +0 -1
- package/dist/layer2/model-supply-chain.js +0 -444
- package/dist/layer2/model-supply-chain.js.map +0 -1
- package/dist/layer2/risky-imports.d.ts +0 -10
- package/dist/layer2/risky-imports.d.ts.map +0 -1
- package/dist/layer2/risky-imports.js +0 -165
- package/dist/layer2/risky-imports.js.map +0 -1
- package/dist/layer2/security-headers.d.ts +0 -18
- package/dist/layer2/security-headers.d.ts.map +0 -1
- package/dist/layer2/security-headers.js +0 -187
- package/dist/layer2/security-headers.js.map +0 -1
- package/dist/layer2/ssrf-detection.d.ts +0 -18
- package/dist/layer2/ssrf-detection.d.ts.map +0 -1
- package/dist/layer2/ssrf-detection.js +0 -252
- package/dist/layer2/ssrf-detection.js.map +0 -1
- package/dist/layer2/variables.d.ts +0 -11
- package/dist/layer2/variables.d.ts.map +0 -1
- package/dist/layer2/variables.js +0 -156
- package/dist/layer2/variables.js.map +0 -1
- package/dist/layer2/xxe-detection.d.ts +0 -18
- package/dist/layer2/xxe-detection.d.ts.map +0 -1
- package/dist/layer2/xxe-detection.js +0 -242
- package/dist/layer2/xxe-detection.js.map +0 -1
- package/dist/layer3/anthropic/auto-dismiss.d.ts +0 -24
- package/dist/layer3/anthropic/auto-dismiss.d.ts.map +0 -1
- package/dist/layer3/anthropic/auto-dismiss.js +0 -199
- package/dist/layer3/anthropic/auto-dismiss.js.map +0 -1
- package/dist/layer3/anthropic/clients.d.ts +0 -44
- package/dist/layer3/anthropic/clients.d.ts.map +0 -1
- package/dist/layer3/anthropic/clients.js +0 -81
- package/dist/layer3/anthropic/clients.js.map +0 -1
- package/dist/layer3/anthropic/index.d.ts +0 -41
- package/dist/layer3/anthropic/index.d.ts.map +0 -1
- package/dist/layer3/anthropic/index.js +0 -141
- package/dist/layer3/anthropic/index.js.map +0 -1
- package/dist/layer3/anthropic/prompts/index.d.ts +0 -8
- package/dist/layer3/anthropic/prompts/index.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/index.js +0 -16
- package/dist/layer3/anthropic/prompts/index.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/ai-patterns.d.ts +0 -19
- package/dist/layer3/anthropic/prompts/modules/ai-patterns.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/ai-patterns.js +0 -156
- package/dist/layer3/anthropic/prompts/modules/ai-patterns.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/auth-access.d.ts +0 -9
- package/dist/layer3/anthropic/prompts/modules/auth-access.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/auth-access.js +0 -25
- package/dist/layer3/anthropic/prompts/modules/auth-access.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/common.d.ts +0 -11
- package/dist/layer3/anthropic/prompts/modules/common.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/common.js +0 -152
- package/dist/layer3/anthropic/prompts/modules/common.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/index.d.ts +0 -54
- package/dist/layer3/anthropic/prompts/modules/index.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/index.js +0 -185
- package/dist/layer3/anthropic/prompts/modules/index.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/owasp-classic.d.ts +0 -8
- package/dist/layer3/anthropic/prompts/modules/owasp-classic.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/owasp-classic.js +0 -84
- package/dist/layer3/anthropic/prompts/modules/owasp-classic.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/secrets-crypto.d.ts +0 -8
- package/dist/layer3/anthropic/prompts/modules/secrets-crypto.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/secrets-crypto.js +0 -68
- package/dist/layer3/anthropic/prompts/modules/secrets-crypto.js.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/xss-prompt.d.ts +0 -8
- package/dist/layer3/anthropic/prompts/modules/xss-prompt.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/modules/xss-prompt.js +0 -22
- package/dist/layer3/anthropic/prompts/modules/xss-prompt.js.map +0 -1
- package/dist/layer3/anthropic/prompts/semantic-analysis.d.ts +0 -15
- package/dist/layer3/anthropic/prompts/semantic-analysis.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/semantic-analysis.js +0 -169
- package/dist/layer3/anthropic/prompts/semantic-analysis.js.map +0 -1
- package/dist/layer3/anthropic/prompts/validation.d.ts +0 -18
- package/dist/layer3/anthropic/prompts/validation.d.ts.map +0 -1
- package/dist/layer3/anthropic/prompts/validation.js +0 -25
- package/dist/layer3/anthropic/prompts/validation.js.map +0 -1
- package/dist/layer3/anthropic/providers/anthropic.d.ts +0 -21
- package/dist/layer3/anthropic/providers/anthropic.d.ts.map +0 -1
- package/dist/layer3/anthropic/providers/anthropic.js +0 -269
- package/dist/layer3/anthropic/providers/anthropic.js.map +0 -1
- package/dist/layer3/anthropic/providers/index.d.ts +0 -8
- package/dist/layer3/anthropic/providers/index.d.ts.map +0 -1
- package/dist/layer3/anthropic/providers/index.js +0 -15
- package/dist/layer3/anthropic/providers/index.js.map +0 -1
- package/dist/layer3/anthropic/providers/openai.d.ts +0 -18
- package/dist/layer3/anthropic/providers/openai.d.ts.map +0 -1
- package/dist/layer3/anthropic/providers/openai.js +0 -343
- package/dist/layer3/anthropic/providers/openai.js.map +0 -1
- package/dist/layer3/anthropic/request-builder.d.ts +0 -27
- package/dist/layer3/anthropic/request-builder.d.ts.map +0 -1
- package/dist/layer3/anthropic/request-builder.js +0 -150
- package/dist/layer3/anthropic/request-builder.js.map +0 -1
- package/dist/layer3/anthropic/types.d.ts +0 -88
- package/dist/layer3/anthropic/types.d.ts.map +0 -1
- package/dist/layer3/anthropic/types.js +0 -38
- package/dist/layer3/anthropic/types.js.map +0 -1
- package/dist/layer3/anthropic/utils/context-extractor.d.ts +0 -55
- package/dist/layer3/anthropic/utils/context-extractor.d.ts.map +0 -1
- package/dist/layer3/anthropic/utils/context-extractor.js +0 -161
- package/dist/layer3/anthropic/utils/context-extractor.js.map +0 -1
- package/dist/layer3/anthropic/utils/index.d.ts +0 -11
- package/dist/layer3/anthropic/utils/index.d.ts.map +0 -1
- package/dist/layer3/anthropic/utils/index.js +0 -27
- package/dist/layer3/anthropic/utils/index.js.map +0 -1
- package/dist/layer3/anthropic/utils/path-helpers.d.ts +0 -21
- package/dist/layer3/anthropic/utils/path-helpers.d.ts.map +0 -1
- package/dist/layer3/anthropic/utils/path-helpers.js +0 -69
- package/dist/layer3/anthropic/utils/path-helpers.js.map +0 -1
- package/dist/layer3/anthropic/utils/response-parser.d.ts +0 -40
- package/dist/layer3/anthropic/utils/response-parser.d.ts.map +0 -1
- package/dist/layer3/anthropic/utils/response-parser.js +0 -285
- package/dist/layer3/anthropic/utils/response-parser.js.map +0 -1
- package/dist/layer3/anthropic/utils/retry.d.ts +0 -15
- package/dist/layer3/anthropic/utils/retry.d.ts.map +0 -1
- package/dist/layer3/anthropic/utils/retry.js +0 -62
- package/dist/layer3/anthropic/utils/retry.js.map +0 -1
- package/dist/layer3/index.d.ts +0 -27
- package/dist/layer3/index.d.ts.map +0 -1
- package/dist/layer3/index.js +0 -150
- package/dist/layer3/index.js.map +0 -1
- package/dist/layer3/osv-check.d.ts +0 -75
- package/dist/layer3/osv-check.d.ts.map +0 -1
- package/dist/layer3/osv-check.js +0 -308
- package/dist/layer3/osv-check.js.map +0 -1
- package/dist/layer3/package-check.d.ts +0 -63
- package/dist/layer3/package-check.d.ts.map +0 -1
- package/dist/layer3/package-check.js +0 -508
- package/dist/layer3/package-check.js.map +0 -1
- package/dist/model/cross-file-taint.d.ts +0 -40
- package/dist/model/cross-file-taint.d.ts.map +0 -1
- package/dist/model/cross-file-taint.js +0 -290
- package/dist/model/cross-file-taint.js.map +0 -1
- package/dist/model/function-classifier.d.ts +0 -32
- package/dist/model/function-classifier.d.ts.map +0 -1
- package/dist/model/function-classifier.js +0 -143
- package/dist/model/function-classifier.js.map +0 -1
- package/dist/model/sanitiser-detection.d.ts +0 -27
- package/dist/model/sanitiser-detection.d.ts.map +0 -1
- package/dist/model/sanitiser-detection.js +0 -224
- package/dist/model/sanitiser-detection.js.map +0 -1
- package/dist/model/sink-matcher.d.ts +0 -17
- package/dist/model/sink-matcher.d.ts.map +0 -1
- package/dist/model/sink-matcher.js +0 -141
- package/dist/model/sink-matcher.js.map +0 -1
- package/dist/model/sink-patterns.d.ts +0 -19
- package/dist/model/sink-patterns.d.ts.map +0 -1
- package/dist/model/sink-patterns.js +0 -88
- package/dist/model/sink-patterns.js.map +0 -1
- package/dist/model/source-discovery.d.ts +0 -15
- package/dist/model/source-discovery.d.ts.map +0 -1
- package/dist/model/source-discovery.js +0 -170
- package/dist/model/source-discovery.js.map +0 -1
- package/dist/model/taint-tracker.d.ts +0 -21
- package/dist/model/taint-tracker.d.ts.map +0 -1
- package/dist/model/taint-tracker.js +0 -281
- package/dist/model/taint-tracker.js.map +0 -1
- package/dist/modes/incremental.d.ts +0 -66
- package/dist/modes/incremental.d.ts.map +0 -1
- package/dist/modes/incremental.js +0 -200
- package/dist/modes/incremental.js.map +0 -1
- package/dist/rules/framework-fixes.d.ts +0 -48
- package/dist/rules/framework-fixes.d.ts.map +0 -1
- package/dist/rules/framework-fixes.js +0 -439
- package/dist/rules/framework-fixes.js.map +0 -1
- package/dist/rules/index.d.ts +0 -8
- package/dist/rules/index.d.ts.map +0 -1
- package/dist/rules/index.js +0 -18
- package/dist/rules/index.js.map +0 -1
- package/dist/rules/metadata.d.ts +0 -43
- package/dist/rules/metadata.d.ts.map +0 -1
- package/dist/rules/metadata.js +0 -800
- package/dist/rules/metadata.js.map +0 -1
- package/dist/score/auto-dismiss.d.ts +0 -28
- package/dist/score/auto-dismiss.d.ts.map +0 -1
- package/dist/score/auto-dismiss.js +0 -200
- package/dist/score/auto-dismiss.js.map +0 -1
- package/dist/suppression/config-loader.d.ts +0 -74
- package/dist/suppression/config-loader.d.ts.map +0 -1
- package/dist/suppression/config-loader.js +0 -424
- package/dist/suppression/config-loader.js.map +0 -1
- package/dist/suppression/hash.d.ts +0 -48
- package/dist/suppression/hash.d.ts.map +0 -1
- package/dist/suppression/hash.js +0 -88
- package/dist/suppression/hash.js.map +0 -1
- package/dist/suppression/index.d.ts +0 -11
- package/dist/suppression/index.d.ts.map +0 -1
- package/dist/suppression/index.js +0 -39
- package/dist/suppression/index.js.map +0 -1
- package/dist/suppression/inline-parser.d.ts +0 -39
- package/dist/suppression/inline-parser.d.ts.map +0 -1
- package/dist/suppression/inline-parser.js +0 -218
- package/dist/suppression/inline-parser.js.map +0 -1
- package/dist/suppression/manager.d.ts +0 -94
- package/dist/suppression/manager.d.ts.map +0 -1
- package/dist/suppression/manager.js +0 -292
- package/dist/suppression/manager.js.map +0 -1
- package/dist/suppression/types.d.ts +0 -151
- package/dist/suppression/types.d.ts.map +0 -1
- package/dist/suppression/types.js +0 -28
- package/dist/suppression/types.js.map +0 -1
- package/dist/types.d.ts +0 -331
- package/dist/types.d.ts.map +0 -1
- package/dist/types.js +0 -124
- package/dist/types.js.map +0 -1
- package/dist/utils/auth-helper-detector.d.ts +0 -56
- package/dist/utils/auth-helper-detector.d.ts.map +0 -1
- package/dist/utils/auth-helper-detector.js +0 -360
- package/dist/utils/auth-helper-detector.js.map +0 -1
- package/dist/utils/code-analysis.d.ts +0 -39
- package/dist/utils/code-analysis.d.ts.map +0 -1
- package/dist/utils/code-analysis.js +0 -159
- package/dist/utils/code-analysis.js.map +0 -1
- package/dist/utils/comment-analyzer.d.ts +0 -38
- package/dist/utils/comment-analyzer.d.ts.map +0 -1
- package/dist/utils/comment-analyzer.js +0 -218
- package/dist/utils/comment-analyzer.js.map +0 -1
- package/dist/utils/context-helpers.d.ts +0 -219
- package/dist/utils/context-helpers.d.ts.map +0 -1
- package/dist/utils/context-helpers.js +0 -886
- package/dist/utils/context-helpers.js.map +0 -1
- package/dist/utils/diff-detector.d.ts +0 -53
- package/dist/utils/diff-detector.d.ts.map +0 -1
- package/dist/utils/diff-detector.js +0 -104
- package/dist/utils/diff-detector.js.map +0 -1
- package/dist/utils/diff-parser.d.ts +0 -80
- package/dist/utils/diff-parser.d.ts.map +0 -1
- package/dist/utils/diff-parser.js +0 -202
- package/dist/utils/diff-parser.js.map +0 -1
- package/dist/utils/environment-context.d.ts +0 -76
- package/dist/utils/environment-context.d.ts.map +0 -1
- package/dist/utils/environment-context.js +0 -271
- package/dist/utils/environment-context.js.map +0 -1
- package/dist/utils/imported-auth-detector.d.ts +0 -37
- package/dist/utils/imported-auth-detector.d.ts.map +0 -1
- package/dist/utils/imported-auth-detector.js +0 -251
- package/dist/utils/imported-auth-detector.js.map +0 -1
- package/dist/utils/intent-detector.d.ts +0 -66
- package/dist/utils/intent-detector.d.ts.map +0 -1
- package/dist/utils/intent-detector.js +0 -282
- package/dist/utils/intent-detector.js.map +0 -1
- package/dist/utils/middleware-detector.d.ts +0 -55
- package/dist/utils/middleware-detector.d.ts.map +0 -1
- package/dist/utils/middleware-detector.js +0 -260
- package/dist/utils/middleware-detector.js.map +0 -1
- package/dist/utils/oauth-flow-detector.d.ts +0 -41
- package/dist/utils/oauth-flow-detector.d.ts.map +0 -1
- package/dist/utils/oauth-flow-detector.js +0 -202
- package/dist/utils/oauth-flow-detector.js.map +0 -1
- package/dist/utils/parsed-file.d.ts +0 -51
- package/dist/utils/parsed-file.d.ts.map +0 -1
- package/dist/utils/parsed-file.js +0 -95
- package/dist/utils/parsed-file.js.map +0 -1
- package/dist/utils/path-exclusions.d.ts +0 -55
- package/dist/utils/path-exclusions.d.ts.map +0 -1
- package/dist/utils/path-exclusions.js +0 -224
- package/dist/utils/path-exclusions.js.map +0 -1
- package/dist/utils/project-context-builder.d.ts +0 -119
- package/dist/utils/project-context-builder.d.ts.map +0 -1
- package/dist/utils/project-context-builder.js +0 -534
- package/dist/utils/project-context-builder.js.map +0 -1
- package/dist/utils/registry-clients.d.ts +0 -93
- package/dist/utils/registry-clients.d.ts.map +0 -1
- package/dist/utils/registry-clients.js +0 -273
- package/dist/utils/registry-clients.js.map +0 -1
- package/dist/utils/route-hierarchy.d.ts +0 -50
- package/dist/utils/route-hierarchy.d.ts.map +0 -1
- package/dist/utils/route-hierarchy.js +0 -226
- package/dist/utils/route-hierarchy.js.map +0 -1
- package/dist/utils/schema-semantics.d.ts +0 -45
- package/dist/utils/schema-semantics.d.ts.map +0 -1
- package/dist/utils/schema-semantics.js +0 -193
- package/dist/utils/schema-semantics.js.map +0 -1
- package/dist/utils/trpc-analyzer.d.ts +0 -78
- package/dist/utils/trpc-analyzer.d.ts.map +0 -1
- package/dist/utils/trpc-analyzer.js +0 -297
- package/dist/utils/trpc-analyzer.js.map +0 -1
- package/src/__tests__/context-engine/cross-file-taint.test.ts +0 -284
- package/src/__tests__/context-engine/function-classifier.test.ts +0 -146
- package/src/__tests__/context-engine/integration.test.ts +0 -320
- package/src/__tests__/context-engine/sanitiser-detection.test.ts +0 -187
- package/src/__tests__/context-engine/sink-matcher.test.ts +0 -251
- package/src/__tests__/context-engine/source-discovery.test.ts +0 -186
- package/src/__tests__/context-engine/taint-tracker.test.ts +0 -182
- package/src/__tests__/snapshots/__snapshots__/anthropic-validation-refactor.test.ts.snap +0 -750
- package/src/__tests__/snapshots/__snapshots__/dangerous-functions-refactor.test.ts.snap +0 -555
- package/src/__tests__/snapshots/anthropic-validation-refactor.test.ts +0 -321
- package/src/__tests__/snapshots/dangerous-functions-refactor.test.ts +0 -439
- package/src/detect/ai-code/agent-tools.ts +0 -1662
- package/src/detect/ai-code/byok-patterns.ts +0 -354
- package/src/detect/ai-code/endpoint-protection.ts +0 -406
- package/src/detect/ai-code/execution-sinks.ts +0 -1310
- package/src/detect/ai-code/fingerprinting.ts +0 -774
- package/src/detect/ai-code/mcp-security.ts +0 -937
- package/src/detect/ai-code/model-supply-chain.ts +0 -535
- package/src/detect/ai-code/package-hallucination.ts +0 -955
- package/src/detect/ai-code/prompt-hygiene.ts +0 -1314
- package/src/detect/ai-code/rag-safety.ts +0 -977
- package/src/detect/ai-code/schema-validation.ts +0 -427
- package/src/detect/secrets/patterns.ts +0 -561
- package/src/detect/secrets/weak-crypto.ts +0 -485
- package/src/detect/structural/__tests__/math-random-enhanced.test.ts +0 -405
- package/src/detect/structural/auth-patterns.ts +0 -621
- package/src/detect/structural/dangerous-functions/child-process.ts +0 -98
- package/src/detect/structural/dangerous-functions/dom-xss.ts +0 -292
- package/src/detect/structural/dangerous-functions/index.ts +0 -1556
- package/src/detect/structural/dangerous-functions/json-parse.ts +0 -393
- package/src/detect/structural/dangerous-functions/math-random.ts +0 -789
- package/src/detect/structural/dangerous-functions/patterns.ts +0 -176
- package/src/detect/structural/dangerous-functions/request-validation.ts +0 -153
- package/src/detect/structural/dangerous-functions/utils/control-flow.ts +0 -35
- package/src/detect/structural/dangerous-functions/utils/helpers.ts +0 -170
- package/src/detect/structural/dangerous-functions/utils/index.ts +0 -25
- package/src/detect/structural/dangerous-functions/utils/schema-validation.ts +0 -106
- package/src/detect/structural/data-exposure.ts +0 -302
- package/src/detect/structural/framework-checks.ts +0 -439
- package/src/detect/structural/log-injection.ts +0 -254
- package/src/detect/structural/logic-gates.ts +0 -256
- package/src/detect/structural/risky-imports.ts +0 -197
- package/src/detect/structural/security-headers.ts +0 -231
- package/src/detect/structural/ssrf-detection.ts +0 -300
- package/src/detect/structural/variables.ts +0 -177
- package/src/detect/structural/xxe-detection.ts +0 -295
- package/src/model/cross-file-taint.ts +0 -374
- package/src/model/function-classifier.ts +0 -184
- package/src/model/sanitiser-detection.ts +0 -268
- package/src/model/sink-matcher.ts +0 -178
- package/src/model/sink-patterns.ts +0 -109
- package/src/model/source-discovery.ts +0 -209
- package/src/model/taint-tracker.ts +0 -333
- package/src/score/auto-dismiss.ts +0 -224
|
@@ -796,6 +796,23 @@ exports.RULE_REGISTRY = {
|
|
|
796
796
|
'https://cwe.mitre.org/data/definitions/77.html',
|
|
797
797
|
],
|
|
798
798
|
},
|
|
799
|
+
ai_rules_file_backdoor: {
|
|
800
|
+
name: 'Rules File Backdoor',
|
|
801
|
+
whyItMatters: 'AI coding assistant config files (.cursorrules, CLAUDE.md, copilot-instructions.md) can be weaponized with invisible Unicode characters or stealth instructions that manipulate AI behavior while appearing benign to human reviewers. This "Rules File Backdoor" attack can inject malicious code, disable security controls, or exfiltrate data through AI assistants.',
|
|
802
|
+
fixSteps: [
|
|
803
|
+
'Inspect the file with a hex editor or Unicode analyzer tool to reveal hidden characters',
|
|
804
|
+
'Remove all zero-width, bidirectional override, and tag block Unicode characters',
|
|
805
|
+
'Review all instructions for stealth behavior manipulation (security weakening, self-concealment)',
|
|
806
|
+
'Use git diff --word-diff to detect invisible changes in pull requests',
|
|
807
|
+
'Consider adding a pre-commit hook to reject invisible Unicode in AI config files',
|
|
808
|
+
],
|
|
809
|
+
evidence: 'Detected invisible Unicode characters or stealth manipulation instructions in AI rules file',
|
|
810
|
+
references: [
|
|
811
|
+
'https://www.pillar.security/blog/new-vulnerability-in-github-copilot-and-cursor',
|
|
812
|
+
'https://cwe.mitre.org/data/definitions/451.html',
|
|
813
|
+
'https://trojansource.codes/',
|
|
814
|
+
],
|
|
815
|
+
},
|
|
799
816
|
};
|
|
800
817
|
/**
|
|
801
818
|
* Get metadata for a vulnerability category
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../src/shared/rules/metadata.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAi4BH,0CAEC;AAKD,4CAEC;AAKD,kCAEC;AAh4BD;;GAEG;AACU,QAAA,aAAa,GAAgD;IACxE,6EAA6E;IAC7E,wBAAwB;IACxB,6EAA6E;IAC7E,gBAAgB,EAAE;QAChB,IAAI,EAAE,kBAAkB;QACxB,YAAY,EACV,4KAA4K;QAC9K,QAAQ,EAAE;YACR,gDAAgD;YAChD,wDAAwD;YACxD,oEAAoE;YACpE,mEAAmE;YACnE,6DAA6D;SAC9D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,4EAA4E;YAC5E,iDAAiD;SAClD;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,qKAAqK;QACvK,QAAQ,EAAE;YACR,+DAA+D;YAC/D,qDAAqD;YACrD,iGAAiG;YACjG,kDAAkD;SACnD;QACD,QAAQ,EAAE,wEAAwE;QAClF,UAAU,EAAE;YACV,4EAA4E;YAC5E,iDAAiD;SAClD;KACF;IAED,kBAAkB,EAAE;QAClB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,0JAA0J;QAC5J,QAAQ,EAAE;YACR,6DAA6D;YAC7D,+EAA+E;YAC/E,kEAAkE;YAClE,kFAAkF;SACnF;QACD,QAAQ,EAAE,2EAA2E;QACrF,UAAU,EAAE;YACV,kKAAkK;SACnK;KACF;IAED,6EAA6E;IAC7E,4BAA4B;IAC5B,6EAA6E;IAC7E,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,6JAA6J;QAC/J,QAAQ,EAAE;YACR,gFAAgF;YAChF,kDAAkD;YAClD,kDAAkD;YAClD,6DAA6D;SAC9D;QACD,QAAQ,EAAE,mDAAmD;QAC7D,UAAU,EAAE;YACV,uDAAuD;YACvD,gDAAgD;SACjD;KACF;IAED,GAAG,EAAE;QACH,IAAI,EAAE,4BAA4B;QAClC,YAAY,EACV,+IAA+I;QACjJ,QAAQ,EAAE;YACR,gDAAgD;YAChD,8DAA8D;YAC9D,4EAA4E;YAC5E,iDAAiD;SAClD;QACD,QAAQ,EAAE,uDAAuD;QACjE,UAAU,EAAE;YACV,8CAA8C;YAC9C,gDAAgD;SACjD;KACF;IAED,iBAAiB,EAAE;QACjB,IAAI,EAAE,mBAAmB;QACzB,YAAY,EACV,kLAAkL;QACpL,QAAQ,EAAE;YACR,qDAAqD;YACrD,mFAAmF;YACnF,yDAAyD;YACzD,wEAAwE;SACzE;QACD,QAAQ,EAAE,mDAAmD;QAC7D,UAAU,EAAE;YACV,2DAA2D;YAC3D,gDAAgD;SACjD;KACF;IAED,6EAA6E;IAC7E,iCAAiC;IACjC,6EAA6E;IAC7E,YAAY,EAAE;QACZ,IAAI,EAAE,wBAAwB;QAC9B,YAAY,EACV,mIAAmI;QACrI,QAAQ,EAAE;YACR,qDAAqD;YACrD,8DAA8D;YAC9D,+EAA+E;YAC/E,yFAAyF;SAC1F;QACD,QAAQ,EAAE,mDAAmD;QAC7D,UAAU,EAAE;YACV,6EAA6E;YAC7E,iDAAiD;SAClD;KACF;IAED,eAAe,EAAE;QACf,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,4JAA4J;QAC9J,QAAQ,EAAE;YACR,mDAAmD;YACnD,yDAAyD;YACzD,0EAA0E;YAC1E,sDAAsD;SACvD;QACD,QAAQ,EAAE,0DAA0D;QACpE,UAAU,EAAE;YACV,+HAA+H;YAC/H,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,gBAAgB;IAChB,6EAA6E;IAC7E,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,+IAA+I;QACjJ,QAAQ,EAAE;YACR,2DAA2D;YAC3D,8DAA8D;YAC9D,gEAAgE;YAChE,sEAAsE;SACvE;QACD,QAAQ,EAAE,oDAAoD;QAC9D,UAAU,EAAE;YACV,oKAAoK;YACpK,iDAAiD;SAClD;KACF;IAED,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,4IAA4I;QAC9I,QAAQ,EAAE;YACR,2DAA2D;YAC3D,6DAA6D;YAC7D,kEAAkE;YAClE,8DAA8D;SAC/D;QACD,QAAQ,EAAE,uEAAuE;QACjF,UAAU,EAAE;YACV,wJAAwJ;SACzJ;KACF;IAED,6EAA6E;IAC7E,iCAAiC;IACjC,6EAA6E;IAC7E,eAAe,EAAE;QACf,IAAI,EAAE,wBAAwB;QAC9B,YAAY,EACV,8JAA8J;QAChK,QAAQ,EAAE;YACR,yEAAyE;YACzE,6EAA6E;YAC7E,4DAA4D;YAC5D,qDAAqD;SACtD;QACD,QAAQ,EAAE,8DAA8D;QACxE,UAAU,EAAE;YACV,wJAAwJ;YACxJ,gDAAgD;SACjD;KACF;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,6JAA6J;QAC/J,QAAQ,EAAE;YACR,uEAAuE;YACvE,mDAAmD;YACnD,wFAAwF;YACxF,+CAA+C;SAChD;QACD,QAAQ,EAAE,oDAAoD;QAC9D,UAAU,EAAE;YACV,mEAAmE;YACnE,iDAAiD;SAClD;KACF;IAED,cAAc,EAAE;QACd,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,4IAA4I;QAC9I,QAAQ,EAAE;YACR,4DAA4D;YAC5D,8CAA8C;YAC9C,4DAA4D;YAC5D,gDAAgD;SACjD;QACD,QAAQ,EAAE,4DAA4D;QACtE,UAAU,EAAE;YACV,gFAAgF;YAChF,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,iCAAiC;IACjC,6EAA6E;IAC7E,kBAAkB,EAAE;QAClB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EACV,6IAA6I;QAC/I,QAAQ,EAAE;YACR,gEAAgE;YAChE,gGAAgG;YAChG,0EAA0E;YAC1E,sEAAsE;SACvE;QACD,QAAQ,EAAE,qEAAqE;QAC/E,UAAU,EAAE;YACV,wDAAwD;YACxD,gDAAgD;SACjD;KACF;IAED,WAAW,EAAE;QACX,IAAI,EAAE,mBAAmB;QACzB,YAAY,EACV,kKAAkK;QACpK,QAAQ,EAAE;YACR,kEAAkE;YAClE,wFAAwF;YACxF,kDAAkD;YAClD,wDAAwD;SACzD;QACD,QAAQ,EAAE,+DAA+D;QACzE,UAAU,EAAE;YACV,sIAAsI;YACtI,iDAAiD;SAClD;KACF;IAED,cAAc,EAAE;QACd,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,+HAA+H;QACjI,QAAQ,EAAE;YACR,iDAAiD;YACjD,4DAA4D;YAC5D,iDAAiD;YACjD,4DAA4D;SAC7D;QACD,QAAQ,EAAE,oDAAoD;QAC9D,UAAU,EAAE;YACV,wDAAwD;YACxD,gDAAgD;SACjD;KACF;IAED,6EAA6E;IAC7E,8BAA8B;IAC9B,6EAA6E;IAC7E,kBAAkB,EAAE;QAClB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EACV,mJAAmJ;QACrJ,QAAQ,EAAE;YACR,qEAAqE;YACrE,6EAA6E;YAC7E,8DAA8D;YAC9D,sEAAsE;SACvE;QACD,QAAQ,EAAE,uEAAuE;QACjF,UAAU,EAAE;YACV,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,yBAAyB;IACzB,6EAA6E;IAC7E,UAAU,EAAE;QACV,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,2JAA2J;QAC7J,QAAQ,EAAE;YACR,sDAAsD;YACtD,6CAA6C;YAC7C,sDAAsD;YACtD,yDAAyD;SAC1D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,wCAAwC;SACzC;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,4KAA4K;QAC9K,QAAQ,EAAE;YACR,qEAAqE;YACrE,0EAA0E;YAC1E,+DAA+D;YAC/D,kEAAkE;SACnE;QACD,QAAQ,EAAE,+DAA+D;QACzE,UAAU,EAAE;YACV,6EAA6E;YAC7E,yDAAyD;SAC1D;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,4HAA4H;QAC9H,QAAQ,EAAE;YACR,qDAAqD;YACrD,kEAAkE;YAClE,sDAAsD;YACtD,sDAAsD;SACvD;QACD,QAAQ,EAAE,yDAAyD;QACnE,UAAU,EAAE;YACV,6EAA6E;YAC7E,iEAAiE;SAClE;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,wBAAwB;QAC9B,YAAY,EACV,8JAA8J;QAChK,QAAQ,EAAE;YACR,0DAA0D;YAC1D,+DAA+D;YAC/D,iEAAiE;YACjE,6DAA6D;SAC9D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,6EAA6E;YAC7E,yDAAyD;SAC1D;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,yIAAyI;QAC3I,QAAQ,EAAE;YACR,uDAAuD;YACvD,iEAAiE;YACjE,gEAAgE;YAChE,0DAA0D;SAC3D;QACD,QAAQ,EAAE,4DAA4D;QACtE,UAAU,EAAE;YACV,6EAA6E;YAC7E,yEAAyE;SAC1E;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,kJAAkJ;QACpJ,QAAQ,EAAE;YACR,uDAAuD;YACvD,0CAA0C;YAC1C,iDAAiD;YACjD,iDAAiD;SAClD;QACD,QAAQ,EAAE,uDAAuD;QACjE,UAAU,EAAE;YACV,6EAA6E;YAC7E,0BAA0B;SAC3B;KACF;IAED,kBAAkB,EAAE;QAClB,IAAI,EAAE,8BAA8B;QACpC,YAAY,EACV,gLAAgL;QAClL,QAAQ,EAAE;YACR,wEAAwE;YACxE,yDAAyD;YACzD,mEAAmE;YACnE,qDAAqD;SACtD;QACD,QAAQ,EAAE,uDAAuD;QACjE,UAAU,EAAE;YACV,6EAA6E;YAC7E,iEAAiE;SAClE;KACF;IAED,6EAA6E;IAC7E,+BAA+B;IAC/B,6EAA6E;IAC7E,wBAAwB,EAAE;QACxB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,uNAAuN;QACzN,QAAQ,EAAE;YACR,wEAAwE;YACxE,8EAA8E;YAC9E,sDAAsD;YACtD,qEAAqE;SACtE;QACD,QAAQ,EAAE,6EAA6E;QACvF,UAAU,EAAE;YACV,kCAAkC;YAClC,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,yMAAyM;QAC3M,QAAQ,EAAE;YACR,yDAAyD;YACzD,yDAAyD;YACzD,sEAAsE;YACtE,2DAA2D;SAC5D;QACD,QAAQ,EAAE,uEAAuE;QACjF,UAAU,EAAE;YACV,6EAA6E;YAC7E,gEAAgE;SACjE;KACF;IAED,kBAAkB,EAAE;QAClB,IAAI,EAAE,iBAAiB;QACvB,YAAY,EACV,yJAAyJ;QAC3J,QAAQ,EAAE;YACR,qEAAqE;YACrE,iDAAiD;YACjD,4CAA4C;YAC5C,qEAAqE;SACtE;QACD,QAAQ,EAAE,kEAAkE;QAC5E,UAAU,EAAE;YACV,yEAAyE;YACzE,+FAA+F;SAChG;KACF;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EACV,2MAA2M;QAC7M,QAAQ,EAAE;YACR,+EAA+E;YAC/E,wDAAwD;YACxD,+DAA+D;YAC/D,wEAAwE;SACzE;QACD,QAAQ,EAAE,sEAAsE;QAChF,UAAU,EAAE;YACV,qDAAqD;YACrD,yDAAyD;YACzD,gFAAgF;SACjF;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,4JAA4J;QAC9J,QAAQ,EAAE;YACR,kEAAkE;YAClE,sEAAsE;YACtE,2DAA2D;YAC3D,kDAAkD;SACnD;QACD,QAAQ,EAAE,6DAA6D;QACvE,UAAU,EAAE;YACV,qDAAqD;YACrD,iDAAiD;SAClD;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,qKAAqK;QACvK,QAAQ,EAAE;YACR,+DAA+D;YAC/D,4DAA4D;YAC5D,6DAA6D;YAC7D,4DAA4D;SAC7D;QACD,QAAQ,EAAE,+DAA+D;QACzE,UAAU,EAAE;YACV,qDAAqD;YACrD,iDAAiD;YACjD,yDAAyD;SAC1D;KACF;IAED,6EAA6E;IAC7E,8BAA8B;IAC9B,6EAA6E;IAC7E,4BAA4B,EAAE;QAC5B,IAAI,EAAE,gCAAgC;QACtC,YAAY,EACV,8LAA8L;QAChM,QAAQ,EAAE;YACR,sDAAsD;YACtD,qDAAqD;YACrD,wEAAwE;YACxE,0DAA0D;SAC3D;QACD,QAAQ,EAAE,qEAAqE;QAC/E,UAAU,EAAE;YACV,qDAAqD;YACrD,yDAAyD;YACzD,kCAAkC;SACnC;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,iLAAiL;QACnL,QAAQ,EAAE;YACR,0EAA0E;YAC1E,oDAAoD;YACpD,wCAAwC;YACxC,6CAA6C;SAC9C;QACD,QAAQ,EAAE,gEAAgE;QAC1E,UAAU,EAAE;YACV,0DAA0D;YAC1D,iDAAiD;SAClD;KACF;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,6BAA6B;QACnC,YAAY,EACV,oKAAoK;QACtK,QAAQ,EAAE;YACR,2CAA2C;YAC3C,kDAAkD;YAClD,iDAAiD;YACjD,8DAA8D;SAC/D;QACD,QAAQ,EAAE,2DAA2D;QACrE,UAAU,EAAE;YACV,iDAAiD;YACjD,4EAA4E;SAC7E;KACF;IAED,yBAAyB,EAAE;QACzB,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,0KAA0K;QAC5K,QAAQ,EAAE;YACR,+CAA+C;YAC/C,0DAA0D;YAC1D,4CAA4C;YAC5C,6CAA6C;SAC9C;QACD,QAAQ,EAAE,8EAA8E;QACxF,UAAU,EAAE;YACV,qDAAqD;YACrD,iDAAiD;SAClD;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,gLAAgL;QAClL,QAAQ,EAAE;YACR,qDAAqD;YACrD,sDAAsD;YACtD,2CAA2C;YAC3C,0CAA0C;SAC3C;QACD,QAAQ,EAAE,2DAA2D;QACrE,UAAU,EAAE;YACV,yDAAyD;YACzD,6EAA6E;SAC9E;KACF;IAED,0BAA0B,EAAE;QAC1B,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,wLAAwL;QAC1L,QAAQ,EAAE;YACR,qDAAqD;YACrD,gEAAgE;YAChE,2DAA2D;YAC3D,kEAAkE;SACnE;QACD,QAAQ,EAAE,0EAA0E;QACpF,UAAU,EAAE;YACV,gEAAgE;YAChE,kCAAkC;SACnC;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,iCAAiC;QACvC,YAAY,EACV,yLAAyL;QAC3L,QAAQ,EAAE;YACR,mDAAmD;YACnD,oDAAoD;YACpD,0DAA0D;YAC1D,+CAA+C;SAChD;QACD,QAAQ,EAAE,6EAA6E;QACvF,UAAU,EAAE;YACV,yDAAyD;YACzD,6EAA6E;SAC9E;KACF;IAED,oBAAoB,EAAE;QACpB,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,qMAAqM;QACvM,QAAQ,EAAE;YACR,iFAAiF;YACjF,0EAA0E;YAC1E,oEAAoE;YACpE,uEAAuE;SACxE;QACD,QAAQ,EAAE,wEAAwE;QAClF,UAAU,EAAE;YACV,6CAA6C;YAC7C,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,oBAAoB,EAAE;QACpB,IAAI,EAAE,mBAAmB;QACzB,YAAY,EACV,uLAAuL;QACzL,QAAQ,EAAE;YACR,wDAAwD;YACxD,gEAAgE;YAChE,yDAAyD;YACzD,mDAAmD;YACnD,2CAA2C;SAC5C;QACD,QAAQ,EAAE,gEAAgE;QAC1E,UAAU,EAAE;YACV,kBAAkB;YAClB,qCAAqC;YACrC,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,+BAA+B;IAC/B,6EAA6E;IAC7E,oBAAoB,EAAE;QACpB,IAAI,EAAE,sBAAsB;QAC5B,YAAY,EACV,+MAA+M;QACjN,QAAQ,EAAE;YACR,6DAA6D;YAC7D,uDAAuD;YACvD,qDAAqD;YACrD,4DAA4D;YAC5D,8CAA8C;SAC/C;QACD,QAAQ,EAAE,oEAAoE;QAC9E,UAAU,EAAE;YACV,qEAAqE;YACrE,iDAAiD;YACjD,+CAA+C;SAChD;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,wNAAwN;QAC1N,QAAQ,EAAE;YACR,0EAA0E;YAC1E,wDAAwD;YACxD,oDAAoD;YACpD,gDAAgD;YAChD,0DAA0D;SAC3D;QACD,QAAQ,EAAE,sEAAsE;QAChF,UAAU,EAAE;YACV,qEAAqE;YACrE,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,oBAAoB,EAAE;QACpB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,yOAAyO;QAC3O,QAAQ,EAAE;YACR,oDAAoD;YACpD,iEAAiE;YACjE,wDAAwD;YACxD,+CAA+C;YAC/C,kDAAkD;SACnD;QACD,QAAQ,EAAE,kEAAkE;QAC5E,UAAU,EAAE;YACV,gEAAgE;YAChE,gDAAgD;YAChD,8CAA8C;SAC/C;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,iRAAiR;QACnR,QAAQ,EAAE;YACR,6DAA6D;YAC7D,mDAAmD;YACnD,qDAAqD;YACrD,4CAA4C;YAC5C,6DAA6D;SAC9D;QACD,QAAQ,EAAE,mFAAmF;QAC7F,UAAU,EAAE;YACV,yDAAyD;YACzD,iDAAiD;YACjD,2CAA2C;SAC5C;KACF;IACD,6EAA6E;IAC7E,sDAAsD;IACtD,6EAA6E;IAC7E,wBAAwB,EAAE;QACxB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,iKAAiK;QACnK,QAAQ,EAAE;YACR,2DAA2D;YAC3D,gEAAgE;YAChE,+DAA+D;YAC/D,6CAA6C;YAC7C,8DAA8D;SAC/D;QACD,QAAQ,EAAE,6DAA6D;QACvE,UAAU,EAAE;YACV,+CAA+C;YAC/C,iDAAiD;SAClD;KACF;IAED,IAAI,EAAE;QACJ,IAAI,EAAE,oCAAoC;QAC1C,YAAY,EACV,yMAAyM;QAC3M,QAAQ,EAAE;YACR,iFAAiF;YACjF,0DAA0D;YAC1D,6EAA6E;YAC7E,yDAAyD;YACzD,uDAAuD;SACxD;QACD,QAAQ,EAAE,4EAA4E;QACtF,UAAU,EAAE;YACV,qEAAqE;YACrE,iDAAiD;SAClD;KACF;IAED,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,wKAAwK;QAC1K,QAAQ,EAAE;YACR,2FAA2F;YAC3F,sEAAsE;YACtE,6DAA6D;YAC7D,6DAA6D;SAC9D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,uDAAuD;YACvD,iDAAiD;SAClD;KACF;IAED,GAAG,EAAE;QACH,IAAI,EAAE,qCAAqC;QAC3C,YAAY,EACV,gMAAgM;QAClM,QAAQ,EAAE;YACR,uDAAuD;YACvD,yDAAyD;YACzD,8FAA8F;YAC9F,wCAAwC;YACxC,gEAAgE;SACjE;QACD,QAAQ,EAAE,8DAA8D;QACxE,UAAU,EAAE;YACV,sFAAsF;YACtF,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,4BAA4B;IAC5B,6EAA6E;IAC7E,kBAAkB,EAAE;QAClB,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,wPAAwP;QAC1P,QAAQ,EAAE;YACR,4EAA4E;YAC5E,6EAA6E;YAC7E,mEAAmE;YACnE,6EAA6E;YAC7E,4DAA4D;SAC7D;QACD,QAAQ,EAAE,+FAA+F;QACzG,UAAU,EAAE;YACV,6EAA6E;YAC7E,gDAAgD;SACjD;KACF;CACF,CAAA;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,QAA+B;IAC7D,OAAO,qBAAa,CAAC,QAAQ,CAAC,CAAA;AAChC,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,qBAAa,CAA4B,CAAA;AAC9D,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,QAA+B;IACzD,OAAO,QAAQ,IAAI,qBAAa,CAAA;AAClC,CAAC"}
|
|
1
|
+
{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../src/shared/rules/metadata.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAo5BH,0CAEC;AAKD,4CAEC;AAKD,kCAEC;AAn5BD;;GAEG;AACU,QAAA,aAAa,GAAgD;IACxE,6EAA6E;IAC7E,wBAAwB;IACxB,6EAA6E;IAC7E,gBAAgB,EAAE;QAChB,IAAI,EAAE,kBAAkB;QACxB,YAAY,EACV,4KAA4K;QAC9K,QAAQ,EAAE;YACR,gDAAgD;YAChD,wDAAwD;YACxD,oEAAoE;YACpE,mEAAmE;YACnE,6DAA6D;SAC9D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,4EAA4E;YAC5E,iDAAiD;SAClD;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,qKAAqK;QACvK,QAAQ,EAAE;YACR,+DAA+D;YAC/D,qDAAqD;YACrD,iGAAiG;YACjG,kDAAkD;SACnD;QACD,QAAQ,EAAE,wEAAwE;QAClF,UAAU,EAAE;YACV,4EAA4E;YAC5E,iDAAiD;SAClD;KACF;IAED,kBAAkB,EAAE;QAClB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,0JAA0J;QAC5J,QAAQ,EAAE;YACR,6DAA6D;YAC7D,+EAA+E;YAC/E,kEAAkE;YAClE,kFAAkF;SACnF;QACD,QAAQ,EAAE,2EAA2E;QACrF,UAAU,EAAE;YACV,kKAAkK;SACnK;KACF;IAED,6EAA6E;IAC7E,4BAA4B;IAC5B,6EAA6E;IAC7E,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,6JAA6J;QAC/J,QAAQ,EAAE;YACR,gFAAgF;YAChF,kDAAkD;YAClD,kDAAkD;YAClD,6DAA6D;SAC9D;QACD,QAAQ,EAAE,mDAAmD;QAC7D,UAAU,EAAE;YACV,uDAAuD;YACvD,gDAAgD;SACjD;KACF;IAED,GAAG,EAAE;QACH,IAAI,EAAE,4BAA4B;QAClC,YAAY,EACV,+IAA+I;QACjJ,QAAQ,EAAE;YACR,gDAAgD;YAChD,8DAA8D;YAC9D,4EAA4E;YAC5E,iDAAiD;SAClD;QACD,QAAQ,EAAE,uDAAuD;QACjE,UAAU,EAAE;YACV,8CAA8C;YAC9C,gDAAgD;SACjD;KACF;IAED,iBAAiB,EAAE;QACjB,IAAI,EAAE,mBAAmB;QACzB,YAAY,EACV,kLAAkL;QACpL,QAAQ,EAAE;YACR,qDAAqD;YACrD,mFAAmF;YACnF,yDAAyD;YACzD,wEAAwE;SACzE;QACD,QAAQ,EAAE,mDAAmD;QAC7D,UAAU,EAAE;YACV,2DAA2D;YAC3D,gDAAgD;SACjD;KACF;IAED,6EAA6E;IAC7E,iCAAiC;IACjC,6EAA6E;IAC7E,YAAY,EAAE;QACZ,IAAI,EAAE,wBAAwB;QAC9B,YAAY,EACV,mIAAmI;QACrI,QAAQ,EAAE;YACR,qDAAqD;YACrD,8DAA8D;YAC9D,+EAA+E;YAC/E,yFAAyF;SAC1F;QACD,QAAQ,EAAE,mDAAmD;QAC7D,UAAU,EAAE;YACV,6EAA6E;YAC7E,iDAAiD;SAClD;KACF;IAED,eAAe,EAAE;QACf,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,4JAA4J;QAC9J,QAAQ,EAAE;YACR,mDAAmD;YACnD,yDAAyD;YACzD,0EAA0E;YAC1E,sDAAsD;SACvD;QACD,QAAQ,EAAE,0DAA0D;QACpE,UAAU,EAAE;YACV,+HAA+H;YAC/H,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,gBAAgB;IAChB,6EAA6E;IAC7E,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,+IAA+I;QACjJ,QAAQ,EAAE;YACR,2DAA2D;YAC3D,8DAA8D;YAC9D,gEAAgE;YAChE,sEAAsE;SACvE;QACD,QAAQ,EAAE,oDAAoD;QAC9D,UAAU,EAAE;YACV,oKAAoK;YACpK,iDAAiD;SAClD;KACF;IAED,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,4IAA4I;QAC9I,QAAQ,EAAE;YACR,2DAA2D;YAC3D,6DAA6D;YAC7D,kEAAkE;YAClE,8DAA8D;SAC/D;QACD,QAAQ,EAAE,uEAAuE;QACjF,UAAU,EAAE;YACV,wJAAwJ;SACzJ;KACF;IAED,6EAA6E;IAC7E,iCAAiC;IACjC,6EAA6E;IAC7E,eAAe,EAAE;QACf,IAAI,EAAE,wBAAwB;QAC9B,YAAY,EACV,8JAA8J;QAChK,QAAQ,EAAE;YACR,yEAAyE;YACzE,6EAA6E;YAC7E,4DAA4D;YAC5D,qDAAqD;SACtD;QACD,QAAQ,EAAE,8DAA8D;QACxE,UAAU,EAAE;YACV,wJAAwJ;YACxJ,gDAAgD;SACjD;KACF;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,6JAA6J;QAC/J,QAAQ,EAAE;YACR,uEAAuE;YACvE,mDAAmD;YACnD,wFAAwF;YACxF,+CAA+C;SAChD;QACD,QAAQ,EAAE,oDAAoD;QAC9D,UAAU,EAAE;YACV,mEAAmE;YACnE,iDAAiD;SAClD;KACF;IAED,cAAc,EAAE;QACd,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,4IAA4I;QAC9I,QAAQ,EAAE;YACR,4DAA4D;YAC5D,8CAA8C;YAC9C,4DAA4D;YAC5D,gDAAgD;SACjD;QACD,QAAQ,EAAE,4DAA4D;QACtE,UAAU,EAAE;YACV,gFAAgF;YAChF,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,iCAAiC;IACjC,6EAA6E;IAC7E,kBAAkB,EAAE;QAClB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EACV,6IAA6I;QAC/I,QAAQ,EAAE;YACR,gEAAgE;YAChE,gGAAgG;YAChG,0EAA0E;YAC1E,sEAAsE;SACvE;QACD,QAAQ,EAAE,qEAAqE;QAC/E,UAAU,EAAE;YACV,wDAAwD;YACxD,gDAAgD;SACjD;KACF;IAED,WAAW,EAAE;QACX,IAAI,EAAE,mBAAmB;QACzB,YAAY,EACV,kKAAkK;QACpK,QAAQ,EAAE;YACR,kEAAkE;YAClE,wFAAwF;YACxF,kDAAkD;YAClD,wDAAwD;SACzD;QACD,QAAQ,EAAE,+DAA+D;QACzE,UAAU,EAAE;YACV,sIAAsI;YACtI,iDAAiD;SAClD;KACF;IAED,cAAc,EAAE;QACd,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,+HAA+H;QACjI,QAAQ,EAAE;YACR,iDAAiD;YACjD,4DAA4D;YAC5D,iDAAiD;YACjD,4DAA4D;SAC7D;QACD,QAAQ,EAAE,oDAAoD;QAC9D,UAAU,EAAE;YACV,wDAAwD;YACxD,gDAAgD;SACjD;KACF;IAED,6EAA6E;IAC7E,8BAA8B;IAC9B,6EAA6E;IAC7E,kBAAkB,EAAE;QAClB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EACV,mJAAmJ;QACrJ,QAAQ,EAAE;YACR,qEAAqE;YACrE,6EAA6E;YAC7E,8DAA8D;YAC9D,sEAAsE;SACvE;QACD,QAAQ,EAAE,uEAAuE;QACjF,UAAU,EAAE;YACV,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,yBAAyB;IACzB,6EAA6E;IAC7E,UAAU,EAAE;QACV,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,2JAA2J;QAC7J,QAAQ,EAAE;YACR,sDAAsD;YACtD,6CAA6C;YAC7C,sDAAsD;YACtD,yDAAyD;SAC1D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,wCAAwC;SACzC;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,4KAA4K;QAC9K,QAAQ,EAAE;YACR,qEAAqE;YACrE,0EAA0E;YAC1E,+DAA+D;YAC/D,kEAAkE;SACnE;QACD,QAAQ,EAAE,+DAA+D;QACzE,UAAU,EAAE;YACV,6EAA6E;YAC7E,yDAAyD;SAC1D;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,4HAA4H;QAC9H,QAAQ,EAAE;YACR,qDAAqD;YACrD,kEAAkE;YAClE,sDAAsD;YACtD,sDAAsD;SACvD;QACD,QAAQ,EAAE,yDAAyD;QACnE,UAAU,EAAE;YACV,6EAA6E;YAC7E,iEAAiE;SAClE;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,wBAAwB;QAC9B,YAAY,EACV,8JAA8J;QAChK,QAAQ,EAAE;YACR,0DAA0D;YAC1D,+DAA+D;YAC/D,iEAAiE;YACjE,6DAA6D;SAC9D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,6EAA6E;YAC7E,yDAAyD;SAC1D;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,yIAAyI;QAC3I,QAAQ,EAAE;YACR,uDAAuD;YACvD,iEAAiE;YACjE,gEAAgE;YAChE,0DAA0D;SAC3D;QACD,QAAQ,EAAE,4DAA4D;QACtE,UAAU,EAAE;YACV,6EAA6E;YAC7E,yEAAyE;SAC1E;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,kJAAkJ;QACpJ,QAAQ,EAAE;YACR,uDAAuD;YACvD,0CAA0C;YAC1C,iDAAiD;YACjD,iDAAiD;SAClD;QACD,QAAQ,EAAE,uDAAuD;QACjE,UAAU,EAAE;YACV,6EAA6E;YAC7E,0BAA0B;SAC3B;KACF;IAED,kBAAkB,EAAE;QAClB,IAAI,EAAE,8BAA8B;QACpC,YAAY,EACV,gLAAgL;QAClL,QAAQ,EAAE;YACR,wEAAwE;YACxE,yDAAyD;YACzD,mEAAmE;YACnE,qDAAqD;SACtD;QACD,QAAQ,EAAE,uDAAuD;QACjE,UAAU,EAAE;YACV,6EAA6E;YAC7E,iEAAiE;SAClE;KACF;IAED,6EAA6E;IAC7E,+BAA+B;IAC/B,6EAA6E;IAC7E,wBAAwB,EAAE;QACxB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,uNAAuN;QACzN,QAAQ,EAAE;YACR,wEAAwE;YACxE,8EAA8E;YAC9E,sDAAsD;YACtD,qEAAqE;SACtE;QACD,QAAQ,EAAE,6EAA6E;QACvF,UAAU,EAAE;YACV,kCAAkC;YAClC,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,yMAAyM;QAC3M,QAAQ,EAAE;YACR,yDAAyD;YACzD,yDAAyD;YACzD,sEAAsE;YACtE,2DAA2D;SAC5D;QACD,QAAQ,EAAE,uEAAuE;QACjF,UAAU,EAAE;YACV,6EAA6E;YAC7E,gEAAgE;SACjE;KACF;IAED,kBAAkB,EAAE;QAClB,IAAI,EAAE,iBAAiB;QACvB,YAAY,EACV,yJAAyJ;QAC3J,QAAQ,EAAE;YACR,qEAAqE;YACrE,iDAAiD;YACjD,4CAA4C;YAC5C,qEAAqE;SACtE;QACD,QAAQ,EAAE,kEAAkE;QAC5E,UAAU,EAAE;YACV,yEAAyE;YACzE,+FAA+F;SAChG;KACF;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EACV,2MAA2M;QAC7M,QAAQ,EAAE;YACR,+EAA+E;YAC/E,wDAAwD;YACxD,+DAA+D;YAC/D,wEAAwE;SACzE;QACD,QAAQ,EAAE,sEAAsE;QAChF,UAAU,EAAE;YACV,qDAAqD;YACrD,yDAAyD;YACzD,gFAAgF;SACjF;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,4JAA4J;QAC9J,QAAQ,EAAE;YACR,kEAAkE;YAClE,sEAAsE;YACtE,2DAA2D;YAC3D,kDAAkD;SACnD;QACD,QAAQ,EAAE,6DAA6D;QACvE,UAAU,EAAE;YACV,qDAAqD;YACrD,iDAAiD;SAClD;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,qKAAqK;QACvK,QAAQ,EAAE;YACR,+DAA+D;YAC/D,4DAA4D;YAC5D,6DAA6D;YAC7D,4DAA4D;SAC7D;QACD,QAAQ,EAAE,+DAA+D;QACzE,UAAU,EAAE;YACV,qDAAqD;YACrD,iDAAiD;YACjD,yDAAyD;SAC1D;KACF;IAED,6EAA6E;IAC7E,8BAA8B;IAC9B,6EAA6E;IAC7E,4BAA4B,EAAE;QAC5B,IAAI,EAAE,gCAAgC;QACtC,YAAY,EACV,8LAA8L;QAChM,QAAQ,EAAE;YACR,sDAAsD;YACtD,qDAAqD;YACrD,wEAAwE;YACxE,0DAA0D;SAC3D;QACD,QAAQ,EAAE,qEAAqE;QAC/E,UAAU,EAAE;YACV,qDAAqD;YACrD,yDAAyD;YACzD,kCAAkC;SACnC;KACF;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,iLAAiL;QACnL,QAAQ,EAAE;YACR,0EAA0E;YAC1E,oDAAoD;YACpD,wCAAwC;YACxC,6CAA6C;SAC9C;QACD,QAAQ,EAAE,gEAAgE;QAC1E,UAAU,EAAE;YACV,0DAA0D;YAC1D,iDAAiD;SAClD;KACF;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,6BAA6B;QACnC,YAAY,EACV,oKAAoK;QACtK,QAAQ,EAAE;YACR,2CAA2C;YAC3C,kDAAkD;YAClD,iDAAiD;YACjD,8DAA8D;SAC/D;QACD,QAAQ,EAAE,2DAA2D;QACrE,UAAU,EAAE;YACV,iDAAiD;YACjD,4EAA4E;SAC7E;KACF;IAED,yBAAyB,EAAE;QACzB,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,0KAA0K;QAC5K,QAAQ,EAAE;YACR,+CAA+C;YAC/C,0DAA0D;YAC1D,4CAA4C;YAC5C,6CAA6C;SAC9C;QACD,QAAQ,EAAE,8EAA8E;QACxF,UAAU,EAAE;YACV,qDAAqD;YACrD,iDAAiD;SAClD;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,gLAAgL;QAClL,QAAQ,EAAE;YACR,qDAAqD;YACrD,sDAAsD;YACtD,2CAA2C;YAC3C,0CAA0C;SAC3C;QACD,QAAQ,EAAE,2DAA2D;QACrE,UAAU,EAAE;YACV,yDAAyD;YACzD,6EAA6E;SAC9E;KACF;IAED,0BAA0B,EAAE;QAC1B,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,wLAAwL;QAC1L,QAAQ,EAAE;YACR,qDAAqD;YACrD,gEAAgE;YAChE,2DAA2D;YAC3D,kEAAkE;SACnE;QACD,QAAQ,EAAE,0EAA0E;QACpF,UAAU,EAAE;YACV,gEAAgE;YAChE,kCAAkC;SACnC;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,iCAAiC;QACvC,YAAY,EACV,yLAAyL;QAC3L,QAAQ,EAAE;YACR,mDAAmD;YACnD,oDAAoD;YACpD,0DAA0D;YAC1D,+CAA+C;SAChD;QACD,QAAQ,EAAE,6EAA6E;QACvF,UAAU,EAAE;YACV,yDAAyD;YACzD,6EAA6E;SAC9E;KACF;IAED,oBAAoB,EAAE;QACpB,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,qMAAqM;QACvM,QAAQ,EAAE;YACR,iFAAiF;YACjF,0EAA0E;YAC1E,oEAAoE;YACpE,uEAAuE;SACxE;QACD,QAAQ,EAAE,wEAAwE;QAClF,UAAU,EAAE;YACV,6CAA6C;YAC7C,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,oBAAoB,EAAE;QACpB,IAAI,EAAE,mBAAmB;QACzB,YAAY,EACV,uLAAuL;QACzL,QAAQ,EAAE;YACR,wDAAwD;YACxD,gEAAgE;YAChE,yDAAyD;YACzD,mDAAmD;YACnD,2CAA2C;SAC5C;QACD,QAAQ,EAAE,gEAAgE;QAC1E,UAAU,EAAE;YACV,kBAAkB;YAClB,qCAAqC;YACrC,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,+BAA+B;IAC/B,6EAA6E;IAC7E,oBAAoB,EAAE;QACpB,IAAI,EAAE,sBAAsB;QAC5B,YAAY,EACV,+MAA+M;QACjN,QAAQ,EAAE;YACR,6DAA6D;YAC7D,uDAAuD;YACvD,qDAAqD;YACrD,4DAA4D;YAC5D,8CAA8C;SAC/C;QACD,QAAQ,EAAE,oEAAoE;QAC9E,UAAU,EAAE;YACV,qEAAqE;YACrE,iDAAiD;YACjD,+CAA+C;SAChD;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,wNAAwN;QAC1N,QAAQ,EAAE;YACR,0EAA0E;YAC1E,wDAAwD;YACxD,oDAAoD;YACpD,gDAAgD;YAChD,0DAA0D;SAC3D;QACD,QAAQ,EAAE,sEAAsE;QAChF,UAAU,EAAE;YACV,qEAAqE;YACrE,iDAAiD;YACjD,iDAAiD;SAClD;KACF;IAED,oBAAoB,EAAE;QACpB,IAAI,EAAE,yBAAyB;QAC/B,YAAY,EACV,yOAAyO;QAC3O,QAAQ,EAAE;YACR,oDAAoD;YACpD,iEAAiE;YACjE,wDAAwD;YACxD,+CAA+C;YAC/C,kDAAkD;SACnD;QACD,QAAQ,EAAE,kEAAkE;QAC5E,UAAU,EAAE;YACV,gEAAgE;YAChE,gDAAgD;YAChD,8CAA8C;SAC/C;KACF;IAED,mBAAmB,EAAE;QACnB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,iRAAiR;QACnR,QAAQ,EAAE;YACR,6DAA6D;YAC7D,mDAAmD;YACnD,qDAAqD;YACrD,4CAA4C;YAC5C,6DAA6D;SAC9D;QACD,QAAQ,EAAE,mFAAmF;QAC7F,UAAU,EAAE;YACV,yDAAyD;YACzD,iDAAiD;YACjD,2CAA2C;SAC5C;KACF;IACD,6EAA6E;IAC7E,sDAAsD;IACtD,6EAA6E;IAC7E,wBAAwB,EAAE;QACxB,IAAI,EAAE,0BAA0B;QAChC,YAAY,EACV,iKAAiK;QACnK,QAAQ,EAAE;YACR,2DAA2D;YAC3D,gEAAgE;YAChE,+DAA+D;YAC/D,6CAA6C;YAC7C,8DAA8D;SAC/D;QACD,QAAQ,EAAE,6DAA6D;QACvE,UAAU,EAAE;YACV,+CAA+C;YAC/C,iDAAiD;SAClD;KACF;IAED,IAAI,EAAE;QACJ,IAAI,EAAE,oCAAoC;QAC1C,YAAY,EACV,yMAAyM;QAC3M,QAAQ,EAAE;YACR,iFAAiF;YACjF,0DAA0D;YAC1D,6EAA6E;YAC7E,yDAAyD;YACzD,uDAAuD;SACxD;QACD,QAAQ,EAAE,4EAA4E;QACtF,UAAU,EAAE;YACV,qEAAqE;YACrE,iDAAiD;SAClD;KACF;IAED,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,wKAAwK;QAC1K,QAAQ,EAAE;YACR,2FAA2F;YAC3F,sEAAsE;YACtE,6DAA6D;YAC7D,6DAA6D;SAC9D;QACD,QAAQ,EAAE,iEAAiE;QAC3E,UAAU,EAAE;YACV,uDAAuD;YACvD,iDAAiD;SAClD;KACF;IAED,GAAG,EAAE;QACH,IAAI,EAAE,qCAAqC;QAC3C,YAAY,EACV,gMAAgM;QAClM,QAAQ,EAAE;YACR,uDAAuD;YACvD,yDAAyD;YACzD,8FAA8F;YAC9F,wCAAwC;YACxC,gEAAgE;SACjE;QACD,QAAQ,EAAE,8DAA8D;QACxE,UAAU,EAAE;YACV,sFAAsF;YACtF,iDAAiD;SAClD;KACF;IAED,6EAA6E;IAC7E,4BAA4B;IAC5B,6EAA6E;IAC7E,kBAAkB,EAAE;QAClB,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EACV,wPAAwP;QAC1P,QAAQ,EAAE;YACR,4EAA4E;YAC5E,6EAA6E;YAC7E,mEAAmE;YACnE,6EAA6E;YAC7E,4DAA4D;SAC7D;QACD,QAAQ,EAAE,+FAA+F;QACzG,UAAU,EAAE;YACV,6EAA6E;YAC7E,gDAAgD;SACjD;KACF;IAED,sBAAsB,EAAE;QACtB,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EACV,0WAA0W;QAC5W,QAAQ,EAAE;YACR,yFAAyF;YACzF,iFAAiF;YACjF,kGAAkG;YAClG,uEAAuE;YACvE,kFAAkF;SACnF;QACD,QAAQ,EAAE,6FAA6F;QACvG,UAAU,EAAE;YACV,iFAAiF;YACjF,iDAAiD;YACjD,6BAA6B;SAC9B;KACF;CACF,CAAA;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,QAA+B;IAC7D,OAAO,qBAAa,CAAC,QAAQ,CAAC,CAAA;AAChC,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,qBAAa,CAA4B,CAAA;AAC9D,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,QAA+B;IACzD,OAAO,QAAQ,IAAI,qBAAa,CAAA;AAClC,CAAC"}
|
package/dist/shared/types.d.ts
CHANGED
|
@@ -2,9 +2,32 @@
|
|
|
2
2
|
* Scanner Types and Interfaces
|
|
3
3
|
* Defines the core data structures for the security scanning engine
|
|
4
4
|
*/
|
|
5
|
-
export type VulnerabilitySeverity =
|
|
6
|
-
export type VulnerabilityCategory =
|
|
7
|
-
export type ValidationStatus =
|
|
5
|
+
export type VulnerabilitySeverity = "critical" | "high" | "medium" | "low" | "info";
|
|
6
|
+
export type VulnerabilityCategory = "hardcoded_secret" | "high_entropy_string" | "sensitive_variable" | "security_bypass" | "dangerous_function" | "sql_injection" | "xss" | "command_injection" | "insecure_config" | "missing_auth" | "suspicious_package" | "cors_misconfiguration" | "root_container" | "dangerous_file" | "ai_pattern" | "sensitive_url" | "weak_crypto" | "data_exposure" | "ai_prompt_injection" | "ai_unsafe_execution" | "ai_overpermissive_tool" | "ai_rag_exfiltration" | "ai_endpoint_unprotected" | "ai_schema_mismatch" | "ai_package_hallucination" | "ai_rag_corpus_poisoning" | "ai_rag_pii_leakage" | "ai_mcp_tool_poisoning" | "ai_mcp_credential_issue" | "ai_mcp_confused_deputy" | "ai_mcp_description_injection" | "ai_mcp_server_shadowing" | "ai_mcp_config_secrets" | "ai_mcp_config_permissions" | "ai_rag_query_injection" | "ai_rag_embedding_poisoning" | "ai_rag_chunk_injection" | "ai_package_typosquat" | "ai_package_malicious" | "ai_unsafe_model_load" | "ai_unverified_model" | "ai_unsafe_finetuning" | "ai_excessive_agency" | "ai_skill_injection" | "ai_rules_file_backdoor" | "missing_security_headers" | "ssrf" | "log_injection" | "xxe";
|
|
7
|
+
export type ValidationStatus = "confirmed" | "downgraded" | "dismissed" | "not_validated";
|
|
8
|
+
/** One step in a taint propagation path (serializable output format). */
|
|
9
|
+
export interface TaintPathStep {
|
|
10
|
+
line: number;
|
|
11
|
+
variable: string;
|
|
12
|
+
taintKinds: string[];
|
|
13
|
+
description: string;
|
|
14
|
+
stepType: "source" | "propagation" | "sanitizer" | "sink" | "call_entry" | "call_return";
|
|
15
|
+
filePath?: string;
|
|
16
|
+
functionName?: string;
|
|
17
|
+
}
|
|
18
|
+
/** A serializable taint path from source to sink. */
|
|
19
|
+
export interface TaintPathOutput {
|
|
20
|
+
sourceType: string;
|
|
21
|
+
sourceLine: number;
|
|
22
|
+
sinkType: string;
|
|
23
|
+
sinkLine: number;
|
|
24
|
+
taintKinds: string[];
|
|
25
|
+
/** Always false — sanitized paths are filtered by the taint engine before serialization. */
|
|
26
|
+
sanitized: boolean;
|
|
27
|
+
steps: TaintPathStep[];
|
|
28
|
+
}
|
|
29
|
+
/** Evidence classification for a finding. */
|
|
30
|
+
export type EvidenceLevel = "proven" | "partial" | "contextual" | "pattern_only";
|
|
8
31
|
export interface Vulnerability {
|
|
9
32
|
id: string;
|
|
10
33
|
filePath: string;
|
|
@@ -15,11 +38,11 @@ export interface Vulnerability {
|
|
|
15
38
|
title: string;
|
|
16
39
|
description: string;
|
|
17
40
|
suggestedFix?: string;
|
|
18
|
-
confidence:
|
|
41
|
+
confidence: "high" | "medium" | "low";
|
|
19
42
|
/** @deprecated Use `source` instead. Kept for backward compatibility. */
|
|
20
43
|
layer: 1 | 2 | 3;
|
|
21
44
|
/** Which detector group produced this finding */
|
|
22
|
-
source?:
|
|
45
|
+
source?: "secrets" | "structural" | "ai_code" | "config" | "validation";
|
|
23
46
|
requiresAIValidation?: boolean;
|
|
24
47
|
validatedByAI?: boolean;
|
|
25
48
|
validationStatus?: ValidationStatus;
|
|
@@ -32,6 +55,10 @@ export interface Vulnerability {
|
|
|
32
55
|
aiEnhanced?: boolean;
|
|
33
56
|
/** Base confidence score (0.0-1.0) set by the detector. Used by scoring stage. */
|
|
34
57
|
baseConfidence?: number;
|
|
58
|
+
/** Serialized taint path from source to sink (when available). */
|
|
59
|
+
taintPath?: TaintPathOutput;
|
|
60
|
+
/** Evidence classification for this finding. */
|
|
61
|
+
evidenceLevel?: EvidenceLevel;
|
|
35
62
|
}
|
|
36
63
|
/**
|
|
37
64
|
* Cancellation token for aborting scans gracefully
|
|
@@ -85,7 +112,7 @@ export interface SuppressedVulnerabilitySummary {
|
|
|
85
112
|
/** Title */
|
|
86
113
|
title: string;
|
|
87
114
|
/** How it was suppressed */
|
|
88
|
-
suppressionType:
|
|
115
|
+
suppressionType: "inline" | "config-finding" | "config-rule";
|
|
89
116
|
/** Reason for suppression */
|
|
90
117
|
suppressionReason: string;
|
|
91
118
|
/** Expiration date (if any) */
|
|
@@ -117,6 +144,14 @@ export interface ScanResult {
|
|
|
117
144
|
cacheCreationTokens: number;
|
|
118
145
|
cacheReadTokens: number;
|
|
119
146
|
cacheHitRate: number;
|
|
147
|
+
rejectionBreakdown?: Record<string, Array<{
|
|
148
|
+
title: string;
|
|
149
|
+
filePath: string;
|
|
150
|
+
lineNumber: number;
|
|
151
|
+
severity: string;
|
|
152
|
+
confidenceScore?: number;
|
|
153
|
+
reason: string;
|
|
154
|
+
}>>;
|
|
120
155
|
};
|
|
121
156
|
cancelled?: boolean;
|
|
122
157
|
cancelReason?: string;
|
|
@@ -155,11 +190,19 @@ export interface ScanResult {
|
|
|
155
190
|
title: string;
|
|
156
191
|
}>;
|
|
157
192
|
};
|
|
193
|
+
/** Confidence-suppressed findings eligible for review (score >= 0.5 but below surface threshold) */
|
|
194
|
+
forReviewFindings?: Array<Vulnerability & {
|
|
195
|
+
confidenceScore: number;
|
|
196
|
+
}>;
|
|
158
197
|
/** Filter audit trail (when includeFilterAudit option is enabled) */
|
|
159
|
-
filterAuditTrail?: import(
|
|
198
|
+
filterAuditTrail?: import("../postprocess/filtering/pipeline").AnnotatedFinding[];
|
|
199
|
+
/** Project context from context engine (for two-phase scan protocol) */
|
|
200
|
+
projectContext?: import("../model/project-context").ProjectContext;
|
|
201
|
+
/** Language breakdown of scanned files (e.g., { "TypeScript": 45, "Python": 12 }) */
|
|
202
|
+
languageStats?: Record<string, number>;
|
|
160
203
|
}
|
|
161
204
|
export interface ScanProgress {
|
|
162
|
-
status:
|
|
205
|
+
status: "fetching" | "layer1" | "layer2" | "layer3" | "validating" | "complete" | "failed";
|
|
163
206
|
message: string;
|
|
164
207
|
filesProcessed: number;
|
|
165
208
|
totalFiles: number;
|
|
@@ -182,6 +225,7 @@ export interface ConfigViolation {
|
|
|
182
225
|
lineContent: string;
|
|
183
226
|
message: string;
|
|
184
227
|
severity: VulnerabilitySeverity;
|
|
228
|
+
category?: VulnerabilityCategory;
|
|
185
229
|
}
|
|
186
230
|
export interface SensitiveVariablePattern {
|
|
187
231
|
pattern: RegExp;
|
|
@@ -220,19 +264,19 @@ export interface DetectorContext {
|
|
|
220
264
|
};
|
|
221
265
|
framework: {
|
|
222
266
|
/** Primary backend framework detected */
|
|
223
|
-
primary:
|
|
267
|
+
primary: "nextjs" | "express" | "fastify" | "koa" | "hono" | "nestjs" | "django" | "flask" | "fastapi" | "rails" | "unknown" | null;
|
|
224
268
|
/** Frontend framework detected */
|
|
225
|
-
frontend:
|
|
269
|
+
frontend: "react" | "vue" | "svelte" | "angular" | "unknown" | null;
|
|
226
270
|
/** Whether the project uses TypeScript */
|
|
227
271
|
hasTypeScript: boolean;
|
|
228
272
|
};
|
|
229
273
|
dataAccess: {
|
|
230
274
|
/** ORM/query builder detected */
|
|
231
|
-
orm:
|
|
275
|
+
orm: "prisma" | "drizzle" | "typeorm" | "sequelize" | "knex" | null;
|
|
232
276
|
/** Whether RLS (Row-Level Security) is detected */
|
|
233
277
|
hasRLS: boolean;
|
|
234
278
|
/** Validation library detected */
|
|
235
|
-
validationLib:
|
|
279
|
+
validationLib: "zod" | "yup" | "joi" | "valibot" | null;
|
|
236
280
|
};
|
|
237
281
|
file: {
|
|
238
282
|
/** Whether this file is server-only (not bundled to client) */
|
|
@@ -252,7 +296,7 @@ export interface MiddlewareAuthContextSummary {
|
|
|
252
296
|
/** Whether auth middleware was detected */
|
|
253
297
|
hasAuthMiddleware: boolean;
|
|
254
298
|
/** The type of auth detected */
|
|
255
|
-
authType:
|
|
299
|
+
authType: "clerk" | "nextauth" | "auth0" | "supabase" | "custom" | "unknown" | null;
|
|
256
300
|
/** Protected path patterns */
|
|
257
301
|
protectedPaths: string[];
|
|
258
302
|
/** Public/excluded path patterns */
|
|
@@ -279,7 +323,7 @@ export declare const MAX_FILE_SIZE: number;
|
|
|
279
323
|
* - full: Complete scan with AI validation on all files (initial onboarding, deep audits)
|
|
280
324
|
* - incremental: Focused scan on changed files only (CI/CD, fast feedback)
|
|
281
325
|
*/
|
|
282
|
-
export type ScanMode =
|
|
326
|
+
export type ScanMode = "full" | "incremental";
|
|
283
327
|
/**
|
|
284
328
|
* Scan depth controls AI usage independent of full vs incremental mode
|
|
285
329
|
*
|
|
@@ -305,7 +349,7 @@ export type ScanMode = 'full' | 'incremental';
|
|
|
305
349
|
* | CLI --deep | deep | Thorough analysis when requested |
|
|
306
350
|
* | Onboarding | deep | Full picture on first scan |
|
|
307
351
|
*/
|
|
308
|
-
export type ScanDepth =
|
|
352
|
+
export type ScanDepth = "local" | "verified" | "deep";
|
|
309
353
|
export interface ScanModeConfig {
|
|
310
354
|
/** The scan mode */
|
|
311
355
|
mode: ScanMode;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,qBAAqB,
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,qBAAqB,GAC7B,UAAU,GACV,MAAM,GACN,QAAQ,GACR,KAAK,GACL,MAAM,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC7B,kBAAkB,GAClB,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,GACpB,eAAe,GACf,KAAK,GACL,mBAAmB,GACnB,iBAAiB,GACjB,cAAc,GACd,oBAAoB,GACpB,uBAAuB,GACvB,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,eAAe,GACf,aAAa,GACb,eAAe,GAEf,qBAAqB,GACrB,qBAAqB,GACrB,wBAAwB,GAExB,qBAAqB,GACrB,yBAAyB,GACzB,oBAAoB,GAEpB,0BAA0B,GAC1B,yBAAyB,GACzB,oBAAoB,GACpB,uBAAuB,GACvB,yBAAyB,GACzB,wBAAwB,GAExB,8BAA8B,GAC9B,yBAAyB,GACzB,uBAAuB,GACvB,2BAA2B,GAC3B,wBAAwB,GACxB,4BAA4B,GAC5B,wBAAwB,GACxB,sBAAsB,GACtB,sBAAsB,GAEtB,sBAAsB,GACtB,qBAAqB,GACrB,sBAAsB,GACtB,qBAAqB,GAErB,oBAAoB,GACpB,wBAAwB,GAExB,0BAA0B,GAC1B,MAAM,GACN,eAAe,GACf,KAAK,CAAC;AAEV,MAAM,MAAM,gBAAgB,GACxB,WAAW,GACX,YAAY,GACZ,WAAW,GACX,eAAe,CAAC;AAMpB,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EACJ,QAAQ,GACR,aAAa,GACb,WAAW,GACX,MAAM,GACN,YAAY,GACZ,aAAa,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qDAAqD;AACrD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,4FAA4F;IAC5F,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,6CAA6C;AAC7C,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,SAAS,GACT,YAAY,GACZ,cAAc,CAAC;AAEnB,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,yEAAyE;IACzE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,iDAAiD;IACjD,MAAM,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,CAAC;IACxE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAG/B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IAGzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,kEAAkE;IAClE,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,gDAAgD;IAChD,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,SAAS,EAAE,OAAO,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2BAA2B;IAC3B,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI,iBAAiB,CA8B3D;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAGD,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5E,2EAA2E;AAC3E,MAAM,WAAW,8BAA8B;IAC7C,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,eAAe;IACf,QAAQ,EAAE,qBAAqB,CAAC;IAChC,YAAY;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,eAAe,EAAE,QAAQ,GAAG,gBAAgB,GAAG,aAAa,CAAC;IAC7D,6BAA6B;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,aAAa,EAAE,CAAC;IAGjC,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,iBAAiB,EAAE,OAAO,CAAC;IAE3B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAGlB,eAAe,CAAC,EAAE;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,qBAAqB,EAAE,MAAM,CAAC;QAC9B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,qBAAqB,EAAE,MAAM,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,CACzB,MAAM,EACN,KAAK,CAAC;YACJ,KAAK,EAAE,MAAM,CAAC;YACd,QAAQ,EAAE,MAAM,CAAC;YACjB,UAAU,EAAE,MAAM,CAAC;YACnB,QAAQ,EAAE,MAAM,CAAC;YACjB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC;SAChB,CAAC,CACH,CAAC;KACH,CAAC;IAGF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IAGtB,gBAAgB,CAAC,EAAE;QACjB,wCAAwC;QACxC,KAAK,EAAE,MAAM,CAAC;QACd,6CAA6C;QAC7C,gBAAgB,EAAE,MAAM,CAAC;QACzB,mDAAmD;QACnD,uBAAuB,EAAE,MAAM,CAAC;QAChC,2CAA2C;QAC3C,oBAAoB,EAAE,MAAM,CAAC;QAC7B,uEAAuE;QACvE,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,kEAAkE;IAClE,yBAAyB,CAAC,EAAE,8BAA8B,EAAE,CAAC;IAG7D,YAAY,CAAC,EAAE;QACb,oCAAoC;QACpC,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gDAAgD;QAChD,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,+CAA+C;QAC/C,QAAQ,EAAE,MAAM,CAAC;QACjB,6DAA6D;QAC7D,UAAU,EAAE,MAAM,CAAC;QACnB,4CAA4C;QAC5C,aAAa,EAAE,MAAM,CAAC;QACtB,4CAA4C;QAC5C,aAAa,EAAE,KAAK,CAAC;YACnB,IAAI,EAAE,MAAM,CAAC;YACb,QAAQ,EAAE,MAAM,CAAC;YACjB,UAAU,EAAE,MAAM,CAAC;YACnB,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;YACjB,KAAK,EAAE,MAAM,CAAC;SACf,CAAC,CAAC;KACJ,CAAC;IAEF,oGAAoG;IACpG,iBAAiB,CAAC,EAAE,KAAK,CAAC,aAAa,GAAG;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEvE,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,OAAO,mCAAmC,EAAE,gBAAgB,EAAE,CAAC;IAElF,wEAAwE;IACxE,cAAc,CAAC,EAAE,OAAO,0BAA0B,EAAE,cAAc,CAAC;IAEnE,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EACF,UAAU,GACV,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,UAAU,GACV,QAAQ,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAC;AAGhE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;CACrB;AAGD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,eAAe,EAAE,CAAC;CACjE;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC;AAGD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;CACrB;AAGD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAE9B,IAAI,EAAE;QACJ,6CAA6C;QAC7C,UAAU,EAAE,4BAA4B,GAAG,IAAI,CAAC;QAChD,2CAA2C;QAC3C,WAAW,EAAE,wBAAwB,CAAC;QACtC,uDAAuD;QACvD,eAAe,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;IAGF,SAAS,EAAE;QACT,yCAAyC;QACzC,OAAO,EACH,QAAQ,GACR,SAAS,GACT,SAAS,GACT,KAAK,GACL,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,SAAS,GACT,OAAO,GACP,SAAS,GACT,IAAI,CAAC;QACT,kCAAkC;QAClC,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,CAAC;QACpE,0CAA0C;QAC1C,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IAGF,UAAU,EAAE;QACV,iCAAiC;QACjC,GAAG,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,GAAG,IAAI,CAAC;QACpE,mDAAmD;QACnD,MAAM,EAAE,OAAO,CAAC;QAChB,kCAAkC;QAClC,aAAa,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC;KACzD,CAAC;IAGF,IAAI,EAAE;QACJ,+DAA+D;QAC/D,YAAY,EAAE,OAAO,CAAC;QACtB,+DAA+D;QAC/D,eAAe,EAAE,OAAO,CAAC;QACzB,oDAAoD;QACpD,UAAU,EAAE,OAAO,CAAC;QACpB,yCAAyC;QACzC,YAAY,EAAE,OAAO,CAAC;QACtB,kDAAkD;QAClD,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;CACH;AAED,4DAA4D;AAC5D,MAAM,WAAW,4BAA4B;IAC3C,2CAA2C;IAC3C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gCAAgC;IAChC,QAAQ,EACJ,OAAO,GACP,UAAU,GACV,OAAO,GACP,UAAU,GACV,QAAQ,GACR,SAAS,GACT,IAAI,CAAC;IACT,8BAA8B;IAC9B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oCAAoC;IACpC,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,yDAAyD;AACzD,MAAM,WAAW,wBAAwB;IACvC,oDAAoD;IACpD,kBAAkB,EAAE,OAAO,CAAC;IAC5B,qCAAqC;IACrC,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,eAAe,CA4B5D;AAGD,eAAO,MAAM,oBAAoB,UAsBhC,CAAC;AAGF,eAAO,MAAM,aAAa,UAczB,CAAC;AAGF,eAAO,MAAM,aAAa,QAAY,CAAC;AAMvC;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,aAAa,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,oBAAoB;IACpB,IAAI,EAAE,QAAQ,CAAC;IAEf,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,2DAA2D;IAC3D,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,4DAA4D;IAC5D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,gEAAgE;IAChE,SAAS,CAAC,EAAE,SAAS,CAAC;IAEtB,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,yDAAyD;IACzD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAexE,CAAC"}
|
package/dist/shared/types.js
CHANGED
|
@@ -25,7 +25,7 @@ function createCancellationToken() {
|
|
|
25
25
|
token.cancelled = true;
|
|
26
26
|
token.reason = reason;
|
|
27
27
|
// Run cleanup callbacks
|
|
28
|
-
cleanupCallbacks.forEach(cb => {
|
|
28
|
+
cleanupCallbacks.forEach((cb) => {
|
|
29
29
|
try {
|
|
30
30
|
cb();
|
|
31
31
|
}
|
|
@@ -42,7 +42,7 @@ function createCancellationToken() {
|
|
|
42
42
|
else {
|
|
43
43
|
cleanupCallbacks.push(callback);
|
|
44
44
|
}
|
|
45
|
-
}
|
|
45
|
+
},
|
|
46
46
|
};
|
|
47
47
|
return token;
|
|
48
48
|
}
|
|
@@ -81,26 +81,43 @@ function createEmptyDetectorContext() {
|
|
|
81
81
|
}
|
|
82
82
|
// Supported file extensions for scanning
|
|
83
83
|
exports.SCANNABLE_EXTENSIONS = [
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
84
|
+
".js",
|
|
85
|
+
".jsx",
|
|
86
|
+
".ts",
|
|
87
|
+
".tsx",
|
|
88
|
+
".mjs",
|
|
89
|
+
".cjs",
|
|
90
|
+
".py",
|
|
91
|
+
".rb",
|
|
92
|
+
".php",
|
|
93
|
+
".go",
|
|
94
|
+
".java",
|
|
95
|
+
".cs",
|
|
96
|
+
".env",
|
|
97
|
+
".yaml",
|
|
98
|
+
".yml",
|
|
99
|
+
".json",
|
|
100
|
+
".toml",
|
|
101
|
+
".dockerfile",
|
|
102
|
+
".sh",
|
|
103
|
+
".bash",
|
|
104
|
+
".md", // Agent skill files (SKILL.md, copilot-instructions.md, etc.)
|
|
89
105
|
];
|
|
90
106
|
// Files to always scan regardless of extension
|
|
91
107
|
exports.SPECIAL_FILES = [
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
108
|
+
"Dockerfile",
|
|
109
|
+
"docker-compose.yml",
|
|
110
|
+
"docker-compose.yaml",
|
|
111
|
+
".env",
|
|
112
|
+
".env.local",
|
|
113
|
+
".env.production",
|
|
114
|
+
".env.development",
|
|
115
|
+
"package.json",
|
|
116
|
+
"requirements.txt",
|
|
117
|
+
"Gemfile",
|
|
118
|
+
"go.mod",
|
|
119
|
+
".cursorrules",
|
|
120
|
+
".windsurfrules",
|
|
104
121
|
];
|
|
105
122
|
// Max file size to scan (50KB as per PRD)
|
|
106
123
|
exports.MAX_FILE_SIZE = 50 * 1024;
|
|
@@ -109,14 +126,14 @@ exports.MAX_FILE_SIZE = 50 * 1024;
|
|
|
109
126
|
*/
|
|
110
127
|
exports.SCAN_MODE_DEFAULTS = {
|
|
111
128
|
full: {
|
|
112
|
-
mode:
|
|
129
|
+
mode: "full",
|
|
113
130
|
skipAIValidation: false,
|
|
114
131
|
skipLayer3: false,
|
|
115
132
|
maxAIValidationFiles: 50,
|
|
116
133
|
maxLayer3Files: 15,
|
|
117
134
|
},
|
|
118
135
|
incremental: {
|
|
119
|
-
mode:
|
|
136
|
+
mode: "incremental",
|
|
120
137
|
skipAIValidation: false,
|
|
121
138
|
skipLayer3: true, // Skip expensive Layer 3 for incremental
|
|
122
139
|
maxAIValidationFiles: 20,
|
package/dist/shared/types.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA+KH,0DA8BC;AAmTD,gEA4BC;AArXD;;;;;;;GAOG;AACH,SAAgB,uBAAuB;IACrC,MAAM,gBAAgB,GAAsB,EAAE,CAAC;IAE/C,MAAM,KAAK,GAAsB;QAC/B,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,SAAS;QACjB,MAAM,CAAC,MAAe;YACpB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;gBACvB,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;gBACtB,wBAAwB;gBACxB,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;oBAC9B,IAAI,CAAC;wBACH,EAAE,EAAE,CAAC;oBACP,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,wBAAwB;oBAC1B,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,QAAQ;YACf,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,QAAQ,EAAE,CAAC,CAAC,qCAAqC;YACnD,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AA+SD;;;GAGG;AACH,SAAgB,0BAA0B;IACxC,OAAO;QACL,IAAI,EAAE;YACJ,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE;gBACX,kBAAkB,EAAE,KAAK;gBACzB,mBAAmB,EAAE,EAAE;aACxB;YACD,eAAe,EAAE,EAAE;SACpB;QACD,SAAS,EAAE;YACT,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,KAAK;SACrB;QACD,UAAU,EAAE;YACV,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,KAAK;YACb,aAAa,EAAE,IAAI;SACpB;QACD,IAAI,EAAE;YACJ,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,KAAK;SACpB;KACF,CAAC;AACJ,CAAC;AAED,yCAAyC;AAC5B,QAAA,oBAAoB,GAAG;IAClC,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,KAAK;IACL,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,aAAa;IACb,KAAK;IACL,OAAO;IACP,KAAK,EAAE,8DAA8D;CACtE,CAAC;AAEF,+CAA+C;AAClC,QAAA,aAAa,GAAG;IAC3B,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,MAAM;IACN,YAAY;IACZ,iBAAiB;IACjB,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,SAAS;IACT,QAAQ;IACR,cAAc;IACd,gBAAgB;CACjB,CAAC;AAEF,0CAA0C;AAC7B,QAAA,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AA4EvC;;GAEG;AACU,QAAA,kBAAkB,GAA8C;IAC3E,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,KAAK;QACjB,oBAAoB,EAAE,EAAE;QACxB,cAAc,EAAE,EAAE;KACnB;IACD,WAAW,EAAE;QACX,IAAI,EAAE,aAAa;QACnB,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,IAAI,EAAE,yCAAyC;QAC3D,oBAAoB,EAAE,EAAE;QACxB,cAAc,EAAE,CAAC;KAClB;CACF,CAAC"}
|
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Async Flow Taint Injection
|
|
3
|
+
*
|
|
4
|
+
* Handles taint propagation through async patterns that the standard CFG
|
|
5
|
+
* doesn't model:
|
|
6
|
+
*
|
|
7
|
+
* 1. Promise chains: `.then(data => ...)` / `.catch(err => ...)`
|
|
8
|
+
* The callback parameter inherits taint from the resolved/rejected promise.
|
|
9
|
+
*
|
|
10
|
+
* 2. Callback-style APIs: `fs.readFile(taintedPath, (err, data) => ...)`
|
|
11
|
+
* The callback parameters inherit contextual taint from the call arguments.
|
|
12
|
+
*
|
|
13
|
+
* Integration: Called from `applyNodeTransfer` in `propagation.ts` when a
|
|
14
|
+
* call_expression is encountered. Modifies taint state in-place by seeding
|
|
15
|
+
* callback parameters.
|
|
16
|
+
*/
|
|
17
|
+
import type Parser from 'tree-sitter';
|
|
18
|
+
import type { TaintState } from './propagation-types';
|
|
19
|
+
/**
|
|
20
|
+
* If `callNode` is a `.then()` / `.catch()` call on a tainted object,
|
|
21
|
+
* seed the callback parameter(s) with the object's taint.
|
|
22
|
+
*
|
|
23
|
+
* Example:
|
|
24
|
+
* taintedPromise.then(data => sink(data))
|
|
25
|
+
* → `data` inherits all taint kinds from `taintedPromise`
|
|
26
|
+
*
|
|
27
|
+
* promise.catch(err => log(err))
|
|
28
|
+
* → `err` inherits taint from promise
|
|
29
|
+
*
|
|
30
|
+
* Returns true if injection occurred.
|
|
31
|
+
*/
|
|
32
|
+
export declare function injectPromiseChainTaint(callNode: Parser.SyntaxNode, state: TaintState): boolean;
|
|
33
|
+
/**
|
|
34
|
+
* If `callNode` matches a known callback-style API, seed the callback's
|
|
35
|
+
* parameters with contextual taint from the call arguments.
|
|
36
|
+
*
|
|
37
|
+
* Example:
|
|
38
|
+
* fs.readFile(userPath, (err, data) => db.query(data))
|
|
39
|
+
* → `data` inherits path-related taint from `userPath`
|
|
40
|
+
*
|
|
41
|
+
* Returns true if injection occurred.
|
|
42
|
+
*/
|
|
43
|
+
export declare function injectCallbackTaint(callNode: Parser.SyntaxNode, state: TaintState): boolean;
|
|
44
|
+
//# sourceMappingURL=async-flow.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"async-flow.d.ts","sourceRoot":"","sources":["../../src/taint/async-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AASrD;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,CAAC,UAAU,EAC3B,KAAK,EAAE,UAAU,GAChB,OAAO,CAuCT;AAgDD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,CAAC,UAAU,EAC3B,KAAK,EAAE,UAAU,GAChB,OAAO,CA4ET"}
|