@runhalo/engine 0.3.0 → 0.4.0

package/dist/index.js

@@ -44,8 +44,11 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SCAFFOLD_REGISTRY = exports.detectFramework = exports.ScaffoldEngine = exports.ComplianceScoreEngine = exports.transformSetDefault = exports.transformSanitizeInput = exports.transformRemoveDefault = exports.transformUrlUpgrade = exports.FixEngine = exports.REMEDIATION_MAP = exports.HaloEngine = exports.ETHICAL_RULES = exports.COPPA_RULES = exports.treeSitterParser = exports.TreeSitterParser = void 0;
+exports.SCAFFOLD_REGISTRY = exports.detectFramework = exports.ScaffoldEngine = exports.ComplianceScoreEngine = exports.transformSetDefault = exports.transformSanitizeInput = exports.transformRemoveDefault = exports.transformUrlUpgrade = exports.FixEngine = exports.REMEDIATION_MAP = exports.HaloEngine = exports.AU_SBD_RULES = exports.AI_AUDIT_RULES = exports.ETHICAL_RULES = exports.COPPA_RULES = exports.treeSitterParser = exports.TreeSitterParser = void 0;
 exports.loadRulesFromYAML = loadRulesFromYAML;
+exports.loadRulesFromJSON = loadRulesFromJSON;
+exports.loadRulesFromJSONByPack = loadRulesFromJSONByPack;
+exports.compileRawRules = compileRawRules;
 exports.parseHaloignore = parseHaloignore;
 exports.shouldIgnoreFile = shouldIgnoreFile;
 exports.shouldIgnoreViolation = shouldIgnoreViolation;
@@ -56,10 +59,14 @@ const tree_sitter_1 = __importDefault(require("tree-sitter"));
 const tree_sitter_typescript_1 = __importDefault(require("tree-sitter-typescript"));
 const tree_sitter_javascript_1 = __importDefault(require("tree-sitter-javascript"));
 const yaml = __importStar(require("js-yaml"));
-// Extract category from ruleId (e.g. "coppa-auth-001" → "auth", "ETHICAL-001" → "ethical")
+// Extract category from ruleId (e.g. "coppa-auth-001" → "auth", "ETHICAL-001" → "ethical", "AU-SBD-001" → "au-sbd")
 function extractCategory(ruleId) {
     if (ruleId.startsWith('ETHICAL'))
         return 'ethical';
+    if (ruleId.startsWith('AI-AUDIT'))
+        return 'ai-audit';
+    if (ruleId.startsWith('AU-SBD'))
+        return 'au-sbd';
     const match = ruleId.match(/^coppa-(\w+)-\d+$/);
     return match ? match[1] : 'unknown';
 }
@@ -71,7 +78,8 @@ function detectLanguage(filePath) {
         '.py': 'python', '.swift': 'swift', '.java': 'java', '.kt': 'kotlin',
         '.html': 'html', '.vue': 'vue', '.svelte': 'svelte', '.php': 'php',
         '.cpp': 'cpp', '.h': 'cpp', '.hpp': 'cpp', '.cs': 'csharp',
-        '.qml': 'qml', '.sql': 'sql',
+        '.qml': 'qml', '.sql': 'sql', '.go': 'go', '.rb': 'ruby',
+        '.xml': 'xml', '.erb': 'ruby',
     };
     return langMap[ext] || 'unknown';
 }
@@ -106,6 +114,71 @@ function loadRulesFromYAML(yamlPath) {
         return [];
     }
 }
+// Convert a JSON rule definition to the engine's Rule interface
+function jsonRuleToRule(jsonRule) {
+    const patterns = jsonRule.patterns.map(p => new RegExp(p.pattern, p.flags));
+    // Map fixability string to Fixability type
+    const fixabilityMap = {
+        'auto': 'auto',
+        'guided': 'guided',
+        'flag-only': 'flag-only',
+    };
+    const remediation = {
+        fixability: fixabilityMap[jsonRule.fixability] || 'flag-only',
+        transformType: jsonRule.transform_type || undefined,
+        scaffoldId: jsonRule.scaffold_id || undefined,
+        guidanceUrl: jsonRule.guidance_url || undefined,
+    };
+    return {
+        id: jsonRule.id,
+        name: jsonRule.name,
+        severity: jsonRule.severity,
+        description: jsonRule.description,
+        patterns,
+        fixSuggestion: jsonRule.fix_suggestion,
+        penalty: jsonRule.penalty,
+        languages: jsonRule.languages,
+        remediation,
+    };
+}
+// JSON Rule Loader — Load rules from rules.json
+function loadRulesFromJSON(jsonPath) {
+    try {
+        const jsonContent = fs.readFileSync(jsonPath, 'utf-8');
+        const config = JSON.parse(jsonContent);
+        if (!config?.rules || !Array.isArray(config.rules)) {
+            console.warn(`No rules found in JSON file: ${jsonPath}`);
+            return [];
+        }
+        return config.rules.map(jsonRuleToRule);
+    }
+    catch (error) {
+        console.error(`Error loading JSON rules from ${jsonPath}:`, error);
+        return [];
+    }
+}
+// JSON Rule Loader — Load rules filtered by pack IDs
+function loadRulesFromJSONByPack(jsonPath, packIds) {
+    try {
+        const jsonContent = fs.readFileSync(jsonPath, 'utf-8');
+        const config = JSON.parse(jsonContent);
+        if (!config?.rules || !Array.isArray(config.rules)) {
+            console.warn(`No rules found in JSON file: ${jsonPath}`);
+            return [];
+        }
+        const packSet = new Set(packIds);
+        const filtered = config.rules.filter(r => r.packs.some(p => packSet.has(p)));
+        return filtered.map(jsonRuleToRule);
+    }
+    catch (error) {
+        console.error(`Error loading JSON rules from ${jsonPath}:`, error);
+        return [];
+    }
+}
+// Compile raw JSON rule objects (from API/cache) to engine Rule objects
+function compileRawRules(rawRules) {
+    return rawRules.map(jsonRuleToRule);
+}
 // Tree-sitter Parser for AST analysis
 class TreeSitterParser {
     constructor() {
@@ -263,15 +336,37 @@ exports.COPPA_RULES = [
         severity: 'critical',
         description: 'Social login (Google, Facebook, Twitter) without age gating is prohibited for child-directed apps',
         patterns: [
+            // JS/TS — Firebase
             /signInWithPopup\s*\(\s*\w+\s*,\s*['"](google|facebook|twitter|github)['"]/gi,
             /signInWithPopup\s*\(\s*['"](google|facebook|twitter|github)['"]/gi,
             /signInWithPopup\s*\(\s*\w+\s*,\s*\w+\s*\)/gi,
             /firebase\.auth\(\)\s*\.\s*signInWithPopup/gi,
-            /passport\.authenticate\s*\(\s*['"](google|facebook|twitter)['"]/gi
+            // JS/TS — Passport.js
+            /passport\.authenticate\s*\(\s*['"](google|facebook|twitter)['"]/gi,
+            // Python — django-allauth social providers config
+            /SOCIALACCOUNT_PROVIDERS\s*=\s*\{[^}]*(?:google|facebook|twitter|github)/gi,
+            // Python — python-social-auth backends
+            /SOCIAL_AUTH_(?:GOOGLE|FACEBOOK|TWITTER|GITHUB)_(?:KEY|SECRET)/gi,
+            // Python — flask-dance blueprints
+            /make_(?:google|facebook|twitter|github)_blueprint\s*\(/gi,
+            // Python — authlib OAuth registration
+            /oauth\.register\s*\(\s*['"](?:google|facebook|twitter|github)['"]/gi,
+            // Go — goth social auth providers
+            /goth\.UseProviders\s*\(/gi,
+            // Java — Spring Security OAuth2 login
+            /\.oauth2Login\s*\(\s*\)/gi,
+            // Java — Spring OAuth2 client registration
+            /ClientRegistration\.withRegistrationId\s*\(\s*['"](?:google|facebook|twitter|github)['"]/gi,
+            // Kotlin/Java — Firebase Android
+            /Firebase\.auth\.signInWithCredential/gi,
+            // Kotlin/Java — Google Sign-In Android
+            /GoogleSignIn\.getClient\s*\(/gi,
+            // Kotlin/Java — Facebook Login Android SDK
+            /LoginManager\.getInstance\s*\(\s*\)\s*\.logIn/gi
         ],
         fixSuggestion: 'Wrap the auth call in a conditional check for user.age >= 13 or use signInWithParentEmail() for children',
         penalty: '$51,744 per violation',
-        languages: ['typescript', 'javascript', 'python', 'swift']
+        languages: ['typescript', 'javascript', 'python', 'go', 'java', 'kotlin', 'swift']
     },
     {
         id: 'coppa-data-002',
@@ -310,14 +405,30 @@ exports.COPPA_RULES = [
         severity: 'high',
         description: 'High-accuracy geolocation without parental consent is prohibited',
         patterns: [
+            // JS/TS — browser Geolocation API
             /navigator\.geolocation\.getCurrentPosition/gi,
             /navigator\.geolocation\.watchPosition/gi,
+            // Swift — CoreLocation
             /CLLocationManager\.startUpdatingLocation\(\)/gi,
-            /locationServices\.requestLocation/gi
+            /locationServices\.requestLocation/gi,
+            // Java Android — LocationManager
+            /LocationManager\s*\.\s*requestLocationUpdates\s*\(/gi,
+            // Java/Kotlin Android — Fused Location Provider (Google Play Services)
+            /FusedLocationProviderClient|fusedLocationClient\s*\.\s*(?:requestLocationUpdates|getLastLocation|getCurrentLocation)/gi,
+            // Java Android — high accuracy priority
+            /LocationRequest\.create\s*\(\s*\)\s*\.\s*setPriority\s*\(\s*LocationRequest\.PRIORITY_HIGH_ACCURACY/gi,
+            // Kotlin Android — LocationRequest.Builder
+            /LocationRequest\.Builder\s*\(\s*Priority\.PRIORITY_HIGH_ACCURACY/gi,
+            // Python — geocoder library
+            /geocoder\.(?:ip|google|osm|mapquest)\s*\(/gi,
+            // Python — geopy geolocators
+            /(?:Nominatim|GoogleV3|Bing)\s*\([^)]*\)\s*\.(?:geocode|reverse)/gi,
+            // Android manifest — fine location permission
+            /android\.permission\.ACCESS_FINE_LOCATION/gi
         ],
         fixSuggestion: 'Downgrade accuracy to kCLLocationAccuracyThreeKilometers or require parental consent',
         penalty: '$51,744 per violation',
-        languages: ['typescript', 'javascript', 'swift', 'kotlin']
+        languages: ['typescript', 'javascript', 'swift', 'kotlin', 'java', 'python', 'xml']
     },
     {
         id: 'coppa-retention-005',
@@ -325,11 +436,22 @@ exports.COPPA_RULES = [
         severity: 'medium',
         description: 'User schemas must have deleted_at, expiration_date, or TTL index for data retention',
         patterns: [
-            /new\s+Schema\s*\(\s*\{[^{}]*\}/gi
+            // JS/TS — Mongoose schemas
+            /new\s+Schema\s*\(\s*\{[^{}]*\}/gi,
+            // Python — Django models
+            /class\s+(?:User|Child|Student|Profile|Account|Member)\w*\s*\(\s*models\.Model\s*\)/gi,
+            // Python — SQLAlchemy declarative models
+            /class\s+(?:User|Child|Student|Profile|Account|Member)\w*\s*\(\s*(?:Base|db\.Model)\s*\)/gi,
+            // Go — GORM model structs with user-related names
+            /type\s+(?:User|Child|Student|Profile|Account|Member)\w*\s+struct\s*\{/gi,
+            // Java/Kotlin — JPA @Entity on user-related classes
+            /@Entity[\s\S]*?class\s+(?:User|Child|Student|Profile|Account|Member)/gi,
+            // Kotlin — data class for user models
+            /data\s+class\s+(?:User|Child|Student|Profile|Account|Member)\w*\s*\(/gi
         ],
         fixSuggestion: 'Add deleted_at column, expiration_date field, or TTL index to database schema',
         penalty: 'Regulatory audit failure',
-        languages: ['typescript', 'javascript', 'python', 'sql', 'swift']
+        languages: ['typescript', 'javascript', 'python', 'go', 'java', 'kotlin', 'sql']
     },
     // ========== Rules 6-20 (Sprint 2) ==========
     // Rule 6: Unencrypted PII Transmission
@@ -520,13 +642,24 @@ exports.COPPA_RULES = [
         severity: 'low',
         description: 'Cookies or localStorage storing tracking data or PII requires a consent banner',
         patterns: [
+            // JS/TS — browser APIs
             /document\.cookie\s*=\s*[^;]*(?:user|email|name|token|session|track|id|uid|analytics)/gi,
             /localStorage\.setItem\s*\(\s*['"][^'"]*(?:user|email|token|session|track|auth|login|id|uid|analytics)[^'"]*['"]/gi,
-            /sessionStorage\.setItem\s*\(\s*['"][^'"]*(?:user|email|token|session|track|auth|login|id|uid|analytics)[^'"]*['"]/gi
+            /sessionStorage\.setItem\s*\(\s*['"][^'"]*(?:user|email|token|session|track|auth|login|id|uid|analytics)[^'"]*['"]/gi,
+            // Python — Flask/Django response.set_cookie()
+            /\.set_cookie\s*\(\s*['"][^'"]*(?:user|email|token|session|track|auth|login|uid|analytics)[^'"]*['"]/gi,
+            // Go — net/http SetCookie
+            /http\.SetCookie\s*\(\s*\w+\s*,\s*&http\.Cookie\s*\{/gi,
+            // Java/Kotlin — HttpServletResponse.addCookie
+            /\.addCookie\s*\(\s*new\s+Cookie\s*\(/gi,
+            // Java/Kotlin — Spring ResponseCookie
+            /ResponseCookie\.from\s*\(/gi,
+            // Generic — any language setting cookies with PII field names
+            /(?:set_cookie|SetCookie|addCookie|add_cookie)\s*\([^)]*(?:user|email|token|session|track|auth|uid|analytics)/gi
         ],
         fixSuggestion: 'Add a cookie consent banner component before setting tracking or PII cookies',
         penalty: 'Compliance warning',
-        languages: ['typescript', 'javascript']
+        languages: ['typescript', 'javascript', 'python', 'go', 'java', 'kotlin']
     },
     // Rule 17: External Links to Non-Child-Safe Sites
     // Fixed Sprint 4: Exclude privacy/TOS links, mailto, and common safe targets
@@ -550,15 +683,30 @@ exports.COPPA_RULES = [
         severity: 'high',
         description: 'Passing email, name, or phone to analytics.identify() exposes PII to third parties',
         patterns: [
+            // JS/TS — client-side analytics SDKs
             /analytics\.identify\s*\([^)]*email/gi,
             /mixpanel\.identify.*email/gi,
             /segment\.identify.*email/gi,
             /amplitude\.identify.*email/gi,
-            /identify\s*\(\s*\{[^}]*(?:email|name|phone)[^}]*\}/gi
+            /identify\s*\(\s*\{[^}]*(?:email|name|phone)[^}]*\}/gi,
+            // Python — Segment analytics-python
+            /analytics\.identify\s*\(\s*\w+\s*,\s*\{[^}]*(?:email|name|phone)/gi,
+            // Python — Mixpanel people_set with PII
+            /mp\.people_set\s*\([^)]*(?:email|\$email|name|phone)/gi,
+            // Go — Segment analytics-go Identify with PII
+            /analytics\.Enqueue\s*\(\s*analytics\.Identify\s*\{[^}]*(?:Email|Name|Phone)/gi,
+            // Java/Kotlin — Amplitude setUserId with PII
+            /Amplitude\.getInstance\s*\(\s*\)\s*\.setUserId\s*\([^)]*email/gi,
+            // Java/Kotlin — Mixpanel identify with email
+            /MixpanelAPI\.\w*identify\s*\([^)]*email/gi,
+            // Java/Kotlin — Firebase Analytics with PII
+            /FirebaseAnalytics\.setUserId\s*\([^)]*(?:email|name)/gi,
+            // Generic — setUserId with email across languages
+            /(?:setUserId|set_user_id)\s*\([^)]*(?:email|\.name|phone)/gi
         ],
         fixSuggestion: 'Hash user ID and omit email/name from analytics payload',
         penalty: '$51,744 per violation',
-        languages: ['typescript', 'javascript']
+        languages: ['typescript', 'javascript', 'python', 'go', 'java', 'kotlin']
     },
     // Rule 19: School Official Consent Bypass
     // Fixed Sprint 4: Tightened patterns to match actual auth/registration flows only
@@ -687,6 +835,222 @@ exports.ETHICAL_RULES = [
         languages: ['typescript', 'javascript', 'tsx', 'jsx', 'html']
     }
 ];
+// AI-Generated Code Audit Rules
+// Catches patterns commonly introduced by AI coding assistants (Copilot, Claude, Cursor, etc.)
+// that create COPPA compliance risks. AI models often reproduce training data patterns
+// including analytics boilerplate, insecure defaults, and placeholder credentials.
+exports.AI_AUDIT_RULES = [
+    // AI-AUDIT-001: Placeholder Analytics
+    {
+        id: 'AI-AUDIT-001',
+        name: 'Placeholder Analytics Script',
+        severity: 'high',
+        description: 'AI-generated code frequently includes placeholder analytics (UA-XXXXX, G-XXXXXX, fbq) copied from training data. These may activate real tracking without child_directed_treatment flags.',
+        patterns: [
+            /gtag\s*\(\s*['"]config['"]\s*,\s*['"](?:UA-|G-)X{3,}['"]/gi,
+            /fbq\s*\(\s*['"]init['"]\s*,\s*['"](?:0{5,}|1{5,}|X{5,}|YOUR_|PIXEL_ID|123456789)['"]/gi,
+            /ga\s*\(\s*['"]create['"]\s*,\s*['"]UA-(?:0{5,}|X{5,}|YOUR_)['"]/gi,
+            /['"](?:UA|G)-(?:XXXXXXX|0000000|YOUR_ID|REPLACE_ME)['"]/gi,
+            /analytics_id\s*[:=]\s*['"](?:placeholder|test|example|TODO|FIXME)['"]/gi
+        ],
+        fixSuggestion: 'Remove placeholder analytics IDs. If analytics are needed, use a COPPA-compliant provider with child_directed_treatment: true.',
+        penalty: 'AI-generated compliance risk',
+        languages: ['typescript', 'javascript', 'html']
+    },
+    // AI-AUDIT-002: Hardcoded Secrets
+    {
+        id: 'AI-AUDIT-002',
+        name: 'AI-Generated Hardcoded Secrets',
+        severity: 'critical',
+        description: 'AI coding assistants frequently generate placeholder API keys, tokens, and secrets inline. These may be committed to version control and exposed.',
+        patterns: [
+            /(?:api_?key|apiKey|API_KEY)\s*[:=]\s*['"](?:sk-|pk-|ak-|key-)[a-zA-Z0-9]{10,}['"]/gi,
+            /(?:secret|SECRET|token|TOKEN)\s*[:=]\s*['"](?!process\.env)[a-zA-Z0-9_-]{20,}['"]/gi,
+            /SUPABASE_(?:ANON_KEY|SERVICE_ROLE_KEY)\s*[:=]\s*['"]ey[a-zA-Z0-9_.+-]{30,}['"]/gi,
+            /FIREBASE_(?:API_KEY|CONFIG)\s*[:=]\s*['"]AI[a-zA-Z0-9_-]{30,}['"]/gi,
+            /(?:password|passwd|pwd)\s*[:=]\s*['"](?!process\.env)[^'"]{8,}['"]\s*(?:,|;|\})/gi
+        ],
+        fixSuggestion: 'Move all secrets to environment variables. Use process.env.API_KEY or a secrets manager. Never hardcode credentials.',
+        penalty: 'Security exposure — credentials in source code',
+        languages: ['typescript', 'javascript', 'python', 'java']
+    },
+    // AI-AUDIT-003: Hallucinated URLs
+    {
+        id: 'AI-AUDIT-003',
+        name: 'Hallucinated/Placeholder API URLs',
+        severity: 'medium',
+        description: 'AI models often generate fake API endpoints (api.example.com, jsonplaceholder, reqres.in) that may be replaced with real endpoints without proper review.',
+        patterns: [
+            /fetch\s*\(\s*['"]https?:\/\/(?:api\.example\.com|jsonplaceholder\.typicode\.com|reqres\.in|httpbin\.org|mockapi\.io|dummyjson\.com)[^'"]*['"]/gi,
+            /axios\.\w+\s*\(\s*['"]https?:\/\/(?:api\.example\.com|jsonplaceholder\.typicode\.com|reqres\.in|httpbin\.org|dummyjson\.com)[^'"]*['"]/gi,
+            /(?:BASE_URL|API_URL|ENDPOINT)\s*[:=]\s*['"]https?:\/\/(?:api\.example\.com|your-api|my-api|TODO|REPLACE)[^'"]*['"]/gi
+        ],
+        fixSuggestion: 'Replace placeholder URLs with actual endpoints from environment variables. Review all API calls for COPPA data handling compliance.',
+        penalty: 'AI-generated placeholder risk',
+        languages: ['typescript', 'javascript', 'python']
+    },
+    // AI-AUDIT-004: Copy-Paste Tracking Boilerplate
+    {
+        id: 'AI-AUDIT-004',
+        name: 'Copy-Paste Tracking Boilerplate',
+        severity: 'high',
+        description: 'AI assistants reproduce common analytics setup patterns from training data. These often include user identification, event tracking, and session recording without consent flows.',
+        patterns: [
+            /hotjar\.init\s*\(/gi,
+            /Sentry\.init\s*\(\s*\{[^}]*dsn/gi,
+            /LogRocket\.init\s*\(/gi,
+            /FullStory\.init\s*\(/gi,
+            /heap\.load\s*\(/gi,
+            /posthog\.init\s*\(/gi,
+            /amplitude\.init\s*\(/gi,
+            /mixpanel\.init\s*\(/gi,
+            /window\.clarity\s*\(/gi
+        ],
+        fixSuggestion: 'Remove session recording and analytics initialization unless COPPA consent is obtained. These tools capture keystrokes, mouse movements, and user behavior — all PII for children.',
+        penalty: 'Third-party data collection without consent',
+        languages: ['typescript', 'javascript', 'html']
+    },
+    // AI-AUDIT-005: Insecure Defaults
+    {
+        id: 'AI-AUDIT-005',
+        name: 'AI-Generated Insecure Defaults',
+        severity: 'medium',
+        description: 'AI models commonly generate code with insecure default configurations: CORS *, disabled SSL verification, permissive CSP, or open CORS origins.',
+        patterns: [
+            /cors\s*\(\s*\{\s*origin\s*:\s*(?:['"]?\*['"]?|true)/gi,
+            /Access-Control-Allow-Origin['"]\s*,\s*['"]\*/gi,
+            /rejectUnauthorized\s*:\s*false/gi,
+            /NODE_TLS_REJECT_UNAUTHORIZED\s*=\s*['"]?0['"]?/gi,
+            /content-security-policy['"]\s*,\s*['"]default-src\s+\*/gi,
+            /sameSite\s*:\s*['"]none['"]\s*,?\s*secure\s*:\s*false/gi
+        ],
+        fixSuggestion: 'Replace wildcard CORS with specific allowed origins. Enable SSL verification. Use restrictive CSP. Set secure cookies.',
+        penalty: 'Security misconfiguration',
+        languages: ['typescript', 'javascript', 'python']
+    },
+    // AI-AUDIT-006: TODO/FIXME Compliance Gaps
+    {
+        id: 'AI-AUDIT-006',
+        name: 'Unresolved Compliance TODOs',
+        severity: 'low',
+        description: 'AI-generated code often includes TODO/FIXME comments for compliance-related features (consent, age verification, privacy policy) that may ship unimplemented.',
+        patterns: [
+            /\/\/\s*(?:TODO|FIXME|HACK|XXX).*(?:consent|age\s*verif|privacy\s*policy|parental|coppa|gdpr|data\s*retention)/gi,
+            /\/\/\s*(?:TODO|FIXME).*(?:implement|add|need|require).*(?:auth|login|permission|access\s*control)/gi,
+            /#\s*(?:TODO|FIXME).*(?:consent|age\s*verif|privacy|parental|coppa)/gi
+        ],
+        fixSuggestion: 'Resolve all compliance-related TODOs before shipping. Each unresolved TODO is a potential COPPA violation in production.',
+        penalty: 'Unimplemented compliance requirement',
+        languages: ['typescript', 'javascript', 'python', 'java', 'swift', 'kotlin']
+    }
+];
+// Australia Safety by Design (SbD) Rules
+// Based on the eSafety Commissioner's Safety by Design framework (Online Safety Act 2021).
+// Detects code patterns that violate SbD principles: service provider responsibility,
+// user empowerment, and transparency/accountability — especially for platforms serving minors.
+exports.AU_SBD_RULES = [
+    // AU-SBD-001: Default Public Profiles
+    {
+        id: 'AU-SBD-001',
+        name: 'Default Public Profile Visibility',
+        severity: 'high',
+        description: 'User profiles default to public or visible. AU Safety by Design requires privacy-by-default for minors — profiles should be private until explicitly changed by the user or a verified parent.',
+        patterns: [
+            /(?:visibility|profile_?visibility|is_?public|isPublic)\s*[:=]\s*(?:['"]public['"]|true)/gi,
+            /default(?:_?visibility|_?privacy|_?profile)\s*[:=]\s*['"](?:public|open|visible|everyone)['"]/gi,
+            /(?:privacy|profilePrivacy)\s*[:=]\s*\{[^}]*default\s*:\s*['"](?:public|open|everyone)['"]/gi,
+            /(?:showProfile|profileVisible|publicByDefault|show_profile)\s*[:=]\s*true/gi,
+            /(?:searchable|discoverable|findable)\s*[:=]\s*true\b/gi,
+        ],
+        fixSuggestion: 'Set profile visibility to "private" by default. Require explicit user action (or parental consent for children) to make profiles public. AU SbD Principle 1: safety as a fundamental design consideration.',
+        penalty: 'Default public exposure of minor profiles',
+        languages: ['typescript', 'javascript', 'python', 'java', 'swift', 'kotlin', 'php', 'csharp']
+    },
+    // AU-SBD-002: Missing Report/Block Mechanism
+    {
+        id: 'AU-SBD-002',
+        name: 'Social Features Without Report/Block',
+        severity: 'medium',
+        description: 'Social interaction features (comments, posts, messaging) detected without corresponding report or block mechanisms. AU SbD Principle 2 requires users to have tools to protect themselves from harmful interactions.',
+        patterns: [
+            /(?:addComment|postComment|submitComment|createComment|commentCreate)\s*(?:=|:|\()/gi,
+            /(?:sendMessage|createMessage|postMessage|submitMessage|messageCreate)\s*(?:=|:|\()/gi,
+            /(?:createPost|submitPost|publishPost|addPost|postCreate)\s*(?:=|:|\()/gi,
+            /(?:addReview|submitReview|createReview|postReview|reviewCreate)\s*(?:=|:|\()/gi,
+            /(?:shareContent|createShare|submitShare)\s*(?:=|:|\()/gi,
+        ],
+        fixSuggestion: 'Implement report and block mechanisms alongside every social feature. Users must be able to report harmful content and block abusive accounts. AU SbD Principle 2: user empowerment and autonomy.',
+        penalty: 'Social features without safety controls',
+        languages: ['typescript', 'javascript', 'python', 'java', 'swift', 'kotlin', 'php']
+    },
+    // AU-SBD-003: Unrestricted Direct Messaging
+    {
+        id: 'AU-SBD-003',
+        name: 'Unrestricted Direct Messaging for Minors',
+        severity: 'critical',
+        description: 'Direct messaging or chat functionality without safety controls (contact restrictions, message filtering, or parental oversight). The AU Online Safety Act requires platforms to take reasonable steps to prevent child exploitation in private communications.',
+        patterns: [
+            /(?:directMessage|sendDM|privateMess|createDM|dmChannel|startChat|privateChat|initiateChat)\s*(?:=|:|\()/gi,
+            /(?:WebSocket|io\.connect|socket\.emit)\s*\([^)]*(?:chat|message|dm|private)/gi,
+            /(?:allowDMs?|enableDMs?|allow_?direct_?message|enable_?private_?message)\s*[:=]\s*true/gi,
+            /(?:contactStranger|messageAnyone|openChat|unrestricted_?message)\s*[:=]\s*true/gi,
+        ],
+        fixSuggestion: 'Add safety controls to messaging: restrict contacts to approved friends, implement message filtering, enable parental oversight, and log communications for safety review. AU Online Safety Act 2021 s.45-46.',
+        penalty: 'Unrestricted private communication channel',
+        languages: ['typescript', 'javascript', 'python', 'java', 'swift', 'kotlin']
+    },
+    // AU-SBD-004: Algorithmic Feeds Without Safety Guardrails
+    {
+        id: 'AU-SBD-004',
+        name: 'Recommendation Algorithm Without Safety Guardrails',
+        severity: 'high',
+        description: 'Content recommendation or feed algorithms detected without safety filtering, content classification, or age-appropriate guardrails. AU SbD requires platforms to assess and mitigate algorithmic harms, particularly for young users.',
+        patterns: [
+            /(?:recommendContent|getRecommendations|suggestContent|personalizedFeed|forYouFeed|contentFeed)\s*(?:=|:|\()/gi,
+            /(?:algorithm|algo)(?:_?feed|_?rank|_?recommend|_?suggest)\s*(?:=|:|\()/gi,
+            /(?:trending|viral|popular)(?:_?content|_?posts|_?feed|_?items)\s*(?:=|:|\()/gi,
+            /(?:engagement_?score|clickBait|engagement_?rank|watch_?next|autoplay_?next)\s*[:=]/gi,
+            /(?:rabbit_?hole|endless_?feed|infinite_?recommend|auto_?suggest)\s*[:=]\s*true/gi,
+        ],
+        fixSuggestion: 'Add age-appropriate content filters to recommendation algorithms. Classify content before serving, implement safety guardrails, and provide transparency on how content is selected. AU SbD Principle 3: transparency and accountability.',
+        penalty: 'Unfiltered algorithmic content delivery',
+        languages: ['typescript', 'javascript', 'python', 'java', 'swift', 'kotlin']
+    },
+    // AU-SBD-005: Missing Digital Wellbeing / Screen Time Controls
+    {
+        id: 'AU-SBD-005',
+        name: 'Engagement Features Without Time Awareness',
+        severity: 'medium',
+        description: 'High-engagement features (autoplay, continuous scrolling, notifications) detected without corresponding digital wellbeing controls (screen time limits, break reminders, usage dashboards). AU SbD encourages platforms to build in digital wellbeing tools.',
+        patterns: [
+            /(?:autoplay|auto_?play)\s*[:=]\s*true/gi,
+            /(?:autoPlay|autoPlayNext|playNext|nextEpisode)\s*[:=]\s*true/gi,
+            /(?:continuous_?play|binge_?mode|marathon_?mode|watch_?party)\s*[:=]\s*true/gi,
+            /(?:push_?notification|sendNotification|scheduleNotif|notif_?trigger).*(?:re_?engage|comeback|miss_?you|inactive)/gi,
+            /(?:daily_?reward|login_?bonus|daily_?streak|come_?back_?reward)\s*(?:=|:|\()/gi,
+        ],
+        fixSuggestion: 'Implement digital wellbeing features: screen time dashboards, break reminders after sustained use, and configurable usage limits (especially for accounts under 18). AU SbD: promote healthy technology use.',
+        penalty: 'Engagement-maximizing features without wellbeing controls',
+        languages: ['typescript', 'javascript', 'python', 'java', 'swift', 'kotlin']
+    },
+    // AU-SBD-006: Location Sharing Without Explicit Opt-In
+    {
+        id: 'AU-SBD-006',
+        name: 'Location Data Without Explicit Consent',
+        severity: 'critical',
+        description: 'Location data collection or sharing enabled without explicit, informed opt-in. AU SbD and the Privacy Act 1988 require data minimization, especially for children\'s geolocation data — location should never be collected by default.',
+        patterns: [
+            /(?:shareLocation|share_?location|locationSharing|broadcastLocation)\s*[:=]\s*true/gi,
+            /(?:location_?visible|show_?location|display_?location|location_?public)\s*[:=]\s*true/gi,
+            /(?:trackLocation|location_?tracking|geo_?tracking|locationTracker)\s*[:=]\s*true/gi,
+            /navigator\.geolocation\.(?:watchPosition|getCurrentPosition)\s*\(/gi,
+            /(?:CLLocationManager|LocationManager|FusedLocationProvider).*(?:startUpdating|requestLocation|requestLocationUpdates)/gi,
+        ],
+        fixSuggestion: 'Require explicit opt-in for any location data collection. Never enable location sharing by default. For minors, require parental consent before any geolocation access. AU Privacy Act 1988 APP 3.2.',
+        penalty: 'Default location data exposure',
+        languages: ['typescript', 'javascript', 'python', 'java', 'swift', 'kotlin']
+    }
+];
 /**
  * Parse a .haloignore file content
  *
@@ -776,26 +1140,75 @@ class HaloEngine {
     constructor(config = {}) {
         this.config = config;
         this.treeSitter = new TreeSitterParser();
-        // Load rules - first try YAML if path provided, otherwise use hardcoded rules
-        let loadedRules = [];
-        if (config.rulesPath) {
-            // Load from YAML file
-            loadedRules = loadRulesFromYAML(config.rulesPath);
+        // Rule loading priority chain:
+        // 1. config.loadedRules — pre-compiled rules from CLI API fetch
+        // 2. config.rulesPath — YAML file (legacy)
+        // 3. config.packs — load from bundled rules.json filtered by pack
+        // 4. Default — hardcoded arrays with legacy boolean flags
+        if (config.loadedRules && config.loadedRules.length > 0) {
+            // Priority 1: Pre-loaded rules (from CLI API fetch or external source)
+            this.rules = config.loadedRules;
+        }
+        else if (config.rulesPath) {
+            // Priority 2: YAML file (legacy)
+            const yamlRules = loadRulesFromYAML(config.rulesPath);
+            this.rules = yamlRules.length > 0 ? yamlRules : exports.COPPA_RULES;
         }
-        // If no YAML rules loaded, fall back to hardcoded COPPA_RULES
-        this.rules = loadedRules.length > 0
-            ? loadedRules
-            : (config.rules
+        else if (config.packs) {
+            // Priority 3: Load from bundled rules.json by pack IDs
+            const jsonRules = this.loadBundledRulesByPack(config.packs);
+            this.rules = jsonRules.length > 0 ? jsonRules : exports.COPPA_RULES;
+        }
+        else {
+            // Priority 4: Hardcoded arrays with legacy boolean flags
+            this.rules = config.rules
                 ? exports.COPPA_RULES.filter(r => config.rules.includes(r.id))
-                : exports.COPPA_RULES);
-        // Add Ethical Design Rules if enabled (Sprint 5 Preview)
-        if (config.ethical) {
-            this.rules = [...this.rules, ...exports.ETHICAL_RULES];
+                : exports.COPPA_RULES;
+            // Append optional packs via legacy boolean flags
+            if (config.ethical) {
+                this.rules = [...this.rules, ...exports.ETHICAL_RULES];
+            }
+            if (config.aiAudit) {
+                this.rules = [...this.rules, ...exports.AI_AUDIT_RULES];
+            }
+            if (config.sectorAuSbd) {
+                this.rules = [...this.rules, ...exports.AU_SBD_RULES];
+            }
         }
         if (config.severityFilter) {
             this.rules = this.rules.filter(r => config.severityFilter.includes(r.severity));
         }
     }
+    /**
+     * Load rules from the bundled rules.json file, filtered by pack IDs.
+     * Falls back to empty array if rules.json not found.
+     */
+    loadBundledRulesByPack(packIds) {
+        try {
+            const jsonPath = path.resolve(__dirname, '..', 'rules', 'rules.json');
+            return loadRulesFromJSONByPack(jsonPath, packIds);
+        }
+        catch (error) {
+            return [];
+        }
+    }
+    /**
+     * Resolve legacy boolean flags to pack IDs.
+     * Maps ethical/aiAudit/sectorAuSbd booleans to their pack ID equivalents.
+     * Always includes 'coppa' as the base pack.
+     */
+    static resolvePacks(config) {
+        if (config.packs)
+            return config.packs;
+        const packs = ['coppa'];
+        if (config.ethical)
+            packs.push('ethical');
+        if (config.aiAudit)
+            packs.push('ai-audit');
+        if (config.sectorAuSbd)
+            packs.push('au-sbd');
+        return packs;
+    }
     /**
      * Get the tree-sitter parser for advanced AST analysis
      */
@@ -916,7 +1329,8 @@ class HaloEngine {
                     const trimmedLine = lineContent.trim();
                     if (trimmedLine.startsWith('//') || trimmedLine.startsWith('/*') || trimmedLine.startsWith('*') || trimmedLine.startsWith('<!--') || trimmedLine.startsWith('#')) {
                         // Exception: don't skip halo-ignore comments (those are suppression directives)
-                        if (!trimmedLine.includes('halo-ignore')) {
+                        // Exception: AI-AUDIT-006 intentionally scans comments for compliance TODOs
+                        if (!trimmedLine.includes('halo-ignore') && rule.id !== 'AI-AUDIT-006') {
                             continue;
                         }
                     }
@@ -989,7 +1403,7 @@ class HaloEngine {
      * Get rule by ID
      */
     getRule(ruleId) {
-        return exports.COPPA_RULES.find(r => r.id === ruleId);
+        return this.rules.find(r => r.id === ruleId) || exports.COPPA_RULES.find(r => r.id === ruleId);
     }
     /**
      * Explain a rule (for MCP)