@securecode-ai/mcp 0.1.0 → 0.2.0

package/dist/poc/lightpandaExecutor.js

@@ -0,0 +1,263 @@
+"use strict";
+/**
+ * Phase F — Lightpanda POC executor.
+ *
+ * Runs POCs that need a real browser engine (DOM-based XSS, client-side
+ * validation bypass) via Lightpanda's headless browser. Generates a
+ * PandaScript, runs it with `lightpanda agent <script.js>` (no LLM, no
+ * API key — deterministic replay), and parses the JSON output.
+ *
+ * Lightpanda is optional: if the binary is not on PATH, the executor
+ * returns a "not verified" result with install instructions. The
+ * existing SandboxRunner handles HTTP-based POCs independently.
+ *
+ * Install: curl -fsSL https://pkg.lightpanda.io/install.sh | bash
+ * Docs: https://lightpanda.io/docs
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isLightpandaAvailable = isLightpandaAvailable;
+exports._resetAvailabilityCache = _resetAvailabilityCache;
+exports.generatePandaScript = generatePandaScript;
+exports.executeWithLightpanda = executeWithLightpanda;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+// ── Binary detection ────────────────────────────────────────────────────────
+let _available = null;
+/**
+ * Check if the Lightpanda binary is on PATH. Memoized — the check runs
+ * execSync which is expensive, so we cache the result for the process
+ * lifetime.
+ */
+function isLightpandaAvailable() {
+    if (_available !== null)
+        return _available;
+    try {
+        (0, child_process_1.execSync)('lightpanda --version', { stdio: 'ignore', timeout: 5000 });
+        _available = true;
+    }
+    catch {
+        _available = false;
+    }
+    return _available;
+}
+/** Reset the availability cache (for tests). */
+function _resetAvailabilityCache() {
+    _available = null;
+}
+// ── PandaScript generation ──────────────────────────────────────────────────
+/**
+ * Generate a PandaScript for the given POC request.
+ *
+ * The script uses Lightpanda's native page API (goto, fill, click, extract)
+ * — no LLM at runtime. The last expression auto-prints as JSON.
+ */
+function generatePandaScript(req) {
+    const baseUrl = req.endpoint.baseUrl || 'http://127.0.0.1:3000';
+    const fullPath = req.endpoint.path.startsWith('/')
+        ? req.endpoint.path
+        : '/' + req.endpoint.path;
+    const url = baseUrl + fullPath;
+    const payload = req.payload || '<script>alert(1)</script>';
+    // XSS: navigate to the endpoint with the payload, check if it appears
+    // unescaped in the rendered DOM.
+    if (req.vulnType === 'xss') {
+        const injectionPoint = req.injectionPoint || 'query';
+        const paramName = req.paramName || 'q';
+        if (injectionPoint === 'query') {
+            // Query parameter injection: navigate directly to the URL with payload
+            const injectUrl = `${url}${url.includes('?') ? '&' : '?'}${paramName}=${encodeURIComponent(payload)}`;
+            return [
+                `// PandaScript — XSS POC (query injection)`,
+                `// Generated by SecureCode Phase F`,
+                `const page = new Page();`,
+                `await page.goto(${JSON.stringify(injectUrl)});`,
+                `const result = page.extract([{ selector: 'body', fields: { content: '' } }]);`,
+                `const bodyContent = result[0]?.content || '';`,
+                `const payload = ${JSON.stringify(payload)};`,
+                `const exploited = bodyContent.includes(payload);`,
+                `return { exploited, evidence: exploited ? 'Payload found unescaped in rendered DOM' : 'Payload not found in DOM (may be sanitized)' };`,
+            ].join('\n');
+        }
+        if (injectionPoint === 'body') {
+            // Body injection: fill a form field and submit
+            return [
+                `// PandaScript — XSS POC (body injection)`,
+                `// Generated by SecureCode Phase F`,
+                `const page = new Page();`,
+                `await page.goto(${JSON.stringify(url)});`,
+                `await page.fill('input[name=${JSON.stringify(paramName)}], input[type="text"], textarea', ${JSON.stringify(payload)});`,
+                `await page.click('button[type="submit"], input[type="submit"], button');`,
+                `const result = page.extract([{ selector: 'body', fields: { content: '' } }]);`,
+                `const bodyContent = result[0]?.content || '';`,
+                `const payload = ${JSON.stringify(payload)};`,
+                `const exploited = bodyContent.includes(payload);`,
+                `return { exploited, evidence: exploited ? 'Payload found unescaped in rendered DOM after form submission' : 'Payload not found in DOM (may be sanitized or form selector mismatch)' };`,
+            ].join('\n');
+        }
+        // Default: navigate directly and check
+        return [
+            `// PandaScript — XSS POC (direct navigation)`,
+            `const page = new Page();`,
+            `await page.goto(${JSON.stringify(url)});`,
+            `const result = page.extract([{ selector: 'body', fields: { content: '' } }]);`,
+            `const bodyContent = result[0]?.content || '';`,
+            `const payload = ${JSON.stringify(payload)};`,
+            `const exploited = bodyContent.includes(payload);`,
+            `return { exploited, evidence: exploited ? 'Payload found in DOM' : 'Payload not found in DOM' };`,
+        ].join('\n');
+    }
+    // Open redirect: navigate and check the final URL
+    if (req.vulnType === 'open_redirect') {
+        const paramName = req.paramName || 'url';
+        const redirectUrl = `${url}${url.includes('?') ? '&' : '?'}${paramName}=${encodeURIComponent(req.payload || 'https://evil.com')}`;
+        return [
+            `// PandaScript — Open Redirect POC`,
+            `const page = new Page();`,
+            `await page.goto(${JSON.stringify(redirectUrl)});`,
+            `const finalUrl = page.getUrl();`,
+            `const target = ${JSON.stringify(req.payload || 'https://evil.com')};`,
+            `const exploited = finalUrl.includes(target);`,
+            `return { exploited, evidence: exploited ? 'Redirected to ' + finalUrl : 'Did not redirect to target (stayed at ' + finalUrl + ')' };`,
+        ].join('\n');
+    }
+    // Generic fallback: navigate and extract page content
+    return [
+        `// PandaScript — Generic POC`,
+        `const page = new Page();`,
+        `await page.goto(${JSON.stringify(url)});`,
+        `const result = page.extract([{ selector: 'body', fields: { content: '' } }]);`,
+        `return { exploited: false, evidence: 'No specific POC pattern for ${req.vulnType}; page content: ' + (result[0]?.content || '').slice(0, 500) };`,
+    ].join('\n');
+}
+// ── Execution ───────────────────────────────────────────────────────────────
+/**
+ * Execute a POC using Lightpanda.
+ *
+ * Generates a PandaScript, writes it to a temp file, runs
+ * `lightpanda agent <script.js>` (no LLM, deterministic), and parses the
+ * JSON output.
+ *
+ * Returns a "not verified" result when Lightpanda is not installed.
+ */
+async function executeWithLightpanda(req) {
+    if (!isLightpandaAvailable()) {
+        return {
+            exploitable: false,
+            timedOut: false,
+            evidence: 'Lightpanda binary not found on PATH. Install: curl -fsSL https://pkg.lightpanda.io/install.sh | bash',
+            backend: 'none',
+        };
+    }
+    const script = generatePandaScript(req);
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'securecode-poc-'));
+    const scriptPath = path.join(tmpDir, 'poc.js');
+    try {
+        fs.writeFileSync(scriptPath, script, 'utf8');
+        // Run the PandaScript with Lightpanda (no LLM, no API key)
+        const result = await new Promise((resolve) => {
+            const child = (0, child_process_1.spawn)('lightpanda', ['agent', scriptPath], {
+                stdio: ['pipe', 'pipe', 'pipe'],
+                shell: true,
+                timeout: 10_000, // 10s timeout
+            });
+            let stdout = '';
+            let stderr = '';
+            let timedOut = false;
+            child.stdout?.on('data', (chunk) => { stdout += chunk.toString(); });
+            child.stderr?.on('data', (chunk) => { stderr += chunk.toString(); });
+            child.on('close', (code) => {
+                if (timedOut)
+                    return; // timeout handler already resolved
+                try {
+                    // Lightpanda agent prints the last expression as JSON to stdout
+                    const output = stdout.trim();
+                    const parsed = JSON.parse(output);
+                    resolve({
+                        exploitable: Boolean(parsed.exploited),
+                        output: parsed.evidence || output,
+                        timedOut: false,
+                        evidence: parsed.evidence || 'POC executed via Lightpanda',
+                        pocScript: script,
+                        backend: 'lightpanda',
+                    });
+                }
+                catch {
+                    resolve({
+                        exploitable: false,
+                        output: stdout.slice(0, 500),
+                        error: stderr.slice(0, 500) || 'Failed to parse Lightpanda output',
+                        timedOut: false,
+                        evidence: 'Lightpanda ran but the output was not parseable JSON',
+                        pocScript: script,
+                        backend: 'lightpanda',
+                    });
+                }
+            });
+            child.on('error', (err) => {
+                resolve({
+                    exploitable: false,
+                    error: err.message,
+                    timedOut: false,
+                    evidence: `Lightpanda failed to start: ${err.message}`,
+                    pocScript: script,
+                    backend: 'lightpanda',
+                });
+            });
+            const timer = setTimeout(() => {
+                timedOut = true;
+                child.kill('SIGKILL');
+                resolve({
+                    exploitable: false,
+                    timedOut: true,
+                    evidence: 'POC timed out after 10s',
+                    pocScript: script,
+                    backend: 'lightpanda',
+                });
+            }, 10_000);
+            timer.unref?.();
+        });
+        return result;
+    }
+    finally {
+        try {
+            fs.rmSync(tmpDir, { recursive: true, force: true });
+        }
+        catch { /* best-effort */ }
+    }
+}
+//# sourceMappingURL=lightpandaExecutor.js.map

package/dist/poc/lightpandaExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lightpandaExecutor.js","sourceRoot":"","sources":["../../src/poc/lightpandaExecutor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBH,sDASC;AAGD,0DAEC;AAUD,kDAmFC;AAaD,sDAwFC;AA/ND,iDAAgD;AAChD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAGzB,+EAA+E;AAE/E,IAAI,UAAU,GAAmB,IAAI,CAAC;AAEtC;;;;GAIG;AACH,SAAgB,qBAAqB;IACjC,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAC3C,IAAI,CAAC;QACD,IAAA,wBAAQ,EAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAS,CAAC,CAAC;QAC5E,UAAU,GAAG,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACL,UAAU,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,gDAAgD;AAChD,SAAgB,uBAAuB;IACnC,UAAU,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,+EAA+E;AAE/E;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,GAAe;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,uBAAuB,CAAC;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAC9C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;QACnB,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC9B,MAAM,GAAG,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,2BAA2B,CAAC;IAE3D,sEAAsE;IACtE,iCAAiC;IACjC,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,cAAc,GAAG,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC;QACrD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC;QAEvC,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;YAC7B,uEAAuE;YACvE,MAAM,SAAS,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YACtG,OAAO;gBACH,4CAA4C;gBAC5C,oCAAoC;gBACpC,0BAA0B;gBAC1B,mBAAmB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI;gBAChD,+EAA+E;gBAC/E,+CAA+C;gBAC/C,mBAAmB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG;gBAC7C,kDAAkD;gBAClD,wIAAwI;aAC3I,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;YAC5B,+CAA+C;YAC/C,OAAO;gBACH,2CAA2C;gBAC3C,oCAAoC;gBACpC,0BAA0B;gBAC1B,mBAAmB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI;gBAC1C,+BAA+B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI;gBACxH,0EAA0E;gBAC1E,+EAA+E;gBAC/E,+CAA+C;gBAC/C,mBAAmB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG;gBAC7C,kDAAkD;gBAClD,wLAAwL;aAC3L,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAED,uCAAuC;QACvC,OAAO;YACH,8CAA8C;YAC9C,0BAA0B;YAC1B,mBAAmB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI;YAC1C,+EAA+E;YAC/E,+CAA+C;YAC/C,mBAAmB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG;YAC7C,kDAAkD;YAClD,kGAAkG;SACrG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,kDAAkD;IAClD,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,MAAM,WAAW,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,IAAI,kBAAkB,CAAC,EAAE,CAAC;QAClI,OAAO;YACH,oCAAoC;YACpC,0BAA0B;YAC1B,mBAAmB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI;YAClD,iCAAiC;YACjC,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,IAAI,kBAAkB,CAAC,GAAG;YACtE,8CAA8C;YAC9C,sIAAsI;SACzI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,sDAAsD;IACtD,OAAO;QACH,8BAA8B;QAC9B,0BAA0B;QAC1B,mBAAmB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI;QAC1C,+EAA+E;QAC/E,qEAAqE,GAAG,CAAC,QAAQ,iEAAiE;KACrJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;GAQG;AACI,KAAK,UAAU,qBAAqB,CAAC,GAAe;IACvD,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC3B,OAAO;YACH,WAAW,EAAE,KAAK;YAClB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,sGAAsG;YAChH,OAAO,EAAE,MAAM;SAClB,CAAC;IACN,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE/C,IAAI,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAE7C,2DAA2D;QAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;YACpD,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,YAAY,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE;gBACrD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,MAAM,EAAG,cAAc;aACnC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE7E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACvB,IAAI,QAAQ;oBAAE,OAAO,CAAE,mCAAmC;gBAC1D,IAAI,CAAC;oBACD,gEAAgE;oBAChE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAClC,OAAO,CAAC;wBACJ,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;wBACtC,MAAM,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM;wBACjC,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,6BAA6B;wBAC1D,SAAS,EAAE,MAAM;wBACjB,OAAO,EAAE,YAAY;qBACxB,CAAC,CAAC;gBACP,CAAC;gBAAC,MAAM,CAAC;oBACL,OAAO,CAAC;wBACJ,WAAW,EAAE,KAAK;wBAClB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,mCAAmC;wBAClE,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,sDAAsD;wBAChE,SAAS,EAAE,MAAM;wBACjB,OAAO,EAAE,YAAY;qBACxB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtB,OAAO,CAAC;oBACJ,WAAW,EAAE,KAAK;oBAClB,KAAK,EAAE,GAAG,CAAC,OAAO;oBAClB,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,+BAA+B,GAAG,CAAC,OAAO,EAAE;oBACtD,SAAS,EAAE,MAAM;oBACjB,OAAO,EAAE,YAAY;iBACxB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,OAAO,CAAC;oBACJ,WAAW,EAAE,KAAK;oBAClB,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,yBAAyB;oBACnC,SAAS,EAAE,MAAM;oBACjB,OAAO,EAAE,YAAY;iBACxB,CAAC,CAAC;YACP,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAClB,CAAC;YAAS,CAAC;QACP,IAAI,CAAC;YAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC5F,CAAC;AACL,CAAC"}

package/dist/poc/pocExecutor.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Phase F — POC Executor (main entry point).
+ *
+ * Verifies whether a Juror VULNERABLE verdict is actually exploitable by
+ * running the POC against the live application. Routes to the appropriate
+ * backend:
+ *
+ *   - DOM vulns (XSS) → Lightpanda (real browser engine, DOM rendering)
+ *   - HTTP vulns (SQLi, SSRF, redirect) → HTTP executor (raw HTTP)
+ *   - Non-web vulns (cmd injection, proto pollution) → none (already
+ *     proven by the taint tracker / guard evaluator)
+ *
+ * Lightpanda is optional: if the binary is not installed, DOM POCs return
+ * a "not verified" result with install instructions. The existing
+ * SandboxRunner handles complex attack scenarios independently.
+ *
+ * No `isolated-vm`: command injection and prototype pollution are already
+ * proven deterministically by the taint tracker (Phase C). The HTTP
+ * executor covers server-side vulns. Lightpanda covers DOM vulns. Nothing
+ * else needs a sandbox.
+ */
+import type { PocRequest, PocResult } from './pocTypes';
+export type { PocRequest, PocResult, PocEndpoint } from './pocTypes';
+export { routePoc } from './pocRouter';
+export { isLightpandaAvailable } from './lightpandaExecutor';
+export { executeWithLightpanda } from './lightpandaExecutor';
+export { executeWithHttp } from './httpPocExecutor';
+/**
+ * Execute a POC against the live application.
+ *
+ * Routes to the appropriate backend based on the vulnerability type:
+ *   - XSS → Lightpanda (if available)
+ *   - SQLi, SSRF, redirect → HTTP executor
+ *   - Others → none (deterministic analysis already covers them)
+ *
+ * @param req  the POC request
+ * @returns the execution result
+ */
+export declare function executePoc(req: PocRequest): Promise<PocResult>;
+/**
+ * Execute multiple POCs in parallel.
+ *
+ * @param requests  array of POC requests
+ * @returns array of results (same order as input)
+ */
+export declare function executePocs(requests: PocRequest[]): Promise<PocResult[]>;

package/dist/poc/pocExecutor.js

@@ -0,0 +1,74 @@
+"use strict";
+/**
+ * Phase F — POC Executor (main entry point).
+ *
+ * Verifies whether a Juror VULNERABLE verdict is actually exploitable by
+ * running the POC against the live application. Routes to the appropriate
+ * backend:
+ *
+ *   - DOM vulns (XSS) → Lightpanda (real browser engine, DOM rendering)
+ *   - HTTP vulns (SQLi, SSRF, redirect) → HTTP executor (raw HTTP)
+ *   - Non-web vulns (cmd injection, proto pollution) → none (already
+ *     proven by the taint tracker / guard evaluator)
+ *
+ * Lightpanda is optional: if the binary is not installed, DOM POCs return
+ * a "not verified" result with install instructions. The existing
+ * SandboxRunner handles complex attack scenarios independently.
+ *
+ * No `isolated-vm`: command injection and prototype pollution are already
+ * proven deterministically by the taint tracker (Phase C). The HTTP
+ * executor covers server-side vulns. Lightpanda covers DOM vulns. Nothing
+ * else needs a sandbox.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeWithHttp = exports.executeWithLightpanda = exports.isLightpandaAvailable = exports.routePoc = void 0;
+exports.executePoc = executePoc;
+exports.executePocs = executePocs;
+const pocRouter_1 = require("./pocRouter");
+const lightpandaExecutor_1 = require("./lightpandaExecutor");
+const httpPocExecutor_1 = require("./httpPocExecutor");
+var pocRouter_2 = require("./pocRouter");
+Object.defineProperty(exports, "routePoc", { enumerable: true, get: function () { return pocRouter_2.routePoc; } });
+var lightpandaExecutor_2 = require("./lightpandaExecutor");
+Object.defineProperty(exports, "isLightpandaAvailable", { enumerable: true, get: function () { return lightpandaExecutor_2.isLightpandaAvailable; } });
+var lightpandaExecutor_3 = require("./lightpandaExecutor");
+Object.defineProperty(exports, "executeWithLightpanda", { enumerable: true, get: function () { return lightpandaExecutor_3.executeWithLightpanda; } });
+var httpPocExecutor_2 = require("./httpPocExecutor");
+Object.defineProperty(exports, "executeWithHttp", { enumerable: true, get: function () { return httpPocExecutor_2.executeWithHttp; } });
+/**
+ * Execute a POC against the live application.
+ *
+ * Routes to the appropriate backend based on the vulnerability type:
+ *   - XSS → Lightpanda (if available)
+ *   - SQLi, SSRF, redirect → HTTP executor
+ *   - Others → none (deterministic analysis already covers them)
+ *
+ * @param req  the POC request
+ * @returns the execution result
+ */
+async function executePoc(req) {
+    const backend = (0, pocRouter_1.routePoc)(req.vulnType);
+    switch (backend) {
+        case 'lightpanda':
+            return (0, lightpandaExecutor_1.executeWithLightpanda)(req);
+        case 'http':
+            return (0, httpPocExecutor_1.executeWithHttp)(req);
+        case 'none':
+            return {
+                exploitable: false,
+                timedOut: false,
+                evidence: `POC verification not applicable for ${req.vulnType} — already proven by deterministic analysis (taint tracker / guard evaluator)`,
+                backend: 'none',
+            };
+    }
+}
+/**
+ * Execute multiple POCs in parallel.
+ *
+ * @param requests  array of POC requests
+ * @returns array of results (same order as input)
+ */
+async function executePocs(requests) {
+    return Promise.all(requests.map(req => executePoc(req)));
+}
+//# sourceMappingURL=pocExecutor.js.map

package/dist/poc/pocExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pocExecutor.js","sourceRoot":"","sources":["../../src/poc/pocExecutor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAyBH,gCAkBC;AAQD,kCAEC;AAlDD,2CAAuC;AACvC,6DAAoF;AACpF,uDAAoD;AAIpD,yCAAuC;AAA9B,qGAAA,QAAQ,OAAA;AACjB,2DAA6D;AAApD,2HAAA,qBAAqB,OAAA;AAC9B,2DAA6D;AAApD,2HAAA,qBAAqB,OAAA;AAC9B,qDAAoD;AAA3C,kHAAA,eAAe,OAAA;AAExB;;;;;;;;;;GAUG;AACI,KAAK,UAAU,UAAU,CAAC,GAAe;IAC5C,MAAM,OAAO,GAAG,IAAA,oBAAQ,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEvC,QAAQ,OAAO,EAAE,CAAC;QACd,KAAK,YAAY;YACb,OAAO,IAAA,0CAAqB,EAAC,GAAG,CAAC,CAAC;QAEtC,KAAK,MAAM;YACP,OAAO,IAAA,iCAAe,EAAC,GAAG,CAAC,CAAC;QAEhC,KAAK,MAAM;YACP,OAAO;gBACH,WAAW,EAAE,KAAK;gBAClB,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,uCAAuC,GAAG,CAAC,QAAQ,+EAA+E;gBAC5I,OAAO,EAAE,MAAM;aAClB,CAAC;IACV,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,WAAW,CAAC,QAAsB;IACpD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC"}

package/dist/poc/pocRouter.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Phase F — POC router.
+ *
+ * Decides which backend handles a POC based on the vulnerability type.
+ *
+ * - DOM vulns (XSS) → Lightpanda (needs a real browser to render JS/DOM)
+ * - HTTP vulns (SQLi, SSRF, redirect) → HTTP executor (raw HTTP suffices)
+ * - Non-web vulns (command injection, proto pollution, crypto) → none
+ *   (already proven deterministically by the taint tracker / guard evaluator)
+ */
+/** Which backend should handle this POC. */
+export type PocBackend = 'lightpanda' | 'http' | 'none';
+/**
+ * Route a POC to the appropriate backend based on the vulnerability type.
+ *
+ * Returns 'none' for vulnerability types that are already covered by
+ * deterministic analysis (taint tracker, guard evaluator) and don't
+ * benefit from runtime POC verification.
+ */
+export declare function routePoc(vulnType: string): PocBackend;

package/dist/poc/pocRouter.js

@@ -0,0 +1,40 @@
+"use strict";
+/**
+ * Phase F — POC router.
+ *
+ * Decides which backend handles a POC based on the vulnerability type.
+ *
+ * - DOM vulns (XSS) → Lightpanda (needs a real browser to render JS/DOM)
+ * - HTTP vulns (SQLi, SSRF, redirect) → HTTP executor (raw HTTP suffices)
+ * - Non-web vulns (command injection, proto pollution, crypto) → none
+ *   (already proven deterministically by the taint tracker / guard evaluator)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.routePoc = routePoc;
+/** Vulnerability types that need a real browser (DOM rendering). */
+const DOM_VULN_TYPES = new Set([
+    'xss',
+]);
+/** Vulnerability types that can be verified via raw HTTP. */
+const HTTP_VULN_TYPES = new Set([
+    'sql_injection',
+    'nosql_injection',
+    'ssrf',
+    'open_redirect',
+    'broken_access_control',
+]);
+/**
+ * Route a POC to the appropriate backend based on the vulnerability type.
+ *
+ * Returns 'none' for vulnerability types that are already covered by
+ * deterministic analysis (taint tracker, guard evaluator) and don't
+ * benefit from runtime POC verification.
+ */
+function routePoc(vulnType) {
+    if (DOM_VULN_TYPES.has(vulnType))
+        return 'lightpanda';
+    if (HTTP_VULN_TYPES.has(vulnType))
+        return 'http';
+    return 'none';
+}
+//# sourceMappingURL=pocRouter.js.map

package/dist/poc/pocRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pocRouter.js","sourceRoot":"","sources":["../../src/poc/pocRouter.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AA0BH,4BAIC;AAzBD,oEAAoE;AACpE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC3B,KAAK;CACR,CAAC,CAAC;AAEH,6DAA6D;AAC7D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC5B,eAAe;IACf,iBAAiB;IACjB,MAAM;IACN,eAAe;IACf,uBAAuB;CAC1B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,SAAgB,QAAQ,CAAC,QAAgB;IACrC,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAC;IACtD,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/poc/pocTypes.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Phase F — POC Executor types.
+ *
+ * The POC executor verifies whether a Juror VULNERABLE verdict is actually
+ * exploitable by running the POC against the live application. It routes
+ * to either Lightpanda (DOM-based vulns that need a real browser) or a
+ * simple HTTP executor (server-side vulns where raw HTTP suffices).
+ *
+ * No `isolated-vm` — command injection and prototype pollution are already
+ * proven deterministically by the taint tracker (Phase C), and the existing
+ * SandboxRunner handles complex attack scenarios. This executor is a thin
+ * verification layer for the Juror's POC claims.
+ */
+/** The target endpoint for the POC. */
+export interface PocEndpoint {
+    method: string;
+    path: string;
+    /** Base URL of the running app, e.g. http://127.0.0.1:3000 */
+    baseUrl?: string;
+}
+/** A request to execute a POC. */
+export interface PocRequest {
+    /** Canonical vulnerability type: xss, sql_injection, open_redirect, etc. */
+    vulnType: string;
+    /** The POC description from the Juror's `attack_example`. */
+    poc: string;
+    /** The target endpoint. */
+    endpoint: PocEndpoint;
+    /** The attack payload to inject (extracted from the POC or provided directly). */
+    payload?: string;
+    /** What a successful exploit looks like (from the Juror). */
+    expectedBehavior?: string;
+    /** Where to inject the payload: 'query', 'body', 'path', 'header'. */
+    injectionPoint?: 'query' | 'body' | 'path' | 'header';
+    /** Parameter name for the injection (e.g. 'q' for ?q=payload). */
+    paramName?: string;
+}
+/** The result of running a POC. */
+export interface PocResult {
+    /** True if the exploit was confirmed. */
+    exploitable: boolean;
+    /** What the executor observed. */
+    output?: string;
+    /** Error message when the executor itself failed. */
+    error?: string;
+    /** True when the POC timed out. */
+    timedOut: boolean;
+    /** Why this proves/disproves exploitability. */
+    evidence: string;
+    /** Replayable PandaScript (when Lightpanda was used). */
+    pocScript?: string;
+    /** Which backend was used. */
+    backend: 'lightpanda' | 'http' | 'none';
+}

package/dist/poc/pocTypes.js

@@ -0,0 +1,16 @@
+"use strict";
+/**
+ * Phase F — POC Executor types.
+ *
+ * The POC executor verifies whether a Juror VULNERABLE verdict is actually
+ * exploitable by running the POC against the live application. It routes
+ * to either Lightpanda (DOM-based vulns that need a real browser) or a
+ * simple HTTP executor (server-side vulns where raw HTTP suffices).
+ *
+ * No `isolated-vm` — command injection and prototype pollution are already
+ * proven deterministically by the taint tracker (Phase C), and the existing
+ * SandboxRunner handles complex attack scenarios. This executor is a thin
+ * verification layer for the Juror's POC claims.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=pocTypes.js.map

package/dist/poc/pocTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pocTypes.js","sourceRoot":"","sources":["../../src/poc/pocTypes.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG"}

package/dist/project-map/fixTester.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Phase H — Fix Regression Tester.
+ *
+ * Verifies that a fix doesn't break existing behavior or introduce new
+ * vulnerabilities by running a differential analysis on the original and
+ * fixed code.
+ *
+ * Algorithm:
+ *   1. Syntax check: parse the fixed code — if it doesn't parse, syntaxValid = false
+ *   2. Differential analysis: run the AST Sink Finder (Phase B) + Taint Tracker
+ *      (Phase C) on both original and fixed code
+ *      - Original had a tainted sink + fixed doesn't → fix is effective
+ *      - Fixed code has a new tainted sink → newVulnerabilities
+ *      - Fixed code has a new sink not in original → newVulnerabilities
+ *   3. Functional regression: check if the fix changed the code structure
+ *      in ways that could break behavior (removed functions, changed signatures)
+ *
+ * No runtime execution needed — the POC Executor (Phase F) handles that.
+ * The fix tester is purely static: it compares the AST analysis results.
+ */
+import type { SinkLanguage } from './sinkRegistry';
+export interface FixTestResult {
+    /** True if the fix passes all checks (syntax valid, no new vulns, effective). */
+    passes: boolean;
+    /** True if the fixed code parses without syntax errors. */
+    syntaxValid: boolean;
+    /** True if the fix actually removed the original vulnerability. */
+    fixEffective: boolean;
+    /** New vulnerabilities introduced by the fix. */
+    newVulnerabilities: string[];
+    /** Behavioral regressions detected (removed functions, changed signatures). */
+    regressions: string[];
+    /** Individual test results. */
+    tests: {
+        name: string;
+        passed: boolean;
+        error?: string;
+    }[];
+}
+export interface FixTestOptions {
+    /** The canonical vulnerability type being fixed (e.g. 'sql_injection'). */
+    vulnType?: string;
+    /** The line of the original vulnerability. */
+    vulnLine?: number;
+}
+/**
+ * Test a fix by comparing the original and fixed code statically.
+ *
+ * @param originalCode  the original source code
+ * @param fixedCode     the fixed source code
+ * @param language      the source language
+ * @param options       optional test options (vulnType, vulnLine)
+ * @returns the test result
+ */
+export declare function testFix(originalCode: string, fixedCode: string, language: SinkLanguage, options?: FixTestOptions): Promise<FixTestResult>;