@securecode-ai/mcp 0.5.5 → 0.5.6

package/dist/utils/localTestRunner.js

@@ -1,131 +1,138 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
+/**
+ * Local test runner — drives execution of LLM-generated verification tests
+ * through the verification sandbox.
+ *
+ * SECURITY MODEL (post-rewrite):
+ *   1. `checkTestSafety()` runs first as defense-in-depth. If it blocks,
+ *      we return early without spawning anything.
+ *   2. `detectSandbox()` returns the best available real isolation backend
+ *      (Docker preferred, Deno as a JS/TS-only fallback). If neither is
+ *      available, this runner returns `sandbox-unavailable` — it does NOT
+ *      fall back to executing the script with host privileges.
+ *   3. The sandbox backend executes the script with no network, a
+ *      read-only workspace, a tmpfs /tmp, capped CPU/memory/pids, and a
+ *      scrubbed env (only NODE_ENV and PATH). The verdict is parsed from
+ *      stdout/stderr against `/PASS:/` and `/FAIL:/` markers.
+ *
+ * The previous implementation spread the full `process.env` into the
+ * child and ran via `execFileSync` with no isolation. That allowed
+ * prompt-injected content in scanned source to ride into the
+ * verify-generate prompt and produce a test that exfiltrated secrets.
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.SANDBOX_UNAVAILABLE_MESSAGE = void 0;
 exports.runLocalTest = runLocalTest;
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const child_process_1 = require("child_process");
+exports.runTestCommand = runTestCommand;
 const testSafety_1 = require("./testSafety");
-const PASS_PATTERN = /^PASS:\s*(.+)$/m;
-const FAIL_PATTERN = /^FAIL:\s*(.+)$/m;
-const TIMEOUT_MS = 30_000;
-async function runLocalTest(script, runner, workspaceRoot) {
+const effectMock_1 = require("./effectMock");
+const verificationSandbox_1 = require("./verificationSandbox");
+const DEFAULT_TIMEOUT_MS = 30_000;
+/**
+ * The message shown when no isolation backend is available. Exported so the
+ * agent-scan tool can reuse it in its top-level `verifyHint` (instead of
+ * every finding carrying the full text in its `provenReason`).
+ *
+ * Why this matters: without a sandbox, the verify loop returns INCONCLUSIVE
+ * for every high/medium finding. The headline differentiator of Pipeline 2
+ * ("exploit-verified, not just LLM-believed") is offline. The user needs to
+ * know — in one place, with a copy-pasteable install path — what to do.
+ */
+exports.SANDBOX_UNAVAILABLE_MESSAGE = 'No verification sandbox backend (Docker or Deno) was detected locally. ' +
+    'Exploit verification was skipped — the finding is reported as INCONCLUSIVE ' +
+    'with confidence capped at 75%. To enable exploit-verified findings:\n' +
+    '  • Docker (preferred, supports any language): https://docs.docker.com/get-docker\n' +
+    '  • Deno (JS/TS only, lighter install):    https://deno.com/#installation\n' +
+    'If neither is available, the API-side sandbox (on the server) is used as an ' +
+    'automatic fallback — no local install required, but slower (network round-trip per finding).';
+async function runLocalTest(script, runner, workspaceRoot, options) {
+    // 1. Defense-in-depth static check.
     const safety = (0, testSafety_1.checkTestSafety)(script, workspaceRoot);
     if (!safety.allowed) {
-        return { verdict: 'error', output: `Test script blocked: ${safety.reason}`, exitCode: -1 };
+        return { verdict: 'blocked', output: `Test script blocked: ${safety.reason}`, exitCode: -1 };
     }
-    const testDir = path.join(workspaceRoot, '.securecode');
-    if (!fs.existsSync(testDir))
-        fs.mkdirSync(testDir, { recursive: true });
-    const isPython = runner === 'python' || runner === 'python3';
-    const isTsRunner = runner === 'tsx' || runner === 'ts' || runner === 'bun' || runner === 'deno' || runner === 'pnpm-tsx' || runner === 'yarn-tsx';
-    const ext = isPython ? '.py' : (isTsRunner ? '.test.ts' : '.test.js');
-    const testFile = path.join(testDir, `verify-test-${Date.now()}-${Math.random().toString(36).slice(2, 8)}${ext}`);
-    try {
-        fs.writeFileSync(testFile, script, 'utf8');
-        let stdout = '';
-        let stderr = '';
-        let exitCode = 0;
-        let timedOut = false;
-        try {
-            const isWindows = process.platform === 'win32';
-            let runnerBin;
-            let runnerArgs;
-            if (runner === 'tsx') {
-                runnerBin = 'npx';
-                runnerArgs = ['tsx', testFile];
-            }
-            else if (runner === 'pnpm-tsx') {
-                runnerBin = 'pnpm';
-                runnerArgs = ['exec', 'tsx', testFile];
-            }
-            else if (runner === 'yarn-tsx') {
-                runnerBin = 'yarn';
-                runnerArgs = ['tsx', testFile];
-            }
-            else if (runner === 'deno') {
-                runnerBin = 'deno';
-                runnerArgs = ['run', '--allow-read', '--allow-env', testFile];
-            }
-            else if (runner === 'bun' && isWindows) {
-                runnerBin = 'npx';
-                runnerArgs = ['bun', testFile];
-            }
-            else {
-                runnerBin = runner;
-                runnerArgs = [testFile];
-            }
-            stdout = (0, child_process_1.execFileSync)(runnerBin, runnerArgs, {
-                cwd: workspaceRoot,
-                timeout: TIMEOUT_MS,
-                encoding: 'utf8',
-                stdio: ['pipe', 'pipe', 'pipe'],
-                env: { ...process.env, NODE_ENV: 'test' },
-                shell: isWindows,
-            });
-        }
-        catch (err) {
-            stdout = err.stdout || '';
-            stderr = err.stderr || '';
-            exitCode = err.status ?? 1;
-            if (err.signal === 'SIGTERM')
-                timedOut = true;
-        }
-        const output = (stdout + '\n' + stderr).trim();
-        if (timedOut) {
-            return { verdict: 'timeout', output: 'Test timed out after 30s', exitCode: -1 };
-        }
-        if (PASS_PATTERN.test(output)) {
-            return { verdict: 'pass', output, exitCode };
-        }
-        if (FAIL_PATTERN.test(output)) {
-            return { verdict: 'fail', output, exitCode };
-        }
-        if (exitCode === 0) {
-            return { verdict: 'error', output: output + '\nTest exited 0 but did not print PASS: or FAIL:', exitCode };
+    if (options?.setupScript) {
+        const setupSafety = (0, testSafety_1.checkTestSafety)(options.setupScript, workspaceRoot);
+        if (!setupSafety.allowed) {
+            return { verdict: 'blocked', output: `Setup script blocked: ${setupSafety.reason}`, exitCode: -1 };
         }
-        return { verdict: 'error', output, exitCode };
     }
-    catch (err) {
-        return { verdict: 'error', output: err.message || String(err), exitCode: -1 };
+    // 2. Resolve the sandbox backend. Production: detectSandbox(). Tests: inject.
+    const backend = options?.sandboxBackend ?? (0, verificationSandbox_1.detectSandbox)();
+    if (!backend) {
+        return {
+            verdict: 'sandbox-unavailable',
+            output: exports.SANDBOX_UNAVAILABLE_MESSAGE,
+            exitCode: -1,
+        };
     }
-    finally {
+    // 2b. Auto-create effect mock for JS/TS projects (harmless if unused).
+    //     Must happen before the sandbox mounts the workspace.
+    if (runner !== 'python' && runner !== 'python3') {
         try {
-            fs.unlinkSync(testFile);
+            (0, effectMock_1.createEffectMock)(workspaceRoot);
         }
         catch { }
     }
+    // 3. Execute inside the sandbox.
+    const execOpts = {
+        script,
+        runner,
+        workspaceRoot,
+        setupScript: options?.setupScript,
+        timeoutMs: options?.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+        signal: options?.signal,
+    };
+    const result = await backend.execute(execOpts);
+    // Preserve the "exited 0 but no PASS/FAIL marker" message — it's a
+    // useful signal that the test ran but didn't follow the protocol.
+    if (result.verdict === 'error' && result.exitCode === 0) {
+        return {
+            verdict: 'error',
+            output: `${result.output}\nTest exited 0 but did not print PASS: or FAIL:`,
+            exitCode: result.exitCode,
+            backend: result.backend,
+        };
+    }
+    return {
+        verdict: result.verdict,
+        output: result.output,
+        exitCode: result.exitCode,
+        backend: result.backend,
+    };
+}
+/**
+ * Run a validated test command (npm test, pytest, etc.) inside the sandbox.
+ * Uses command mode — no script file is written; the executable + args are
+ * passed directly to the sandbox backend. The sandbox enforces network=none,
+ * read-only workspace, and resource limits.
+ *
+ * Returns the same LocalTestResult shape as runLocalTest, with exit-code-based
+ * verdicts (0 = pass, nonzero = fail).
+ */
+async function runTestCommand(executable, args, workspaceRoot, options) {
+    const backend = options?.sandboxBackend ?? (0, verificationSandbox_1.detectSandbox)();
+    if (!backend) {
+        return {
+            verdict: 'sandbox-unavailable',
+            output: exports.SANDBOX_UNAVAILABLE_MESSAGE,
+            exitCode: -1,
+        };
+    }
+    const execOpts = {
+        mode: 'command',
+        executable,
+        args,
+        workspaceRoot,
+        timeoutMs: options?.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+        signal: options?.signal,
+    };
+    const result = await backend.execute(execOpts);
+    return {
+        verdict: result.verdict,
+        output: result.output,
+        exitCode: result.exitCode,
+        backend: result.backend,
+    };
 }
 //# sourceMappingURL=localTestRunner.js.map

package/dist/utils/localTestRunner.js.map

@@ -1 +1 @@
-{"version":3,"file":"localTestRunner.js","sourceRoot":"","sources":["../../src/utils/localTestRunner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,oCAsFC;AArGD,uCAAyB;AACzB,2CAA6B;AAC7B,iDAA6C;AAC7C,6CAA+C;AAQ/C,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,UAAU,GAAG,MAAM,CAAC;AAEnB,KAAK,UAAU,YAAY,CAC9B,MAAc,EACd,MAAc,EACd,aAAqB;IAErB,MAAM,MAAM,GAAG,IAAA,4BAAe,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExE,MAAM,QAAQ,GAAG,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,CAAC;IAC7D,MAAM,UAAU,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,CAAC;IAClJ,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;IAEjH,IAAI,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAE3C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;YAC/C,IAAI,SAAiB,CAAC;YACtB,IAAI,UAAoB,CAAC;YACzB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACnB,SAAS,GAAG,KAAK,CAAC;gBAClB,UAAU,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACnC,CAAC;iBAAM,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC/B,SAAS,GAAG,MAAM,CAAC;gBACnB,UAAU,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC3C,CAAC;iBAAM,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC/B,SAAS,GAAG,MAAM,CAAC;gBACnB,UAAU,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACnC,CAAC;iBAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,SAAS,GAAG,MAAM,CAAC;gBACnB,UAAU,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;YAClE,CAAC;iBAAM,IAAI,MAAM,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;gBACvC,SAAS,GAAG,KAAK,CAAC;gBAClB,UAAU,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACJ,SAAS,GAAG,MAAM,CAAC;gBACnB,UAAU,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,GAAG,IAAA,4BAAY,EAAC,SAAS,EAAE,UAAU,EAAE;gBACzC,GAAG,EAAE,aAAa;gBAClB,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE;gBACzC,KAAK,EAAE,SAAS;aACnB,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;YAC1B,QAAQ,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;gBAAE,QAAQ,GAAG,IAAI,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAE/C,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;QACpF,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;QAED,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,kDAAkD,EAAE,QAAQ,EAAE,CAAC;QAC/G,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;IAClF,CAAC;YAAS,CAAC;QACP,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IAC7C,CAAC;AACL,CAAC"}
+{"version":3,"file":"localTestRunner.js","sourceRoot":"","sources":["../../src/utils/localTestRunner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAwCH,oCAsEC;AAWD,wCAoCC;AA3JD,6CAA+C;AAC/C,6CAAgD;AAChD,+DAK+B;AAU/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;;;;;;GASG;AACU,QAAA,2BAA2B,GACpC,yEAAyE;IACzE,6EAA6E;IAC7E,uEAAuE;IACvE,qFAAqF;IACrF,6EAA6E;IAC7E,8EAA8E;IAC9E,8FAA8F,CAAC;AAE5F,KAAK,UAAU,YAAY,CAC9B,MAAc,EACd,MAAc,EACd,aAAqB,EACrB,OAMC;IAED,oCAAoC;IACpC,MAAM,MAAM,GAAG,IAAA,4BAAe,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,IAAA,4BAAe,EAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,WAAW,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;QACvG,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,MAAM,OAAO,GAAG,OAAO,EAAE,cAAc,IAAI,IAAA,mCAAa,GAAE,CAAC;IAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO;YACH,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,mCAA2B;YACnC,QAAQ,EAAE,CAAC,CAAC;SACf,CAAC;IACN,CAAC;IAED,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC;YAAC,IAAA,6BAAgB,EAAC,aAAa,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACrD,CAAC;IAED,iCAAiC;IACjC,MAAM,QAAQ,GAA0B;QACpC,MAAM;QACN,MAAM;QACN,aAAa;QACb,WAAW,EAAE,OAAO,EAAE,WAAW;QACjC,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;QACnD,MAAM,EAAE,OAAO,EAAE,MAAM;KAC1B,CAAC;IAEF,MAAM,MAAM,GAAyB,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErE,mEAAmE;IACnE,kEAAkE;IAClE,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO;YACH,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,kDAAkD;YAC1E,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;SAC1B,CAAC;IACN,CAAC;IAED,OAAO;QACH,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;KAC1B,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,cAAc,CAChC,UAAkB,EAClB,IAAc,EACd,aAAqB,EACrB,OAIC;IAED,MAAM,OAAO,GAAG,OAAO,EAAE,cAAc,IAAI,IAAA,mCAAa,GAAE,CAAC;IAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO;YACH,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,mCAA2B;YACnC,QAAQ,EAAE,CAAC,CAAC;SACf,CAAC;IACN,CAAC;IAED,MAAM,QAAQ,GAA0B;QACpC,IAAI,EAAE,SAAS;QACf,UAAU;QACV,IAAI;QACJ,aAAa;QACb,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;QACnD,MAAM,EAAE,OAAO,EAAE,MAAM;KAC1B,CAAC;IAEF,MAAM,MAAM,GAAyB,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErE,OAAO;QACH,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;KAC1B,CAAC;AACN,CAAC"}

package/dist/utils/securityConfig.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Security config discovery — finds and parses security-relevant config
+ * files in the workspace so the agent can reason about ACTUAL config
+ * instead of guessing from prompt rules.
+ *
+ * Replaces the system prompt's hardcoded FP-suppression rules ("config-gated
+ * rate limits are not vulnerabilities") with a tool that lets the agent
+ * check the config and reason about what it finds.
+ *
+ * Security rules:
+ *   - For .env files, return key NAMES and set/unset status only — never values
+ *   - Prefer .env.example over real .env
+ *   - All paths workspace-confined via resolveWorkspacePath
+ *   - Output truncated to 16KB
+ */
+export type ConfigKind = 'auth' | 'cors' | 'rate_limit' | 'headers' | 'env' | 'all';
+export declare function readSecurityConfig(workspaceRoot: string, kind?: ConfigKind): Promise<string>;

package/dist/utils/securityConfig.js

@@ -0,0 +1,192 @@
+"use strict";
+/**
+ * Security config discovery — finds and parses security-relevant config
+ * files in the workspace so the agent can reason about ACTUAL config
+ * instead of guessing from prompt rules.
+ *
+ * Replaces the system prompt's hardcoded FP-suppression rules ("config-gated
+ * rate limits are not vulnerabilities") with a tool that lets the agent
+ * check the config and reason about what it finds.
+ *
+ * Security rules:
+ *   - For .env files, return key NAMES and set/unset status only — never values
+ *   - Prefer .env.example over real .env
+ *   - All paths workspace-confined via resolveWorkspacePath
+ *   - Output truncated to 16KB
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readSecurityConfig = readSecurityConfig;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const files_1 = require("./files");
+const CONFIG_PATTERNS = [
+    { file: '.env.example', kind: 'env', description: 'Environment variable template (safe to show keys)' },
+    { file: '.env', kind: 'env', description: 'Environment variables (KEYS ONLY — values redacted)' },
+    { file: '.env.local', kind: 'env', description: 'Local environment overrides (KEYS ONLY)' },
+    { file: '.env.production', kind: 'env', description: 'Production environment (KEYS ONLY)' },
+    { file: 'helmet.config.js', kind: 'headers', description: 'Helmet security headers config' },
+    { file: 'helmet.config.ts', kind: 'headers', description: 'Helmet security headers config' },
+    { file: 'cors.config.js', kind: 'cors', description: 'CORS configuration' },
+    { file: 'cors.config.ts', kind: 'cors', description: 'CORS configuration' },
+    { file: 'next.config.js', kind: 'headers', description: 'Next.js config (may contain headers/CSP)' },
+    { file: 'next.config.ts', kind: 'headers', description: 'Next.js config (may contain headers/CSP)' },
+    { file: 'next.config.mjs', kind: 'headers', description: 'Next.js config (may contain headers/CSP)' },
+    { file: 'express-rate-limit.config.js', kind: 'rate_limit', description: 'Express rate limit config' },
+    { file: 'rate-limit.config.js', kind: 'rate_limit', description: 'Rate limit config' },
+    { file: 'rate-limit.config.ts', kind: 'rate_limit', description: 'Rate limit config' },
+];
+function findConfigFiles(workspaceRoot, kind) {
+    const out = [];
+    for (const pattern of CONFIG_PATTERNS) {
+        if (kind !== 'all' && pattern.kind !== kind)
+            continue;
+        const candidates = [
+            path.join(workspaceRoot, pattern.file),
+            path.join(workspaceRoot, 'config', pattern.file),
+            path.join(workspaceRoot, 'src', pattern.file),
+        ];
+        for (const candidate of candidates) {
+            if (fs.existsSync(candidate)) {
+                const rel = path.relative(workspaceRoot, candidate).replace(/\\/g, '/');
+                out.push({ path: rel, kind: pattern.kind, description: pattern.description });
+                break;
+            }
+        }
+    }
+    return out;
+}
+function redactEnvValues(content) {
+    return content
+        .split('\n')
+        .map(line => {
+        const trimmed = line.trim();
+        if (trimmed.startsWith('#') || trimmed === '')
+            return line;
+        const eqIdx = line.indexOf('=');
+        if (eqIdx === -1)
+            return line;
+        const key = line.slice(0, eqIdx).trim();
+        const isSecret = /SECRET|KEY|TOKEN|PASSWORD|PRIVATE|CREDENTIAL/i.test(key);
+        if (isSecret)
+            return `${key}=REDACTED`;
+        return `${key}=set`;
+    })
+        .join('\n');
+}
+function parseConfigFile(filePath, workspaceRoot) {
+    const abs = (0, files_1.resolveWorkspacePath)(workspaceRoot, filePath);
+    const content = fs.readFileSync(abs, 'utf8');
+    const ext = path.extname(filePath).toLowerCase();
+    if (filePath.includes('.env')) {
+        return redactEnvValues(content);
+    }
+    if (ext === '.js' || ext === '.ts' || ext === '.mjs' || ext === '.json') {
+        return content.slice(0, 12000);
+    }
+    return content.slice(0, 12000);
+}
+function searchInlineConfig(workspaceRoot, kind) {
+    const out = [];
+    const patterns = [
+        { regex: 'helmet\\s*\\(', kind: 'headers', label: 'helmet() call' },
+        { regex: 'cors\\s*\\(', kind: 'cors', label: 'cors() call' },
+        { regex: 'rateLimit\\s*\\(', kind: 'rate_limit', label: 'rateLimit() call' },
+        { regex: 'rate-limit', kind: 'rate_limit', label: 'rate-limit import' },
+        { regex: 'express-rate-limit', kind: 'rate_limit', label: 'express-rate-limit import' },
+        { regex: 'Content-Security-Policy|contentSecurityPolicy|CSP', kind: 'headers', label: 'CSP header' },
+        { regex: 'HSTS|strict-Transport-Security', kind: 'headers', label: 'HSTS header' },
+        { regex: 'X-Frame-Options|xFrameOptions', kind: 'headers', label: 'X-Frame-Options' },
+        { regex: 'X-Content-Type-Options|xContentTypeOptions', kind: 'headers', label: 'X-Content-Type-Options' },
+    ];
+    for (const p of patterns) {
+        if (kind !== 'all' && p.kind !== kind)
+            continue;
+        try {
+            const { searchCode } = require('../utils/searchCode');
+            const result = searchCode(workspaceRoot, p.regex, '*.{js,ts,mjs,jsx,tsx}');
+            if (result && result.hits) {
+                for (const hit of result.hits.slice(0, 3)) {
+                    out.push({
+                        file: hit.path,
+                        snippet: hit.text.slice(0, 200),
+                        line: hit.line,
+                    });
+                }
+            }
+        }
+        catch { /* best-effort */ }
+    }
+    return out;
+}
+async function readSecurityConfig(workspaceRoot, kind = 'all') {
+    const configFiles = findConfigFiles(workspaceRoot, kind);
+    const inlineConfigs = searchInlineConfig(workspaceRoot, kind);
+    if (configFiles.length === 0 && inlineConfigs.length === 0) {
+        return `No ${kind === 'all' ? '' : kind + ' '}security config files found. The project may not have explicit security config — check if it relies on framework defaults or environment variables.`;
+    }
+    const lines = [`Security config (${kind === 'all' ? 'all' : kind}):`];
+    if (configFiles.length > 0) {
+        lines.push('', 'Config files:');
+        for (const cf of configFiles.slice(0, 10)) {
+            lines.push(`  ${cf.path} — ${cf.description}`);
+            try {
+                const content = parseConfigFile(cf.path, workspaceRoot);
+                lines.push('  ```');
+                for (const line of content.split('\n').slice(0, 40)) {
+                    lines.push(`  ${line}`);
+                }
+                if (content.split('\n').length > 40) {
+                    lines.push('  ... (truncated)');
+                }
+                lines.push('  ```');
+            }
+            catch (e) {
+                lines.push(`  (error reading: ${e.message})`);
+            }
+        }
+    }
+    if (inlineConfigs.length > 0) {
+        lines.push('', 'Inline config found in source:');
+        for (const ic of inlineConfigs.slice(0, 10)) {
+            lines.push(`  ${ic.file}:${ic.line}`);
+            lines.push(`    ${ic.snippet}`);
+        }
+    }
+    lines.push('');
+    lines.push('Use this evidence to determine if a security control is actually configured before reporting it as a vulnerability. A missing config file does not mean the control is absent — check inline config too.');
+    return lines.join('\n');
+}
+//# sourceMappingURL=securityConfig.js.map

package/dist/utils/securityConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityConfig.js","sourceRoot":"","sources":["../../src/utils/securityConfig.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyHH,gDA6CC;AApKD,uCAAyB;AACzB,2CAA6B;AAC7B,mCAA+C;AAU/C,MAAM,eAAe,GAA8D;IAC/E,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,mDAAmD,EAAE;IACvG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,qDAAqD,EAAE;IACjG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,yCAAyC,EAAE;IAC3F,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,oCAAoC,EAAE;IAC3F,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC5F,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC5F,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC3E,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC3E,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0CAA0C,EAAE;IACpG,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0CAA0C,EAAE;IACpG,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0CAA0C,EAAE;IACrG,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACtG,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACtF,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE;CACzF,CAAC;AAEF,SAAS,eAAe,CAAC,aAAqB,EAAE,IAAgB;IAC5D,MAAM,GAAG,GAAiB,EAAE,CAAC;IAE7B,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QAEtD,MAAM,UAAU,GAAG;YACf,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;SAChD,CAAC;QAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACxE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC9E,MAAM;YACV,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACpC,OAAO,OAAO;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,IAAI,CAAC,EAAE;QACR,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,+CAA+C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAI,QAAQ;YAAE,OAAO,GAAG,GAAG,WAAW,CAAC;QACvC,OAAO,GAAG,GAAG,MAAM,CAAC;IACxB,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,aAAqB;IAC5D,MAAM,GAAG,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACtE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,kBAAkB,CAAC,aAAqB,EAAE,IAAgB;IAC/D,MAAM,GAAG,GAAsD,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAyD;QACnE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE;QACnE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE;QAC5D,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE;QAC5E,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,mBAAmB,EAAE;QACvE,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,2BAA2B,EAAE;QACvF,EAAE,KAAK,EAAE,mDAAmD,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE;QACpG,EAAE,KAAK,EAAE,gCAAgC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE;QAClF,EAAE,KAAK,EAAE,+BAA+B,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE;QACrF,EAAE,KAAK,EAAE,4CAA4C,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,wBAAwB,EAAE;KAC5G,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QAChD,IAAI,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YAC3E,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBACxC,GAAG,CAAC,IAAI,CAAC;wBACL,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC/B,IAAI,EAAE,GAAG,CAAC,IAAI;qBACjB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,GAAG,CAAC;AACf,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACpC,aAAqB,EACrB,OAAmB,KAAK;IAExB,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,kBAAkB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAE9D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,MAAM,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,qJAAqJ,CAAC;IACvM,CAAC;IAED,MAAM,KAAK,GAAa,CAAC,oBAAoB,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAEhF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QAChC,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBACxD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACpB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;oBAClD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC5B,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;oBAClC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACpC,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;YAClD,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAC;QACjD,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,0MAA0M,CAAC,CAAC;IAEvN,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/utils/testCommandPolicy.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Test command policy — strict validation for existing-test mode of run_tests.
+ *
+ * Allows only known package-manager test commands (npm/pnpm/yarn/bun test,
+ * pytest) with optional file/pattern arguments. Rejects shell operators,
+ * arbitrary executables, lifecycle commands other than test, absolute paths
+ * outside the workspace, and path traversal.
+ *
+ * Security rules:
+ *   - No shell operators (&&, ||, ;, |, >, <, $(), backticks)
+ *   - Only the `test` lifecycle command (no build/install/publish/run/exec)
+ *   - No --shell/--script-shell escape flags
+ *   - All file paths workspace-confined via resolveWorkspacePath
+ *   - Output is a validated executable + args array (never a shell string)
+ */
+export type TestPackageManager = 'npm' | 'pnpm' | 'yarn' | 'bun' | 'pytest';
+export interface ValidatedTestCommand {
+    packageManager: TestPackageManager;
+    executable: string;
+    args: string[];
+    cwd: string;
+    selectedFiles: string[];
+    timeoutMs: number;
+}
+export interface CommandPolicyResult {
+    ok: boolean;
+    command?: ValidatedTestCommand;
+    error?: string;
+}
+export declare function validateTestCommand(input: {
+    packageManager?: string;
+    testFiles?: string[];
+    testPattern?: string;
+    timeoutMs?: number;
+}, workspaceRoot: string): CommandPolicyResult;
+export declare function formatValidatedCommand(cmd: ValidatedTestCommand): string;