circle-ir 3.1.0

package/dist/languages/plugins/python.js

@@ -0,0 +1,480 @@
+/**
+ * Python Language Plugin
+ *
+ * Provides Python-specific AST handling, taint patterns, and framework detection.
+ */
+import { BaseLanguagePlugin } from './base.js';
+/**
+ * Python language plugin implementation.
+ */
+export class PythonPlugin extends BaseLanguagePlugin {
+    id = 'python';
+    name = 'Python';
+    extensions = ['.py', '.pyw'];
+    wasmPath = 'tree-sitter-python.wasm';
+    nodeTypes = {
+        // Type declarations
+        classDeclaration: ['class_definition'],
+        interfaceDeclaration: [], // Python doesn't have interfaces
+        enumDeclaration: [], // Python enums are classes
+        functionDeclaration: ['function_definition'],
+        methodDeclaration: ['function_definition'], // Methods are function_definition inside class
+        // Expressions
+        methodCall: ['call'],
+        functionCall: ['call'],
+        assignment: ['assignment', 'augmented_assignment'],
+        variableDeclaration: ['assignment'], // Python doesn't have explicit declarations
+        // Parameters and arguments
+        parameter: ['parameters', 'typed_parameter', 'default_parameter'],
+        argument: ['argument_list'],
+        // Annotations/decorators
+        annotation: [],
+        decorator: ['decorator'],
+        // Imports
+        importStatement: ['import_statement', 'import_from_statement'],
+        // Control flow
+        ifStatement: ['if_statement'],
+        forStatement: ['for_statement'],
+        whileStatement: ['while_statement'],
+        tryStatement: ['try_statement'],
+        returnStatement: ['return_statement'],
+    };
+    /**
+     * Detect Python frameworks from imports.
+     */
+    detectFramework(context) {
+        const indicators = [];
+        let framework;
+        let confidence = 0;
+        for (const imp of context.imports) {
+            const path = imp.from_package || imp.imported_name;
+            // Flask
+            if (path === 'flask' || path.startsWith('flask.')) {
+                framework = 'flask';
+                confidence = Math.max(confidence, 0.95);
+                indicators.push(`import: ${path}`);
+            }
+            // Django
+            if (path.startsWith('django.') || path === 'django') {
+                framework = 'django';
+                confidence = Math.max(confidence, 0.95);
+                indicators.push(`import: ${path}`);
+            }
+            // FastAPI
+            if (path === 'fastapi' || path.startsWith('fastapi.')) {
+                framework = 'fastapi';
+                confidence = Math.max(confidence, 0.95);
+                indicators.push(`import: ${path}`);
+            }
+            // Tornado
+            if (path.startsWith('tornado.')) {
+                framework = 'tornado';
+                confidence = Math.max(confidence, 0.9);
+                indicators.push(`import: ${path}`);
+            }
+            // aiohttp
+            if (path === 'aiohttp' || path.startsWith('aiohttp.')) {
+                framework = 'aiohttp';
+                confidence = Math.max(confidence, 0.9);
+                indicators.push(`import: ${path}`);
+            }
+            // Pyramid
+            if (path.startsWith('pyramid.')) {
+                framework = 'pyramid';
+                confidence = Math.max(confidence, 0.9);
+                indicators.push(`import: ${path}`);
+            }
+        }
+        if (framework) {
+            return { name: framework, confidence, indicators };
+        }
+        return undefined;
+    }
+    /**
+     * Python taint source patterns.
+     */
+    getBuiltinSources() {
+        return [
+            // Flask request object
+            {
+                method: 'args',
+                class: 'request',
+                type: 'http_param',
+                severity: 'high',
+                confidence: 0.95,
+                returnTainted: true,
+            },
+            {
+                method: 'form',
+                class: 'request',
+                type: 'http_body',
+                severity: 'high',
+                confidence: 0.95,
+                returnTainted: true,
+            },
+            {
+                method: 'json',
+                class: 'request',
+                type: 'http_body',
+                severity: 'high',
+                confidence: 0.95,
+                returnTainted: true,
+            },
+            {
+                method: 'data',
+                class: 'request',
+                type: 'http_body',
+                severity: 'high',
+                confidence: 0.95,
+                returnTainted: true,
+            },
+            {
+                method: 'headers',
+                class: 'request',
+                type: 'http_header',
+                severity: 'high',
+                confidence: 0.9,
+                returnTainted: true,
+            },
+            {
+                method: 'cookies',
+                class: 'request',
+                type: 'http_cookie',
+                severity: 'high',
+                confidence: 0.9,
+                returnTainted: true,
+            },
+            {
+                method: 'files',
+                class: 'request',
+                type: 'file_upload',
+                severity: 'high',
+                confidence: 0.9,
+                returnTainted: true,
+            },
+            // Django request object
+            {
+                method: 'GET',
+                class: 'request',
+                type: 'http_param',
+                severity: 'high',
+                confidence: 0.95,
+                returnTainted: true,
+            },
+            {
+                method: 'POST',
+                class: 'request',
+                type: 'http_body',
+                severity: 'high',
+                confidence: 0.95,
+                returnTainted: true,
+            },
+            {
+                method: 'META',
+                class: 'request',
+                type: 'http_header',
+                severity: 'high',
+                confidence: 0.9,
+                returnTainted: true,
+            },
+            // Standard library sources
+            {
+                method: 'input',
+                type: 'user_input',
+                severity: 'high',
+                confidence: 0.95,
+                returnTainted: true,
+            },
+            {
+                method: 'argv',
+                class: 'sys',
+                type: 'cli_arg',
+                severity: 'medium',
+                confidence: 0.9,
+                returnTainted: true,
+            },
+            {
+                method: 'environ',
+                class: 'os',
+                type: 'env_var',
+                severity: 'medium',
+                confidence: 0.85,
+                returnTainted: true,
+            },
+            {
+                method: 'getenv',
+                class: 'os',
+                type: 'env_var',
+                severity: 'medium',
+                confidence: 0.85,
+                returnTainted: true,
+            },
+            // File reading
+            {
+                method: 'read',
+                type: 'file_input',
+                severity: 'medium',
+                confidence: 0.8,
+                returnTainted: true,
+            },
+            {
+                method: 'readline',
+                type: 'file_input',
+                severity: 'medium',
+                confidence: 0.8,
+                returnTainted: true,
+            },
+            {
+                method: 'readlines',
+                type: 'file_input',
+                severity: 'medium',
+                confidence: 0.8,
+                returnTainted: true,
+            },
+        ];
+    }
+    /**
+     * Python taint sink patterns.
+     */
+    getBuiltinSinks() {
+        return [
+            // Command Injection
+            {
+                method: 'system',
+                class: 'os',
+                type: 'command_injection',
+                cwe: 'CWE-78',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            {
+                method: 'popen',
+                class: 'os',
+                type: 'command_injection',
+                cwe: 'CWE-78',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            {
+                method: 'run',
+                class: 'subprocess',
+                type: 'command_injection',
+                cwe: 'CWE-78',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            {
+                method: 'call',
+                class: 'subprocess',
+                type: 'command_injection',
+                cwe: 'CWE-78',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            {
+                method: 'Popen',
+                class: 'subprocess',
+                type: 'command_injection',
+                cwe: 'CWE-78',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            // Code Injection
+            {
+                method: 'eval',
+                type: 'code_injection',
+                cwe: 'CWE-94',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            {
+                method: 'exec',
+                type: 'code_injection',
+                cwe: 'CWE-94',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            {
+                method: 'compile',
+                type: 'code_injection',
+                cwe: 'CWE-94',
+                severity: 'high',
+                argPositions: [0],
+            },
+            // SQL Injection
+            {
+                method: 'execute',
+                type: 'sql_injection',
+                cwe: 'CWE-89',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            {
+                method: 'executemany',
+                type: 'sql_injection',
+                cwe: 'CWE-89',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            {
+                method: 'raw',
+                type: 'sql_injection',
+                cwe: 'CWE-89',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            // Path Traversal
+            {
+                method: 'open',
+                type: 'path_traversal',
+                cwe: 'CWE-22',
+                severity: 'high',
+                argPositions: [0],
+            },
+            {
+                method: 'read',
+                class: 'pathlib',
+                type: 'path_traversal',
+                cwe: 'CWE-22',
+                severity: 'high',
+                argPositions: [0],
+            },
+            // XSS (template injection)
+            {
+                method: 'Markup',
+                type: 'xss',
+                cwe: 'CWE-79',
+                severity: 'high',
+                argPositions: [0],
+            },
+            {
+                method: 'safe',
+                type: 'xss',
+                cwe: 'CWE-79',
+                severity: 'high',
+                argPositions: [0],
+            },
+            // SSRF
+            {
+                method: 'get',
+                class: 'requests',
+                type: 'ssrf',
+                cwe: 'CWE-918',
+                severity: 'high',
+                argPositions: [0],
+            },
+            {
+                method: 'post',
+                class: 'requests',
+                type: 'ssrf',
+                cwe: 'CWE-918',
+                severity: 'high',
+                argPositions: [0],
+            },
+            {
+                method: 'urlopen',
+                class: 'urllib',
+                type: 'ssrf',
+                cwe: 'CWE-918',
+                severity: 'high',
+                argPositions: [0],
+            },
+            // Deserialization
+            {
+                method: 'loads',
+                class: 'pickle',
+                type: 'deserialization',
+                cwe: 'CWE-502',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            {
+                method: 'load',
+                class: 'pickle',
+                type: 'deserialization',
+                cwe: 'CWE-502',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            {
+                method: 'safe_load',
+                class: 'yaml',
+                type: 'deserialization',
+                cwe: 'CWE-502',
+                severity: 'high',
+                argPositions: [0],
+                sanitizes: ['yaml_unsafe'], // safe_load is safe for YAML
+            },
+            {
+                method: 'load',
+                class: 'yaml',
+                type: 'deserialization',
+                cwe: 'CWE-502',
+                severity: 'critical',
+                argPositions: [0],
+            },
+            // LDAP Injection
+            {
+                method: 'search_s',
+                type: 'ldap_injection',
+                cwe: 'CWE-90',
+                severity: 'high',
+                argPositions: [1, 2],
+            },
+        ];
+    }
+    /**
+     * Get receiver type from a call expression.
+     */
+    getReceiverType(node, context) {
+        if (node.type !== 'call')
+            return undefined;
+        const func = node.childForFieldName('function');
+        if (!func)
+            return undefined;
+        // For attribute access like obj.method()
+        if (func.type === 'attribute') {
+            const object = func.childForFieldName('object');
+            if (object) {
+                return object.text;
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Check if node is a Python string literal.
+     */
+    isStringLiteral(node) {
+        return node.type === 'string' ||
+            node.type === 'concatenated_string';
+    }
+    /**
+     * Get string value from Python string literal.
+     */
+    getStringValue(node) {
+        if (!this.isStringLiteral(node))
+            return undefined;
+        const text = node.text;
+        // Handle various Python string prefixes (f, r, b, etc.)
+        const match = text.match(/^[frbFRB]*['"`]{1,3}(.*)['"`]{1,3}$/s);
+        if (match) {
+            return match[1];
+        }
+        return text;
+    }
+    // Extraction methods - delegate to existing extractors for now
+    extractTypes(context) {
+        return [];
+    }
+    extractCalls(context) {
+        return [];
+    }
+    extractImports(context) {
+        return [];
+    }
+    extractPackage(context) {
+        // Python uses file path as module path
+        return undefined;
+    }
+}
+//# sourceMappingURL=python.js.map

package/dist/languages/plugins/python.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"python.js","sourceRoot":"","sources":["../../../src/languages/plugins/python.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,kBAAkB;IACzC,EAAE,GAAG,QAAiB,CAAC;IACvB,IAAI,GAAG,QAAQ,CAAC;IAChB,UAAU,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,GAAG,yBAAyB,CAAC;IAErC,SAAS,GAAsB;QACtC,oBAAoB;QACpB,gBAAgB,EAAE,CAAC,kBAAkB,CAAC;QACtC,oBAAoB,EAAE,EAAE,EAAG,iCAAiC;QAC5D,eAAe,EAAE,EAAE,EAAG,2BAA2B;QACjD,mBAAmB,EAAE,CAAC,qBAAqB,CAAC;QAC5C,iBAAiB,EAAE,CAAC,qBAAqB,CAAC,EAAG,+CAA+C;QAE5F,cAAc;QACd,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,UAAU,EAAE,CAAC,YAAY,EAAE,sBAAsB,CAAC;QAClD,mBAAmB,EAAE,CAAC,YAAY,CAAC,EAAG,4CAA4C;QAElF,2BAA2B;QAC3B,SAAS,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,CAAC;QACjE,QAAQ,EAAE,CAAC,eAAe,CAAC;QAE3B,yBAAyB;QACzB,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,CAAC,WAAW,CAAC;QAExB,UAAU;QACV,eAAe,EAAE,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;QAE9D,eAAe;QACf,WAAW,EAAE,CAAC,cAAc,CAAC;QAC7B,YAAY,EAAE,CAAC,eAAe,CAAC;QAC/B,cAAc,EAAE,CAAC,iBAAiB,CAAC;QACnC,YAAY,EAAE,CAAC,eAAe,CAAC;QAC/B,eAAe,EAAE,CAAC,kBAAkB,CAAC;KACtC,CAAC;IAEF;;OAEG;IACH,eAAe,CAAC,OAA0B;QACxC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,SAA6B,CAAC;QAClC,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,aAAa,CAAC;YAEnD,QAAQ;YACR,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClD,SAAS,GAAG,OAAO,CAAC;gBACpB,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBACxC,UAAU,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,SAAS;YACT,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpD,SAAS,GAAG,QAAQ,CAAC;gBACrB,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBACxC,UAAU,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,UAAU;YACV,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtD,SAAS,GAAG,SAAS,CAAC;gBACtB,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBACxC,UAAU,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,UAAU;YACV,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,SAAS,GAAG,SAAS,CAAC;gBACtB,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBACvC,UAAU,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,UAAU;YACV,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtD,SAAS,GAAG,SAAS,CAAC;gBACtB,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBACvC,UAAU,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,UAAU;YACV,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,SAAS,GAAG,SAAS,CAAC;gBACtB,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBACvC,UAAU,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACrD,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO;YACL,uBAAuB;YACvB;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,GAAG;gBACf,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,GAAG;gBACf,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,GAAG;gBACf,aAAa,EAAE,IAAI;aACpB;YAED,wBAAwB;YACxB;gBACE,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,GAAG;gBACf,aAAa,EAAE,IAAI;aACpB;YAED,2BAA2B;YAC3B;gBACE,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,GAAG;gBACf,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACpB;YAED,eAAe;YACf;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,GAAG;gBACf,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,UAAU;gBAClB,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,GAAG;gBACf,aAAa,EAAE,IAAI;aACpB;YACD;gBACE,MAAM,EAAE,WAAW;gBACnB,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,GAAG;gBACf,aAAa,EAAE,IAAI;aACpB;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO;YACL,oBAAoB;YACpB;gBACE,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,mBAAmB;gBACzB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,mBAAmB;gBACzB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YAED,iBAAiB;YACjB;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,gBAAgB;gBACtB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,gBAAgB;gBACtB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,gBAAgB;gBACtB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YAED,gBAAgB;YAChB;gBACE,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,eAAe;gBACrB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,aAAa;gBACrB,IAAI,EAAE,eAAe;gBACrB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,eAAe;gBACrB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YAED,iBAAiB;YACjB;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,gBAAgB;gBACtB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,gBAAgB;gBACtB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YAED,2BAA2B;YAC3B;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,KAAK;gBACX,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,KAAK;gBACX,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YAED,OAAO;YACP;gBACE,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,UAAU;gBACjB,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,UAAU;gBACjB,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YAED,kBAAkB;YAClB;gBACE,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,iBAAiB;gBACvB,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,iBAAiB;gBACvB,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YACD;gBACE,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,iBAAiB;gBACvB,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,CAAC;gBACjB,SAAS,EAAE,CAAC,aAAa,CAAC,EAAG,6BAA6B;aAC3D;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,iBAAiB;gBACvB,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,CAAC,CAAC,CAAC;aAClB;YAED,iBAAiB;YACjB;gBACE,MAAM,EAAE,UAAU;gBAClB,IAAI,EAAE,gBAAgB;gBACtB,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;aACrB;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAAgB,EAAE,OAA0B;QAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC;QAE3C,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAE5B,yCAAyC;QACzC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAAgB;QAC9B,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YACtB,IAAI,CAAC,IAAI,KAAK,qBAAqB,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,IAAgB;QAC7B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAElD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QAEvB,wDAAwD;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACjE,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAE/D,YAAY,CAAC,OAA0B;QACrC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,YAAY,CAAC,OAA0B;QACrC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,cAAc,CAAC,OAA0B;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,cAAc,CAAC,OAA0B;QACvC,uCAAuC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/languages/plugins/rust.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Rust Language Plugin
+ *
+ * Provides Rust-specific AST handling, taint patterns, and framework detection.
+ */
+import type { Node as SyntaxNode } from 'web-tree-sitter';
+import type { TypeInfo, CallInfo, ImportInfo } from '../../types/index.js';
+import type { LanguageNodeTypes, ExtractionContext, FrameworkInfo, TaintSourcePattern, TaintSinkPattern } from '../types.js';
+import { BaseLanguagePlugin } from './base.js';
+/**
+ * Rust language plugin implementation.
+ */
+export declare class RustPlugin extends BaseLanguagePlugin {
+    readonly id: "rust";
+    readonly name = "Rust";
+    readonly extensions: string[];
+    readonly wasmPath = "tree-sitter-rust.wasm";
+    readonly nodeTypes: LanguageNodeTypes;
+    /**
+     * Detect Rust frameworks from imports.
+     */
+    detectFramework(context: ExtractionContext): FrameworkInfo | undefined;
+    /**
+     * Rust taint source patterns.
+     */
+    getBuiltinSources(): TaintSourcePattern[];
+    /**
+     * Rust taint sink patterns.
+     */
+    getBuiltinSinks(): TaintSinkPattern[];
+    /**
+     * Get receiver type from a call expression.
+     */
+    getReceiverType(node: SyntaxNode, context: ExtractionContext): string | undefined;
+    /**
+     * Check if node is a Rust string literal.
+     */
+    isStringLiteral(node: SyntaxNode): boolean;
+    /**
+     * Get string value from Rust string literal.
+     */
+    getStringValue(node: SyntaxNode): string | undefined;
+    extractTypes(context: ExtractionContext): TypeInfo[];
+    extractCalls(context: ExtractionContext): CallInfo[];
+    extractImports(context: ExtractionContext): ImportInfo[];
+    extractPackage(context: ExtractionContext): string | undefined;
+}