codehere 0.1.1

package/dist/infrastructure/security/input-validator.js

@@ -0,0 +1,269 @@
+/**
+ * Infrastructure: Input Validator
+ * Enterprise-grade input validation and sanitization
+ *
+ * Clean Architecture: Infrastructure Layer
+ * Security: Prevents injection attacks, validates user input
+ */
+/**
+ * Validate file path to prevent directory traversal
+ */
+export function validateFilePath(filepath) {
+    const errors = [];
+    // Check for directory traversal attempts
+    if (filepath.includes('..') || filepath.includes('~')) {
+        errors.push('Directory traversal detected in file path');
+    }
+    // Check for absolute paths (should be relative)
+    if (filepath.startsWith('/') || /^[A-Z]:\\/.test(filepath)) {
+        errors.push('Absolute paths not allowed');
+    }
+    // Check for null bytes
+    if (filepath.includes('\0')) {
+        errors.push('Null bytes not allowed in file path');
+    }
+    // Check for dangerous characters
+    const dangerousChars = /[<>:"|?*\x00-\x1f]/;
+    if (dangerousChars.test(filepath)) {
+        errors.push('Invalid characters in file path');
+    }
+    // Sanitize path
+    let sanitized = filepath
+        .replace(/\.\./g, '') // Remove ..
+        .replace(/~/g, '') // Remove ~
+        .replace(/\0/g, '') // Remove null bytes
+        .replace(/[<>:"|?*\x00-\x1f]/g, '_'); // Replace dangerous chars
+    // Normalize path separators
+    sanitized = sanitized.replace(/\\/g, '/');
+    return {
+        valid: errors.length === 0,
+        errors,
+        sanitized: errors.length > 0 ? sanitized : undefined,
+    };
+}
+/**
+ * Comprehensive prompt injection detection
+ * Detects: instruction injection, role-playing, jailbreaks, context manipulation, etc.
+ */
+export function detectPromptInjection(input) {
+    const lower = input.toLowerCase();
+    // Skip validation for known system prompts (to avoid false positives)
+    // System prompts typically start with "You are a [Role] for" or similar patterns
+    const isSystemPrompt = /^you are (?:a|an) [a-z]+ (?:agent|assistant|system|service)/i.test(input.trim());
+    if (isSystemPrompt) {
+        return null; // Don't flag system-generated prompts
+    }
+    // Critical: Direct instruction override attempts
+    const criticalPatterns = [
+        {
+            pattern: /(?:ignore|forget|disregard|override).*(?:previous|above|earlier|instructions|system|prompt)/i,
+            category: 'Instruction Override',
+            description: 'Attempt to override system instructions',
+        },
+        {
+            // More specific: must have explicit role manipulation intent
+            // Exclude legitimate system prompts - now handled by isSystemPrompt check above
+            pattern: /(?:you are|act as|pretend to be|roleplay as)\s+(?:an?\s+)?(?:admin|root|system|developer|assistant|ai|hacker|malicious|evil)/i,
+            category: 'Role-Playing Attack',
+            description: 'Attempt to manipulate AI role/identity',
+        },
+        {
+            pattern: /(?:system|assistant|user):\s*(?:ignore|forget|new instructions|override)/i,
+            category: 'Context Manipulation',
+            description: 'Attempt to manipulate conversation context',
+        },
+        {
+            pattern: /(?:jailbreak|danie|ignore all|new instructions|override safety)/i,
+            category: 'Jailbreak Attempt',
+            description: 'Known jailbreak pattern detected',
+        },
+        {
+            pattern: /(?:<\|im_start\||\[INST\]|###|---).*(?:system|assistant|user).*(?:ignore|override|new)/i,
+            category: 'Format Injection',
+            description: 'Attempt to inject format tokens',
+        },
+    ];
+    // High: Indirect manipulation attempts
+    const highPatterns = [
+        {
+            pattern: /(?:tell me|show me|reveal|expose|leak).*(?:prompt|instructions|system|secret|api key|password)/i,
+            category: 'Information Extraction',
+            description: 'Attempt to extract sensitive information',
+        },
+        {
+            pattern: /(?:repeat|echo|say back).*(?:everything|all|entire).*(?:above|previous|prompt)/i,
+            category: 'Prompt Extraction',
+            description: 'Attempt to extract full prompt',
+        },
+        {
+            pattern: /(?:translate|convert|rewrite).*(?:to|as).*(?:base64|hex|binary|code)/i,
+            category: 'Encoding Bypass',
+            description: 'Attempt to bypass filters via encoding',
+        },
+        {
+            // More specific: only match direct execution requests, not security analysis mentions
+            // Exclude patterns like "analyze code execution" or "code execution vulnerabilities"
+            pattern: /(?:please|can you|will you|I want you to|you should|you must).*(?:execute|run|eval|exec).*(?:code|command|script|function|this)/i,
+            category: 'Code Execution Request',
+            description: 'Request for code execution',
+        },
+    ];
+    // Medium: Suspicious patterns
+    const mediumPatterns = [
+        {
+            pattern: /(?:what are|what is).*(?:your|the).*(?:instructions|prompt|system message)/i,
+            category: 'Prompt Probing',
+            description: 'Probing for system instructions',
+        },
+        {
+            pattern: /(?:hypothetical|imagine|suppose|what if).*(?:you could|you were|you had)/i,
+            category: 'Hypothetical Manipulation',
+            description: 'Hypothetical scenario manipulation',
+        },
+        {
+            pattern: /(?:this is|that was).*(?:test|example|practice|drill)/i,
+            category: 'Test Bypass',
+            description: 'Attempt to bypass restrictions via "test" framing',
+        },
+    ];
+    // Check critical patterns first
+    for (const { pattern, category, description } of criticalPatterns) {
+        if (pattern.test(input)) {
+            return {
+                detected: true,
+                severity: 'critical',
+                category,
+                pattern: pattern.toString(),
+                description,
+            };
+        }
+    }
+    // Check high severity patterns
+    for (const { pattern, category, description } of highPatterns) {
+        if (pattern.test(input)) {
+            return {
+                detected: true,
+                severity: 'high',
+                category,
+                pattern: pattern.toString(),
+                description,
+            };
+        }
+    }
+    // Check medium severity patterns
+    for (const { pattern, category, description } of mediumPatterns) {
+        if (pattern.test(input)) {
+            return {
+                detected: true,
+                severity: 'medium',
+                category,
+                pattern: pattern.toString(),
+                description,
+            };
+        }
+    }
+    return null;
+}
+/**
+ * Validate query string to prevent injection
+ * Enhanced with prompt injection detection
+ */
+export function validateQuery(query) {
+    const errors = [];
+    // Check for null bytes
+    if (query.includes('\0')) {
+        errors.push('Null bytes not allowed in query');
+    }
+    // Check for prompt injection
+    const injectionResult = detectPromptInjection(query);
+    if (injectionResult) {
+        if (injectionResult.severity === 'critical' || injectionResult.severity === 'high') {
+            errors.push(`Prompt injection detected (${injectionResult.severity}): ${injectionResult.description}`);
+        }
+    }
+    // Check for command injection patterns
+    const commandInjectionPatterns = [
+        /[;&|`$(){}[\]]/, // Shell metacharacters
+        /<script/i, // XSS attempts
+        /javascript:/i, // JavaScript protocol
+        /on\w+\s*=/i, // Event handlers
+    ];
+    for (const pattern of commandInjectionPatterns) {
+        if (pattern.test(query)) {
+            errors.push('Potentially dangerous characters detected in query');
+            break;
+        }
+    }
+    // Sanitize query (only if not critical prompt injection)
+    let sanitized = query;
+    if (!injectionResult || injectionResult.severity !== 'critical') {
+        sanitized = query
+            .replace(/\0/g, '') // Remove null bytes
+            .replace(/[;&|`$(){}[\]]/g, '') // Remove shell metacharacters
+            .replace(/<script/gi, '&lt;script') // Escape script tags
+            .replace(/javascript:/gi, '') // Remove javascript protocol
+            .replace(/on\w+\s*=/gi, ''); // Remove event handlers
+    }
+    else {
+        // For critical prompt injection, don't sanitize - reject entirely
+        sanitized = '';
+    }
+    // Trim and limit length
+    sanitized = sanitized.trim();
+    const MAX_QUERY_LENGTH = 10000; // Reasonable limit
+    if (sanitized.length > MAX_QUERY_LENGTH) {
+        errors.push(`Query exceeds maximum length of ${MAX_QUERY_LENGTH} characters`);
+        sanitized = sanitized.substring(0, MAX_QUERY_LENGTH);
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+        sanitized: errors.length > 0 && sanitized.length > 0 ? sanitized : undefined,
+    };
+}
+/**
+ * Validate API key format
+ */
+export function validateAPIKey(apiKey) {
+    const errors = [];
+    if (!apiKey || apiKey.trim().length === 0) {
+        errors.push('API key is required');
+    }
+    // Check minimum length
+    if (apiKey.length < 10) {
+        errors.push('API key is too short');
+    }
+    // Check for null bytes
+    if (apiKey.includes('\0')) {
+        errors.push('Null bytes not allowed in API key');
+    }
+    // Check for whitespace (API keys shouldn't have spaces)
+    if (apiKey !== apiKey.trim()) {
+        errors.push('API key should not have leading or trailing whitespace');
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+        sanitized: errors.length > 0 ? apiKey.trim() : undefined,
+    };
+}
+/**
+ * Validate file content before processing
+ */
+export function validateFileContent(content, maxSize = 10 * 1024 * 1024) {
+    const errors = [];
+    // Check size
+    const sizeInBytes = new Blob([content]).size;
+    if (sizeInBytes > maxSize) {
+        errors.push(`File content exceeds maximum size of ${maxSize} bytes`);
+    }
+    // Check for null bytes (shouldn't be in text files)
+    if (content.includes('\0')) {
+        errors.push('Null bytes detected in file content');
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+    };
+}
+//# sourceMappingURL=input-validator.js.map

package/dist/infrastructure/security/input-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validator.js","sourceRoot":"","sources":["../../../src/infrastructure/security/input-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,yCAAyC;IACzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC3D,CAAC;IAED,gDAAgD;IAChD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,uBAAuB;IACvB,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED,iCAAiC;IACjC,MAAM,cAAc,GAAG,oBAAoB,CAAC;IAC5C,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,gBAAgB;IAChB,IAAI,SAAS,GAAG,QAAQ;SACrB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,YAAY;SACjC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW;SAC7B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,oBAAoB;SACvC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC,CAAC,0BAA0B;IAElE,4BAA4B;IAC5B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE1C,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACrD,CAAC;AACJ,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAElC,sEAAsE;IACtE,iFAAiF;IACjF,MAAM,cAAc,GAAG,8DAA8D,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACzG,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,CAAC,sCAAsC;IACrD,CAAC;IAED,iDAAiD;IACjD,MAAM,gBAAgB,GAAG;QACvB;YACE,OAAO,EAAE,8FAA8F;YACvG,QAAQ,EAAE,sBAAsB;YAChC,WAAW,EAAE,yCAAyC;SACvD;QACD;YACE,6DAA6D;YAC7D,gFAAgF;YAChF,OAAO,EAAE,+HAA+H;YACxI,QAAQ,EAAE,qBAAqB;YAC/B,WAAW,EAAE,wCAAwC;SACtD;QACD;YACE,OAAO,EAAE,2EAA2E;YACpF,QAAQ,EAAE,sBAAsB;YAChC,WAAW,EAAE,4CAA4C;SAC1D;QACD;YACE,OAAO,EAAE,kEAAkE;YAC3E,QAAQ,EAAE,mBAAmB;YAC7B,WAAW,EAAE,kCAAkC;SAChD;QACD;YACE,OAAO,EAAE,yFAAyF;YAClG,QAAQ,EAAE,kBAAkB;YAC5B,WAAW,EAAE,iCAAiC;SAC/C;KACF,CAAC;IAEF,uCAAuC;IACvC,MAAM,YAAY,GAAG;QACnB;YACE,OAAO,EAAE,iGAAiG;YAC1G,QAAQ,EAAE,wBAAwB;YAClC,WAAW,EAAE,0CAA0C;SACxD;QACD;YACE,OAAO,EAAE,iFAAiF;YAC1F,QAAQ,EAAE,mBAAmB;YAC7B,WAAW,EAAE,gCAAgC;SAC9C;QACD;YACE,OAAO,EAAE,uEAAuE;YAChF,QAAQ,EAAE,iBAAiB;YAC3B,WAAW,EAAE,wCAAwC;SACtD;QACD;YACE,sFAAsF;YACtF,qFAAqF;YACrF,OAAO,EAAE,kIAAkI;YAC3I,QAAQ,EAAE,wBAAwB;YAClC,WAAW,EAAE,4BAA4B;SAC1C;KACF,CAAC;IAEF,8BAA8B;IAC9B,MAAM,cAAc,GAAG;QACrB;YACE,OAAO,EAAE,6EAA6E;YACtF,QAAQ,EAAE,gBAAgB;YAC1B,WAAW,EAAE,iCAAiC;SAC/C;QACD;YACE,OAAO,EAAE,2EAA2E;YACpF,QAAQ,EAAE,2BAA2B;YACrC,WAAW,EAAE,oCAAoC;SAClD;QACD;YACE,OAAO,EAAE,wDAAwD;YACjE,QAAQ,EAAE,aAAa;YACvB,WAAW,EAAE,mDAAmD;SACjE;KACF,CAAC;IAEF,gCAAgC;IAChC,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,UAAU;gBACpB,QAAQ;gBACR,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC3B,WAAW;aACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,YAAY,EAAE,CAAC;QAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,MAAM;gBAChB,QAAQ;gBACR,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC3B,WAAW;aACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,cAAc,EAAE,CAAC;QAChE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,QAAQ;gBAClB,QAAQ;gBACR,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC3B,WAAW;aACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,uBAAuB;IACvB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,6BAA6B;IAC7B,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,eAAe,CAAC,QAAQ,KAAK,UAAU,IAAI,eAAe,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,8BAA8B,eAAe,CAAC,QAAQ,MAAM,eAAe,CAAC,WAAW,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,MAAM,wBAAwB,GAAG;QAC/B,gBAAgB,EAAE,uBAAuB;QACzC,UAAU,EAAE,eAAe;QAC3B,cAAc,EAAE,sBAAsB;QACtC,YAAY,EAAE,iBAAiB;KAChC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAClE,MAAM;QACR,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAChE,SAAS,GAAG,KAAK;aACd,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,oBAAoB;aACvC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,8BAA8B;aAC7D,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,qBAAqB;aACxD,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,6BAA6B;aAC1D,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB;IACzD,CAAC;SAAM,CAAC;QACN,kEAAkE;QAClE,SAAS,GAAG,EAAE,CAAC;IACjB,CAAC;IAED,wBAAwB;IACxB,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,mBAAmB;IACnD,IAAI,SAAS,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,mCAAmC,gBAAgB,aAAa,CAAC,CAAC;QAC9E,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,wDAAwD;IACxD,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;KACzD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,UAAkB,EAAE,GAAG,IAAI,GAAG,IAAI;IACrF,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,aAAa;IACb,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,IAAI,WAAW,GAAG,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,wCAAwC,OAAO,QAAQ,CAAC,CAAC;IACvE,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/infrastructure/security/license-scanner.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Infrastructure: License Scanner
+ * Detects license contamination in AI-generated code
+ *
+ * Research Finding: 35% of AI-generated code contains license irregularities
+ * Critical for preventing IP contamination and legal liability
+ *
+ * Based on research: AI Ethics for Coding Assistants
+ * - GPL/MIT/Apache conflicts are common
+ * - Automated detection prevents legal liability
+ * - Must integrate into CI/CD pipeline
+ */
+export interface LicenseFinding {
+    license: string;
+    filepath: string;
+    line?: number;
+    conflictType: 'incompatible' | 'missing' | 'ambiguous';
+    description: string;
+    recommendation: string;
+    severity: 'critical' | 'high' | 'medium' | 'low';
+}
+export interface LicenseScanResult {
+    findings: LicenseFinding[];
+    totalFindings: number;
+    criticalCount: number;
+    passed: boolean;
+    licenseSummary: Record<string, number>;
+}
+/**
+ * License Scanner
+ * Scans code for license headers and detects conflicts
+ */
+export declare class LicenseScanner {
+    /**
+     * Scan code for license information
+     */
+    scan(filepath: string, code: string): Promise<LicenseScanResult>;
+    /**
+     * Detect license headers in code
+     */
+    private detectLicenseHeaders;
+    /**
+     * Check if code has open-source patterns (might need license)
+     */
+    private hasOpenSourcePatterns;
+    /**
+     * Detect ambiguous license statements
+     */
+    private detectAmbiguousLicenses;
+    /**
+     * Check if code has explicit license statement
+     */
+    private hasExplicitLicense;
+}
+//# sourceMappingURL=license-scanner.d.ts.map

package/dist/infrastructure/security/license-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-scanner.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/security/license-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,cAAc,GAAG,SAAS,GAAG,WAAW,CAAC;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CAClD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAsBD;;;GAGG;AACH,qBAAa,cAAc;IACzB;;OAEG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAsEtE;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA0B5B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAe/B;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAW3B"}

package/dist/infrastructure/security/license-scanner.js

@@ -0,0 +1,167 @@
+/**
+ * Infrastructure: License Scanner
+ * Detects license contamination in AI-generated code
+ *
+ * Research Finding: 35% of AI-generated code contains license irregularities
+ * Critical for preventing IP contamination and legal liability
+ *
+ * Based on research: AI Ethics for Coding Assistants
+ * - GPL/MIT/Apache conflicts are common
+ * - Automated detection prevents legal liability
+ * - Must integrate into CI/CD pipeline
+ */
+/**
+ * License Compatibility Matrix
+ * Based on common open-source license compatibility rules
+ */
+const LICENSE_COMPATIBILITY = {
+    // GPL is incompatible with most proprietary licenses
+    'GPL-2.0': ['proprietary', 'Apache-2.0'], // GPL-2.0 incompatible with Apache-2.0
+    'GPL-3.0': ['proprietary', 'Apache-2.0'],
+    // MIT is permissive and compatible with most
+    'MIT': [], // MIT is compatible with everything
+    // Apache-2.0 is compatible with most except GPL-2.0
+    'Apache-2.0': ['GPL-2.0'],
+    // BSD is permissive
+    'BSD-2-Clause': [],
+    'BSD-3-Clause': [],
+};
+/**
+ * License Scanner
+ * Scans code for license headers and detects conflicts
+ */
+export class LicenseScanner {
+    /**
+     * Scan code for license information
+     */
+    async scan(filepath, code) {
+        const findings = [];
+        const detectedLicenses = new Set();
+        // 1. Detect license headers in code
+        const licenseHeaders = this.detectLicenseHeaders(code);
+        // 2. Check for license conflicts
+        for (const detectedLicense of licenseHeaders) {
+            detectedLicenses.add(detectedLicense);
+            // Check compatibility with other detected licenses
+            for (const otherLicense of licenseHeaders) {
+                if (detectedLicense !== otherLicense) {
+                    const incompatibilities = LICENSE_COMPATIBILITY[detectedLicense] || [];
+                    if (incompatibilities.includes(otherLicense)) {
+                        findings.push({
+                            license: detectedLicense,
+                            filepath,
+                            conflictType: 'incompatible',
+                            description: `License conflict: ${detectedLicense} is incompatible with ${otherLicense}`,
+                            recommendation: `Remove one of the conflicting licenses or use a compatible license`,
+                            severity: 'critical',
+                        });
+                    }
+                }
+            }
+        }
+        // 3. Check for missing licenses in generated code
+        // If code appears to use open-source patterns but has no license, warn
+        if (licenseHeaders.length === 0 && this.hasOpenSourcePatterns(code)) {
+            findings.push({
+                license: 'unknown',
+                filepath,
+                conflictType: 'missing',
+                description: 'Generated code may contain open-source patterns but no license header detected',
+                recommendation: 'Add appropriate license header or clarify license status',
+                severity: 'medium',
+            });
+        }
+        // 4. Check for ambiguous license statements
+        const ambiguousLicenses = this.detectAmbiguousLicenses(code);
+        for (const ambiguous of ambiguousLicenses) {
+            findings.push({
+                license: ambiguous,
+                filepath,
+                conflictType: 'ambiguous',
+                description: `Ambiguous license statement detected: ${ambiguous}`,
+                recommendation: 'Clarify license type explicitly',
+                severity: 'low',
+            });
+        }
+        const criticalCount = findings.filter(f => f.severity === 'critical').length;
+        const licenseSummary = {};
+        detectedLicenses.forEach(license => {
+            licenseSummary[license] = (licenseSummary[license] || 0) + 1;
+        });
+        return {
+            findings,
+            totalFindings: findings.length,
+            criticalCount,
+            passed: criticalCount === 0,
+            licenseSummary,
+        };
+    }
+    /**
+     * Detect license headers in code
+     */
+    detectLicenseHeaders(code) {
+        const licenses = [];
+        const upperCode = code.toUpperCase();
+        // Common license patterns
+        const patterns = [
+            { pattern: /GPL.*?v?[23]/i, license: 'GPL-3.0' },
+            { pattern: /GNU.*?GENERAL.*?PUBLIC.*?LICENSE/i, license: 'GPL-3.0' },
+            { pattern: /MIT.*?LICENSE/i, license: 'MIT' },
+            { pattern: /THE.*?MIT.*?LICENSE/i, license: 'MIT' },
+            { pattern: /APACHE.*?LICENSE.*?v?2/i, license: 'Apache-2.0' },
+            { pattern: /BSD.*?LICENSE/i, license: 'BSD-3-Clause' },
+            { pattern: /BSD.*?2.*?CLAUSE/i, license: 'BSD-2-Clause' },
+            { pattern: /ISC.*?LICENSE/i, license: 'ISC' },
+            { pattern: /PROPRIETARY/i, license: 'proprietary' },
+        ];
+        for (const { pattern, license } of patterns) {
+            if (pattern.test(code)) {
+                licenses.push(license);
+            }
+        }
+        return [...new Set(licenses)]; // Remove duplicates
+    }
+    /**
+     * Check if code has open-source patterns (might need license)
+     */
+    hasOpenSourcePatterns(code) {
+        // Patterns that suggest open-source code
+        const patterns = [
+            /copyright/i,
+            /license/i,
+            /github\.com/i,
+            /npm/i,
+            /import.*from.*['"]/i,
+            /require\(/i,
+        ];
+        return patterns.some(pattern => pattern.test(code));
+    }
+    /**
+     * Detect ambiguous license statements
+     */
+    detectAmbiguousLicenses(code) {
+        const ambiguous = [];
+        // Ambiguous patterns
+        if (/open.*?source/i.test(code) && !this.hasExplicitLicense(code)) {
+            ambiguous.push('open-source (unclear)');
+        }
+        if (/free.*?software/i.test(code) && !this.hasExplicitLicense(code)) {
+            ambiguous.push('free software (unclear)');
+        }
+        return ambiguous;
+    }
+    /**
+     * Check if code has explicit license statement
+     */
+    hasExplicitLicense(code) {
+        const explicitPatterns = [
+            /MIT/i,
+            /GPL/i,
+            /Apache/i,
+            /BSD/i,
+            /LICENSE.*?FILE/i,
+        ];
+        return explicitPatterns.some(pattern => pattern.test(code));
+    }
+}
+//# sourceMappingURL=license-scanner.js.map

package/dist/infrastructure/security/license-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-scanner.js","sourceRoot":"","sources":["../../../src/infrastructure/security/license-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoBH;;;GAGG;AACH,MAAM,qBAAqB,GAA6B;IACtD,qDAAqD;IACrD,SAAS,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,uCAAuC;IACjF,SAAS,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;IAExC,6CAA6C;IAC7C,KAAK,EAAE,EAAE,EAAE,oCAAoC;IAE/C,oDAAoD;IACpD,YAAY,EAAE,CAAC,SAAS,CAAC;IAEzB,oBAAoB;IACpB,cAAc,EAAE,EAAE;IAClB,cAAc,EAAE,EAAE;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,OAAO,cAAc;IACzB;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,IAAY;QACvC,MAAM,QAAQ,GAAqB,EAAE,CAAC;QACtC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAE3C,oCAAoC;QACpC,MAAM,cAAc,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAEvD,iCAAiC;QACjC,KAAK,MAAM,eAAe,IAAI,cAAc,EAAE,CAAC;YAC7C,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAEtC,mDAAmD;YACnD,KAAK,MAAM,YAAY,IAAI,cAAc,EAAE,CAAC;gBAC1C,IAAI,eAAe,KAAK,YAAY,EAAE,CAAC;oBACrC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;oBACvE,IAAI,iBAAiB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;wBAC7C,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,eAAe;4BACxB,QAAQ;4BACR,YAAY,EAAE,cAAc;4BAC5B,WAAW,EAAE,qBAAqB,eAAe,yBAAyB,YAAY,EAAE;4BACxF,cAAc,EAAE,oEAAoE;4BACpF,QAAQ,EAAE,UAAU;yBACrB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,uEAAuE;QACvE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,SAAS;gBAClB,QAAQ;gBACR,YAAY,EAAE,SAAS;gBACvB,WAAW,EAAE,gFAAgF;gBAC7F,cAAc,EAAE,0DAA0D;gBAC1E,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;QACL,CAAC;QAED,4CAA4C;QAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC7D,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,SAAS;gBAClB,QAAQ;gBACR,YAAY,EAAE,WAAW;gBACzB,WAAW,EAAE,yCAAyC,SAAS,EAAE;gBACjE,cAAc,EAAE,iCAAiC;gBACjD,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAC7E,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACjC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ;YACR,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,aAAa;YACb,MAAM,EAAE,aAAa,KAAK,CAAC;YAC3B,cAAc;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,IAAY;QACvC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAErC,0BAA0B;QAC1B,MAAM,QAAQ,GAAG;YACf,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;YAChD,EAAE,OAAO,EAAE,mCAAmC,EAAE,OAAO,EAAE,SAAS,EAAE;YACpE,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE;YAC7C,EAAE,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,KAAK,EAAE;YACnD,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,EAAE,YAAY,EAAE;YAC7D,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,cAAc,EAAE;YACtD,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,cAAc,EAAE;YACzD,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE;YAC7C,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE;SACpD,CAAC;QAEF,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB;IACrD,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,IAAY;QACxC,yCAAyC;QACzC,MAAM,QAAQ,GAAG;YACf,YAAY;YACZ,UAAU;YACV,cAAc;YACd,MAAM;YACN,qBAAqB;YACrB,YAAY;SACb,CAAC;QAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,IAAY;QAC1C,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,qBAAqB;QACrB,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAClE,SAAS,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,IAAY;QACrC,MAAM,gBAAgB,GAAG;YACvB,MAAM;YACN,MAAM;YACN,SAAS;YACT,MAAM;YACN,iBAAiB;SAClB,CAAC;QAEF,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/infrastructure/security/provider-bias-detector.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Infrastructure: Provider Bias Detector
+ * Detects vendor-specific SDK/API usage that creates vendor lock-in
+ *
+ * Research Finding: LLMs systematically favor Google/Amazon services
+ * This creates structural vendor lock-in and violates neutrality
+ *
+ * Based on research: AI Ethics for Coding Assistants
+ * - Provider bias detected in LLM outputs
+ * - Creates vendor lock-in risk
+ * - Must audit and enforce vendor neutrality
+ */
+export interface ProviderBiasFinding {
+    provider: string;
+    service: string;
+    filepath: string;
+    line?: number;
+    description: string;
+    recommendation: string;
+    severity: 'critical' | 'high' | 'medium' | 'low';
+}
+export interface ProviderBiasResult {
+    findings: ProviderBiasFinding[];
+    totalFindings: number;
+    criticalCount: number;
+    providerSummary: Record<string, number>;
+    passed: boolean;
+}
+/**
+ * Provider Bias Detector
+ * Scans code for provider-specific dependencies and flags vendor lock-in risks
+ */
+export declare class ProviderBiasDetector {
+    private allowedProviders?;
+    constructor(allowedProviders?: string[]);
+    /**
+     * Scan code for provider bias
+     */
+    scan(filepath: string, code: string): Promise<ProviderBiasResult>;
+    /**
+     * Detect provider-specific services in code
+     */
+    private detectProviders;
+    /**
+     * Detect hardcoded service endpoints/configurations
+     */
+    private detectHardcodedServices;
+    /**
+     * Set allowed providers (enforces vendor neutrality policy)
+     */
+    setAllowedProviders(providers: string[]): void;
+}
+//# sourceMappingURL=provider-bias-detector.d.ts.map

package/dist/infrastructure/security/provider-bias-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-bias-detector.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/security/provider-bias-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CAClD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,EAAE,OAAO,CAAC;CACjB;AA0CD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,gBAAgB,CAAC,CAAW;gBAExB,gBAAgB,CAAC,EAAE,MAAM,EAAE;IAIvC;;OAEG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAoEvE;;OAEG;IACH,OAAO,CAAC,eAAe;IAevB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAmB/B;;OAEG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;CAG/C"}