codesift-mcp 0.14.0 → 0.15.1

package/dist/tools/taint/taint-flow.js

@@ -0,0 +1,178 @@
+import { appendHop, cloneEnv, dedupePaths, isAllowedPattern, lineForNode, mergeEnvs, } from "./taint-model.js";
+import { hasPotentialSink, hasPotentialSource, loadCallableContext, } from "./python-context.js";
+import { addTrace, evaluateExpression, isSessionTarget } from "./taint-expression.js";
+async function analyzeAssignment(assignmentNode, symbol, env, state, context) {
+    const lhs = assignmentNode.childForFieldName("left") ?? assignmentNode.namedChild(0);
+    const rhs = assignmentNode.childForFieldName("right") ?? assignmentNode.namedChild(1);
+    const nextEnv = cloneEnv(env);
+    if (!lhs || !rhs)
+        return nextEnv;
+    const rhsPaths = await evaluateExpression(rhs, symbol, env, state, context, analyzeCallableSymbol);
+    if (rhsPaths.length === 0)
+        return nextEnv;
+    if (lhs.type === "identifier") {
+        nextEnv.set(lhs.text, appendHop(rhsPaths, {
+            kind: "assignment",
+            file: symbol.file,
+            line: lineForNode(symbol, assignmentNode),
+            symbol_name: symbol.name,
+            detail: `${lhs.text} = ${rhs.text}`,
+        }));
+        return nextEnv;
+    }
+    if (isSessionTarget(lhs) && isAllowedPattern(state.defaultSinks, "session-write", lhs.text)) {
+        addTrace(state, context.entrySymbol, symbol, "session-write", assignmentNode, rhsPaths);
+    }
+    return nextEnv;
+}
+async function analyzeConditionalLike(node, symbol, env, state, context) {
+    const conditionNodes = node.namedChildren.filter((child) => child.type !== "block" && child.type !== "else_clause" && child.type !== "elif_clause");
+    for (const condition of conditionNodes) {
+        await evaluateExpression(condition, symbol, env, state, context, analyzeCallableSymbol);
+    }
+    const branchResults = [];
+    let hasElseLike = false;
+    for (const child of node.namedChildren) {
+        if (child.type === "block") {
+            branchResults.push(await analyzeBlock(child, symbol, cloneEnv(env), state, context));
+            continue;
+        }
+        if (child.type === "elif_clause") {
+            hasElseLike = true;
+            branchResults.push(await analyzeConditionalLike(child, symbol, cloneEnv(env), state, context));
+            continue;
+        }
+        if (child.type === "else_clause") {
+            hasElseLike = true;
+            const elseBlock = child.namedChildren.find((grandchild) => grandchild.type === "block");
+            if (elseBlock)
+                branchResults.push(await analyzeBlock(elseBlock, symbol, cloneEnv(env), state, context));
+        }
+    }
+    const baseEnvs = hasElseLike ? [] : [env];
+    return {
+        env: mergeEnvs(...baseEnvs, ...branchResults.map((entry) => entry.env)),
+        return_paths: dedupePaths(branchResults.flatMap((entry) => entry.return_paths)),
+    };
+}
+async function analyzeLoopLike(node, symbol, env, state, context) {
+    for (const child of node.namedChildren) {
+        if (child.type === "block")
+            continue;
+        await evaluateExpression(child, symbol, env, state, context, analyzeCallableSymbol);
+    }
+    const blockResults = [];
+    for (const child of node.namedChildren) {
+        if (child.type !== "block")
+            continue;
+        blockResults.push(await analyzeBlock(child, symbol, cloneEnv(env), state, context));
+    }
+    return {
+        env: mergeEnvs(env, ...blockResults.map((entry) => entry.env)),
+        return_paths: dedupePaths(blockResults.flatMap((entry) => entry.return_paths)),
+    };
+}
+async function analyzeStatement(node, symbol, env, state, context) {
+    switch (node.type) {
+        case "expression_statement": {
+            const inner = node.namedChildren[0];
+            if (!inner)
+                return { env, return_paths: [] };
+            if (inner.type === "assignment") {
+                return {
+                    env: await analyzeAssignment(inner, symbol, env, state, context),
+                    return_paths: [],
+                };
+            }
+            await evaluateExpression(inner, symbol, env, state, context, analyzeCallableSymbol);
+            return { env, return_paths: [] };
+        }
+        case "return_statement": {
+            const valueNode = node.namedChildren[0];
+            if (!valueNode)
+                return { env, return_paths: [] };
+            const valuePaths = await evaluateExpression(valueNode, symbol, env, state, context, analyzeCallableSymbol);
+            if (valuePaths.length === 0)
+                return { env, return_paths: [] };
+            return {
+                env,
+                return_paths: appendHop(valuePaths, {
+                    kind: "return",
+                    file: symbol.file,
+                    line: lineForNode(symbol, node),
+                    symbol_name: symbol.name,
+                    detail: `return ${valueNode.text}`,
+                }),
+            };
+        }
+        case "if_statement":
+        case "elif_clause":
+            return await analyzeConditionalLike(node, symbol, env, state, context);
+        case "for_statement":
+        case "while_statement":
+        case "with_statement":
+        case "try_statement":
+            return await analyzeLoopLike(node, symbol, env, state, context);
+        case "pass_statement":
+        case "break_statement":
+        case "continue_statement":
+            return { env, return_paths: [] };
+        case "function_definition":
+        case "async_function_definition":
+        case "class_definition":
+        case "decorated_definition":
+            return { env, return_paths: [] };
+        default: {
+            for (const child of node.namedChildren) {
+                if (child.type === "block") {
+                    await analyzeBlock(child, symbol, cloneEnv(env), state, context);
+                }
+                else {
+                    await evaluateExpression(child, symbol, env, state, context, analyzeCallableSymbol);
+                }
+            }
+            return { env, return_paths: [] };
+        }
+    }
+}
+async function analyzeBlock(blockNode, symbol, env, state, context) {
+    let currentEnv = cloneEnv(env);
+    let returnPaths = [];
+    for (const child of blockNode.namedChildren) {
+        if (state.truncated)
+            break;
+        const result = await analyzeStatement(child, symbol, currentEnv, state, context);
+        currentEnv = result.env;
+        if (result.return_paths.length > 0) {
+            returnPaths = dedupePaths([...returnPaths, ...result.return_paths]);
+        }
+    }
+    return {
+        env: currentEnv,
+        return_paths: returnPaths,
+    };
+}
+async function analyzeCallableSymbol(symbol, initialEnv, state, context) {
+    const callableContext = await loadCallableContext(symbol, state);
+    if (!callableContext) {
+        return { env: initialEnv, return_paths: [] };
+    }
+    const bodyNode = callableContext.node.childForFieldName("body");
+    if (!bodyNode) {
+        return { env: initialEnv, return_paths: [] };
+    }
+    return await analyzeBlock(bodyNode, symbol, initialEnv, state, context);
+}
+function shouldAnalyzeSymbol(symbol, filePattern) {
+    if (!symbol.file.endsWith(".py"))
+        return false;
+    if (filePattern && !symbol.file.includes(filePattern))
+        return false;
+    if (!symbol.source)
+        return false;
+    if (symbol.kind !== "function" && symbol.kind !== "method")
+        return false;
+    return hasPotentialSource(symbol) || hasPotentialSink(symbol);
+}
+export { analyzeCallableSymbol, shouldAnalyzeSymbol };
+//# sourceMappingURL=taint-flow.js.map

package/dist/tools/taint/taint-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-flow.js","sourceRoot":"","sources":["../../../src/tools/taint/taint-flow.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,SAAS,EACT,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,SAAS,GACV,MAAM,kBAAkB,CAAC;AAO1B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEtF,KAAK,UAAU,iBAAiB,CAC9B,cAAsB,EACtB,MAAkB,EAClB,GAAa,EACb,KAAoB,EACpB,OAAwE;IAExE,MAAM,GAAG,GAAG,cAAc,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC;IAEjC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACnG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAE1C,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC;YACzC,WAAW,EAAE,MAAM,CAAC,IAAI;YACxB,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE;SACpC,CAAC,CAAC,CAAC;QACJ,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,YAAY,EAAE,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,IAAY,EACZ,MAAkB,EAClB,GAAa,EACb,KAAoB,EACpB,OAAwE;IAExE,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;IACpJ,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;QACvC,MAAM,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,aAAa,GAAkB,EAAE,CAAC;IACxC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,aAAa,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,WAAW,GAAG,IAAI,CAAC;YACnB,aAAa,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/F,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,WAAW,GAAG,IAAI,CAAC;YACnB,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YACxF,IAAI,SAAS;gBAAE,aAAa,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,GAAG,QAAQ,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvE,YAAY,EAAE,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,MAAkB,EAClB,GAAa,EACb,KAAoB,EACpB,OAAwE;IAExE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACrC,MAAM,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,YAAY,GAAkB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACrC,YAAY,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,YAAY,EAAE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,MAAkB,EAClB,GAAa,EACb,KAAoB,EACpB,OAAwE;IAExE,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,sBAAsB,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO;oBACL,GAAG,EAAE,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC;oBAChE,YAAY,EAAE,EAAE;iBACjB,CAAC;YACJ,CAAC;YACD,MAAM,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;YACpF,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACnC,CAAC;QACD,KAAK,kBAAkB,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;YAC3G,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;YAC9D,OAAO;gBACL,GAAG;gBACH,YAAY,EAAE,SAAS,CAAC,UAAU,EAAE;oBAClC,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC;oBAC/B,WAAW,EAAE,MAAM,CAAC,IAAI;oBACxB,MAAM,EAAE,UAAU,SAAS,CAAC,IAAI,EAAE;iBACnC,CAAC;aACH,CAAC;QACJ,CAAC;QACD,KAAK,cAAc,CAAC;QACpB,KAAK,aAAa;YAChB,OAAO,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACzE,KAAK,eAAe,CAAC;QACrB,KAAK,iBAAiB,CAAC;QACvB,KAAK,gBAAgB,CAAC;QACtB,KAAK,eAAe;YAClB,OAAO,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAClE,KAAK,gBAAgB,CAAC;QACtB,KAAK,iBAAiB,CAAC;QACvB,KAAK,oBAAoB;YACvB,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACnC,KAAK,qBAAqB,CAAC;QAC3B,KAAK,2BAA2B,CAAC;QACjC,KAAK,kBAAkB,CAAC;QACxB,KAAK,sBAAsB;YACzB,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACnC,SAAS,CAAC;YACR,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC3B,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBACnE,CAAC;qBAAM,CAAC;oBACN,MAAM,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,SAAiB,EACjB,MAAkB,EAClB,GAAa,EACb,KAAoB,EACpB,OAAwE;IAExE,IAAI,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,WAAW,GAAgB,EAAE,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM;QAC3B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACjF,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC;QACxB,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,WAAW,GAAG,WAAW,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,EAAE,UAAU;QACf,YAAY,EAAE,WAAW;KAC1B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,MAAkB,EAClB,UAAoB,EACpB,KAAoB,EACpB,OAAwE;IAExE,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC/C,CAAC;IAED,OAAO,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAkB,EAAE,WAAoB;IACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,WAAW,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzE,OAAO,kBAAkB,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/tools/taint/taint-model.d.ts

@@ -0,0 +1,113 @@
+import type { Parser, Node as TSNode } from "web-tree-sitter";
+import type { CodeIndex, CodeSymbol } from "../../types.js";
+export type TaintTraceFramework = "python-django";
+export type TaintHopKind = "assignment" | "call" | "return" | "container" | "attribute";
+export interface TaintEndpoint {
+    kind: string;
+    label: string;
+    file: string;
+    line: number;
+    symbol_name: string;
+    code: string;
+}
+export interface TaintHop {
+    kind: TaintHopKind;
+    file: string;
+    line: number;
+    symbol_name: string;
+    detail: string;
+}
+export interface TaintTraceMatch {
+    entry_symbol: string;
+    entry_file: string;
+    source: TaintEndpoint;
+    sink: TaintEndpoint;
+    hops: TaintHop[];
+    confidence: "high" | "medium" | "low";
+    heuristic: boolean;
+}
+export interface TaintTraceResult {
+    framework: TaintTraceFramework;
+    analyzed_symbols: number;
+    source_patterns: string[];
+    sink_patterns: string[];
+    traces: TaintTraceMatch[];
+    truncated: boolean;
+}
+interface TaintPath {
+    source: TaintEndpoint;
+    hops: TaintHop[];
+    heuristic: boolean;
+}
+interface CallArgumentInfo {
+    node: TSNode;
+    keyword?: string;
+    index: number;
+}
+interface FileImportBinding {
+    imported_name: string;
+    source_file: string;
+    line: number;
+}
+interface PythonFileContext {
+    imports: Map<string, FileImportBinding>;
+}
+interface CallableContext {
+    node: TSNode;
+    parameter_names: string[];
+}
+interface BlockResult {
+    env: TaintEnv;
+    return_paths: TaintPath[];
+}
+interface SinkDescriptor {
+    kind: string;
+    matches: (calleeText: string) => boolean;
+    pickArgs: (args: CallArgumentInfo[]) => CallArgumentInfo[];
+}
+interface AnalysisState {
+    index: CodeIndex;
+    pythonParser: Parser;
+    symbolsByName: Map<string, CodeSymbol[]>;
+    methodsByParent: Map<string, CodeSymbol[]>;
+    callableCache: Map<string, CallableContext | null>;
+    fileContextCache: Map<string, PythonFileContext | null>;
+    defaultSources: string[];
+    defaultSinks: string[];
+    maxDepth: number;
+    maxTraces: number;
+    sinkDescriptors: SinkDescriptor[];
+    traceKeys: Set<string>;
+    traces: TaintTraceMatch[];
+    truncated: boolean;
+}
+type TaintEnv = Map<string, TaintPath[]>;
+declare const DEFAULT_MAX_DEPTH = 4;
+declare const DEFAULT_MAX_TRACES = 50;
+declare const DEFAULT_SOURCE_PATTERNS: readonly ["request.GET", "request.POST", "request.body", "request.data", "request.headers", "request.COOKIES", "request.META"];
+declare const DEFAULT_SINK_PATTERNS: readonly ["redirect", "mark_safe", "cursor.execute", "subprocess", "requests", "httpx", "open", "session-write"];
+declare const KNOWN_SANITIZERS: Set<string>;
+declare function dedupePaths(paths: TaintPath[]): TaintPath[];
+declare function cloneEnv(env: TaintEnv): TaintEnv;
+declare function mergeEnvs(...envs: TaintEnv[]): TaintEnv;
+declare function appendHop(paths: TaintPath[], hop: TaintHop, options?: {
+    heuristic?: boolean;
+}): TaintPath[];
+declare function computeConfidence(path: TaintPath): "high" | "medium" | "low";
+declare function lineForNode(symbol: CodeSymbol, node: TSNode): number;
+declare function codeForNode(node: TSNode): string;
+declare function getAttributePath(node: TSNode | null | undefined): string | null;
+declare function getCallArguments(argsNode: TSNode | null | undefined): CallArgumentInfo[];
+declare function getParameterName(node: TSNode): string | null;
+declare function findFunctionNode(node: TSNode): TSNode | null;
+declare function createSourcePath(sourceKind: string, symbol: CodeSymbol, node: TSNode): TaintPath;
+declare function identifierPaths(env: TaintEnv, name: string): TaintPath[];
+declare function isAllowedPattern(allowed: string[], kind: string, label: string): boolean;
+declare function buildSinkDescriptors(): SinkDescriptor[];
+declare function getImportModule(node: TSNode): {
+    module: string;
+    level: number;
+};
+export { DEFAULT_MAX_DEPTH, DEFAULT_MAX_TRACES, DEFAULT_SINK_PATTERNS, DEFAULT_SOURCE_PATTERNS, KNOWN_SANITIZERS, appendHop, buildSinkDescriptors, cloneEnv, codeForNode, computeConfidence, createSourcePath, dedupePaths, findFunctionNode, getAttributePath, getCallArguments, getImportModule, getParameterName, identifierPaths, isAllowedPattern, lineForNode, mergeEnvs, };
+export type { AnalysisState, BlockResult, CallArgumentInfo, CallableContext, FileImportBinding, PythonFileContext, SinkDescriptor, TaintEnv, TaintPath, };
+//# sourceMappingURL=taint-model.d.ts.map

package/dist/tools/taint/taint-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-model.d.ts","sourceRoot":"","sources":["../../../src/tools/taint/taint-model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAClD,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAExF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,SAAS;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,gBAAgB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,UAAU,iBAAiB;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,iBAAiB;IACzB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CACzC;AAED,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,UAAU,WAAW;IACnB,GAAG,EAAE,QAAQ,CAAC;IACd,YAAY,EAAE,SAAS,EAAE,CAAC;CAC3B;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,CAAC;CAC5D;AAED,UAAU,aAAa;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACzC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3C,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC,CAAC;IACnD,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACxD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,KAAK,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAEzC,QAAA,MAAM,iBAAiB,IAAI,CAAC;AAC5B,QAAA,MAAM,kBAAkB,KAAK,CAAC;AAE9B,QAAA,MAAM,uBAAuB,YAC3B,aAAa,EACb,cAAc,EACd,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,CACN,CAAC;AAEX,QAAA,MAAM,qBAAqB,YACzB,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,OAAO,EACP,MAAM,EACN,eAAe,CACP,CAAC;AAEX,QAAA,MAAM,gBAAgB,aAMpB,CAAC;AAkBH,iBAAS,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAUpD;AAED,iBAAS,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,QAAQ,CAMzC;AAED,iBAAS,SAAS,CAAC,GAAG,IAAI,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAShD;AAED,iBAAS,SAAS,CAChB,KAAK,EAAE,SAAS,EAAE,EAClB,GAAG,EAAE,QAAQ,EACb,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAChC,SAAS,EAAE,CAMb;AAED,iBAAS,iBAAiB,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAIrE;AAED,iBAAS,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,iBAAS,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED,iBAAS,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAYxE;AAED,iBAAS,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,gBAAgB,EAAE,CA0BjF;AAED,iBAAS,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAarD;AAED,iBAAS,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASrD;AAED,iBAAS,gBAAgB,CACvB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,CAaX;AAED,iBAAS,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,CAEjE;AAED,iBAAS,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAQjF;AAED,iBAAS,oBAAoB,IAAI,cAAc,EAAE,CAkEhD;AAED,iBAAS,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAoBxE;AAED,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,SAAS,EACT,oBAAoB,EACpB,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,SAAS,GACV,CAAC;AAEF,YAAY,EACV,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,QAAQ,EACR,SAAS,GACV,CAAC"}

package/dist/tools/taint/taint-model.js

@@ -0,0 +1,277 @@
+const DEFAULT_MAX_DEPTH = 4;
+const DEFAULT_MAX_TRACES = 50;
+const DEFAULT_SOURCE_PATTERNS = [
+    "request.GET",
+    "request.POST",
+    "request.body",
+    "request.data",
+    "request.headers",
+    "request.COOKIES",
+    "request.META",
+];
+const DEFAULT_SINK_PATTERNS = [
+    "redirect",
+    "mark_safe",
+    "cursor.execute",
+    "subprocess",
+    "requests",
+    "httpx",
+    "open",
+    "session-write",
+];
+const KNOWN_SANITIZERS = new Set([
+    "escape",
+    "conditional_escape",
+    "urlquote",
+    "quote",
+    "quote_plus",
+]);
+function clonePath(path) {
+    return {
+        source: { ...path.source },
+        hops: path.hops.map((hop) => ({ ...hop })),
+        heuristic: path.heuristic,
+    };
+}
+function pathKey(path) {
+    return JSON.stringify({
+        source: path.source,
+        hops: path.hops,
+        heuristic: path.heuristic,
+    });
+}
+function dedupePaths(paths) {
+    const seen = new Set();
+    const result = [];
+    for (const path of paths) {
+        const key = pathKey(path);
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        result.push(path);
+    }
+    return result;
+}
+function cloneEnv(env) {
+    const next = new Map();
+    for (const [name, paths] of env.entries()) {
+        next.set(name, paths.map(clonePath));
+    }
+    return next;
+}
+function mergeEnvs(...envs) {
+    const merged = new Map();
+    for (const env of envs) {
+        for (const [name, paths] of env.entries()) {
+            const existing = merged.get(name) ?? [];
+            merged.set(name, dedupePaths([...existing, ...paths.map(clonePath)]));
+        }
+    }
+    return merged;
+}
+function appendHop(paths, hop, options) {
+    return dedupePaths(paths.map((path) => ({
+        source: { ...path.source },
+        hops: [...path.hops.map((entry) => ({ ...entry })), { ...hop }],
+        heuristic: path.heuristic || Boolean(options?.heuristic),
+    })));
+}
+function computeConfidence(path) {
+    if (path.heuristic)
+        return "medium";
+    if (path.hops.length >= 4)
+        return "medium";
+    return "high";
+}
+function lineForNode(symbol, node) {
+    return symbol.start_line + node.startPosition.row;
+}
+function codeForNode(node) {
+    return node.text.split("\n")[0]?.trim() ?? node.text.trim();
+}
+function getAttributePath(node) {
+    if (!node)
+        return null;
+    if (node.type === "identifier")
+        return node.text;
+    if (node.type === "attribute") {
+        const objectNode = node.childForFieldName("object") ?? node.namedChild(0);
+        const attributeNode = node.childForFieldName("attribute") ?? node.namedChild(1);
+        const objectPath = getAttributePath(objectNode);
+        const attributePath = getAttributePath(attributeNode);
+        if (!objectPath || !attributePath)
+            return null;
+        return `${objectPath}.${attributePath}`;
+    }
+    return null;
+}
+function getCallArguments(argsNode) {
+    if (!argsNode)
+        return [];
+    const args = [];
+    let index = 0;
+    for (const child of argsNode.namedChildren) {
+        if (child.type === "keyword_argument") {
+            const keywordNode = child.namedChildren[0];
+            const valueNode = child.namedChildren[1];
+            if (!valueNode)
+                continue;
+            const arg = {
+                node: valueNode,
+                index,
+            };
+            if (keywordNode?.text)
+                arg.keyword = keywordNode.text;
+            args.push(arg);
+            index += 1;
+            continue;
+        }
+        args.push({
+            node: child,
+            index,
+        });
+        index += 1;
+    }
+    return args;
+}
+function getParameterName(node) {
+    switch (node.type) {
+        case "identifier":
+            return node.text;
+        case "default_parameter":
+        case "typed_parameter":
+        case "typed_default_parameter":
+        case "list_splat_pattern":
+        case "dictionary_splat_pattern":
+            return node.namedChildren[0]?.text ?? null;
+        default:
+            return null;
+    }
+}
+function findFunctionNode(node) {
+    if (node.type === "function_definition" || node.type === "async_function_definition") {
+        return node;
+    }
+    for (const child of node.namedChildren) {
+        const found = findFunctionNode(child);
+        if (found)
+            return found;
+    }
+    return null;
+}
+function createSourcePath(sourceKind, symbol, node) {
+    return {
+        source: {
+            kind: sourceKind,
+            label: node.text,
+            file: symbol.file,
+            line: lineForNode(symbol, node),
+            symbol_name: symbol.name,
+            code: codeForNode(node),
+        },
+        hops: [],
+        heuristic: false,
+    };
+}
+function identifierPaths(env, name) {
+    return (env.get(name) ?? []).map(clonePath);
+}
+function isAllowedPattern(allowed, kind, label) {
+    if (allowed.length === 0)
+        return true;
+    return allowed.some((pattern) => pattern === kind
+        || label === pattern
+        || label.includes(pattern)
+        || kind.includes(pattern));
+}
+function buildSinkDescriptors() {
+    return [
+        {
+            kind: "redirect",
+            matches: (calleeText) => calleeText === "redirect"
+                || calleeText.endsWith(".redirect")
+                || calleeText === "HttpResponseRedirect"
+                || calleeText === "HttpResponsePermanentRedirect",
+            pickArgs: (args) => args[0] ? [args[0]] : [],
+        },
+        {
+            kind: "mark_safe",
+            matches: (calleeText) => calleeText === "mark_safe" || calleeText.endsWith(".mark_safe"),
+            pickArgs: (args) => args[0] ? [args[0]] : [],
+        },
+        {
+            kind: "cursor.execute",
+            matches: (calleeText) => calleeText === "cursor.execute" || calleeText.endsWith(".execute"),
+            pickArgs: (args) => args[0] ? [args[0]] : [],
+        },
+        {
+            kind: "subprocess",
+            matches: (calleeText) => calleeText.startsWith("subprocess.")
+                || calleeText.endsWith(".Popen")
+                || calleeText.endsWith(".run")
+                || calleeText.endsWith(".call")
+                || calleeText.endsWith(".check_call")
+                || calleeText.endsWith(".check_output"),
+            pickArgs: (args) => args[0] ? [args[0]] : [],
+        },
+        {
+            kind: "requests",
+            matches: (calleeText) => calleeText.startsWith("requests.")
+                || calleeText.includes(".requests.")
+                || calleeText.startsWith("httpx.")
+                || calleeText.includes(".httpx."),
+            pickArgs: (args) => {
+                if (args.length === 0)
+                    return [];
+                const urlKeyword = args.find((arg) => arg.keyword === "url");
+                if (urlKeyword)
+                    return [urlKeyword];
+                const urlArg = args[1] ?? args[0];
+                return urlArg ? [urlArg] : [];
+            },
+        },
+        {
+            kind: "httpx",
+            matches: (calleeText) => calleeText.startsWith("httpx.")
+                || calleeText.includes(".httpx."),
+            pickArgs: (args) => {
+                if (args.length === 0)
+                    return [];
+                const urlKeyword = args.find((arg) => arg.keyword === "url");
+                if (urlKeyword)
+                    return [urlKeyword];
+                const urlArg = args[1] ?? args[0];
+                return urlArg ? [urlArg] : [];
+            },
+        },
+        {
+            kind: "open",
+            matches: (calleeText) => calleeText === "open" || calleeText.endsWith(".open"),
+            pickArgs: (args) => args[0] ? [args[0]] : [],
+        },
+    ];
+}
+function getImportModule(node) {
+    const moduleNode = node.childForFieldName("module_name");
+    if (!moduleNode)
+        return { module: "", level: 0 };
+    if (moduleNode.type === "relative_import") {
+        let level = 0;
+        for (let i = 0; i < moduleNode.childCount; i++) {
+            const child = moduleNode.child(i);
+            if (!child)
+                continue;
+            if (child.type === "import_prefix") {
+                level += (child.text.match(/\./g) ?? []).length;
+            }
+            else if (child.type === ".") {
+                level += 1;
+            }
+        }
+        const dotted = moduleNode.namedChildren.find((child) => child.type === "dotted_name");
+        return { module: dotted?.text ?? "", level };
+    }
+    return { module: moduleNode.text, level: 0 };
+}
+export { DEFAULT_MAX_DEPTH, DEFAULT_MAX_TRACES, DEFAULT_SINK_PATTERNS, DEFAULT_SOURCE_PATTERNS, KNOWN_SANITIZERS, appendHop, buildSinkDescriptors, cloneEnv, codeForNode, computeConfidence, createSourcePath, dedupePaths, findFunctionNode, getAttributePath, getCallArguments, getImportModule, getParameterName, identifierPaths, isAllowedPattern, lineForNode, mergeEnvs, };
+//# sourceMappingURL=taint-model.js.map

package/dist/tools/taint/taint-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-model.js","sourceRoot":"","sources":["../../../src/tools/taint/taint-model.ts"],"names":[],"mappings":"AAmGA,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,MAAM,uBAAuB,GAAG;IAC9B,aAAa;IACb,cAAc;IACd,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;CACN,CAAC;AAEX,MAAM,qBAAqB,GAAG;IAC5B,UAAU;IACV,WAAW;IACX,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,OAAO;IACP,MAAM;IACN,eAAe;CACP,CAAC;AAEX,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,QAAQ;IACR,oBAAoB;IACpB,UAAU;IACV,OAAO;IACP,YAAY;CACb,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,IAAe;IAChC,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;QAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAC1C,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAe;IAC9B,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAkB;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAa;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,GAAG,IAAgB;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAChB,KAAkB,EAClB,GAAa,EACb,OAAiC;IAEjC,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;QAC1B,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC;QAC/D,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;KACzD,CAAC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAe;IACxC,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IACpC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB,EAAE,IAAY;IACnD,OAAO,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA+B;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACjD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,GAAG,UAAU,IAAI,aAAa,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAmC;IAC3D,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,IAAI,GAAuB,EAAE,CAAC;IACpC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtC,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,MAAM,GAAG,GAAqB;gBAC5B,IAAI,EAAE,SAAS;gBACf,KAAK;aACN,CAAC;YACF,IAAI,WAAW,EAAE,IAAI;gBAAE,GAAG,CAAC,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QAED,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,KAAK;YACX,KAAK;SACN,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,YAAY;YACf,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,KAAK,mBAAmB,CAAC;QACzB,KAAK,iBAAiB,CAAC;QACvB,KAAK,yBAAyB,CAAC;QAC/B,KAAK,oBAAoB,CAAC;QAC1B,KAAK,0BAA0B;YAC7B,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;QAC7C;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,IAAI,IAAI,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAkB,EAClB,MAAkB,EAClB,IAAY;IAEZ,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,IAAI,CAAC,IAAI;YAChB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC;YAC/B,WAAW,EAAE,MAAM,CAAC,IAAI;YACxB,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC;SACxB;QACD,IAAI,EAAE,EAAE;QACR,SAAS,EAAE,KAAK;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAa,EAAE,IAAY;IAClD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAiB,EAAE,IAAY,EAAE,KAAa;IACtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC9B,OAAO,KAAK,IAAI;WACb,KAAK,KAAK,OAAO;WACjB,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;WACvB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO;QACL;YACE,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CACtB,UAAU,KAAK,UAAU;mBACtB,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;mBAChC,UAAU,KAAK,sBAAsB;mBACrC,UAAU,KAAK,+BAA+B;YACnD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;SAC7C;QACD;YACE,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,WAAW,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;YACxF,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;SAC7C;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,gBAAgB,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3F,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;SAC7C;QACD;YACE,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CACtB,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC;mBACjC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;mBAC7B,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;mBAC3B,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;mBAC5B,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;mBAClC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;YACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;SAC7C;QACD;YACE,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CACtB,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC;mBAC/B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;mBACjC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;mBAC/B,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;YACnC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;gBACjB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;gBAC7D,IAAI,UAAU;oBAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACpC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,CAAC;SACF;QACD;YACE,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CACtB,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;mBAC5B,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;YACnC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;gBACjB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;gBAC7D,IAAI,UAAU;oBAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACpC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,CAAC;SACF;QACD;YACE,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC9E,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;SAC7C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAEjD,IAAI,UAAU,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACnC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAClD,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QACtF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,SAAS,EACT,oBAAoB,EACpB,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,SAAS,GACV,CAAC"}

package/dist/tools/taint-tools.d.ts

@@ -1,37 +1,5 @@
-export type TaintTraceFramework = "python-django";
-export type TaintHopKind = "assignment" | "call" | "return" | "container" | "attribute";
-export interface TaintEndpoint {
-    kind: string;
-    label: string;
-    file: string;
-    line: number;
-    symbol_name: string;
-    code: string;
-}
-export interface TaintHop {
-    kind: TaintHopKind;
-    file: string;
-    line: number;
-    symbol_name: string;
-    detail: string;
-}
-export interface TaintTraceMatch {
-    entry_symbol: string;
-    entry_file: string;
-    source: TaintEndpoint;
-    sink: TaintEndpoint;
-    hops: TaintHop[];
-    confidence: "high" | "medium" | "low";
-    heuristic: boolean;
-}
-export interface TaintTraceResult {
-    framework: TaintTraceFramework;
-    analyzed_symbols: number;
-    source_patterns: string[];
-    sink_patterns: string[];
-    traces: TaintTraceMatch[];
-    truncated: boolean;
-}
+import type { TaintTraceFramework, TaintTraceResult } from "./taint/taint-model.js";
+export type { TaintEndpoint, TaintHop, TaintHopKind, TaintTraceFramework, TaintTraceMatch, TaintTraceResult, } from "./taint/taint-model.js";
 export declare function taintTrace(repo: string, options?: {
     framework?: TaintTraceFramework;
     file_pattern?: string;

package/dist/tools/taint-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"taint-tools.d.ts","sourceRoot":"","sources":["../../src/tools/taint-tools.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAClD,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAExF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;CACpB;AAwhCD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACA,OAAO,CAAC,gBAAgB,CAAC,CA2C3B"}
+{"version":3,"file":"taint-tools.d.ts","sourceRoot":"","sources":["../../src/tools/taint-tools.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAEV,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAMhC,YAAY,EACV,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AA4ChC,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACA,OAAO,CAAC,gBAAgB,CAAC,CA2C3B"}