driftdetect-core 0.4.0 → 0.4.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/boundaries/boundary-scanner.d.ts +76 -0
- package/dist/boundaries/boundary-scanner.d.ts.map +1 -0
- package/dist/boundaries/boundary-scanner.js +801 -0
- package/dist/boundaries/boundary-scanner.js.map +1 -0
- package/dist/boundaries/data-access-learner.d.ts +126 -0
- package/dist/boundaries/data-access-learner.d.ts.map +1 -0
- package/dist/boundaries/data-access-learner.js +486 -0
- package/dist/boundaries/data-access-learner.js.map +1 -0
- package/dist/boundaries/index.d.ts +6 -0
- package/dist/boundaries/index.d.ts.map +1 -1
- package/dist/boundaries/index.js +6 -0
- package/dist/boundaries/index.js.map +1 -1
- package/dist/boundaries/security-prioritizer.d.ts +118 -0
- package/dist/boundaries/security-prioritizer.d.ts.map +1 -0
- package/dist/boundaries/security-prioritizer.js +316 -0
- package/dist/boundaries/security-prioritizer.js.map +1 -0
- package/dist/call-graph/analysis/coverage-analyzer.d.ts +201 -0
- package/dist/call-graph/analysis/coverage-analyzer.d.ts.map +1 -0
- package/dist/call-graph/analysis/coverage-analyzer.js +553 -0
- package/dist/call-graph/analysis/coverage-analyzer.js.map +1 -0
- package/dist/call-graph/analysis/dead-code-detector.d.ts +145 -0
- package/dist/call-graph/analysis/dead-code-detector.d.ts.map +1 -0
- package/dist/call-graph/analysis/dead-code-detector.js +391 -0
- package/dist/call-graph/analysis/dead-code-detector.js.map +1 -0
- package/dist/call-graph/analysis/graph-builder.d.ts +142 -0
- package/dist/call-graph/analysis/graph-builder.d.ts.map +1 -0
- package/dist/call-graph/analysis/graph-builder.js +624 -0
- package/dist/call-graph/analysis/graph-builder.js.map +1 -0
- package/dist/call-graph/analysis/impact-analyzer.d.ts +150 -0
- package/dist/call-graph/analysis/impact-analyzer.d.ts.map +1 -0
- package/dist/call-graph/analysis/impact-analyzer.js +329 -0
- package/dist/call-graph/analysis/impact-analyzer.js.map +1 -0
- package/dist/call-graph/analysis/index.d.ts +11 -0
- package/dist/call-graph/analysis/index.d.ts.map +1 -0
- package/dist/call-graph/analysis/index.js +9 -0
- package/dist/call-graph/analysis/index.js.map +1 -0
- package/dist/call-graph/analysis/path-finder.d.ts +117 -0
- package/dist/call-graph/analysis/path-finder.d.ts.map +1 -0
- package/dist/call-graph/analysis/path-finder.js +360 -0
- package/dist/call-graph/analysis/path-finder.js.map +1 -0
- package/dist/call-graph/analysis/reachability.d.ts +56 -0
- package/dist/call-graph/analysis/reachability.d.ts.map +1 -0
- package/dist/call-graph/analysis/reachability.js +357 -0
- package/dist/call-graph/analysis/reachability.js.map +1 -0
- package/dist/call-graph/demo.d.ts +11 -0
- package/dist/call-graph/demo.d.ts.map +1 -0
- package/dist/call-graph/demo.js +339 -0
- package/dist/call-graph/demo.js.map +1 -0
- package/dist/call-graph/enrichment/enrichment-engine.d.ts +126 -0
- package/dist/call-graph/enrichment/enrichment-engine.d.ts.map +1 -0
- package/dist/call-graph/enrichment/enrichment-engine.js +760 -0
- package/dist/call-graph/enrichment/enrichment-engine.js.map +1 -0
- package/dist/call-graph/enrichment/impact-scorer.d.ts +59 -0
- package/dist/call-graph/enrichment/impact-scorer.d.ts.map +1 -0
- package/dist/call-graph/enrichment/impact-scorer.js +328 -0
- package/dist/call-graph/enrichment/impact-scorer.js.map +1 -0
- package/dist/call-graph/enrichment/index.d.ts +12 -0
- package/dist/call-graph/enrichment/index.d.ts.map +1 -0
- package/dist/call-graph/enrichment/index.js +15 -0
- package/dist/call-graph/enrichment/index.js.map +1 -0
- package/dist/call-graph/enrichment/remediation-generator.d.ts +41 -0
- package/dist/call-graph/enrichment/remediation-generator.d.ts.map +1 -0
- package/dist/call-graph/enrichment/remediation-generator.js +609 -0
- package/dist/call-graph/enrichment/remediation-generator.js.map +1 -0
- package/dist/call-graph/enrichment/sensitivity-classifier.d.ts +71 -0
- package/dist/call-graph/enrichment/sensitivity-classifier.d.ts.map +1 -0
- package/dist/call-graph/enrichment/sensitivity-classifier.js +454 -0
- package/dist/call-graph/enrichment/sensitivity-classifier.js.map +1 -0
- package/dist/call-graph/enrichment/types.d.ts +402 -0
- package/dist/call-graph/enrichment/types.d.ts.map +1 -0
- package/dist/call-graph/enrichment/types.js +9 -0
- package/dist/call-graph/enrichment/types.js.map +1 -0
- package/dist/call-graph/extractors/base-extractor.d.ts +112 -0
- package/dist/call-graph/extractors/base-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/base-extractor.js +140 -0
- package/dist/call-graph/extractors/base-extractor.js.map +1 -0
- package/dist/call-graph/extractors/csharp-data-access-extractor.d.ts +76 -0
- package/dist/call-graph/extractors/csharp-data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/csharp-data-access-extractor.js +387 -0
- package/dist/call-graph/extractors/csharp-data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/csharp-extractor.d.ts +87 -0
- package/dist/call-graph/extractors/csharp-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/csharp-extractor.js +470 -0
- package/dist/call-graph/extractors/csharp-extractor.js.map +1 -0
- package/dist/call-graph/extractors/data-access-extractor.d.ts +76 -0
- package/dist/call-graph/extractors/data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/data-access-extractor.js +234 -0
- package/dist/call-graph/extractors/data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/index.d.ts +26 -0
- package/dist/call-graph/extractors/index.d.ts.map +1 -0
- package/dist/call-graph/extractors/index.js +36 -0
- package/dist/call-graph/extractors/index.js.map +1 -0
- package/dist/call-graph/extractors/java-data-access-extractor.d.ts +101 -0
- package/dist/call-graph/extractors/java-data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/java-data-access-extractor.js +611 -0
- package/dist/call-graph/extractors/java-data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/java-extractor.d.ts +87 -0
- package/dist/call-graph/extractors/java-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/java-extractor.js +510 -0
- package/dist/call-graph/extractors/java-extractor.js.map +1 -0
- package/dist/call-graph/extractors/php-data-access-extractor.d.ts +93 -0
- package/dist/call-graph/extractors/php-data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/php-data-access-extractor.js +589 -0
- package/dist/call-graph/extractors/php-data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/php-extractor.d.ts +104 -0
- package/dist/call-graph/extractors/php-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/php-extractor.js +619 -0
- package/dist/call-graph/extractors/php-extractor.js.map +1 -0
- package/dist/call-graph/extractors/python-data-access-extractor.d.ts +90 -0
- package/dist/call-graph/extractors/python-data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/python-data-access-extractor.js +537 -0
- package/dist/call-graph/extractors/python-data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/python-extractor.d.ts +98 -0
- package/dist/call-graph/extractors/python-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/python-extractor.js +681 -0
- package/dist/call-graph/extractors/python-extractor.js.map +1 -0
- package/dist/call-graph/extractors/semantic-data-access-scanner.d.ts +91 -0
- package/dist/call-graph/extractors/semantic-data-access-scanner.d.ts.map +1 -0
- package/dist/call-graph/extractors/semantic-data-access-scanner.js +498 -0
- package/dist/call-graph/extractors/semantic-data-access-scanner.js.map +1 -0
- package/dist/call-graph/extractors/typescript-data-access-extractor.d.ts +122 -0
- package/dist/call-graph/extractors/typescript-data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/typescript-data-access-extractor.js +788 -0
- package/dist/call-graph/extractors/typescript-data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/typescript-extractor.d.ts +145 -0
- package/dist/call-graph/extractors/typescript-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/typescript-extractor.js +904 -0
- package/dist/call-graph/extractors/typescript-extractor.js.map +1 -0
- package/dist/call-graph/index.d.ts +127 -0
- package/dist/call-graph/index.d.ts.map +1 -0
- package/dist/call-graph/index.js +247 -0
- package/dist/call-graph/index.js.map +1 -0
- package/dist/call-graph/store/call-graph-store.d.ts +70 -0
- package/dist/call-graph/store/call-graph-store.d.ts.map +1 -0
- package/dist/call-graph/store/call-graph-store.js +210 -0
- package/dist/call-graph/store/call-graph-store.js.map +1 -0
- package/dist/call-graph/store/index.d.ts +7 -0
- package/dist/call-graph/store/index.d.ts.map +1 -0
- package/dist/call-graph/store/index.js +7 -0
- package/dist/call-graph/store/index.js.map +1 -0
- package/dist/call-graph/types.d.ts +376 -0
- package/dist/call-graph/types.d.ts.map +1 -0
- package/dist/call-graph/types.js +8 -0
- package/dist/call-graph/types.js.map +1 -0
- package/dist/index.d.ts +8 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +12 -0
- package/dist/index.js.map +1 -1
- package/dist/lake/callgraph-shard-store.d.ts +168 -0
- package/dist/lake/callgraph-shard-store.d.ts.map +1 -0
- package/dist/lake/callgraph-shard-store.js +466 -0
- package/dist/lake/callgraph-shard-store.js.map +1 -0
- package/dist/lake/examples-store.d.ts +127 -0
- package/dist/lake/examples-store.d.ts.map +1 -0
- package/dist/lake/examples-store.js +389 -0
- package/dist/lake/examples-store.js.map +1 -0
- package/dist/lake/index-store.d.ts +82 -0
- package/dist/lake/index-store.d.ts.map +1 -0
- package/dist/lake/index-store.js +359 -0
- package/dist/lake/index-store.js.map +1 -0
- package/dist/lake/index.d.ts +93 -0
- package/dist/lake/index.d.ts.map +1 -0
- package/dist/lake/index.js +138 -0
- package/dist/lake/index.js.map +1 -0
- package/dist/lake/lake.bak/index-store.d.ts +82 -0
- package/dist/lake/lake.bak/index-store.d.ts.map +1 -0
- package/dist/lake/lake.bak/index-store.js +357 -0
- package/dist/lake/lake.bak/index-store.js.map +1 -0
- package/dist/lake/lake.bak/index.d.ts +81 -0
- package/dist/lake/lake.bak/index.d.ts.map +1 -0
- package/dist/lake/lake.bak/index.js +114 -0
- package/dist/lake/lake.bak/index.js.map +1 -0
- package/dist/lake/lake.bak/manifest-store.d.ts +51 -0
- package/dist/lake/lake.bak/manifest-store.d.ts.map +1 -0
- package/dist/lake/lake.bak/manifest-store.js +347 -0
- package/dist/lake/lake.bak/manifest-store.js.map +1 -0
- package/dist/lake/lake.bak/query-engine.d.ts +112 -0
- package/dist/lake/lake.bak/query-engine.d.ts.map +1 -0
- package/dist/lake/lake.bak/query-engine.js +370 -0
- package/dist/lake/lake.bak/query-engine.js.map +1 -0
- package/dist/lake/lake.bak/types.d.ts +428 -0
- package/dist/lake/lake.bak/types.d.ts.map +1 -0
- package/dist/lake/lake.bak/types.js +46 -0
- package/dist/lake/lake.bak/types.js.map +1 -0
- package/dist/lake/lake.bak/view-materializer.d.ts +70 -0
- package/dist/lake/lake.bak/view-materializer.d.ts.map +1 -0
- package/dist/lake/lake.bak/view-materializer.js +314 -0
- package/dist/lake/lake.bak/view-materializer.js.map +1 -0
- package/dist/lake/lake.bak/view-store.d.ts +57 -0
- package/dist/lake/lake.bak/view-store.d.ts.map +1 -0
- package/dist/lake/lake.bak/view-store.js +348 -0
- package/dist/lake/lake.bak/view-store.js.map +1 -0
- package/dist/lake/manifest-store.d.ts +51 -0
- package/dist/lake/manifest-store.d.ts.map +1 -0
- package/dist/lake/manifest-store.js +348 -0
- package/dist/lake/manifest-store.js.map +1 -0
- package/dist/lake/pattern-shard-store.d.ts +87 -0
- package/dist/lake/pattern-shard-store.d.ts.map +1 -0
- package/dist/lake/pattern-shard-store.js +347 -0
- package/dist/lake/pattern-shard-store.js.map +1 -0
- package/dist/lake/query-engine.d.ts +124 -0
- package/dist/lake/query-engine.d.ts.map +1 -0
- package/dist/lake/query-engine.js +453 -0
- package/dist/lake/query-engine.js.map +1 -0
- package/dist/lake/security-shard-store.d.ts +156 -0
- package/dist/lake/security-shard-store.d.ts.map +1 -0
- package/dist/lake/security-shard-store.js +498 -0
- package/dist/lake/security-shard-store.js.map +1 -0
- package/dist/lake/types.d.ts +428 -0
- package/dist/lake/types.d.ts.map +1 -0
- package/dist/lake/types.js +46 -0
- package/dist/lake/types.js.map +1 -0
- package/dist/lake/view-materializer.d.ts +70 -0
- package/dist/lake/view-materializer.d.ts.map +1 -0
- package/dist/lake/view-materializer.js +314 -0
- package/dist/lake/view-materializer.js.map +1 -0
- package/dist/lake/view-store.d.ts +57 -0
- package/dist/lake/view-store.d.ts.map +1 -0
- package/dist/lake/view-store.js +348 -0
- package/dist/lake/view-store.js.map +1 -0
- package/dist/parsers/tree-sitter/index.d.ts +1 -0
- package/dist/parsers/tree-sitter/index.d.ts.map +1 -1
- package/dist/parsers/tree-sitter/index.js +4 -0
- package/dist/parsers/tree-sitter/index.js.map +1 -1
- package/dist/parsers/tree-sitter/typescript-loader.d.ts +58 -0
- package/dist/parsers/tree-sitter/typescript-loader.d.ts.map +1 -0
- package/dist/parsers/tree-sitter/typescript-loader.js +250 -0
- package/dist/parsers/tree-sitter/typescript-loader.js.map +1 -0
- package/dist/store/project-config.d.ts +154 -0
- package/dist/store/project-config.d.ts.map +1 -0
- package/dist/store/project-config.js +235 -0
- package/dist/store/project-config.js.map +1 -0
- package/dist/store/project-registry.d.ts +241 -0
- package/dist/store/project-registry.d.ts.map +1 -0
- package/dist/store/project-registry.js +557 -0
- package/dist/store/project-registry.js.map +1 -0
- package/package.json +7 -7
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"data-access-learner.js","sourceRoot":"","sources":["../../src/boundaries/data-access-learner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA8DH,MAAM,CAAC,MAAM,mCAAmC,GAA6B;IAC3E,cAAc,EAAE,CAAC;IACjB,QAAQ,EAAE,CAAC;IACX,aAAa,EAAE,GAAG;CACnB,CAAC;AAcF;;GAEG;AACH,MAAM,oBAAoB,GAAyB;IACjD,WAAW;IACX;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,WAAW;YACX,qBAAqB;YACrB,yBAAyB;SAC1B;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAC7E,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC5B,CAAC;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,4BAA4B;YAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACtE,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9E,CAAC;YACD,sBAAsB;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACxD,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,UAAU,EAAE,IAAI;KACjB;IACD,SAAS;IACT;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE;YACR,WAAW;YACX,iBAAiB;YACjB,cAAc;SACf;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC/D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC5B,CAAC;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,8BAA8B;YAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC3D,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC3D,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;oBAC7B,IAAI,CAAC,CAAC,CAAC,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,UAAU,EAAE,IAAI;KACjB;IACD,aAAa;IACb;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE;YACR,aAAa;YACb,eAAe;YACf,aAAa;SACd;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACzD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,8BAA8B;YAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACzD,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;gBAC/D,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;oBAC7B,IAAI,CAAC,CAAC,CAAC,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,uBAAuB;YACvB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACzD,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC3D,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;oBAC7B,IAAI,CAAC,CAAC,CAAC,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,UAAU,EAAE,GAAG;KAChB;IACD,aAAa;IACb;QACE,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE;YACR,gBAAgB;YAChB,kBAAkB;YAClB,iBAAiB;SAClB;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACpE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE;QACxB,UAAU,EAAE,IAAI;KACjB;IACD,UAAU;IACV;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACR,SAAS;YACT,eAAe;YACf,sBAAsB;SACvB;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC1E,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE;QACxB,UAAU,EAAE,GAAG;KAChB;IACD,YAAY;IACZ;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE;YACR,mBAAmB;YACnB,aAAa;YACb,wBAAwB;SACzB;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,kCAAkC;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAChF,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE;QACxB,UAAU,EAAE,IAAI;KACjB;IACD,WAAW;IACX;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,iBAAiB;YACjB,YAAY;YACZ,uBAAuB;SACxB;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;YACvF,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE;QACxB,UAAU,EAAE,IAAI;KACjB;IACD,UAAU;IACV;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACR,aAAa;YACb,wBAAwB;SACzB;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACxE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC5B,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE;QACxB,UAAU,EAAE,IAAI;KACjB;IACD,OAAO;IACP;QACE,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE;YACR,QAAQ;YACR,cAAc;YACd,mBAAmB;SACpB;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YAC5E,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC7E,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAChC,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE;QACxB,UAAU,EAAE,IAAI;KACjB;IACD,qBAAqB;IACrB;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACR,aAAa;YACb,aAAa;YACb,aAAa;YACb,aAAa;SACd;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC7E,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC7E,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACjF,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE;QACxB,UAAU,EAAE,GAAG;KAChB;CACF,CAAC;AAEF,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IACpB,MAAM,CAA2B;IACjC,WAAW,GAAwC,IAAI,CAAC;IACxD,gBAAgB,GAAG,IAAI,GAAG,EAAgH,CAAC;IAC3I,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,eAAe,GAAG,IAAI,GAAG,EAA+B,CAAC,CAAC,6BAA6B;IAE/F,YAAY,SAA4C,EAAE;QACxD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,mCAAmC,EAAE,GAAG,MAAM,EAAE,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,OAAe,EAAE,IAAY;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,2CAA2C;QAC3C,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,gBAAgB;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBACnD,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxD,SAAS;YACX,CAAC;YAED,kCAAkC;YAClC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAa,CAAC;YAE/F,0CAA0C;YAC1C,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;gBAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACtD,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;oBAEpF,0BAA0B;oBAC1B,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACvC,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe;QACtC,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAE1C,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;YAC7C,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1B,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACzB,IAAI,CAAC,eAAe,CAAC,GAAG,CACtB,SAAS,CAAC,IAAI,EACd,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CACpD,CAAC;oBACF,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YACpE,IAAI,MAAM;gBAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,KAAa,EAAE,IAAY,EAAE,SAAiB,EAAE,MAAgB;QACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE;gBAC/B,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC7B,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC;gBACvB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,IAAY,EAAE,KAAa;QACtD,kDAAkD;QAClD,MAAM,WAAW,GAAG;YAClB,+BAA+B;YAC/B,2BAA2B;YAC3B,kBAAkB;YAClB,uBAAuB;SACxB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBACvC,4CAA4C;gBAC5C,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;gBACpD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,aAAqB;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;QAE3D,0CAA0C;QAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACxF,MAAM,OAAO,GAA6B;oBACxC,EAAE,EAAE,SAAS,KAAK,EAAE;oBACpB,KAAK;oBACL,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC/B,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;oBACvC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;oBAC7B,WAAW,EAAE,IAAI,CAAC,KAAK;oBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,mBAAmB;iBAC9D,CAAC;gBACF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;gBACrC,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACtD,IAAI,KAAK,GAAG,QAAQ,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAChD,QAAQ,GAAG,KAAK,CAAC;gBACjB,gBAAgB,GAAG,SAAS,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,MAAM,qBAAqB,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAErF,0BAA0B;QAC1B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;QACnD,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACvD,+CAA+C;YAC/C,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACtC,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;oBACtB,SAAS,GAAG,KAAK,CAAC;oBAClB,SAAS,GAAG,KAAK,CAAC;gBACpB,CAAC;YACH,CAAC;YACD,IAAI,SAAS,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBAChC,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;YAClD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,GAAG;YACjB,MAAM;YACN,qBAAqB;YACrB,gBAAgB;YAChB,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;YAC1C,gBAAgB;YAChB,aAAa;YACb,aAAa,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC;SAC/B,CAAC;QAEF,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,MAAgB;QAC7C,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,UAAU,EAAE,CAAC;iBACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,UAAU,EAAE,CAAC;iBAClG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE;gBAAE,WAAW,EAAE,CAAC;QACnF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,UAAU,GAAG,KAAK,GAAG,GAAG;YAAE,OAAO,YAAY,CAAC;QAClD,IAAI,UAAU,GAAG,KAAK,GAAG,GAAG;YAAE,OAAO,WAAW,CAAC;QACjD,IAAI,WAAW,GAAG,KAAK,GAAG,GAAG;YAAE,OAAO,YAAY,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,OAAe;QACpC,OAAO,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC;IAC/E,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;CACF;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,UAAU,uBAAuB,CAAC,MAA0C;IAChF,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC"}
|
|
@@ -5,4 +5,10 @@
|
|
|
5
5
|
*/
|
|
6
6
|
export type { DataOperation, SensitivityType, ORMFramework, ORMModel, SensitiveField, DataAccessPoint, TableAccessInfo, FileAccessInfo, DataAccessMap, BoundarySeverity, BoundaryRule, SensitivityTiers, BoundaryRules, BoundaryViolation, BoundaryStoreConfig, BoundaryScanResult, } from './types.js';
|
|
7
7
|
export { BoundaryStore, createBoundaryStore } from './boundary-store.js';
|
|
8
|
+
export { BoundaryScanner, createBoundaryScanner } from './boundary-scanner.js';
|
|
9
|
+
export type { BoundaryScannerConfig, ScanFilesOptions } from './boundary-scanner.js';
|
|
10
|
+
export { DataAccessLearner, createDataAccessLearner } from './data-access-learner.js';
|
|
11
|
+
export type { LearnedDataAccessPattern, LearnedDataAccessConventions, DataAccessLearningConfig, } from './data-access-learner.js';
|
|
12
|
+
export { SecurityPrioritizer, createSecurityPrioritizer } from './security-prioritizer.js';
|
|
13
|
+
export type { SecurityClassification, PrioritizedAccessPoint, SecuritySummary, PrioritizedScanResult, } from './security-prioritizer.js';
|
|
8
14
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/boundaries/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,aAAa,EACb,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/boundaries/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,aAAa,EACb,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGzE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,YAAY,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGrF,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACtF,YAAY,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAC3F,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,qBAAqB,GACtB,MAAM,2BAA2B,CAAC"}
|
package/dist/boundaries/index.js
CHANGED
|
@@ -5,4 +5,10 @@
|
|
|
5
5
|
*/
|
|
6
6
|
// Store
|
|
7
7
|
export { BoundaryStore, createBoundaryStore } from './boundary-store.js';
|
|
8
|
+
// Scanner (with learning)
|
|
9
|
+
export { BoundaryScanner, createBoundaryScanner } from './boundary-scanner.js';
|
|
10
|
+
// Data Access Learner
|
|
11
|
+
export { DataAccessLearner, createDataAccessLearner } from './data-access-learner.js';
|
|
12
|
+
// Security Prioritizer
|
|
13
|
+
export { SecurityPrioritizer, createSecurityPrioritizer } from './security-prioritizer.js';
|
|
8
14
|
//# sourceMappingURL=index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/boundaries/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAsBH,QAAQ;AACR,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/boundaries/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAsBH,QAAQ;AACR,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEzE,0BAA0B;AAC1B,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAG/E,sBAAsB;AACtB,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAOtF,uBAAuB;AACvB,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC"}
|
|
@@ -0,0 +1,118 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Security Prioritizer
|
|
3
|
+
*
|
|
4
|
+
* Integrates sensitivity classification with boundary scanner results
|
|
5
|
+
* to prioritize data access points by security risk.
|
|
6
|
+
*
|
|
7
|
+
* Separates real security threats (credentials, PII, financial data)
|
|
8
|
+
* from noise (button colors, UI preferences).
|
|
9
|
+
*/
|
|
10
|
+
import type { DataAccessPoint, SensitiveField, DataAccessMap, SensitivityType } from './types.js';
|
|
11
|
+
import { SensitivityClassifier } from '../call-graph/enrichment/sensitivity-classifier.js';
|
|
12
|
+
import type { DataRegulation, PriorityTier } from '../call-graph/enrichment/types.js';
|
|
13
|
+
/**
|
|
14
|
+
* Security classification for a data access point
|
|
15
|
+
*/
|
|
16
|
+
export interface SecurityClassification {
|
|
17
|
+
/** Priority tier (P0 = critical, P4 = minimal) */
|
|
18
|
+
tier: PriorityTier;
|
|
19
|
+
/** Overall risk score (0-100) */
|
|
20
|
+
riskScore: number;
|
|
21
|
+
/** Sensitivity type of the most sensitive field */
|
|
22
|
+
maxSensitivity: SensitivityType;
|
|
23
|
+
/** Regulatory implications */
|
|
24
|
+
regulations: DataRegulation[];
|
|
25
|
+
/** Why this is classified at this level */
|
|
26
|
+
rationale: string;
|
|
27
|
+
/** Is this a real security concern vs noise? */
|
|
28
|
+
isSecurityRelevant: boolean;
|
|
29
|
+
}
|
|
30
|
+
/**
|
|
31
|
+
* A data access point with security classification
|
|
32
|
+
*/
|
|
33
|
+
export interface PrioritizedAccessPoint {
|
|
34
|
+
/** Original access point */
|
|
35
|
+
accessPoint: DataAccessPoint;
|
|
36
|
+
/** Security classification */
|
|
37
|
+
security: SecurityClassification;
|
|
38
|
+
/** Sensitive fields accessed */
|
|
39
|
+
sensitiveFields: SensitiveField[];
|
|
40
|
+
}
|
|
41
|
+
/**
|
|
42
|
+
* Summary of security priorities
|
|
43
|
+
*/
|
|
44
|
+
export interface SecuritySummary {
|
|
45
|
+
/** Total access points analyzed */
|
|
46
|
+
totalAccessPoints: number;
|
|
47
|
+
/** Access points by priority tier */
|
|
48
|
+
byTier: Record<PriorityTier, number>;
|
|
49
|
+
/** Access points by sensitivity type */
|
|
50
|
+
bySensitivity: Record<SensitivityType, number>;
|
|
51
|
+
/** Regulations implicated */
|
|
52
|
+
regulations: DataRegulation[];
|
|
53
|
+
/** Critical items (P0/P1) */
|
|
54
|
+
criticalCount: number;
|
|
55
|
+
/** High priority items (P2) */
|
|
56
|
+
highCount: number;
|
|
57
|
+
/** Low priority items (P3/P4) */
|
|
58
|
+
lowCount: number;
|
|
59
|
+
/** Noise (non-security-relevant) */
|
|
60
|
+
noiseCount: number;
|
|
61
|
+
}
|
|
62
|
+
/**
|
|
63
|
+
* Prioritized scan result
|
|
64
|
+
*/
|
|
65
|
+
export interface PrioritizedScanResult {
|
|
66
|
+
/** All access points with security classification */
|
|
67
|
+
accessPoints: PrioritizedAccessPoint[];
|
|
68
|
+
/** Summary statistics */
|
|
69
|
+
summary: SecuritySummary;
|
|
70
|
+
/** Critical items only (P0/P1) */
|
|
71
|
+
critical: PrioritizedAccessPoint[];
|
|
72
|
+
/** High priority items (P2) */
|
|
73
|
+
high: PrioritizedAccessPoint[];
|
|
74
|
+
/** Low priority items (P3/P4) */
|
|
75
|
+
low: PrioritizedAccessPoint[];
|
|
76
|
+
/** Noise (non-security-relevant) */
|
|
77
|
+
noise: PrioritizedAccessPoint[];
|
|
78
|
+
}
|
|
79
|
+
/**
|
|
80
|
+
* Prioritizes data access points by security risk
|
|
81
|
+
*/
|
|
82
|
+
export declare class SecurityPrioritizer {
|
|
83
|
+
private classifier;
|
|
84
|
+
constructor();
|
|
85
|
+
/**
|
|
86
|
+
* Prioritize all access points from a scan result
|
|
87
|
+
*/
|
|
88
|
+
prioritize(accessMap: DataAccessMap): PrioritizedScanResult;
|
|
89
|
+
/**
|
|
90
|
+
* Classify a single access point
|
|
91
|
+
*/
|
|
92
|
+
classifyAccessPoint(accessPoint: DataAccessPoint, accessMap: DataAccessMap): SecurityClassification;
|
|
93
|
+
/**
|
|
94
|
+
* Check if an access point is noise (non-security-relevant)
|
|
95
|
+
*/
|
|
96
|
+
private isNoise;
|
|
97
|
+
/**
|
|
98
|
+
* Calculate priority tier from risk score and context
|
|
99
|
+
*/
|
|
100
|
+
private calculateTier;
|
|
101
|
+
/**
|
|
102
|
+
* Find sensitive fields related to an access point
|
|
103
|
+
*/
|
|
104
|
+
private findSensitiveFields;
|
|
105
|
+
/**
|
|
106
|
+
* Build summary statistics
|
|
107
|
+
*/
|
|
108
|
+
private buildSummary;
|
|
109
|
+
/**
|
|
110
|
+
* Get the underlying classifier for custom patterns
|
|
111
|
+
*/
|
|
112
|
+
getClassifier(): SensitivityClassifier;
|
|
113
|
+
}
|
|
114
|
+
/**
|
|
115
|
+
* Create a new security prioritizer
|
|
116
|
+
*/
|
|
117
|
+
export declare function createSecurityPrioritizer(): SecurityPrioritizer;
|
|
118
|
+
//# sourceMappingURL=security-prioritizer.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"security-prioritizer.d.ts","sourceRoot":"","sources":["../../src/boundaries/security-prioritizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,aAAa,EACb,eAAe,EAEhB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,EAEtB,MAAM,oDAAoD,CAAC;AAC5D,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACb,MAAM,mCAAmC,CAAC;AAM3C;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,kDAAkD;IAClD,IAAI,EAAE,YAAY,CAAC;IACnB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,cAAc,EAAE,eAAe,CAAC;IAChC,8BAA8B;IAC9B,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,4BAA4B;IAC5B,WAAW,EAAE,eAAe,CAAC;IAC7B,8BAA8B;IAC9B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,gCAAgC;IAChC,eAAe,EAAE,cAAc,EAAE,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACrC,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC/C,6BAA6B;IAC7B,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,6BAA6B;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,qDAAqD;IACrD,YAAY,EAAE,sBAAsB,EAAE,CAAC;IACvC,yBAAyB;IACzB,OAAO,EAAE,eAAe,CAAC;IACzB,kCAAkC;IAClC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,+BAA+B;IAC/B,IAAI,EAAE,sBAAsB,EAAE,CAAC;IAC/B,iCAAiC;IACjC,GAAG,EAAE,sBAAsB,EAAE,CAAC;IAC9B,oCAAoC;IACpC,KAAK,EAAE,sBAAsB,EAAE,CAAC;CACjC;AAkED;;GAEG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,UAAU,CAAwB;;IAM1C;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,aAAa,GAAG,qBAAqB;IAoC3D;;OAEG;IACH,mBAAmB,CACjB,WAAW,EAAE,eAAe,EAC5B,SAAS,EAAE,aAAa,GACvB,sBAAsB;IAiFzB;;OAEG;IACH,OAAO,CAAC,OAAO;IAgCf;;OAEG;IACH,OAAO,CAAC,aAAa;IA4CrB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAsB3B;;OAEG;IACH,OAAO,CAAC,YAAY;IAqCpB;;OAEG;IACH,aAAa,IAAI,qBAAqB;CAGvC;AAMD;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,mBAAmB,CAE/D"}
|
|
@@ -0,0 +1,316 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Security Prioritizer
|
|
3
|
+
*
|
|
4
|
+
* Integrates sensitivity classification with boundary scanner results
|
|
5
|
+
* to prioritize data access points by security risk.
|
|
6
|
+
*
|
|
7
|
+
* Separates real security threats (credentials, PII, financial data)
|
|
8
|
+
* from noise (button colors, UI preferences).
|
|
9
|
+
*/
|
|
10
|
+
import { SensitivityClassifier, createSensitivityClassifier, } from '../call-graph/enrichment/sensitivity-classifier.js';
|
|
11
|
+
// ============================================================================
|
|
12
|
+
// Risk Scoring
|
|
13
|
+
// ============================================================================
|
|
14
|
+
/**
|
|
15
|
+
* Operation risk multipliers
|
|
16
|
+
*/
|
|
17
|
+
const OPERATION_MULTIPLIERS = {
|
|
18
|
+
write: 1.0, // Can modify/create sensitive data
|
|
19
|
+
delete: 1.0, // Can destroy sensitive data
|
|
20
|
+
read: 0.8, // Can exfiltrate sensitive data
|
|
21
|
+
unknown: 0.5, // Uncertain risk
|
|
22
|
+
};
|
|
23
|
+
/**
|
|
24
|
+
* Tables that are typically NOT security-relevant (noise)
|
|
25
|
+
*/
|
|
26
|
+
const NOISE_TABLE_PATTERNS = [
|
|
27
|
+
/^settings$/i,
|
|
28
|
+
/^preferences$/i,
|
|
29
|
+
/^themes$/i,
|
|
30
|
+
/^ui_/i,
|
|
31
|
+
/^display_/i,
|
|
32
|
+
/^layout/i,
|
|
33
|
+
/^color/i,
|
|
34
|
+
/^style/i,
|
|
35
|
+
/^cache$/i,
|
|
36
|
+
/^temp$/i,
|
|
37
|
+
/^tmp$/i,
|
|
38
|
+
/^migrations$/i,
|
|
39
|
+
/^schema_/i,
|
|
40
|
+
/^_prisma/i,
|
|
41
|
+
/^__/, // Internal tables
|
|
42
|
+
];
|
|
43
|
+
/**
|
|
44
|
+
* Fields that are typically NOT security-relevant (noise)
|
|
45
|
+
*/
|
|
46
|
+
const NOISE_FIELD_PATTERNS = [
|
|
47
|
+
/^color$/i,
|
|
48
|
+
/^theme$/i,
|
|
49
|
+
/^font/i,
|
|
50
|
+
/^size$/i,
|
|
51
|
+
/^width$/i,
|
|
52
|
+
/^height$/i,
|
|
53
|
+
/^position$/i,
|
|
54
|
+
/^layout$/i,
|
|
55
|
+
/^display$/i,
|
|
56
|
+
/^visible$/i,
|
|
57
|
+
/^enabled$/i,
|
|
58
|
+
/^active$/i,
|
|
59
|
+
/^created_at$/i,
|
|
60
|
+
/^updated_at$/i,
|
|
61
|
+
/^deleted_at$/i,
|
|
62
|
+
/^version$/i,
|
|
63
|
+
/^sort_order$/i,
|
|
64
|
+
/^order$/i,
|
|
65
|
+
/^index$/i,
|
|
66
|
+
];
|
|
67
|
+
// ============================================================================
|
|
68
|
+
// Security Prioritizer
|
|
69
|
+
// ============================================================================
|
|
70
|
+
/**
|
|
71
|
+
* Prioritizes data access points by security risk
|
|
72
|
+
*/
|
|
73
|
+
export class SecurityPrioritizer {
|
|
74
|
+
classifier;
|
|
75
|
+
constructor() {
|
|
76
|
+
this.classifier = createSensitivityClassifier();
|
|
77
|
+
}
|
|
78
|
+
/**
|
|
79
|
+
* Prioritize all access points from a scan result
|
|
80
|
+
*/
|
|
81
|
+
prioritize(accessMap) {
|
|
82
|
+
const prioritized = [];
|
|
83
|
+
for (const accessPoint of Object.values(accessMap.accessPoints)) {
|
|
84
|
+
const classification = this.classifyAccessPoint(accessPoint, accessMap);
|
|
85
|
+
const sensitiveFields = this.findSensitiveFields(accessPoint, accessMap);
|
|
86
|
+
prioritized.push({
|
|
87
|
+
accessPoint,
|
|
88
|
+
security: classification,
|
|
89
|
+
sensitiveFields,
|
|
90
|
+
});
|
|
91
|
+
}
|
|
92
|
+
// Sort by risk score (highest first)
|
|
93
|
+
prioritized.sort((a, b) => b.security.riskScore - a.security.riskScore);
|
|
94
|
+
// Categorize
|
|
95
|
+
const critical = prioritized.filter(p => p.security.tier === 'P0' || p.security.tier === 'P1');
|
|
96
|
+
const high = prioritized.filter(p => p.security.tier === 'P2');
|
|
97
|
+
const low = prioritized.filter(p => p.security.tier === 'P3' || p.security.tier === 'P4');
|
|
98
|
+
const noise = prioritized.filter(p => !p.security.isSecurityRelevant);
|
|
99
|
+
// Build summary
|
|
100
|
+
const summary = this.buildSummary(prioritized);
|
|
101
|
+
return {
|
|
102
|
+
accessPoints: prioritized,
|
|
103
|
+
summary,
|
|
104
|
+
critical,
|
|
105
|
+
high,
|
|
106
|
+
low,
|
|
107
|
+
noise,
|
|
108
|
+
};
|
|
109
|
+
}
|
|
110
|
+
/**
|
|
111
|
+
* Classify a single access point
|
|
112
|
+
*/
|
|
113
|
+
classifyAccessPoint(accessPoint, accessMap) {
|
|
114
|
+
// Check if this is noise (non-security-relevant)
|
|
115
|
+
if (this.isNoise(accessPoint)) {
|
|
116
|
+
return {
|
|
117
|
+
tier: 'P4',
|
|
118
|
+
riskScore: 5,
|
|
119
|
+
maxSensitivity: 'unknown',
|
|
120
|
+
regulations: [],
|
|
121
|
+
rationale: 'Non-security-relevant data (UI/settings)',
|
|
122
|
+
isSecurityRelevant: false,
|
|
123
|
+
};
|
|
124
|
+
}
|
|
125
|
+
// Get table info
|
|
126
|
+
const tableInfo = accessMap.tables[accessPoint.table];
|
|
127
|
+
const sensitiveFields = tableInfo?.sensitiveFields ?? [];
|
|
128
|
+
// Classify each field
|
|
129
|
+
let maxScore = 0;
|
|
130
|
+
let maxSensitivity = 'unknown';
|
|
131
|
+
const allRegulations = new Set();
|
|
132
|
+
const rationales = [];
|
|
133
|
+
// Check fields in the access point
|
|
134
|
+
for (const field of accessPoint.fields) {
|
|
135
|
+
const profile = this.classifier.classify(field, accessPoint.table);
|
|
136
|
+
if (profile.baseScore > maxScore) {
|
|
137
|
+
maxScore = profile.baseScore;
|
|
138
|
+
maxSensitivity = profile.type;
|
|
139
|
+
}
|
|
140
|
+
for (const reg of profile.regulations) {
|
|
141
|
+
allRegulations.add(reg);
|
|
142
|
+
}
|
|
143
|
+
if (profile.type !== 'unknown') {
|
|
144
|
+
rationales.push(profile.rationale);
|
|
145
|
+
}
|
|
146
|
+
}
|
|
147
|
+
// Also check sensitive fields detected in the table
|
|
148
|
+
for (const sf of sensitiveFields) {
|
|
149
|
+
const profile = this.classifier.classify(sf.field, sf.table ?? undefined);
|
|
150
|
+
if (profile.baseScore > maxScore) {
|
|
151
|
+
maxScore = profile.baseScore;
|
|
152
|
+
maxSensitivity = profile.type;
|
|
153
|
+
}
|
|
154
|
+
for (const reg of profile.regulations) {
|
|
155
|
+
allRegulations.add(reg);
|
|
156
|
+
}
|
|
157
|
+
}
|
|
158
|
+
// Apply operation multiplier
|
|
159
|
+
const operationMultiplier = OPERATION_MULTIPLIERS[accessPoint.operation];
|
|
160
|
+
const riskScore = Math.round(maxScore * operationMultiplier);
|
|
161
|
+
// Determine tier
|
|
162
|
+
const tier = this.calculateTier(riskScore, maxSensitivity, accessPoint.operation);
|
|
163
|
+
// Build rationale
|
|
164
|
+
let rationale = rationales.length > 0
|
|
165
|
+
? rationales[0] ?? 'Unknown sensitivity'
|
|
166
|
+
: 'No sensitive data patterns detected';
|
|
167
|
+
if (accessPoint.operation === 'write' || accessPoint.operation === 'delete') {
|
|
168
|
+
rationale += ` (${accessPoint.operation} operation increases risk)`;
|
|
169
|
+
}
|
|
170
|
+
return {
|
|
171
|
+
tier,
|
|
172
|
+
riskScore,
|
|
173
|
+
maxSensitivity,
|
|
174
|
+
regulations: Array.from(allRegulations),
|
|
175
|
+
rationale,
|
|
176
|
+
isSecurityRelevant: maxSensitivity !== 'unknown' || riskScore > 20,
|
|
177
|
+
};
|
|
178
|
+
}
|
|
179
|
+
/**
|
|
180
|
+
* Check if an access point is noise (non-security-relevant)
|
|
181
|
+
*/
|
|
182
|
+
isNoise(accessPoint) {
|
|
183
|
+
// Check table name
|
|
184
|
+
for (const pattern of NOISE_TABLE_PATTERNS) {
|
|
185
|
+
if (pattern.test(accessPoint.table)) {
|
|
186
|
+
return true;
|
|
187
|
+
}
|
|
188
|
+
}
|
|
189
|
+
// Check if ALL fields are noise
|
|
190
|
+
if (accessPoint.fields.length > 0) {
|
|
191
|
+
const allFieldsNoise = accessPoint.fields.every(field => {
|
|
192
|
+
for (const pattern of NOISE_FIELD_PATTERNS) {
|
|
193
|
+
if (pattern.test(field)) {
|
|
194
|
+
return true;
|
|
195
|
+
}
|
|
196
|
+
}
|
|
197
|
+
return false;
|
|
198
|
+
});
|
|
199
|
+
if (allFieldsNoise) {
|
|
200
|
+
return true;
|
|
201
|
+
}
|
|
202
|
+
}
|
|
203
|
+
// Unknown tables with low confidence are likely noise
|
|
204
|
+
if (accessPoint.table === 'unknown' && accessPoint.confidence < 0.5) {
|
|
205
|
+
return true;
|
|
206
|
+
}
|
|
207
|
+
return false;
|
|
208
|
+
}
|
|
209
|
+
/**
|
|
210
|
+
* Calculate priority tier from risk score and context
|
|
211
|
+
*/
|
|
212
|
+
calculateTier(riskScore, sensitivity, operation) {
|
|
213
|
+
// P0: Critical - credentials or financial with write/delete
|
|
214
|
+
if (sensitivity === 'credentials' && (operation === 'write' || operation === 'delete')) {
|
|
215
|
+
return 'P0';
|
|
216
|
+
}
|
|
217
|
+
if (sensitivity === 'financial' && operation === 'write') {
|
|
218
|
+
return 'P0';
|
|
219
|
+
}
|
|
220
|
+
if (riskScore >= 90) {
|
|
221
|
+
return 'P0';
|
|
222
|
+
}
|
|
223
|
+
// P1: High - credentials read, financial, health
|
|
224
|
+
if (sensitivity === 'credentials') {
|
|
225
|
+
return 'P1';
|
|
226
|
+
}
|
|
227
|
+
if (sensitivity === 'financial' || sensitivity === 'health') {
|
|
228
|
+
return 'P1';
|
|
229
|
+
}
|
|
230
|
+
if (riskScore >= 75) {
|
|
231
|
+
return 'P1';
|
|
232
|
+
}
|
|
233
|
+
// P2: Medium - PII
|
|
234
|
+
if (sensitivity === 'pii') {
|
|
235
|
+
return 'P2';
|
|
236
|
+
}
|
|
237
|
+
if (riskScore >= 50) {
|
|
238
|
+
return 'P2';
|
|
239
|
+
}
|
|
240
|
+
// P3: Low
|
|
241
|
+
if (riskScore >= 25) {
|
|
242
|
+
return 'P3';
|
|
243
|
+
}
|
|
244
|
+
// P4: Minimal
|
|
245
|
+
return 'P4';
|
|
246
|
+
}
|
|
247
|
+
/**
|
|
248
|
+
* Find sensitive fields related to an access point
|
|
249
|
+
*/
|
|
250
|
+
findSensitiveFields(accessPoint, accessMap) {
|
|
251
|
+
const result = [];
|
|
252
|
+
// Check table's sensitive fields
|
|
253
|
+
const tableInfo = accessMap.tables[accessPoint.table];
|
|
254
|
+
if (tableInfo?.sensitiveFields) {
|
|
255
|
+
result.push(...tableInfo.sensitiveFields);
|
|
256
|
+
}
|
|
257
|
+
// Check global sensitive fields for this table
|
|
258
|
+
for (const sf of accessMap.sensitiveFields) {
|
|
259
|
+
if (sf.table === accessPoint.table && !result.find(r => r.field === sf.field)) {
|
|
260
|
+
result.push(sf);
|
|
261
|
+
}
|
|
262
|
+
}
|
|
263
|
+
return result;
|
|
264
|
+
}
|
|
265
|
+
/**
|
|
266
|
+
* Build summary statistics
|
|
267
|
+
*/
|
|
268
|
+
buildSummary(prioritized) {
|
|
269
|
+
const byTier = { P0: 0, P1: 0, P2: 0, P3: 0, P4: 0 };
|
|
270
|
+
const bySensitivity = {
|
|
271
|
+
credentials: 0,
|
|
272
|
+
financial: 0,
|
|
273
|
+
health: 0,
|
|
274
|
+
pii: 0,
|
|
275
|
+
unknown: 0,
|
|
276
|
+
};
|
|
277
|
+
const regulations = new Set();
|
|
278
|
+
let noiseCount = 0;
|
|
279
|
+
for (const p of prioritized) {
|
|
280
|
+
byTier[p.security.tier]++;
|
|
281
|
+
bySensitivity[p.security.maxSensitivity]++;
|
|
282
|
+
for (const reg of p.security.regulations) {
|
|
283
|
+
regulations.add(reg);
|
|
284
|
+
}
|
|
285
|
+
if (!p.security.isSecurityRelevant) {
|
|
286
|
+
noiseCount++;
|
|
287
|
+
}
|
|
288
|
+
}
|
|
289
|
+
return {
|
|
290
|
+
totalAccessPoints: prioritized.length,
|
|
291
|
+
byTier,
|
|
292
|
+
bySensitivity,
|
|
293
|
+
regulations: Array.from(regulations),
|
|
294
|
+
criticalCount: byTier.P0 + byTier.P1,
|
|
295
|
+
highCount: byTier.P2,
|
|
296
|
+
lowCount: byTier.P3 + byTier.P4,
|
|
297
|
+
noiseCount,
|
|
298
|
+
};
|
|
299
|
+
}
|
|
300
|
+
/**
|
|
301
|
+
* Get the underlying classifier for custom patterns
|
|
302
|
+
*/
|
|
303
|
+
getClassifier() {
|
|
304
|
+
return this.classifier;
|
|
305
|
+
}
|
|
306
|
+
}
|
|
307
|
+
// ============================================================================
|
|
308
|
+
// Factory
|
|
309
|
+
// ============================================================================
|
|
310
|
+
/**
|
|
311
|
+
* Create a new security prioritizer
|
|
312
|
+
*/
|
|
313
|
+
export function createSecurityPrioritizer() {
|
|
314
|
+
return new SecurityPrioritizer();
|
|
315
|
+
}
|
|
316
|
+
//# sourceMappingURL=security-prioritizer.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"security-prioritizer.js","sourceRoot":"","sources":["../../src/boundaries/security-prioritizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,oDAAoD,CAAC;AAgF5D,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E;;GAEG;AACH,MAAM,qBAAqB,GAAkC;IAC3D,KAAK,EAAE,GAAG,EAAK,mCAAmC;IAClD,MAAM,EAAE,GAAG,EAAI,6BAA6B;IAC5C,IAAI,EAAE,GAAG,EAAM,gCAAgC;IAC/C,OAAO,EAAE,GAAG,EAAG,iBAAiB;CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,oBAAoB,GAAG;IAC3B,aAAa;IACb,gBAAgB;IAChB,WAAW;IACX,OAAO;IACP,YAAY;IACZ,UAAU;IACV,SAAS;IACT,SAAS;IACT,UAAU;IACV,SAAS;IACT,QAAQ;IACR,eAAe;IACf,WAAW;IACX,WAAW;IACX,KAAK,EAAG,kBAAkB;CAC3B,CAAC;AAEF;;GAEG;AACH,MAAM,oBAAoB,GAAG;IAC3B,UAAU;IACV,UAAU;IACV,QAAQ;IACR,SAAS;IACT,UAAU;IACV,WAAW;IACX,aAAa;IACb,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,eAAe;IACf,eAAe;IACf,eAAe;IACf,YAAY;IACZ,eAAe;IACf,UAAU;IACV,UAAU;CACX,CAAC;AAEF,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,mBAAmB;IACtB,UAAU,CAAwB;IAE1C;QACE,IAAI,CAAC,UAAU,GAAG,2BAA2B,EAAE,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAwB;QACjC,MAAM,WAAW,GAA6B,EAAE,CAAC;QAEjD,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YAChE,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACxE,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAEzE,WAAW,CAAC,IAAI,CAAC;gBACf,WAAW;gBACX,QAAQ,EAAE,cAAc;gBACxB,eAAe;aAChB,CAAC,CAAC;QACL,CAAC;QAED,qCAAqC;QACrC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAExE,aAAa;QACb,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAEtE,gBAAgB;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAE/C,OAAO;YACL,YAAY,EAAE,WAAW;YACzB,OAAO;YACP,QAAQ;YACR,IAAI;YACJ,GAAG;YACH,KAAK;SACN,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,WAA4B,EAC5B,SAAwB;QAExB,iDAAiD;QACjD,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,SAAS,EAAE,CAAC;gBACZ,cAAc,EAAE,SAAS;gBACzB,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,0CAA0C;gBACrD,kBAAkB,EAAE,KAAK;aAC1B,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,SAAS,EAAE,eAAe,IAAI,EAAE,CAAC;QAEzD,sBAAsB;QACtB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,cAAc,GAAoB,SAAS,CAAC;QAChD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;QACjD,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,mCAAmC;QACnC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;YAEnE,IAAI,OAAO,CAAC,SAAS,GAAG,QAAQ,EAAE,CAAC;gBACjC,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;gBAC7B,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;YAChC,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACtC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;YAE1E,IAAI,OAAO,CAAC,SAAS,GAAG,QAAQ,EAAE,CAAC;gBACjC,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;gBAC7B,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;YAChC,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACtC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,mBAAmB,CAAC,CAAC;QAE7D,iBAAiB;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;QAElF,kBAAkB;QAClB,IAAI,SAAS,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC;YACnC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,qBAAqB;YACxC,CAAC,CAAC,qCAAqC,CAAC;QAE1C,IAAI,WAAW,CAAC,SAAS,KAAK,OAAO,IAAI,WAAW,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC5E,SAAS,IAAI,KAAK,WAAW,CAAC,SAAS,4BAA4B,CAAC;QACtE,CAAC;QAED,OAAO;YACL,IAAI;YACJ,SAAS;YACT,cAAc;YACd,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;YACvC,SAAS;YACT,kBAAkB,EAAE,cAAc,KAAK,SAAS,IAAI,SAAS,GAAG,EAAE;SACnE,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,WAA4B;QAC1C,mBAAmB;QACnB,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBACtD,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;oBAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;wBACxB,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,SAAiB,EACjB,WAA4B,EAC5B,SAAwB;QAExB,4DAA4D;QAC5D,IAAI,WAAW,KAAK,aAAa,IAAI,CAAC,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,QAAQ,CAAC,EAAE,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,WAAW,KAAK,WAAW,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iDAAiD;QACjD,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,WAAW,KAAK,WAAW,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,UAAU;QACV,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,cAAc;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,WAA4B,EAC5B,SAAwB;QAExB,MAAM,MAAM,GAAqB,EAAE,CAAC;QAEpC,iCAAiC;QACjC,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,SAAS,EAAE,eAAe,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,+CAA+C;QAC/C,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;YAC3C,IAAI,EAAE,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9E,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,WAAqC;QACxD,MAAM,MAAM,GAAiC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QACnF,MAAM,aAAa,GAAoC;YACrD,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,OAAO,EAAE,CAAC;SACX,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAE3C,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;YAED,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;gBACnC,UAAU,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO;YACL,iBAAiB,EAAE,WAAW,CAAC,MAAM;YACrC,MAAM;YACN,aAAa;YACb,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YACpC,aAAa,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE;YACpC,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,QAAQ,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE;YAC/B,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,mBAAmB,EAAE,CAAC;AACnC,CAAC"}
|