eslint-plugin-vercel-ai-security 1.5.2 → 1.5.3

package/src/rules/require-output-validation/index.js

@@ -1,121 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requireOutputValidation = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-exports.requireOutputValidation = (0, eslint_devkit_1.createRule)({
-    name: 'require-output-validation',
-    meta: {
-        type: 'suggestion',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-output-validation.md',
-            description: 'Require validation of AI output before displaying to users',
-            cwe: 'CWE-707',
-            cvss: 5,
-        },
-        messages: {
-            unvalidatedOutput: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.WARNING,
-                issueName: 'Unvalidated AI Output',
-                cwe: 'CWE-707',
-                owasp: 'A03:2021',
-                cvss: 5.0,
-                description: 'AI output displayed via "{{method}}" without validation. This can propagate misinformation.',
-                severity: 'MEDIUM',
-                compliance: ['SOC2'],
-                fix: 'Validate AI output before display: display(validateOutput(result.text))',
-                documentationLink: 'https://owasp.org/www-project-top-10-for-large-language-model-applications/',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    displayPatterns: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Patterns suggesting display operations',
-                    },
-                    validatorFunctions: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Functions that validate output',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            displayPatterns: [
-                'render', 'display', 'show', 'print', 'send', 'respond',
-                'setContent', 'setText', 'setMessage', 'Response.json',
-            ],
-            validatorFunctions: [
-                'validate', 'verify', 'check', 'sanitize', 'filter',
-                'validateOutput', 'factCheck', 'verifyFacts',
-            ],
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const displayPatterns = options.displayPatterns ?? [
-            'render', 'display', 'show', 'send', 'respond',
-        ];
-        const sourceCode = context.sourceCode;
-        const aiOutputPatterns = ['.text', '.content', '.message', '.response', '.output'];
-        const aiResultVariables = new Set();
-        function isAIOutput(node) {
-            if (node.type === 'MemberExpression') {
-                const text = sourceCode.getText(node);
-                return aiOutputPatterns.some(pattern => text.includes(pattern));
-            }
-            if (node.type === 'Identifier' && aiResultVariables.has(node.name)) {
-                return true;
-            }
-            return false;
-        }
-        return {
-            VariableDeclarator(node) {
-                if (node.id.type !== 'Identifier')
-                    return;
-                if (!node.init)
-                    return;
-                if (node.init.type === 'MemberExpression') {
-                    const text = sourceCode.getText(node.init);
-                    if (aiOutputPatterns.some(pattern => text.includes(pattern))) {
-                        aiResultVariables.add(node.id.name);
-                    }
-                }
-            },
-            CallExpression(node) {
-                const callee = sourceCode.getText(node.callee);
-                const isDisplay = displayPatterns.some(pattern => callee.toLowerCase().includes(pattern.toLowerCase()));
-                if (!isDisplay)
-                    return;
-                for (const arg of node.arguments) {
-                    if (isAIOutput(arg)) {
-                        context.report({
-                            node: arg,
-                            messageId: 'unvalidatedOutput',
-                            data: { method: callee },
-                        });
-                    }
-                    if (arg.type === 'ObjectExpression') {
-                        for (const prop of arg.properties) {
-                            if (prop.type !== 'Property')
-                                continue;
-                            if (isAIOutput(prop.value)) {
-                                context.report({
-                                    node: prop.value,
-                                    messageId: 'unvalidatedOutput',
-                                    data: { method: callee },
-                                });
-                            }
-                        }
-                    }
-                }
-            },
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.requireOutputValidation=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.requireOutputValidation=(0,eslint_devkit_1.createRule)({name:"require-output-validation",meta:{type:"suggestion",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-output-validation.md",description:"Require validation of AI output before displaying to users",cwe:"CWE-707",cvss:5},messages:{unvalidatedOutput:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"Unvalidated AI Output",cwe:"CWE-707",owasp:"A03:2021",cvss:5,description:'AI output displayed via "{{method}}" without validation. This can propagate misinformation.',severity:"MEDIUM",compliance:["SOC2"],fix:"Validate AI output before display: display(validateOutput(result.text))",documentationLink:"https://owasp.org/www-project-top-10-for-large-language-model-applications/"})},schema:[{type:"object",properties:{displayPatterns:{type:"array",items:{type:"string"},description:"Patterns suggesting display operations"},validatorFunctions:{type:"array",items:{type:"string"},description:"Functions that validate output"}},additionalProperties:false}]},defaultOptions:[{displayPatterns:["render","display","show","print","send","respond","setContent","setText","setMessage","Response.json"],validatorFunctions:["validate","verify","check","sanitize","filter","validateOutput","factCheck","verifyFacts"]}],create(context){const[options={}]=context.options;const displayPatterns=options.displayPatterns??["render","display","show","send","respond"];const sourceCode=context.sourceCode;const aiOutputPatterns=[".text",".content",".message",".response",".output"];const aiResultVariables=new Set;function isAIOutput(node){if(node.type==="MemberExpression"){const text=sourceCode.getText(node);return aiOutputPatterns.some(pattern=>text.includes(pattern))}if(node.type==="Identifier"&&aiResultVariables.has(node.name)){return true}return false}return{VariableDeclarator(node){if(node.id.type!=="Identifier")return;if(!node.init)return;if(node.init.type==="MemberExpression"){const text=sourceCode.getText(node.init);if(aiOutputPatterns.some(pattern=>text.includes(pattern))){aiResultVariables.add(node.id.name)}}},CallExpression(node){const callee=sourceCode.getText(node.callee);const isDisplay=displayPatterns.some(pattern=>callee.toLowerCase().includes(pattern.toLowerCase()));if(!isDisplay)return;for(const arg of node.arguments){if(isAIOutput(arg)){context.report({node:arg,messageId:"unvalidatedOutput",data:{method:callee}})}if(arg.type==="ObjectExpression"){for(const prop of arg.properties){if(prop.type!=="Property")continue;if(isAIOutput(prop.value)){context.report({node:prop.value,messageId:"unvalidatedOutput",data:{method:callee}})}}}}}}}});

package/src/rules/require-rag-content-validation/index.js

@@ -1,150 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requireRagContentValidation = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-const prompt_props_1 = require("../../utils/prompt-props");
-exports.requireRagContentValidation = (0, eslint_devkit_1.createRule)({
-    name: 'require-rag-content-validation',
-    meta: {
-        type: 'suggestion',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-rag-content-validation.md',
-            description: 'Require validation of RAG content before including in AI prompts',
-            cwe: 'CWE-74',
-            cvss: 6,
-        },
-        messages: {
-            unsanitizedRagContent: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.WARNING,
-                issueName: 'Unsanitized RAG Content',
-                cwe: 'CWE-74',
-                owasp: 'A03:2021',
-                cvss: 6.0,
-                description: 'RAG content from "{{source}}" used directly in prompt without validation. Poisoned documents can inject malicious instructions.',
-                severity: 'MEDIUM',
-                compliance: ['SOC2'],
-                fix: 'Validate RAG content: prompt: buildPrompt(validateRagContent(docs))',
-                documentationLink: 'https://owasp.org/www-project-top-10-for-large-language-model-applications/',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    ragPatterns: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Patterns suggesting RAG operations',
-                    },
-                    validatorFunctions: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Functions that validate RAG content',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            ragPatterns: [
-                'search', 'retrieve', 'query', 'vectorStore', 'embeddings',
-                'similaritySearch', 'findSimilar', 'getDocuments', 'fetchDocs',
-                'documents', 'chunks', 'passages', 'context',
-            ],
-            validatorFunctions: [
-                'validate', 'sanitize', 'filter', 'clean', 'verify',
-                'validateRag', 'sanitizeContent', 'filterDocs',
-            ],
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const ragPatterns = options.ragPatterns ?? [
-            'search', 'retrieve', 'query', 'vectorStore', 'documents',
-        ];
-        const validatorFunctions = options.validatorFunctions ?? [
-            'validate', 'sanitize', 'filter', 'clean',
-        ];
-        const sourceCode = context.sourceCode;
-        const aiSDKFunctions = ['generateText', 'streamText', 'generateObject', 'streamObject'];
-        const ragVariables = new Set();
-        function isRagCall(node) {
-            if (node.type !== 'CallExpression')
-                return null;
-            const callee = sourceCode.getText(node.callee);
-            for (const pattern of ragPatterns) {
-                if (callee.toLowerCase().includes(pattern.toLowerCase())) {
-                    return callee;
-                }
-            }
-            return null;
-        }
-        function isValidated(node) {
-            const callee = sourceCode.getText(node.callee);
-            return validatorFunctions.some((fn) => callee.toLowerCase().includes(fn.toLowerCase()));
-        }
-        function containsRagContent(node) {
-            if (node.type === 'Identifier' && ragVariables.has(node.name)) {
-                return node.name;
-            }
-            if (node.type === 'TemplateLiteral') {
-                for (const expr of node.expressions) {
-                    const rag = containsRagContent(expr);
-                    if (rag)
-                        return rag;
-                }
-            }
-            if (node.type === 'AwaitExpression') {
-                return containsRagContent(node.argument);
-            }
-            if (node.type === 'CallExpression') {
-                const ragSource = isRagCall(node);
-                if (ragSource && !isValidated(node)) {
-                    return ragSource;
-                }
-            }
-            return null;
-        }
-        return {
-            VariableDeclarator(node) {
-                if (node.id.type !== 'Identifier')
-                    return;
-                if (!node.init)
-                    return;
-                let initNode = node.init;
-                if (initNode.type === 'AwaitExpression') {
-                    initNode = initNode.argument;
-                }
-                if (isRagCall(initNode)) {
-                    ragVariables.add(node.id.name);
-                }
-            },
-            CallExpression(node) {
-                const callee = sourceCode.getText(node.callee);
-                const isAIFunction = aiSDKFunctions.some(fn => callee.includes(fn));
-                if (!isAIFunction)
-                    return;
-                const optionsArg = node.arguments[0];
-                if (!optionsArg || optionsArg.type !== 'ObjectExpression')
-                    return;
-                for (const prop of optionsArg.properties) {
-                    if (prop.type !== eslint_devkit_1.AST_NODE_TYPES.Property)
-                        continue;
-                    const keyName = (0, prompt_props_1.getStaticPropName)(prop);
-                    if (keyName !== 'prompt' && !(0, prompt_props_1.isSystemPromptProp)(keyName))
-                        continue;
-                    const ragSource = containsRagContent(prop.value);
-                    if (ragSource) {
-                        context.report({
-                            node: prop.value,
-                            messageId: 'unsanitizedRagContent',
-                            data: { source: ragSource },
-                        });
-                    }
-                }
-            },
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.requireRagContentValidation=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const prompt_props_1=require("../../utils/prompt-props");exports.requireRagContentValidation=(0,eslint_devkit_1.createRule)({name:"require-rag-content-validation",meta:{type:"suggestion",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-rag-content-validation.md",description:"Require validation of RAG content before including in AI prompts",cwe:"CWE-74",cvss:6},messages:{unsanitizedRagContent:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"Unsanitized RAG Content",cwe:"CWE-74",owasp:"A03:2021",cvss:6,description:'RAG content from "{{source}}" used directly in prompt without validation. Poisoned documents can inject malicious instructions.',severity:"MEDIUM",compliance:["SOC2"],fix:"Validate RAG content: prompt: buildPrompt(validateRagContent(docs))",documentationLink:"https://owasp.org/www-project-top-10-for-large-language-model-applications/"})},schema:[{type:"object",properties:{ragPatterns:{type:"array",items:{type:"string"},description:"Patterns suggesting RAG operations"},validatorFunctions:{type:"array",items:{type:"string"},description:"Functions that validate RAG content"}},additionalProperties:false}]},defaultOptions:[{ragPatterns:["search","retrieve","query","vectorStore","embeddings","similaritySearch","findSimilar","getDocuments","fetchDocs","documents","chunks","passages","context"],validatorFunctions:["validate","sanitize","filter","clean","verify","validateRag","sanitizeContent","filterDocs"]}],create(context){const[options={}]=context.options;const ragPatterns=options.ragPatterns??["search","retrieve","query","vectorStore","documents"];const validatorFunctions=options.validatorFunctions??["validate","sanitize","filter","clean"];const sourceCode=context.sourceCode;const aiSDKFunctions=["generateText","streamText","generateObject","streamObject"];const ragVariables=new Set;function isRagCall(node){if(node.type!=="CallExpression")return null;const callee=sourceCode.getText(node.callee);for(const pattern of ragPatterns){if(callee.toLowerCase().includes(pattern.toLowerCase())){return callee}}return null}function isValidated(node){const callee=sourceCode.getText(node.callee);return validatorFunctions.some(fn=>callee.toLowerCase().includes(fn.toLowerCase()))}function containsRagContent(node){if(node.type==="Identifier"&&ragVariables.has(node.name)){return node.name}if(node.type==="TemplateLiteral"){for(const expr of node.expressions){const rag=containsRagContent(expr);if(rag)return rag}}if(node.type==="AwaitExpression"){return containsRagContent(node.argument)}if(node.type==="CallExpression"){const ragSource=isRagCall(node);if(ragSource&&!isValidated(node)){return ragSource}}return null}return{VariableDeclarator(node){if(node.id.type!=="Identifier")return;if(!node.init)return;let initNode=node.init;if(initNode.type==="AwaitExpression"){initNode=initNode.argument}if(isRagCall(initNode)){ragVariables.add(node.id.name)}},CallExpression(node){const callee=sourceCode.getText(node.callee);const isAIFunction=aiSDKFunctions.some(fn=>callee.includes(fn));if(!isAIFunction)return;const optionsArg=node.arguments[0];if(!optionsArg||optionsArg.type!=="ObjectExpression")return;for(const prop of optionsArg.properties){if(prop.type!==eslint_devkit_1.AST_NODE_TYPES.Property)continue;const keyName=(0,prompt_props_1.getStaticPropName)(prop);if(keyName!=="prompt"&&!(0,prompt_props_1.isSystemPromptProp)(keyName))continue;const ragSource=containsRagContent(prop.value);if(ragSource){context.report({node:prop.value,messageId:"unsanitizedRagContent",data:{source:ragSource}})}}}}}});

package/src/rules/require-request-timeout/index.js

@@ -1,88 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requireRequestTimeout = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-exports.requireRequestTimeout = (0, eslint_devkit_1.createRule)({
-    name: 'require-request-timeout',
-    meta: {
-        type: 'suggestion',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-request-timeout.md',
-            description: 'Require timeout configuration for AI SDK calls to prevent DoS',
-            cwe: 'CWE-400',
-            cvss: 5,
-        },
-        messages: {
-            missingTimeout: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.WARNING,
-                issueName: 'Missing Request Timeout',
-                cwe: 'CWE-400',
-                owasp: 'A05:2021',
-                cvss: 5.0,
-                description: '{{function}} call lacks timeout configuration. This can lead to denial of service.',
-                severity: 'MEDIUM',
-                compliance: ['SOC2'],
-                fix: 'Add timeout configuration or use AbortController with setTimeout',
-                documentationLink: 'https://owasp.org/www-project-top-10-for-large-language-model-applications/',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    allowInTests: {
-                        type: 'boolean',
-                        description: 'Skip in test files',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            allowInTests: true,
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const allowInTests = options.allowInTests ?? true;
-        const sourceCode = context.sourceCode;
-        const filename = context.filename;
-        if (allowInTests && /\.(test|spec)\.[jt]sx?$/.test(filename)) {
-            return {};
-        }
-        const aiSDKFunctions = ['generateText', 'streamText', 'generateObject', 'streamObject'];
-        const timeoutProperties = new Set(['timeout', 'abortSignal', 'signal', 'timeoutMs', 'requestTimeout']);
-        return {
-            CallExpression(node) {
-                const callee = sourceCode.getText(node.callee);
-                const matchedFunction = aiSDKFunctions.find(fn => callee.includes(fn));
-                if (!matchedFunction)
-                    return;
-                const optionsArg = node.arguments[0];
-                if (!optionsArg || optionsArg.type !== 'ObjectExpression') {
-                    context.report({
-                        node,
-                        messageId: 'missingTimeout',
-                        data: { function: matchedFunction },
-                    });
-                    return;
-                }
-                const hasTimeout = optionsArg.properties.some(prop => {
-                    if (prop.type !== 'Property')
-                        return false;
-                    const keyName = prop.key.type === 'Identifier' ? prop.key.name : null;
-                    return keyName && timeoutProperties.has(keyName);
-                });
-                if (!hasTimeout) {
-                    context.report({
-                        node,
-                        messageId: 'missingTimeout',
-                        data: { function: matchedFunction },
-                    });
-                }
-            },
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.requireRequestTimeout=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.requireRequestTimeout=(0,eslint_devkit_1.createRule)({name:"require-request-timeout",meta:{type:"suggestion",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-request-timeout.md",description:"Require timeout configuration for AI SDK calls to prevent DoS",cwe:"CWE-400",cvss:5},messages:{missingTimeout:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"Missing Request Timeout",cwe:"CWE-400",owasp:"A05:2021",cvss:5,description:"{{function}} call lacks timeout configuration. This can lead to denial of service.",severity:"MEDIUM",compliance:["SOC2"],fix:"Add timeout configuration or use AbortController with setTimeout",documentationLink:"https://owasp.org/www-project-top-10-for-large-language-model-applications/"})},schema:[{type:"object",properties:{allowInTests:{type:"boolean",description:"Skip in test files"}},additionalProperties:false}]},defaultOptions:[{allowInTests:true}],create(context){const[options={}]=context.options;const allowInTests=options.allowInTests??true;const sourceCode=context.sourceCode;const filename=context.filename;if(allowInTests&&/\.(test|spec)\.[jt]sx?$/.test(filename)){return{}}const aiSDKFunctions=["generateText","streamText","generateObject","streamObject"];const timeoutProperties=new Set(["timeout","abortSignal","signal","timeoutMs","requestTimeout"]);return{CallExpression(node){const callee=sourceCode.getText(node.callee);const matchedFunction=aiSDKFunctions.find(fn=>callee.includes(fn));if(!matchedFunction)return;const optionsArg=node.arguments[0];if(!optionsArg||optionsArg.type!=="ObjectExpression"){context.report({node,messageId:"missingTimeout",data:{function:matchedFunction}});return}const hasTimeout=optionsArg.properties.some(prop=>{if(prop.type!=="Property")return false;const keyName=prop.key.type==="Identifier"?prop.key.name:null;return keyName&&timeoutProperties.has(keyName)});if(!hasTimeout){context.report({node,messageId:"missingTimeout",data:{function:matchedFunction}})}}}}});

package/src/rules/require-tool-confirmation/index.js

@@ -1,118 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requireToolConfirmation = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-exports.requireToolConfirmation = (0, eslint_devkit_1.createRule)({
-    name: 'require-tool-confirmation',
-    meta: {
-        type: 'suggestion',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-tool-confirmation.md',
-            description: 'Require human confirmation for destructive tool operations (delete, transfer, execute)',
-            cwe: 'CWE-862',
-            cvss: 7,
-        },
-        messages: {
-            missingConfirmation: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.WARNING,
-                issueName: 'Destructive Tool Without Confirmation',
-                cwe: 'CWE-862',
-                owasp: 'A01:2021',
-                cvss: 7.0,
-                description: 'Tool "{{toolName}}" performs destructive operation "{{operation}}" without requiring confirmation.',
-                severity: 'HIGH',
-                compliance: ['SOC2'],
-                fix: 'Add requiresConfirmation: true or implement confirmation logic in the tool',
-                documentationLink: 'https://sdk.vercel.ai/docs/ai-sdk-core/tools-and-tool-calling',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    destructivePatterns: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Patterns that suggest destructive operations',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            destructivePatterns: [
-                'delete', 'remove', 'drop', 'truncate', 'destroy',
-                'transfer', 'send', 'pay', 'withdraw', 'purchase',
-                'execute', 'run', 'eval', 'exec', 'spawn',
-                'update', 'modify', 'change', 'alter',
-                'create', 'insert', 'post', 'write',
-            ],
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const destructivePatterns = options.destructivePatterns ?? [
-            'delete', 'remove', 'transfer', 'execute', 'update', 'create',
-        ];
-        function isDestructiveTool(name) {
-            const lowerName = name.toLowerCase();
-            for (const pattern of destructivePatterns) {
-                if (lowerName.includes(pattern.toLowerCase())) {
-                    return pattern;
-                }
-            }
-            return null;
-        }
-        function hasConfirmationFlag(toolDef) {
-            const confirmationProps = new Set([
-                'requiresConfirmation', 'requireConfirmation', 'confirmation',
-                'requiresApproval', 'requireApproval', 'approval',
-                'dangerouslyAllowBrowser',
-            ]);
-            return toolDef.properties.some(prop => {
-                if (prop.type !== 'Property')
-                    return false;
-                const keyName = prop.key.type === 'Identifier' ? prop.key.name : null;
-                return keyName && confirmationProps.has(keyName);
-            });
-        }
-        return {
-            Property(node) {
-                if (node.key.type !== 'Identifier' && node.key.type !== 'Literal')
-                    return;
-                const toolName = node.key.type === 'Identifier'
-                    ? node.key.name
-                    : String(node.key.value);
-                if (node.value.type !== 'ObjectExpression' && node.value.type !== 'CallExpression') {
-                    return;
-                }
-                const destructiveOp = isDestructiveTool(toolName);
-                if (!destructiveOp)
-                    return;
-                const parent = node.parent;
-                if (parent?.type !== 'ObjectExpression')
-                    return;
-                const grandparent = parent.parent;
-                if (grandparent?.type !== 'Property')
-                    return;
-                const toolsKey = grandparent.key;
-                if (toolsKey.type !== 'Identifier' || toolsKey.name !== 'tools')
-                    return;
-                if (node.value.type === 'ObjectExpression') {
-                    if (!hasConfirmationFlag(node.value)) {
-                        context.report({
-                            node,
-                            messageId: 'missingConfirmation',
-                            data: {
-                                toolName,
-                                operation: destructiveOp,
-                            },
-                        });
-                    }
-                }
-            },
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.requireToolConfirmation=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.requireToolConfirmation=(0,eslint_devkit_1.createRule)({name:"require-tool-confirmation",meta:{type:"suggestion",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-tool-confirmation.md",description:"Require human confirmation for destructive tool operations (delete, transfer, execute)",cwe:"CWE-862",cvss:7},messages:{missingConfirmation:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"Destructive Tool Without Confirmation",cwe:"CWE-862",owasp:"A01:2021",cvss:7,description:'Tool "{{toolName}}" performs destructive operation "{{operation}}" without requiring confirmation.',severity:"HIGH",compliance:["SOC2"],fix:"Add requiresConfirmation: true or implement confirmation logic in the tool",documentationLink:"https://sdk.vercel.ai/docs/ai-sdk-core/tools-and-tool-calling"})},schema:[{type:"object",properties:{destructivePatterns:{type:"array",items:{type:"string"},description:"Patterns that suggest destructive operations"}},additionalProperties:false}]},defaultOptions:[{destructivePatterns:["delete","remove","drop","truncate","destroy","transfer","send","pay","withdraw","purchase","execute","run","eval","exec","spawn","update","modify","change","alter","create","insert","post","write"]}],create(context){const[options={}]=context.options;const destructivePatterns=options.destructivePatterns??["delete","remove","transfer","execute","update","create"];function isDestructiveTool(name){const lowerName=name.toLowerCase();for(const pattern of destructivePatterns){if(lowerName.includes(pattern.toLowerCase())){return pattern}}return null}function hasConfirmationFlag(toolDef){const confirmationProps=new Set(["requiresConfirmation","requireConfirmation","confirmation","requiresApproval","requireApproval","approval","dangerouslyAllowBrowser"]);return toolDef.properties.some(prop=>{if(prop.type!=="Property")return false;const keyName=prop.key.type==="Identifier"?prop.key.name:null;return keyName&&confirmationProps.has(keyName)})}return{Property(node){if(node.key.type!=="Identifier"&&node.key.type!=="Literal")return;const toolName=node.key.type==="Identifier"?node.key.name:String(node.key.value);if(node.value.type!=="ObjectExpression"&&node.value.type!=="CallExpression"){return}const destructiveOp=isDestructiveTool(toolName);if(!destructiveOp)return;const parent=node.parent;if(parent?.type!=="ObjectExpression")return;const grandparent=parent.parent;if(grandparent?.type!=="Property")return;const toolsKey=grandparent.key;if(toolsKey.type!=="Identifier"||toolsKey.name!=="tools")return;if(node.value.type==="ObjectExpression"){if(!hasConfirmationFlag(node.value)){context.report({node,messageId:"missingConfirmation",data:{toolName,operation:destructiveOp}})}}}}}});

package/src/rules/require-tool-schema/index.js

@@ -1,132 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requireToolSchema = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-exports.requireToolSchema = (0, eslint_devkit_1.createRule)({
-    name: 'require-tool-schema',
-    meta: {
-        type: 'problem',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-tool-schema.md',
-            description: 'Require inputSchema (Zod schema) for all AI SDK tools',
-            cwe: 'CWE-20',
-            cvss: 7.5,
-        },
-        messages: {
-            missingInputSchema: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.SECURITY,
-                issueName: 'Tool Missing Input Schema',
-                cwe: 'CWE-20',
-                owasp: 'A03:2021',
-                cvss: 7.5,
-                description: 'Tool "{{toolName}}" is missing inputSchema. Unvalidated tool parameters can lead to injection attacks.',
-                severity: 'HIGH',
-                compliance: ['SOC2'],
-                fix: 'Add inputSchema using Zod: tool({ inputSchema: z.object({ ... }), execute: ... })',
-                documentationLink: 'https://sdk.vercel.ai/docs/ai-sdk-core/tools-and-tool-calling',
-            }),
-            emptyToolsObject: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.WARNING,
-                issueName: 'Empty Tools Object',
-                cwe: 'CWE-20',
-                owasp: 'A03:2021',
-                description: 'Tools object is empty or has no tool definitions',
-                severity: 'LOW',
-                fix: 'Define tools with proper schemas or remove tools property',
-                documentationLink: 'https://sdk.vercel.ai/docs/ai-sdk-core/tools-and-tool-calling',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    allowInTests: {
-                        type: 'boolean',
-                        description: 'Allow tools without inputSchema in test files',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            allowInTests: false,
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const allowInTests = options.allowInTests ?? false;
-        const sourceCode = context.sourceCode;
-        const filename = context.filename;
-        if (allowInTests && /\.(test|spec)\.[jt]sx?$/.test(filename)) {
-            return {};
-        }
-        const functionsWithTools = ['generateText', 'streamText', 'generateObject', 'streamObject'];
-        return {
-            CallExpression(node) {
-                const callee = sourceCode.getText(node.callee);
-                const isAIFunction = functionsWithTools.some(fn => callee.includes(fn));
-                const isToolHelper = callee === 'tool' || callee.endsWith('.tool');
-                if (isToolHelper) {
-                    const toolArg = node.arguments[0];
-                    if (toolArg && toolArg.type === 'ObjectExpression') {
-                        const hasInputSchema = toolArg.properties.some(prop => {
-                            if (prop.type !== 'Property')
-                                return false;
-                            const keyName = prop.key.type === 'Identifier' ? prop.key.name : null;
-                            return keyName === 'inputSchema' || keyName === 'parameters';
-                        });
-                        if (!hasInputSchema) {
-                            context.report({
-                                node: toolArg,
-                                messageId: 'missingInputSchema',
-                                data: { toolName: 'unnamed tool' },
-                            });
-                        }
-                    }
-                    return;
-                }
-                if (!isAIFunction)
-                    return;
-                const optionsArg = node.arguments[0];
-                if (!optionsArg || optionsArg.type !== 'ObjectExpression')
-                    return;
-                const toolsProp = optionsArg.properties.find(prop => {
-                    if (prop.type !== 'Property')
-                        return false;
-                    const keyName = prop.key.type === 'Identifier' ? prop.key.name : null;
-                    return keyName === 'tools';
-                });
-                if (!toolsProp)
-                    return;
-                if (toolsProp.value.type === 'ObjectExpression') {
-                    for (const toolDef of toolsProp.value.properties) {
-                        if (toolDef.type !== 'Property')
-                            continue;
-                        const toolName = toolDef.key.type === 'Identifier'
-                            ? toolDef.key.name
-                            : toolDef.key.type === 'Literal'
-                                ? String(toolDef.key.value)
-                                : 'unknown';
-                        if (toolDef.value.type === 'ObjectExpression') {
-                            const hasInputSchema = toolDef.value.properties.some(prop => {
-                                if (prop.type !== 'Property')
-                                    return false;
-                                const keyName = prop.key.type === 'Identifier' ? prop.key.name : null;
-                                return keyName === 'inputSchema' || keyName === 'parameters';
-                            });
-                            if (!hasInputSchema) {
-                                context.report({
-                                    node: toolDef.value,
-                                    messageId: 'missingInputSchema',
-                                    data: { toolName },
-                                });
-                            }
-                        }
-                    }
-                }
-            },
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.requireToolSchema=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.requireToolSchema=(0,eslint_devkit_1.createRule)({name:"require-tool-schema",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-tool-schema.md",description:"Require inputSchema (Zod schema) for all AI SDK tools",cwe:"CWE-20",cvss:7.5},messages:{missingInputSchema:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"Tool Missing Input Schema",cwe:"CWE-20",owasp:"A03:2021",cvss:7.5,description:'Tool "{{toolName}}" is missing inputSchema. Unvalidated tool parameters can lead to injection attacks.',severity:"HIGH",compliance:["SOC2"],fix:"Add inputSchema using Zod: tool({ inputSchema: z.object({ ... }), execute: ... })",documentationLink:"https://sdk.vercel.ai/docs/ai-sdk-core/tools-and-tool-calling"}),emptyToolsObject:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"Empty Tools Object",cwe:"CWE-20",owasp:"A03:2021",description:"Tools object is empty or has no tool definitions",severity:"LOW",fix:"Define tools with proper schemas or remove tools property",documentationLink:"https://sdk.vercel.ai/docs/ai-sdk-core/tools-and-tool-calling"})},schema:[{type:"object",properties:{allowInTests:{type:"boolean",description:"Allow tools without inputSchema in test files"}},additionalProperties:false}]},defaultOptions:[{allowInTests:false}],create(context){const[options={}]=context.options;const allowInTests=options.allowInTests??false;const sourceCode=context.sourceCode;const filename=context.filename;if(allowInTests&&/\.(test|spec)\.[jt]sx?$/.test(filename)){return{}}const functionsWithTools=["generateText","streamText","generateObject","streamObject"];return{CallExpression(node){const callee=sourceCode.getText(node.callee);const isAIFunction=functionsWithTools.some(fn=>callee.includes(fn));const isToolHelper=callee==="tool"||callee.endsWith(".tool");if(isToolHelper){const toolArg=node.arguments[0];if(toolArg&&toolArg.type==="ObjectExpression"){const hasInputSchema=toolArg.properties.some(prop=>{if(prop.type!=="Property")return false;const keyName=prop.key.type==="Identifier"?prop.key.name:null;return keyName==="inputSchema"||keyName==="parameters"});if(!hasInputSchema){context.report({node:toolArg,messageId:"missingInputSchema",data:{toolName:"unnamed tool"}})}}return}if(!isAIFunction)return;const optionsArg=node.arguments[0];if(!optionsArg||optionsArg.type!=="ObjectExpression")return;const toolsProp=optionsArg.properties.find(prop=>{if(prop.type!=="Property")return false;const keyName=prop.key.type==="Identifier"?prop.key.name:null;return keyName==="tools"});if(!toolsProp)return;if(toolsProp.value.type==="ObjectExpression"){for(const toolDef of toolsProp.value.properties){if(toolDef.type!=="Property")continue;const toolName=toolDef.key.type==="Identifier"?toolDef.key.name:toolDef.key.type==="Literal"?String(toolDef.key.value):"unknown";if(toolDef.value.type==="ObjectExpression"){const hasInputSchema=toolDef.value.properties.some(prop=>{if(prop.type!=="Property")return false;const keyName=prop.key.type==="Identifier"?prop.key.name:null;return keyName==="inputSchema"||keyName==="parameters"});if(!hasInputSchema){context.report({node:toolDef.value,messageId:"missingInputSchema",data:{toolName}})}}}}}}}});