guardvibe 0.11.0 → 1.0.0

package/README.md

@@ -1,6 +1,6 @@
 # GuardVibe
 
-**The security MCP built for vibe coding.** 127 security rules covering the entire vibe coder journey — from first line of code to production deployment.
+**The security MCP built for vibe coding.** 193 security rules covering the entire AI-generated code journey — from first line to production deployment.
 
 Works with **Claude Code, Cursor, Gemini CLI, Codex, Windsurf**, and any MCP-compatible coding agent.
 
@@ -8,13 +8,54 @@ Works with **Claude Code, Cursor, Gemini CLI, Codex, Windsurf**, and any MCP-com
 
 Most security tools are built for enterprise security teams. GuardVibe is built for **you** — the developer using AI to build and ship web apps fast.
 
-- **127 security rules** purpose-built for the stacks AI agents generate
+- **193 security rules** purpose-built for the stacks AI agents generate
 - **Zero setup friction** — `npx guardvibe` and you're scanning
 - **No account required** — runs 100% locally, no API keys, no cloud
 - **Understands your stack** — not generic SAST, but rules that know Next.js, Supabase, Stripe, Clerk, and the tools you actually use
+- **CVE version intelligence** — detects known vulnerable package versions in package.json
+- **AI agent security** — detects MCP server vulnerabilities, excessive AI permissions, indirect prompt injection
+- **Pre-commit hook** — block insecure code before it reaches your repo
+- **CI/CD ready** — GitHub Actions workflow with SARIF upload to Security tab
 - **Agent-friendly output** — JSON format for AI agents, Markdown for humans, SARIF for CI/CD
 - **Plugin system** — extend with community or premium rule packs
 
+## Quick Start
+
+### MCP setup (recommended)
+
+```bash
+npx guardvibe init claude    # Claude Code
+npx guardvibe init cursor    # Cursor
+npx guardvibe init gemini    # Gemini CLI
+npx guardvibe init all       # All platforms
+```
+
+### Pre-commit hook
+
+```bash
+npx guardvibe hook install   # Blocks commits with critical/high findings
+npx guardvibe hook uninstall # Remove hook
+```
+
+### CI/CD (GitHub Actions)
+
+```bash
+npx guardvibe ci github      # Generates .github/workflows/guardvibe.yml
+```
+
+### Manual MCP config
+
+```json
+{
+  "mcpServers": {
+    "guardvibe": {
+      "command": "npx",
+      "args": ["-y", "guardvibe"]
+    }
+  }
+}
+```
+
 ## What GuardVibe Scans
 
 ### Application Code
@@ -32,8 +73,17 @@ Stripe (webhook signatures, secret keys, client-side pricing), Polar.sh, LemonSq
 ### Third-Party Services
 Resend (email injection), Upstash Redis, Pinecone, PostHog, Google Analytics (PII tracking)
 
-### AI API Keys
-OpenAI, Anthropic, Google AI — client exposure, hardcoded keys, NEXT_PUBLIC leaks
+### AI Security
+Prompt injection detection, LLM output sinks (eval, SQL, exec), system prompt leaks, MCP server SSRF/path traversal/command injection, excessive AI agent permissions, indirect prompt injection via external data
+
+### Mobile
+React Native, Expo — AsyncStorage secrets, deep link token exposure, hardcoded API URLs, ATS configuration
+
+### Firebase
+Firestore security rules, Firebase Admin SDK exposure, storage rules, custom token validation
+
+### CVE Version Intelligence
+Detects known vulnerable versions in package.json: Next.js (CVE-2024-34351, CVE-2024-46982, CVE-2025-29927), React, Express, Axios, jsonwebtoken, lodash, node-fetch, tar, xml2js, crypto-js
 
 ### Deployment & Config
 Vercel (vercel.json, cron secrets, headers), Next.js config, Docker, Docker Compose, Fly.io, Render, Netlify, Cloudflare
@@ -44,45 +94,14 @@ Dockerfile security, GitHub Actions CI/CD, Terraform (S3, IAM, RDS, security gro
 ### Secrets & Environment
 API keys (AWS, GitHub, Stripe, OpenAI, Resend), .env management, .gitignore coverage, high-entropy detection, NEXT_PUBLIC exposure
 
-### Webhooks
-Signature verification for Stripe, LemonSqueezy, and generic webhook endpoints
-
-### SEO & Web
-Open redirects, robots.txt exposure, source maps, meta tag injection
+### Webhooks & Web Security
+Signature verification, open redirects, robots.txt exposure, source maps, meta tag injection, CSP headers
 
 ### Compliance
 SOC2, PCI-DSS, HIPAA control mapping with compliance reports
 
-## Quick Start
-
-### Auto setup
-
-```bash
-npx guardvibe init claude
-npx guardvibe init cursor
-npx guardvibe init gemini
-```
-
-### Manual MCP setup
-
-**Claude Code**
-
-```bash
-claude mcp add guardvibe -- npx guardvibe
-```
-
-**Cursor / VS Code / Gemini CLI**
-
-```json
-{
-  "mcpServers": {
-    "guardvibe": {
-      "command": "npx",
-      "args": ["-y", "guardvibe"]
-    }
-  }
-}
-```
+### Supply Chain
+Malicious postinstall scripts, unpinned GitHub Actions, typosquat detection
 
 ## Tools (11 MCP tools)
 
@@ -102,43 +121,52 @@ claude mcp add guardvibe -- npx guardvibe
 
 All scanning tools support `format: "json"` for machine-readable output.
 
-## Security Rules (120 rules)
+## Security Rules (193 rules across 20 modules)
 
 | Category | Rules | Coverage |
 |----------|-------|----------|
-| Core OWASP | 20 | SQL injection, XSS, CSRF, command injection, eval, CORS, SSRF |
-| Next.js App Router | 12 | Server Actions, secret exposure, auth bypass, redirects |
-| Auth (Clerk / Auth.js / Supabase Auth) | 14 | Middleware, secret keys, session storage, role checks, SSR cookies, admin protection, email confirmation |
-| Database (Supabase / Prisma / Drizzle) | 7 | Raw queries, client exposure, service role leaks |
+| Core OWASP | 25 | SQL injection, XSS, CSRF, command injection, eval, CORS, SSRF, hardcoded secrets |
+| Next.js App Router | 13 | Server Actions, secret exposure, auth bypass, redirects, innerHTML |
+| Auth (Clerk / Auth.js / Supabase Auth) | 16 | Middleware, secret keys, session storage, role checks, SSR cookies, admin protection |
+| Database (Supabase / Prisma / Drizzle) | 8 | Raw queries, client exposure, service role leaks |
 | Deployment Config | 16 | Vercel, Next.js config, Docker Compose, Fly, Render, Netlify |
 | Payments (Stripe / Polar / Lemon) | 9 | Webhook signatures, key exposure, price manipulation |
 | Services (Resend / Upstash / Pinecone / PostHog) | 11 | API key leaks, PII tracking, email injection |
-| Web Security (Webhooks / SEO / Env / AI Keys) | 14 | Signature verification, .env safety, AI key exposure |
-| Go | 10 | SQL injection, command injection, template escaping |
+| Web Security | 14 | Webhooks, CSP, .env safety, AI key exposure, Cloudflare |
+| React Native / Expo | 10 | AsyncStorage secrets, deep links, ATS, hardcoded URLs |
+| Firebase | 7 | Firestore rules, admin SDK, storage, custom tokens |
+| AI / LLM Security | 14 | Prompt injection, MCP SSRF, excessive agency, indirect injection |
+| CVE Version Intelligence | 12 | Known vulnerable versions in package.json |
+| Shell / Bash | 5 | Pipe to bash, chmod 777, rm -rf, sudo password |
+| SQL | 4 | DROP/DELETE without WHERE, stacked queries, GRANT ALL |
+| Supply Chain | 2 | Malicious install scripts, unpinned actions |
+| Go | 6 | SQL injection, command injection, template escaping |
 | Dockerfile | 5 | Root user, secrets in ENV, untagged images |
-| CI/CD (GitHub Actions) | 4 | Secrets interpolation, unpinned actions |
+| CI/CD (GitHub Actions) | 4 | Secrets interpolation, unpinned actions, write-all permissions |
 | Terraform | 5 | Public S3, open security groups, IAM wildcards |
+| Other Services | 5 | AWS, GCP, MongoDB, Convex, Sentry, Twilio |
+
+## CLI Commands
+
+```bash
+npx guardvibe init <platform>    # Setup MCP server (claude, cursor, gemini, all)
+npx guardvibe hook install       # Install pre-commit hook
+npx guardvibe hook uninstall     # Remove pre-commit hook
+npx guardvibe ci github          # Generate GitHub Actions workflow
+npx guardvibe-scan               # Scan staged files (for pre-commit)
+npx guardvibe-scan --format sarif --output results.sarif  # CI mode
+```
 
 ## Plugin System
 
 Extend GuardVibe with custom or community rule packs.
 
-**Install a plugin:**
-
 ```bash
 npm install guardvibe-rules-awesome
 ```
 
 Plugins matching `guardvibe-rules-*`, `@guardvibe/rules-*`, or `@guardvibe-pro/rules-*` are discovered automatically.
 
-**Manual plugin config (.guardviberc):**
-
-```json
-{
-  "plugins": ["guardvibe-rules-awesome", "./my-custom-rules.js"]
-}
-```
-
 **Create a plugin:**
 
 ```typescript
@@ -197,17 +225,15 @@ Supports `//`, `#`, and `<!-- -->` comment styles.
 
 ## How It Works
 
-GuardVibe runs as an MCP server that your AI coding agent connects to. When the agent generates code, it can ask GuardVibe to scan it for security issues before committing.
-
 ```
 You write code with AI
-    ↓
+    |
 AI agent calls GuardVibe MCP tools
-    ↓
+    |
 GuardVibe scans locally (no cloud, no API)
-    ↓
+    |
 Returns findings with severity, OWASP mapping, and fix suggestions
-    ↓
+    |
 AI agent fixes issues before they reach production
 ```
 
@@ -221,4 +247,4 @@ Tested on a real 644-file Next.js + Supabase project:
 
 ## License
 
-MIT — open source and free to use. Built by [GokLab](https://guardvibe.dev).
+MIT — open source and free to use. Built by [GokLab](https://github.com/goklab).

package/build/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
+import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, unlinkSync } from "fs";
 import { join, dirname } from "path";
 import { homedir } from "os";
 const GUARDVIBE_MCP_CONFIG = {
@@ -42,7 +42,6 @@ function setupPlatform(name) {
         return false;
     const existing = readJsonFile(platform.path);
     if (existing) {
-        // Merge - don't overwrite existing MCP servers
         if (!existing.mcpServers) {
             existing.mcpServers = {};
         }
@@ -54,7 +53,6 @@ function setupPlatform(name) {
         writeJsonFile(platform.path, existing);
     }
     else {
-        // Create new config
         writeJsonFile(platform.path, {
             mcpServers: {
                 guardvibe: GUARDVIBE_MCP_CONFIG,
@@ -64,14 +62,184 @@ function setupPlatform(name) {
     console.log(`  [OK] Added MCP server to ${platform.description}`);
     return true;
 }
+// ── Pre-commit hook ──────────────────────────────────────────────────
+const HOOK_SCRIPT = `#!/bin/sh
+# GuardVibe pre-commit security hook
+# Installed by: npx guardvibe hook install
+
+echo "🔒 GuardVibe: scanning staged files..."
+
+# Run guardvibe scan on staged files
+RESULT=$(npx -y guardvibe-scan 2>&1)
+EXIT_CODE=$?
+
+if [ $EXIT_CODE -ne 0 ]; then
+  echo ""
+  echo "$RESULT"
+  echo ""
+  echo "❌ GuardVibe: security issues found. Fix them or commit with --no-verify to skip."
+  exit 1
+fi
+
+echo "✅ GuardVibe: all checks passed."
+`;
+function installHook() {
+    const gitDir = join(process.cwd(), ".git");
+    if (!existsSync(gitDir)) {
+        console.error("  [ERR] Not a git repository. Run this from your project root.");
+        process.exit(1);
+    }
+    const hooksDir = join(gitDir, "hooks");
+    if (!existsSync(hooksDir)) {
+        mkdirSync(hooksDir, { recursive: true });
+    }
+    const hookPath = join(hooksDir, "pre-commit");
+    if (existsSync(hookPath)) {
+        const existing = readFileSync(hookPath, "utf-8");
+        if (existing.includes("GuardVibe")) {
+            console.log("  [OK] GuardVibe pre-commit hook already installed.");
+            return;
+        }
+        // Append to existing hook
+        writeFileSync(hookPath, existing + "\n" + HOOK_SCRIPT, "utf-8");
+        console.log("  [OK] GuardVibe added to existing pre-commit hook.");
+    }
+    else {
+        writeFileSync(hookPath, HOOK_SCRIPT, "utf-8");
+        chmodSync(hookPath, 0o755);
+        console.log("  [OK] Pre-commit hook installed at .git/hooks/pre-commit");
+    }
+}
+function uninstallHook() {
+    const hookPath = join(process.cwd(), ".git", "hooks", "pre-commit");
+    if (!existsSync(hookPath)) {
+        console.log("  [OK] No pre-commit hook found.");
+        return;
+    }
+    const content = readFileSync(hookPath, "utf-8");
+    if (!content.includes("GuardVibe")) {
+        console.log("  [OK] Pre-commit hook exists but doesn't contain GuardVibe.");
+        return;
+    }
+    // Remove GuardVibe section
+    const cleaned = content
+        .replace(/\n?# GuardVibe pre-commit security hook[\s\S]*?GuardVibe: all checks passed[."]*\n?/g, "")
+        .trim();
+    if (!cleaned || cleaned === "#!/bin/sh") {
+        unlinkSync(hookPath);
+        console.log("  [OK] Pre-commit hook removed.");
+    }
+    else {
+        writeFileSync(hookPath, cleaned + "\n", "utf-8");
+        console.log("  [OK] GuardVibe removed from pre-commit hook (other hooks preserved).");
+    }
+}
+// ── GitHub Actions workflow ──────────────────────────────────────────
+const GITHUB_ACTIONS_WORKFLOW = `name: GuardVibe Security Scan
+
+on:
+  pull_request:
+    branches: [main, master]
+  push:
+    branches: [main, master]
+
+permissions:
+  contents: read
+  security-events: write
+
+jobs:
+  security-scan:
+    name: Security Scan
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run GuardVibe security scan
+        run: npx -y guardvibe-scan --format sarif --output guardvibe-results.sarif
+
+      - name: Upload SARIF to GitHub Security
+        if: always()
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: guardvibe-results.sarif
+          category: guardvibe
+`;
+function generateGitHubActions() {
+    const workflowDir = join(process.cwd(), ".github", "workflows");
+    if (!existsSync(workflowDir)) {
+        mkdirSync(workflowDir, { recursive: true });
+    }
+    const workflowPath = join(workflowDir, "guardvibe.yml");
+    if (existsSync(workflowPath)) {
+        console.log("  [OK] .github/workflows/guardvibe.yml already exists.");
+        return;
+    }
+    writeFileSync(workflowPath, GITHUB_ACTIONS_WORKFLOW, "utf-8");
+    console.log("  [OK] Created .github/workflows/guardvibe.yml");
+    console.log("  [OK] SARIF results will appear in GitHub Security tab.");
+}
+// ── Scan CLI (for pre-commit hook and CI) ────────────────────────────
+const SCAN_SCRIPT_DETECTED = process.argv[1]?.endsWith("guardvibe-scan") ||
+    process.argv[1]?.endsWith("guardvibe-scan.js");
+if (SCAN_SCRIPT_DETECTED) {
+    runScan();
+}
+else {
+    main();
+}
+async function runScan() {
+    const { scanStaged } = await import("./tools/scan-staged.js");
+    const { scanDirectory } = await import("./tools/scan-directory.js");
+    const args = process.argv.slice(2);
+    const formatIdx = args.indexOf("--format");
+    const format = formatIdx >= 0 ? args[formatIdx + 1] : "markdown";
+    const outputIdx = args.indexOf("--output");
+    const outputFile = outputIdx >= 0 ? args[outputIdx + 1] : null;
+    let result;
+    if (format === "sarif") {
+        // CI mode: scan full directory
+        const { exportSarif } = await import("./tools/export-sarif.js");
+        result = exportSarif(process.cwd());
+    }
+    else {
+        // Pre-commit mode: scan staged files
+        result = scanStaged(process.cwd(), format === "json" ? "json" : "markdown");
+    }
+    if (outputFile) {
+        writeFileSync(outputFile, result, "utf-8");
+        console.log(`  [OK] Results written to ${outputFile}`);
+    }
+    else {
+        console.log(result);
+    }
+    // Exit with error if critical/high issues found
+    if (format !== "sarif") {
+        const hasBlocking = result.includes("[CRITICAL]") || result.includes("[HIGH]");
+        if (hasBlocking)
+            process.exit(1);
+    }
+}
+// ── Main CLI ─────────────────────────────────────────────────────────
 function printUsage() {
     console.log(`
-  GuardVibe Security - Setup CLI
+  GuardVibe Security - CLI
 
   Usage:
-    npx guardvibe init <platform>
+    npx guardvibe init <platform>    Setup MCP server
+    npx guardvibe hook install       Install pre-commit hook
+    npx guardvibe hook uninstall     Remove pre-commit hook
+    npx guardvibe ci github          Generate GitHub Actions workflow
 
-  Platforms:
+  MCP Platforms:
     claude    Configure for Claude Code (.claude.json)
     gemini    Configure for Gemini CLI (~/.gemini/settings.json)
     cursor    Configure for Cursor (.cursor/mcp.json)
@@ -80,6 +248,8 @@ function printUsage() {
   Examples:
     npx guardvibe init claude
     npx guardvibe init all
+    npx guardvibe hook install
+    npx guardvibe ci github
 `);
 }
 function main() {
@@ -88,31 +258,61 @@ function main() {
         printUsage();
         process.exit(0);
     }
-    if (args[0] !== "init") {
-        console.error(`  Unknown command: ${args[0]}`);
-        printUsage();
-        process.exit(1);
-    }
-    const platform = args[1]?.toLowerCase();
-    if (!platform) {
-        console.error("  Please specify a platform: claude, gemini, cursor, or all");
-        process.exit(1);
+    const command = args[0];
+    if (command === "init") {
+        const platform = args[1]?.toLowerCase();
+        if (!platform) {
+            console.error("  Please specify a platform: claude, gemini, cursor, or all");
+            process.exit(1);
+        }
+        console.log(`\n  GuardVibe Security Setup\n`);
+        if (platform === "all") {
+            for (const name of Object.keys(platforms)) {
+                setupPlatform(name);
+            }
+        }
+        else if (platforms[platform]) {
+            setupPlatform(platform);
+        }
+        else {
+            console.error(`  Unknown platform: ${platform}`);
+            console.error(`  Available: claude, gemini, cursor, all`);
+            process.exit(1);
+        }
+        console.log(`\n  [OK] Ready! Start coding securely.\n`);
     }
-    console.log(`\n  GuardVibe Security Setup\n`);
-    if (platform === "all") {
-        for (const name of Object.keys(platforms)) {
-            setupPlatform(name);
+    else if (command === "hook") {
+        const action = args[1]?.toLowerCase();
+        console.log(`\n  GuardVibe Pre-Commit Hook\n`);
+        if (action === "install") {
+            installHook();
+        }
+        else if (action === "uninstall") {
+            uninstallHook();
+        }
+        else {
+            console.error("  Usage: npx guardvibe hook install|uninstall");
+            process.exit(1);
         }
+        console.log();
     }
-    else if (platforms[platform]) {
-        setupPlatform(platform);
+    else if (command === "ci") {
+        const provider = args[1]?.toLowerCase();
+        console.log(`\n  GuardVibe CI/CD Setup\n`);
+        if (provider === "github") {
+            generateGitHubActions();
+        }
+        else {
+            console.error("  Usage: npx guardvibe ci github");
+            console.error("  (more CI providers coming soon)");
+            process.exit(1);
+        }
+        console.log();
     }
     else {
-        console.error(`  Unknown platform: ${platform}`);
-        console.error(`  Available: claude, gemini, cursor, all`);
+        console.error(`  Unknown command: ${command}`);
+        printUsage();
         process.exit(1);
     }
-    console.log(`\n  [OK] Ready! Start coding securely.\n`);
 }
-main();
 //# sourceMappingURL=cli.js.map

package/build/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,MAAM,oBAAoB,GAAG;IAC3B,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;CAC1B,CAAC;AAOF,MAAM,SAAS,GAA0D;IACvE,MAAM,EAAE;QACN,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;QACzC,WAAW,EAAE,4BAA4B;KAC1C;IACD,MAAM,EAAE;QACN,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC;QACjD,WAAW,EAAE,sCAAsC;KACpD;IACD,MAAM,EAAE;QACN,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC;QAChD,WAAW,EAAE,2BAA2B;KACzC;CACF,CAAC;AAEF,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,IAAe;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5B,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7C,IAAI,QAAQ,EAAE,CAAC;QACb,+CAA+C;QAC/C,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzB,QAAQ,CAAC,UAAU,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,IAAK,QAAQ,CAAC,UAAsC,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,0CAA0C,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QACA,QAAQ,CAAC,UAAsC,CAAC,WAAW,CAAC,GAAG,oBAAoB,CAAC;QACrF,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,oBAAoB;QACpB,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC3B,UAAU,EAAE;gBACV,SAAS,EAAE,oBAAoB;aAChC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,8BAA8B,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;CAeb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,IAAI;IACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClE,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/C,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IAExC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAE9C,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,aAAa,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;SAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;AAC1D,CAAC;AAED,IAAI,EAAE,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,MAAM,oBAAoB,GAAG;IAC3B,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;CAC1B,CAAC;AAOF,MAAM,SAAS,GAA0D;IACvE,MAAM,EAAE;QACN,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;QACzC,WAAW,EAAE,4BAA4B;KAC1C;IACD,MAAM,EAAE;QACN,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC;QACjD,WAAW,EAAE,sCAAsC;KACpD;IACD,MAAM,EAAE;QACN,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC;QAChD,WAAW,EAAE,2BAA2B;KACzC;CACF,CAAC;AAEF,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,IAAe;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5B,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7C,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzB,QAAQ,CAAC,UAAU,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,IAAK,QAAQ,CAAC,UAAsC,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,0CAA0C,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QACA,QAAQ,CAAC,UAAsC,CAAC,WAAW,CAAC,GAAG,oBAAoB,CAAC;QACrF,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC3B,UAAU,EAAE;gBACV,SAAS,EAAE,oBAAoB;aAChC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,8BAA8B,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AAExE,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;CAmBnB,CAAC;AAEF,SAAS,WAAW;IAClB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE9C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,0BAA0B;QAC1B,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,GAAG,WAAW,EAAE,OAAO,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC9C,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,2BAA2B;IAC3B,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,sFAAsF,EAAE,EAAE,CAAC;SACnG,IAAI,EAAE,CAAC;IAEV,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QACxC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqC/B,CAAC;AAEF,SAAS,qBAAqB;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,aAAa,CAAC,YAAY,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;AAC1E,CAAC;AAED,wEAAwE;AAExE,MAAM,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,gBAAgB,CAAC;IACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;AAEjD,IAAI,oBAAoB,EAAE,CAAC;IACzB,OAAO,EAAE,CAAC;AACZ,CAAC;KAAM,CAAC;IACN,IAAI,EAAE,CAAC;AACT,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC9D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAEpE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/D,IAAI,MAAc,CAAC;IAEnB,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,+BAA+B;QAC/B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAChE,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,qCAAqC;QACrC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,gDAAgD;IAChD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/E,IAAI,WAAW;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;CAoBb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,IAAI;IACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClE,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAExB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAE9C,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,aAAa,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;SAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAE/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,WAAW,EAAE,CAAC;QAChB,CAAC;aAAM,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,aAAa,EAAE,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;SAAM,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAE3C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,qBAAqB,EAAE,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;QAC/C,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/build/data/rules/ai-security.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai-security.d.ts","sourceRoot":"","sources":["../../../src/data/rules/ai-security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,eAAO,MAAM,eAAe,EAAE,YAAY,EA6DzC,CAAC"}
+{"version":3,"file":"ai-security.d.ts","sourceRoot":"","sources":["../../../src/data/rules/ai-security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,eAAO,MAAM,eAAe,EAAE,YAAY,EA4NzC,CAAC"}