mustflow 2.103.3 → 2.103.12

package/dist/core/script-pack-suggestions.js

@@ -10,7 +10,7 @@ const CODE_NAVIGATION_SCRIPT_REFS = new Set([
     'repo/related-files',
 ]);
 const CONFIG_CHAIN_SURFACES = new Set(['config', 'package', 'source', 'test']);
-const CONFIG_FILE_PATTERN = /(?:^|\/)(?:\.gitignore|\.env\.(?:example|sample|template|defaults)|\.dev\.vars\.example|tsconfig(?:\..*)?\.json|eslint\.config\.[cm]?[jt]s|\.eslintrc(?:\.json)?|\.prettierrc(?:\.json)?|prettier\.config\.[cm]?[jt]s|vite\.config\.[cm]?[jt]s|vitest\.config\.[cm]?[jt]s|tailwind\.config\.[cm]?[jt]s|jest\.config\.[cm]?[jt]s|playwright\.config\.[cm]?[jt]s|astro\.config\.mjs|svelte\.config\.js)$/u;
+const CONFIG_FILE_PATTERN = /(?:^|\/)(?:\.gitignore|\.env\.(?:example|sample|template|defaults)|\.dev\.vars\.example|tsconfig(?:\..*)?\.json|eslint\.config\.[cm]?[jt]s|\.eslintrc(?:\.json)?|\.prettierrc(?:\.json)?|prettier\.config\.[cm]?[jt]s|vite\.config\.[cm]?[jt]s|vitest\.config\.[cm]?[jt]s|tailwind\.config\.[cm]?[jt]s|jest\.config\.[cm]?[jt]s|playwright\.config\.[cm]?[jt]s|astro\.config\.mjs|svelte\.config\.js|wrangler\.(?:toml|jsonc?)|vercel\.json|netlify\.toml|Dockerfile|docker-compose\.ya?ml|compose\.ya?ml)$/u;
 export function isScriptPackSuggestionPhase(value) {
     return ['before_change', 'during_change', 'after_change', 'review'].includes(value);
 }
@@ -80,26 +80,37 @@ export function classifyScriptPackPathSurface(relativePath) {
     return surfaces.length > 0 ? uniqueSortedSurfaces(surfaces) : ['unknown'];
 }
 function readChangedPaths(mustflowRoot, issues) {
-    const result = spawnSync('git', ['status', '--short'], {
+    const result = spawnSync('git', ['status', '--porcelain=v1', '-z', '--untracked-files=all'], {
         cwd: mustflowRoot,
         encoding: 'utf8',
         stdio: ['ignore', 'pipe', 'pipe'],
         windowsHide: true,
+        maxBuffer: 16 * 1024 * 1024,
     });
-    if (result.status !== 0) {
-        const detail = result.stderr.trim() || result.stdout.trim() || `git status exited with ${result.status}`;
+    if (result.error || result.status !== 0) {
+        const detail = result.error?.message ?? (result.stderr.trim() || result.stdout.trim() || `git status exited with ${result.status}`);
         issues.push(`Could not read changed paths: ${detail}`);
         return [];
     }
-    return result.stdout
-        .split(/\r?\n/u)
-        .map((line) => line.trimEnd())
-        .filter((line) => line.length > 0)
-        .map((line) => {
-        const renamed = /\s->\s(?<target>.+)$/u.exec(line);
-        return renamed?.groups?.target ?? line.slice(3).trim();
-    })
-        .filter((entry) => entry.length > 0);
+    const paths = [];
+    const records = result.stdout.split('\0');
+    let index = 0;
+    while (index < records.length) {
+        const record = records[index] ?? '';
+        index += 1;
+        if (record.length === 0) {
+            continue;
+        }
+        const status = record.slice(0, 2);
+        const relativePath = record.slice(3);
+        if (relativePath.length > 0) {
+            paths.push(relativePath);
+        }
+        if (status.includes('R') || status.includes('C')) {
+            index += 1;
+        }
+    }
+    return paths;
 }
 function surfacesForScript(script) {
     const surfaces = new Set();
@@ -122,7 +133,7 @@ function surfacesForScript(script) {
     addIf('skill', /skill|workflow/u);
     addIf('generated', /generated|protected|vendor|cache|boundary/u);
     addIf('config', /config|command/u);
-    addIf('package', /package|release/u);
+    addIf('package', /deploy|package|publish|release/u);
     addIf('test', /test|suite|fixture|coverage|selection|timing|performance/u);
     addIf('source', /code|source|symbol/u);
     if (script.ref === 'repo/manifest-lock-drift') {
@@ -254,6 +265,9 @@ function createRunHint(script, analyzedPaths) {
     if (script.ref === 'repo/approval-gate') {
         return 'mf script-pack run repo/approval-gate check --action <action_type> --json';
     }
+    if (script.ref === 'repo/deploy-surface') {
+        return 'mf script-pack run repo/deploy-surface inspect --json';
+    }
     if (script.ref === 'repo/config-chain') {
         const configPaths = analyzedPaths
             .filter((entry) => entry.surfaces.some((surface) => CONFIG_CHAIN_SURFACES.has(surface)))
@@ -272,6 +286,12 @@ function createRunHint(script, analyzedPaths) {
             .map((entry) => entry.path);
         return createConcretePathHint('mf script-pack run repo/secret-risk-scan scan', secretRiskPaths, script.usage);
     }
+    if (script.ref === 'repo/security-pattern-scan') {
+        const securityPatternPaths = analyzedPaths
+            .filter((entry) => entry.surfaces.some((surface) => surface === 'config' || surface === 'source' || surface === 'package' || surface === 'test'))
+            .map((entry) => entry.path);
+        return createConcretePathHint('mf script-pack run repo/security-pattern-scan scan', securityPatternPaths, script.usage);
+    }
     if (script.ref === 'repo/related-files') {
         const relatedPaths = analyzedPaths
             .filter((entry) => entry.surfaces.some((surface) => surface === 'source' || surface === 'test'))
@@ -356,6 +376,24 @@ export function createScriptPackSuggestionReport(mustflowRoot, options) {
             score += 2;
             reasons.push('Prioritizes approval-gate checks for approval-sensitive workflow and release surfaces.');
         }
+        if (script.ref === 'repo/deploy-surface' &&
+            (requestedSurfaces.has('package') || requestedSurfaces.has('config') || requestedSurfaces.has('docs'))) {
+            score += 2;
+            reasons.push('Prioritizes deploy-surface inspection for push, tag, release, docs, and package publication follow-up.');
+        }
+        if (script.ref === 'repo/security-pattern-scan' &&
+            (hasSourcePath ||
+                requestedSurfaces.has('config') ||
+                options.skills.some((skill) => [
+                    'api-access-control-review',
+                    'file-upload-security-review',
+                    'security-flow-review',
+                    'security-privacy-review',
+                    'security-regression-tests',
+                ].includes(skill)))) {
+            score += 2;
+            reasons.push('Prioritizes security-pattern scans for source, config, and security-review surfaces.');
+        }
         if (score === 0) {
             return null;
         }

package/dist/core/secret-risk-scan.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto';
 import { existsSync, lstatSync, readdirSync } from 'node:fs';
 import path from 'node:path';
+import { DEFAULT_IGNORED_DIRECTORIES, isIgnoredDirectoryPath } from './ignored-directories.js';
 import { ensureInside, ensureInsideWithoutSymlinks, readFileInsideWithoutSymlinks } from './safe-filesystem.js';
 export const SECRET_RISK_SCAN_PACK_ID = 'repo';
 export const SECRET_RISK_SCAN_SCRIPT_ID = 'secret-risk-scan';
@@ -35,17 +36,7 @@ const ENV_EXAMPLE_NAMES = [
     '.env.local.example',
     '.dev.vars.example',
 ];
-const IGNORED_DIRECTORIES = [
-    '.git',
-    '.mustflow/cache',
-    '.mustflow/state',
-    'node_modules',
-    'dist',
-    'build',
-    'coverage',
-    '.next',
-    '.turbo',
-];
+const IGNORED_DIRECTORIES = DEFAULT_IGNORED_DIRECTORIES;
 const ERROR_CODES = new Set([
     'secret_risk_path_outside_root',
     'secret_risk_unreadable_path',
@@ -68,8 +59,7 @@ function makeFinding(code, severity, pathValue, message, details = {}) {
     return { code, severity, path: pathValue, message, ...details };
 }
 function isIgnoredDirectory(relativePath) {
-    const normalized = normalizeRelativePath(relativePath);
-    return IGNORED_DIRECTORIES.some((directory) => normalized === directory || normalized.startsWith(`${directory}/`));
+    return isIgnoredDirectoryPath(normalizeRelativePath(relativePath), IGNORED_DIRECTORIES);
 }
 function isSecretFile(relativePath) {
     return SECRET_FILE_NAMES.includes(path.basename(relativePath).toLowerCase());

package/dist/core/security-pattern-scan.js

@@ -0,0 +1,518 @@
+import { createHash } from 'node:crypto';
+import { existsSync, lstatSync, readdirSync } from 'node:fs';
+import path from 'node:path';
+import { DEFAULT_IGNORED_DIRECTORIES, isIgnoredDirectoryPath } from './ignored-directories.js';
+import { ensureInside, ensureInsideWithoutSymlinks, readUtf8FileInsideWithoutSymlinks } from './safe-filesystem.js';
+export const SECURITY_PATTERN_SCAN_PACK_ID = 'repo';
+export const SECURITY_PATTERN_SCAN_SCRIPT_ID = 'security-pattern-scan';
+export const SECURITY_PATTERN_SCAN_SCRIPT_REF = `${SECURITY_PATTERN_SCAN_PACK_ID}/${SECURITY_PATTERN_SCAN_SCRIPT_ID}`;
+const DEFAULT_MAX_FILE_BYTES = 256 * 1024;
+const DEFAULT_MAX_FILES = 1000;
+const DEFAULT_MAX_FINDINGS = 300;
+const MAX_ISSUES = 50;
+const SCAN_EXTENSIONS = [
+    '.c',
+    '.cc',
+    '.cpp',
+    '.cs',
+    '.cts',
+    '.go',
+    '.java',
+    '.js',
+    '.jsx',
+    '.kt',
+    '.md',
+    '.mdx',
+    '.mjs',
+    '.mts',
+    '.php',
+    '.py',
+    '.rb',
+    '.rs',
+    '.sh',
+    '.ts',
+    '.tsx',
+    '.yaml',
+    '.yml',
+];
+const IGNORED_DIRECTORIES = DEFAULT_IGNORED_DIRECTORIES;
+const ERROR_CODES = new Set([
+    'security_pattern_path_outside_root',
+    'security_pattern_unreadable_path',
+]);
+function normalizeRelativePath(value) {
+    return value.replace(/\\/gu, '/').replace(/^\.\/+/u, '') || '.';
+}
+function sha256Tagged(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
+}
+function fingerprint(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex').slice(0, 16)}`;
+}
+function pushIssue(issues, issue) {
+    if (issues.length < MAX_ISSUES) {
+        issues.push(issue);
+    }
+}
+function makeFinding(code, severity, pathValue, message, details = {}) {
+    return {
+        code,
+        severity,
+        path: pathValue,
+        message,
+        line: details.line,
+        detector: details.detector,
+        category: details.category,
+        review_focus: details.reviewFocus,
+        fingerprint: details.fingerprint,
+        json_pointer: null,
+        metric: null,
+        actual: null,
+        expected: null,
+    };
+}
+function positiveInteger(value, fallback) {
+    return typeof value === 'number' && Number.isInteger(value) && value > 0 ? value : fallback;
+}
+function isIgnoredDirectory(relativePath) {
+    return isIgnoredDirectoryPath(normalizeRelativePath(relativePath), IGNORED_DIRECTORIES);
+}
+function surfaceForPath(relativePath) {
+    const normalized = normalizeRelativePath(relativePath);
+    const extension = path.extname(normalized).toLowerCase();
+    if (!SCAN_EXTENSIONS.includes(extension)) {
+        return null;
+    }
+    if (normalized.startsWith('.github/workflows/') || ['.yml', '.yaml'].includes(extension)) {
+        return 'ci';
+    }
+    if (['.md', '.mdx'].includes(extension)) {
+        return 'docs';
+    }
+    if (['.json', '.toml', '.yaml', '.yml'].includes(extension) || normalized.startsWith('.mustflow/config/')) {
+        return 'config';
+    }
+    return 'code';
+}
+function normalizeTargetPath(projectRoot, targetPath) {
+    const absolutePath = path.resolve(process.cwd(), targetPath);
+    ensureInside(projectRoot, absolutePath);
+    return {
+        absolutePath,
+        relativePath: normalizeRelativePath(path.relative(projectRoot, absolutePath)),
+    };
+}
+function targetKind(absolutePath) {
+    if (!existsSync(absolutePath)) {
+        return { exists: false, kind: 'missing' };
+    }
+    const stats = lstatSync(absolutePath);
+    if (stats.isFile()) {
+        return { exists: true, kind: 'file' };
+    }
+    if (stats.isDirectory()) {
+        return { exists: true, kind: 'directory' };
+    }
+    return { exists: true, kind: 'other' };
+}
+function addCandidate(candidates, findings, issues, policy, candidate) {
+    if (candidates.has(candidate.relativePath)) {
+        return;
+    }
+    if (candidates.size >= policy.max_files) {
+        if (!findings.some((finding) => finding.code === 'security_pattern_max_files_exceeded')) {
+            const message = `Security-pattern scan matched more than ${policy.max_files} files; remaining files were skipped.`;
+            pushIssue(issues, message);
+            findings.push(makeFinding('security_pattern_max_files_exceeded', 'medium', candidate.relativePath, message));
+        }
+        return;
+    }
+    candidates.set(candidate.relativePath, candidate);
+}
+function collectFilesFromDirectory(projectRoot, absoluteDirectory, candidates, findings, issues, policy) {
+    const relativeDirectory = normalizeRelativePath(path.relative(projectRoot, absoluteDirectory));
+    if (isIgnoredDirectory(relativeDirectory)) {
+        return;
+    }
+    let entries;
+    try {
+        ensureInsideWithoutSymlinks(projectRoot, absoluteDirectory);
+        entries = readdirSync(absoluteDirectory, { withFileTypes: true });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        pushIssue(issues, `${relativeDirectory}: ${message}`);
+        findings.push(makeFinding('security_pattern_unreadable_path', 'high', relativeDirectory, message));
+        return;
+    }
+    for (const entry of entries) {
+        const absoluteEntry = path.join(absoluteDirectory, entry.name);
+        const relativeEntry = normalizeRelativePath(path.relative(projectRoot, absoluteEntry));
+        if (entry.isDirectory()) {
+            collectFilesFromDirectory(projectRoot, absoluteEntry, candidates, findings, issues, policy);
+            continue;
+        }
+        if (!entry.isFile()) {
+            continue;
+        }
+        const surface = surfaceForPath(relativeEntry);
+        if (surface) {
+            addCandidate(candidates, findings, issues, policy, { absolutePath: absoluteEntry, relativePath: relativeEntry, surface });
+        }
+    }
+}
+function lineNumberAtIndex(text, index) {
+    let line = 1;
+    let offset = 0;
+    while (offset < index) {
+        if (text.charCodeAt(offset) === 10) {
+            line += 1;
+        }
+        offset += 1;
+    }
+    return line;
+}
+function addBoundedFinding(findings, issues, policy, finding) {
+    if (findings.length >= policy.max_findings) {
+        if (!findings.some((entry) => entry.code === 'security_pattern_max_findings_exceeded')) {
+            const message = `Security-pattern scan found more than ${policy.max_findings} findings; remaining findings were skipped.`;
+            pushIssue(issues, message);
+            findings.push(makeFinding('security_pattern_max_findings_exceeded', 'medium', finding.path, message));
+        }
+        return;
+    }
+    findings.push(finding);
+}
+const ALWAYS = () => true;
+const CODE_ONLY = (candidate) => candidate.surface === 'code';
+const CODE_OR_CI = (candidate) => candidate.surface === 'code' || candidate.surface === 'ci';
+const RULES = [
+    {
+        code: 'security_pattern_fs_call_non_literal_path',
+        detector: 'fs_call_non_literal_path',
+        category: 'filesystem',
+        severity: 'medium',
+        message: 'Filesystem call receives a non-literal first argument.',
+        reviewFocus: 'Prove path normalization and allowed-root containment before trusting this file operation.',
+        pattern: /\b(?:fs\.)?(?:readFile|readFileSync|writeFile|writeFileSync|appendFile|createReadStream|createWriteStream|unlink|rm|rename|copyFile|mkdir|readdir|stat|lstat)\s*\(\s*(?!["'`])/gu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_path_join_user_input',
+        detector: 'path_join_user_input',
+        category: 'filesystem',
+        severity: 'high',
+        message: 'Path composition appears to use request-controlled input.',
+        reviewFocus: 'Trace the composed path to the file sink and prove real-path containment after decoding and symlink checks.',
+        pattern: /\bpath\.(?:join|resolve)\s*\([^;\n]*(?:req\.|request\.|ctx\.|params|body|query)/gu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_dynamic_regex',
+        detector: 'dynamic_regex',
+        category: 'injection',
+        severity: 'medium',
+        message: 'RegExp constructor receives a dynamic pattern.',
+        reviewFocus: 'Check whether attacker-controlled text can choose the pattern; prefer literals, escaping, length limits, or a safe regex engine.',
+        pattern: /\b(?:new\s+RegExp|RegExp)\s*\(\s*(?!["'`][^"'`\r\n]*["'`]\s*[,)]).+/gu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_shell_true',
+        detector: 'shell_true',
+        category: 'command',
+        severity: 'high',
+        message: 'Process spawn options enable shell execution.',
+        reviewFocus: 'Use argv arrays and a static executable map; prove user-controlled strings cannot reach shell syntax.',
+        pattern: /\bshell\s*:\s*true\b/gu,
+        appliesTo: CODE_OR_CI,
+    },
+    {
+        code: 'security_pattern_eval_execution',
+        detector: 'eval_execution',
+        category: 'injection',
+        severity: 'critical',
+        message: 'Dynamic code execution primitive found.',
+        reviewFocus: 'Replace eval/new Function with a bounded parser, static operation map, or sandboxed interpreter with explicit policy.',
+        pattern: /\b(?:eval\s*\(|new\s+Function\s*\(|Function\s*\()/gu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_sql_template_interpolation',
+        detector: 'sql_template_interpolation',
+        category: 'injection',
+        severity: 'high',
+        message: 'SQL-looking template string contains interpolation.',
+        reviewFocus: 'Use parameterized values and allowlisted identifiers; check ORDER BY, table, column, and raw ORM fragments separately.',
+        pattern: /`[^`\r\n]*(?:SELECT|UPDATE|DELETE|INSERT|WHERE|ORDER BY)[^`\r\n]*\$\{[^`\r\n]*`/giu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_mass_assignment',
+        detector: 'mass_assignment',
+        category: 'access_control',
+        severity: 'high',
+        message: 'Request body appears to be bound directly into an entity or persistence call.',
+        reviewFocus: 'Replace raw body binding with a write DTO allowlist and server-derived privileged fields.',
+        pattern: /\b(?:Object\.assign\s*\([^,\n]+,\s*(?:req|request|ctx)?\.?body\b|(?:create|update|updateMany|insert|save)\s*\(\s*(?:req|request|ctx)?\.?body\b)/gu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_client_controlled_authority',
+        detector: 'client_controlled_authority',
+        category: 'access_control',
+        severity: 'high',
+        message: 'Authority-bearing field appears to come from request-controlled input.',
+        reviewFocus: 'Derive user, tenant, role, price, plan, owner, and entitlement from trusted server state, not request fields.',
+        pattern: /\b(?:req|request|ctx)\.(?:body|query|headers|params)\.?(?:\[['"])?(?:userId|accountId|tenantId|orgId|workspaceId|ownerId|role|isAdmin|permissions|scope|plan|price|status|entitlement)(?:['"]\])?/giu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_insecure_cookie_options',
+        detector: 'insecure_cookie_options',
+        category: 'token_session',
+        severity: 'medium',
+        message: 'Cookie-setting call does not show secure session-cookie flags on the same line.',
+        reviewFocus: 'For authority-bearing cookies, verify HttpOnly, Secure, SameSite, path, lifetime, rotation, logout, and CSRF posture.',
+        pattern: /\b(?:res|response|ctx)\.cookie\s*\([^\r\n]*/gu,
+        appliesTo: CODE_ONLY,
+        linePredicate: (line) => !/httpOnly|secure|sameSite/iu.test(line),
+    },
+    {
+        code: 'security_pattern_cors_origin_reflection_with_credentials',
+        detector: 'cors_origin_reflection_with_credentials',
+        category: 'browser',
+        severity: 'high',
+        message: 'CORS origin reflection appears in a file that also enables credentials.',
+        reviewFocus: 'Replace reflected origins with an allowlist and emit Vary: Origin when credentials are allowed.',
+        pattern: /Access-Control-Allow-Origin[^;\n]*(?:req|request)\.headers\.origin|(?:req|request)\.headers\.origin[^;\n]*Access-Control-Allow-Origin/giu,
+        appliesTo: (_candidate, text) => /Access-Control-Allow-Credentials[^;\n]*true/iu.test(text),
+    },
+    {
+        code: 'security_pattern_postmessage_wildcard_target',
+        detector: 'postmessage_wildcard_target',
+        category: 'browser',
+        severity: 'high',
+        message: 'postMessage uses a wildcard target origin.',
+        reviewFocus: 'Send messages only to a fixed trusted origin and avoid sending tokens or secrets through cross-window messages.',
+        pattern: /\.postMessage\s*\([^;\n]*,\s*["']\*["']/gu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_postmessage_missing_origin_check',
+        detector: 'postmessage_missing_origin_check',
+        category: 'browser',
+        severity: 'medium',
+        message: 'Message event listener has no visible event.origin check in the file.',
+        reviewFocus: 'Validate event.origin, event.source, message type, and payload schema before acting on cross-window messages.',
+        pattern: /addEventListener\s*\(\s*["']message["']/gu,
+        appliesTo: (_candidate, text) => !/\bevent\.origin\b|\borigin\s*!==|\borigin\s*===/u.test(text),
+    },
+    {
+        code: 'security_pattern_local_storage_token',
+        detector: 'local_storage_token',
+        category: 'token_session',
+        severity: 'high',
+        message: 'Browser localStorage appears to store a token or session-like value.',
+        reviewFocus: 'Avoid durable browser-readable authority where possible; review XSS blast radius, token lifetime, rotation, and revocation.',
+        pattern: /\blocalStorage\.setItem\s*\([^;\n]*(?:token|session|jwt|auth|refresh|api[_-]?key)/giu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_server_fetch_user_url',
+        detector: 'server_fetch_user_url',
+        category: 'injection',
+        severity: 'high',
+        message: 'Server-side HTTP call appears to use a request-controlled URL.',
+        reviewFocus: 'Treat this as SSRF until scheme, host, redirects, DNS resolution, private networks, timeout, and size limits are proven.',
+        pattern: /\b(?:fetch|axios\.(?:get|post|put|patch)|request|got)\s*\([^;\n]*(?:req|request|ctx)\.(?:query|body|params)[^;\n]*(?:url|uri|href)/giu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_tls_verification_disabled',
+        detector: 'tls_verification_disabled',
+        category: 'crypto_transport',
+        severity: 'critical',
+        message: 'TLS certificate verification appears to be disabled.',
+        reviewFocus: 'Remove certificate-verification bypasses and use test-only injection or local trust roots when needed.',
+        pattern: /\b(?:rejectUnauthorized\s*:\s*false|InsecureSkipVerify\s*:\s*true|verify\s*=\s*False|check_hostname\s*=\s*False)/gu,
+        appliesTo: CODE_OR_CI,
+    },
+    {
+        code: 'security_pattern_unsafe_yaml_load',
+        detector: 'unsafe_yaml_load',
+        category: 'parser',
+        severity: 'high',
+        message: 'YAML parsing appears to use an unsafe loader.',
+        reviewFocus: 'Use safe_load or a schema-backed parser and validate the resulting data shape before use.',
+        pattern: /\byaml\.load\s*\([^;\n]*(?:Loader\s*=\s*yaml\.(?:Loader|FullLoader|UnsafeLoader)|FullLoader|UnsafeLoader)/gu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_native_deserialization',
+        detector: 'native_deserialization',
+        category: 'parser',
+        severity: 'critical',
+        message: 'Native object deserialization primitive found.',
+        reviewFocus: 'Do not deserialize untrusted bytes into executable or language-native objects; use JSON plus schema validation where possible.',
+        pattern: /\b(?:pickle\.loads|pickle\.load|marshal\.loads|ObjectInputStream|BinaryFormatter|yaml\.unsafe_load|bincode::deserialize)/gu,
+        appliesTo: CODE_ONLY,
+    },
+    {
+        code: 'security_pattern_raw_sensitive_request_logging',
+        detector: 'raw_sensitive_request_logging',
+        category: 'logging',
+        severity: 'high',
+        message: 'Logger call appears to include raw request headers, body, cookies, or query.',
+        reviewFocus: 'Redact Authorization, Cookie, token, OTP, password, secret, and reset-link fields before logging request metadata.',
+        pattern: /\b(?:logger|log|console)\.(?:debug|info|warn|error|log)\s*\([^;\n]*(?:req|request)\.(?:headers|body|cookies|query)/gu,
+        appliesTo: CODE_ONLY,
+    },
+];
+function scanCandidate(projectRoot, candidate, policy, findings, issues) {
+    let text;
+    try {
+        text = readUtf8FileInsideWithoutSymlinks(projectRoot, candidate.absolutePath, { maxBytes: policy.max_file_bytes });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        const code = message.includes('exceeds maximum size')
+            ? 'security_pattern_file_too_large'
+            : 'security_pattern_unreadable_path';
+        const severity = code === 'security_pattern_file_too_large' ? 'medium' : 'high';
+        pushIssue(issues, `${candidate.relativePath}: ${message}`);
+        findings.push(makeFinding(code, severity, candidate.relativePath, message));
+        return;
+    }
+    for (const rule of RULES) {
+        if (!rule.appliesTo(candidate, text)) {
+            continue;
+        }
+        for (const match of text.matchAll(rule.pattern)) {
+            const line = lineNumberAtIndex(text, match.index ?? 0);
+            const matchedLine = text.split(/\r\n|\n|\r/u)[line - 1] ?? '';
+            if (rule.linePredicate && !rule.linePredicate(matchedLine, text)) {
+                continue;
+            }
+            addBoundedFinding(findings, issues, policy, makeFinding(rule.code, rule.severity, candidate.relativePath, rule.message, {
+                line,
+                detector: rule.detector,
+                category: rule.category,
+                reviewFocus: rule.reviewFocus,
+                fingerprint: fingerprint(`${rule.detector}:${match[0]}`),
+            }));
+        }
+    }
+}
+function securityPatternStatus(findings) {
+    if (findings.some((finding) => ERROR_CODES.has(finding.code))) {
+        return 'error';
+    }
+    if (findings.some((finding) => ['medium', 'high', 'critical'].includes(finding.severity))) {
+        return 'failed';
+    }
+    return 'passed';
+}
+function summarizeSecurityPatterns(targets, fileCount, findings) {
+    const categories = new Set(findings.map((finding) => finding.category).filter((category) => Boolean(category)));
+    return {
+        target_count: targets.length,
+        file_count: fileCount,
+        finding_count: findings.length,
+        high_or_critical_count: findings.filter((finding) => ['high', 'critical'].includes(finding.severity)).length,
+        category_count: categories.size,
+    };
+}
+function createInputHash(policy, targets, findings, issues) {
+    return sha256Tagged(JSON.stringify({
+        policy,
+        targets,
+        findings: findings.map((finding) => ({
+            code: finding.code,
+            path: finding.path,
+            line: finding.line,
+            detector: finding.detector,
+            category: finding.category,
+            fingerprint: finding.fingerprint,
+        })),
+        issues,
+    }));
+}
+export function inspectSecurityPatternScan(projectRoot, options = {}) {
+    const root = path.resolve(projectRoot);
+    const policy = {
+        max_file_bytes: positiveInteger(options.maxFileBytes, DEFAULT_MAX_FILE_BYTES),
+        max_files: positiveInteger(options.maxFiles, DEFAULT_MAX_FILES),
+        max_findings: positiveInteger(options.maxFindings, DEFAULT_MAX_FINDINGS),
+        extensions: [...SCAN_EXTENSIONS],
+        ignored_directories: [...IGNORED_DIRECTORIES],
+        evidence_mode: 'metadata_only',
+    };
+    const targetInputs = options.paths && options.paths.length > 0 ? options.paths : ['.'];
+    const targets = [];
+    const candidates = new Map();
+    const findings = [];
+    const issues = [];
+    for (const targetPath of targetInputs) {
+        let absolutePath;
+        let relativePath;
+        try {
+            const normalized = normalizeTargetPath(root, targetPath);
+            absolutePath = normalized.absolutePath;
+            relativePath = normalized.relativePath;
+            ensureInsideWithoutSymlinks(root, absolutePath, { allowMissingLeaf: true });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            pushIssue(issues, message);
+            targets.push({ input: targetPath, path: targetPath, exists: null, kind: 'unknown' });
+            findings.push(makeFinding('security_pattern_path_outside_root', 'high', targetPath, message));
+            continue;
+        }
+        let existence;
+        try {
+            existence = targetKind(absolutePath);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            pushIssue(issues, `${relativePath}: ${message}`);
+            targets.push({ input: targetPath, path: relativePath, exists: null, kind: 'unknown' });
+            findings.push(makeFinding('security_pattern_unreadable_path', 'high', relativePath, message));
+            continue;
+        }
+        targets.push({ input: targetPath, path: relativePath, exists: existence.exists, kind: existence.kind });
+        if (existence.kind === 'file') {
+            const surface = surfaceForPath(relativePath);
+            if (surface) {
+                addCandidate(candidates, findings, issues, policy, { absolutePath, relativePath, surface });
+            }
+        }
+        else if (existence.kind === 'directory') {
+            collectFilesFromDirectory(root, absolutePath, candidates, findings, issues, policy);
+        }
+    }
+    for (const candidate of candidates.values()) {
+        scanCandidate(root, candidate, policy, findings, issues);
+    }
+    const status = securityPatternStatus(findings);
+    const truncated = findings.some((finding) => ['security_pattern_max_files_exceeded', 'security_pattern_max_findings_exceeded'].includes(finding.code));
+    const summary = summarizeSecurityPatterns(targets, candidates.size, findings);
+    return {
+        schema_version: '1',
+        command: 'script-pack',
+        pack_id: SECURITY_PATTERN_SCAN_PACK_ID,
+        script_id: SECURITY_PATTERN_SCAN_SCRIPT_ID,
+        script_ref: SECURITY_PATTERN_SCAN_SCRIPT_REF,
+        action: 'scan',
+        status,
+        ok: status === 'passed',
+        mustflow_root: root,
+        policy,
+        input_hash: createInputHash(policy, targets, findings, issues),
+        targets,
+        summary,
+        truncated,
+        findings,
+        issues,
+    };
+}