pqaudit 0.1.0

package/dist/reporter/text.js

@@ -0,0 +1,84 @@
+import chalk from "chalk";
+const SEVERITY_COLORS = {
+    critical: chalk.red.bold,
+    high: chalk.yellow.bold,
+    medium: chalk.yellow,
+    low: chalk.blue,
+    safe: chalk.green,
+};
+const SEVERITY_ICONS = {
+    critical: "!!",
+    high: "!",
+    medium: "~",
+    low: "-",
+    safe: "ok",
+};
+export function formatText(result) {
+    const lines = [];
+    lines.push("");
+    lines.push(chalk.bold("  pqaudit — Post-Quantum Cryptography Readiness Scanner"));
+    lines.push(chalk.dim(`  Scanned: ${result.target}`));
+    lines.push(chalk.dim(`  Date: ${result.timestamp}`));
+    lines.push("");
+    // Summary bar
+    const s = result.summary;
+    if (s.pqcReady) {
+        lines.push(chalk.green.bold("  PQC READY — No critical or high-severity findings"));
+    }
+    else {
+        lines.push(chalk.red.bold("  NOT PQC READY — Quantum-vulnerable cryptography detected"));
+    }
+    lines.push("");
+    // Stats
+    lines.push(`  Files scanned: ${s.filesScanned}  |  Findings: ${s.findingsTotal}`);
+    lines.push(`  ${chalk.red(`Critical: ${s.bySeverity.critical}`)}  ` +
+        `${chalk.yellow(`High: ${s.bySeverity.high}`)}  ` +
+        `${chalk.yellow(`Medium: ${s.bySeverity.medium}`)}  ` +
+        `${chalk.blue(`Low: ${s.bySeverity.low}`)}  ` +
+        `${chalk.green(`Safe: ${s.bySeverity.safe}`)}`);
+    lines.push("");
+    if (result.findings.length === 0) {
+        lines.push("  No findings.");
+        return lines.join("\n");
+    }
+    // Group by severity
+    const grouped = groupBySeverity(result.findings);
+    for (const [severity, findings] of grouped) {
+        if (findings.length === 0)
+            continue;
+        const color = SEVERITY_COLORS[severity];
+        lines.push(color(`  --- ${severity.toUpperCase()} (${findings.length}) ---`));
+        lines.push("");
+        for (const f of findings) {
+            const icon = SEVERITY_ICONS[f.severity];
+            const loc = f.location.line
+                ? `${f.location.file}:${f.location.line}`
+                : f.location.file;
+            lines.push(color(`  [${icon}] ${f.algorithm} — ${f.description}`));
+            lines.push(chalk.dim(`      ${loc}`));
+            if (f.location.snippet) {
+                lines.push(chalk.dim(`      > ${f.location.snippet}`));
+            }
+            if (f.replacement) {
+                lines.push(chalk.cyan(`      Fix: ${f.replacement}`));
+            }
+            lines.push(chalk.dim(`      Confidence: ${Math.round(f.confidence * 100)}% | Effort: ${f.effort} | Via: ${f.detectionMethod}`));
+            lines.push("");
+        }
+    }
+    return lines.join("\n");
+}
+function groupBySeverity(findings) {
+    const groups = {
+        critical: [],
+        high: [],
+        medium: [],
+        low: [],
+        safe: [],
+    };
+    for (const f of findings) {
+        groups[f.severity].push(f);
+    }
+    return Object.entries(groups);
+}
+//# sourceMappingURL=text.js.map

package/dist/reporter/text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../src/reporter/text.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,eAAe,GAA4C;IAC/D,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI;IACxB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;IACvB,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,GAAG,EAAE,KAAK,CAAC,IAAI;IACf,IAAI,EAAE,KAAK,CAAC,KAAK;CAClB,CAAC;AAEF,MAAM,cAAc,GAA6B;IAC/C,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,IAAI;CACX,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,MAAkB;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,cAAc;IACd,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC,CAAC;IACtF,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAC7E,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,QAAQ;IACR,KAAK,CAAC,IAAI,CACR,oBAAoB,CAAC,CAAC,YAAY,kBAAkB,CAAC,CAAC,aAAa,EAAE,CACtE,CAAC;IACF,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,IAAI;QACtD,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI;QACjD,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI;QACrD,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI;QAC7C,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,CACjD,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,oBAAoB;IACpB,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEjD,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;QAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEpC,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI;gBACzB,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACzC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEpB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACxD,CAAC;YACD,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,GAAG,CACP,qBAAqB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,eAAe,EAAE,CACzG,CACF,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CACtB,QAAmB;IAEnB,MAAM,MAAM,GAAgC;QAC1C,QAAQ,EAAE,EAAE;QACZ,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,EAAE;QACV,GAAG,EAAE,EAAE;QACP,IAAI,EAAE,EAAE;KACT,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAA4B,CAAC;AAC3D,CAAC"}

package/dist/scanner/dependency-scanner.d.ts

@@ -0,0 +1,3 @@
+import type { Finding } from "../types.js";
+export declare function scanNpmDependencies(targetDir: string): Finding[];
+//# sourceMappingURL=dependency-scanner.d.ts.map

package/dist/scanner/dependency-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-scanner.d.ts","sourceRoot":"","sources":["../../src/scanner/dependency-scanner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAoG3C,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,EAAE,CAuChE"}

package/dist/scanner/dependency-scanner.js

@@ -0,0 +1,133 @@
+import { readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+/** Known npm packages and their cryptographic implications */
+const KNOWN_CRYPTO_PACKAGES = {
+    // PQC-safe libraries
+    "@noble/post-quantum": {
+        algorithm: "ML-KEM / ML-DSA",
+        severity: "safe",
+        category: "kem",
+        description: "Post-quantum cryptography library (ML-KEM, ML-DSA, SLH-DSA)",
+        replacement: null,
+    },
+    // Quantum-vulnerable signature libraries
+    "@noble/ed25519": {
+        algorithm: "Ed25519",
+        severity: "critical",
+        category: "signature",
+        description: "Ed25519 signatures — vulnerable to Shor's algorithm",
+        replacement: "ML-DSA-65 via @noble/post-quantum",
+    },
+    "@noble/secp256k1": {
+        algorithm: "secp256k1 (ECDSA)",
+        severity: "critical",
+        category: "signature",
+        description: "secp256k1 ECDSA — vulnerable to Shor's algorithm",
+        replacement: "ML-DSA-65 via @noble/post-quantum",
+    },
+    "tweetnacl": {
+        algorithm: "Ed25519 / X25519",
+        severity: "critical",
+        category: "signature",
+        description: "NaCl crypto (Ed25519 signatures, X25519 key exchange) — both quantum-vulnerable",
+        replacement: "ML-DSA-65 + ML-KEM-768 via @noble/post-quantum",
+    },
+    "elliptic": {
+        algorithm: "ECDSA / ECDH",
+        severity: "critical",
+        category: "signature",
+        description: "Elliptic curve library — all ECC is quantum-vulnerable",
+        replacement: "ML-DSA-65 + ML-KEM-768",
+    },
+    "node-rsa": {
+        algorithm: "RSA",
+        severity: "critical",
+        category: "kem",
+        description: "RSA encryption/signatures — vulnerable to Shor's algorithm",
+        replacement: "ML-KEM-768 + ML-DSA-65",
+    },
+    "jsonwebtoken": {
+        algorithm: "RS256/ES256 (likely)",
+        severity: "critical",
+        category: "signature",
+        description: "JWT library — likely uses RSA or ECDSA for signing",
+        replacement: "Consider ML-DSA-based JWT signing when IETF PQC JWT standards emerge",
+    },
+    "jose": {
+        algorithm: "RS256/ES256 (configurable)",
+        severity: "critical",
+        category: "signature",
+        description: "JOSE/JWT library — supports RSA and ECDSA signing",
+        replacement: "Monitor IETF PQC JWT standards progress",
+    },
+    // Solana/blockchain (quantum-vulnerable by design)
+    "@solana/web3.js": {
+        algorithm: "Ed25519 (Solana)",
+        severity: "critical",
+        category: "signature",
+        description: "Solana Web3 — all Solana keys are Ed25519, quantum-vulnerable",
+        replacement: "Blocked by Solana ecosystem PQC migration. Monitor Solana PQC proposals.",
+    },
+    "ethers": {
+        algorithm: "secp256k1 (Ethereum)",
+        severity: "critical",
+        category: "signature",
+        description: "Ethers.js — Ethereum uses secp256k1 ECDSA, quantum-vulnerable",
+        replacement: "Blocked by Ethereum PQC migration. Monitor EIP proposals.",
+    },
+    "web3": {
+        algorithm: "secp256k1 (Ethereum)",
+        severity: "critical",
+        category: "signature",
+        description: "Web3.js — Ethereum uses secp256k1 ECDSA, quantum-vulnerable",
+        replacement: "Blocked by Ethereum PQC migration. Monitor EIP proposals.",
+    },
+    // Symmetric / safe
+    "libsodium-wrappers": {
+        algorithm: "XChaCha20-Poly1305 / Ed25519",
+        severity: "critical",
+        category: "signature",
+        description: "libsodium — symmetric crypto is safe but Ed25519/X25519 are quantum-vulnerable",
+        replacement: "Audit usage: keep symmetric ops, migrate asymmetric to PQC",
+    },
+};
+export function scanNpmDependencies(targetDir) {
+    const packageJsonPath = join(targetDir, "package.json");
+    if (!existsSync(packageJsonPath))
+        return [];
+    let pkg;
+    try {
+        pkg = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+    }
+    catch {
+        return [];
+    }
+    const findings = [];
+    const allDeps = {
+        ...pkg.dependencies,
+        ...pkg.devDependencies,
+    };
+    for (const [name, version] of Object.entries(allDeps)) {
+        const known = KNOWN_CRYPTO_PACKAGES[name];
+        if (!known)
+            continue;
+        findings.push({
+            ruleId: `DEP_${name.replace(/[^a-zA-Z0-9]/g, "_").toUpperCase()}`,
+            description: known.description,
+            severity: known.severity,
+            category: known.category,
+            algorithm: known.algorithm,
+            replacement: known.replacement,
+            effort: "complex",
+            location: {
+                file: "package.json",
+                snippet: `"${name}": "${version}"`,
+            },
+            detectionMethod: "dependency",
+            confidence: 0.95,
+        });
+    }
+    return findings;
+}
+// TODO: Add scanCargoDependencies, scanGradleDependencies, scanPipDependencies
+//# sourceMappingURL=dependency-scanner.js.map

package/dist/scanner/dependency-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-scanner.js","sourceRoot":"","sources":["../../src/scanner/dependency-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,8DAA8D;AAC9D,MAAM,qBAAqB,GAGvB;IACF,qBAAqB;IACrB,qBAAqB,EAAE;QACrB,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,6DAA6D;QAC1E,WAAW,EAAE,IAAI;KAClB;IAED,yCAAyC;IACzC,gBAAgB,EAAE;QAChB,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,qDAAqD;QAClE,WAAW,EAAE,mCAAmC;KACjD;IACD,kBAAkB,EAAE;QAClB,SAAS,EAAE,mBAAmB;QAC9B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,kDAAkD;QAC/D,WAAW,EAAE,mCAAmC;KACjD;IACD,WAAW,EAAE;QACX,SAAS,EAAE,kBAAkB;QAC7B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,iFAAiF;QAC9F,WAAW,EAAE,gDAAgD;KAC9D;IACD,UAAU,EAAE;QACV,SAAS,EAAE,cAAc;QACzB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE,wBAAwB;KACtC;IACD,UAAU,EAAE;QACV,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,4DAA4D;QACzE,WAAW,EAAE,wBAAwB;KACtC;IACD,cAAc,EAAE;QACd,SAAS,EAAE,sBAAsB;QACjC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE,sEAAsE;KACpF;IACD,MAAM,EAAE;QACN,SAAS,EAAE,4BAA4B;QACvC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,mDAAmD;QAChE,WAAW,EAAE,yCAAyC;KACvD;IAED,mDAAmD;IACnD,iBAAiB,EAAE;QACjB,SAAS,EAAE,kBAAkB;QAC7B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,+DAA+D;QAC5E,WAAW,EAAE,0EAA0E;KACxF;IACD,QAAQ,EAAE;QACR,SAAS,EAAE,sBAAsB;QACjC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,+DAA+D;QAC5E,WAAW,EAAE,2DAA2D;KACzE;IACD,MAAM,EAAE;QACN,SAAS,EAAE,sBAAsB;QACjC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,6DAA6D;QAC1E,WAAW,EAAE,2DAA2D;KACzE;IAED,mBAAmB;IACnB,oBAAoB,EAAE;QACpB,SAAS,EAAE,8BAA8B;QACzC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,gFAAgF;QAC7F,WAAW,EAAE,4DAA4D;KAC1E;CACF,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,EAAE,CAAC;IAE5C,IAAI,GAAwF,CAAC;IAC7F,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG;QACd,GAAG,GAAG,CAAC,YAAY;QACnB,GAAG,GAAG,CAAC,eAAe;KACvB,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;YACjE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE;gBACR,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,GAAG;aACnC;YACD,eAAe,EAAE,YAAY;YAC7B,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E"}

package/dist/scanner/engine.d.ts

@@ -0,0 +1,3 @@
+import type { ScanConfig, ScanResult } from "../types.js";
+export declare function scan(config: ScanConfig): Promise<ScanResult>;
+//# sourceMappingURL=engine.d.ts.map

package/dist/scanner/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/scanner/engine.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGV,UAAU,EACV,UAAU,EAIX,MAAM,aAAa,CAAC;AA0BrB,wBAAsB,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAmElE"}

package/dist/scanner/engine.js

@@ -0,0 +1,109 @@
+import { resolve, relative } from "node:path";
+import { glob } from "glob";
+import { loadRules } from "./rules.js";
+import { scanFile } from "./file-scanner.js";
+import { scanNpmDependencies } from "./dependency-scanner.js";
+const DEFAULT_EXCLUDE = [
+    "**/node_modules/**",
+    "**/dist/**",
+    "**/build/**",
+    "**/.git/**",
+    "**/vendor/**",
+    "**/target/**",
+    "**/__pycache__/**",
+    "**/.venv/**",
+    "**/coverage/**",
+    "**/*.min.js",
+    "**/*.map",
+    "**/package-lock.json",
+    "**/yarn.lock",
+    "**/pnpm-lock.yaml",
+    "**/Cargo.lock",
+];
+const SOURCE_EXTENSIONS = "**/*.{js,mjs,cjs,jsx,ts,tsx,mts,cts,py,go,rs,java,kt,kts,cs,c,h,cpp,cc,hpp,swift,rb,php,toml,yaml,yml,json,xml,conf,cfg,ini,env,pem,crt,cer}";
+export async function scan(config) {
+    const target = resolve(config.target);
+    const rules = loadRules(config.rulesDir);
+    // Discover files
+    const excludePatterns = [...DEFAULT_EXCLUDE, ...(config.exclude ?? [])];
+    const includePatterns = config.include ?? [SOURCE_EXTENSIONS];
+    const files = [];
+    for (const pattern of includePatterns) {
+        const matched = await glob(pattern, {
+            cwd: target,
+            absolute: true,
+            ignore: excludePatterns,
+            nodir: true,
+        });
+        files.push(...matched);
+    }
+    // Deduplicate
+    const uniqueFiles = [...new Set(files)];
+    // Scan files
+    const allFindings = [];
+    for (const file of uniqueFiles) {
+        const rel = relative(target, file);
+        const fileFindings = scanFile(file, rel, rules);
+        allFindings.push(...fileFindings);
+    }
+    // Scan dependencies
+    if (config.scanDependencies) {
+        const depFindings = scanNpmDependencies(target);
+        allFindings.push(...depFindings);
+    }
+    // Filter by minimum severity
+    const severityOrder = {
+        critical: 0,
+        high: 1,
+        medium: 2,
+        low: 3,
+        safe: 4,
+    };
+    const minLevel = severityOrder[config.minSeverity];
+    const filtered = allFindings.filter((f) => severityOrder[f.severity] <= minLevel);
+    // Sort: critical first, then by file
+    filtered.sort((a, b) => {
+        const sevDiff = severityOrder[a.severity] - severityOrder[b.severity];
+        if (sevDiff !== 0)
+            return sevDiff;
+        return a.location.file.localeCompare(b.location.file);
+    });
+    // Build summary
+    const summary = buildSummary(filtered, uniqueFiles.length);
+    return {
+        timestamp: new Date().toISOString(),
+        target: config.target,
+        findings: filtered,
+        summary,
+    };
+}
+function buildSummary(findings, filesScanned) {
+    const bySeverity = {
+        critical: 0,
+        high: 0,
+        medium: 0,
+        low: 0,
+        safe: 0,
+    };
+    const byCategory = {
+        kem: 0,
+        signature: 0,
+        hash: 0,
+        symmetric: 0,
+        protocol: 0,
+        kdf: 0,
+    };
+    for (const f of findings) {
+        bySeverity[f.severity]++;
+        byCategory[f.category]++;
+    }
+    const pqcReady = bySeverity.critical === 0 && bySeverity.high === 0;
+    return {
+        filesScanned,
+        findingsTotal: findings.length,
+        bySeverity,
+        byCategory,
+        pqcReady,
+    };
+}
+//# sourceMappingURL=engine.js.map

package/dist/scanner/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/scanner/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAU5B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,eAAe,GAAG;IACtB,oBAAoB;IACpB,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,UAAU;IACV,sBAAsB;IACtB,cAAc;IACd,mBAAmB;IACnB,eAAe;CAChB,CAAC;AAEF,MAAM,iBAAiB,GACrB,8IAA8I,CAAC;AAEjJ,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,MAAkB;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEzC,iBAAiB;IACjB,MAAM,eAAe,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;YAClC,GAAG,EAAE,MAAM;YACX,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,eAAe;YACvB,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,cAAc;IACd,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAExC,aAAa;IACb,MAAM,WAAW,GAAc,EAAE,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAChD,WAAW,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,oBAAoB;IACpB,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAChD,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;IACnC,CAAC;IAED,6BAA6B;IAC7B,MAAM,aAAa,GAA6B;QAC9C,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAC7C,CAAC;IAEF,qCAAqC;IACrC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QAClC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,gBAAgB;IAChB,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAE3D,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,QAAQ;QAClB,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAmB,EAAE,YAAoB;IAC7D,MAAM,UAAU,GAA6B;QAC3C,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,UAAU,GAAmC;QACjD,GAAG,EAAE,CAAC;QACN,SAAS,EAAE,CAAC;QACZ,IAAI,EAAE,CAAC;QACP,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,GAAG,EAAE,CAAC;KACP,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,QAAQ,GACZ,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC;IAErD,OAAO;QACL,YAAY;QACZ,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,UAAU;QACV,UAAU;QACV,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/scanner/file-scanner.d.ts

@@ -0,0 +1,5 @@
+import type { DetectionRule, Finding } from "../types.js";
+export declare function getLanguage(filePath: string): string | null;
+export declare function isBinary(filePath: string): boolean;
+export declare function scanFile(filePath: string, relativePath: string, rules: DetectionRule[]): Finding[];
+//# sourceMappingURL=file-scanner.d.ts.map

package/dist/scanner/file-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-scanner.d.ts","sourceRoot":"","sources":["../../src/scanner/file-scanner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EACb,OAAO,EAGR,MAAM,aAAa,CAAC;AAqErB,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG3D;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGlD;AAED,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,aAAa,EAAE,GACrB,OAAO,EAAE,CA4EX"}

package/dist/scanner/file-scanner.js

@@ -0,0 +1,163 @@
+import { readFileSync } from "node:fs";
+import { compilePatterns } from "./rules.js";
+/** File extensions to language mapping */
+const LANG_MAP = {
+    ".js": "javascript",
+    ".mjs": "javascript",
+    ".cjs": "javascript",
+    ".jsx": "javascript",
+    ".ts": "typescript",
+    ".tsx": "typescript",
+    ".mts": "typescript",
+    ".cts": "typescript",
+    ".py": "python",
+    ".go": "go",
+    ".rs": "rust",
+    ".java": "java",
+    ".kt": "kotlin",
+    ".kts": "kotlin",
+    ".cs": "csharp",
+    ".c": "c",
+    ".h": "c",
+    ".cpp": "cpp",
+    ".cc": "cpp",
+    ".hpp": "cpp",
+    ".swift": "swift",
+    ".rb": "ruby",
+    ".php": "php",
+    ".toml": "config",
+    ".yaml": "config",
+    ".yml": "config",
+    ".json": "config",
+    ".xml": "config",
+    ".conf": "config",
+    ".cfg": "config",
+    ".ini": "config",
+    ".env": "config",
+    ".pem": "certificate",
+    ".crt": "certificate",
+    ".cer": "certificate",
+};
+const BINARY_EXTENSIONS = new Set([
+    ".png",
+    ".jpg",
+    ".jpeg",
+    ".gif",
+    ".ico",
+    ".woff",
+    ".woff2",
+    ".ttf",
+    ".eot",
+    ".zip",
+    ".gz",
+    ".tar",
+    ".jar",
+    ".class",
+    ".so",
+    ".dylib",
+    ".dll",
+    ".exe",
+    ".o",
+    ".a",
+    ".wasm",
+    ".mp3",
+    ".mp4",
+    ".pdf",
+]);
+export function getLanguage(filePath) {
+    const ext = filePath.slice(filePath.lastIndexOf(".")).toLowerCase();
+    return LANG_MAP[ext] ?? null;
+}
+export function isBinary(filePath) {
+    const ext = filePath.slice(filePath.lastIndexOf(".")).toLowerCase();
+    return BINARY_EXTENSIONS.has(ext);
+}
+export function scanFile(filePath, relativePath, rules) {
+    if (isBinary(filePath))
+        return [];
+    const language = getLanguage(filePath);
+    const compiledRules = compilePatterns(rules);
+    const findings = [];
+    let content;
+    try {
+        content = readFileSync(filePath, "utf-8");
+    }
+    catch {
+        return [];
+    }
+    // Skip very large files (likely generated/vendor)
+    if (content.length > 1_000_000)
+        return [];
+    const lines = content.split("\n");
+    for (const [rule, regexes] of compiledRules) {
+        // Skip rules that don't apply to this language
+        if (rule.languages.length > 0 &&
+            language &&
+            !rule.languages.includes(language)) {
+            continue;
+        }
+        for (let lineIdx = 0; lineIdx < lines.length; lineIdx++) {
+            const line = lines[lineIdx];
+            for (const regex of regexes) {
+                // Reset regex state (global flag)
+                regex.lastIndex = 0;
+                const match = regex.exec(line);
+                if (match) {
+                    // Avoid duplicate findings for same rule on same line
+                    const isDupe = findings.some((f) => f.ruleId === rule.id &&
+                        f.location.file === relativePath &&
+                        f.location.line === lineIdx + 1);
+                    if (!isDupe) {
+                        const location = {
+                            file: relativePath,
+                            line: lineIdx + 1,
+                            column: match.index + 1,
+                            snippet: line.trim().slice(0, 120),
+                        };
+                        findings.push({
+                            ruleId: rule.id,
+                            description: rule.description,
+                            severity: rule.severity,
+                            category: rule.category,
+                            algorithm: rule.algorithm,
+                            replacement: rule.replacement,
+                            effort: rule.effort,
+                            location,
+                            detectionMethod: "regex",
+                            confidence: computeConfidence(rule, line, language),
+                        });
+                    }
+                    // Don't check more patterns from this rule on this line
+                    break;
+                }
+            }
+        }
+    }
+    return findings;
+}
+/** Compute confidence based on context clues */
+function computeConfidence(rule, line, language) {
+    let confidence = 0.7; // Base confidence for regex match
+    // Higher confidence if it looks like a code import
+    if (/(?:import|require|from|include|use)\b/.test(line)) {
+        confidence = 0.9;
+    }
+    // Higher confidence if it's a function call with the algorithm
+    if (/\(.*['"].*['"]\)/.test(line)) {
+        confidence = 0.85;
+    }
+    // Lower confidence in comments
+    if (/^\s*(?:\/\/|#|\/\*|\*|--|;)/.test(line)) {
+        confidence = 0.3;
+    }
+    // Lower confidence in strings that might be documentation
+    if (language === null) {
+        confidence *= 0.8;
+    }
+    // Safe findings get high confidence (we want to track them)
+    if (rule.severity === "safe") {
+        confidence = Math.max(confidence, 0.8);
+    }
+    return Math.round(confidence * 100) / 100;
+}
+//# sourceMappingURL=file-scanner.js.map

package/dist/scanner/file-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-scanner.js","sourceRoot":"","sources":["../../src/scanner/file-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAOvC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,0CAA0C;AAC1C,MAAM,QAAQ,GAA2B;IACvC,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,MAAM;IACb,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;CACtB,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,MAAM;IACN,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,QAAgB,EAChB,YAAoB,EACpB,KAAsB;IAEtB,IAAI,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,kDAAkD;IAClD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,EAAE,CAAC;IAE1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,aAAa,EAAE,CAAC;QAC5C,+CAA+C;QAC/C,IACE,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YACzB,QAAQ;YACR,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAClC,CAAC;YACD,SAAS;QACX,CAAC;QAED,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,kCAAkC;gBAClC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBACpB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAE/B,IAAI,KAAK,EAAE,CAAC;oBACV,sDAAsD;oBACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE;wBACpB,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;wBAChC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,GAAG,CAAC,CAClC,CAAC;oBAEF,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,MAAM,QAAQ,GAAoB;4BAChC,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,OAAO,GAAG,CAAC;4BACjB,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;4BACvB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;yBACnC,CAAC;wBAEF,QAAQ,CAAC,IAAI,CAAC;4BACZ,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,QAAQ;4BACR,eAAe,EAAE,OAAO;4BACxB,UAAU,EAAE,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;yBACpD,CAAC,CAAC;oBACL,CAAC;oBAED,wDAAwD;oBACxD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gDAAgD;AAChD,SAAS,iBAAiB,CACxB,IAAmB,EACnB,IAAY,EACZ,QAAuB;IAEvB,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC,kCAAkC;IAExD,mDAAmD;IACnD,IAAI,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,UAAU,GAAG,GAAG,CAAC;IACnB,CAAC;IAED,+DAA+D;IAC/D,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,+BAA+B;IAC/B,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,UAAU,GAAG,GAAG,CAAC;IACnB,CAAC;IAED,0DAA0D;IAC1D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,UAAU,IAAI,GAAG,CAAC;IACpB,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC7B,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AAC5C,CAAC"}

package/dist/scanner/rules.d.ts

@@ -0,0 +1,4 @@
+import type { DetectionRule } from "../types.js";
+export declare function loadRules(rulesPath?: string): DetectionRule[];
+export declare function compilePatterns(rules: DetectionRule[]): Map<DetectionRule, RegExp[]>;
+//# sourceMappingURL=rules.d.ts.map

package/dist/scanner/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/scanner/rules.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAOjD,wBAAgB,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,aAAa,EAAE,CAa7D;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,aAAa,EAAE,GACrB,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAS9B"}

package/dist/scanner/rules.js

@@ -0,0 +1,25 @@
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { parse as parseYaml } from "yaml";
+const DEFAULT_RULES_PATH = resolve(import.meta.dirname, "../../rules/crypto-patterns.yaml");
+export function loadRules(rulesPath) {
+    const path = rulesPath ?? DEFAULT_RULES_PATH;
+    const raw = readFileSync(path, "utf-8");
+    const parsed = parseYaml(raw);
+    // Validate and compile patterns
+    for (const rule of parsed) {
+        if (!rule.id || !rule.patterns?.length) {
+            throw new Error(`Invalid rule: missing id or patterns in ${path}`);
+        }
+    }
+    return parsed;
+}
+export function compilePatterns(rules) {
+    const compiled = new Map();
+    for (const rule of rules) {
+        const regexes = rule.patterns.map((p) => new RegExp(p, "gi"));
+        compiled.set(rule, regexes);
+    }
+    return compiled;
+}
+//# sourceMappingURL=rules.js.map

package/dist/scanner/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/scanner/rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,kBAAkB,GAAG,OAAO,CAChC,MAAM,CAAC,IAAI,CAAC,OAAO,EACnB,kCAAkC,CACnC,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,SAAkB;IAC1C,MAAM,IAAI,GAAG,SAAS,IAAI,kBAAkB,CAAC;IAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAoB,CAAC;IAEjD,gCAAgC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAsB;IAEtB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}