sentinel-verify 1.0.0

package/dist/verify/hallucination.js

@@ -0,0 +1,299 @@
+// Purpose: core logic for check_hallucination — flags references to packages, files, and symbols that don't exist, combining static checks with model judgment.
+import { createHash } from "node:crypto";
+import { readFileSync, existsSync } from "node:fs";
+import { builtinModules } from "node:module";
+import { dirname, join, normalize } from "node:path";
+import { z } from "zod/v4";
+import { resolveProvider } from "../providers/index.js";
+import { openDatabase, insertVerification } from "../storage/db.js";
+import { parseDiff } from "./diff.js";
+import { dropDuplicateModelIssues } from "./combine.js";
+import { loadSentinelrc, configPromptBlocks } from "../config/sentinelrc.js";
+import { storeEvidence } from "./evidence.js";
+export const HALLUCINATION_TOOL_NAME = "check_hallucination";
+export const HALLUCINATION_VERDICTS = ["no_issues", "possible_hallucination"];
+// ---------------------------------------------------------------------------
+// Static evidence check (JavaScript/TypeScript files)
+// ---------------------------------------------------------------------------
+const JS_FILE = /\.(ts|tsx|js|jsx|mjs|cjs)$/;
+const NODE_BUILTINS = new Set(builtinModules);
+const RESOLVE_SUFFIXES = ["", ".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", "/index.ts", "/index.js"];
+/** "@scope/pkg/sub/path" -> "@scope/pkg"; "pkg/sub" -> "pkg". */
+function packageNameOf(specifier) {
+    const parts = specifier.split("/");
+    return specifier.startsWith("@") ? parts.slice(0, 2).join("/") : parts[0];
+}
+/** Reads declared dependency names from package.json; null when there is no manifest to check against. */
+function loadDeclaredDeps(projectDir) {
+    let pkg;
+    try {
+        pkg = JSON.parse(readFileSync(join(projectDir, "package.json"), "utf8"));
+    }
+    catch {
+        return null;
+    }
+    const deps = new Set();
+    for (const key of ["dependencies", "devDependencies", "peerDependencies", "optionalDependencies"]) {
+        for (const name of Object.keys(pkg[key] ?? {}))
+            deps.add(name);
+    }
+    return deps;
+}
+function extractImports(lineText) {
+    const found = [];
+    const seen = new Set();
+    // Named imports: import { a, b as c } from "spec"  (also: import Default, { a } from "spec")
+    const namedRe = /import\s+(?:type\s+)?(?:[\w$]+\s*,\s*)?\{([^}]+)\}\s*from\s*["']([^"']+)["']/g;
+    for (const m of lineText.matchAll(namedRe)) {
+        const names = m[1]
+            .split(",")
+            .map((part) => part.replace(/\btype\b/, "").trim().split(/\s+as\s+/)[0].trim())
+            .filter((n) => n.length > 0);
+        found.push({ specifier: m[2], namedImports: names });
+        seen.add(m[2]);
+    }
+    // Every other import shape: bare specifier only.
+    const specRe = /(?:import|export)\s[^"';]*?from\s*["']([^"']+)["']|import\s*\(\s*["']([^"']+)["']\s*\)|import\s+["']([^"']+)["']|require\s*\(\s*["']([^"']+)["']\s*\)/g;
+    for (const m of lineText.matchAll(specRe)) {
+        const specifier = m[1] ?? m[2] ?? m[3] ?? m[4];
+        if (specifier && !seen.has(specifier)) {
+            found.push({ specifier, namedImports: [] });
+            seen.add(specifier);
+        }
+    }
+    return found;
+}
+/** Resolves a relative import to an existing file on disk, trying TypeScript-style suffixes. */
+function resolveRelativeImport(projectDir, fromFile, specifier) {
+    const base = normalize(join(dirname(fromFile), specifier));
+    const candidates = [base];
+    // NodeNext style: "./foo.js" in source usually means "./foo.ts" on disk.
+    if (/\.(js|mjs|cjs)$/.test(base)) {
+        candidates.push(base.replace(/\.(js|mjs|cjs)$/, ".ts"), base.replace(/\.(js|mjs|cjs)$/, ".tsx"));
+    }
+    for (const candidate of candidates) {
+        for (const suffix of RESOLVE_SUFFIXES) {
+            if (existsSync(join(projectDir, candidate + suffix)))
+                return candidate + suffix;
+        }
+    }
+    return null;
+}
+/** Checks whether a file exports a given name (basic textual check, not type-checking). */
+function fileExportsSymbol(filePath, name) {
+    let source;
+    try {
+        source = readFileSync(filePath, "utf8");
+    }
+    catch {
+        return true; // unreadable — don't guess, don't flag
+    }
+    // Barrel re-exports make textual verification unreliable — assume the symbol is fine.
+    if (/export\s+\*\s+from/.test(source))
+        return true;
+    const esc = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const declaration = new RegExp(`export\\s+(?:declare\\s+)?(?:default\\s+)?(?:abstract\\s+)?(?:async\\s+)?` +
+        `(?:function\\*?|const|let|var|class|type|interface|enum)\\s+${esc}\\b`);
+    const exportList = new RegExp(`export\\s*(?:type\\s*)?\\{[^}]*\\b${esc}\\b[^}]*\\}`);
+    return declaration.test(source) || exportList.test(source);
+}
+/** Dependency names added inside package.json hunks of this same diff (change may not be applied yet). */
+function depsAddedInDiff(added) {
+    const names = new Set();
+    for (const line of added) {
+        if (!line.file.endsWith("package.json"))
+            continue;
+        const m = /^\s*"((?:@[\w.-]+\/)?[\w.-]+)":\s*"/.exec(line.text);
+        if (m)
+            names.add(m[1]);
+    }
+    return names;
+}
+/**
+ * The local evidence check: verifies that imported packages are declared,
+ * imported files exist, and imported symbols are actually exported.
+ */
+export function staticHallucinationCheck(projectDir, diff) {
+    const { added, touchedFiles } = parseDiff(diff);
+    const declaredDeps = loadDeclaredDeps(projectDir);
+    const diffDeps = depsAddedInDiff(added);
+    const issues = [];
+    for (const line of added) {
+        if (!JS_FILE.test(line.file))
+            continue;
+        for (const { specifier, namedImports } of extractImports(line.text)) {
+            const location = `${line.file}:${line.lineNo} — ${line.text.trim()}`;
+            if (specifier.startsWith("node:") || NODE_BUILTINS.has(packageNameOf(specifier))) {
+                continue; // Node built-in
+            }
+            if (specifier.startsWith(".")) {
+                // Relative import: the file must exist (or be created in this same diff).
+                const resolved = resolveRelativeImport(projectDir, line.file, specifier);
+                if (resolved === null) {
+                    const inDiff = [...touchedFiles].some((f) => normalize(f).startsWith(normalize(join(dirname(line.file), specifier))));
+                    if (!inDiff) {
+                        issues.push({
+                            location,
+                            reason: `Imported file "${specifier}" does not exist in the project.`,
+                            source: "static",
+                        });
+                    }
+                    continue;
+                }
+                // File exists: verify each named import is actually exported.
+                for (const name of namedImports) {
+                    if (!fileExportsSymbol(join(projectDir, resolved), name)) {
+                        issues.push({
+                            location,
+                            reason: `"${name}" is imported from "${specifier}", but ${resolved} does not export it.`,
+                            source: "static",
+                        });
+                    }
+                }
+            }
+            else {
+                // Package import: must be declared in package.json, installed, or added in this diff.
+                if (declaredDeps === null)
+                    continue; // no manifest — nothing to prove against
+                const pkgName = packageNameOf(specifier);
+                const declared = declaredDeps.has(pkgName) ||
+                    diffDeps.has(pkgName) ||
+                    existsSync(join(projectDir, "node_modules", pkgName));
+                if (!declared) {
+                    issues.push({
+                        location,
+                        reason: `Package "${pkgName}" is imported but is not in package.json, node_modules, or this diff.`,
+                        source: "static",
+                    });
+                }
+            }
+        }
+    }
+    return issues;
+}
+// ---------------------------------------------------------------------------
+// Model judgment
+// ---------------------------------------------------------------------------
+const modelIssuesSchema = z.object({
+    issues: z.array(z.object({
+        location: z.string().describe("File and line, or the offending code snippet from the diff."),
+        reason: z.string().describe("Why this looks hallucinated, in one or two sentences."),
+    })),
+});
+// Deliberately short and neutral: long, example-heavy prompts prime small
+// local models to invent findings and loop under schema constraints.
+const SYSTEM_PROMPT = `You review a code diff for hallucinated references to EXTERNAL code: imports of packages that do not exist, or calls to library methods/APIs that the real library does not have.
+
+Never flag:
+- Functions, classes, or variables that the diff itself defines — that is the developer's own code.
+- Node.js built-in modules (fs, path, crypto, ...) and their real APIs.
+- Packages listed in the project dependencies, used according to their real API.
+- Symbols that may be defined elsewhere in this project.
+- Style or security concerns.
+
+Most diffs are clean; an empty issues list is a normal answer. Only report an issue when you are certain the package or API genuinely does not exist.`;
+function buildPrompt(diff, declaredDeps) {
+    // Note: overlap with the static findings is fine — duplicates are removed
+    // deterministically afterwards. Keeping this prompt short matters: long,
+    // rule-heavy prompts make small local models loop under schema constraints.
+    const depsText = declaredDeps
+        ? [...declaredDeps].sort().join(", ") || "(none declared)"
+        : "(no package.json found)";
+    return `<project_dependencies>
+${depsText}
+</project_dependencies>
+
+<code_diff>
+${diff}
+</code_diff>
+
+List any hallucinated APIs, methods, packages, or usage patterns in this diff (empty list if none).`;
+}
+/** Names of functions/classes/etc. that the diff itself defines — never hallucinations. */
+function symbolsDefinedInDiff(added) {
+    const names = new Set();
+    const declRe = /(?:function\*?|class|const|let|var|interface|type|enum)\s+([A-Za-z_$][\w$]*)/g;
+    for (const line of added) {
+        for (const m of line.text.matchAll(declRe))
+            names.add(m[1]);
+    }
+    return names;
+}
+/**
+ * Agent-native (MCP) mode: runs only the deterministic filesystem checks —
+ * no model call — and returns the evidence for the calling agent to judge.
+ */
+export function gatherHallucinationEvidence(projectDir, diff) {
+    if (diff.trim().length === 0) {
+        throw new Error("Diff is empty — there is no code change to check.");
+    }
+    const config = loadSentinelrc(projectDir);
+    const staticFindings = staticHallucinationCheck(projectDir, diff);
+    const deps = loadDeclaredDeps(projectDir);
+    storeEvidence(projectDir, HALLUCINATION_TOOL_NAME, diff, staticFindings);
+    return {
+        mode: "evidence",
+        instruction: "The staticFindings below are verified against the actual filesystem — treat them as facts, not opinions. " +
+            "Additionally judge the diff yourself for hallucinations the filesystem cannot prove: " +
+            "made-up methods on real libraries, invented API signatures or parameters, or usage that does not match " +
+            "the real library's API (declaredDependencies lists what the project actually uses). " +
+            "Combine both into your conclusion. Honor projectRules if present.",
+        projectContext: config?.context ?? "",
+        projectRules: config?.rules ?? [],
+        staticFindings,
+        declaredDependencies: deps ? [...deps].sort() : null,
+    };
+}
+/**
+ * Standalone (CLI) mode: static evidence first, then model judgment,
+ * combined into one verdict. The result is stored locally.
+ */
+export async function checkHallucination(projectDir, diff) {
+    if (diff.trim().length === 0) {
+        throw new Error("Diff is empty — there is no code change to check.");
+    }
+    const staticIssues = staticHallucinationCheck(projectDir, diff);
+    const config = loadSentinelrc(projectDir);
+    const provider = resolveProvider();
+    const modelAnswer = await provider.completeStructured({
+        system: SYSTEM_PROMPT,
+        prompt: configPromptBlocks(config) + buildPrompt(diff, loadDeclaredDeps(projectDir)),
+        schema: modelIssuesSchema,
+        schemaName: "hallucination_issues",
+    });
+    // The model often re-reports what the static check already proved — remove
+    // duplicates deterministically. Tiny local models also reliably mistake
+    // symbols the diff DEFINES for hallucinated references, despite prompt
+    // instructions — filter those out too (matching only quoted mentions, so
+    // common words in prose don't trigger the filter).
+    const definedSymbols = symbolsDefinedInDiff(parseDiff(diff).added);
+    const modelIssues = dropDuplicateModelIssues(staticIssues, modelAnswer.issues.map((issue) => ({ ...issue, source: "model" }))).filter((issue) => {
+        const text = `${issue.location} ${issue.reason}`;
+        return ![...definedSymbols].some((name) => {
+            const esc = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+            return new RegExp(`[\`'"]${esc}[\`'"]`).test(text);
+        });
+    });
+    const issues = [...staticIssues, ...modelIssues];
+    const verdict = issues.length > 0 ? "possible_hallucination" : "no_issues";
+    const db = openDatabase(projectDir);
+    try {
+        insertVerification(db, {
+            tool: HALLUCINATION_TOOL_NAME,
+            task: "",
+            diffHash: createHash("sha256").update(diff).digest("hex"),
+            verdict,
+            reason: issues.length === 0
+                ? "No hallucination indicators found."
+                : `${issues.length} possible hallucination(s) found.`,
+            details: JSON.stringify(issues),
+            provider: provider.name,
+            model: provider.model,
+        });
+    }
+    finally {
+        db.close();
+    }
+    return { verdict, issues, provider: provider.name, model: provider.model };
+}
+//# sourceMappingURL=hallucination.js.map

package/dist/verify/hallucination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hallucination.js","sourceRoot":"","sources":["../../src/verify/hallucination.ts"],"names":[],"mappings":"AAAA,gKAAgK;AAEhK,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAkB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAA0B,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAqB,MAAM,eAAe,CAAC;AAEjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAE7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,WAAW,EAAE,wBAAwB,CAAU,CAAC;AAYvF,8EAA8E;AAC9E,sDAAsD;AACtD,8EAA8E;AAE9E,MAAM,OAAO,GAAG,4BAA4B,CAAC;AAC7C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;AAC9C,MAAM,gBAAgB,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAEtG,iEAAiE;AACjE,SAAS,aAAa,CAAC,SAAiB;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,0GAA0G;AAC1G,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,IAAI,GAAuD,CAAC;IAC5D,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAClG,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,6FAA6F;IAC7F,MAAM,OAAO,GAAG,+EAA+E,CAAC;IAChG,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;aACf,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAC9E,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,iDAAiD;IACjD,MAAM,MAAM,GACV,wJAAwJ,CAAC;IAC3J,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gGAAgG;AAChG,SAAS,qBAAqB,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAiB;IACpF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,yEAAyE;IACzE,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACtC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;gBAAE,OAAO,SAAS,GAAG,MAAM,CAAC;QAClF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,SAAS,iBAAiB,CAAC,QAAgB,EAAE,IAAY;IACvD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,uCAAuC;IACtD,CAAC;IACD,sFAAsF;IACtF,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,IAAI,MAAM,CAC5B,2EAA2E;QACzE,+DAA+D,GAAG,KAAK,CAC1E,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,qCAAqC,GAAG,aAAa,CAAC,CAAC;IACrF,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,0GAA0G;AAC1G,SAAS,eAAe,CAAC,KAAkB;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,SAAS;QAClD,MAAM,CAAC,GAAG,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,IAAY;IACvE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,MAAM,GAAyB,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAEvC,KAAK,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAErE,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBACjF,SAAS,CAAC,gBAAgB;YAC5B,CAAC;YAED,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,0EAA0E;gBAC1E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACzE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtB,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1C,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CACxE,CAAC;oBACF,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,MAAM,CAAC,IAAI,CAAC;4BACV,QAAQ;4BACR,MAAM,EAAE,kBAAkB,SAAS,kCAAkC;4BACrE,MAAM,EAAE,QAAQ;yBACjB,CAAC,CAAC;oBACL,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,8DAA8D;gBAC9D,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;oBAChC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;wBACzD,MAAM,CAAC,IAAI,CAAC;4BACV,QAAQ;4BACR,MAAM,EAAE,IAAI,IAAI,uBAAuB,SAAS,UAAU,QAAQ,sBAAsB;4BACxF,MAAM,EAAE,QAAQ;yBACjB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,sFAAsF;gBACtF,IAAI,YAAY,KAAK,IAAI;oBAAE,SAAS,CAAC,yCAAyC;gBAC9E,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;gBACzC,MAAM,QAAQ,GACZ,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;oBACzB,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;oBACrB,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;gBACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ;wBACR,MAAM,EAAE,YAAY,OAAO,uEAAuE;wBAClG,MAAM,EAAE,QAAQ;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;QAC5F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;KACrF,CAAC,CACH;CACF,CAAC,CAAC;AAEH,0EAA0E;AAC1E,qEAAqE;AACrE,MAAM,aAAa,GAAG;;;;;;;;;sJASgI,CAAC;AAEvJ,SAAS,WAAW,CAAC,IAAY,EAAE,YAAgC;IACjE,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,YAAY;QAC3B,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB;QAC1D,CAAC,CAAC,yBAAyB,CAAC;IAE9B,OAAO;EACP,QAAQ;;;;EAIR,IAAI;;;oGAG8F,CAAC;AACrG,CAAC;AAED,2FAA2F;AAC3F,SAAS,oBAAoB,CAAC,KAAkB;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,MAAM,GAAG,+EAA+E,CAAC;IAC/F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB,EAAE,IAAY;IAC1E,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,wBAAwB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1C,aAAa,CAAC,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAEzE,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,2GAA2G;YAC3G,uFAAuF;YACvF,yGAAyG;YACzG,sFAAsF;YACtF,mEAAmE;QACrE,cAAc,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE;QACrC,YAAY,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;QACjC,cAAc;QACd,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;KACrD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB,EAAE,IAAY;IACvE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,YAAY,GAAG,wBAAwB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAEhE,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC;QACpD,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACpF,MAAM,EAAE,iBAAiB;QACzB,UAAU,EAAE,sBAAsB;KACnC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,yEAAyE;IACzE,mDAAmD;IACnD,MAAM,cAAc,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,wBAAwB,CAC1C,YAAY,EACZ,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,OAAgB,EAAE,CAAC,CAAC,CAC5E,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjD,OAAO,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;YACxD,OAAO,IAAI,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAyB,CAAC,GAAG,YAAY,EAAE,GAAG,WAAW,CAAC,CAAC;IACvE,MAAM,OAAO,GAAyB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,WAAW,CAAC;IAEjG,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,kBAAkB,CAAC,EAAE,EAAE;YACrB,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACzD,OAAO;YACP,MAAM,EACJ,MAAM,CAAC,MAAM,KAAK,CAAC;gBACjB,CAAC,CAAC,oCAAoC;gBACtC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,mCAAmC;YACzD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC/B,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC7E,CAAC"}

package/dist/verify/security.js

@@ -0,0 +1,274 @@
+// Purpose: core logic for check_security — flags leaked secrets and unsafe patterns with deterministic rules, plus advisory model judgment for context-dependent risks.
+import { createHash } from "node:crypto";
+import { z } from "zod/v4";
+import { resolveProvider } from "../providers/index.js";
+import { openDatabase, insertVerification } from "../storage/db.js";
+import { parseDiff } from "./diff.js";
+import { dropDuplicateModelIssues } from "./combine.js";
+import { loadSentinelrc, configPromptBlocks } from "../config/sentinelrc.js";
+import { storeEvidence } from "./evidence.js";
+export const SECURITY_TOOL_NAME = "check_security";
+export const SECURITY_VERDICTS = ["no_issues", "security_risk"];
+// Note for maintainers: reasons quote a stable identifying token in double
+// quotes — the combiner uses those quoted tokens to drop duplicate model
+// findings, so keep the quotes when editing wording.
+const SECRET_RULES = [
+    {
+        pattern: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/,
+        reason: 'Possible AWS access key ID (starts with "AKIA"/"ASIA"): {match}',
+        mask: true,
+    },
+    {
+        pattern: /\bgh[pousr]_[A-Za-z0-9]{36,}\b/,
+        reason: 'Possible GitHub token (starts with "gh"): {match}',
+        mask: true,
+    },
+    {
+        pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/,
+        reason: 'Possible Slack token (starts with "xox"): {match}',
+        mask: true,
+    },
+    {
+        pattern: /\bAIza[0-9A-Za-z_-]{35}\b/,
+        reason: 'Possible Google API key (starts with "AIza"): {match}',
+        mask: true,
+    },
+    {
+        pattern: /\b[sr]k_live_[A-Za-z0-9]{24,}\b/,
+        reason: 'Possible live Stripe secret key ("k_live_"): {match}',
+        mask: true,
+    },
+    {
+        pattern: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/,
+        reason: 'Possible Anthropic API key (starts with "sk-ant-"): {match}',
+        mask: true,
+    },
+    {
+        pattern: /\bsk-(?:proj-)?[A-Za-z0-9_-]{32,}\b/,
+        reason: 'Possible OpenAI API key (starts with "sk-"): {match}',
+        mask: true,
+    },
+    {
+        pattern: /\bnpm_[A-Za-z0-9]{36}\b/,
+        reason: 'Possible npm token (starts with "npm_"): {match}',
+        mask: true,
+    },
+    {
+        pattern: /-----BEGIN [A-Z ]*PRIVATE KEY-----/,
+        reason: 'A "PRIVATE KEY" block is being committed.',
+    },
+    {
+        pattern: /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\./,
+        reason: 'Possible JWT (starts with "eyJ"): {match}',
+        mask: true,
+    },
+    {
+        pattern: /\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp):\/\/[^\s:@/"']+:([^\s@/"']+)@/,
+        reason: 'Connection string ("://") with an embedded password: {match}',
+        mask: true,
+    },
+];
+const UNSAFE_RULES = [
+    {
+        pattern: /\beval\s*\(/,
+        reason: 'Call to "eval" — executes arbitrary code from a string.',
+    },
+    {
+        pattern: /\bnew\s+Function\s*\(/,
+        reason: 'Use of "new Function" — compiles arbitrary code from a string, like eval.',
+    },
+    {
+        pattern: /\bexec(?:Sync)?\s*\(\s*(?:`[^`]*\$\{|["'][^"']*["']\s*\+|[\w$.]+\s*\+)/,
+        reason: 'Shell command built by string concatenation passed to "exec" — command injection risk. Use execFile with an argument array instead.',
+    },
+    {
+        pattern: /\bshell\s*:\s*true\b/,
+        reason: 'Child process spawned with "shell: true" — command injection risk if any input reaches the command line.',
+    },
+    {
+        pattern: /os\.system\s*\(\s*(?:.*\+|f["'])/,
+        reason: 'Shell command built from dynamic input passed to "os.system" — command injection risk.',
+    },
+    {
+        pattern: /subprocess\.\w+\s*\(.*shell\s*=\s*True/,
+        reason: 'Subprocess called with "shell=True" — command injection risk if any input reaches the command line.',
+    },
+    {
+        pattern: /rejectUnauthorized\s*:\s*false/,
+        reason: 'TLS certificate verification disabled ("rejectUnauthorized: false").',
+    },
+    {
+        pattern: /NODE_TLS_REJECT_UNAUTHORIZED["']?\s*[:=]\s*["']?0/,
+        reason: 'TLS certificate verification disabled process-wide ("NODE_TLS_REJECT_UNAUTHORIZED=0").',
+    },
+    {
+        pattern: /\bverify\s*=\s*False\b/,
+        reason: 'TLS certificate verification disabled ("verify=False").',
+    },
+    {
+        pattern: /InsecureSkipVerify\s*:\s*true/,
+        reason: 'TLS certificate verification disabled ("InsecureSkipVerify: true").',
+    },
+    {
+        pattern: /\bcurl\b[^|;&]*(?:\s-k\b|--insecure\b)/,
+        reason: 'curl called with certificate verification disabled ("--insecure"/"-k").',
+    },
+];
+// Generic hardcoded-credential assignment, gated by an entropy check so
+// placeholders and dictionary words don't fire.
+const CREDENTIAL_ASSIGNMENT = /(password|passwd|pwd|secret|token|api[_-]?key|apikey|access[_-]?key|private[_-]?key|auth)["']?\s*[:=]\s*["']([^"']{8,})["']/i;
+const PLACEHOLDER_VALUE = /^(?:\$\{|<|%|\*|x{3,}|your|my|the|change|example|dummy|test|placeholder|password|secret|redacted|todo|fixme|sample|insert|replace|none|null|undefined|abc|123)/i;
+/** Shannon entropy in bits per character — high values look like real key material. */
+function shannonEntropy(value) {
+    const freq = new Map();
+    for (const ch of value)
+        freq.set(ch, (freq.get(ch) ?? 0) + 1);
+    let entropy = 0;
+    for (const count of freq.values()) {
+        const p = count / value.length;
+        entropy -= p * Math.log2(p);
+    }
+    return entropy;
+}
+/** "AKIAIOSFODNN7EXAMPLE" -> "AKIA…" — never echo a whole secret anywhere. */
+function maskSecret(value) {
+    return value.length <= 8 ? "…" : `${value.slice(0, 4)}…`;
+}
+/**
+ * The deterministic security check: leaked secrets and known unsafe patterns
+ * in the added lines of a diff. Matched secrets are masked in the output.
+ */
+export function staticSecurityCheck(diff) {
+    const { added } = parseDiff(diff);
+    const issues = [];
+    for (const line of added) {
+        const matchedSpans = [];
+        const overlaps = (start, end) => matchedSpans.some(([s, e]) => start < e && end > s);
+        const applyRule = (rule) => {
+            const match = rule.pattern.exec(line.text);
+            if (!match)
+                return;
+            const start = match.index;
+            const end = start + match[0].length;
+            if (overlaps(start, end))
+                return; // a more specific rule already claimed this span
+            matchedSpans.push([start, end]);
+            const shown = rule.mask ? maskSecret(match[1] ?? match[0]) : match[0];
+            const lineText = rule.mask
+                ? line.text.replace(match[1] ?? match[0], maskSecret(match[1] ?? match[0]))
+                : line.text;
+            issues.push({
+                location: `${line.file}:${line.lineNo} — ${lineText.trim()}`,
+                reason: rule.reason.replace("{match}", shown),
+                source: "static",
+            });
+        };
+        for (const rule of SECRET_RULES)
+            applyRule(rule);
+        for (const rule of UNSAFE_RULES)
+            applyRule(rule);
+        // Generic credential assignment (skipped if a specific rule already fired on this span).
+        const cred = CREDENTIAL_ASSIGNMENT.exec(line.text);
+        if (cred) {
+            const [, keyName, value] = cred;
+            const valueStart = line.text.indexOf(value, cred.index);
+            const looksReal = !PLACEHOLDER_VALUE.test(value) &&
+                !/\$\{|process\.env|os\.environ|getenv/.test(value) &&
+                (shannonEntropy(value) >= 3.5 || (value.length >= 16 && shannonEntropy(value) >= 3.0));
+            if (looksReal && !overlaps(valueStart, valueStart + value.length)) {
+                issues.push({
+                    location: `${line.file}:${line.lineNo} — ${line.text.replace(value, maskSecret(value)).trim()}`,
+                    reason: `Hardcoded credential: "${keyName}" is assigned what looks like a real secret (${maskSecret(value)}). Read it from the environment instead.`,
+                    source: "static",
+                });
+            }
+        }
+    }
+    return issues;
+}
+// ---------------------------------------------------------------------------
+// Model judgment (advisory)
+// ---------------------------------------------------------------------------
+const modelIssuesSchema = z.object({
+    issues: z.array(z.object({
+        location: z.string().describe("File and line, or the offending code snippet from the diff."),
+        reason: z.string().describe("Why this is a security risk, in one or two sentences."),
+    })),
+});
+// Deliberately short and neutral — long, example-heavy prompts make small
+// local models fabricate findings and loop under schema constraints.
+const SYSTEM_PROMPT = `You review a code diff for security problems: hardcoded or leaked credentials, injection risks (SQL, shell, path), disabled security checks, or authentication and permission logic that is clearly wrong.
+
+Most diffs are clean; an empty issues list is a normal answer. Only report issues you are confident about; do not guess. Do not flag style, performance, or hypothetical concerns.`;
+function buildPrompt(diff) {
+    return `<code_diff>
+${diff}
+</code_diff>
+
+List security problems in this diff (empty list if none).`;
+}
+/**
+ * Agent-native (MCP) mode: runs only the deterministic secret and
+ * unsafe-pattern rules — no model call — and returns the evidence for the
+ * calling agent to judge.
+ */
+export function gatherSecurityEvidence(projectDir, diff) {
+    if (diff.trim().length === 0) {
+        throw new Error("Diff is empty — there is no code change to check.");
+    }
+    const config = loadSentinelrc(projectDir);
+    const staticFindings = staticSecurityCheck(diff);
+    storeEvidence(projectDir, SECURITY_TOOL_NAME, diff, staticFindings);
+    return {
+        mode: "evidence",
+        instruction: "The staticFindings below are deterministic pattern detections (any matched secrets are masked and were " +
+            "never stored in full). Additionally judge the diff yourself for context-dependent risks the patterns " +
+            "cannot catch: injection paths, authentication or permission logic that looks wrong, unsafe handling of " +
+            "user input. Combine both into your conclusion. Honor projectRules if present.",
+        projectContext: config?.context ?? "",
+        projectRules: config?.rules ?? [],
+        staticFindings,
+    };
+}
+/**
+ * Standalone (CLI) mode: deterministic rules first (authoritative), then
+ * model judgment (advisory, deduplicated). The result is stored locally
+ * with secrets masked.
+ */
+export async function checkSecurity(projectDir, diff) {
+    if (diff.trim().length === 0) {
+        throw new Error("Diff is empty — there is no code change to check.");
+    }
+    const staticIssues = staticSecurityCheck(diff);
+    const config = loadSentinelrc(projectDir);
+    const provider = resolveProvider();
+    const modelAnswer = await provider.completeStructured({
+        system: SYSTEM_PROMPT,
+        prompt: configPromptBlocks(config) + buildPrompt(diff),
+        schema: modelIssuesSchema,
+        schemaName: "security_issues",
+    });
+    const modelIssues = dropDuplicateModelIssues(staticIssues, modelAnswer.issues.map((issue) => ({ ...issue, source: "model" })));
+    const issues = [...staticIssues, ...modelIssues];
+    const verdict = issues.length > 0 ? "security_risk" : "no_issues";
+    const db = openDatabase(projectDir);
+    try {
+        insertVerification(db, {
+            tool: SECURITY_TOOL_NAME,
+            task: "",
+            diffHash: createHash("sha256").update(diff).digest("hex"),
+            verdict,
+            reason: issues.length === 0
+                ? "No security risks found."
+                : `${issues.length} security risk(s) found.`,
+            details: JSON.stringify(issues),
+            provider: provider.name,
+            model: provider.model,
+        });
+    }
+    finally {
+        db.close();
+    }
+    return { verdict, issues, provider: provider.name, model: provider.model };
+}
+//# sourceMappingURL=security.js.map

package/dist/verify/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/verify/security.ts"],"names":[],"mappings":"AAAA,wKAAwK;AAExK,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAA0B,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAqB,MAAM,eAAe,CAAC;AAEjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAEnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,eAAe,CAAU,CAAC;AAyBzE,2EAA2E;AAC3E,yEAAyE;AACzE,qDAAqD;AACrD,MAAM,YAAY,GAAmB;IACnC;QACE,OAAO,EAAE,+BAA+B;QACxC,MAAM,EAAE,iEAAiE;QACzE,IAAI,EAAE,IAAI;KACX;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,MAAM,EAAE,mDAAmD;QAC3D,IAAI,EAAE,IAAI;KACX;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,MAAM,EAAE,mDAAmD;QAC3D,IAAI,EAAE,IAAI;KACX;IACD;QACE,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,uDAAuD;QAC/D,IAAI,EAAE,IAAI;KACX;IACD;QACE,OAAO,EAAE,iCAAiC;QAC1C,MAAM,EAAE,sDAAsD;QAC9D,IAAI,EAAE,IAAI;KACX;IACD;QACE,OAAO,EAAE,+BAA+B;QACxC,MAAM,EAAE,6DAA6D;QACrE,IAAI,EAAE,IAAI;KACX;IACD;QACE,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE,sDAAsD;QAC9D,IAAI,EAAE,IAAI;KACX;IACD;QACE,OAAO,EAAE,yBAAyB;QAClC,MAAM,EAAE,kDAAkD;QAC1D,IAAI,EAAE,IAAI;KACX;IACD;QACE,OAAO,EAAE,oCAAoC;QAC7C,MAAM,EAAE,2CAA2C;KACpD;IACD;QACE,OAAO,EAAE,kDAAkD;QAC3D,MAAM,EAAE,2CAA2C;QACnD,IAAI,EAAE,IAAI;KACX;IACD;QACE,OAAO,EAAE,wFAAwF;QACjG,MAAM,EAAE,8DAA8D;QACtE,IAAI,EAAE,IAAI;KACX;CACF,CAAC;AAEF,MAAM,YAAY,GAAmB;IACnC;QACE,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,yDAAyD;KAClE;IACD;QACE,OAAO,EAAE,uBAAuB;QAChC,MAAM,EAAE,2EAA2E;KACpF;IACD;QACE,OAAO,EAAE,wEAAwE;QACjF,MAAM,EAAE,qIAAqI;KAC9I;IACD;QACE,OAAO,EAAE,sBAAsB;QAC/B,MAAM,EAAE,0GAA0G;KACnH;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,MAAM,EAAE,wFAAwF;KACjG;IACD;QACE,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,qGAAqG;KAC9G;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,MAAM,EAAE,sEAAsE;KAC/E;IACD;QACE,OAAO,EAAE,mDAAmD;QAC5D,MAAM,EAAE,wFAAwF;KACjG;IACD;QACE,OAAO,EAAE,wBAAwB;QACjC,MAAM,EAAE,yDAAyD;KAClE;IACD;QACE,OAAO,EAAE,+BAA+B;QACxC,MAAM,EAAE,qEAAqE;KAC9E;IACD;QACE,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,yEAAyE;KAClF;CACF,CAAC;AAEF,wEAAwE;AACxE,gDAAgD;AAChD,MAAM,qBAAqB,GACzB,8HAA8H,CAAC;AAEjI,MAAM,iBAAiB,GACrB,iKAAiK,CAAC;AAEpK,uFAAuF;AACvF,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,YAAY,GAA4B,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,GAAW,EAAE,EAAE,CAC9C,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;QAEtD,MAAM,SAAS,GAAG,CAAC,IAAkB,EAAE,EAAE;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,MAAM,GAAG,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACpC,IAAI,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,OAAO,CAAC,iDAAiD;YACnF,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YAEhC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI;gBACxB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3E,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACd,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE;gBAC5D,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC;gBAC7C,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,YAAY;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,YAAY;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAEjD,yFAAyF;QACzF,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;YAChC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,SAAS,GACb,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC9B,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC;gBACnD,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACzF,IAAI,SAAS,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;oBAC/F,MAAM,EAAE,0BAA0B,OAAO,gDAAgD,UAAU,CAAC,KAAK,CAAC,0CAA0C;oBACpJ,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;QAC5F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;KACrF,CAAC,CACH;CACF,CAAC,CAAC;AAEH,0EAA0E;AAC1E,qEAAqE;AACrE,MAAM,aAAa,GAAG;;mLAE6J,CAAC;AAEpL,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO;EACP,IAAI;;;0DAGoD,CAAC;AAC3D,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,IAAY;IACrE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACjD,aAAa,CAAC,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAEpE,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,yGAAyG;YACzG,uGAAuG;YACvG,yGAAyG;YACzG,+EAA+E;QACjF,cAAc,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE;QACrC,YAAY,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;QACjC,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB,EAAE,IAAY;IAClE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC;QACpD,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC;QACtD,MAAM,EAAE,iBAAiB;QACzB,UAAU,EAAE,iBAAiB;KAC9B,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,wBAAwB,CAC1C,YAAY,EACZ,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,OAAgB,EAAE,CAAC,CAAC,CAC5E,CAAC;IAEF,MAAM,MAAM,GAAoB,CAAC,GAAG,YAAY,EAAE,GAAG,WAAW,CAAC,CAAC;IAClE,MAAM,OAAO,GAAoB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC;IAEnF,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,kBAAkB,CAAC,EAAE,EAAE;YACrB,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACzD,OAAO;YACP,MAAM,EACJ,MAAM,CAAC,MAAM,KAAK,CAAC;gBACjB,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,0BAA0B;YAChD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC/B,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC7E,CAAC"}