shield360 1.1.0 → 1.2.0

package/dist/rasp/__tests__/reporter.test.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * RASP reporter: batched events through the guard events transport, folding
+ * of repeats, the per-minute cap, the components report.
+ */
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const reporter_1 = require("../reporter");
+const event = (rule = 'sqli.userinput') => ({
+    name: 'shield360.rasp.event',
+    time: new Date(0).toISOString(),
+    attrs: { 'shield360.rasp.attack': 'sql_injection', 'shield360.rasp.rule': rule },
+});
+function reporter() {
+    const posts = [];
+    let now = 1000000;
+    const fetchImpl = (async (url, init) => {
+        posts.push({ url, auth: (init?.headers).Authorization, body: JSON.parse(String(init?.body)) });
+        return new Response('{}', { status: 200 });
+    });
+    const r = new reporter_1.RaspReporter({ url: 'https://shield.example.com/', apiKey: 'test-api-key', applicationName: 'orders-api', environment: 'prod', sdkVersion: '1.2.0', fetchImpl, now: () => now, retryDelayMs: 1 });
+    return { r, posts, advance: (ms) => (now += ms) };
+}
+describe('RaspReporter', () => {
+    it('posts batches to /api/guard/events with the resource and the API key', async () => {
+        const { r, posts } = reporter();
+        r.add(event(), 'k1');
+        await r.flush();
+        expect(posts).toHaveLength(1);
+        expect(posts[0].url).toBe('https://shield.example.com/api/guard/events');
+        expect(posts[0].auth).toBe('Bearer test-api-key');
+        expect(posts[0].body.resource).toMatchObject({ 'service.name': 'orders-api', 'deployment.environment': 'prod', 'service.version': '1.2.0' });
+        expect(posts[0].body.events[0].name).toBe('shield360.rasp.event');
+    });
+    it('folds repeats within 10 s into one more event with shield360.rasp.count', async () => {
+        const { r, posts, advance } = reporter();
+        expect(r.add(event(), 'same')).toBe(true);
+        expect(r.add(event(), 'same')).toBe(false);
+        expect(r.add(event(), 'same')).toBe(false);
+        expect(r.add(event('sqli.stacked'), 'other')).toBe(true);
+        advance(reporter_1.FOLD_MS);
+        await r.flush();
+        const sent = posts.flatMap((p) => p.body.events);
+        expect(sent).toHaveLength(3);
+        expect(sent[2].attrs['shield360.rasp.count']).toBe('2');
+        expect(sent[2].attrs['shield360.rasp.rule']).toBe('sqli.userinput');
+    });
+    it('caps events at 100 a minute per process', async () => {
+        const { r, posts, advance } = reporter();
+        for (let i = 0; i < reporter_1.PER_MINUTE + 20; i++)
+            r.add(event(), `k${i}`);
+        expect(r.pending()).toHaveLength(reporter_1.PER_MINUTE);
+        advance(60000);
+        expect(r.add(event(), 'later')).toBe(true);
+        await r.flush();
+        expect(posts.flatMap((p) => p.body.events)).toHaveLength(reporter_1.PER_MINUTE + 1);
+    });
+    it('stop() closes open folds and sends them', async () => {
+        const { r, posts } = reporter();
+        r.add(event(), 'k');
+        r.add(event(), 'k');
+        await r.stop();
+        expect(posts.flatMap((p) => p.body.events).map((e) => e.attrs['shield360.rasp.count'])).toEqual([undefined, '1']);
+    });
+    it('components: names and versions only, as component records', async () => {
+        const { r, posts } = reporter();
+        r.reportComponents([{ ecosystem: 'npm', name: 'express', version: '4.21.2' }]);
+        await r.flush();
+        expect(posts[0].body.events[0]).toMatchObject({
+            name: 'shield360.rasp.component',
+            attrs: { 'shield360.rasp.app': 'orders-api', 'shield360.rasp.component.ecosystem': 'npm', 'shield360.rasp.component.name': 'express', 'shield360.rasp.component.version': '4.21.2' },
+        });
+    });
+    it('never rejects when the transport fails', async () => {
+        const r = new reporter_1.RaspReporter({
+            url: 'https://shield.example.com',
+            apiKey: 'k',
+            applicationName: 'a',
+            retryDelayMs: 1,
+            fetchImpl: (async () => {
+                throw new Error('offline');
+            }),
+        });
+        const warn = jest.spyOn(console, 'warn').mockImplementation(() => undefined);
+        r.add(event(), 'k');
+        await expect(r.flush()).resolves.toBeUndefined();
+        warn.mockRestore();
+    });
+});
+describe('collectComponents', () => {
+    let dir;
+    beforeAll(() => {
+        dir = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'rasp-components-'));
+        (0, fs_1.writeFileSync)((0, path_1.join)(dir, 'package.json'), JSON.stringify({ name: 'app', dependencies: { left: '^1.0.0', '@scope/right': '^2.0.0' } }));
+        for (const [name, version] of [['left', '1.4.0'], ['@scope/right', '2.1.0'], ['loaded', '3.0.0']]) {
+            (0, fs_1.mkdirSync)((0, path_1.join)(dir, 'node_modules', ...name.split('/')), { recursive: true });
+            (0, fs_1.writeFileSync)((0, path_1.join)(dir, 'node_modules', ...name.split('/'), 'package.json'), JSON.stringify({ name, version, description: 'not sent' }));
+        }
+    });
+    afterAll(() => (0, fs_1.rmSync)(dir, { recursive: true, force: true }));
+    it('lists the runtime, declared dependencies and loaded packages, with no other fields', () => {
+        const cache = { [(0, path_1.join)(dir, 'node_modules', 'loaded', 'index.js')]: {}, [(0, path_1.join)(dir, 'src', 'app.js')]: {} };
+        const got = (0, reporter_1.collectComponents)(cache, dir);
+        expect(got[0]).toEqual({ ecosystem: 'runtime', name: 'node', version: process.versions.node });
+        expect(got.slice(1)).toEqual([
+            { ecosystem: 'npm', name: 'left', version: '1.4.0' },
+            { ecosystem: 'npm', name: '@scope/right', version: '2.1.0' },
+            { ecosystem: 'npm', name: 'loaded', version: '3.0.0' },
+        ]);
+    });
+});
+//# sourceMappingURL=reporter.test.js.map

package/dist/rasp/__tests__/reporter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporter.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/reporter.test.ts"],"names":[],"mappings":";;AAAA;;;GAGG;AACH,2BAAmE;AACnE,2BAA4B;AAC5B,+BAA4B;AAC5B,0CAAmG;AAEnG,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,gBAAgB,EAAa,EAAE,CAAC,CAAC;IACrD,IAAI,EAAE,sBAAsB;IAC5B,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;IAC/B,KAAK,EAAE,EAAE,uBAAuB,EAAE,eAAe,EAAE,qBAAqB,EAAE,IAAI,EAAE;CACjF,CAAC,CAAC;AAEH,SAAS,QAAQ;IACf,MAAM,KAAK,GAA+C,EAAE,CAAC;IAC7D,IAAI,GAAG,GAAG,OAAS,CAAC;IACpB,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,GAAW,EAAE,IAAkB,EAAE,EAAE;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAkC,CAAA,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QACzH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC,CAA4B,CAAC;IAC9B,MAAM,CAAC,GAAG,IAAI,uBAAY,CAAC,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;IAChN,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,CAAC;QAChC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QACrB,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7I,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,CAAC,kBAAO,CAAC,CAAC;QACjB,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,qBAAU,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,qBAAU,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAM,CAAC,CAAC;QAChB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,qBAAU,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,CAAC;QAChC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QACpB,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IACpH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,CAAC;QAChC,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC5C,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,EAAE,oBAAoB,EAAE,YAAY,EAAE,oCAAoC,EAAE,KAAK,EAAE,+BAA+B,EAAE,SAAS,EAAE,kCAAkC,EAAE,QAAQ,EAAE;SACrL,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,CAAC,GAAG,IAAI,uBAAY,CAAC;YACzB,GAAG,EAAE,4BAA4B;YACjC,MAAM,EAAE,GAAG;YACX,eAAe,EAAE,GAAG;YACpB,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,CAAC,KAAK,IAAI,EAAE;gBACrB,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC,CAA4B;SAC9B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7E,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QACpB,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,GAAW,CAAC;IAChB,SAAS,CAAC,GAAG,EAAE;QACb,GAAG,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACtD,IAAA,kBAAa,EAAC,IAAA,WAAI,EAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACtI,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YAClG,IAAA,cAAS,EAAC,IAAA,WAAI,EAAC,GAAG,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9E,IAAA,kBAAa,EAAC,IAAA,WAAI,EAAC,GAAG,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAA,WAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9D,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,KAAK,GAAG,EAAE,CAAC,IAAA,WAAI,EAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAA,WAAI,EAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1G,MAAM,GAAG,GAAG,IAAA,4BAAiB,EAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3B,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;YACpD,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE;YAC5D,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;SACvD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/route.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/rasp/__tests__/route.test.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Event route (README "Event route"): the shared conformance cases
+ * (sdk/rasp/testdata/routes.json), and attack events built from a path when
+ * the framework gives no route template.
+ */
+const context_1 = require("../context");
+const engine_1 = require("../engine");
+const iast_1 = require("../iast");
+const corpus_1 = require("./corpus");
+const cases = (0, corpus_1.loadJson)('testdata/routes.json').cases;
+describe('event route conformance (testdata/routes.json)', () => {
+    it.each(cases.map((c) => [c.path, c.route]))('%s -> %s', (path, route) => {
+        expect((0, context_1.eventRouteOf)(path)).toBe(route);
+        expect((0, iast_1.iastRouteOf)(path)).toBe(route);
+    });
+});
+describe('attack event route', () => {
+    const events = [];
+    const finding = { attack: 'sql_injection', rule: 'sqli.userinput', input: { value: 'v', key: 'query.id', source: 'request' } };
+    const routeOfEvent = (ctx) => {
+        context_1.storage.run((0, context_1.newContext)({ inRequest: true, method: 'get', ...ctx }), () => (0, engine_1.handleFinding)(finding, 'pg.query'));
+        return events[events.length - 1].attrs['shield360.rasp.route'];
+    };
+    beforeEach(() => {
+        events.length = 0;
+        (0, engine_1.configureEngine)({ enabled: true, applicationName: 'orders-api', env: {} });
+        (0, engine_1.setEventSink)({ add: (e) => events.push(e) });
+    });
+    afterAll(() => {
+        (0, engine_1.setEventSink)(undefined);
+        (0, engine_1.configureEngine)({ enabled: false, applicationName: 'default', env: {} });
+    });
+    it('never carries a secret-looking path segment when the framework gives no template', () => {
+        expect(routeOfEvent({ path: '/reset/Zx9TqLm2Rk7WpA4s/confirm' })).toBe('/reset/:id/confirm');
+    });
+    it('keeps the framework route template unchanged', () => {
+        expect(routeOfEvent({ path: '/reset/Zx9TqLm2Rk7WpA4s/confirm', route: '/reset/:Token/confirm' })).toBe('/reset/:Token/confirm');
+    });
+    it('keeps a route passed by the hook unchanged', () => {
+        (0, engine_1.handleFinding)(finding, 'pg.query', { route: '/Files/{fileName}', path: '/Files/Secret' });
+        expect(events[0].attrs['shield360.rasp.route']).toBe('/Files/{fileName}');
+    });
+});
+//# sourceMappingURL=route.test.js.map

package/dist/rasp/__tests__/route.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/route.test.ts"],"names":[],"mappings":";;AAAA;;;;GAIG;AACH,wCAA+D;AAC/D,sCAAyE;AACzE,kCAAsC;AAEtC,qCAAoC;AAEpC,MAAM,KAAK,GAAsC,IAAA,iBAAQ,EAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC;AAExF,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACvE,MAAM,CAAC,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,IAAA,kBAAW,EAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,MAAM,GAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAY,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;IACxI,MAAM,YAAY,GAAG,CAAC,GAAqC,EAAE,EAAE;QAC7D,iBAAO,CAAC,GAAG,CAAC,IAAA,oBAAU,EAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAA,sBAAa,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9G,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAClB,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,EAAE;QACZ,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;QACxB,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,iCAAiC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAClI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,IAAA,sBAAa,EAAC,OAAO,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/rule-expr.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/rasp/__tests__/rule-expr.test.js

@@ -0,0 +1,151 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Custom rule expressions (README "Custom rules"): the shared conformance
+ * corpus (testdata/custom-rules.json), the limits, the safe regex subset and
+ * its linear-time matcher, CIDR matching, and fail-open evaluation.
+ */
+const fs_1 = require("fs");
+const path_1 = require("path");
+const rule_expr_1 = require("../rule-expr");
+const corpus_1 = require("./corpus");
+const corpus = (0, corpus_1.loadJson)('testdata/custom-rules.json');
+const subjectOf = (s) => (typeof s === 'string' ? corpus.subjects[s] : s);
+const compiled = (src) => {
+    const r = (0, rule_expr_1.compileRuleExpr)(src);
+    if (!r.ok)
+        throw new Error(`${src}: ${r.error.code}`);
+    return r.expr;
+};
+const run = (src, subject) => (0, rule_expr_1.evaluateRuleExpr)(compiled(src), subject).matched;
+describe('custom rule corpus', () => {
+    it('is version 1 and states the same limits as the language', () => {
+        expect(corpus.version).toBe(1);
+        expect(corpus.limits).toEqual({ ...rule_expr_1.RULE_EXPR_LIMITS });
+    });
+    it.each(corpus.valid.map((c) => [c.name, c]))('valid: %s', (_name, c) => {
+        const r = (0, rule_expr_1.compileRuleExpr)(c.expression);
+        expect(r.ok ? 'ok' : r.error.code).toBe('ok');
+        if (!r.ok)
+            return;
+        if (c.phase)
+            expect(r.expr.phase).toBe(c.phase);
+        if (c.usesInput !== undefined)
+            expect(r.expr.usesInput).toBe(c.usesInput);
+        if (c.usesBody !== undefined)
+            expect(r.expr.usesBody).toBe(c.usesBody);
+        for (const k of c.cases)
+            expect([k.subject, (0, rule_expr_1.evaluateRuleExpr)(r.expr, subjectOf(k.subject)).matched]).toEqual([k.subject, k.expect]);
+    });
+    it.each(corpus.invalid.map((c) => [c.name, c]))('invalid: %s', (_name, c) => {
+        const r = (0, rule_expr_1.compileRuleExpr)(c.expression);
+        expect(r.ok ? 'ok' : r.error.code).toBe(c.error);
+    });
+    it('is the generator output', () => {
+        // The generator is the source; a hand edit of the JSON would drift from it.
+        const gen = (0, fs_1.readFileSync)((0, path_1.join)(corpus_1.RASP_DIR, 'scripts', 'gen-custom-rules.mjs'), 'utf8');
+        expect(gen).toContain('testdata", "custom-rules.json"');
+        expect(corpus.valid.length).toBeGreaterThan(60);
+        expect(corpus.invalid.length).toBeGreaterThan(60);
+    });
+});
+describe('compileRuleExpr', () => {
+    it('refuses anything but a string', () => {
+        for (const v of [undefined, null, 1, {}, []])
+            expect((0, rule_expr_1.compileRuleExpr)(v)).toMatchObject({ ok: false, error: { code: 'empty' } });
+    });
+    it('reports where a syntax error is', () => {
+        const r = (0, rule_expr_1.compileRuleExpr)('request.method == "GET" &&& true');
+        expect(r).toMatchObject({ ok: false, error: { code: 'syntax' } });
+        expect(!r.ok && r.error.pos).toBeGreaterThan(20);
+    });
+    it('classifies the phase from the fields read', () => {
+        expect(compiled('request.path == "/"').phase).toBe('request');
+        expect(compiled('attack.type == "ssrf"').phase).toBe('finding');
+        expect(compiled('sink.name == "fs.readFile" && input.key == "query.f"')).toMatchObject({ phase: 'finding', usesInput: true, usesBody: false });
+        expect(compiled('request.body["a"] == "b"').usesBody).toBe(true);
+        expect(compiled('request.headers["X-A"] == "1" && app.name == "a"').fields).toEqual(['app.name', 'request.headers']);
+    });
+    it('guards parser recursion before the AST is built', () => {
+        // Far deeper than any stack would allow, within the byte limit.
+        expect((0, rule_expr_1.compileRuleExpr)(`${'('.repeat(1000)}true${')'.repeat(1000)}`)).toMatchObject({ ok: false, error: { code: 'depth' } });
+        expect((0, rule_expr_1.compileRuleExpr)(`${'!'.repeat(2000)}true`)).toMatchObject({ ok: false, error: { code: 'depth' } });
+    });
+});
+describe('evaluation', () => {
+    const get = corpus.subjects.get;
+    it('short-circuits left to right', () => {
+        expect(run('request.method == "GET" || request.path.matches("x")', get)).toBe(true);
+        expect(run('request.method == "PUT" && request.path.matches("x")', get)).toBe(false);
+    });
+    it('returns the input that matched', () => {
+        const r = (0, rule_expr_1.evaluateRuleExpr)(compiled('input.key == "query.sort"'), get);
+        expect(r).toEqual({ matched: true, input: { value: 'name desc', key: 'query.sort', source: 'request' } });
+    });
+    it('fails open on a malformed subject', () => {
+        const e = compiled('request.headers["a"] == "b" && input.value == "x"');
+        for (const s of [{}, { request: 'nope' }, { request: { headers: 'x' } }, { inputs: 'x' }, { inputs: [null, 1] }]) {
+            expect((0, rule_expr_1.evaluateRuleExpr)(e, s).matched).toBe(false);
+        }
+        expect((0, rule_expr_1.evaluateRuleExpr)(compiled('request.headers["a"] == null'), { request: { headers: Object.create({ a: 'inherited' }) } }).matched).toBe(true);
+    });
+    it('stops at the budget and reports no match', () => {
+        const e = compiled('input.value.matches("a{100}x")');
+        const big = { app: 'a', inputs: Array.from({ length: 256 }, (_, i) => ({ value: 'a'.repeat(4096), key: `query.k${i}`, source: 'request' })) };
+        const budget = { steps: 10000 };
+        expect((0, rule_expr_1.evaluateRuleExpr)(e, big, budget)).toEqual({ matched: false, exhausted: true });
+        expect(budget.steps).toBeLessThan(0);
+    });
+    it('matches in time linear in the subject (no catastrophic backtracking)', () => {
+        // The classic exponential case for backtracking engines, rewritten in the subset.
+        const e = compiled('app.name.matches("^(?:a|a)*b$")');
+        const t0 = Date.now();
+        expect((0, rule_expr_1.evaluateRuleExpr)(e, { app: 'a'.repeat(4000) }).matched).toBe(false);
+        const e2 = compiled('app.name.matches(".*.*.*.*.*.*x")');
+        expect((0, rule_expr_1.evaluateRuleExpr)(e2, { app: 'a'.repeat(4096) }).matched).toBe(false);
+        expect(Date.now() - t0).toBeLessThan(2000);
+    });
+});
+describe('regex subset', () => {
+    it.each(['a', '^a$', '[a-z0-9_]+', '(?:x|y){1,3}', '\\d{3}-\\d{4}', '.*', 'a|', '(?:)', '[\\s\\S]'])('accepts %s', (p) => {
+        expect((0, rule_expr_1.compileRegex)(p)).not.toBeNull();
+    });
+    it.each(['(a+)+', '(a*)*', '(a|b+)*', 'a{0,1000}', '\\1', '(?=x)', '(?!x)', '(?<=x)', '(?P<n>x)', '\\Z', '\\A', '\\cA', 'a{1,2}{3}', '[a-\\d]', 'x{', '\\'])('refuses %s', (p) => {
+        expect((0, rule_expr_1.compileRegex)(p)).toBeNull();
+    });
+});
+describe('CIDR', () => {
+    it('parses addresses strictly', () => {
+        expect((0, rule_expr_1.parseIpBytes)('1.2.3.4')).toEqual([0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 255, 1, 2, 3, 4]);
+        expect((0, rule_expr_1.parseIpBytes)('::1')).toEqual([...new Array(15).fill(0), 1]);
+        expect((0, rule_expr_1.parseIpBytes)('1:2:3:4:5:6:1.2.3.4')).toEqual([0, 1, 0, 2, 0, 3, 0, 4, 0, 5, 0, 6, 1, 2, 3, 4]);
+        for (const bad of ['1.2.3', '1.2.3.256', '01.2.3.4', ':1', '1:::2', '1:2:3:4:5:6:7:8:9', '12345::', 'g::', '1.2.3.4::', ''])
+            expect((0, rule_expr_1.parseIpBytes)(bad)).toBeNull();
+    });
+    it('keeps IPv4 prefixes in IPv4-mapped space', () => {
+        expect((0, rule_expr_1.parseCidr)('10.0.0.0/8')).toMatchObject({ prefix: 104 });
+        expect((0, rule_expr_1.parseCidr)('::/0')).toMatchObject({ prefix: 0 });
+        expect((0, rule_expr_1.parseCidr)('1.2.3.4')).toMatchObject({ prefix: 128 });
+    });
+});
+// README "Collector contexts": the same language with the collector's fields.
+describe('collector contexts', () => {
+    it('compiles each context against its own fields', () => {
+        expect((0, rule_expr_1.compileRuleExpr)('tool.name == "Bash" && tool.command.contains("rm -rf")', 'agent_tool').ok).toBe(true);
+        expect((0, rule_expr_1.compileRuleExpr)('ai.provider == "openai" && ai.tokens.matches("^[0-9]{6,}$")', 'ai_proxy').ok).toBe(true);
+        expect((0, rule_expr_1.compileRuleExpr)('ai.model == "x"', 'agent_tool')).toMatchObject({ ok: false, error: { code: 'unknown_field' } });
+        expect((0, rule_expr_1.compileRuleExpr)('tool.name == "x"', 'ai_proxy')).toMatchObject({ ok: false, error: { code: 'unknown_field' } });
+        expect((0, rule_expr_1.compileRuleExpr)('tool.name == "x"')).toMatchObject({ ok: false, error: { code: 'unknown_field' } });
+        expect((0, rule_expr_1.compileRuleExpr)('user.id == "x"', 'nope')).toMatchObject({ ok: false, error: { code: 'context' } });
+    });
+    it('evaluates collector subjects, with absent fields as null', () => {
+        const r = (0, rule_expr_1.compileRuleExpr)('agent.name == "cursor" && tool.path.startsWith("/etc/")', 'agent_tool');
+        if (!r.ok)
+            throw new Error(r.error.code);
+        expect(r.expr.context).toBe('agent_tool');
+        expect((0, rule_expr_1.evaluateRuleExpr)(r.expr, { collector: { agent: { name: 'cursor' }, tool: { path: '/etc/hosts' } } }).matched).toBe(true);
+        expect((0, rule_expr_1.evaluateRuleExpr)(r.expr, { collector: { agent: { name: 'cursor' } } }).matched).toBe(false);
+        expect((0, rule_expr_1.evaluateRuleExpr)(r.expr, {}).matched).toBe(false);
+    });
+});
+//# sourceMappingURL=rule-expr.test.js.map

package/dist/rasp/__tests__/rule-expr.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-expr.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/rule-expr.test.ts"],"names":[],"mappings":";;AAAA;;;;GAIG;AACH,2BAAkC;AAClC,+BAA4B;AAC5B,4CAA4I;AAC5I,qCAA8C;AAE9C,MAAM,MAAM,GAAG,IAAA,iBAAQ,EAAC,4BAA4B,CAAC,CAAC;AACtD,MAAM,SAAS,GAAG,CAAC,CAAuB,EAAe,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7G,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE;IAC/B,MAAM,CAAC,GAAG,IAAA,2BAAe,EAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,IAAI,CAAC;AAChB,CAAC,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,OAAoB,EAAE,EAAE,CAAC,IAAA,4BAAgB,EAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC;AAEpG,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,4BAAgB,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAE,MAAM,CAAC,KAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,CAAM,EAAE,EAAE;QACtF,MAAM,CAAC,GAAG,IAAA,2BAAe,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO;QAClB,IAAI,CAAC,CAAC,KAAK;YAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;YAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAA,4BAAgB,EAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAE,MAAM,CAAC,OAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,CAAM,EAAE,EAAE;QAC1F,MAAM,CAAC,GAAG,IAAA,2BAAe,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,4EAA4E;QAC5E,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,iBAAQ,EAAE,SAAS,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,KAAK,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC;YAAE,MAAM,CAAC,IAAA,2BAAe,EAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAClI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,IAAA,2BAAe,EAAC,kCAAkC,CAAC,CAAC;QAC9D,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/I,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,gEAAgE;QAChE,MAAM,CAAC,IAAA,2BAAe,EAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7H,MAAM,CAAC,IAAA,2BAAe,EAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAkB,CAAC;IAE/C,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,IAAA,4BAAgB,EAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,mDAAmD,CAAC,CAAC;QACxE,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAA6B,EAAE,CAAC;YAC7I,MAAM,CAAC,IAAA,4BAAgB,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,CAAC,IAAA,4BAAgB,EAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,gCAAgC,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9I,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,KAAM,EAAE,CAAC;QACjC,MAAM,CAAC,IAAA,4BAAgB,EAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,kFAAkF;QAClF,MAAM,CAAC,GAAG,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,CAAC,IAAA,4BAAgB,EAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3E,MAAM,EAAE,GAAG,QAAQ,CAAC,mCAAmC,CAAC,CAAC;QACzD,MAAM,CAAC,IAAA,4BAAgB,EAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;QACvH,MAAM,CAAC,IAAA,wBAAY,EAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;QAC/K,MAAM,CAAC,IAAA,wBAAY,EAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;IACpB,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,IAAA,wBAAY,EAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,IAAA,wBAAY,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,IAAA,wBAAY,EAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtG,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;YAAE,MAAM,CAAC,IAAA,wBAAY,EAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpK,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,IAAA,qBAAS,EAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAA,qBAAS,EAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,IAAA,qBAAS,EAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,IAAA,2BAAe,EAAC,wDAAwD,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9G,MAAM,CAAC,IAAA,2BAAe,EAAC,6DAA6D,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjH,MAAM,CAAC,IAAA,2BAAe,EAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QACxH,MAAM,CAAC,IAAA,2BAAe,EAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QACvH,MAAM,CAAC,IAAA,2BAAe,EAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QAC3G,MAAM,CAAC,IAAA,2BAAe,EAAC,gBAAgB,EAAE,MAAe,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,IAAA,2BAAe,EAAC,yDAAyD,EAAE,YAAY,CAAC,CAAC;QACnG,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAA,4BAAgB,EAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChI,MAAM,CAAC,IAAA,4BAAgB,EAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnG,MAAM,CAAC,IAAA,4BAAgB,EAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/rule-phases.test.d.ts

@@ -0,0 +1 @@
+export {};