thuban 0.4.3 → 0.4.5

package/dist/packages/crucible/seeds/ts/seed-010 2.ts

@@ -1,33 +1,33 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: typescript
-// expected: SQL injection in TypeORM repository createQueryBuilder with raw where clause
-
-import { Repository } from 'typeorm';
-import { User } from '../entities/User';
-
-export class UserRepository {
-  constructor(private repo: Repository<User>) {}
-
-  async findByEmail(email: string): Promise<User | null> {
-    return this.repo
-      .createQueryBuilder('user')
-      // Direct interpolation into where() — SQL injection
-      .where(`user.email = '${email}'`)
-      .getOne();
-  }
-
-  async searchByName(query: string, role: string): Promise<User[]> {
-    return this.repo
-      .createQueryBuilder('user')
-      .where(`user.name ILIKE '%${query}%' AND user.role = '${role}'`)
-      .orderBy('user.createdAt', 'DESC')
-      .getMany();
-  }
-
-  async getByIds(ids: string[]): Promise<User[]> {
-    const idList = ids.join(', ');
-    return this.repo.query(`SELECT * FROM users WHERE id IN (${idList})`);
-  }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: typescript
+// expected: SQL injection in TypeORM repository createQueryBuilder with raw where clause
+
+import { Repository } from 'typeorm';
+import { User } from '../entities/User';
+
+export class UserRepository {
+  constructor(private repo: Repository<User>) {}
+
+  async findByEmail(email: string): Promise<User | null> {
+    return this.repo
+      .createQueryBuilder('user')
+      // Direct interpolation into where() — SQL injection
+      .where(`user.email = '${email}'`)
+      .getOne();
+  }
+
+  async searchByName(query: string, role: string): Promise<User[]> {
+    return this.repo
+      .createQueryBuilder('user')
+      .where(`user.name ILIKE '%${query}%' AND user.role = '${role}'`)
+      .orderBy('user.createdAt', 'DESC')
+      .getMany();
+  }
+
+  async getByIds(ids: string[]): Promise<User[]> {
+    const idList = ids.join(', ');
+    return this.repo.query(`SELECT * FROM users WHERE id IN (${idList})`);
+  }
+}

package/dist/packages/crucible/seeds/ts/seed-010.ts

@@ -1,33 +1,33 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: typescript
-// expected: SQL injection in TypeORM repository createQueryBuilder with raw where clause
-
-import { Repository } from 'typeorm';
-import { User } from '../entities/User';
-
-export class UserRepository {
-  constructor(private repo: Repository<User>) {}
-
-  async findByEmail(email: string): Promise<User | null> {
-    return this.repo
-      .createQueryBuilder('user')
-      // Direct interpolation into where() — SQL injection
-      .where(`user.email = '${email}'`)
-      .getOne();
-  }
-
-  async searchByName(query: string, role: string): Promise<User[]> {
-    return this.repo
-      .createQueryBuilder('user')
-      .where(`user.name ILIKE '%${query}%' AND user.role = '${role}'`)
-      .orderBy('user.createdAt', 'DESC')
-      .getMany();
-  }
-
-  async getByIds(ids: string[]): Promise<User[]> {
-    const idList = ids.join(', ');
-    return this.repo.query(`SELECT * FROM users WHERE id IN (${idList})`);
-  }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: typescript
+// expected: SQL injection in TypeORM repository createQueryBuilder with raw where clause
+
+import { Repository } from 'typeorm';
+import { User } from '../entities/User';
+
+export class UserRepository {
+  constructor(private repo: Repository<User>) {}
+
+  async findByEmail(email: string): Promise<User | null> {
+    return this.repo
+      .createQueryBuilder('user')
+      // Direct interpolation into where() — SQL injection
+      .where(`user.email = '${email}'`)
+      .getOne();
+  }
+
+  async searchByName(query: string, role: string): Promise<User[]> {
+    return this.repo
+      .createQueryBuilder('user')
+      .where(`user.name ILIKE '%${query}%' AND user.role = '${role}'`)
+      .orderBy('user.createdAt', 'DESC')
+      .getMany();
+  }
+
+  async getByIds(ids: string[]): Promise<User[]> {
+    const idList = ids.join(', ');
+    return this.repo.query(`SELECT * FROM users WHERE id IN (${idList})`);
+  }
+}

package/dist/packages/crucible/seeds/ts/seed-011 2.ts

@@ -1,29 +1,29 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: typescript
-// expected: SQL injection in Prisma $queryRaw with tagged template bypassed via string concat
-
-import { PrismaClient } from '@prisma/client';
-
-const prisma = new PrismaClient();
-
-export async function getUserOrders(userId: string, status: string) {
-  // $queryRawUnsafe does NOT parameterize — direct string concatenation
-  const orders = await prisma.$queryRawUnsafe(
-    `SELECT * FROM orders WHERE user_id = '${userId}' AND status = '${status}'`
-  );
-  return orders;
-}
-
-export async function searchInventory(searchTerm: string, warehouseId: string) {
-  const query = `
-    SELECT i.*, w.name as warehouse
-    FROM inventory i
-    JOIN warehouses w ON i.warehouse_id = w.id
-    WHERE i.sku ILIKE '%` + searchTerm + `%'
-    OR i.description ILIKE '%` + searchTerm + `%'
-    AND w.id = '` + warehouseId + `'
-  `;
-  return prisma.$queryRawUnsafe(query);
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: typescript
+// expected: SQL injection in Prisma $queryRaw with tagged template bypassed via string concat
+
+import { PrismaClient } from '@prisma/client';
+
+const prisma = new PrismaClient();
+
+export async function getUserOrders(userId: string, status: string) {
+  // $queryRawUnsafe does NOT parameterize — direct string concatenation
+  const orders = await prisma.$queryRawUnsafe(
+    `SELECT * FROM orders WHERE user_id = '${userId}' AND status = '${status}'`
+  );
+  return orders;
+}
+
+export async function searchInventory(searchTerm: string, warehouseId: string) {
+  const query = `
+    SELECT i.*, w.name as warehouse
+    FROM inventory i
+    JOIN warehouses w ON i.warehouse_id = w.id
+    WHERE i.sku ILIKE '%` + searchTerm + `%'
+    OR i.description ILIKE '%` + searchTerm + `%'
+    AND w.id = '` + warehouseId + `'
+  `;
+  return prisma.$queryRawUnsafe(query);
+}

package/dist/packages/crucible/seeds/ts/seed-011.ts

@@ -1,29 +1,29 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: typescript
-// expected: SQL injection in Prisma $queryRaw with tagged template bypassed via string concat
-
-import { PrismaClient } from '@prisma/client';
-
-const prisma = new PrismaClient();
-
-export async function getUserOrders(userId: string, status: string) {
-  // $queryRawUnsafe does NOT parameterize — direct string concatenation
-  const orders = await prisma.$queryRawUnsafe(
-    `SELECT * FROM orders WHERE user_id = '${userId}' AND status = '${status}'`
-  );
-  return orders;
-}
-
-export async function searchInventory(searchTerm: string, warehouseId: string) {
-  const query = `
-    SELECT i.*, w.name as warehouse
-    FROM inventory i
-    JOIN warehouses w ON i.warehouse_id = w.id
-    WHERE i.sku ILIKE '%` + searchTerm + `%'
-    OR i.description ILIKE '%` + searchTerm + `%'
-    AND w.id = '` + warehouseId + `'
-  `;
-  return prisma.$queryRawUnsafe(query);
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: typescript
+// expected: SQL injection in Prisma $queryRaw with tagged template bypassed via string concat
+
+import { PrismaClient } from '@prisma/client';
+
+const prisma = new PrismaClient();
+
+export async function getUserOrders(userId: string, status: string) {
+  // $queryRawUnsafe does NOT parameterize — direct string concatenation
+  const orders = await prisma.$queryRawUnsafe(
+    `SELECT * FROM orders WHERE user_id = '${userId}' AND status = '${status}'`
+  );
+  return orders;
+}
+
+export async function searchInventory(searchTerm: string, warehouseId: string) {
+  const query = `
+    SELECT i.*, w.name as warehouse
+    FROM inventory i
+    JOIN warehouses w ON i.warehouse_id = w.id
+    WHERE i.sku ILIKE '%` + searchTerm + `%'
+    OR i.description ILIKE '%` + searchTerm + `%'
+    AND w.id = '` + warehouseId + `'
+  `;
+  return prisma.$queryRawUnsafe(query);
+}

package/dist/packages/crucible/seeds/ts/seed-012 2.ts

@@ -1,34 +1,34 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: typescript
-// expected: SQL injection in NestJS service using raw pg query with string interpolation
-
-import { Injectable } from '@nestjs/common';
-import { InjectConnection } from '@nestjs/typeorm';
-import { Connection } from 'typeorm';
-
-@Injectable()
-export class ReportService {
-  constructor(@InjectConnection() private connection: Connection) {}
-
-  async getRevenueReport(fromDate: string, toDate: string, groupBy: string): Promise<any[]> {
-    const sql = `
-      SELECT
-        ${groupBy} as period,
-        SUM(amount) as total_revenue,
-        COUNT(*) as transaction_count
-      FROM transactions
-      WHERE created_at BETWEEN '${fromDate}' AND '${toDate}'
-      GROUP BY ${groupBy}
-      ORDER BY period ASC
-    `;
-    return this.connection.query(sql);
-  }
-
-  async getUserActivity(userId: string, action: string): Promise<any[]> {
-    return this.connection.query(
-      `SELECT * FROM audit_log WHERE user_id = '` + userId + `' AND action = '` + action + `'`
-    );
-  }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: typescript
+// expected: SQL injection in NestJS service using raw pg query with string interpolation
+
+import { Injectable } from '@nestjs/common';
+import { InjectConnection } from '@nestjs/typeorm';
+import { Connection } from 'typeorm';
+
+@Injectable()
+export class ReportService {
+  constructor(@InjectConnection() private connection: Connection) {}
+
+  async getRevenueReport(fromDate: string, toDate: string, groupBy: string): Promise<any[]> {
+    const sql = `
+      SELECT
+        ${groupBy} as period,
+        SUM(amount) as total_revenue,
+        COUNT(*) as transaction_count
+      FROM transactions
+      WHERE created_at BETWEEN '${fromDate}' AND '${toDate}'
+      GROUP BY ${groupBy}
+      ORDER BY period ASC
+    `;
+    return this.connection.query(sql);
+  }
+
+  async getUserActivity(userId: string, action: string): Promise<any[]> {
+    return this.connection.query(
+      `SELECT * FROM audit_log WHERE user_id = '` + userId + `' AND action = '` + action + `'`
+    );
+  }
+}

package/dist/packages/crucible/seeds/ts/seed-012.ts

@@ -1,34 +1,34 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: typescript
-// expected: SQL injection in NestJS service using raw pg query with string interpolation
-
-import { Injectable } from '@nestjs/common';
-import { InjectConnection } from '@nestjs/typeorm';
-import { Connection } from 'typeorm';
-
-@Injectable()
-export class ReportService {
-  constructor(@InjectConnection() private connection: Connection) {}
-
-  async getRevenueReport(fromDate: string, toDate: string, groupBy: string): Promise<any[]> {
-    const sql = `
-      SELECT
-        ${groupBy} as period,
-        SUM(amount) as total_revenue,
-        COUNT(*) as transaction_count
-      FROM transactions
-      WHERE created_at BETWEEN '${fromDate}' AND '${toDate}'
-      GROUP BY ${groupBy}
-      ORDER BY period ASC
-    `;
-    return this.connection.query(sql);
-  }
-
-  async getUserActivity(userId: string, action: string): Promise<any[]> {
-    return this.connection.query(
-      `SELECT * FROM audit_log WHERE user_id = '` + userId + `' AND action = '` + action + `'`
-    );
-  }
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: typescript
+// expected: SQL injection in NestJS service using raw pg query with string interpolation
+
+import { Injectable } from '@nestjs/common';
+import { InjectConnection } from '@nestjs/typeorm';
+import { Connection } from 'typeorm';
+
+@Injectable()
+export class ReportService {
+  constructor(@InjectConnection() private connection: Connection) {}
+
+  async getRevenueReport(fromDate: string, toDate: string, groupBy: string): Promise<any[]> {
+    const sql = `
+      SELECT
+        ${groupBy} as period,
+        SUM(amount) as total_revenue,
+        COUNT(*) as transaction_count
+      FROM transactions
+      WHERE created_at BETWEEN '${fromDate}' AND '${toDate}'
+      GROUP BY ${groupBy}
+      ORDER BY period ASC
+    `;
+    return this.connection.query(sql);
+  }
+
+  async getUserActivity(userId: string, action: string): Promise<any[]> {
+    return this.connection.query(
+      `SELECT * FROM audit_log WHERE user_id = '` + userId + `' AND action = '` + action + `'`
+    );
+  }
+}

package/dist/packages/crucible/seeds/ts/seed-013 2.ts

@@ -1,31 +1,31 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: high
-// language: typescript
-// expected: SQL injection via dynamic ORDER BY column name from user input
-
-import { Pool } from 'pg';
-
-const pool = new Pool({ connectionString: process.env.DATABASE_URL });
-
-interface ListOptions {
-  sortField: string;  // user-controlled
-  sortDir: 'asc' | 'desc';  // type claim but not validated
-  limit: number;
-  offset: number;
-  filter?: string;
-}
-
-export async function listProducts(opts: ListOptions) {
-  // sortField and sortDir inserted verbatim — type annotations don't prevent injection
-  const query = `
-    SELECT id, name, price, stock, created_at
-    FROM products
-    WHERE archived = false
-    ${opts.filter ? `AND name ILIKE '%${opts.filter}%'` : ''}
-    ORDER BY ${opts.sortField} ${opts.sortDir}
-    LIMIT ${opts.limit} OFFSET ${opts.offset}
-  `;
-  const { rows } = await pool.query(query);
-  return rows;
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: high
+// language: typescript
+// expected: SQL injection via dynamic ORDER BY column name from user input
+
+import { Pool } from 'pg';
+
+const pool = new Pool({ connectionString: process.env.DATABASE_URL });
+
+interface ListOptions {
+  sortField: string;  // user-controlled
+  sortDir: 'asc' | 'desc';  // type claim but not validated
+  limit: number;
+  offset: number;
+  filter?: string;
+}
+
+export async function listProducts(opts: ListOptions) {
+  // sortField and sortDir inserted verbatim — type annotations don't prevent injection
+  const query = `
+    SELECT id, name, price, stock, created_at
+    FROM products
+    WHERE archived = false
+    ${opts.filter ? `AND name ILIKE '%${opts.filter}%'` : ''}
+    ORDER BY ${opts.sortField} ${opts.sortDir}
+    LIMIT ${opts.limit} OFFSET ${opts.offset}
+  `;
+  const { rows } = await pool.query(query);
+  return rows;
+}

package/dist/packages/crucible/seeds/ts/seed-013.ts

@@ -1,31 +1,31 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: high
-// language: typescript
-// expected: SQL injection via dynamic ORDER BY column name from user input
-
-import { Pool } from 'pg';
-
-const pool = new Pool({ connectionString: process.env.DATABASE_URL });
-
-interface ListOptions {
-  sortField: string;  // user-controlled
-  sortDir: 'asc' | 'desc';  // type claim but not validated
-  limit: number;
-  offset: number;
-  filter?: string;
-}
-
-export async function listProducts(opts: ListOptions) {
-  // sortField and sortDir inserted verbatim — type annotations don't prevent injection
-  const query = `
-    SELECT id, name, price, stock, created_at
-    FROM products
-    WHERE archived = false
-    ${opts.filter ? `AND name ILIKE '%${opts.filter}%'` : ''}
-    ORDER BY ${opts.sortField} ${opts.sortDir}
-    LIMIT ${opts.limit} OFFSET ${opts.offset}
-  `;
-  const { rows } = await pool.query(query);
-  return rows;
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: high
+// language: typescript
+// expected: SQL injection via dynamic ORDER BY column name from user input
+
+import { Pool } from 'pg';
+
+const pool = new Pool({ connectionString: process.env.DATABASE_URL });
+
+interface ListOptions {
+  sortField: string;  // user-controlled
+  sortDir: 'asc' | 'desc';  // type claim but not validated
+  limit: number;
+  offset: number;
+  filter?: string;
+}
+
+export async function listProducts(opts: ListOptions) {
+  // sortField and sortDir inserted verbatim — type annotations don't prevent injection
+  const query = `
+    SELECT id, name, price, stock, created_at
+    FROM products
+    WHERE archived = false
+    ${opts.filter ? `AND name ILIKE '%${opts.filter}%'` : ''}
+    ORDER BY ${opts.sortField} ${opts.sortDir}
+    LIMIT ${opts.limit} OFFSET ${opts.offset}
+  `;
+  const { rows } = await pool.query(query);
+  return rows;
+}

package/dist/packages/crucible/seeds/ts/seed-014 2.ts

@@ -1,36 +1,36 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: typescript
-// expected: SQL injection in authentication middleware via raw query with login credentials
-
-import { Request, Response, NextFunction } from 'express';
-import { Pool } from 'pg';
-
-const pool = new Pool({ connectionString: process.env.DATABASE_URL });
-
-export async function authenticateMiddleware(
-  req: Request,
-  res: Response,
-  next: NextFunction
-): Promise<void> {
-  const { username, password } = req.body as { username: string; password: string };
-
-  // Classic auth bypass: username = "admin'--"
-  const query = `
-    SELECT id, username, role, email
-    FROM users
-    WHERE username = '${username}'
-    AND password_hash = crypt('${password}', password_hash)
-    AND active = true
-  `;
-
-  const { rows } = await pool.query(query);
-  if (!rows.length) {
-    res.status(401).json({ error: 'Invalid credentials' });
-    return;
-  }
-
-  req.user = rows[0];
-  next();
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: typescript
+// expected: SQL injection in authentication middleware via raw query with login credentials
+
+import { Request, Response, NextFunction } from 'express';
+import { Pool } from 'pg';
+
+const pool = new Pool({ connectionString: process.env.DATABASE_URL });
+
+export async function authenticateMiddleware(
+  req: Request,
+  res: Response,
+  next: NextFunction
+): Promise<void> {
+  const { username, password } = req.body as { username: string; password: string };
+
+  // Classic auth bypass: username = "admin'--"
+  const query = `
+    SELECT id, username, role, email
+    FROM users
+    WHERE username = '${username}'
+    AND password_hash = crypt('${password}', password_hash)
+    AND active = true
+  `;
+
+  const { rows } = await pool.query(query);
+  if (!rows.length) {
+    res.status(401).json({ error: 'Invalid credentials' });
+    return;
+  }
+
+  req.user = rows[0];
+  next();
+}

package/dist/packages/crucible/seeds/ts/seed-014.ts

@@ -1,36 +1,36 @@
-// [CRUCIBLE-SEED]
-// category: sql_injection
-// severity: critical
-// language: typescript
-// expected: SQL injection in authentication middleware via raw query with login credentials
-
-import { Request, Response, NextFunction } from 'express';
-import { Pool } from 'pg';
-
-const pool = new Pool({ connectionString: process.env.DATABASE_URL });
-
-export async function authenticateMiddleware(
-  req: Request,
-  res: Response,
-  next: NextFunction
-): Promise<void> {
-  const { username, password } = req.body as { username: string; password: string };
-
-  // Classic auth bypass: username = "admin'--"
-  const query = `
-    SELECT id, username, role, email
-    FROM users
-    WHERE username = '${username}'
-    AND password_hash = crypt('${password}', password_hash)
-    AND active = true
-  `;
-
-  const { rows } = await pool.query(query);
-  if (!rows.length) {
-    res.status(401).json({ error: 'Invalid credentials' });
-    return;
-  }
-
-  req.user = rows[0];
-  next();
-}
+// [CRUCIBLE-SEED]
+// category: sql_injection
+// severity: critical
+// language: typescript
+// expected: SQL injection in authentication middleware via raw query with login credentials
+
+import { Request, Response, NextFunction } from 'express';
+import { Pool } from 'pg';
+
+const pool = new Pool({ connectionString: process.env.DATABASE_URL });
+
+export async function authenticateMiddleware(
+  req: Request,
+  res: Response,
+  next: NextFunction
+): Promise<void> {
+  const { username, password } = req.body as { username: string; password: string };
+
+  // Classic auth bypass: username = "admin'--"
+  const query = `
+    SELECT id, username, role, email
+    FROM users
+    WHERE username = '${username}'
+    AND password_hash = crypt('${password}', password_hash)
+    AND active = true
+  `;
+
+  const { rows } = await pool.query(query);
+  if (!rows.length) {
+    res.status(401).json({ error: 'Invalid credentials' });
+    return;
+  }
+
+  req.user = rows[0];
+  next();
+}