vaspera 2.13.0 → 2.15.0

package/dist/compliance/nist-ai-rmf.d.ts

@@ -0,0 +1,20 @@
+/**
+ * NIST AI Risk Management Framework (AI RMF 1.0) + Generative AI Profile
+ *
+ * The four functions — GOVERN, MAP, MEASURE, MANAGE — and their key
+ * subcategories, mapped to the platform's finding categories. US-friendly
+ * and becoming the de facto AI governance baseline.
+ *
+ * @module compliance/nist-ai-rmf
+ */
+import type { ComplianceControl } from "./types.js";
+/**
+ * NIST AI RMF controls (representative subcategories relevant to
+ * certifying AI systems and AI-generated code).
+ */
+export declare const NIST_AI_RMF_CONTROLS: ComplianceControl[];
+/** Get all NIST AI RMF controls. */
+export declare function getNISTAIRMFControls(): ComplianceControl[];
+/** Get NIST AI RMF controls for a given function (GOVERN/MAP/MEASURE/MANAGE). */
+export declare function getNISTAIRMFControlsByFunction(fn: string): ComplianceControl[];
+//# sourceMappingURL=nist-ai-rmf.d.ts.map

package/dist/compliance/nist-ai-rmf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nist-ai-rmf.d.ts","sourceRoot":"","sources":["../../src/compliance/nist-ai-rmf.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EAmInD,CAAC;AAEF,oCAAoC;AACpC,wBAAgB,oBAAoB,IAAI,iBAAiB,EAAE,CAE1D;AAED,iFAAiF;AACjF,wBAAgB,8BAA8B,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAE9E"}

package/dist/compliance/nist-ai-rmf.js

@@ -0,0 +1,140 @@
+/**
+ * NIST AI Risk Management Framework (AI RMF 1.0) + Generative AI Profile
+ *
+ * The four functions — GOVERN, MAP, MEASURE, MANAGE — and their key
+ * subcategories, mapped to the platform's finding categories. US-friendly
+ * and becoming the de facto AI governance baseline.
+ *
+ * @module compliance/nist-ai-rmf
+ */
+/**
+ * NIST AI RMF controls (representative subcategories relevant to
+ * certifying AI systems and AI-generated code).
+ */
+export const NIST_AI_RMF_CONTROLS = [
+    // GOVERN — policies, accountability, culture
+    {
+        id: "GOVERN-1.1",
+        framework: "NIST-AI-RMF",
+        category: "GOVERN",
+        title: "Legal and policy requirements are understood and managed",
+        description: "Policies, processes, and practices for AI risk management are in place, transparent, and implemented.",
+        keywords: ["policy", "governance", "accountability", "compliance"],
+        findingCategories: ["security-misconfiguration"],
+        severityThreshold: "low",
+    },
+    {
+        id: "GOVERN-1.5",
+        framework: "NIST-AI-RMF",
+        category: "GOVERN",
+        title: "Ongoing monitoring and periodic review are planned",
+        description: "Mechanisms exist to monitor AI systems and detect drift in tools, models, and agent behavior over time.",
+        keywords: ["monitoring", "review", "drift", "ongoing"],
+        findingCategories: ["tool-drift", "manifest-drift"],
+        severityThreshold: "medium",
+    },
+    {
+        id: "GOVERN-6.1",
+        framework: "NIST-AI-RMF",
+        category: "GOVERN",
+        title: "Third-party risks are managed",
+        description: "Risks associated with third-party models, datasets, tools, and software (including MCP servers) are identified and managed.",
+        keywords: ["third party", "supply chain", "vendor", "external"],
+        findingCategories: ["supply-chain-vuln", "unsigned-change"],
+        severityThreshold: "medium",
+    },
+    // MAP — context and risk identification
+    {
+        id: "MAP-1.1",
+        framework: "NIST-AI-RMF",
+        category: "MAP",
+        title: "Intended purpose and context are established",
+        description: "The AI system's intended purpose, scope, and operating context — including the bounds of agent autonomy — are documented.",
+        keywords: ["intended use", "context", "scope", "autonomy"],
+        findingCategories: ["excessive-agency", "overreliance"],
+        severityThreshold: "medium",
+    },
+    {
+        id: "MAP-5.1",
+        framework: "NIST-AI-RMF",
+        category: "MAP",
+        title: "Impacts to individuals and society are characterized",
+        description: "Likelihood and magnitude of impacts, including privacy and data-exposure harms, are identified.",
+        keywords: ["impact", "privacy", "harm", "exposure"],
+        findingCategories: ["pii-exposure", "sensitive-disclosure"],
+        severityThreshold: "medium",
+    },
+    // MEASURE — trustworthiness characteristics
+    {
+        id: "MEASURE-2.6",
+        framework: "NIST-AI-RMF",
+        category: "MEASURE",
+        title: "AI system is evaluated for safety and security/resilience",
+        description: "The AI system is tested for resistance to adversarial manipulation, including prompt injection and insecure output handling.",
+        keywords: ["security", "resilience", "adversarial", "prompt injection", "robustness"],
+        findingCategories: ["prompt-injection", "insecure-output", "model-denial-of-service"],
+        cweIds: ["CWE-77", "CWE-94"],
+        severityThreshold: "high",
+    },
+    {
+        id: "MEASURE-2.7",
+        framework: "NIST-AI-RMF",
+        category: "MEASURE",
+        title: "AI system security and data exfiltration risks are assessed",
+        description: "Paths by which secrets or sensitive data could be exfiltrated through the AI system are assessed and mitigated.",
+        keywords: ["exfiltration", "data leak", "secret", "credential"],
+        findingCategories: ["exfil-path", "hardcoded-secret", "credential-overscoped"],
+        severityThreshold: "high",
+    },
+    {
+        id: "MEASURE-2.9",
+        framework: "NIST-AI-RMF",
+        category: "MEASURE",
+        title: "AI model is explainable and decisions are traceable",
+        description: "Mechanisms exist to trace and explain AI system decisions, supported by tamper-evident records.",
+        keywords: ["explainability", "traceability", "provenance", "audit"],
+        findingCategories: ["unsigned-change", "consensus-manipulation"],
+        severityThreshold: "medium",
+    },
+    {
+        id: "MEASURE-2.10",
+        framework: "NIST-AI-RMF",
+        category: "MEASURE",
+        title: "Privacy risk is assessed",
+        description: "Privacy risks, including exposure of personal data through model inputs or outputs, are measured.",
+        keywords: ["privacy", "pii", "personal data"],
+        findingCategories: ["pii-exposure"],
+        severityThreshold: "high",
+    },
+    // MANAGE — risk treatment and response
+    {
+        id: "MANAGE-2.2",
+        framework: "NIST-AI-RMF",
+        category: "MANAGE",
+        title: "Mechanisms to mitigate identified risks are applied",
+        description: "Controls (least privilege, sandboxing, scoping) are applied to mitigate risks from agent tools and permissions.",
+        keywords: ["mitigation", "least privilege", "sandbox", "scope", "permission"],
+        findingCategories: ["overscoped-permission", "missing-sandbox", "excessive-agency"],
+        cweIds: ["CWE-250", "CWE-269"],
+        severityThreshold: "high",
+    },
+    {
+        id: "MANAGE-4.1",
+        framework: "NIST-AI-RMF",
+        category: "MANAGE",
+        title: "Post-deployment monitoring and incident response are in place",
+        description: "AI systems are monitored after deployment for emergent risks, with response mechanisms for detected issues.",
+        keywords: ["post-deployment", "incident response", "monitoring", "emergent"],
+        findingCategories: ["insecure-plugin", "model-theft"],
+        severityThreshold: "medium",
+    },
+];
+/** Get all NIST AI RMF controls. */
+export function getNISTAIRMFControls() {
+    return NIST_AI_RMF_CONTROLS;
+}
+/** Get NIST AI RMF controls for a given function (GOVERN/MAP/MEASURE/MANAGE). */
+export function getNISTAIRMFControlsByFunction(fn) {
+    return NIST_AI_RMF_CONTROLS.filter((c) => c.category === fn);
+}
+//# sourceMappingURL=nist-ai-rmf.js.map

package/dist/compliance/nist-ai-rmf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nist-ai-rmf.js","sourceRoot":"","sources":["../../src/compliance/nist-ai-rmf.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,6CAA6C;IAC7C;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,0DAA0D;QACjE,WAAW,EACT,uGAAuG;QACzG,QAAQ,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,CAAC;QAClE,iBAAiB,EAAE,CAAC,2BAA2B,CAAC;QAChD,iBAAiB,EAAE,KAAK;KACzB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,oDAAoD;QAC3D,WAAW,EACT,yGAAyG;QAC3G,QAAQ,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QACtD,iBAAiB,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;QACnD,iBAAiB,EAAE,QAAQ;KAC5B;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,6HAA6H;QAC/H,QAAQ,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC;QAC/D,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;QAC3D,iBAAiB,EAAE,QAAQ;KAC5B;IAED,wCAAwC;IACxC;QACE,EAAE,EAAE,SAAS;QACb,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,8CAA8C;QACrD,WAAW,EACT,2HAA2H;QAC7H,QAAQ,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;QAC1D,iBAAiB,EAAE,CAAC,kBAAkB,EAAE,cAAc,CAAC;QACvD,iBAAiB,EAAE,QAAQ;KAC5B;IACD;QACE,EAAE,EAAE,SAAS;QACb,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,sDAAsD;QAC7D,WAAW,EACT,iGAAiG;QACnG,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC;QACnD,iBAAiB,EAAE,CAAC,cAAc,EAAE,sBAAsB,CAAC;QAC3D,iBAAiB,EAAE,QAAQ;KAC5B;IAED,4CAA4C;IAC5C;QACE,EAAE,EAAE,aAAa;QACjB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,2DAA2D;QAClE,WAAW,EACT,8HAA8H;QAChI,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,CAAC;QACrF,iBAAiB,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,yBAAyB,CAAC;QACrF,MAAM,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5B,iBAAiB,EAAE,MAAM;KAC1B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,6DAA6D;QACpE,WAAW,EACT,iHAAiH;QACnH,QAAQ,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC;QAC/D,iBAAiB,EAAE,CAAC,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,CAAC;QAC9E,iBAAiB,EAAE,MAAM;KAC1B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,qDAAqD;QAC5D,WAAW,EACT,iGAAiG;QACnG,QAAQ,EAAE,CAAC,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,CAAC;QACnE,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;QAChE,iBAAiB,EAAE,QAAQ;KAC5B;IACD;QACE,EAAE,EAAE,cAAc;QAClB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,mGAAmG;QACrG,QAAQ,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,eAAe,CAAC;QAC7C,iBAAiB,EAAE,CAAC,cAAc,CAAC;QACnC,iBAAiB,EAAE,MAAM;KAC1B;IAED,uCAAuC;IACvC;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,qDAAqD;QAC5D,WAAW,EACT,iHAAiH;QACnH,QAAQ,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC;QAC7E,iBAAiB,EAAE,CAAC,uBAAuB,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;QACnF,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;QAC9B,iBAAiB,EAAE,MAAM;KAC1B;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,+DAA+D;QACtE,WAAW,EACT,6GAA6G;QAC/G,QAAQ,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAC;QAC5E,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,aAAa,CAAC;QACrD,iBAAiB,EAAE,QAAQ;KAC5B;CACF,CAAC;AAEF,oCAAoC;AACpC,MAAM,UAAU,oBAAoB;IAClC,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,8BAA8B,CAAC,EAAU;IACvD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;AAC/D,CAAC"}

package/dist/config/flags.d.ts

@@ -306,14 +306,14 @@ export declare const VasperaConfigSchema: z.ZodObject<{
         configs: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     }, "strip", z.ZodTypeAny, {
         configs: Record<string, Record<string, unknown>>;
+        sandbox: boolean;
         loadLocal: boolean;
         loadNpm: boolean;
-        sandbox: boolean;
     }, {
         configs?: Record<string, Record<string, unknown>> | undefined;
+        sandbox?: boolean | undefined;
         loadLocal?: boolean | undefined;
         loadNpm?: boolean | undefined;
-        sandbox?: boolean | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
     version: 1;
@@ -332,9 +332,9 @@ export declare const VasperaConfigSchema: z.ZodObject<{
     }>;
     plugins: {
         configs: Record<string, Record<string, unknown>>;
+        sandbox: boolean;
         loadLocal: boolean;
         loadNpm: boolean;
-        sandbox: boolean;
     };
     cost: {
         warningThreshold: number;
@@ -380,9 +380,9 @@ export declare const VasperaConfigSchema: z.ZodObject<{
     }> | undefined;
     plugins?: {
         configs?: Record<string, Record<string, unknown>> | undefined;
+        sandbox?: boolean | undefined;
         loadLocal?: boolean | undefined;
         loadNpm?: boolean | undefined;
-        sandbox?: boolean | undefined;
     } | undefined;
     cost?: {
         maxBudget?: number | undefined;

package/dist/eval/fixtures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../src/eval/fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,EA0F7C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,EA2GpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,EAmGxC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,EA+F3C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,WAAW,EA6CrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,EAyD9C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,EA4EjD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,WAAW,EAsFrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,EA6CpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,+BAA+B,EAAE,WAAW,EA0FxD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,WAAW,EA4G1C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,WAAW,EAYrC,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE,CAErE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAE3D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAElE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;CACvB,CAcA"}
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../src/eval/fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,EAgG7C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,EA+HpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,EAmGxC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,EA+F3C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,WAAW,EA6CrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,EA4D9C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,EAmFjD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,WAAW,EA4FrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,EA6CpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,+BAA+B,EAAE,WAAW,EA0FxD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,WAAW,EA4G1C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,WAAW,EAYrC,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE,CAErE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAE3D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAElE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;CACvB,CAcA"}

package/dist/eval/fixtures.js

@@ -21,31 +21,33 @@ export const sqlInjectionFixtures = [
                 path: "db.ts",
                 language: "typescript",
                 content: `import { Pool } from 'pg';
+import express from 'express';
 
 const pool = new Pool();
+const app = express();
 
-// VULNERABLE: SQL injection via string concatenation
-export async function getUserByName(name: string) {
+// VULNERABLE: request input concatenated into a SQL query
+app.get('/users', (req, res) => {
+  const name = req.query.name;
   const query = "SELECT * FROM users WHERE name = '" + name + "'";
-  return pool.query(query);
-}
+  pool.query(query).then((r) => res.json(r.rows));
+});
 
-// SAFE: Parameterized query
-export async function getUserById(id: number) {
-  const query = "SELECT * FROM users WHERE id = $1";
-  return pool.query(query, [id]);
-}
+// SAFE: parameterized query
+app.get('/user', (req, res) => {
+  pool.query("SELECT * FROM users WHERE id = $1", [req.query.id]);
+});
 `,
             },
         ],
         expectedFindings: [
             {
                 file: "db.ts",
-                line: 7,
+                line: 12,
                 severity: "critical",
                 category: "sql-injection",
                 cweId: "CWE-89",
-                description: "SQL injection via string concatenation",
+                description: "SQL injection via string concatenation of request input",
                 isVulnerable: true,
             },
         ],
@@ -62,25 +64,29 @@ export async function getUserById(id: number) {
                 path: "search.ts",
                 language: "typescript",
                 content: `import { db } from './connection';
+import express from 'express';
+
+const app = express();
 
-// VULNERABLE: Template literal injection
-export async function searchProducts(term: string) {
+// VULNERABLE: template-literal injection from request input
+app.get('/search', (req, res) => {
+  const term = req.query.term;
   const sql = \`SELECT * FROM products WHERE name LIKE '%\${term}%'\`;
-  return db.query(sql);
-}
+  db.query(sql).then((r) => res.json(r));
+});
 
-// VULNERABLE: Dynamic ORDER BY
-export async function listUsers(sortBy: string) {
-  const sql = \`SELECT * FROM users ORDER BY \${sortBy}\`;
-  return db.query(sql);
-}
+// VULNERABLE: dynamic ORDER BY from request input
+app.get('/list', (req, res) => {
+  const sql = \`SELECT * FROM users ORDER BY \${req.query.sortBy}\`;
+  db.query(sql);
+});
 `,
             },
         ],
         expectedFindings: [
             {
                 file: "search.ts",
-                line: 5,
+                line: 9,
                 severity: "critical",
                 category: "sql-injection",
                 cweId: "CWE-89",
@@ -89,7 +95,7 @@ export async function listUsers(sortBy: string) {
             },
             {
                 file: "search.ts",
-                line: 11,
+                line: 15,
                 severity: "high",
                 category: "sql-injection",
                 cweId: "CWE-89",
@@ -165,46 +171,66 @@ export function SafeProfile({ bio }: Props) {
             {
                 path: "comment.ts",
                 language: "typescript",
-                content: `// VULNERABLE: innerHTML with user input
-export function renderComment(userComment: string) {
-  const container = document.getElementById('comments');
-  if (container) {
-    container.innerHTML = userComment;
-  }
-}
+                content: `import express from 'express';
 
-// VULNERABLE: document.write
-export function writeMessage(message: string) {
-  document.write('<div>' + message + '</div>');
-}
+const app = express();
 
-// SAFE: textContent
-export function renderSafeComment(userComment: string) {
-  const container = document.getElementById('comments');
-  if (container) {
-    container.textContent = userComment;
-  }
-}
+// VULNERABLE: Reflected XSS via res.send with unescaped req.query
+app.get('/comment', (req, res) => {
+  const userComment = req.query.text;
+  res.send('<div>' + userComment + '</div>');
+});
+
+// VULNERABLE: Reflected XSS via res.write with unescaped req.query
+app.get('/message', (req, res) => {
+  const message = req.query.msg;
+  res.write('<div>' + message + '</div>');
+  res.end();
+});
+
+// SAFE: JSON response, not HTML
+app.get('/safe-comment', (req, res) => {
+  const userComment = req.query.text;
+  res.json({ comment: userComment });
+});
 `,
             },
         ],
         expectedFindings: [
             {
                 file: "comment.ts",
-                line: 5,
+                line: 8,
                 severity: "high",
                 category: "xss",
                 cweId: "CWE-79",
-                description: "XSS via innerHTML",
+                description: "Reflected XSS via res.send with unescaped request input",
                 isVulnerable: true,
             },
             {
                 file: "comment.ts",
-                line: 11,
+                line: 8,
+                severity: "high",
+                category: "xss",
+                cweId: "CWE-79",
+                description: "Reflected XSS: unsanitized request input written to HTTP response",
+                isVulnerable: true,
+            },
+            {
+                file: "comment.ts",
+                line: 14,
+                severity: "high",
+                category: "xss",
+                cweId: "CWE-79",
+                description: "Reflected XSS via res.write with unescaped request input",
+                isVulnerable: true,
+            },
+            {
+                file: "comment.ts",
+                line: 14,
                 severity: "high",
                 category: "xss",
                 cweId: "CWE-79",
-                description: "XSS via document.write",
+                description: "Reflected XSS: unsanitized request input streamed to HTTP response",
                 isVulnerable: true,
             },
         ],
@@ -477,46 +503,49 @@ export const pathTraversalFixtures = [
                 path: "files.ts",
                 language: "typescript",
                 content: `import { readFile } from 'fs/promises';
+import { createReadStream } from 'fs';
 import { join } from 'path';
+import express from 'express';
+
+const app = express();
 
 // VULNERABLE: Direct user input in path
-export async function getFile(filename: string) {
-  const content = await readFile(filename, 'utf-8');
-  return content;
-}
+app.get('/file', (req, res) => {
+  const filename = req.query.name as string;
+  readFile(filename, 'utf-8').then((content) => res.send(content));
+});
 
-// VULNERABLE: Path traversal possible
-export async function getDocument(docName: string) {
-  const path = './documents/' + docName;
-  return readFile(path, 'utf-8');
-}
+// VULNERABLE: Path traversal via join with user input
+app.get('/document', (req, res) => {
+  const docName = req.query.doc as string;
+  const filePath = join('./documents', docName);
+  createReadStream(filePath).pipe(res);
+});
 
-// SAFE: Basename extraction and validation
-export async function getFileSecure(filename: string) {
-  const basename = require('path').basename(filename);
-  const safePath = join('./uploads', basename);
-  return readFile(safePath, 'utf-8');
-}
+// SAFE: Fixed allowlist of known files, no user input in path
+const ALLOWED_FILES: Record<string, string> = {
+  readme: './uploads/readme.txt',
+  license: './uploads/license.txt',
+};
+app.get('/upload', (req, res) => {
+  const key = req.query.name as string;
+  const safePath = ALLOWED_FILES[key];
+  if (!safePath) {
+    return res.status(404).send('Not found');
+  }
+  readFile(safePath, 'utf-8').then((content) => res.send(content));
+});
 `,
             },
         ],
         expectedFindings: [
             {
                 file: "files.ts",
-                line: 6,
-                severity: "high",
-                category: "path-traversal",
-                cweId: "CWE-22",
-                description: "Path traversal via direct user input",
-                isVulnerable: true,
-            },
-            {
-                file: "files.ts",
-                line: 12,
+                line: 17,
                 severity: "high",
                 category: "path-traversal",
                 cweId: "CWE-22",
-                description: "Path traversal via string concatenation",
+                description: "Path traversal via path.join with unvalidated request input",
                 isVulnerable: true,
             },
         ],
@@ -537,25 +566,28 @@ export const commandInjectionFixtures = [
             {
                 path: "utils/git.ts",
                 language: "typescript",
-                content: `import { exec } from 'child_process';
+                content: `import { exec, spawn } from 'child_process';
+import express from 'express';
 
-// VULNERABLE: User input directly in exec
-export function cloneRepo(repoUrl: string) {
-  exec(\`git clone \${repoUrl}\`);
-}
+const app = express();
 
-// SAFE: Array-based spawn
-import { spawn } from 'child_process';
-export function cloneRepoSafe(repoUrl: string) {
-  spawn('git', ['clone', repoUrl]);
-}
+// VULNERABLE: request input concatenated into a shell command
+app.get('/clone', (req, res) => {
+  const repoUrl = req.query.repo;
+  exec(\`git clone \${repoUrl}\`, (err) => res.sendStatus(err ? 500 : 200));
+});
+
+// SAFE: array-based spawn, no shell interpolation
+app.get('/clone-safe', (req, res) => {
+  spawn('git', ['clone', String(req.query.repo)]);
+});
 `,
             },
         ],
         expectedFindings: [
             {
                 file: "utils/git.ts",
-                line: 5,
+                line: 8,
                 severity: "critical",
                 category: "command-injection",
                 cweId: "CWE-78",
@@ -567,36 +599,40 @@ export function cloneRepoSafe(repoUrl: string) {
     },
     {
         id: "cmd-002",
-        name: "spawn with shell:true",
-        description: "Command injection via spawn with shell option enabled",
+        name: "exec with request input",
+        description: "Command injection via child_process.exec with request input",
         category: "command-injection",
         source: "custom",
         files: [
             {
                 path: "services/deploy.ts",
                 language: "typescript",
-                content: `import { spawn } from 'child_process';
+                content: `import { exec } from 'child_process';
+import express from 'express';
 
-// VULNERABLE: shell: true with user input
-export function runScript(scriptName: string) {
-  spawn(\`./scripts/\${scriptName}.sh\`, { shell: true });
-}
+const app = express();
 
-// SAFE: No shell option
-export function runScriptSafe(scriptName: string) {
-  spawn('./scripts/run.sh', [scriptName]);
-}
+// VULNERABLE: request input flows into exec
+app.post('/run', (req, res) => {
+  const scriptName = req.body.script;
+  exec('./scripts/' + scriptName + '.sh', (err) => res.sendStatus(err ? 500 : 200));
+});
+
+// SAFE: fixed command
+app.post('/run-safe', (_req, res) => {
+  exec('./scripts/run.sh', () => res.sendStatus(200));
+});
 `,
             },
         ],
         expectedFindings: [
             {
                 file: "services/deploy.ts",
-                line: 5,
+                line: 9,
                 severity: "critical",
                 category: "command-injection",
                 cweId: "CWE-78",
-                description: "shell: true enables command injection",
+                description: "Command injection via request input in exec",
                 isVulnerable: true,
             },
         ],
@@ -617,28 +653,32 @@ export const ssrfFixtures = [
             {
                 path: "api/proxy.ts",
                 language: "typescript",
-                content: `// VULNERABLE: Direct user URL in fetch
-export async function proxyRequest(url: string) {
-  const response = await fetch(url);
-  return response.json();
-}
+                content: `import express from 'express';
+
+const app = express();
+
+// VULNERABLE: request-controlled URL passed straight to fetch
+app.get('/proxy', async (req, res) => {
+  const response = await fetch(req.query.url);
+  res.json(await response.json());
+});
 
 // SAFE: URL allowlist
 const ALLOWED_HOSTS = ['api.example.com', 'cdn.example.com'];
-export async function proxyRequestSafe(url: string) {
-  const parsed = new URL(url);
+app.get('/proxy-safe', async (req, res) => {
+  const parsed = new URL(String(req.query.url));
   if (!ALLOWED_HOSTS.includes(parsed.host)) {
-    throw new Error('Host not allowed');
+    return res.status(400).end();
   }
-  return fetch(url);
-}
+  res.json(await (await fetch('https://api.example.com')).json());
+});
 `,
             },
         ],
         expectedFindings: [
             {
                 file: "api/proxy.ts",
-                line: 3,
+                line: 7,
                 severity: "high",
                 category: "ssrf",
                 cweId: "CWE-918",
@@ -659,30 +699,32 @@ export async function proxyRequestSafe(url: string) {
                 path: "services/webhook.ts",
                 language: "typescript",
                 content: `import axios from 'axios';
+import express from 'express';
 
-// VULNERABLE: Following redirects to internal networks
-export async function callWebhook(webhookUrl: string, payload: object) {
-  const response = await axios.post(webhookUrl, payload, {
-    maxRedirects: 5, // Can redirect to internal networks
-  });
-  return response.data;
-}
+const app = express();
 
-// SAFE: Validate URL and disable redirects
-export async function callWebhookSafe(webhookUrl: string, payload: object) {
-  const url = new URL(webhookUrl);
+// VULNERABLE: request-controlled webhook URL
+app.post('/webhook', async (req, res) => {
+  const webhookUrl = req.body.url;
+  const response = await axios.post(webhookUrl, req.body.payload);
+  res.json(response.data);
+});
+
+// SAFE: validate URL against internal ranges first
+app.post('/webhook-safe', async (req, res) => {
+  const url = new URL(String(req.body.url));
   if (url.hostname === 'localhost' || url.hostname.startsWith('192.168.')) {
-    throw new Error('Internal URLs not allowed');
+    return res.status(400).end();
   }
-  return axios.post(webhookUrl, payload, { maxRedirects: 0 });
-}
+  res.json((await axios.post('https://hooks.example.com', req.body.payload)).data);
+});
 `,
             },
         ],
         expectedFindings: [
             {
                 file: "services/webhook.ts",
-                line: 5,
+                line: 9,
                 severity: "high",
                 category: "ssrf",
                 cweId: "CWE-918",