vaspera 2.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (712) hide show
  1. package/CHANGELOG.md +184 -0
  2. package/LICENSE +21 -0
  3. package/README.md +809 -0
  4. package/dist/__tests__/integration/certification-flow.test.d.ts +5 -0
  5. package/dist/__tests__/integration/certification-flow.test.d.ts.map +1 -0
  6. package/dist/__tests__/integration/certification-flow.test.js +245 -0
  7. package/dist/__tests__/integration/certification-flow.test.js.map +1 -0
  8. package/dist/__tests__/integration/commands.test.d.ts +5 -0
  9. package/dist/__tests__/integration/commands.test.d.ts.map +1 -0
  10. package/dist/__tests__/integration/commands.test.js +93 -0
  11. package/dist/__tests__/integration/commands.test.js.map +1 -0
  12. package/dist/action/diff-mode.d.ts +34 -0
  13. package/dist/action/diff-mode.d.ts.map +1 -0
  14. package/dist/action/diff-mode.js +201 -0
  15. package/dist/action/diff-mode.js.map +1 -0
  16. package/dist/action/diff-mode.test.d.ts +5 -0
  17. package/dist/action/diff-mode.test.d.ts.map +1 -0
  18. package/dist/action/diff-mode.test.js +162 -0
  19. package/dist/action/diff-mode.test.js.map +1 -0
  20. package/dist/action/index.d.ts +10 -0
  21. package/dist/action/index.d.ts.map +1 -0
  22. package/dist/action/index.js +231 -0
  23. package/dist/action/index.js.map +1 -0
  24. package/dist/action/pr-comment.d.ts +30 -0
  25. package/dist/action/pr-comment.d.ts.map +1 -0
  26. package/dist/action/pr-comment.js +301 -0
  27. package/dist/action/pr-comment.js.map +1 -0
  28. package/dist/action/pr-comment.test.d.ts +5 -0
  29. package/dist/action/pr-comment.test.d.ts.map +1 -0
  30. package/dist/action/pr-comment.test.js +189 -0
  31. package/dist/action/pr-comment.test.js.map +1 -0
  32. package/dist/action/sarif-upload.d.ts +104 -0
  33. package/dist/action/sarif-upload.d.ts.map +1 -0
  34. package/dist/action/sarif-upload.js +188 -0
  35. package/dist/action/sarif-upload.js.map +1 -0
  36. package/dist/action/sarif-upload.test.d.ts +5 -0
  37. package/dist/action/sarif-upload.test.d.ts.map +1 -0
  38. package/dist/action/sarif-upload.test.js +206 -0
  39. package/dist/action/sarif-upload.test.js.map +1 -0
  40. package/dist/action/types.d.ts +104 -0
  41. package/dist/action/types.d.ts.map +1 -0
  42. package/dist/action/types.js +33 -0
  43. package/dist/action/types.js.map +1 -0
  44. package/dist/action/types.test.d.ts +5 -0
  45. package/dist/action/types.test.d.ts.map +1 -0
  46. package/dist/action/types.test.js +79 -0
  47. package/dist/action/types.test.js.map +1 -0
  48. package/dist/agents/agent-integrity.d.ts +111 -0
  49. package/dist/agents/agent-integrity.d.ts.map +1 -0
  50. package/dist/agents/agent-integrity.js +308 -0
  51. package/dist/agents/agent-integrity.js.map +1 -0
  52. package/dist/agents/agent-privacy.d.ts +68 -0
  53. package/dist/agents/agent-privacy.d.ts.map +1 -0
  54. package/dist/agents/agent-privacy.js +345 -0
  55. package/dist/agents/agent-privacy.js.map +1 -0
  56. package/dist/agents/exploit-chain.d.ts +64 -0
  57. package/dist/agents/exploit-chain.d.ts.map +1 -0
  58. package/dist/agents/exploit-chain.js +477 -0
  59. package/dist/agents/exploit-chain.js.map +1 -0
  60. package/dist/agents/exploit-chain.test.d.ts +5 -0
  61. package/dist/agents/exploit-chain.test.d.ts.map +1 -0
  62. package/dist/agents/exploit-chain.test.js +455 -0
  63. package/dist/agents/exploit-chain.test.js.map +1 -0
  64. package/dist/agents/index.d.ts +14 -0
  65. package/dist/agents/index.d.ts.map +1 -0
  66. package/dist/agents/index.js +19 -0
  67. package/dist/agents/index.js.map +1 -0
  68. package/dist/agents/logic-flaw-detector.d.ts +55 -0
  69. package/dist/agents/logic-flaw-detector.d.ts.map +1 -0
  70. package/dist/agents/logic-flaw-detector.js +454 -0
  71. package/dist/agents/logic-flaw-detector.js.map +1 -0
  72. package/dist/agents/zero-day-hunter.d.ts +69 -0
  73. package/dist/agents/zero-day-hunter.d.ts.map +1 -0
  74. package/dist/agents/zero-day-hunter.js +591 -0
  75. package/dist/agents/zero-day-hunter.js.map +1 -0
  76. package/dist/certification/artifacts.d.ts +21 -0
  77. package/dist/certification/artifacts.d.ts.map +1 -0
  78. package/dist/certification/artifacts.js +275 -0
  79. package/dist/certification/artifacts.js.map +1 -0
  80. package/dist/certification/autofix.d.ts +122 -0
  81. package/dist/certification/autofix.d.ts.map +1 -0
  82. package/dist/certification/autofix.js +476 -0
  83. package/dist/certification/autofix.js.map +1 -0
  84. package/dist/certification/badge.d.ts +56 -0
  85. package/dist/certification/badge.d.ts.map +1 -0
  86. package/dist/certification/badge.js +155 -0
  87. package/dist/certification/badge.js.map +1 -0
  88. package/dist/certification/cache.d.ts +121 -0
  89. package/dist/certification/cache.d.ts.map +1 -0
  90. package/dist/certification/cache.js +275 -0
  91. package/dist/certification/cache.js.map +1 -0
  92. package/dist/certification/cache.test.d.ts +5 -0
  93. package/dist/certification/cache.test.d.ts.map +1 -0
  94. package/dist/certification/cache.test.js +270 -0
  95. package/dist/certification/cache.test.js.map +1 -0
  96. package/dist/certification/consensus.d.ts +105 -0
  97. package/dist/certification/consensus.d.ts.map +1 -0
  98. package/dist/certification/consensus.js +353 -0
  99. package/dist/certification/consensus.js.map +1 -0
  100. package/dist/certification/consensus.test.d.ts +5 -0
  101. package/dist/certification/consensus.test.d.ts.map +1 -0
  102. package/dist/certification/consensus.test.js +342 -0
  103. package/dist/certification/consensus.test.js.map +1 -0
  104. package/dist/certification/index.d.ts +14 -0
  105. package/dist/certification/index.d.ts.map +1 -0
  106. package/dist/certification/index.js +14 -0
  107. package/dist/certification/index.js.map +1 -0
  108. package/dist/certification/rules.d.ts +89 -0
  109. package/dist/certification/rules.d.ts.map +1 -0
  110. package/dist/certification/rules.js +317 -0
  111. package/dist/certification/rules.js.map +1 -0
  112. package/dist/certification/sarif.d.ts +107 -0
  113. package/dist/certification/sarif.d.ts.map +1 -0
  114. package/dist/certification/sarif.js +191 -0
  115. package/dist/certification/sarif.js.map +1 -0
  116. package/dist/certification/store.d.ts +255 -0
  117. package/dist/certification/store.d.ts.map +1 -0
  118. package/dist/certification/store.js +835 -0
  119. package/dist/certification/store.js.map +1 -0
  120. package/dist/certification/store.test.d.ts +5 -0
  121. package/dist/certification/store.test.d.ts.map +1 -0
  122. package/dist/certification/store.test.js +468 -0
  123. package/dist/certification/store.test.js.map +1 -0
  124. package/dist/certification/summary.d.ts +72 -0
  125. package/dist/certification/summary.d.ts.map +1 -0
  126. package/dist/certification/summary.js +296 -0
  127. package/dist/certification/summary.js.map +1 -0
  128. package/dist/certification/types.d.ts +138 -0
  129. package/dist/certification/types.d.ts.map +1 -0
  130. package/dist/certification/types.js +34 -0
  131. package/dist/certification/types.js.map +1 -0
  132. package/dist/commands/audits/api-check.d.ts +3 -0
  133. package/dist/commands/audits/api-check.d.ts.map +1 -0
  134. package/dist/commands/audits/api-check.js +71 -0
  135. package/dist/commands/audits/api-check.js.map +1 -0
  136. package/dist/commands/audits/deadcode.d.ts +3 -0
  137. package/dist/commands/audits/deadcode.d.ts.map +1 -0
  138. package/dist/commands/audits/deadcode.js +63 -0
  139. package/dist/commands/audits/deadcode.js.map +1 -0
  140. package/dist/commands/audits/deps.d.ts +3 -0
  141. package/dist/commands/audits/deps.d.ts.map +1 -0
  142. package/dist/commands/audits/deps.js +56 -0
  143. package/dist/commands/audits/deps.js.map +1 -0
  144. package/dist/commands/audits/errors.d.ts +3 -0
  145. package/dist/commands/audits/errors.d.ts.map +1 -0
  146. package/dist/commands/audits/errors.js +65 -0
  147. package/dist/commands/audits/errors.js.map +1 -0
  148. package/dist/commands/audits/index.d.ts +3 -0
  149. package/dist/commands/audits/index.d.ts.map +1 -0
  150. package/dist/commands/audits/index.js +15 -0
  151. package/dist/commands/audits/index.js.map +1 -0
  152. package/dist/commands/audits/perf.d.ts +3 -0
  153. package/dist/commands/audits/perf.d.ts.map +1 -0
  154. package/dist/commands/audits/perf.js +85 -0
  155. package/dist/commands/audits/perf.js.map +1 -0
  156. package/dist/commands/audits/secrets.d.ts +3 -0
  157. package/dist/commands/audits/secrets.d.ts.map +1 -0
  158. package/dist/commands/audits/secrets.js +71 -0
  159. package/dist/commands/audits/secrets.js.map +1 -0
  160. package/dist/commands/certification/certify.d.ts +3 -0
  161. package/dist/commands/certification/certify.d.ts.map +1 -0
  162. package/dist/commands/certification/certify.js +108 -0
  163. package/dist/commands/certification/certify.js.map +1 -0
  164. package/dist/commands/certification/index.d.ts +3 -0
  165. package/dist/commands/certification/index.d.ts.map +1 -0
  166. package/dist/commands/certification/index.js +17 -0
  167. package/dist/commands/certification/index.js.map +1 -0
  168. package/dist/commands/certification/performance.d.ts +3 -0
  169. package/dist/commands/certification/performance.d.ts.map +1 -0
  170. package/dist/commands/certification/performance.js +89 -0
  171. package/dist/commands/certification/performance.js.map +1 -0
  172. package/dist/commands/certification/quality.d.ts +3 -0
  173. package/dist/commands/certification/quality.d.ts.map +1 -0
  174. package/dist/commands/certification/quality.js +92 -0
  175. package/dist/commands/certification/quality.js.map +1 -0
  176. package/dist/commands/certification/redteam.d.ts +3 -0
  177. package/dist/commands/certification/redteam.d.ts.map +1 -0
  178. package/dist/commands/certification/redteam.js +114 -0
  179. package/dist/commands/certification/redteam.js.map +1 -0
  180. package/dist/commands/certification/reliability.d.ts +3 -0
  181. package/dist/commands/certification/reliability.d.ts.map +1 -0
  182. package/dist/commands/certification/reliability.js +93 -0
  183. package/dist/commands/certification/reliability.js.map +1 -0
  184. package/dist/commands/certification/security.d.ts +3 -0
  185. package/dist/commands/certification/security.d.ts.map +1 -0
  186. package/dist/commands/certification/security.js +90 -0
  187. package/dist/commands/certification/security.js.map +1 -0
  188. package/dist/commands/certification/typesafety.d.ts +3 -0
  189. package/dist/commands/certification/typesafety.d.ts.map +1 -0
  190. package/dist/commands/certification/typesafety.js +87 -0
  191. package/dist/commands/certification/typesafety.js.map +1 -0
  192. package/dist/commands/core/add-tests.d.ts +3 -0
  193. package/dist/commands/core/add-tests.d.ts.map +1 -0
  194. package/dist/commands/core/add-tests.js +29 -0
  195. package/dist/commands/core/add-tests.js.map +1 -0
  196. package/dist/commands/core/audit.d.ts +3 -0
  197. package/dist/commands/core/audit.d.ts.map +1 -0
  198. package/dist/commands/core/audit.js +64 -0
  199. package/dist/commands/core/audit.js.map +1 -0
  200. package/dist/commands/core/fix-critical.d.ts +3 -0
  201. package/dist/commands/core/fix-critical.d.ts.map +1 -0
  202. package/dist/commands/core/fix-critical.js +22 -0
  203. package/dist/commands/core/fix-critical.js.map +1 -0
  204. package/dist/commands/core/fix-high.d.ts +3 -0
  205. package/dist/commands/core/fix-high.d.ts.map +1 -0
  206. package/dist/commands/core/fix-high.js +32 -0
  207. package/dist/commands/core/fix-high.js.map +1 -0
  208. package/dist/commands/core/fix-medium.d.ts +3 -0
  209. package/dist/commands/core/fix-medium.d.ts.map +1 -0
  210. package/dist/commands/core/fix-medium.js +29 -0
  211. package/dist/commands/core/fix-medium.js.map +1 -0
  212. package/dist/commands/core/fix-rls.d.ts +3 -0
  213. package/dist/commands/core/fix-rls.d.ts.map +1 -0
  214. package/dist/commands/core/fix-rls.js +17 -0
  215. package/dist/commands/core/fix-rls.js.map +1 -0
  216. package/dist/commands/core/harden.d.ts +3 -0
  217. package/dist/commands/core/harden.d.ts.map +1 -0
  218. package/dist/commands/core/harden.js +19 -0
  219. package/dist/commands/core/harden.js.map +1 -0
  220. package/dist/commands/core/index.d.ts +3 -0
  221. package/dist/commands/core/index.d.ts.map +1 -0
  222. package/dist/commands/core/index.js +21 -0
  223. package/dist/commands/core/index.js.map +1 -0
  224. package/dist/commands/core/preflight.d.ts +3 -0
  225. package/dist/commands/core/preflight.d.ts.map +1 -0
  226. package/dist/commands/core/preflight.js +50 -0
  227. package/dist/commands/core/preflight.js.map +1 -0
  228. package/dist/commands/core/verify.d.ts +3 -0
  229. package/dist/commands/core/verify.d.ts.map +1 -0
  230. package/dist/commands/core/verify.js +32 -0
  231. package/dist/commands/core/verify.js.map +1 -0
  232. package/dist/commands/index.d.ts +28 -0
  233. package/dist/commands/index.d.ts.map +1 -0
  234. package/dist/commands/index.js +37 -0
  235. package/dist/commands/index.js.map +1 -0
  236. package/dist/commands/types.d.ts +9 -0
  237. package/dist/commands/types.d.ts.map +1 -0
  238. package/dist/commands/types.js +5 -0
  239. package/dist/commands/types.js.map +1 -0
  240. package/dist/compliance/cis.d.ts +29 -0
  241. package/dist/compliance/cis.d.ts.map +1 -0
  242. package/dist/compliance/cis.js +316 -0
  243. package/dist/compliance/cis.js.map +1 -0
  244. package/dist/compliance/frameworks/eu-ai-act.d.ts +55 -0
  245. package/dist/compliance/frameworks/eu-ai-act.d.ts.map +1 -0
  246. package/dist/compliance/frameworks/eu-ai-act.js +621 -0
  247. package/dist/compliance/frameworks/eu-ai-act.js.map +1 -0
  248. package/dist/compliance/frameworks/index.d.ts +67 -0
  249. package/dist/compliance/frameworks/index.d.ts.map +1 -0
  250. package/dist/compliance/frameworks/index.js +97 -0
  251. package/dist/compliance/frameworks/index.js.map +1 -0
  252. package/dist/compliance/frameworks/iso-42001.d.ts +59 -0
  253. package/dist/compliance/frameworks/iso-42001.d.ts.map +1 -0
  254. package/dist/compliance/frameworks/iso-42001.js +719 -0
  255. package/dist/compliance/frameworks/iso-42001.js.map +1 -0
  256. package/dist/compliance/frameworks/mitre-atlas.d.ts +58 -0
  257. package/dist/compliance/frameworks/mitre-atlas.d.ts.map +1 -0
  258. package/dist/compliance/frameworks/mitre-atlas.js +686 -0
  259. package/dist/compliance/frameworks/mitre-atlas.js.map +1 -0
  260. package/dist/compliance/frameworks/nist-ai-rmf.d.ts +51 -0
  261. package/dist/compliance/frameworks/nist-ai-rmf.d.ts.map +1 -0
  262. package/dist/compliance/frameworks/nist-ai-rmf.js +677 -0
  263. package/dist/compliance/frameworks/nist-ai-rmf.js.map +1 -0
  264. package/dist/compliance/frameworks/owasp-llm.d.ts +58 -0
  265. package/dist/compliance/frameworks/owasp-llm.d.ts.map +1 -0
  266. package/dist/compliance/frameworks/owasp-llm.js +399 -0
  267. package/dist/compliance/frameworks/owasp-llm.js.map +1 -0
  268. package/dist/compliance/gdpr.d.ts +34 -0
  269. package/dist/compliance/gdpr.d.ts.map +1 -0
  270. package/dist/compliance/gdpr.js +319 -0
  271. package/dist/compliance/gdpr.js.map +1 -0
  272. package/dist/compliance/hipaa.d.ts +29 -0
  273. package/dist/compliance/hipaa.d.ts.map +1 -0
  274. package/dist/compliance/hipaa.js +205 -0
  275. package/dist/compliance/hipaa.js.map +1 -0
  276. package/dist/compliance/index.d.ts +18 -0
  277. package/dist/compliance/index.d.ts.map +1 -0
  278. package/dist/compliance/index.js +26 -0
  279. package/dist/compliance/index.js.map +1 -0
  280. package/dist/compliance/iso27001.d.ts +30 -0
  281. package/dist/compliance/iso27001.d.ts.map +1 -0
  282. package/dist/compliance/iso27001.js +332 -0
  283. package/dist/compliance/iso27001.js.map +1 -0
  284. package/dist/compliance/mapper.d.ts +42 -0
  285. package/dist/compliance/mapper.d.ts.map +1 -0
  286. package/dist/compliance/mapper.js +269 -0
  287. package/dist/compliance/mapper.js.map +1 -0
  288. package/dist/compliance/mapper.test.d.ts +5 -0
  289. package/dist/compliance/mapper.test.d.ts.map +1 -0
  290. package/dist/compliance/mapper.test.js +360 -0
  291. package/dist/compliance/mapper.test.js.map +1 -0
  292. package/dist/compliance/pci-dss.d.ts +29 -0
  293. package/dist/compliance/pci-dss.d.ts.map +1 -0
  294. package/dist/compliance/pci-dss.js +247 -0
  295. package/dist/compliance/pci-dss.js.map +1 -0
  296. package/dist/compliance/report.d.ts +25 -0
  297. package/dist/compliance/report.d.ts.map +1 -0
  298. package/dist/compliance/report.js +254 -0
  299. package/dist/compliance/report.js.map +1 -0
  300. package/dist/compliance/report.test.d.ts +5 -0
  301. package/dist/compliance/report.test.d.ts.map +1 -0
  302. package/dist/compliance/report.test.js +128 -0
  303. package/dist/compliance/report.test.js.map +1 -0
  304. package/dist/compliance/soc2.d.ts +30 -0
  305. package/dist/compliance/soc2.d.ts.map +1 -0
  306. package/dist/compliance/soc2.js +262 -0
  307. package/dist/compliance/soc2.js.map +1 -0
  308. package/dist/compliance/soc2.test.d.ts +5 -0
  309. package/dist/compliance/soc2.test.d.ts.map +1 -0
  310. package/dist/compliance/soc2.test.js +86 -0
  311. package/dist/compliance/soc2.test.js.map +1 -0
  312. package/dist/compliance/types.d.ts +125 -0
  313. package/dist/compliance/types.d.ts.map +1 -0
  314. package/dist/compliance/types.js +10 -0
  315. package/dist/compliance/types.js.map +1 -0
  316. package/dist/config/flags.d.ts +456 -0
  317. package/dist/config/flags.d.ts.map +1 -0
  318. package/dist/config/flags.js +464 -0
  319. package/dist/config/flags.js.map +1 -0
  320. package/dist/config/index.d.ts +10 -0
  321. package/dist/config/index.d.ts.map +1 -0
  322. package/dist/config/index.js +10 -0
  323. package/dist/config/index.js.map +1 -0
  324. package/dist/config/severity-overrides.d.ts +209 -0
  325. package/dist/config/severity-overrides.d.ts.map +1 -0
  326. package/dist/config/severity-overrides.js +380 -0
  327. package/dist/config/severity-overrides.js.map +1 -0
  328. package/dist/cost/index.d.ts +11 -0
  329. package/dist/cost/index.d.ts.map +1 -0
  330. package/dist/cost/index.js +12 -0
  331. package/dist/cost/index.js.map +1 -0
  332. package/dist/cost/pricing.d.ts +57 -0
  333. package/dist/cost/pricing.d.ts.map +1 -0
  334. package/dist/cost/pricing.js +196 -0
  335. package/dist/cost/pricing.js.map +1 -0
  336. package/dist/cost/pricing.test.d.ts +5 -0
  337. package/dist/cost/pricing.test.d.ts.map +1 -0
  338. package/dist/cost/pricing.test.js +195 -0
  339. package/dist/cost/pricing.test.js.map +1 -0
  340. package/dist/cost/tracker.d.ts +100 -0
  341. package/dist/cost/tracker.d.ts.map +1 -0
  342. package/dist/cost/tracker.js +366 -0
  343. package/dist/cost/tracker.js.map +1 -0
  344. package/dist/cost/tracker.test.d.ts +5 -0
  345. package/dist/cost/tracker.test.d.ts.map +1 -0
  346. package/dist/cost/tracker.test.js +360 -0
  347. package/dist/cost/tracker.test.js.map +1 -0
  348. package/dist/cost/types.d.ts +135 -0
  349. package/dist/cost/types.d.ts.map +1 -0
  350. package/dist/cost/types.js +9 -0
  351. package/dist/cost/types.js.map +1 -0
  352. package/dist/enterprise/auth/oidc.d.ts +231 -0
  353. package/dist/enterprise/auth/oidc.d.ts.map +1 -0
  354. package/dist/enterprise/auth/oidc.js +372 -0
  355. package/dist/enterprise/auth/oidc.js.map +1 -0
  356. package/dist/enterprise/auth/oidc.test.d.ts +5 -0
  357. package/dist/enterprise/auth/oidc.test.d.ts.map +1 -0
  358. package/dist/enterprise/auth/oidc.test.js +435 -0
  359. package/dist/enterprise/auth/oidc.test.js.map +1 -0
  360. package/dist/enterprise/index.d.ts +14 -0
  361. package/dist/enterprise/index.d.ts.map +1 -0
  362. package/dist/enterprise/index.js +19 -0
  363. package/dist/enterprise/index.js.map +1 -0
  364. package/dist/enterprise/integrations/chat.d.ts +205 -0
  365. package/dist/enterprise/integrations/chat.d.ts.map +1 -0
  366. package/dist/enterprise/integrations/chat.js +624 -0
  367. package/dist/enterprise/integrations/chat.js.map +1 -0
  368. package/dist/enterprise/integrations/chat.test.d.ts +5 -0
  369. package/dist/enterprise/integrations/chat.test.d.ts.map +1 -0
  370. package/dist/enterprise/integrations/chat.test.js +557 -0
  371. package/dist/enterprise/integrations/chat.test.js.map +1 -0
  372. package/dist/enterprise/integrations/ticketing.d.ts +257 -0
  373. package/dist/enterprise/integrations/ticketing.d.ts.map +1 -0
  374. package/dist/enterprise/integrations/ticketing.js +548 -0
  375. package/dist/enterprise/integrations/ticketing.js.map +1 -0
  376. package/dist/enterprise/integrations/ticketing.test.d.ts +5 -0
  377. package/dist/enterprise/integrations/ticketing.test.d.ts.map +1 -0
  378. package/dist/enterprise/integrations/ticketing.test.js +693 -0
  379. package/dist/enterprise/integrations/ticketing.test.js.map +1 -0
  380. package/dist/enterprise/policy/opa.d.ts +194 -0
  381. package/dist/enterprise/policy/opa.d.ts.map +1 -0
  382. package/dist/enterprise/policy/opa.js +385 -0
  383. package/dist/enterprise/policy/opa.js.map +1 -0
  384. package/dist/enterprise/policy/opa.test.d.ts +5 -0
  385. package/dist/enterprise/policy/opa.test.d.ts.map +1 -0
  386. package/dist/enterprise/policy/opa.test.js +702 -0
  387. package/dist/enterprise/policy/opa.test.js.map +1 -0
  388. package/dist/enterprise/signing/kms.d.ts +211 -0
  389. package/dist/enterprise/signing/kms.d.ts.map +1 -0
  390. package/dist/enterprise/signing/kms.js +480 -0
  391. package/dist/enterprise/signing/kms.js.map +1 -0
  392. package/dist/enterprise/signing/kms.test.d.ts +5 -0
  393. package/dist/enterprise/signing/kms.test.d.ts.map +1 -0
  394. package/dist/enterprise/signing/kms.test.js +511 -0
  395. package/dist/enterprise/signing/kms.test.js.map +1 -0
  396. package/dist/eval/fixtures.d.ts +58 -0
  397. package/dist/eval/fixtures.d.ts.map +1 -0
  398. package/dist/eval/fixtures.js +571 -0
  399. package/dist/eval/fixtures.js.map +1 -0
  400. package/dist/eval/fixtures.test.d.ts +5 -0
  401. package/dist/eval/fixtures.test.d.ts.map +1 -0
  402. package/dist/eval/fixtures.test.js +193 -0
  403. package/dist/eval/fixtures.test.js.map +1 -0
  404. package/dist/eval/harness.d.ts +30 -0
  405. package/dist/eval/harness.d.ts.map +1 -0
  406. package/dist/eval/harness.js +221 -0
  407. package/dist/eval/harness.js.map +1 -0
  408. package/dist/eval/harness.test.d.ts +5 -0
  409. package/dist/eval/harness.test.d.ts.map +1 -0
  410. package/dist/eval/harness.test.js +314 -0
  411. package/dist/eval/harness.test.js.map +1 -0
  412. package/dist/eval/index.d.ts +15 -0
  413. package/dist/eval/index.d.ts.map +1 -0
  414. package/dist/eval/index.js +18 -0
  415. package/dist/eval/index.js.map +1 -0
  416. package/dist/eval/metrics.d.ts +56 -0
  417. package/dist/eval/metrics.d.ts.map +1 -0
  418. package/dist/eval/metrics.js +298 -0
  419. package/dist/eval/metrics.js.map +1 -0
  420. package/dist/eval/metrics.test.d.ts +5 -0
  421. package/dist/eval/metrics.test.d.ts.map +1 -0
  422. package/dist/eval/metrics.test.js +426 -0
  423. package/dist/eval/metrics.test.js.map +1 -0
  424. package/dist/eval/report.d.ts +30 -0
  425. package/dist/eval/report.d.ts.map +1 -0
  426. package/dist/eval/report.js +333 -0
  427. package/dist/eval/report.js.map +1 -0
  428. package/dist/eval/report.test.d.ts +5 -0
  429. package/dist/eval/report.test.d.ts.map +1 -0
  430. package/dist/eval/report.test.js +275 -0
  431. package/dist/eval/report.test.js.map +1 -0
  432. package/dist/eval/types.d.ts +234 -0
  433. package/dist/eval/types.d.ts.map +1 -0
  434. package/dist/eval/types.js +27 -0
  435. package/dist/eval/types.js.map +1 -0
  436. package/dist/http-server.d.ts +3 -0
  437. package/dist/http-server.d.ts.map +1 -0
  438. package/dist/http-server.js +127 -0
  439. package/dist/http-server.js.map +1 -0
  440. package/dist/index.d.ts +33 -0
  441. package/dist/index.d.ts.map +1 -0
  442. package/dist/index.js +4120 -0
  443. package/dist/index.js.map +1 -0
  444. package/dist/logger.d.ts +46 -0
  445. package/dist/logger.d.ts.map +1 -0
  446. package/dist/logger.js +131 -0
  447. package/dist/logger.js.map +1 -0
  448. package/dist/multimodel/consensus.d.ts +49 -0
  449. package/dist/multimodel/consensus.d.ts.map +1 -0
  450. package/dist/multimodel/consensus.js +454 -0
  451. package/dist/multimodel/consensus.js.map +1 -0
  452. package/dist/multimodel/consensus.test.d.ts +5 -0
  453. package/dist/multimodel/consensus.test.d.ts.map +1 -0
  454. package/dist/multimodel/consensus.test.js +415 -0
  455. package/dist/multimodel/consensus.test.js.map +1 -0
  456. package/dist/multimodel/index.d.ts +13 -0
  457. package/dist/multimodel/index.d.ts.map +1 -0
  458. package/dist/multimodel/index.js +14 -0
  459. package/dist/multimodel/index.js.map +1 -0
  460. package/dist/multimodel/runner.d.ts +95 -0
  461. package/dist/multimodel/runner.d.ts.map +1 -0
  462. package/dist/multimodel/runner.js +312 -0
  463. package/dist/multimodel/runner.js.map +1 -0
  464. package/dist/multimodel/runner.test.d.ts +5 -0
  465. package/dist/multimodel/runner.test.d.ts.map +1 -0
  466. package/dist/multimodel/runner.test.js +224 -0
  467. package/dist/multimodel/runner.test.js.map +1 -0
  468. package/dist/multimodel/types.d.ts +202 -0
  469. package/dist/multimodel/types.d.ts.map +1 -0
  470. package/dist/multimodel/types.js +10 -0
  471. package/dist/multimodel/types.js.map +1 -0
  472. package/dist/observability/index.d.ts +9 -0
  473. package/dist/observability/index.d.ts.map +1 -0
  474. package/dist/observability/index.js +9 -0
  475. package/dist/observability/index.js.map +1 -0
  476. package/dist/observability/otel.d.ts +102 -0
  477. package/dist/observability/otel.d.ts.map +1 -0
  478. package/dist/observability/otel.js +284 -0
  479. package/dist/observability/otel.js.map +1 -0
  480. package/dist/plugins/index.d.ts +10 -0
  481. package/dist/plugins/index.d.ts.map +1 -0
  482. package/dist/plugins/index.js +10 -0
  483. package/dist/plugins/index.js.map +1 -0
  484. package/dist/plugins/loader.d.ts +78 -0
  485. package/dist/plugins/loader.d.ts.map +1 -0
  486. package/dist/plugins/loader.js +470 -0
  487. package/dist/plugins/loader.js.map +1 -0
  488. package/dist/plugins/types.d.ts +304 -0
  489. package/dist/plugins/types.d.ts.map +1 -0
  490. package/dist/plugins/types.js +100 -0
  491. package/dist/plugins/types.js.map +1 -0
  492. package/dist/sbom/cyclonedx.d.ts +30 -0
  493. package/dist/sbom/cyclonedx.d.ts.map +1 -0
  494. package/dist/sbom/cyclonedx.js +392 -0
  495. package/dist/sbom/cyclonedx.js.map +1 -0
  496. package/dist/sbom/cyclonedx.test.d.ts +5 -0
  497. package/dist/sbom/cyclonedx.test.d.ts.map +1 -0
  498. package/dist/sbom/cyclonedx.test.js +244 -0
  499. package/dist/sbom/cyclonedx.test.js.map +1 -0
  500. package/dist/sbom/index.d.ts +13 -0
  501. package/dist/sbom/index.d.ts.map +1 -0
  502. package/dist/sbom/index.js +15 -0
  503. package/dist/sbom/index.js.map +1 -0
  504. package/dist/sbom/provenance.d.ts +37 -0
  505. package/dist/sbom/provenance.d.ts.map +1 -0
  506. package/dist/sbom/provenance.js +268 -0
  507. package/dist/sbom/provenance.js.map +1 -0
  508. package/dist/sbom/provenance.test.d.ts +5 -0
  509. package/dist/sbom/provenance.test.d.ts.map +1 -0
  510. package/dist/sbom/provenance.test.js +189 -0
  511. package/dist/sbom/provenance.test.js.map +1 -0
  512. package/dist/sbom/signing.d.ts +87 -0
  513. package/dist/sbom/signing.d.ts.map +1 -0
  514. package/dist/sbom/signing.js +354 -0
  515. package/dist/sbom/signing.js.map +1 -0
  516. package/dist/sbom/signing.test.d.ts +5 -0
  517. package/dist/sbom/signing.test.d.ts.map +1 -0
  518. package/dist/sbom/signing.test.js +170 -0
  519. package/dist/sbom/signing.test.js.map +1 -0
  520. package/dist/sbom/types.d.ts +384 -0
  521. package/dist/sbom/types.d.ts.map +1 -0
  522. package/dist/sbom/types.js +17 -0
  523. package/dist/sbom/types.js.map +1 -0
  524. package/dist/scanners/agent/credential-scope-audit.d.ts +40 -0
  525. package/dist/scanners/agent/credential-scope-audit.d.ts.map +1 -0
  526. package/dist/scanners/agent/credential-scope-audit.js +404 -0
  527. package/dist/scanners/agent/credential-scope-audit.js.map +1 -0
  528. package/dist/scanners/agent/exfil-path-graph.d.ts +50 -0
  529. package/dist/scanners/agent/exfil-path-graph.d.ts.map +1 -0
  530. package/dist/scanners/agent/exfil-path-graph.js +764 -0
  531. package/dist/scanners/agent/exfil-path-graph.js.map +1 -0
  532. package/dist/scanners/agent/index.d.ts +43 -0
  533. package/dist/scanners/agent/index.d.ts.map +1 -0
  534. package/dist/scanners/agent/index.js +616 -0
  535. package/dist/scanners/agent/index.js.map +1 -0
  536. package/dist/scanners/agent/manifest-audit.d.ts +43 -0
  537. package/dist/scanners/agent/manifest-audit.d.ts.map +1 -0
  538. package/dist/scanners/agent/manifest-audit.js +403 -0
  539. package/dist/scanners/agent/manifest-audit.js.map +1 -0
  540. package/dist/scanners/agent/payloads/index.d.ts +44 -0
  541. package/dist/scanners/agent/payloads/index.d.ts.map +1 -0
  542. package/dist/scanners/agent/payloads/index.js +184 -0
  543. package/dist/scanners/agent/payloads/index.js.map +1 -0
  544. package/dist/scanners/agent/permission-minimiser.d.ts +48 -0
  545. package/dist/scanners/agent/permission-minimiser.d.ts.map +1 -0
  546. package/dist/scanners/agent/permission-minimiser.js +551 -0
  547. package/dist/scanners/agent/permission-minimiser.js.map +1 -0
  548. package/dist/scanners/agent/prompt-injection-fuzzer.d.ts +39 -0
  549. package/dist/scanners/agent/prompt-injection-fuzzer.d.ts.map +1 -0
  550. package/dist/scanners/agent/prompt-injection-fuzzer.js +720 -0
  551. package/dist/scanners/agent/prompt-injection-fuzzer.js.map +1 -0
  552. package/dist/scanners/agent/sandbox-audit.d.ts +44 -0
  553. package/dist/scanners/agent/sandbox-audit.d.ts.map +1 -0
  554. package/dist/scanners/agent/sandbox-audit.js +425 -0
  555. package/dist/scanners/agent/sandbox-audit.js.map +1 -0
  556. package/dist/scanners/agent/supply-chain-mcp.d.ts +53 -0
  557. package/dist/scanners/agent/supply-chain-mcp.d.ts.map +1 -0
  558. package/dist/scanners/agent/supply-chain-mcp.js +479 -0
  559. package/dist/scanners/agent/supply-chain-mcp.js.map +1 -0
  560. package/dist/scanners/agent/tool-description-drift.d.ts +62 -0
  561. package/dist/scanners/agent/tool-description-drift.d.ts.map +1 -0
  562. package/dist/scanners/agent/tool-description-drift.js +365 -0
  563. package/dist/scanners/agent/tool-description-drift.js.map +1 -0
  564. package/dist/scanners/agent/types.d.ts +840 -0
  565. package/dist/scanners/agent/types.d.ts.map +1 -0
  566. package/dist/scanners/agent/types.js +149 -0
  567. package/dist/scanners/agent/types.js.map +1 -0
  568. package/dist/scanners/bandit.d.ts +25 -0
  569. package/dist/scanners/bandit.d.ts.map +1 -0
  570. package/dist/scanners/bandit.js +129 -0
  571. package/dist/scanners/bandit.js.map +1 -0
  572. package/dist/scanners/binary-analysis.d.ts +41 -0
  573. package/dist/scanners/binary-analysis.d.ts.map +1 -0
  574. package/dist/scanners/binary-analysis.js +587 -0
  575. package/dist/scanners/binary-analysis.js.map +1 -0
  576. package/dist/scanners/binary-analysis.test.d.ts +5 -0
  577. package/dist/scanners/binary-analysis.test.d.ts.map +1 -0
  578. package/dist/scanners/binary-analysis.test.js +291 -0
  579. package/dist/scanners/binary-analysis.test.js.map +1 -0
  580. package/dist/scanners/brakeman.d.ts +30 -0
  581. package/dist/scanners/brakeman.d.ts.map +1 -0
  582. package/dist/scanners/brakeman.js +271 -0
  583. package/dist/scanners/brakeman.js.map +1 -0
  584. package/dist/scanners/dependencies.d.ts +22 -0
  585. package/dist/scanners/dependencies.d.ts.map +1 -0
  586. package/dist/scanners/dependencies.js +202 -0
  587. package/dist/scanners/dependencies.js.map +1 -0
  588. package/dist/scanners/dependencies.test.d.ts +5 -0
  589. package/dist/scanners/dependencies.test.d.ts.map +1 -0
  590. package/dist/scanners/dependencies.test.js +185 -0
  591. package/dist/scanners/dependencies.test.js.map +1 -0
  592. package/dist/scanners/eslint.d.ts +25 -0
  593. package/dist/scanners/eslint.d.ts.map +1 -0
  594. package/dist/scanners/eslint.js +220 -0
  595. package/dist/scanners/eslint.js.map +1 -0
  596. package/dist/scanners/gosec.d.ts +25 -0
  597. package/dist/scanners/gosec.d.ts.map +1 -0
  598. package/dist/scanners/gosec.js +128 -0
  599. package/dist/scanners/gosec.js.map +1 -0
  600. package/dist/scanners/index.d.ts +128 -0
  601. package/dist/scanners/index.d.ts.map +1 -0
  602. package/dist/scanners/index.js +811 -0
  603. package/dist/scanners/index.js.map +1 -0
  604. package/dist/scanners/index.test.d.ts +5 -0
  605. package/dist/scanners/index.test.d.ts.map +1 -0
  606. package/dist/scanners/index.test.js +424 -0
  607. package/dist/scanners/index.test.js.map +1 -0
  608. package/dist/scanners/memory-safety.d.ts +44 -0
  609. package/dist/scanners/memory-safety.d.ts.map +1 -0
  610. package/dist/scanners/memory-safety.js +571 -0
  611. package/dist/scanners/memory-safety.js.map +1 -0
  612. package/dist/scanners/memory-safety.test.d.ts +5 -0
  613. package/dist/scanners/memory-safety.test.d.ts.map +1 -0
  614. package/dist/scanners/memory-safety.test.js +321 -0
  615. package/dist/scanners/memory-safety.test.js.map +1 -0
  616. package/dist/scanners/race-condition.d.ts +25 -0
  617. package/dist/scanners/race-condition.d.ts.map +1 -0
  618. package/dist/scanners/race-condition.js +443 -0
  619. package/dist/scanners/race-condition.js.map +1 -0
  620. package/dist/scanners/race-condition.test.d.ts +5 -0
  621. package/dist/scanners/race-condition.test.d.ts.map +1 -0
  622. package/dist/scanners/race-condition.test.js +428 -0
  623. package/dist/scanners/race-condition.test.js.map +1 -0
  624. package/dist/scanners/secrets.d.ts +25 -0
  625. package/dist/scanners/secrets.d.ts.map +1 -0
  626. package/dist/scanners/secrets.js +367 -0
  627. package/dist/scanners/secrets.js.map +1 -0
  628. package/dist/scanners/secrets.test.d.ts +5 -0
  629. package/dist/scanners/secrets.test.d.ts.map +1 -0
  630. package/dist/scanners/secrets.test.js +160 -0
  631. package/dist/scanners/secrets.test.js.map +1 -0
  632. package/dist/scanners/semgrep.d.ts +33 -0
  633. package/dist/scanners/semgrep.d.ts.map +1 -0
  634. package/dist/scanners/semgrep.js +350 -0
  635. package/dist/scanners/semgrep.js.map +1 -0
  636. package/dist/scanners/semgrep.test.d.ts +8 -0
  637. package/dist/scanners/semgrep.test.d.ts.map +1 -0
  638. package/dist/scanners/semgrep.test.js +254 -0
  639. package/dist/scanners/semgrep.test.js.map +1 -0
  640. package/dist/scanners/trivy.d.ts +26 -0
  641. package/dist/scanners/trivy.d.ts.map +1 -0
  642. package/dist/scanners/trivy.js +187 -0
  643. package/dist/scanners/trivy.js.map +1 -0
  644. package/dist/scanners/types.d.ts +210 -0
  645. package/dist/scanners/types.d.ts.map +1 -0
  646. package/dist/scanners/types.js +106 -0
  647. package/dist/scanners/types.js.map +1 -0
  648. package/dist/scanners/types.test.d.ts +5 -0
  649. package/dist/scanners/types.test.d.ts.map +1 -0
  650. package/dist/scanners/types.test.js +103 -0
  651. package/dist/scanners/types.test.js.map +1 -0
  652. package/dist/scanners/typescript.d.ts +32 -0
  653. package/dist/scanners/typescript.d.ts.map +1 -0
  654. package/dist/scanners/typescript.js +300 -0
  655. package/dist/scanners/typescript.js.map +1 -0
  656. package/dist/scanners/typescript.test.d.ts +5 -0
  657. package/dist/scanners/typescript.test.d.ts.map +1 -0
  658. package/dist/scanners/typescript.test.js +296 -0
  659. package/dist/scanners/typescript.test.js.map +1 -0
  660. package/dist/transcripts/index.d.ts +13 -0
  661. package/dist/transcripts/index.d.ts.map +1 -0
  662. package/dist/transcripts/index.js +17 -0
  663. package/dist/transcripts/index.js.map +1 -0
  664. package/dist/transcripts/logger.d.ts +190 -0
  665. package/dist/transcripts/logger.d.ts.map +1 -0
  666. package/dist/transcripts/logger.js +385 -0
  667. package/dist/transcripts/logger.js.map +1 -0
  668. package/dist/transcripts/logger.test.d.ts +5 -0
  669. package/dist/transcripts/logger.test.d.ts.map +1 -0
  670. package/dist/transcripts/logger.test.js +227 -0
  671. package/dist/transcripts/logger.test.js.map +1 -0
  672. package/dist/transcripts/redaction.d.ts +125 -0
  673. package/dist/transcripts/redaction.d.ts.map +1 -0
  674. package/dist/transcripts/redaction.js +416 -0
  675. package/dist/transcripts/redaction.js.map +1 -0
  676. package/dist/transcripts/redaction.test.d.ts +5 -0
  677. package/dist/transcripts/redaction.test.d.ts.map +1 -0
  678. package/dist/transcripts/redaction.test.js +267 -0
  679. package/dist/transcripts/redaction.test.js.map +1 -0
  680. package/dist/transcripts/signing.d.ts +108 -0
  681. package/dist/transcripts/signing.d.ts.map +1 -0
  682. package/dist/transcripts/signing.js +173 -0
  683. package/dist/transcripts/signing.js.map +1 -0
  684. package/dist/transcripts/verifier.d.ts +133 -0
  685. package/dist/transcripts/verifier.d.ts.map +1 -0
  686. package/dist/transcripts/verifier.js +489 -0
  687. package/dist/transcripts/verifier.js.map +1 -0
  688. package/dist/transcripts/verifier.test.d.ts +5 -0
  689. package/dist/transcripts/verifier.test.d.ts.map +1 -0
  690. package/dist/transcripts/verifier.test.js +330 -0
  691. package/dist/transcripts/verifier.test.js.map +1 -0
  692. package/dist/util/concurrency.d.ts +221 -0
  693. package/dist/util/concurrency.d.ts.map +1 -0
  694. package/dist/util/concurrency.js +339 -0
  695. package/dist/util/concurrency.js.map +1 -0
  696. package/dist/util/index.d.ts +12 -0
  697. package/dist/util/index.d.ts.map +1 -0
  698. package/dist/util/index.js +12 -0
  699. package/dist/util/index.js.map +1 -0
  700. package/dist/util/json.d.ts +63 -0
  701. package/dist/util/json.d.ts.map +1 -0
  702. package/dist/util/json.js +134 -0
  703. package/dist/util/json.js.map +1 -0
  704. package/dist/util/paths.d.ts +56 -0
  705. package/dist/util/paths.d.ts.map +1 -0
  706. package/dist/util/paths.js +128 -0
  707. package/dist/util/paths.js.map +1 -0
  708. package/dist/util/retry.d.ts +185 -0
  709. package/dist/util/retry.d.ts.map +1 -0
  710. package/dist/util/retry.js +338 -0
  711. package/dist/util/retry.js.map +1 -0
  712. package/package.json +79 -0
@@ -0,0 +1,477 @@
1
+ /**
2
+ * Exploit Chain Analyzer
3
+ *
4
+ * Automatically chains multiple vulnerabilities into attack paths.
5
+ * Identifies how individual findings can be combined for greater impact.
6
+ *
7
+ * Chain types:
8
+ * - Read → RCE: Info disclosure enables code injection
9
+ * - Auth bypass → Data: Skip auth to access database
10
+ * - SSRF → Internal: External request to internal API
11
+ * - XSS → Session: Script injection to cookie theft
12
+ *
13
+ * @module agents/exploit-chain
14
+ */
15
+ // ============================================================================
16
+ // Chain Detection Rules
17
+ // ============================================================================
18
+ const CHAIN_RULES = [
19
+ // Information Disclosure → Code Execution
20
+ {
21
+ id: "chain-info-rce",
22
+ name: "Information Disclosure to RCE",
23
+ entry: {
24
+ categories: ["sensitive-disclosure", "path-traversal"],
25
+ },
26
+ target: {
27
+ categories: ["injection", "command-injection", "code-injection"],
28
+ },
29
+ escalation: "critical",
30
+ reason: "Information leak (config, source) enables targeted code execution",
31
+ mitreIds: ["T1005", "T1059"],
32
+ difficulty: "moderate",
33
+ },
34
+ // SSRF → Internal Access
35
+ {
36
+ id: "chain-ssrf-internal",
37
+ name: "SSRF to Internal Network Access",
38
+ entry: {
39
+ categories: ["ssrf"],
40
+ },
41
+ target: {
42
+ categories: ["authentication", "authorization", "api-security"],
43
+ },
44
+ escalation: "critical",
45
+ reason: "Server-side request enables access to internal services and APIs",
46
+ mitreIds: ["T1090", "T1552"],
47
+ difficulty: "easy",
48
+ },
49
+ // XSS → Session Hijack
50
+ {
51
+ id: "chain-xss-session",
52
+ name: "XSS to Session Hijacking",
53
+ entry: {
54
+ categories: ["xss", "injection"],
55
+ },
56
+ target: {
57
+ categories: ["session-management", "authentication"],
58
+ },
59
+ escalation: "high",
60
+ reason: "Client-side script injection enables session token theft",
61
+ mitreIds: ["T1185", "T1539"],
62
+ difficulty: "easy",
63
+ },
64
+ // Auth Bypass → Data Access
65
+ {
66
+ id: "chain-auth-data",
67
+ name: "Authentication Bypass to Data Exfiltration",
68
+ entry: {
69
+ categories: ["authentication", "authorization"],
70
+ },
71
+ target: {
72
+ categories: ["sensitive-disclosure", "pii-exposure", "api-security"],
73
+ },
74
+ escalation: "critical",
75
+ reason: "Bypassing authentication enables access to protected data",
76
+ mitreIds: ["T1078", "T1530"],
77
+ difficulty: "moderate",
78
+ },
79
+ // SQL Injection → Full Compromise
80
+ {
81
+ id: "chain-sqli-rce",
82
+ name: "SQL Injection to Database Takeover",
83
+ entry: {
84
+ categories: ["injection", "sql-injection"],
85
+ },
86
+ target: {
87
+ categories: ["authentication", "sensitive-disclosure"],
88
+ },
89
+ escalation: "critical",
90
+ reason: "SQL injection can dump credentials and enable further attacks",
91
+ mitreIds: ["T1190", "T1003"],
92
+ difficulty: "moderate",
93
+ },
94
+ // Path Traversal → Sensitive Data
95
+ {
96
+ id: "chain-lfi-secrets",
97
+ name: "Path Traversal to Secret Exposure",
98
+ entry: {
99
+ categories: ["path-traversal"],
100
+ },
101
+ target: {
102
+ categories: ["cryptography", "secret-management", "sensitive-disclosure"],
103
+ },
104
+ escalation: "critical",
105
+ reason: "File read vulnerability exposes configuration and secrets",
106
+ mitreIds: ["T1005", "T1552.001"],
107
+ difficulty: "easy",
108
+ },
109
+ // Insecure Deserialization → RCE
110
+ {
111
+ id: "chain-deser-rce",
112
+ name: "Insecure Deserialization to RCE",
113
+ entry: {
114
+ categories: ["deserialization", "input-validation"],
115
+ },
116
+ target: {
117
+ categories: ["code-injection", "command-injection"],
118
+ },
119
+ escalation: "critical",
120
+ reason: "Deserialization of untrusted data enables arbitrary code execution",
121
+ mitreIds: ["T1059", "T1027"],
122
+ difficulty: "hard",
123
+ },
124
+ // Race Condition → Privilege Escalation
125
+ {
126
+ id: "chain-race-privesc",
127
+ name: "Race Condition to Privilege Escalation",
128
+ entry: {
129
+ categories: ["race-condition", "logic-flaw"],
130
+ },
131
+ target: {
132
+ categories: ["authorization", "authentication"],
133
+ },
134
+ escalation: "high",
135
+ reason: "Race condition in access checks enables privilege escalation",
136
+ mitreIds: ["T1068", "T1548"],
137
+ difficulty: "hard",
138
+ },
139
+ // Open Redirect → Phishing/Token Theft
140
+ {
141
+ id: "chain-redirect-phish",
142
+ name: "Open Redirect to Token Theft",
143
+ entry: {
144
+ categories: ["open-redirect"],
145
+ },
146
+ target: {
147
+ categories: ["session-management", "authentication"],
148
+ },
149
+ escalation: "medium",
150
+ reason: "Open redirect can steal OAuth tokens via redirect_uri manipulation",
151
+ mitreIds: ["T1566", "T1528"],
152
+ difficulty: "easy",
153
+ },
154
+ // Memory Safety → Code Execution
155
+ {
156
+ id: "chain-memory-rce",
157
+ name: "Memory Corruption to RCE",
158
+ entry: {
159
+ categories: ["memory-safety", "binary-security"],
160
+ },
161
+ target: {
162
+ categories: ["code-injection"],
163
+ },
164
+ escalation: "critical",
165
+ reason: "Buffer overflow or use-after-free enables arbitrary code execution",
166
+ mitreIds: ["T1203", "T1211"],
167
+ difficulty: "expert",
168
+ },
169
+ ];
170
+ // ============================================================================
171
+ // Severity Utilities
172
+ // ============================================================================
173
+ const SEVERITY_ORDER = {
174
+ critical: 4,
175
+ high: 3,
176
+ medium: 2,
177
+ low: 1,
178
+ info: 0,
179
+ };
180
+ /**
181
+ * Get numeric value for severity
182
+ */
183
+ function severityValue(severity) {
184
+ return SEVERITY_ORDER[severity] || 0;
185
+ }
186
+ /**
187
+ * Calculate chain severity based on escalation
188
+ */
189
+ function calculateChainSeverity(steps, rule) {
190
+ // Get max severity from steps
191
+ const maxStepSeverity = Math.max(...steps.map(s => severityValue(s.finding.severity)));
192
+ // Apply escalation
193
+ const escalatedValue = severityValue(rule.escalation);
194
+ // Chain severity is the higher of max step or escalation
195
+ const finalValue = Math.max(maxStepSeverity, escalatedValue);
196
+ // Map back to severity
197
+ for (const [sev, val] of Object.entries(SEVERITY_ORDER)) {
198
+ if (val === finalValue)
199
+ return sev;
200
+ }
201
+ return "critical";
202
+ }
203
+ /**
204
+ * Calculate confidence based on finding confidences
205
+ */
206
+ function calculateChainConfidence(steps) {
207
+ if (steps.length === 0)
208
+ return 0;
209
+ // Chain confidence is product of individual confidences
210
+ const product = steps.reduce((acc, step) => acc * (step.finding.confidence / 100), 1);
211
+ // Apply a boost for multi-step chains (they're more certain if all steps exist)
212
+ const boost = steps.length >= 2 ? 1.1 : 1;
213
+ return Math.min(Math.round(product * 100 * boost), 99);
214
+ }
215
+ function buildFindingGraph(findings) {
216
+ const nodes = findings.map(f => ({
217
+ finding: f,
218
+ category: f.category,
219
+ file: f.evidence?.match(/File:\s*([^\s:]+)/)?.[1],
220
+ connections: [],
221
+ }));
222
+ // Connect findings that are related (same file, complementary categories)
223
+ for (let i = 0; i < nodes.length; i++) {
224
+ for (let j = 0; j < nodes.length; j++) {
225
+ if (i === j)
226
+ continue;
227
+ const a = nodes[i];
228
+ const b = nodes[j];
229
+ // Same file = potentially related
230
+ if (a.file && a.file === b.file) {
231
+ a.connections.push(b);
232
+ }
233
+ // Check if categories can chain
234
+ for (const rule of CHAIN_RULES) {
235
+ const aIsEntry = rule.entry.categories.includes(a.category);
236
+ const bIsTarget = rule.target.categories.includes(b.category);
237
+ if (aIsEntry && bIsTarget) {
238
+ if (!a.connections.includes(b)) {
239
+ a.connections.push(b);
240
+ }
241
+ }
242
+ }
243
+ }
244
+ }
245
+ return nodes;
246
+ }
247
+ function findChainablePairs(nodes) {
248
+ const candidates = [];
249
+ for (const rule of CHAIN_RULES) {
250
+ // Find entry points
251
+ const entryNodes = nodes.filter(n => rule.entry.categories.includes(n.category) &&
252
+ (!rule.entry.severityMin || severityValue(n.finding.severity) >= severityValue(rule.entry.severityMin)));
253
+ // Find targets
254
+ const targetNodes = nodes.filter(n => rule.target.categories.includes(n.category));
255
+ // Find pivots (if specified)
256
+ const pivotNodes = rule.pivot
257
+ ? nodes.filter(n => rule.pivot.categories.includes(n.category))
258
+ : [];
259
+ // Generate candidates
260
+ for (const entry of entryNodes) {
261
+ for (const target of targetNodes) {
262
+ // Direct chain (entry → target)
263
+ if (entry.finding.id !== target.finding.id) {
264
+ candidates.push({
265
+ entry: entry.finding,
266
+ target: target.finding,
267
+ rule,
268
+ });
269
+ }
270
+ // Chain with pivot (entry → pivot → target)
271
+ for (const pivot of pivotNodes) {
272
+ if (entry.finding.id !== pivot.finding.id &&
273
+ pivot.finding.id !== target.finding.id &&
274
+ entry.finding.id !== target.finding.id) {
275
+ candidates.push({
276
+ entry: entry.finding,
277
+ target: target.finding,
278
+ pivot: pivot.finding,
279
+ rule,
280
+ });
281
+ }
282
+ }
283
+ }
284
+ }
285
+ }
286
+ // Deduplicate
287
+ const seen = new Set();
288
+ return candidates.filter(c => {
289
+ const key = `${c.rule.id}:${c.entry.id}:${c.target.id}:${c.pivot?.id || ""}`;
290
+ if (seen.has(key))
291
+ return false;
292
+ seen.add(key);
293
+ return true;
294
+ });
295
+ }
296
+ /**
297
+ * Generate attack scenario for a chain
298
+ */
299
+ function generateAttackScenario(candidate) {
300
+ const { entry, target, pivot, rule } = candidate;
301
+ let scenario = `1. Attacker exploits ${entry.category} vulnerability (${entry.id}) to gain initial foothold. `;
302
+ if (pivot) {
303
+ scenario += `2. Using this access, attacker leverages ${pivot.category} vulnerability (${pivot.id}) to escalate. `;
304
+ scenario += `3. Finally, attacker exploits ${target.category} vulnerability (${target.id}) to achieve ${rule.reason.toLowerCase()}. `;
305
+ }
306
+ else {
307
+ scenario += `2. Attacker then exploits ${target.category} vulnerability (${target.id}) to achieve ${rule.reason.toLowerCase()}. `;
308
+ }
309
+ return scenario;
310
+ }
311
+ /**
312
+ * Build exploit chain from candidate
313
+ */
314
+ function buildExploitChain(candidate, chainId) {
315
+ const steps = [];
316
+ // Entry step
317
+ steps.push({
318
+ findingId: candidate.entry.id,
319
+ finding: candidate.entry,
320
+ role: "entry",
321
+ enables: candidate.pivot
322
+ ? `Access for ${candidate.pivot.category}`
323
+ : `Access for ${candidate.target.category}`,
324
+ techniques: [candidate.rule.mitreIds[0] || "T1190"],
325
+ });
326
+ // Pivot step (if exists)
327
+ if (candidate.pivot) {
328
+ steps.push({
329
+ findingId: candidate.pivot.id,
330
+ finding: candidate.pivot,
331
+ role: "pivot",
332
+ prerequisite: `Requires ${candidate.entry.category}`,
333
+ enables: `Access for ${candidate.target.category}`,
334
+ techniques: [candidate.rule.mitreIds[1] || candidate.rule.mitreIds[0]],
335
+ });
336
+ }
337
+ // Target step
338
+ steps.push({
339
+ findingId: candidate.target.id,
340
+ finding: candidate.target,
341
+ role: "target",
342
+ prerequisite: candidate.pivot
343
+ ? `Requires ${candidate.pivot.category}`
344
+ : `Requires ${candidate.entry.category}`,
345
+ techniques: [candidate.rule.mitreIds[candidate.rule.mitreIds.length - 1]],
346
+ });
347
+ const totalSeverity = calculateChainSeverity(steps, candidate.rule);
348
+ const confidence = calculateChainConfidence(steps);
349
+ const attackScenario = generateAttackScenario(candidate);
350
+ return {
351
+ id: `chain-${String(chainId).padStart(3, "0")}`,
352
+ name: candidate.rule.name,
353
+ steps,
354
+ totalSeverity,
355
+ originalSeverities: steps.map(s => s.finding.severity),
356
+ confidence,
357
+ attackScenario,
358
+ mitreAttackIds: candidate.rule.mitreIds,
359
+ impact: candidate.rule.reason,
360
+ difficulty: candidate.rule.difficulty,
361
+ };
362
+ }
363
+ // ============================================================================
364
+ // Main Entry Point
365
+ // ============================================================================
366
+ /**
367
+ * Analyze findings for exploit chains
368
+ */
369
+ export async function analyzeExploitChains(findings, _projectPath) {
370
+ if (findings.length < 2) {
371
+ return {
372
+ totalFindings: findings.length,
373
+ chainsDetected: 0,
374
+ chains: [],
375
+ riskScore: 0,
376
+ recommendations: ["Insufficient findings to detect chains. Run more scanners."],
377
+ };
378
+ }
379
+ // Build finding graph
380
+ const nodes = buildFindingGraph(findings);
381
+ // Find chainable pairs
382
+ const candidates = findChainablePairs(nodes);
383
+ // Build exploit chains
384
+ const chains = [];
385
+ let chainId = 1;
386
+ for (const candidate of candidates) {
387
+ const chain = buildExploitChain(candidate, chainId++);
388
+ chains.push(chain);
389
+ }
390
+ // Sort by severity and confidence
391
+ chains.sort((a, b) => {
392
+ const sevDiff = severityValue(b.totalSeverity) - severityValue(a.totalSeverity);
393
+ if (sevDiff !== 0)
394
+ return sevDiff;
395
+ return b.confidence - a.confidence;
396
+ });
397
+ // Limit to top chains to avoid noise
398
+ const topChains = chains.slice(0, 20);
399
+ // Calculate risk score (0-100)
400
+ let riskScore = 0;
401
+ for (const chain of topChains) {
402
+ const sevScore = severityValue(chain.totalSeverity) * 10;
403
+ const confScore = chain.confidence / 10;
404
+ riskScore += sevScore + confScore;
405
+ }
406
+ riskScore = Math.min(Math.round(riskScore / Math.max(topChains.length, 1)), 100);
407
+ // Generate recommendations
408
+ const recommendations = [];
409
+ const criticalChains = topChains.filter(c => c.totalSeverity === "critical");
410
+ if (criticalChains.length > 0) {
411
+ recommendations.push(`CRITICAL: ${criticalChains.length} exploit chains lead to critical impact. ` +
412
+ `Prioritize fixing entry point vulnerabilities: ${[...new Set(criticalChains.flatMap(c => c.steps[0].finding.category))].join(", ")}`);
413
+ }
414
+ const easyChains = topChains.filter(c => c.difficulty === "easy" || c.difficulty === "trivial");
415
+ if (easyChains.length > 0) {
416
+ recommendations.push(`${easyChains.length} chains are easy to exploit. Focus on these first.`);
417
+ }
418
+ // Category-specific recommendations
419
+ const entryCategories = [...new Set(topChains.map(c => c.steps[0].finding.category))];
420
+ if (entryCategories.includes("injection")) {
421
+ recommendations.push("Injection vulnerabilities are common entry points. Implement parameterized queries and input validation.");
422
+ }
423
+ if (entryCategories.includes("ssrf")) {
424
+ recommendations.push("SSRF vulnerabilities enable internal network access. Implement URL allowlisting.");
425
+ }
426
+ return {
427
+ totalFindings: findings.length,
428
+ chainsDetected: topChains.length,
429
+ chains: topChains,
430
+ riskScore,
431
+ recommendations,
432
+ };
433
+ }
434
+ /**
435
+ * Convert exploit chains to certification findings
436
+ */
437
+ export function exploitChainsToFindings(result) {
438
+ return result.chains.map((chain) => ({
439
+ id: chain.id,
440
+ severity: chain.totalSeverity,
441
+ category: "exploit-chain",
442
+ description: `${chain.name}: ${chain.attackScenario}`,
443
+ evidence: chain.steps.map(s => `Step ${s.role}: ${s.finding.id} (${s.finding.category}) → ${s.enables || "final target"}`).join("\n"),
444
+ confidence: chain.confidence,
445
+ verifications: [],
446
+ created_at: new Date().toISOString(),
447
+ scanner_source: "exploit-chain-analyzer",
448
+ metadata: {
449
+ stepsCount: chain.steps.length,
450
+ originalSeverities: chain.originalSeverities,
451
+ mitreAttackIds: chain.mitreAttackIds,
452
+ impact: chain.impact,
453
+ difficulty: chain.difficulty,
454
+ chainedFindingIds: chain.steps.map(s => s.findingId),
455
+ },
456
+ }));
457
+ }
458
+ /**
459
+ * Get summary of exploit chain analysis
460
+ */
461
+ export function getChainSummary(result) {
462
+ if (result.chainsDetected === 0) {
463
+ return "No exploit chains detected. Individual vulnerabilities may still pose risk.";
464
+ }
465
+ const criticalCount = result.chains.filter(c => c.totalSeverity === "critical").length;
466
+ const highCount = result.chains.filter(c => c.totalSeverity === "high").length;
467
+ let summary = `Detected ${result.chainsDetected} exploit chains. `;
468
+ summary += `Risk score: ${result.riskScore}/100. `;
469
+ if (criticalCount > 0) {
470
+ summary += `${criticalCount} critical chains require immediate attention. `;
471
+ }
472
+ if (highCount > 0) {
473
+ summary += `${highCount} high-severity chains should be prioritized. `;
474
+ }
475
+ return summary;
476
+ }
477
+ //# sourceMappingURL=exploit-chain.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"exploit-chain.js","sourceRoot":"","sources":["../../src/agents/exploit-chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAqEH,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,WAAW,GAAgB;IAC/B,0CAA0C;IAC1C;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;SACvD;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,CAAC;SACjE;QACD,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,mEAAmE;QAC3E,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,UAAU;KACvB;IACD,yBAAyB;IACzB;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,MAAM,CAAC;SACrB;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,cAAc,CAAC;SAChE;QACD,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,kEAAkE;QAC1E,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,MAAM;KACnB;IACD,uBAAuB;IACvB;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;SACjC;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;SACrD;QACD,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,0DAA0D;QAClE,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,MAAM;KACnB;IACD,4BAA4B;IAC5B;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,4CAA4C;QAClD,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;SAChD;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,sBAAsB,EAAE,cAAc,EAAE,cAAc,CAAC;SACrE;QACD,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,2DAA2D;QACnE,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,UAAU;KACvB;IACD,kCAAkC;IAClC;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,oCAAoC;QAC1C,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;SAC3C;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;SACvD;QACD,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,+DAA+D;QACvE,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,UAAU;KACvB;IACD,kCAAkC;IAClC;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mCAAmC;QACzC,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,gBAAgB,CAAC;SAC/B;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,cAAc,EAAE,mBAAmB,EAAE,sBAAsB,CAAC;SAC1E;QACD,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,2DAA2D;QACnE,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC;QAChC,UAAU,EAAE,MAAM;KACnB;IACD,iCAAiC;IACjC;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;SACpD;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;SACpD;QACD,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,oEAAoE;QAC5E,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,MAAM;KACnB;IACD,wCAAwC;IACxC;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,wCAAwC;QAC9C,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,gBAAgB,EAAE,YAAY,CAAC;SAC7C;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC;SAChD;QACD,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,8DAA8D;QACtE,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,MAAM;KACnB;IACD,uCAAuC;IACvC;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,8BAA8B;QACpC,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,eAAe,CAAC;SAC9B;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;SACrD;QACD,UAAU,EAAE,QAAQ;QACpB,MAAM,EAAE,oEAAoE;QAC5E,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,MAAM;KACnB;IACD,iCAAiC;IACjC;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC;SACjD;QACD,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,gBAAgB,CAAC;SAC/B;QACD,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,oEAAoE;QAC5E,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,QAAQ;KACrB;CACF,CAAC;AAEF,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,cAAc,GAA6B;IAC/C,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAEF;;GAEG;AACH,SAAS,aAAa,CAAC,QAAkB;IACvC,OAAO,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAC7B,KAAkB,EAClB,IAAe;IAEf,8BAA8B;IAC9B,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEvF,mBAAmB;IACnB,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEtD,yDAAyD;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAE7D,uBAAuB;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACxD,IAAI,GAAG,KAAK,UAAU;YAAE,OAAO,GAAe,CAAC;IACjD,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,KAAkB;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEjC,wDAAwD;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtF,gFAAgF;IAChF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1C,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,GAAG,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAgBD,SAAS,iBAAiB,CAAC,QAAmB;IAC5C,MAAM,KAAK,GAAkB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC,CAAC,QAA2B;QACvC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,WAAW,EAAE,EAAE;KAChB,CAAC,CAAC,CAAC;IAEJ,0EAA0E;IAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YAEtB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAEnB,kCAAkC;YAClC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,CAAC;YAED,gCAAgC;YAChC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAE9D,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAC1B,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAYD,SAAS,kBAAkB,CAAC,KAAoB;IAC9C,MAAM,UAAU,GAAqB,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,oBAAoB;QACpB,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAClC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC1C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CACxG,CAAC;QAEF,eAAe;QACf,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACnC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC5C,CAAC;QAEF,6BAA6B;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK;YAC3B,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAChE,CAAC,CAAC,EAAE,CAAC;QAEP,sBAAsB;QACtB,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;gBACjC,gCAAgC;gBAChC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAC3C,UAAU,CAAC,IAAI,CAAC;wBACd,KAAK,EAAE,KAAK,CAAC,OAAO;wBACpB,MAAM,EAAE,MAAM,CAAC,OAAO;wBACtB,IAAI;qBACL,CAAC,CAAC;gBACL,CAAC;gBAED,4CAA4C;gBAC5C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;oBAC/B,IACE,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,EAAE;wBACrC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE;wBACtC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE,EACtC,CAAC;wBACD,UAAU,CAAC,IAAI,CAAC;4BACd,KAAK,EAAE,KAAK,CAAC,OAAO;4BACpB,MAAM,EAAE,MAAM,CAAC,OAAO;4BACtB,KAAK,EAAE,KAAK,CAAC,OAAO;4BACpB,IAAI;yBACL,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,cAAc;IACd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7E,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,SAAyB;IACvD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC;IAEjD,IAAI,QAAQ,GAAG,wBAAwB,KAAK,CAAC,QAAQ,mBAAmB,KAAK,CAAC,EAAE,8BAA8B,CAAC;IAE/G,IAAI,KAAK,EAAE,CAAC;QACV,QAAQ,IAAI,4CAA4C,KAAK,CAAC,QAAQ,mBAAmB,KAAK,CAAC,EAAE,iBAAiB,CAAC;QACnH,QAAQ,IAAI,iCAAiC,MAAM,CAAC,QAAQ,mBAAmB,MAAM,CAAC,EAAE,gBAAgB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC;IACxI,CAAC;SAAM,CAAC;QACN,QAAQ,IAAI,6BAA6B,MAAM,CAAC,QAAQ,mBAAmB,MAAM,CAAC,EAAE,gBAAgB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC;IACpI,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,SAAyB,EAAE,OAAe;IACnE,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,aAAa;IACb,KAAK,CAAC,IAAI,CAAC;QACT,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE;QAC7B,OAAO,EAAE,SAAS,CAAC,KAAK;QACxB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,SAAS,CAAC,KAAK;YACtB,CAAC,CAAC,cAAc,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC1C,CAAC,CAAC,cAAc,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC7C,UAAU,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;KACpD,CAAC,CAAC;IAEH,yBAAyB;IACzB,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC;YACT,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE;YAC7B,OAAO,EAAE,SAAS,CAAC,KAAK;YACxB,IAAI,EAAE,OAAO;YACb,YAAY,EAAE,YAAY,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;YACpD,OAAO,EAAE,cAAc,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;YAClD,UAAU,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;SACvE,CAAC,CAAC;IACL,CAAC;IAED,cAAc;IACd,KAAK,CAAC,IAAI,CAAC;QACT,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE;QAC9B,OAAO,EAAE,SAAS,CAAC,MAAM;QACzB,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,SAAS,CAAC,KAAK;YAC3B,CAAC,CAAC,YAAY,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;YACxC,CAAC,CAAC,YAAY,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;QAC1C,UAAU,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;KAC1E,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAEzD,OAAO;QACL,EAAE,EAAE,SAAS,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;QAC/C,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;QACzB,KAAK;QACL,aAAa;QACb,kBAAkB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtD,UAAU;QACV,cAAc;QACd,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ;QACvC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;QAC7B,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU;KACtC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAmB,EACnB,YAAqB;IAErB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,cAAc,EAAE,CAAC;YACjB,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,CAAC;YACZ,eAAe,EAAE,CAAC,4DAA4D,CAAC;SAChF,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE1C,uBAAuB;IACvB,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE7C,uBAAuB;IACvB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,kCAAkC;IAClC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnB,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAChF,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QAClC,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEtC,+BAA+B;IAC/B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC;QACxC,SAAS,IAAI,QAAQ,GAAG,SAAS,CAAC;IACpC,CAAC;IACD,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEjF,2BAA2B;IAC3B,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,UAAU,CAAC,CAAC;IAC7E,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,eAAe,CAAC,IAAI,CAClB,aAAa,cAAc,CAAC,MAAM,2CAA2C;YAC7E,kDAAkD,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtI,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;IAChG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,eAAe,CAAC,IAAI,CAClB,GAAG,UAAU,CAAC,MAAM,oDAAoD,CACzE,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,eAAe,CAAC,QAAQ,CAAC,WAA8B,CAAC,EAAE,CAAC;QAC7D,eAAe,CAAC,IAAI,CAAC,0GAA0G,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAyB,CAAC,EAAE,CAAC;QACxD,eAAe,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;IAC3G,CAAC;IAED,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,cAAc,EAAE,SAAS,CAAC,MAAM;QAChC,MAAM,EAAE,SAAS;QACjB,SAAS;QACT,eAAe;KAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA0B;IAChE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,QAAQ,EAAE,KAAK,CAAC,aAAa;QAC7B,QAAQ,EAAE,eAAkC;QAC5C,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,cAAc,EAAE;QACrD,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC5B,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,OAAO,CAAC,CAAC,OAAO,IAAI,cAAc,EAAE,CAC3F,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,cAAc,EAAE,wBAAwB;QACxC,QAAQ,EAAE;YACR,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC9B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SACrD;KACF,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAA0B;IACxD,IAAI,MAAM,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,6EAA6E,CAAC;IACvF,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IACvF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAE/E,IAAI,OAAO,GAAG,YAAY,MAAM,CAAC,cAAc,mBAAmB,CAAC;IACnE,OAAO,IAAI,eAAe,MAAM,CAAC,SAAS,QAAQ,CAAC;IAEnD,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,GAAG,aAAa,gDAAgD,CAAC;IAC9E,CAAC;IACD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,IAAI,GAAG,SAAS,+CAA+C,CAAC;IACzE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
@@ -0,0 +1,5 @@
1
+ /**
2
+ * Unit tests for exploit-chain analyzer module
3
+ */
4
+ export {};
5
+ //# sourceMappingURL=exploit-chain.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"exploit-chain.test.d.ts","sourceRoot":"","sources":["../../src/agents/exploit-chain.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}