vaspera 2.7.0 → 2.9.0

package/dist/scanners/healthcare.js

@@ -0,0 +1,526 @@
+/**
+ * Healthcare Compliance Scanner
+ *
+ * Detects HIPAA and 42 CFR Part 2 violations including:
+ * - PHI (Protected Health Information) exposure
+ * - SUD (Substance Use Disorder) data disclosure
+ * - Consent validation gaps
+ * - Audit trail deficiencies
+ * - Re-disclosure violations
+ *
+ * Uses pattern-based detection for healthcare-specific code issues.
+ *
+ * @module scanners/healthcare
+ */
+import { readFile, readdir } from "fs/promises";
+import { join, relative, extname } from "path";
+import { logger } from "../logger.js";
+/**
+ * PHI identifier patterns (HIPAA 18 identifiers + SUD-specific)
+ */
+const PHI_PATTERNS = [
+    // Direct identifiers
+    {
+        name: "ssn-exposure",
+        pattern: /\b(SSN|social[_\-\s]?security[_\-\s]?(?:number)?)\s*[:=]\s*["']?\d{3}[-\s]?\d{2}[-\s]?\d{4}/gi,
+        description: "Social Security Number found in code",
+        severity: "critical",
+        category: "phi-exposure",
+        cweIds: ["CWE-359", "CWE-532"],
+    },
+    {
+        name: "ssn-variable",
+        pattern: /\b(?:const|let|var)\s+(?:ssn|socialSecurity|social_security)\s*=/gi,
+        description: "Variable likely storing SSN without encryption",
+        severity: "high",
+        category: "phi-exposure",
+        cweIds: ["CWE-312", "CWE-359"],
+    },
+    {
+        name: "mrn-exposure",
+        pattern: /\b(?:MRN|medical[_\-\s]?record[_\-\s]?(?:number)?|patient[_\-\s]?id)\s*[:=]\s*["']?[A-Z0-9]{4,}/gi,
+        description: "Medical Record Number or Patient ID in plaintext",
+        severity: "high",
+        category: "phi-exposure",
+        cweIds: ["CWE-359", "CWE-200"],
+    },
+    {
+        name: "dob-exposure",
+        pattern: /\b(?:DOB|date[_\-\s]?of[_\-\s]?birth|birthdate|birth[_\-\s]?date)\s*[:=]/gi,
+        description: "Date of birth identifier in code",
+        severity: "medium",
+        category: "phi-exposure",
+        cweIds: ["CWE-359"],
+    },
+    // SUD-specific identifiers (42 CFR Part 2 - higher sensitivity)
+    {
+        name: "sud-record",
+        pattern: /\b(?:substance[_\-\s]?(?:use|abuse)|sud[_\-\s]?(?:record|data|treatment)|addiction[_\-\s]?(?:treatment|record))\b/gi,
+        description: "SUD (Substance Use Disorder) record reference - requires 42 CFR Part 2 protection",
+        severity: "critical",
+        category: "sud-disclosure",
+        cweIds: ["CWE-359", "CWE-200"],
+    },
+    {
+        name: "sud-medication",
+        pattern: /\b(?:methadone|buprenorphine|suboxone|naltrexone|vivitrol)[_\-\s]?(?:dose|mg|prescription|rx)?\b/gi,
+        description: "SUD medication reference - protected under 42 CFR Part 2",
+        severity: "critical",
+        category: "sud-disclosure",
+        cweIds: ["CWE-359"],
+    },
+    {
+        name: "sud-program",
+        pattern: /\b(?:otp|opioid[_\-\s]?treatment|mat[_\-\s]?program|medication[_\-\s]?assisted)\b/gi,
+        description: "Opioid Treatment Program reference - 42 CFR Part 2 protected",
+        severity: "high",
+        category: "sud-disclosure",
+        cweIds: ["CWE-359"],
+    },
+    // Health information
+    {
+        name: "diagnosis-code",
+        pattern: /\b(?:ICD[_\-]?10?|diagnosis[_\-]?code|dx[_\-]?code)\s*[:=]\s*["']?[A-Z]\d{2,}/gi,
+        description: "Diagnosis code (ICD-10) in plaintext",
+        severity: "high",
+        category: "phi-exposure",
+        cweIds: ["CWE-359"],
+    },
+    {
+        name: "treatment-info",
+        pattern: /\b(?:treatment[_\-\s]?plan|medication[_\-\s]?list|prescription[_\-\s]?history)\s*[:=]/gi,
+        description: "Treatment information in code",
+        severity: "medium",
+        category: "phi-exposure",
+        cweIds: ["CWE-359"],
+    },
+];
+/**
+ * PHI in logging patterns
+ */
+const PHI_LOGGING_PATTERNS = [
+    {
+        name: "phi-in-console",
+        pattern: /console\.(log|info|warn|error|debug)\s*\([^)]*\b(ssn|mrn|patient[_\-]?id|social[_\-]?security|dob|date[_\-]?of[_\-]?birth)\b/gi,
+        description: "PHI identifier logged to console",
+        severity: "critical",
+        cweIds: ["CWE-532", "CWE-359"],
+    },
+    {
+        name: "phi-in-logger",
+        pattern: /logger\.(log|info|warn|error|debug)\s*\([^)]*\b(ssn|mrn|patient[_\-]?id|social[_\-]?security|dob|date[_\-]?of[_\-]?birth)\b/gi,
+        description: "PHI identifier logged via logger",
+        severity: "critical",
+        cweIds: ["CWE-532", "CWE-359"],
+    },
+    {
+        name: "phi-in-log-object",
+        pattern: /\b(log|logger|console)\.[a-z]+\s*\(\s*\{[^}]*\b(ssn|mrn|patientId|socialSecurity)\b[^}]*\}/gi,
+        description: "PHI in log object payload",
+        severity: "critical",
+        cweIds: ["CWE-532", "CWE-359"],
+    },
+    {
+        name: "sud-in-logs",
+        pattern: /\b(log|logger|console)\.[a-z]+\s*\([^)]*\b(substance[_\-]?(?:use|abuse)|sud[_\-]?(?:record|data)|addiction)\b/gi,
+        description: "SUD data logged - 42 CFR Part 2 violation",
+        severity: "critical",
+        cweIds: ["CWE-532", "CWE-359"],
+    },
+];
+/**
+ * PHI in URL patterns
+ */
+const PHI_URL_PATTERNS = [
+    {
+        name: "phi-in-query-param",
+        pattern: /\?\s*[^"']*\b(ssn|mrn|patient[_\-]?id|social[_\-]?security|dob)\s*=/gi,
+        description: "PHI in URL query parameter",
+        severity: "critical",
+        cweIds: ["CWE-598", "CWE-359"],
+    },
+    {
+        name: "phi-in-fetch-url",
+        pattern: /fetch\s*\([^)]*\b(ssn|mrn|patient[_\-]?id)\s*=/gi,
+        description: "PHI in fetch URL",
+        severity: "critical",
+        cweIds: ["CWE-598", "CWE-359"],
+    },
+    {
+        name: "phi-in-path",
+        pattern: /\/patients?\/\$\{[^}]*\b(ssn|mrn)\b[^}]*\}/gi,
+        description: "PHI identifier in URL path template",
+        severity: "high",
+        cweIds: ["CWE-598", "CWE-359"],
+    },
+];
+/**
+ * Consent validation patterns
+ */
+const CONSENT_PATTERNS = [
+    {
+        name: "consent-check-commented",
+        pattern: /\/\/\s*(?:TODO|FIXME|XXX):?\s*(?:add|implement|check)\s*consent/gi,
+        description: "Consent check marked as TODO - not implemented",
+        severity: "high",
+        category: "consent-missing",
+        cweIds: ["CWE-862"],
+    },
+    {
+        name: "consent-bypass-flag",
+        pattern: /\b(?:skip[_\-]?consent|bypass[_\-]?consent|ignore[_\-]?consent|consent[_\-]?override)\s*[:=]\s*true/gi,
+        description: "Consent check explicitly bypassed",
+        severity: "critical",
+        category: "consent-bypass",
+        cweIds: ["CWE-862"],
+    },
+    {
+        name: "consent-always-true",
+        pattern: /(?:has[_\-]?consent|consent[_\-]?given|consent[_\-]?valid)\s*[:=]\s*true\s*[;,]/gi,
+        description: "Consent hardcoded to true - bypasses validation",
+        severity: "critical",
+        category: "consent-bypass",
+        cweIds: ["CWE-862"],
+    },
+];
+/**
+ * Audit logging gap patterns
+ */
+const AUDIT_GAP_PATTERNS = [
+    {
+        name: "phi-access-no-audit",
+        pattern: /function\s+(?:get|read|fetch|access)[A-Z]?[a-zA-Z]*(?:Patient|PHI|Medical|Health|SUD)\s*\([^)]*\)\s*(?::\s*[^{]+)?\s*\{(?:(?!audit|log).)*\}/gis,
+        description: "PHI access function without audit logging",
+        severity: "high",
+        cweIds: ["CWE-778"],
+    },
+    {
+        name: "audit-log-deletable",
+        pattern: /\b(?:delete|truncate|drop|remove)[A-Z]?[a-zA-Z]*(?:audit|log)/gi,
+        description: "Audit logs can be deleted - violates retention requirements",
+        severity: "critical",
+        cweIds: ["CWE-778", "CWE-779"],
+    },
+    {
+        name: "audit-missing-timestamp",
+        pattern: /audit[_\-]?(?:log|entry|record)\s*\(\s*\{(?:(?!timestamp|created[_\-]?at|time).)*\}/gi,
+        description: "Audit log entry missing timestamp",
+        severity: "medium",
+        cweIds: ["CWE-778"],
+    },
+    {
+        name: "audit-missing-user",
+        pattern: /audit[_\-]?(?:log|entry|record)\s*\(\s*\{(?:(?!user|actor|principal|subject).)*\}/gi,
+        description: "Audit log entry missing user identification",
+        severity: "medium",
+        cweIds: ["CWE-778"],
+    },
+];
+/**
+ * Third-party/QSOA violation patterns
+ */
+const QSOA_PATTERNS = [
+    {
+        name: "third-party-phi-send",
+        pattern: /\b(?:sendTo|postTo|shareTo|forward(?:To)?)[A-Z]?[a-zA-Z]*(?:Vendor|ThirdParty|External|Partner)\s*\([^)]*\b(?:patient|phi|medical|health|sud)\b/gi,
+        description: "PHI sent to third party - requires QSOA/BAA",
+        severity: "high",
+        cweIds: ["CWE-359"],
+    },
+    {
+        name: "external-api-phi",
+        pattern: /axios|fetch|http\.(?:post|put|patch)\s*\([^)]*(?:external|vendor|partner|third[_\-]?party)[^)]*\b(?:patient|phi|ssn|mrn)\b/gi,
+        description: "PHI transmitted to external API - verify QSOA exists",
+        severity: "high",
+        cweIds: ["CWE-359", "CWE-319"],
+    },
+];
+/**
+ * Files to skip when scanning
+ */
+const SKIP_PATTERNS = [
+    /node_modules/,
+    /\.git\//,
+    /dist\//,
+    /build\//,
+    /coverage\//,
+    /\.lock$/,
+    /\.snap$/,
+    /\.min\./,
+    /vendor\//,
+    /\.d\.ts$/,
+    /test[s]?\//,
+    /__tests__\//,
+    /\.test\./,
+    /\.spec\./,
+];
+/**
+ * File extensions to scan
+ */
+const SCAN_EXTENSIONS = new Set([
+    ".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs",
+    ".py", ".rb", ".java", ".cs", ".go",
+    ".vue", ".svelte",
+]);
+/**
+ * Run the healthcare compliance scanner
+ */
+export async function runHealthcareScanner(projectPath) {
+    const startTime = Date.now();
+    const findings = [];
+    let filesScanned = 0;
+    logger.info("healthcare.scan.start", { projectPath });
+    try {
+        const files = await collectFiles(projectPath);
+        for (const file of files) {
+            try {
+                const content = await readFile(file, "utf-8");
+                const relativePath = relative(projectPath, file);
+                filesScanned++;
+                // Scan for PHI exposure
+                for (const pattern of PHI_PATTERNS) {
+                    const matches = findMatches(content, pattern.pattern, relativePath);
+                    for (const match of matches) {
+                        findings.push({
+                            scanner: "healthcare",
+                            ruleId: `healthcare:${pattern.name}`,
+                            file: relativePath,
+                            line: match.line,
+                            message: pattern.description,
+                            severity: pattern.severity,
+                            confidence: 90,
+                            category: pattern.category,
+                            cweIds: pattern.cweIds,
+                            evidence: match.evidence,
+                        });
+                    }
+                }
+                // Scan for PHI in logs
+                for (const pattern of PHI_LOGGING_PATTERNS) {
+                    const matches = findMatches(content, pattern.pattern, relativePath);
+                    for (const match of matches) {
+                        findings.push({
+                            scanner: "healthcare",
+                            ruleId: `healthcare:${pattern.name}`,
+                            file: relativePath,
+                            line: match.line,
+                            message: pattern.description,
+                            severity: pattern.severity,
+                            confidence: 95,
+                            category: "phi-in-logs",
+                            cweIds: pattern.cweIds,
+                            evidence: match.evidence,
+                        });
+                    }
+                }
+                // Scan for PHI in URLs
+                for (const pattern of PHI_URL_PATTERNS) {
+                    const matches = findMatches(content, pattern.pattern, relativePath);
+                    for (const match of matches) {
+                        findings.push({
+                            scanner: "healthcare",
+                            ruleId: `healthcare:${pattern.name}`,
+                            file: relativePath,
+                            line: match.line,
+                            message: pattern.description,
+                            severity: pattern.severity,
+                            confidence: 90,
+                            category: "phi-in-url",
+                            cweIds: pattern.cweIds,
+                            evidence: match.evidence,
+                        });
+                    }
+                }
+                // Scan for consent issues
+                for (const pattern of CONSENT_PATTERNS) {
+                    const matches = findMatches(content, pattern.pattern, relativePath);
+                    for (const match of matches) {
+                        findings.push({
+                            scanner: "healthcare",
+                            ruleId: `healthcare:${pattern.name}`,
+                            file: relativePath,
+                            line: match.line,
+                            message: pattern.description,
+                            severity: pattern.severity,
+                            confidence: 85,
+                            category: pattern.category,
+                            cweIds: pattern.cweIds,
+                            evidence: match.evidence,
+                        });
+                    }
+                }
+                // Scan for audit gaps
+                for (const pattern of AUDIT_GAP_PATTERNS) {
+                    const matches = findMatches(content, pattern.pattern, relativePath);
+                    for (const match of matches) {
+                        findings.push({
+                            scanner: "healthcare",
+                            ruleId: `healthcare:${pattern.name}`,
+                            file: relativePath,
+                            line: match.line,
+                            message: pattern.description,
+                            severity: pattern.severity,
+                            confidence: 75,
+                            category: "audit-gap",
+                            cweIds: pattern.cweIds,
+                            evidence: match.evidence,
+                        });
+                    }
+                }
+                // Scan for QSOA/third-party violations
+                for (const pattern of QSOA_PATTERNS) {
+                    const matches = findMatches(content, pattern.pattern, relativePath);
+                    for (const match of matches) {
+                        findings.push({
+                            scanner: "healthcare",
+                            ruleId: `healthcare:${pattern.name}`,
+                            file: relativePath,
+                            line: match.line,
+                            message: pattern.description,
+                            severity: pattern.severity,
+                            confidence: 80,
+                            category: "qsoa-violation",
+                            cweIds: pattern.cweIds,
+                            evidence: match.evidence,
+                        });
+                    }
+                }
+            }
+            catch (err) {
+                logger.warn("healthcare.scan.file.error", {
+                    file,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+            }
+        }
+        const duration = Date.now() - startTime;
+        logger.info("healthcare.scan.complete", {
+            filesScanned,
+            findings: findings.length,
+            duration,
+        });
+        return {
+            scanner: "healthcare",
+            findings,
+            duration,
+            success: true,
+            filesScanned,
+            rulesUsed: [
+                ...PHI_PATTERNS.map((p) => p.name),
+                ...PHI_LOGGING_PATTERNS.map((p) => p.name),
+                ...PHI_URL_PATTERNS.map((p) => p.name),
+                ...CONSENT_PATTERNS.map((p) => p.name),
+                ...AUDIT_GAP_PATTERNS.map((p) => p.name),
+                ...QSOA_PATTERNS.map((p) => p.name),
+            ],
+        };
+    }
+    catch (err) {
+        const duration = Date.now() - startTime;
+        const errorMessage = err instanceof Error ? err.message : String(err);
+        logger.error("healthcare.scan.failed", { error: errorMessage, duration });
+        return {
+            scanner: "healthcare",
+            findings: [],
+            duration,
+            success: false,
+            error: errorMessage,
+        };
+    }
+}
+/**
+ * Collect files to scan
+ */
+async function collectFiles(dirPath) {
+    const files = [];
+    async function walk(currentPath) {
+        const entries = await readdir(currentPath, { withFileTypes: true });
+        for (const entry of entries) {
+            const fullPath = join(currentPath, entry.name);
+            const relativePath = relative(dirPath, fullPath);
+            // Skip excluded patterns
+            if (SKIP_PATTERNS.some((p) => p.test(relativePath))) {
+                continue;
+            }
+            if (entry.isDirectory()) {
+                await walk(fullPath);
+            }
+            else if (entry.isFile()) {
+                const ext = extname(entry.name);
+                if (SCAN_EXTENSIONS.has(ext)) {
+                    files.push(fullPath);
+                }
+            }
+        }
+    }
+    await walk(dirPath);
+    return files;
+}
+/**
+ * Find pattern matches with line numbers
+ */
+function findMatches(content, pattern, _filePath) {
+    const matches = [];
+    const lines = content.split("\n");
+    // Reset regex lastIndex for global patterns
+    pattern.lastIndex = 0;
+    let match;
+    while ((match = pattern.exec(content)) !== null) {
+        // Find line number
+        const beforeMatch = content.slice(0, match.index);
+        const lineNumber = beforeMatch.split("\n").length;
+        // Get context (the line containing the match)
+        const lineContent = lines[lineNumber - 1] || "";
+        const evidence = lineContent.trim().slice(0, 200);
+        matches.push({
+            line: lineNumber,
+            evidence,
+        });
+        // Prevent infinite loop for zero-width matches
+        if (match[0].length === 0) {
+            pattern.lastIndex++;
+        }
+    }
+    return matches;
+}
+/**
+ * Check if healthcare scanner is relevant for a project
+ * (looks for healthcare-related code patterns)
+ */
+export async function isHealthcareProject(projectPath) {
+    try {
+        const files = await collectFiles(projectPath);
+        // Sample up to 50 files
+        const sampleFiles = files.slice(0, 50);
+        for (const file of sampleFiles) {
+            try {
+                const content = await readFile(file, "utf-8");
+                // Check for healthcare-related keywords
+                const healthcareKeywords = [
+                    /\bpatient\b/i,
+                    /\bHIPAA\b/i,
+                    /\bPHI\b/,
+                    /\bePHI\b/i,
+                    /\bhealthcare\b/i,
+                    /\bmedical\b/i,
+                    /\bEHR\b/,
+                    /\bEMR\b/,
+                    /\b42\s*CFR\b/i,
+                    /\bsubstance\s*use\b/i,
+                    /\bSUD\b/,
+                ];
+                if (healthcareKeywords.some((kw) => kw.test(content))) {
+                    return true;
+                }
+            }
+            catch {
+                // Skip unreadable files
+            }
+        }
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=healthcare.js.map

package/dist/scanners/healthcare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"healthcare.js","sourceRoot":"","sources":["../../src/scanners/healthcare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAQ,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAkBtC;;GAEG;AACH,MAAM,YAAY,GAOb;IACH,qBAAqB;IACrB;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,+FAA+F;QACxG,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,oEAAoE;QAC7E,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,mGAAmG;QAC5G,WAAW,EAAE,kDAAkD;QAC/D,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,4EAA4E;QACrF,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;IAED,gEAAgE;IAChE;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,qHAAqH;QAC9H,WAAW,EAAE,mFAAmF;QAChG,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,oGAAoG;QAC7G,WAAW,EAAE,0DAA0D;QACvE,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,qFAAqF;QAC9F,WAAW,EAAE,8DAA8D;QAC3E,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;IAED,qBAAqB;IACrB;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,iFAAiF;QAC1F,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,yFAAyF;QAClG,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,oBAAoB,GAMrB;IACH;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,gIAAgI;QACzI,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,+HAA+H;QACxI,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,8FAA8F;QACvG,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,iHAAiH;QAC1H,WAAW,EAAE,2CAA2C;QACxD,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAMjB;IACH;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,uEAAuE;QAChF,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EAAE,kBAAkB;QAC/B,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,qCAAqC;QAClD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAOjB;IACH;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,mEAAmE;QAC5E,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,uGAAuG;QAChH,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,mFAAmF;QAC5F,WAAW,EAAE,iDAAiD;QAC9D,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,kBAAkB,GAMnB;IACH;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,iJAAiJ;QAC1J,WAAW,EAAE,2CAA2C;QACxD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,iEAAiE;QAC1E,WAAW,EAAE,6DAA6D;QAC1E,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,uFAAuF;QAChG,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,qFAAqF;QAC9F,WAAW,EAAE,6CAA6C;QAC1D,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,aAAa,GAMd;IACH;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,mJAAmJ;QAC5J,WAAW,EAAE,6CAA6C;QAC1D,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,8HAA8H;QACvI,WAAW,EAAE,sDAAsD;QACnE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,aAAa,GAAG;IACpB,cAAc;IACd,SAAS;IACT,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,SAAS;IACT,SAAS;IACT,SAAS;IACT,UAAU;IACV,UAAU;IACV,YAAY;IACZ,aAAa;IACb,UAAU;IACV,UAAU;CACX,CAAC;AAEF;;GAEG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5C,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK;IACnC,MAAM,EAAE,SAAS;CAClB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QAE9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC9C,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBACjD,YAAY,EAAE,CAAC;gBAEf,wBAAwB;gBACxB,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;oBACnC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,YAAY;4BACrB,MAAM,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE;4BACpC,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,OAAO,EAAE,OAAO,CAAC,WAAW;4BAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,UAAU,EAAE,EAAE;4BACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;yBACzB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,uBAAuB;gBACvB,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;oBAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,YAAY;4BACrB,MAAM,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE;4BACpC,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,OAAO,EAAE,OAAO,CAAC,WAAW;4BAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,UAAU,EAAE,EAAE;4BACd,QAAQ,EAAE,aAAa;4BACvB,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;yBACzB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,uBAAuB;gBACvB,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;oBACvC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,YAAY;4BACrB,MAAM,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE;4BACpC,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,OAAO,EAAE,OAAO,CAAC,WAAW;4BAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,UAAU,EAAE,EAAE;4BACd,QAAQ,EAAE,YAAY;4BACtB,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;yBACzB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,0BAA0B;gBAC1B,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;oBACvC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,YAAY;4BACrB,MAAM,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE;4BACpC,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,OAAO,EAAE,OAAO,CAAC,WAAW;4BAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,UAAU,EAAE,EAAE;4BACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;yBACzB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,sBAAsB;gBACtB,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;oBACzC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,YAAY;4BACrB,MAAM,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE;4BACpC,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,OAAO,EAAE,OAAO,CAAC,WAAW;4BAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,UAAU,EAAE,EAAE;4BACd,QAAQ,EAAE,WAAW;4BACrB,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;yBACzB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,uCAAuC;gBACvC,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;oBACpC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;oBACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,YAAY;4BACrB,MAAM,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE;4BACpC,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,OAAO,EAAE,OAAO,CAAC,WAAW;4BAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,UAAU,EAAE,EAAE;4BACd,QAAQ,EAAE,gBAAgB;4BAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;yBACzB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;oBACxC,IAAI;oBACJ,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;YACtC,YAAY;YACZ,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;YACR,QAAQ;YACR,OAAO,EAAE,IAAI;YACb,YAAY;YACZ,SAAS,EAAE;gBACT,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBAClC,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1C,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aACpC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,MAAM,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEtE,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE1E,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ,EAAE,EAAE;YACZ,QAAQ;YACR,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,YAAY;SACpB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,UAAU,IAAI,CAAC,WAAmB;QACrC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEjD,yBAAyB;YACzB,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBACpD,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,OAAe,EACf,OAAe,EACf,SAAiB;IAEjB,MAAM,OAAO,GAA8C,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,4CAA4C;IAC5C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IAEtB,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,mBAAmB;QACnB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAElD,8CAA8C;QAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAElD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,UAAU;YAChB,QAAQ;SACT,CAAC,CAAC;QAEH,+CAA+C;QAC/C,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QAE9C,wBAAwB;QACxB,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAE9C,wCAAwC;gBACxC,MAAM,kBAAkB,GAAG;oBACzB,cAAc;oBACd,YAAY;oBACZ,SAAS;oBACT,WAAW;oBACX,iBAAiB;oBACjB,cAAc;oBACd,SAAS;oBACT,SAAS;oBACT,eAAe;oBACf,sBAAsB;oBACtB,SAAS;iBACV,CAAC;gBAEF,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBACtD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/scanners/index.d.ts

@@ -19,6 +19,7 @@ export { runBrakeman, checkBrakemanAvailable, detectRails } from "./brakeman.js"
 export { runBinaryAnalysis, checkBinaryAnalysisAvailable, detectNativeModules } from "./binary-analysis.js";
 export { runMemorySafetyAnalysis, checkCppcheckAvailable, checkCargoGeigerAvailable, detectUnsafeLanguages } from "./memory-safety.js";
 export { runRaceConditionAnalysis } from "./race-condition.js";
+export { runHealthcareScanner, isHealthcareProject } from "./healthcare.js";
 import type { AggregatedScanResult, ScannerOptions, ScannerType } from "./types.js";
 import type { Severity } from "../certification/types.js";
 /**

package/dist/scanners/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scanners/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjF,OAAO,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC5G,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACvI,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAQ/D,OAAO,KAAK,EACV,oBAAoB,EACpB,cAAc,EAEd,WAAW,EAEZ,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAkB1D;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,oBAAoB,CAAC,CAyH/B;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgB5E;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBtE;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA0BtE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAUxE;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAU3E;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoB3F;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,4BAA4B,CAChD,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;IAC5B,gEAAgE;IAChE,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;CAC9B,GACA,OAAO,CAAC,oBAAoB,GAAG;IAAE,iBAAiB,EAAE,gBAAgB,CAAA;CAAE,CAAC,CA4EzE;AAmLD;;GAEG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CACrD,MAAM,CAAC,WAAW,EAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAC9E,CA+BA;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAAC,WAAW,EAAE;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IACF,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC,CA2ID;AAED;;GAEG;AACH,wBAAgB,sCAAsC,CACpD,UAAU,EAAE,oBAAoB,GAC/B,KAAK,CAAC;IACP,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,GAAG,CAAC;IAChB,cAAc,EAAE,WAAW,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAoDD;AAmDD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CA+C3E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scanners/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjF,OAAO,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC5G,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACvI,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAQ5E,OAAO,KAAK,EACV,oBAAoB,EACpB,cAAc,EAEd,WAAW,EAEZ,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAkB1D;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,oBAAoB,CAAC,CA0H/B;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgB5E;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBtE;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA0BtE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAUxE;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAU3E;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoB3F;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,4BAA4B,CAChD,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;IAC5B,gEAAgE;IAChE,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;CAC9B,GACA,OAAO,CAAC,oBAAoB,GAAG;IAAE,iBAAiB,EAAE,gBAAgB,CAAA;CAAE,CAAC,CA4EzE;AAoLD;;GAEG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CACrD,MAAM,CAAC,WAAW,EAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAC9E,CAgCA;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAAC,WAAW,EAAE;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IACF,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC,CAqJD;AAED;;GAEG;AACH,wBAAgB,sCAAsC,CACpD,UAAU,EAAE,oBAAoB,GAC/B,KAAK,CAAC;IACP,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,GAAG,CAAC;IAChB,cAAc,EAAE,WAAW,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAqDD;AA8DD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CA+C3E"}

package/dist/scanners/index.js

@@ -20,6 +20,8 @@ export { runBrakeman, checkBrakemanAvailable, detectRails } from "./brakeman.js"
 export { runBinaryAnalysis, checkBinaryAnalysisAvailable, detectNativeModules } from "./binary-analysis.js";
 export { runMemorySafetyAnalysis, checkCppcheckAvailable, checkCargoGeigerAvailable, detectUnsafeLanguages } from "./memory-safety.js";
 export { runRaceConditionAnalysis } from "./race-condition.js";
+// Healthcare compliance scanner (HIPAA, 42 CFR Part 2)
+export { runHealthcareScanner, isHealthcareProject } from "./healthcare.js";
 import { DEFAULT_SCANNER_OPTIONS } from "./types.js";
 import { runDependencyAudit } from "./dependencies.js";
 import { runTypeScriptAnalysis } from "./typescript.js";
@@ -109,6 +111,7 @@ export async function runAllScanners(projectPath, options) {
         "binary-analysis": 0,
         "memory-safety": 0,
         "race-condition": 0,
+        healthcare: 0,
         plugin: 0,
     };
     for (const finding of allFindings) {
@@ -423,6 +426,7 @@ async function runAllScannersExtended(projectPath, options) {
         "binary-analysis": 0,
         "memory-safety": 0,
         "race-condition": 0,
+        healthcare: 0,
         plugin: 0,
     };
     for (const finding of allFindings) {
@@ -515,6 +519,7 @@ export async function checkScannersAvailable() {
         "binary-analysis": { available: binaryAvailable, version: "1.0.0" },
         "memory-safety": { available: true, version: "1.0.0" }, // Pattern-based analysis always available
         "race-condition": { available: true, version: "1.0.0" }, // Pattern-based analysis always available
+        healthcare: { available: true, version: "1.0.0" }, // Pattern-based PHI/consent analysis always available
         plugin: { available: true, version: "1.0.0" }, // Plugin loader is always available
     };
 }
@@ -649,6 +654,16 @@ export function getScannerInstallCommands() {
             },
             documentation: "https://github.com/vaspera/hardening-mcp#race-condition",
         },
+        healthcare: {
+            name: "Healthcare Scanner",
+            description: "HIPAA/42 CFR Part 2 compliance scanner for PHI exposure, consent validation, and audit gaps",
+            installCommands: {
+                macos: "Built-in pattern analysis (no installation required)",
+                linux: "Built-in pattern analysis (no installation required)",
+                windows: "Built-in pattern analysis (no installation required)",
+            },
+            documentation: "https://github.com/vaspera/hardening-mcp#healthcare",
+        },
         plugin: {
             name: "Custom Plugin",
             description: "Custom scanner plugin loaded from .vaspera/plugins/",
@@ -691,6 +706,7 @@ export function scannerFindingsToCertificationFindings(scanResult) {
             "binary-analysis": "bin",
             "memory-safety": "mem",
             "race-condition": "rac",
+            healthcare: "hc",
             plugin: "plg",
         };
         const prefix = prefixMap[scanner];
@@ -753,6 +769,23 @@ function getCategoryFromScanner(finding) {
     if (finding.scanner === "brakeman") {
         return "ruby-security";
     }
+    if (finding.scanner === "healthcare") {
+        // Return the finding's category directly if set
+        if (finding.category)
+            return finding.category;
+        // Otherwise infer from rule ID
+        if (ruleId.includes("phi"))
+            return "phi-exposure";
+        if (ruleId.includes("sud"))
+            return "sud-disclosure";
+        if (ruleId.includes("consent"))
+            return "consent-bypass";
+        if (ruleId.includes("audit"))
+            return "audit-gap";
+        if (ruleId.includes("qsoa"))
+            return "qsoa-violation";
+        return "phi-exposure";
+    }
     if (ruleId.includes("auth")) {
         return "authentication";
     }