vaspera 2.8.0 → 2.9.2

package/dist/__tests__/agents/adversary/tactics/api.test.js

@@ -0,0 +1,369 @@
+/**
+ * Tests for API Security Tactics Module
+ */
+import { describe, it, expect } from "vitest";
+import { apiTactic } from "../../../../agents/adversary/tactics/api.js";
+import { createFileContext } from "../../../../agents/adversary/tactics/index.js";
+const mockConfig = {
+    model: "claude-sonnet-4-20250514",
+    aggressiveness: "passive",
+    focusAreas: ["api"],
+    maxAnalysisTime: 60000,
+    generatePoC: false,
+};
+describe("API Security Tactics", () => {
+    describe("Module Registration", () => {
+        it("has correct focus area", () => {
+            expect(apiTactic.focusArea).toBe("api");
+        });
+        it("has correct name and description", () => {
+            expect(apiTactic.name).toBe("API Security");
+            expect(apiTactic.description).toContain("IDOR");
+            expect(apiTactic.description).toContain("BOLA");
+        });
+        it("has patterns defined", () => {
+            expect(apiTactic.patterns.length).toBeGreaterThan(0);
+        });
+        it("returns relevant file patterns", () => {
+            const patterns = apiTactic.getRelevantFilePatterns();
+            expect(patterns).toContain("**/api/**");
+            expect(patterns).toContain("**/routes/**");
+            expect(patterns).toContain("**/controllers/**");
+            expect(patterns).toContain("**/graphql/**");
+        });
+        it("provides LLM prompt enhancement", () => {
+            const prompt = apiTactic.getPromptEnhancement();
+            expect(prompt).toContain("IDOR");
+            expect(prompt).toContain("BOLA");
+            expect(prompt).toContain("GraphQL");
+            expect(prompt).toContain("Mass Assignment");
+        });
+    });
+    describe("IDOR Detection", () => {
+        it("detects direct ID usage without authorization", async () => {
+            const code = `
+        router.get('/api/posts/:id', async (req, res) => {
+          const post = await Post.findById(req.params.id);
+          res.json(post);
+        });
+      `;
+            const file = createFileContext("/test", "/test/api/routes.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const idorFinding = findings.find((f) => f.patternId === "idor-direct-id");
+            expect(idorFinding).toBeDefined();
+            expect(idorFinding?.severity).toBe("high");
+            expect(idorFinding?.cweIds).toContain("CWE-639");
+        });
+        it("detects file path IDOR", async () => {
+            const code = `
+        app.get('/download', async (req, res) => {
+          const data = await fs.readFile(req.query.path);
+          res.send(data);
+        });
+      `;
+            const file = createFileContext("/test", "/test/api/download.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const fileFinding = findings.find((f) => f.patternId === "idor-file-path");
+            expect(fileFinding).toBeDefined();
+            expect(fileFinding?.severity).toBe("critical");
+        });
+        it("skips test files", async () => {
+            const code = `
+        const testPost = await Post.findById(req.params.id);
+      `;
+            const file = createFileContext("/test", "/test/api/routes.test.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            expect(findings.length).toBe(0);
+        });
+    });
+    describe("BOLA Detection", () => {
+        it("detects missing object-level authorization on read", async () => {
+            const code = `
+        async function getOrder(req, res) {
+          const order = await Order.findOne({ id: req.params.id })
+            .then(order => res.json(order));
+        }
+      `;
+            const file = createFileContext("/test", "/test/api/orders.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const bolaFinding = findings.find((f) => f.patternId === "bola-missing-authz");
+            expect(bolaFinding).toBeDefined();
+            expect(bolaFinding?.severity).toBe("high");
+        });
+        it("detects BOLA on update operations", async () => {
+            const code = `
+        router.put('/posts/:id', async (req, res) => {
+          await Post.update({ id: req.params.id }, req.body);
+          res.json({ success: true });
+        });
+      `;
+            const file = createFileContext("/test", "/test/api/posts.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const updateFinding = findings.find((f) => f.patternId === "bola-update-no-check");
+            expect(updateFinding).toBeDefined();
+            expect(updateFinding?.severity).toBe("critical");
+        });
+        it("detects BOLA on delete operations", async () => {
+            const code = `
+        async deletePost(req, res) {
+          await Post.delete(req.params.id);
+          res.sendStatus(204);
+        }
+      `;
+            const file = createFileContext("/test", "/test/api/posts.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const deleteFinding = findings.find((f) => f.patternId === "bola-delete-no-check");
+            expect(deleteFinding).toBeDefined();
+            expect(deleteFinding?.severity).toBe("critical");
+        });
+    });
+    describe("GraphQL Detection", () => {
+        it("detects missing depth limit", async () => {
+            const code = `
+        const server = new ApolloServer({
+          typeDefs,
+          resolvers,
+        });
+      `;
+            const file = createFileContext("/test", "/test/graphql/server.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const depthFinding = findings.find((f) => f.patternId === "graphql-no-depth-limit");
+            expect(depthFinding).toBeDefined();
+            expect(depthFinding?.severity).toBe("medium");
+            expect(depthFinding?.cweIds).toContain("CWE-770");
+        });
+        it("detects missing cost analysis", async () => {
+            const code = `
+        const server = new GraphQLServer({
+          schema,
+        });
+      `;
+            const file = createFileContext("/test", "/test/graphql/server.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const costFinding = findings.find((f) => f.patternId === "graphql-no-cost-analysis");
+            expect(costFinding).toBeDefined();
+        });
+        it("detects introspection enabled", async () => {
+            const code = `
+        const server = new ApolloServer({
+          schema,
+          introspection: true,
+        });
+      `;
+            const file = createFileContext("/test", "/test/graphql/server.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const introspectionFinding = findings.find((f) => f.patternId === "graphql-introspection-prod");
+            expect(introspectionFinding).toBeDefined();
+            expect(introspectionFinding?.severity).toBe("low");
+        });
+    });
+    describe("Mass Assignment Detection", () => {
+        it("detects object spread with user input", async () => {
+            const code = `
+        async createUser(req, res) {
+          const user = await User.create({ ...req.body });
+          res.json(user);
+        }
+      `;
+            const file = createFileContext("/test", "/test/api/users.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const massFinding = findings.find((f) => f.patternId === "mass-assignment-spread");
+            expect(massFinding).toBeDefined();
+            expect(massFinding?.severity).toBe("high");
+            expect(massFinding?.cweIds).toContain("CWE-915");
+        });
+        it("detects Object.assign with unfiltered input", async () => {
+            const code = `
+        function updateProfile(req, res) {
+          Object.assign(user, req.body);
+          user.save();
+        }
+      `;
+            const file = createFileContext("/test", "/test/api/profile.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const assignFinding = findings.find((f) => f.patternId === "mass-assignment-assign");
+            expect(assignFinding).toBeDefined();
+            expect(assignFinding?.severity).toBe("high");
+        });
+        it("detects ORM mass assignment", async () => {
+            const code = `
+        router.post('/users', async (req, res) => {
+          const user = await User.create(req.body);
+          res.json(user);
+        });
+      `;
+            const file = createFileContext("/test", "/test/api/users.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const ormFinding = findings.find((f) => f.patternId === "mass-assignment-orm");
+            expect(ormFinding).toBeDefined();
+        });
+    });
+    describe("Rate Limiting Detection", () => {
+        it("detects missing rate limit on endpoint", async () => {
+            const code = `
+        app.post('/api/login', async (req, res) => {
+          const user = await authenticate(req.body);
+          res.json({ token: user.token });
+        });
+      `;
+            const file = createFileContext("/test", "/test/api/auth.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const rateFinding = findings.find((f) => f.patternId === "api-no-rate-limit");
+            expect(rateFinding).toBeDefined();
+            expect(rateFinding?.severity).toBe("medium");
+            expect(rateFinding?.cweIds).toContain("CWE-770");
+        });
+        it("detects expensive operation without limit", async () => {
+            const code = `
+        const process = async (req, res) => {
+          const data = await processLargeDataset();
+          const report = computeComplexAnalysis(data);
+          res.json(report);
+        };
+      `;
+            const file = createFileContext("/test", "/test/api/reports.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const expensiveFinding = findings.find((f) => f.patternId === "api-expensive-no-limit");
+            expect(expensiveFinding).toBeDefined();
+            expect(expensiveFinding?.severity).toBe("high");
+        });
+    });
+    describe("Data Exposure Detection", () => {
+        it("detects full object return", async () => {
+            const code = `
+        router.get('/users/:id', async (req, res) => {
+          const user = await User.findById(req.params.id);
+          res.json(user);
+        });
+      `;
+            const file = createFileContext("/test", "/test/api/users.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const exposureFinding = findings.find((f) => f.patternId === "api-full-object-return");
+            expect(exposureFinding).toBeDefined();
+            expect(exposureFinding?.severity).toBe("medium");
+            expect(exposureFinding?.cweIds).toContain("CWE-200");
+        });
+        it("detects SELECT * queries", async () => {
+            const code = `
+        const users = await db.query('SELECT * FROM users WHERE id = ?', [userId]);
+      `;
+            const file = createFileContext("/test", "/test/api/users.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const selectFinding = findings.find((f) => f.patternId === "api-all-fields-select");
+            expect(selectFinding).toBeDefined();
+        });
+        it("detects sensitive fields in response", async () => {
+            const code = `
+        res.json({
+          id: user.id,
+          email: user.email,
+          password: user.password,
+          token: user.apiToken
+        });
+      `;
+            const file = createFileContext("/test", "/test/api/auth.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            const sensitiveFinding = findings.find((f) => f.patternId === "api-sensitive-fields");
+            expect(sensitiveFinding).toBeDefined();
+            expect(sensitiveFinding?.severity).toBe("high");
+        });
+    });
+    describe("PoC Generation", () => {
+        it("generates IDOR PoC", async () => {
+            const finding = {
+                id: "test-idor",
+                patternId: "idor-direct-id",
+                file: "api/posts.ts",
+                line: 10,
+            };
+            const poc = await apiTactic.generatePoC(finding);
+            expect(poc).toBeDefined();
+            expect(poc?.steps.length).toBeGreaterThan(0);
+            expect(poc?.safeTestInstructions).toContain("test account");
+        });
+        it("generates BOLA PoC", async () => {
+            const finding = {
+                id: "test-bola",
+                patternId: "bola-missing-authz",
+                file: "api/orders.ts",
+                line: 15,
+            };
+            const poc = await apiTactic.generatePoC(finding);
+            expect(poc).toBeDefined();
+            expect(poc?.steps.length).toBeGreaterThan(0);
+            expect(poc?.expectedResult).toContain("ownership");
+        });
+        it("generates GraphQL depth limit PoC", async () => {
+            const finding = {
+                id: "test-graphql",
+                patternId: "graphql-no-depth-limit",
+                file: "graphql/server.ts",
+                line: 20,
+            };
+            const poc = await apiTactic.generatePoC(finding);
+            expect(poc).toBeDefined();
+            expect(poc?.payload).toContain("nested");
+        });
+        it("generates mass assignment PoC", async () => {
+            const finding = {
+                id: "test-mass",
+                patternId: "mass-assignment-spread",
+                file: "api/users.ts",
+                line: 25,
+            };
+            const poc = await apiTactic.generatePoC(finding);
+            expect(poc).toBeDefined();
+            expect(poc?.expectedResult).toContain("assignment");
+        });
+        it("returns null for unsupported pattern", async () => {
+            const finding = {
+                id: "test-unknown",
+                patternId: "unknown-pattern",
+                file: "test.ts",
+                line: 1,
+            };
+            const poc = await apiTactic.generatePoC(finding);
+            expect(poc).toBeNull();
+        });
+    });
+    describe("Pattern Coverage", () => {
+        it("covers all CWEs mentioned in requirements", () => {
+            const cwes = apiTactic.patterns.map((p) => p.cwe);
+            expect(cwes).toContain("CWE-639"); // IDOR
+            expect(cwes).toContain("CWE-284"); // BOLA
+            expect(cwes).toContain("CWE-770"); // GraphQL complexity
+            expect(cwes).toContain("CWE-915"); // Mass assignment
+            expect(cwes).toContain("CWE-200"); // Data exposure
+        });
+        it("has reasonable severity distribution", () => {
+            const critical = apiTactic.patterns.filter((p) => p.severity === "critical").length;
+            const high = apiTactic.patterns.filter((p) => p.severity === "high").length;
+            const medium = apiTactic.patterns.filter((p) => p.severity === "medium").length;
+            expect(critical).toBeGreaterThan(0);
+            expect(high).toBeGreaterThan(0);
+            expect(medium).toBeGreaterThan(0);
+        });
+    });
+    describe("False Positive Handling", () => {
+        it("skips comments", async () => {
+            const code = `
+        // const post = await Post.findById(req.params.id);
+        /*
+         * await User.update(req.params.id, req.body);
+         */
+      `;
+            const file = createFileContext("/test", "/test/api/test.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            expect(findings.length).toBe(0);
+        });
+        it("skips mock/fixture files", async () => {
+            const code = `
+        const user = await User.create({ ...req.body });
+      `;
+            const file = createFileContext("/test", "/test/mocks/user-fixture.ts", code);
+            const findings = await apiTactic.analyzeFile(file, mockConfig);
+            expect(findings.length).toBe(0);
+        });
+    });
+});
+//# sourceMappingURL=api.test.js.map

package/dist/__tests__/agents/adversary/tactics/api.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.test.js","sourceRoot":"","sources":["../../../../../src/__tests__/agents/adversary/tactics/api.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,6CAA6C,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+CAA+C,CAAC;AAGlF,MAAM,UAAU,GAAoB;IAClC,KAAK,EAAE,0BAA0B;IACjC,cAAc,EAAE,SAAS;IACzB,UAAU,EAAE,CAAC,KAAK,CAAC;IACnB,eAAe,EAAE,KAAK;IACtB,WAAW,EAAE,KAAK;CACnB,CAAC;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAChC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5C,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,uBAAuB,EAAE,CAAC;YACrD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,MAAM,GAAG,SAAS,CAAC,oBAAoB,EAAE,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC;YAC3E,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,uBAAuB,EAAE,IAAI,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC;YAC3E,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAChC,MAAM,IAAI,GAAG;;OAEZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAC;YAC1E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,oBAAoB,CAAC,CAAC;YAC/E,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,sBAAsB,CAAC,CAAC;YACnF,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,sBAAsB,CAAC,CAAC;YACnF,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,yBAAyB,EAAE,IAAI,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,wBAAwB,CAAC,CAAC;YACpF,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,IAAI,GAAG;;;;OAIZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,yBAAyB,EAAE,IAAI,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,0BAA0B,CAAC,CAAC;YACrF,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,yBAAyB,EAAE,IAAI,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,oBAAoB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,4BAA4B,CAAC,CAAC;YAChG,MAAM,CAAC,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,wBAAwB,CAAC,CAAC;YACnF,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,wBAAwB,CAAC,CAAC;YACrF,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,qBAAqB,CAAC,CAAC;YAC/E,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,mBAAmB,CAAC,CAAC;YAC9E,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,IAAI,GAAG;;;;;;OAMZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,wBAAwB,CAAC,CAAC;YACxF,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,wBAAwB,CAAC,CAAC;YACvF,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,IAAI,GAAG;;OAEZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,uBAAuB,CAAC,CAAC;YACpF,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,IAAI,GAAG;;;;;;;OAOZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,sBAAsB,CAAC,CAAC;YACtF,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAClC,MAAM,OAAO,GAAQ;gBACnB,EAAE,EAAE,WAAW;gBACf,SAAS,EAAE,gBAAgB;gBAC3B,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,EAAE;aACT,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAEjD,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAClC,MAAM,OAAO,GAAQ;gBACnB,EAAE,EAAE,WAAW;gBACf,SAAS,EAAE,oBAAoB;gBAC/B,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,EAAE;aACT,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAEjD,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,OAAO,GAAQ;gBACnB,EAAE,EAAE,cAAc;gBAClB,SAAS,EAAE,wBAAwB;gBACnC,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,EAAE;aACT,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAEjD,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,OAAO,GAAQ;gBACnB,EAAE,EAAE,WAAW;gBACf,SAAS,EAAE,wBAAwB;gBACnC,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,EAAE;aACT,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAEjD,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,OAAO,GAAQ;gBACnB,EAAE,EAAE,cAAc;gBAClB,SAAS,EAAE,iBAAiB;gBAC5B,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,CAAC;aACR,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAElD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB;YACxD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB;YACrD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;YACpF,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;YAC5E,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;YAEhF,MAAM,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC9B,MAAM,IAAI,GAAG;;;;;OAKZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,IAAI,GAAG;;OAEZ,CAAC;YAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,6BAA6B,EAAE,IAAI,CAAC,CAAC;YAC7E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE/D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/agents/adversary/tactics/llm.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Unit tests for LLM security tactics module
+ */
+export {};
+//# sourceMappingURL=llm.test.d.ts.map

package/dist/__tests__/agents/adversary/tactics/llm.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm.test.d.ts","sourceRoot":"","sources":["../../../../../src/__tests__/agents/adversary/tactics/llm.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}