xploitscan-shared-rules 1.2.1 → 1.3.0

package/dist/index.d.cts

@@ -1,3 +1,6 @@
+import { ParseResult } from '@babel/parser';
+import { File, Node, CallExpression, ObjectExpression, BinaryExpression } from '@babel/types';
+
 type Severity = "critical" | "high" | "medium" | "low" | "info";
 type Confidence = "high" | "medium" | "low";
 interface Finding {
@@ -209,6 +212,54 @@ declare const hardcodedVercelToken: CustomRule;
 declare const hardcodedSupabaseServiceRole: CustomRule;
 declare const hardcodedVaultToken: CustomRule;
 declare const hardcodedPineconeKey: CustomRule;
+declare const hardcodedCohereKey: CustomRule;
+declare const hardcodedReplicateKey: CustomRule;
+declare const hardcodedMistralKey: CustomRule;
+declare const hardcodedTogetherKey: CustomRule;
+declare const hardcodedGroqKey: CustomRule;
+declare const hardcodedFireworksKey: CustomRule;
+declare const hardcodedPostmarkKey: CustomRule;
+declare const hardcodedResendKey: CustomRule;
+declare const hardcodedLoopsKey: CustomRule;
+declare const hardcodedCloudflareToken: CustomRule;
+declare const hardcodedFastlyToken: CustomRule;
+declare const hardcodedNetlifyToken: CustomRule;
+declare const hardcodedRailwayToken: CustomRule;
+declare const hardcodedFlyToken: CustomRule;
+declare const hardcodedAlgoliaAdminKey: CustomRule;
+declare const hardcodedQdrantKey: CustomRule;
+declare const hardcodedWeaviateKey: CustomRule;
+declare const hardcodedLinearKey: CustomRule;
+declare const hardcodedNotionKey: CustomRule;
+declare const hardcodedDiscordToken: CustomRule;
+declare const hardcodedIntercomToken: CustomRule;
+declare const hardcodedSentryAuthToken: CustomRule;
+declare const hardcodedLogtailToken: CustomRule;
+declare const hardcodedHighlightKey: CustomRule;
+declare const hardcodedPlivoToken: CustomRule;
+declare const ghaPullRequestTargetCheckout: CustomRule;
+declare const ghaPermissionsWriteAll: CustomRule;
+declare const ghaExpressionInjection: CustomRule;
+declare const ghaThirdPartyActionWithSecrets: CustomRule;
+declare const dockerfileADDInsteadOfCOPY: CustomRule;
+declare const dockerfileUnverifiedShellPipe: CustomRule;
+declare const dockerfileMissingHealthcheck: CustomRule;
+declare const pyRequestsVerifyFalse: CustomRule;
+declare const pyJinja2AutoescapeOff: CustomRule;
+declare const pyTempfileMktemp: CustomRule;
+declare const pyDjangoMarkSafe: CustomRule;
+declare const pyParamikoAutoAdd: CustomRule;
+declare const pyDjangoAllowedHostsWildcard: CustomRule;
+declare const pyJWTDecodeWeakConfig: CustomRule;
+declare const llmPromptInjection: CustomRule;
+declare const llmSystemPromptInjection: CustomRule;
+declare const llmOutputAsHTML: CustomRule;
+declare const vectorStoreQueryNoUserFilter: CustomRule;
+declare const vectorStoreUpsertNoMetadata: CustomRule;
+declare const llmCallNoMaxTokens: CustomRule;
+declare const graphqlNoDepthLimit: CustomRule;
+declare const graphqlNoComplexityLimit: CustomRule;
+declare const graphqlCSRFDisabled: CustomRule;
 declare const secretInURLParam: CustomRule;
 declare const secretLoggedToConsole: CustomRule;
 declare const secretInErrorResponse: CustomRule;
@@ -289,4 +340,115 @@ declare function scanEntropy(files: {
     content: string;
 }[]): Finding[];
 
-export { type AIFilterResult, type Confidence, type CustomRule, type DetectedFramework, type FilteredFinding, type Finding, type GradeResult, type RuleMatch, type SecurityGrade, type Severity, allCustomRules, allRules, androidDebuggable, blockingMainThread, calculateGrade, callbackHell, clickjacking, clientComponentSecret, clientSideAuth, commandInjection, complianceMap, consoleLogProduction, corsLocalhost, corsServerless, corsWildcard, dangerousInnerHTML, deprecatedTLS, detectFramework, disabledTLSVerification, djangoDebug, dockerCopySensitive, dockerLatestTag, dockerRunAsRoot, dockerTooManyPorts, ecbModeEncryption, electronNavigationUnrestricted, emptyCatchBlock, envNotGitignored, evalUsage, eventListenerLeak, exposedAdminRoutes, exposedAuthSecret, exposedDBCredentials, exposedDatabaseStudio, exposedDebugMode, exposedDockerPorts, exposedEnvFile, exposedGitDir, exposedServerActions, exposedSourceMaps, exposedStackTraces, filterFalsePositives, firebaseClientConfig, flaskSecretKey, freeRules, getSnippet, githubActionsInjection, graphqlIntrospection, hardcodedAnthropicKey, hardcodedDatadogKey, hardcodedEncryptionKey, hardcodedGCPServiceAccount, hardcodedGitHubPAT, hardcodedGitLabToken, hardcodedIPAllowlist, hardcodedJWTSecret, hardcodedMailgunKey, hardcodedOAuthSecret, hardcodedPineconeKey, hardcodedSecrets, hardcodedSendGridKey, hardcodedShopifyToken, hardcodedSlackToken, hardcodedSupabaseServiceRole, hardcodedTwilioKey, hardcodedVaultToken, hardcodedVercelToken, hostHeaderRedirect, httpRequestSmuggling, insecureCookies, insecureDeepLink, insecureDeserialization, insecureDirectObjectReference, insecureElectronWindow, insecureFileUpload, insecureGRPC, insecureHTTPMethods, insecurePasswordReset, insecureRandomness, insecureWebSocket, ipcPathTraversal, javaDeserialization, jwtAlgConfusion, k8sNoResourceLimits, k8sPrivileged, k8sSecretNotEncrypted, lambdaWithoutVPC, largeBundleImport, logInjection, magicNumbers, massAssignment, missingAIRateLimit, missingAuthMiddleware, missingAuthRateLimit, missingBruteForce, missingCSP, missingCSRF, missingCertPinning, missingCloudTrail, missingContentDisposition, missingDBEncryption, missingErrorBoundary, missingFileSizeLimits, missingHSTS, missingHTTPS, missingLockFile, missingOAuthState, missingPagination, missingRequestSizeLimit, missingRequestValidation, missingSRI, missingSecurityMeta, nPlusOneQuery, nextPublicSecret, noRateLimiting, nosqlInjection, openRedirectParams, overlyPermissiveIAM, pathTraversal, pickleDeserialization, piiInLogs, prototypePollution, raceCondition, rdsPubliclyAccessible, reflectedCORSOrigin, regexDos, runCustomRules, s3BucketNoEncryption, scanEntropy, secretInBundleConfig, secretInCLIArgument, secretInErrorResponse, secretInHTMLAttribute, secretInURLParam, secretLoggedToConsole, secretsInCI, securityGroupAllInbound, sensitiveAsyncStorage, sensitiveLocalStorage, sensitiveURLParams, sessionFixation, sqlInjection, ssrfVulnerability, ssti, stripeWebhookUnprotected, supabaseAnonAdmin, supabaseNoRLS, syncFileOps, terraformStateExposed, timingAttack, todoLeftInCode, unencryptedPII, unpinnedGitHubAction, unprotectedAPIRoutes, unprotectedDownload, unsafeObjectAssign, unsanitizedFilenames, unsanitizedHTMLExport, unvalidatedAPIParams, unvalidatedEventData, unvalidatedRedirect, vulnerableDependencies, weakHashing, weakPasswordRequirements, weakRSAKeySize, webhookSignatureVerification, xssVulnerability, xxeVulnerability };
+/**
+ * Centralized Babel parser with per-file caching.
+ *
+ * Rules that opt in to AST analysis call parseFile(content, filename) to get
+ * a Program node back. Parsing is expensive (~5-50ms per KB of source); the
+ * LRU cache ensures a single scan pass touches each file at most once even
+ * when multiple rules walk the same AST.
+ *
+ * Failure mode: returns null on parse errors. Callers fall back to regex-only
+ * behavior so a syntax-error file in the user's repo can never break a scan.
+ */
+
+interface ParsedFile {
+    ast: ParseResult<File>;
+    language: "js" | "ts" | "jsx" | "tsx";
+}
+/**
+ * Parse a JS/TS file. Returns null for unsupported extensions, parse errors,
+ * or empty content. Callers MUST handle null and fall back to regex-only.
+ */
+declare function parseFile(content: string, filename: string): ParsedFile | null;
+
+/**
+ * Lightweight taint tracking for AST-based rules.
+ *
+ * "Tainted" means "derived from untrusted input" — an Express/Next request
+ * body, query string, params, or headers; process.argv; environment
+ * variables known to be user-controlled; or file contents read at runtime.
+ *
+ * This is deliberately a local-only analysis: we walk the AST of one file,
+ * track which identifiers bind to a tainted source, and propagate through
+ * direct assignments and destructuring. Cross-function and cross-file flow
+ * is out of scope for Phase A — those require a module graph we don't build
+ * yet. A conservative local analysis is still enough to flip the benchmark
+ * recall on the data-flow rules.
+ *
+ * The analysis returns a TaintMap the rules can query:
+ *   isTainted(node) → "is this AST expression tainted?"
+ *   isTaintedIdent(name) → "is this identifier currently bound to tainted
+ *                          data in the file-level scope?"
+ *
+ * Shape of recognized sources:
+ *   req.body, req.query, req.params, req.headers, req.cookies
+ *   request.body, request.query, ... (Fastify)
+ *   ctx.request.body, ctx.query (Koa)
+ *   process.argv, process.env[Keys known to be user-controllable]
+ *   event.queryStringParameters, event.body (AWS Lambda / API Gateway)
+ *   searchParams.get(...), url.searchParams (Next.js / Web fetch API)
+ */
+
+interface TaintMap {
+    /** true iff the given expression node evaluates to tainted data. */
+    isTainted(node: Node | null | undefined): boolean;
+    /** true iff the named identifier is bound to tainted data somewhere visible. */
+    isTaintedIdent(name: string): boolean;
+    /** Debug: all identifiers the analysis marked tainted, in discovery order. */
+    taintedNames(): string[];
+}
+/**
+ * Build a TaintMap for one parsed file. Single traversal, propagates taint
+ * through:
+ *   - const/let bindings: const x = req.body.foo → x tainted
+ *   - destructuring: const { foo } = req.body → foo tainted
+ *   - assignment expressions: y = x; x is tainted → y tainted
+ *   - function params named req/request/ctx (inside handlers, `req.body` is
+ *     tainted even if we didn't see the outer binding)
+ */
+declare function buildTaintMap(parsed: ParsedFile): TaintMap;
+
+/**
+ * Visitor helpers for rule authors. Each helper takes a parsed file and a
+ * callback, and walks the AST in the most common pattern (find call
+ * expressions to a particular function, find member expressions of a
+ * particular shape, etc.).
+ *
+ * The rule code stays short and declarative; this file carries the
+ * @babel/traverse boilerplate and default-export interop.
+ */
+
+/**
+ * Visit every BinaryExpression in the parsed file. Rule authors use this to
+ * catch `a === b` / `a !== b` comparisons where one side is a secret identifier.
+ */
+declare function visitBinary(parsed: ParsedFile, visit: (node: BinaryExpression, line: number) => void): void;
+/**
+ * Visit every CallExpression. `matchCallee` decides whether to surface the
+ * call; if it returns true, `visit` is invoked with the node and its
+ * 1-indexed source line.
+ */
+declare function visitCalls(parsed: ParsedFile, matchCallee: (callee: Node) => boolean, visit: (call: CallExpression, line: number) => void): void;
+/**
+ * "Does this callee resolve to a member/global named <name>?" — handles
+ *   foo(x)
+ *   obj.foo(x)
+ *   a.b.foo(x)
+ *   foo?.(x)
+ * Matches the terminal identifier only; doesn't bind to a specific receiver.
+ */
+declare function isCalleeNamed(callee: Node, name: string): boolean;
+/**
+ * Matches a call to `objName.methodName(...)` — useful for things like
+ * `_.merge`, `Object.assign`, `Handlebars.compile`, `libxml.parseXml`.
+ */
+declare function isMethodCall(callee: Node, objName: string, methodName: string): boolean;
+/** Looks up an ObjectExpression property by key name. */
+declare function getObjectProperty(node: ObjectExpression, key: string): {
+    value: Node;
+} | null;
+/** Does this CallExpression spread an expression `matcher` returns true for? */
+declare function callSpreads(call: CallExpression, matcher: (node: Node) => boolean): boolean;
+
+export { type AIFilterResult, type Confidence, type CustomRule, type DetectedFramework, type FilteredFinding, type Finding, type GradeResult, type ParsedFile, type RuleMatch, type SecurityGrade, type Severity, type TaintMap, allCustomRules, allRules, androidDebuggable, blockingMainThread, buildTaintMap, calculateGrade, callSpreads, callbackHell, clickjacking, clientComponentSecret, clientSideAuth, commandInjection, complianceMap, consoleLogProduction, corsLocalhost, corsServerless, corsWildcard, dangerousInnerHTML, deprecatedTLS, detectFramework, disabledTLSVerification, djangoDebug, dockerCopySensitive, dockerLatestTag, dockerRunAsRoot, dockerTooManyPorts, dockerfileADDInsteadOfCOPY, dockerfileMissingHealthcheck, dockerfileUnverifiedShellPipe, ecbModeEncryption, electronNavigationUnrestricted, emptyCatchBlock, envNotGitignored, evalUsage, eventListenerLeak, exposedAdminRoutes, exposedAuthSecret, exposedDBCredentials, exposedDatabaseStudio, exposedDebugMode, exposedDockerPorts, exposedEnvFile, exposedGitDir, exposedServerActions, exposedSourceMaps, exposedStackTraces, filterFalsePositives, firebaseClientConfig, flaskSecretKey, freeRules, getObjectProperty, getSnippet, ghaExpressionInjection, ghaPermissionsWriteAll, ghaPullRequestTargetCheckout, ghaThirdPartyActionWithSecrets, githubActionsInjection, graphqlCSRFDisabled, graphqlIntrospection, graphqlNoComplexityLimit, graphqlNoDepthLimit, hardcodedAlgoliaAdminKey, hardcodedAnthropicKey, hardcodedCloudflareToken, hardcodedCohereKey, hardcodedDatadogKey, hardcodedDiscordToken, hardcodedEncryptionKey, hardcodedFastlyToken, hardcodedFireworksKey, hardcodedFlyToken, hardcodedGCPServiceAccount, hardcodedGitHubPAT, hardcodedGitLabToken, hardcodedGroqKey, hardcodedHighlightKey, hardcodedIPAllowlist, hardcodedIntercomToken, hardcodedJWTSecret, hardcodedLinearKey, hardcodedLogtailToken, hardcodedLoopsKey, hardcodedMailgunKey, hardcodedMistralKey, hardcodedNetlifyToken, hardcodedNotionKey, hardcodedOAuthSecret, hardcodedPineconeKey, hardcodedPlivoToken, hardcodedPostmarkKey, hardcodedQdrantKey, hardcodedRailwayToken, hardcodedReplicateKey, hardcodedResendKey, hardcodedSecrets, hardcodedSendGridKey, hardcodedSentryAuthToken, hardcodedShopifyToken, hardcodedSlackToken, hardcodedSupabaseServiceRole, hardcodedTogetherKey, hardcodedTwilioKey, hardcodedVaultToken, hardcodedVercelToken, hardcodedWeaviateKey, hostHeaderRedirect, httpRequestSmuggling, insecureCookies, insecureDeepLink, insecureDeserialization, insecureDirectObjectReference, insecureElectronWindow, insecureFileUpload, insecureGRPC, insecureHTTPMethods, insecurePasswordReset, insecureRandomness, insecureWebSocket, ipcPathTraversal, isCalleeNamed, isMethodCall, javaDeserialization, jwtAlgConfusion, k8sNoResourceLimits, k8sPrivileged, k8sSecretNotEncrypted, lambdaWithoutVPC, largeBundleImport, llmCallNoMaxTokens, llmOutputAsHTML, llmPromptInjection, llmSystemPromptInjection, logInjection, magicNumbers, massAssignment, missingAIRateLimit, missingAuthMiddleware, missingAuthRateLimit, missingBruteForce, missingCSP, missingCSRF, missingCertPinning, missingCloudTrail, missingContentDisposition, missingDBEncryption, missingErrorBoundary, missingFileSizeLimits, missingHSTS, missingHTTPS, missingLockFile, missingOAuthState, missingPagination, missingRequestSizeLimit, missingRequestValidation, missingSRI, missingSecurityMeta, nPlusOneQuery, nextPublicSecret, noRateLimiting, nosqlInjection, openRedirectParams, overlyPermissiveIAM, parseFile, pathTraversal, pickleDeserialization, piiInLogs, prototypePollution, pyDjangoAllowedHostsWildcard, pyDjangoMarkSafe, pyJWTDecodeWeakConfig, pyJinja2AutoescapeOff, pyParamikoAutoAdd, pyRequestsVerifyFalse, pyTempfileMktemp, raceCondition, rdsPubliclyAccessible, reflectedCORSOrigin, regexDos, runCustomRules, s3BucketNoEncryption, scanEntropy, secretInBundleConfig, secretInCLIArgument, secretInErrorResponse, secretInHTMLAttribute, secretInURLParam, secretLoggedToConsole, secretsInCI, securityGroupAllInbound, sensitiveAsyncStorage, sensitiveLocalStorage, sensitiveURLParams, sessionFixation, sqlInjection, ssrfVulnerability, ssti, stripeWebhookUnprotected, supabaseAnonAdmin, supabaseNoRLS, syncFileOps, terraformStateExposed, timingAttack, todoLeftInCode, unencryptedPII, unpinnedGitHubAction, unprotectedAPIRoutes, unprotectedDownload, unsafeObjectAssign, unsanitizedFilenames, unsanitizedHTMLExport, unvalidatedAPIParams, unvalidatedEventData, unvalidatedRedirect, vectorStoreQueryNoUserFilter, vectorStoreUpsertNoMetadata, visitBinary, visitCalls, vulnerableDependencies, weakHashing, weakPasswordRequirements, weakRSAKeySize, webhookSignatureVerification, xssVulnerability, xxeVulnerability };

package/dist/index.d.ts

@@ -1,3 +1,6 @@
+import { ParseResult } from '@babel/parser';
+import { File, Node, CallExpression, ObjectExpression, BinaryExpression } from '@babel/types';
+
 type Severity = "critical" | "high" | "medium" | "low" | "info";
 type Confidence = "high" | "medium" | "low";
 interface Finding {
@@ -209,6 +212,54 @@ declare const hardcodedVercelToken: CustomRule;
 declare const hardcodedSupabaseServiceRole: CustomRule;
 declare const hardcodedVaultToken: CustomRule;
 declare const hardcodedPineconeKey: CustomRule;
+declare const hardcodedCohereKey: CustomRule;
+declare const hardcodedReplicateKey: CustomRule;
+declare const hardcodedMistralKey: CustomRule;
+declare const hardcodedTogetherKey: CustomRule;
+declare const hardcodedGroqKey: CustomRule;
+declare const hardcodedFireworksKey: CustomRule;
+declare const hardcodedPostmarkKey: CustomRule;
+declare const hardcodedResendKey: CustomRule;
+declare const hardcodedLoopsKey: CustomRule;
+declare const hardcodedCloudflareToken: CustomRule;
+declare const hardcodedFastlyToken: CustomRule;
+declare const hardcodedNetlifyToken: CustomRule;
+declare const hardcodedRailwayToken: CustomRule;
+declare const hardcodedFlyToken: CustomRule;
+declare const hardcodedAlgoliaAdminKey: CustomRule;
+declare const hardcodedQdrantKey: CustomRule;
+declare const hardcodedWeaviateKey: CustomRule;
+declare const hardcodedLinearKey: CustomRule;
+declare const hardcodedNotionKey: CustomRule;
+declare const hardcodedDiscordToken: CustomRule;
+declare const hardcodedIntercomToken: CustomRule;
+declare const hardcodedSentryAuthToken: CustomRule;
+declare const hardcodedLogtailToken: CustomRule;
+declare const hardcodedHighlightKey: CustomRule;
+declare const hardcodedPlivoToken: CustomRule;
+declare const ghaPullRequestTargetCheckout: CustomRule;
+declare const ghaPermissionsWriteAll: CustomRule;
+declare const ghaExpressionInjection: CustomRule;
+declare const ghaThirdPartyActionWithSecrets: CustomRule;
+declare const dockerfileADDInsteadOfCOPY: CustomRule;
+declare const dockerfileUnverifiedShellPipe: CustomRule;
+declare const dockerfileMissingHealthcheck: CustomRule;
+declare const pyRequestsVerifyFalse: CustomRule;
+declare const pyJinja2AutoescapeOff: CustomRule;
+declare const pyTempfileMktemp: CustomRule;
+declare const pyDjangoMarkSafe: CustomRule;
+declare const pyParamikoAutoAdd: CustomRule;
+declare const pyDjangoAllowedHostsWildcard: CustomRule;
+declare const pyJWTDecodeWeakConfig: CustomRule;
+declare const llmPromptInjection: CustomRule;
+declare const llmSystemPromptInjection: CustomRule;
+declare const llmOutputAsHTML: CustomRule;
+declare const vectorStoreQueryNoUserFilter: CustomRule;
+declare const vectorStoreUpsertNoMetadata: CustomRule;
+declare const llmCallNoMaxTokens: CustomRule;
+declare const graphqlNoDepthLimit: CustomRule;
+declare const graphqlNoComplexityLimit: CustomRule;
+declare const graphqlCSRFDisabled: CustomRule;
 declare const secretInURLParam: CustomRule;
 declare const secretLoggedToConsole: CustomRule;
 declare const secretInErrorResponse: CustomRule;
@@ -289,4 +340,115 @@ declare function scanEntropy(files: {
     content: string;
 }[]): Finding[];
 
-export { type AIFilterResult, type Confidence, type CustomRule, type DetectedFramework, type FilteredFinding, type Finding, type GradeResult, type RuleMatch, type SecurityGrade, type Severity, allCustomRules, allRules, androidDebuggable, blockingMainThread, calculateGrade, callbackHell, clickjacking, clientComponentSecret, clientSideAuth, commandInjection, complianceMap, consoleLogProduction, corsLocalhost, corsServerless, corsWildcard, dangerousInnerHTML, deprecatedTLS, detectFramework, disabledTLSVerification, djangoDebug, dockerCopySensitive, dockerLatestTag, dockerRunAsRoot, dockerTooManyPorts, ecbModeEncryption, electronNavigationUnrestricted, emptyCatchBlock, envNotGitignored, evalUsage, eventListenerLeak, exposedAdminRoutes, exposedAuthSecret, exposedDBCredentials, exposedDatabaseStudio, exposedDebugMode, exposedDockerPorts, exposedEnvFile, exposedGitDir, exposedServerActions, exposedSourceMaps, exposedStackTraces, filterFalsePositives, firebaseClientConfig, flaskSecretKey, freeRules, getSnippet, githubActionsInjection, graphqlIntrospection, hardcodedAnthropicKey, hardcodedDatadogKey, hardcodedEncryptionKey, hardcodedGCPServiceAccount, hardcodedGitHubPAT, hardcodedGitLabToken, hardcodedIPAllowlist, hardcodedJWTSecret, hardcodedMailgunKey, hardcodedOAuthSecret, hardcodedPineconeKey, hardcodedSecrets, hardcodedSendGridKey, hardcodedShopifyToken, hardcodedSlackToken, hardcodedSupabaseServiceRole, hardcodedTwilioKey, hardcodedVaultToken, hardcodedVercelToken, hostHeaderRedirect, httpRequestSmuggling, insecureCookies, insecureDeepLink, insecureDeserialization, insecureDirectObjectReference, insecureElectronWindow, insecureFileUpload, insecureGRPC, insecureHTTPMethods, insecurePasswordReset, insecureRandomness, insecureWebSocket, ipcPathTraversal, javaDeserialization, jwtAlgConfusion, k8sNoResourceLimits, k8sPrivileged, k8sSecretNotEncrypted, lambdaWithoutVPC, largeBundleImport, logInjection, magicNumbers, massAssignment, missingAIRateLimit, missingAuthMiddleware, missingAuthRateLimit, missingBruteForce, missingCSP, missingCSRF, missingCertPinning, missingCloudTrail, missingContentDisposition, missingDBEncryption, missingErrorBoundary, missingFileSizeLimits, missingHSTS, missingHTTPS, missingLockFile, missingOAuthState, missingPagination, missingRequestSizeLimit, missingRequestValidation, missingSRI, missingSecurityMeta, nPlusOneQuery, nextPublicSecret, noRateLimiting, nosqlInjection, openRedirectParams, overlyPermissiveIAM, pathTraversal, pickleDeserialization, piiInLogs, prototypePollution, raceCondition, rdsPubliclyAccessible, reflectedCORSOrigin, regexDos, runCustomRules, s3BucketNoEncryption, scanEntropy, secretInBundleConfig, secretInCLIArgument, secretInErrorResponse, secretInHTMLAttribute, secretInURLParam, secretLoggedToConsole, secretsInCI, securityGroupAllInbound, sensitiveAsyncStorage, sensitiveLocalStorage, sensitiveURLParams, sessionFixation, sqlInjection, ssrfVulnerability, ssti, stripeWebhookUnprotected, supabaseAnonAdmin, supabaseNoRLS, syncFileOps, terraformStateExposed, timingAttack, todoLeftInCode, unencryptedPII, unpinnedGitHubAction, unprotectedAPIRoutes, unprotectedDownload, unsafeObjectAssign, unsanitizedFilenames, unsanitizedHTMLExport, unvalidatedAPIParams, unvalidatedEventData, unvalidatedRedirect, vulnerableDependencies, weakHashing, weakPasswordRequirements, weakRSAKeySize, webhookSignatureVerification, xssVulnerability, xxeVulnerability };
+/**
+ * Centralized Babel parser with per-file caching.
+ *
+ * Rules that opt in to AST analysis call parseFile(content, filename) to get
+ * a Program node back. Parsing is expensive (~5-50ms per KB of source); the
+ * LRU cache ensures a single scan pass touches each file at most once even
+ * when multiple rules walk the same AST.
+ *
+ * Failure mode: returns null on parse errors. Callers fall back to regex-only
+ * behavior so a syntax-error file in the user's repo can never break a scan.
+ */
+
+interface ParsedFile {
+    ast: ParseResult<File>;
+    language: "js" | "ts" | "jsx" | "tsx";
+}
+/**
+ * Parse a JS/TS file. Returns null for unsupported extensions, parse errors,
+ * or empty content. Callers MUST handle null and fall back to regex-only.
+ */
+declare function parseFile(content: string, filename: string): ParsedFile | null;
+
+/**
+ * Lightweight taint tracking for AST-based rules.
+ *
+ * "Tainted" means "derived from untrusted input" — an Express/Next request
+ * body, query string, params, or headers; process.argv; environment
+ * variables known to be user-controlled; or file contents read at runtime.
+ *
+ * This is deliberately a local-only analysis: we walk the AST of one file,
+ * track which identifiers bind to a tainted source, and propagate through
+ * direct assignments and destructuring. Cross-function and cross-file flow
+ * is out of scope for Phase A — those require a module graph we don't build
+ * yet. A conservative local analysis is still enough to flip the benchmark
+ * recall on the data-flow rules.
+ *
+ * The analysis returns a TaintMap the rules can query:
+ *   isTainted(node) → "is this AST expression tainted?"
+ *   isTaintedIdent(name) → "is this identifier currently bound to tainted
+ *                          data in the file-level scope?"
+ *
+ * Shape of recognized sources:
+ *   req.body, req.query, req.params, req.headers, req.cookies
+ *   request.body, request.query, ... (Fastify)
+ *   ctx.request.body, ctx.query (Koa)
+ *   process.argv, process.env[Keys known to be user-controllable]
+ *   event.queryStringParameters, event.body (AWS Lambda / API Gateway)
+ *   searchParams.get(...), url.searchParams (Next.js / Web fetch API)
+ */
+
+interface TaintMap {
+    /** true iff the given expression node evaluates to tainted data. */
+    isTainted(node: Node | null | undefined): boolean;
+    /** true iff the named identifier is bound to tainted data somewhere visible. */
+    isTaintedIdent(name: string): boolean;
+    /** Debug: all identifiers the analysis marked tainted, in discovery order. */
+    taintedNames(): string[];
+}
+/**
+ * Build a TaintMap for one parsed file. Single traversal, propagates taint
+ * through:
+ *   - const/let bindings: const x = req.body.foo → x tainted
+ *   - destructuring: const { foo } = req.body → foo tainted
+ *   - assignment expressions: y = x; x is tainted → y tainted
+ *   - function params named req/request/ctx (inside handlers, `req.body` is
+ *     tainted even if we didn't see the outer binding)
+ */
+declare function buildTaintMap(parsed: ParsedFile): TaintMap;
+
+/**
+ * Visitor helpers for rule authors. Each helper takes a parsed file and a
+ * callback, and walks the AST in the most common pattern (find call
+ * expressions to a particular function, find member expressions of a
+ * particular shape, etc.).
+ *
+ * The rule code stays short and declarative; this file carries the
+ * @babel/traverse boilerplate and default-export interop.
+ */
+
+/**
+ * Visit every BinaryExpression in the parsed file. Rule authors use this to
+ * catch `a === b` / `a !== b` comparisons where one side is a secret identifier.
+ */
+declare function visitBinary(parsed: ParsedFile, visit: (node: BinaryExpression, line: number) => void): void;
+/**
+ * Visit every CallExpression. `matchCallee` decides whether to surface the
+ * call; if it returns true, `visit` is invoked with the node and its
+ * 1-indexed source line.
+ */
+declare function visitCalls(parsed: ParsedFile, matchCallee: (callee: Node) => boolean, visit: (call: CallExpression, line: number) => void): void;
+/**
+ * "Does this callee resolve to a member/global named <name>?" — handles
+ *   foo(x)
+ *   obj.foo(x)
+ *   a.b.foo(x)
+ *   foo?.(x)
+ * Matches the terminal identifier only; doesn't bind to a specific receiver.
+ */
+declare function isCalleeNamed(callee: Node, name: string): boolean;
+/**
+ * Matches a call to `objName.methodName(...)` — useful for things like
+ * `_.merge`, `Object.assign`, `Handlebars.compile`, `libxml.parseXml`.
+ */
+declare function isMethodCall(callee: Node, objName: string, methodName: string): boolean;
+/** Looks up an ObjectExpression property by key name. */
+declare function getObjectProperty(node: ObjectExpression, key: string): {
+    value: Node;
+} | null;
+/** Does this CallExpression spread an expression `matcher` returns true for? */
+declare function callSpreads(call: CallExpression, matcher: (node: Node) => boolean): boolean;
+
+export { type AIFilterResult, type Confidence, type CustomRule, type DetectedFramework, type FilteredFinding, type Finding, type GradeResult, type ParsedFile, type RuleMatch, type SecurityGrade, type Severity, type TaintMap, allCustomRules, allRules, androidDebuggable, blockingMainThread, buildTaintMap, calculateGrade, callSpreads, callbackHell, clickjacking, clientComponentSecret, clientSideAuth, commandInjection, complianceMap, consoleLogProduction, corsLocalhost, corsServerless, corsWildcard, dangerousInnerHTML, deprecatedTLS, detectFramework, disabledTLSVerification, djangoDebug, dockerCopySensitive, dockerLatestTag, dockerRunAsRoot, dockerTooManyPorts, dockerfileADDInsteadOfCOPY, dockerfileMissingHealthcheck, dockerfileUnverifiedShellPipe, ecbModeEncryption, electronNavigationUnrestricted, emptyCatchBlock, envNotGitignored, evalUsage, eventListenerLeak, exposedAdminRoutes, exposedAuthSecret, exposedDBCredentials, exposedDatabaseStudio, exposedDebugMode, exposedDockerPorts, exposedEnvFile, exposedGitDir, exposedServerActions, exposedSourceMaps, exposedStackTraces, filterFalsePositives, firebaseClientConfig, flaskSecretKey, freeRules, getObjectProperty, getSnippet, ghaExpressionInjection, ghaPermissionsWriteAll, ghaPullRequestTargetCheckout, ghaThirdPartyActionWithSecrets, githubActionsInjection, graphqlCSRFDisabled, graphqlIntrospection, graphqlNoComplexityLimit, graphqlNoDepthLimit, hardcodedAlgoliaAdminKey, hardcodedAnthropicKey, hardcodedCloudflareToken, hardcodedCohereKey, hardcodedDatadogKey, hardcodedDiscordToken, hardcodedEncryptionKey, hardcodedFastlyToken, hardcodedFireworksKey, hardcodedFlyToken, hardcodedGCPServiceAccount, hardcodedGitHubPAT, hardcodedGitLabToken, hardcodedGroqKey, hardcodedHighlightKey, hardcodedIPAllowlist, hardcodedIntercomToken, hardcodedJWTSecret, hardcodedLinearKey, hardcodedLogtailToken, hardcodedLoopsKey, hardcodedMailgunKey, hardcodedMistralKey, hardcodedNetlifyToken, hardcodedNotionKey, hardcodedOAuthSecret, hardcodedPineconeKey, hardcodedPlivoToken, hardcodedPostmarkKey, hardcodedQdrantKey, hardcodedRailwayToken, hardcodedReplicateKey, hardcodedResendKey, hardcodedSecrets, hardcodedSendGridKey, hardcodedSentryAuthToken, hardcodedShopifyToken, hardcodedSlackToken, hardcodedSupabaseServiceRole, hardcodedTogetherKey, hardcodedTwilioKey, hardcodedVaultToken, hardcodedVercelToken, hardcodedWeaviateKey, hostHeaderRedirect, httpRequestSmuggling, insecureCookies, insecureDeepLink, insecureDeserialization, insecureDirectObjectReference, insecureElectronWindow, insecureFileUpload, insecureGRPC, insecureHTTPMethods, insecurePasswordReset, insecureRandomness, insecureWebSocket, ipcPathTraversal, isCalleeNamed, isMethodCall, javaDeserialization, jwtAlgConfusion, k8sNoResourceLimits, k8sPrivileged, k8sSecretNotEncrypted, lambdaWithoutVPC, largeBundleImport, llmCallNoMaxTokens, llmOutputAsHTML, llmPromptInjection, llmSystemPromptInjection, logInjection, magicNumbers, massAssignment, missingAIRateLimit, missingAuthMiddleware, missingAuthRateLimit, missingBruteForce, missingCSP, missingCSRF, missingCertPinning, missingCloudTrail, missingContentDisposition, missingDBEncryption, missingErrorBoundary, missingFileSizeLimits, missingHSTS, missingHTTPS, missingLockFile, missingOAuthState, missingPagination, missingRequestSizeLimit, missingRequestValidation, missingSRI, missingSecurityMeta, nPlusOneQuery, nextPublicSecret, noRateLimiting, nosqlInjection, openRedirectParams, overlyPermissiveIAM, parseFile, pathTraversal, pickleDeserialization, piiInLogs, prototypePollution, pyDjangoAllowedHostsWildcard, pyDjangoMarkSafe, pyJWTDecodeWeakConfig, pyJinja2AutoescapeOff, pyParamikoAutoAdd, pyRequestsVerifyFalse, pyTempfileMktemp, raceCondition, rdsPubliclyAccessible, reflectedCORSOrigin, regexDos, runCustomRules, s3BucketNoEncryption, scanEntropy, secretInBundleConfig, secretInCLIArgument, secretInErrorResponse, secretInHTMLAttribute, secretInURLParam, secretLoggedToConsole, secretsInCI, securityGroupAllInbound, sensitiveAsyncStorage, sensitiveLocalStorage, sensitiveURLParams, sessionFixation, sqlInjection, ssrfVulnerability, ssti, stripeWebhookUnprotected, supabaseAnonAdmin, supabaseNoRLS, syncFileOps, terraformStateExposed, timingAttack, todoLeftInCode, unencryptedPII, unpinnedGitHubAction, unprotectedAPIRoutes, unprotectedDownload, unsafeObjectAssign, unsanitizedFilenames, unsanitizedHTMLExport, unvalidatedAPIParams, unvalidatedEventData, unvalidatedRedirect, vectorStoreQueryNoUserFilter, vectorStoreUpsertNoMetadata, visitBinary, visitCalls, vulnerableDependencies, weakHashing, weakPasswordRequirements, weakRSAKeySize, webhookSignatureVerification, xssVulnerability, xxeVulnerability };