@ai-dossier/core 1.12.1 → 1.14.0

package/dist/dry-run-langs.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Small per-language extractors for the dry-run analyzer (issue #933).
+ *
+ * Each extractor pattern-matches the *obvious* exec / delete / network / write
+ * calls of a non-shell fence and returns hits. Hits that embed a shell command
+ * (`os.system("rm -rf ~")`, `RUN rm -rf /`, `execSync('...')`) carry the literal
+ * text in `shell`, which the caller re-analyses with the shell classifier.
+ *
+ * Every regex here is a fixed alternation with bounded (or single-pass) repeats,
+ * so matching is linear in the line length; lines are additionally clipped to
+ * MAX_LINE_CHARS before matching.
+ */
+import type { DryRunKind } from './dry-run';
+export type CodeLang = 'python' | 'js' | 'powershell' | 'dockerfile' | 'ruby' | 'perl' | 'sql' | 'yaml';
+export interface CodeHit {
+    /** Command text shown in the plan; empty for a hit that only carries `shell`. */
+    command: string;
+    kind: DryRunKind;
+    line: number;
+    /** Literal shell command lines embedded in the call, to be analysed as shell. */
+    shell?: string[];
+    file?: {
+        path: string;
+        operation: 'write' | 'delete' | 'move';
+    };
+    network?: {
+        tool: string;
+        target: string;
+        mutates: boolean;
+    };
+    reason?: string;
+}
+/** Lines longer than this are clipped before regex matching (keeps matching cheap and bounded). */
+export declare const MAX_LINE_CHARS = 4000;
+/** Extract hits from a non-shell fence. `lines` are raw fence lines; `startLine` is the first line's number. */
+export declare function extractCodeHits(lang: CodeLang, lines: string[], startLine: number): CodeHit[];
+//# sourceMappingURL=dry-run-langs.d.ts.map

package/dist/dry-run-langs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dry-run-langs.d.ts","sourceRoot":"","sources":["../src/dry-run-langs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,MAAM,QAAQ,GAChB,QAAQ,GACR,IAAI,GACJ,YAAY,GACZ,YAAY,GACZ,MAAM,GACN,MAAM,GACN,KAAK,GACL,MAAM,CAAC;AAEX,MAAM,WAAW,OAAO;IACtB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAA;KAAE,CAAC;IAChE,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,mGAAmG;AACnG,eAAO,MAAM,cAAc,OAAO,CAAC;AAkWnC,gHAAgH;AAChH,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,EAAE,CAkD7F"}

package/dist/dry-run-langs.js

@@ -0,0 +1,390 @@
+"use strict";
+/**
+ * Small per-language extractors for the dry-run analyzer (issue #933).
+ *
+ * Each extractor pattern-matches the *obvious* exec / delete / network / write
+ * calls of a non-shell fence and returns hits. Hits that embed a shell command
+ * (`os.system("rm -rf ~")`, `RUN rm -rf /`, `execSync('...')`) carry the literal
+ * text in `shell`, which the caller re-analyses with the shell classifier.
+ *
+ * Every regex here is a fixed alternation with bounded (or single-pass) repeats,
+ * so matching is linear in the line length; lines are additionally clipped to
+ * MAX_LINE_CHARS before matching.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_LINE_CHARS = void 0;
+exports.extractCodeHits = extractCodeHits;
+/** Lines longer than this are clipped before regex matching (keeps matching cheap and bounded). */
+exports.MAX_LINE_CHARS = 4000;
+const STRING_LITERAL = /"(?:[^"\\\n]|\\.)*"|'(?:[^'\\\n]|\\.)*'|`(?:[^`\\]|\\.)*`/g;
+/** String literals appearing after `from` on the line, unquoted, at most `max` of them. */
+function literalsAfter(line, from, max = 24) {
+    const out = [];
+    for (const m of line.slice(from).matchAll(STRING_LITERAL)) {
+        out.push(m[0].slice(1, -1).replace(/\\(["'`\\])/g, '$1'));
+        if (out.length >= max)
+            break;
+    }
+    return out;
+}
+function hostFromText(s) {
+    const m = s.match(/[a-z][a-z0-9+.-]*:\/\/([^/\s:'"`)]+)/i);
+    return m ? m[1] : 'unknown host';
+}
+const FETCH_OR_DECODE_HINT = /\b(?:requests\.|urlopen|urllib|httpx\.|fetch\s*\(|axios|https?\.get|b64decode|atob|Buffer\.from|zlib\.|Invoke-WebRequest|Invoke-RestMethod|iwr|irm|DownloadString|FromBase64String|Net::HTTP|open-uri|URI\.open|LWP)/;
+// --- python ----------------------------------------------------------------
+const PY_EXEC = /\.(?:system|popen)\s*\(|\bsubprocess\.\w+\s*\(|(?<![\w.])(?:check_output|check_call|getoutput|Popen)\s*\(|\bos\.(?:exec|spawn)\w*\s*\(|\bpty\.spawn\s*\(|\basyncio\.create_subprocess_\w+\s*\(|\bpexpect\.(?:spawn|run)\s*\(/g;
+const PY_DELETE = /\b(?:shutil\.rmtree|os\.(?:remove|unlink|rmdir|removedirs)|send2trash)\s*\(|\.(?:unlink|rmdir|rmtree)\s*\(/g;
+const PY_WRITE = /\bshutil\.(?:copy\w*|move)\s*\(|\bos\.(?:rename|replace|makedirs|mkdir|chmod|chown)\s*\(|\.(?:write_text|write_bytes|mkdir|touch)\s*\(|\bopen\s*\(\s*(?:"[^"\n]*"|'[^'\n]*')\s*,\s*["'][wax]/g;
+const PY_NET = /\brequests\.(get|post|put|delete|patch|head)\s*\(|\b(?:urlopen|urlretrieve)\s*\(|\bhttpx\.(?:get|post|put|delete|patch|Client|AsyncClient)\b|\baiohttp\.\w+|\bparamiko\.\w+|\bsmtplib\.\w+/g;
+const PY_EVAL = /\b(?:exec|eval)\s*\(/;
+// --- js / ts ---------------------------------------------------------------
+const JS_EXEC = /(?<![\w.$])(?:execSync|execFileSync|spawnSync|spawn|execFile|exec|fork)\s*\(|\.(?:execSync|execFileSync|spawnSync|spawn|execFile)\s*\(|\b(?:child_process|childProcess|cp)\.exec\s*\(|\bBun\.(?:spawn|spawnSync)\s*\(|\bDeno\.Command\s*\(|\bexeca(?:Sync|Command|CommandSync)?\s*\(|(?<![\w$])\$\s*`|\bshell(?:js)?\.exec\s*\(|\bBun\.\$\s*`/g;
+const JS_DELETE = /\b(?:fs|fsp|promises|fse|fsExtra)\.(?:rmSync|rmdirSync|unlinkSync|rm|rmdir|unlink|remove|removeSync|emptyDir|emptyDirSync)\s*\(|(?<![\w.$])(?:rmSync|unlinkSync|rmdirSync|rimraf|rimrafSync)\s*\(|\.(?:rmSync|unlinkSync|rmdirSync)\s*\(|\brimraf(?:\.sync)?\s*\(|\bDeno\.remove(?:Sync)?\s*\(/g;
+const JS_WRITE = /\b(?:fs|fsp|promises|fse|fsExtra)\.(?:writeFile|writeFileSync|appendFile|appendFileSync|mkdir|mkdirSync|copyFile|copyFileSync|rename|renameSync|cp|cpSync|createWriteStream|chmod|chmodSync|outputFile|outputFileSync)\s*\(|\bDeno\.writeTextFile(?:Sync)?\s*\(|\bBun\.write\s*\(/g;
+const JS_NET = /(?<![\w.$])fetch\s*\(|\baxios(?:\.(get|post|put|delete|patch|head))?\s*\(|\b(?:https?|http2)\.(?:request|get)\s*\(|(?<![\w.$])got(?:\.(get|post|put|delete|patch))?\s*\(|\bnew\s+(?:XMLHttpRequest|WebSocket)\b/g;
+const JS_EVAL = /\b(?:eval|new\s+Function|vm\.runIn\w+)\s*\(/;
+// --- powershell / cmd ------------------------------------------------------
+const PS_DELETE = /(?<![\w-])(?:Remove-Item|Remove-ItemProperty|Remove-\w+|Clear-Disk|Clear-Content|Format-Volume|Initialize-Disk|Stop-Computer|Restart-Computer|Uninstall-\w+|Unregister-\w+|Disable-\w+)(?![\w-])|(?<![\w-])(?:ri|rd|rmdir|del|erase)\s+(?:[-/]\S+\s+)*[^\s/-]|(?<![\w-])(?:reg(?:\.exe)?\s+delete|format\s+[a-z]:|diskpart)\b/gi;
+const PS_FETCH = /(?<![\w-])(?:Invoke-WebRequest|Invoke-RestMethod|Start-BitsTransfer|iwr|irm)(?![\w-])|\bNet\.WebClient\b|\.Download(?:String|File|Data)\s*\(|\bcertutil\b[^\n]*-urlcache/gi;
+const PS_EXEC = /(?<![\w-])(?:iex|Invoke-Expression)(?![\w-])/i;
+const PS_WRITE = /(?<![\w-])(?:Set-Content|Add-Content|Out-File|New-Item|Copy-Item|Move-Item|Rename-Item|Export-\w+|Tee-Object|Start-Process|Invoke-Command)(?![\w-])/gi;
+const PS_ENCODED = /-(?:enc|encodedcommand|e)\b|FromBase64String/i;
+const PS_CLI_LINE = /^\s*(?:git|gh|npm|pnpm|yarn|npx|docker|kubectl|terraform|aws|az|gcloud|curl|wget|ssh|scp|make|cargo|pip3?|python[\d.]*|node|rm|mv|cp|dd|sudo)\b/;
+// --- ruby / perl -----------------------------------------------------------
+const RB_EXEC = /(?<![\w.])(?:system|exec|spawn)\s*\(|(?<![\w.])(?:system|exec|spawn)\s+["']|%x[[{(]|\bIO\.popen\s*\(|\bOpen3\.\w+\s*\(|\bKernel\.(?:system|exec|spawn)\b|\bqx\s*[/{([]|\bopen\s*\(\s*["']\s*\|/g;
+const RB_DELETE = /\b(?:File\.(?:delete|unlink)|FileUtils\.(?:rm|rm_rf|rm_r|rm_f|remove_entry|remove_dir)|Dir\.rmdir|unlink|rmtree)\b/g;
+const RB_NET = /\b(?:Net::HTTP|URI\.open|open-uri|LWP::\w+|HTTP::Tiny)\b/g;
+const RB_BACKTICK = /`([^`\n]+)`/g;
+// --- sql -------------------------------------------------------------------
+const SQL_DESTRUCTIVE = /\b(?:DROP\s+(?:TABLE|DATABASE|SCHEMA|INDEX|USER|ROLE|VIEW|COLLECTION)|TRUNCATE(?:\s+TABLE)?|dropDatabase|FLUSH(?:ALL|DB))\b/i;
+const SQL_WRITE = /\b(?:INSERT\s+INTO|UPDATE\s+\w+\s+SET|ALTER\s+TABLE|CREATE\s+(?:TABLE|DATABASE|USER)|GRANT)\b/i;
+const SQL_DELETE = /\bDELETE\s+FROM\b/i;
+// ---------------------------------------------------------------------------
+function pushShellFromCall(hits, line, lineNo, at, matchLen, label) {
+    const lits = literalsAfter(line, at + matchLen);
+    hits.push({
+        command: line.trim(),
+        kind: 'local_write',
+        line: lineNo,
+        shell: lits.length > 0 ? [lits.join(' ')] : undefined,
+        reason: label,
+    });
+}
+function scanPython(line, no, hits) {
+    for (const m of line.matchAll(PY_EXEC))
+        pushShellFromCall(hits, line, no, m.index ?? 0, m[0].length, 'python process execution');
+    for (const m of line.matchAll(PY_DELETE)) {
+        const lit = literalsAfter(line, (m.index ?? 0) + m[0].length, 1)[0];
+        hits.push({
+            command: line.trim(),
+            kind: 'destructive',
+            line: no,
+            file: { path: lit ?? '(computed path)', operation: 'delete' },
+        });
+    }
+    for (const m of line.matchAll(PY_WRITE)) {
+        const lit = literalsAfter(line, (m.index ?? 0) + m[0].length, 1)[0];
+        hits.push({
+            command: line.trim(),
+            kind: 'local_write',
+            line: no,
+            file: lit ? { path: lit, operation: 'write' } : undefined,
+        });
+    }
+    for (const m of line.matchAll(PY_NET)) {
+        const verb = (m[1] ?? '').toLowerCase();
+        const mutates = verb !== '' && verb !== 'get' && verb !== 'head';
+        hits.push({
+            command: line.trim(),
+            kind: verb === 'delete' ? 'destructive' : 'remote',
+            line: no,
+            network: { tool: 'python', target: hostFromText(line), mutates },
+        });
+    }
+    if (PY_EVAL.test(line) && FETCH_OR_DECODE_HINT.test(line)) {
+        hits.push({
+            command: line.trim(),
+            kind: 'destructive',
+            line: no,
+            reason: 'executes fetched or decoded code',
+        });
+    }
+}
+function scanJs(line, no, hits) {
+    for (const m of line.matchAll(JS_EXEC))
+        pushShellFromCall(hits, line, no, m.index ?? 0, m[0].length, 'javascript process execution');
+    for (const m of line.matchAll(JS_DELETE)) {
+        const lit = literalsAfter(line, (m.index ?? 0) + m[0].length, 1)[0];
+        hits.push({
+            command: line.trim(),
+            kind: 'destructive',
+            line: no,
+            file: { path: lit ?? '(computed path)', operation: 'delete' },
+        });
+    }
+    for (const m of line.matchAll(JS_WRITE)) {
+        const lit = literalsAfter(line, (m.index ?? 0) + m[0].length, 1)[0];
+        hits.push({
+            command: line.trim(),
+            kind: 'local_write',
+            line: no,
+            file: lit ? { path: lit, operation: 'write' } : undefined,
+        });
+    }
+    for (const m of line.matchAll(JS_NET)) {
+        const verb = (m[1] ?? m[2] ?? '').toLowerCase();
+        const explicit = line.match(/method\s*:\s*['"`](POST|PUT|PATCH|DELETE)['"`]/i)?.[1];
+        const method = (explicit ?? verb).toLowerCase();
+        const mutates = method !== '' && method !== 'get' && method !== 'head';
+        hits.push({
+            command: line.trim(),
+            kind: method === 'delete' ? 'destructive' : 'remote',
+            line: no,
+            network: { tool: 'javascript', target: hostFromText(line), mutates },
+        });
+    }
+    if (JS_EVAL.test(line)) {
+        const fetched = FETCH_OR_DECODE_HINT.test(line);
+        hits.push({
+            command: line.trim(),
+            kind: fetched ? 'destructive' : 'local_write',
+            line: no,
+            reason: fetched ? 'executes fetched or decoded code' : 'dynamic code evaluation',
+        });
+    }
+}
+function scanPowerShell(line, no, hits, state) {
+    let matched = false;
+    for (const m of line.matchAll(PS_DELETE)) {
+        matched = true;
+        const rest = line.slice((m.index ?? 0) + m[0].length);
+        const target = rest.match(/(?:-Path\s+)?(["']?)([^\s"'|;-][^\s"'|;]*)\1/)?.[2];
+        hits.push({
+            command: line.trim(),
+            kind: 'destructive',
+            line: no,
+            file: { path: target ?? '(computed path)', operation: 'delete' },
+        });
+    }
+    const fetches = [...line.matchAll(PS_FETCH)];
+    if (fetches.length > 0) {
+        matched = true;
+        state.fetched = true;
+        const mutates = /-Method\s+(?:POST|PUT|PATCH|DELETE)\b/i.test(line);
+        hits.push({
+            command: line.trim(),
+            kind: 'remote',
+            line: no,
+            network: { tool: 'powershell', target: hostFromText(line), mutates },
+        });
+    }
+    if (PS_EXEC.test(line)) {
+        matched = true;
+        const remoteExec = state.fetched || fetches.length > 0 || PS_ENCODED.test(line);
+        hits.push({
+            command: line.trim(),
+            kind: remoteExec ? 'destructive' : 'local_write',
+            line: no,
+            reason: remoteExec ? 'executes fetched or decoded code (iex)' : 'dynamic code evaluation',
+        });
+    }
+    else if (/(?:powershell|pwsh)(?:\.exe)?\b[^\n]*\s-(?:enc|encodedcommand)\b/i.test(line)) {
+        matched = true;
+        hits.push({
+            command: line.trim(),
+            kind: 'destructive',
+            line: no,
+            reason: 'encoded PowerShell command (opaque payload)',
+        });
+    }
+    for (const _m of line.matchAll(PS_WRITE)) {
+        matched = true;
+        hits.push({ command: line.trim(), kind: 'local_write', line: no });
+        break;
+    }
+    if (!matched && PS_CLI_LINE.test(line)) {
+        hits.push({ command: '', kind: 'read', line: no, shell: [line.trim()] });
+    }
+}
+function scanRubyPerl(line, no, hits) {
+    for (const m of line.matchAll(RB_EXEC))
+        pushShellFromCall(hits, line, no, m.index ?? 0, m[0].length, 'process execution');
+    for (const m of line.matchAll(RB_BACKTICK)) {
+        hits.push({
+            command: line.trim(),
+            kind: 'local_write',
+            line: no,
+            shell: [m[1]],
+            reason: 'backtick process execution',
+        });
+    }
+    for (const m of line.matchAll(RB_DELETE)) {
+        const lit = literalsAfter(line, (m.index ?? 0) + m[0].length, 1)[0];
+        hits.push({
+            command: line.trim(),
+            kind: 'destructive',
+            line: no,
+            file: { path: lit ?? '(computed path)', operation: 'delete' },
+        });
+    }
+    for (const _m of line.matchAll(RB_NET)) {
+        hits.push({
+            command: line.trim(),
+            kind: 'remote',
+            line: no,
+            network: { tool: 'script', target: hostFromText(line), mutates: false },
+        });
+        break;
+    }
+    if (/\b(?:eval|instance_eval)\b/.test(line) && FETCH_OR_DECODE_HINT.test(line)) {
+        hits.push({
+            command: line.trim(),
+            kind: 'destructive',
+            line: no,
+            reason: 'executes fetched or decoded code',
+        });
+    }
+}
+function scanSql(line, no, hits) {
+    const network = { tool: 'sql', target: 'database', mutates: true };
+    if (SQL_DESTRUCTIVE.test(line) || (SQL_DELETE.test(line) && !/\bWHERE\b/i.test(line))) {
+        hits.push({ command: line.trim(), kind: 'destructive', line: no, network });
+    }
+    else if (SQL_DELETE.test(line) || SQL_WRITE.test(line)) {
+        hits.push({ command: line.trim(), kind: 'remote', line: no, network });
+    }
+}
+/** `["a", "b"]` exec-form or plain shell-form instruction argument -> one shell command line. */
+function instructionToShell(rest) {
+    const t = rest.trim();
+    if (t.startsWith('['))
+        return literalsAfter(t, 0, 40).join(' ');
+    return t;
+}
+function scanDockerfile(line, no, hits) {
+    const m = line.match(/^\s*(?:ONBUILD\s+)?(RUN|CMD|ENTRYPOINT|HEALTHCHECK\s+(?:--\S+\s+)*CMD|ADD|COPY)\s+(?:--\S+\s+)*(.*)$/i);
+    if (!m)
+        return;
+    const instr = m[1].toUpperCase();
+    const rest = m[2];
+    if (instr === 'ADD' || instr === 'COPY') {
+        if (/https?:\/\//i.test(rest)) {
+            hits.push({
+                command: line.trim(),
+                kind: 'remote',
+                line: no,
+                network: { tool: 'docker', target: hostFromText(rest), mutates: false },
+            });
+        }
+        return;
+    }
+    const shell = instructionToShell(rest);
+    hits.push({
+        command: line.trim(),
+        kind: 'local_write',
+        line: no,
+        shell: shell ? [shell] : undefined,
+    });
+}
+const YAML_RUN_KEYS = /^(\s*)(?:-\s+)?(run|script|before_script|after_script|command|commands|entrypoint)\s*:\s*(.*)$/;
+function scanYaml(lines, startLine, hits) {
+    for (let i = 0; i < lines.length; i++) {
+        const m = lines[i].slice(0, exports.MAX_LINE_CHARS).match(YAML_RUN_KEYS);
+        if (!m)
+            continue;
+        const indent = m[1].length;
+        const rest = m[3].trim();
+        const shell = [];
+        if (rest === '' || /^[|>][+-]?\d*$/.test(rest)) {
+            // Block scalar or nested list: every more-indented following line is a command.
+            let acc = '';
+            for (let j = i + 1; j < lines.length; j++) {
+                const raw = lines[j].slice(0, exports.MAX_LINE_CHARS);
+                if (raw.trim() === '')
+                    continue;
+                const ind = raw.length - raw.trimStart().length;
+                if (ind <= indent)
+                    break;
+                const text = raw.trim().replace(/^-\s+/, '');
+                if (text.startsWith('#'))
+                    continue;
+                if (/\\\s*$/.test(text)) {
+                    acc += `${text.replace(/\\\s*$/, '')} `;
+                    continue;
+                }
+                shell.push((acc + text).trim());
+                acc = '';
+            }
+            if (acc.trim())
+                shell.push(acc.trim());
+        }
+        else if (!rest.startsWith('#')) {
+            shell.push(instructionToShell(rest.replace(/^(["'])(.*)\1$/, '$2')));
+        }
+        if (shell.length > 0) {
+            hits.push({ command: '', kind: 'read', line: startLine + i, shell });
+        }
+    }
+}
+/** Extract hits from a non-shell fence. `lines` are raw fence lines; `startLine` is the first line's number. */
+function extractCodeHits(lang, lines, startLine) {
+    const hits = [];
+    if (lang === 'yaml') {
+        scanYaml(lines, startLine, hits);
+        return hits;
+    }
+    const psState = { fetched: false };
+    // Dockerfile / python lines joined on `\` continuation keep the first physical line number.
+    let acc = '';
+    let accLine = 0;
+    const flush = (text, no) => {
+        const line = text.slice(0, exports.MAX_LINE_CHARS);
+        const trimmed = line.trim();
+        if (!trimmed)
+            return;
+        switch (lang) {
+            case 'python':
+                if (!trimmed.startsWith('#'))
+                    scanPython(line, no, hits);
+                break;
+            case 'js':
+                if (!trimmed.startsWith('//') && !trimmed.startsWith('*'))
+                    scanJs(line, no, hits);
+                break;
+            case 'powershell':
+                if (!trimmed.startsWith('#') && !/^(?:rem|::)\b/i.test(trimmed))
+                    scanPowerShell(line, no, hits, psState);
+                break;
+            case 'dockerfile':
+                if (!trimmed.startsWith('#'))
+                    scanDockerfile(line, no, hits);
+                break;
+            case 'ruby':
+            case 'perl':
+                if (!trimmed.startsWith('#'))
+                    scanRubyPerl(line, no, hits);
+                break;
+            case 'sql':
+                if (!trimmed.startsWith('--'))
+                    scanSql(line, no, hits);
+                break;
+        }
+    };
+    lines.forEach((raw, idx) => {
+        const no = startLine + idx;
+        const continues = lang === 'dockerfile' && /\\\s*$/.test(raw);
+        if (!acc)
+            accLine = no;
+        if (continues) {
+            acc += `${raw.replace(/\\\s*$/, '')} `;
+            return;
+        }
+        flush(acc + raw, accLine);
+        acc = '';
+    });
+    if (acc.trim())
+        flush(acc, accLine);
+    return hits;
+}
+//# sourceMappingURL=dry-run-langs.js.map

package/dist/dry-run-langs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dry-run-langs.js","sourceRoot":"","sources":["../src/dry-run-langs.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AA8XH,0CAkDC;AAtZD,mGAAmG;AACtF,QAAA,cAAc,GAAG,IAAI,CAAC;AAEnC,MAAM,cAAc,GAAG,4DAA4D,CAAC;AAEpF,2FAA2F;AAC3F,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,GAAG,GAAG,EAAE;IACzD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;AACnC,CAAC;AAED,MAAM,oBAAoB,GACxB,sNAAsN,CAAC;AAEzN,8EAA8E;AAE9E,MAAM,OAAO,GACX,+NAA+N,CAAC;AAClO,MAAM,SAAS,GACb,6GAA6G,CAAC;AAChH,MAAM,QAAQ,GACZ,+LAA+L,CAAC;AAClM,MAAM,MAAM,GACV,6LAA6L,CAAC;AAChM,MAAM,OAAO,GAAG,sBAAsB,CAAC;AAEvC,8EAA8E;AAE9E,MAAM,OAAO,GACX,gVAAgV,CAAC;AACnV,MAAM,SAAS,GACb,iSAAiS,CAAC;AACpS,MAAM,QAAQ,GACZ,oRAAoR,CAAC;AACvR,MAAM,MAAM,GACV,kNAAkN,CAAC;AACrN,MAAM,OAAO,GAAG,6CAA6C,CAAC;AAE9D,8EAA8E;AAE9E,MAAM,SAAS,GACb,iUAAiU,CAAC;AACpU,MAAM,QAAQ,GACZ,4KAA4K,CAAC;AAC/K,MAAM,OAAO,GAAG,+CAA+C,CAAC;AAChE,MAAM,QAAQ,GACZ,uJAAuJ,CAAC;AAC1J,MAAM,UAAU,GAAG,+CAA+C,CAAC;AACnE,MAAM,WAAW,GACf,iJAAiJ,CAAC;AAEpJ,8EAA8E;AAE9E,MAAM,OAAO,GACX,iMAAiM,CAAC;AACpM,MAAM,SAAS,GACb,qHAAqH,CAAC;AACxH,MAAM,MAAM,GAAG,2DAA2D,CAAC;AAC3E,MAAM,WAAW,GAAG,cAAc,CAAC;AAEnC,8EAA8E;AAE9E,MAAM,eAAe,GACnB,8HAA8H,CAAC;AACjI,MAAM,SAAS,GACb,gGAAgG,CAAC;AACnG,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAExC,8EAA8E;AAE9E,SAAS,iBAAiB,CACxB,IAAe,EACf,IAAY,EACZ,MAAc,EACd,EAAU,EACV,QAAgB,EAChB,KAAa;IAEb,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,CAAC;QACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;QACpB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACrD,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,EAAU,EAAE,IAAe;IAC3D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACpC,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAC3F,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,iBAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ;YAClD,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;SACjE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,kCAAkC;SAC3C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,EAAU,EAAE,IAAe;IACvD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACpC,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;IAC/F,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,iBAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,iDAAiD,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ;YACpD,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;SACrE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa;YAC7C,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,yBAAyB;SACjF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,EAAU,EAAE,IAAe,EAAE,KAA2B;IAC5F,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,IAAI,iBAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE;SACjE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,MAAM,OAAO,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;SACrE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa;YAChD,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,yBAAyB;SAC1F,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,mEAAmE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1F,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,6CAA6C;SACtD,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM;IACR,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,EAAU,EAAE,IAAe;IAC7D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACpC,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,4BAA4B;SACrC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,iBAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;SACxE,CAAC,CAAC;QACH,MAAM;IACR,CAAC;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,kCAAkC;SAC3C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,EAAU,EAAE,IAAe;IACxD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACtF,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;SAAM,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,EAAU,EAAE,IAAe;IAC/D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAClB,uGAAuG,CACxG,CAAC;IACF,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACxC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC;gBACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;gBACpB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;aACxE,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC;QACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;QACpB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,aAAa,GACjB,gGAAgG,CAAC;AAEnG,SAAS,QAAQ,CAAC,KAAe,EAAE,SAAiB,EAAE,IAAe;IACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAc,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,gFAAgF;YAChF,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAc,CAAC,CAAC;gBAC9C,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;oBAAE,SAAS;gBAChC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;gBAChD,IAAI,GAAG,IAAI,MAAM;oBAAE,MAAM;gBACzB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACnC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,GAAG,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC;oBACxC,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChC,GAAG,GAAG,EAAE,CAAC;YACX,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;AACH,CAAC;AAED,gHAAgH;AAChH,SAAgB,eAAe,CAAC,IAAc,EAAE,KAAe,EAAE,SAAiB;IAChF,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnC,4FAA4F;IAC5F,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAc,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,QAAQ;gBACX,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;gBACzD,MAAM;YACR,KAAK,IAAI;gBACP,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;gBAClF,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;oBAC7D,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC1C,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC7D,MAAM;YACR,KAAK,MAAM,CAAC;YACZ,KAAK,MAAM;gBACT,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC3D,MAAM;YACR,KAAK,KAAK;gBACR,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;gBACvD,MAAM;QACV,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzB,MAAM,EAAE,GAAG,SAAS,GAAG,GAAG,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,KAAK,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,EAAE,CAAC;QACvB,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC;YACvC,OAAO;QACT,CAAC;QACD,KAAK,CAAC,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1B,GAAG,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/dry-run.d.ts

@@ -28,6 +28,8 @@ export interface DryRunCommand {
     recognized: boolean;
     /** 1-based line within the dossier body. */
     line: number;
+    /** Why this command was escalated beyond its plain classification (e.g. remote code execution). */
+    reason?: string;
 }
 export interface DryRunFile {
     path: string;
@@ -76,6 +78,18 @@ export interface DryRunPlan {
     risk_score: number;
     level: DryRunLevel;
     score_breakdown: DryRunScoreComponent[];
+    /** Declared risk_level vs what the code blocks actually do; `mismatch` when observed outranks declared. */
+    declared_vs_observed: {
+        declared_level: string | null;
+        observed_level: DryRunLevel;
+        mismatch: boolean;
+        note: string;
+    };
+    /** Code fences in a language the analyzer has no extractor for (their content is NOT reflected in the score). */
+    unanalyzed_fences: Array<{
+        lang: string;
+        line: number;
+    }>;
 }
 /** Base points for the dossier's declared risk_level. */
 export declare const SCORE_BASE: Record<string, number>;

package/dist/dry-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dry-run.d.ts","sourceRoot":"","sources":["../src/dry-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,eAAO,MAAM,kBAAkB,sLACsJ,CAAC;AAEtL,sDAAsD;AACtD,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,QAAQ,GAAG,aAAa,CAAC;AAE3E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,0FAA0F;IAC1F,UAAU,EAAE,OAAO,CAAC;IACpB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,OAAO,sBAAsB,CAAC;IAC9C,gEAAgE;IAChE,cAAc,EAAE,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAChF,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,sBAAsB,EAAE,MAAM,EAAE,CAAC;QACjC,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,iBAAiB,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,GAAG,EAAE,SAAS,EAAE,CAAC;IACjB,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,oBAAoB,EAAE,CAAC;CACzC;AAID,yDAAyD;AACzD,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAkD,CAAC;AACjG,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,iCAAiC,IAAI,CAAC;AACnD,eAAO,MAAM,iCAAiC,KAAK,CAAC;AACpD,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAKxD,CAAC;AACF,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAKxD,CAAC;AACF,yBAAyB;AACzB,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAKxD;AA2nBD,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,GAAG;IAAE,WAAW,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChE,UAAU,CA+IZ"}
+{"version":3,"file":"dry-run.d.ts","sourceRoot":"","sources":["../src/dry-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,eAAO,MAAM,kBAAkB,sLACsJ,CAAC;AAEtL,sDAAsD;AACtD,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,QAAQ,GAAG,aAAa,CAAC;AAE3E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,0FAA0F;IAC1F,UAAU,EAAE,OAAO,CAAC;IACpB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,mGAAmG;IACnG,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,OAAO,sBAAsB,CAAC;IAC9C,gEAAgE;IAChE,cAAc,EAAE,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAChF,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,sBAAsB,EAAE,MAAM,EAAE,CAAC;QACjC,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,iBAAiB,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,GAAG,EAAE,SAAS,EAAE,CAAC;IACjB,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,oBAAoB,EAAE,CAAC;IACxC,2GAA2G;IAC3G,oBAAoB,EAAE;QACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,cAAc,EAAE,WAAW,CAAC;QAC5B,QAAQ,EAAE,OAAO,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,iHAAiH;IACjH,iBAAiB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1D;AAID,yDAAyD;AACzD,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAkD,CAAC;AACjG,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,iCAAiC,IAAI,CAAC;AACnD,eAAO,MAAM,iCAAiC,KAAK,CAAC;AACpD,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAKxD,CAAC;AACF,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAKxD,CAAC;AACF,yBAAyB;AACzB,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAKxD;AAgwDD,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,GAAG;IAAE,WAAW,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChE,UAAU,CAuGZ"}