@appland/scanner 1.56.0 → 1.59.0

package/built/rules/incompatibleHttpClientRequest.js

@@ -8,85 +8,47 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (_) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-var openapi_1 = require("../openapi");
-var parseRuleDescription_1 = __importDefault(require("./lib/parseRuleDescription"));
-var Options = /** @class */ (function () {
-    function Options() {
+const openapi_1 = require("../openapi");
+const parseRuleDescription_1 = __importDefault(require("./lib/parseRuleDescription"));
+class Options {
+    constructor() {
         this.schemata = {};
     }
-    return Options;
-}());
-var changeMessage = function (change) {
-    return "HTTP client request is incompatible with OpenAPI schema. Change details: ".concat(change.action, " ").concat(change.sourceSpecEntityDetails
+}
+const changeMessage = (change) => {
+    return `HTTP client request is incompatible with OpenAPI schema. Change details: ${change.action} ${change.sourceSpecEntityDetails
         .concat(change.destinationSpecEntityDetails)
-        .map(function (detail) { return detail.location; })
-        .join(', '));
+        .map((detail) => detail.location)
+        .join(', ')}`;
 };
 function build(options) {
     function matcher(event) {
-        return __awaiter(this, void 0, void 0, function () {
-            var clientFragment, serverSchema, clientSchema, changes;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        clientFragment = (0, openapi_1.forClientRequest)(event);
-                        return [4 /*yield*/, (0, openapi_1.forURL)(event.httpClientRequest.url, options.schemata)];
-                    case 1:
-                        serverSchema = _a.sent();
-                        clientSchema = {
-                            openapi: '3.0.0',
-                            info: {
-                                title: 'Schema derived from client request',
-                                version: serverSchema.info.version, // Indicate that it *should* be compatible.
-                            },
-                            paths: clientFragment.paths,
-                            components: { securitySchemes: clientFragment.securitySchemes },
-                        };
-                        return [4 /*yield*/, (0, openapi_1.breakingChanges)(clientSchema, serverSchema)];
-                    case 2:
-                        changes = _a.sent();
-                        return [2 /*return*/, changes.map(function (change) { return ({
-                                event: event,
-                                message: changeMessage(change),
-                            }); })];
-                }
-            });
+        return __awaiter(this, void 0, void 0, function* () {
+            const clientFragment = (0, openapi_1.forClientRequest)(event);
+            const serverSchema = yield (0, openapi_1.forURL)(event.httpClientRequest.url, options.schemata);
+            const clientSchema = {
+                openapi: '3.0.0',
+                info: {
+                    title: 'Schema derived from client request',
+                    version: serverSchema.info.version, // Indicate that it *should* be compatible.
+                },
+                paths: clientFragment.paths,
+                components: { securitySchemes: clientFragment.securitySchemes },
+            };
+            const changes = yield (0, openapi_1.breakingChanges)(clientSchema, serverSchema);
+            return changes.map((change) => ({
+                event,
+                message: changeMessage(change),
+            }));
         });
     }
     return {
-        matcher: matcher,
-        where: function (e) { return !!e.httpClientRequest && !!e.httpClientRequest.url; },
+        matcher,
+        where: (e) => !!e.httpClientRequest && !!e.httpClientRequest.url,
     };
 }
 exports.default = {
@@ -98,7 +60,6 @@ exports.default = {
     impactDomain: 'Stability',
     description: (0, parseRuleDescription_1.default)('incompatibleHttpClientRequest'),
     url: 'https://appland.com/docs/analysis/rules-reference.html#incompatible-http-client-request',
-    Options: Options,
-    build: build,
+    Options,
+    build,
 };
-//# sourceMappingURL=incompatibleHttpClientRequest.js.map

package/built/rules/insecureCompare.js

@@ -3,17 +3,17 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-var url_1 = require("url");
-var recordSecrets_1 = __importDefault(require("../analyzer/recordSecrets"));
-var secretsRegexes_1 = require("../analyzer/secretsRegexes");
-var parseRuleDescription_1 = __importDefault(require("./lib/parseRuleDescription"));
-var BCRYPT_REGEXP = /^[$]2[abxy]?[$](?:0[4-9]|[12][0-9]|3[01])[$][./0-9a-zA-Z]{53}$/;
-var secrets = new Set();
+const url_1 = require("url");
+const recordSecrets_1 = __importDefault(require("../analyzer/recordSecrets"));
+const secretsRegexes_1 = require("../analyzer/secretsRegexes");
+const parseRuleDescription_1 = __importDefault(require("./lib/parseRuleDescription"));
+const BCRYPT_REGEXP = /^[$]2[abxy]?[$](?:0[4-9]|[12][0-9]|3[01])[$][./0-9a-zA-Z]{53}$/;
+const secrets = new Set();
 function stringEquals(e) {
     if (!e.parameters || !e.receiver || e.parameters.length !== 1) {
         return false;
     }
-    var args = [e.receiver.value, e.parameters[0].value];
+    const args = [e.receiver.value, e.parameters[0].value];
     function isBcrypt(str) {
         return BCRYPT_REGEXP.test(str);
     }
@@ -36,12 +36,12 @@ function build() {
         return (e.isFunction && (e.codeObject.labels.has(StringEquals) || e.codeObject.labels.has(Secret)));
     }
     return {
-        matcher: matcher,
-        where: where,
+        matcher,
+        where,
     };
 }
-var Secret = 'secret';
-var StringEquals = 'string.equals';
+const Secret = 'secret';
+const StringEquals = 'string.equals';
 exports.default = {
     id: 'insecure-compare',
     title: 'Insecure comparison of secrets',
@@ -53,6 +53,5 @@ exports.default = {
     },
     description: (0, parseRuleDescription_1.default)('insecureCompare'),
     url: 'https://appland.com/docs/analysis/rules-reference.html#insecure-compare',
-    build: build,
+    build,
 };
-//# sourceMappingURL=insecureCompare.js.map

package/built/rules/jobNotCancelled.js

@@ -1,65 +1,34 @@
 "use strict";
-var __read = (this && this.__read) || function (o, n) {
-    var m = typeof Symbol === "function" && o[Symbol.iterator];
-    if (!m) return o;
-    var i = m.call(o), r, ar = [], e;
-    try {
-        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
-    }
-    catch (error) { e = { error: error }; }
-    finally {
-        try {
-            if (r && !r.done && (m = i["return"])) m.call(i);
-        }
-        finally { if (e) throw e.error; }
-    }
-    return ar;
-};
-var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
-    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
-        if (ar || !(i in from)) {
-            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
-            ar[i] = from[i];
-        }
-    }
-    return to.concat(ar || Array.prototype.slice.call(from));
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-var wellKnownLabels_1 = __importDefault(require("../wellKnownLabels"));
-var sqlTransactionScope_1 = require("../scope/sqlTransactionScope");
-var url_1 = require("url");
-var parseRuleDescription_1 = __importDefault(require("./lib/parseRuleDescription"));
+const wellKnownLabels_1 = __importDefault(require("../wellKnownLabels"));
+const sqlTransactionScope_1 = require("../scope/sqlTransactionScope");
+const url_1 = require("url");
+const parseRuleDescription_1 = __importDefault(require("./lib/parseRuleDescription"));
 function build() {
     function matcher(event) {
         if (!(0, sqlTransactionScope_1.hasTransactionDetails)(event))
-            throw new Error("expected event ".concat(event.id, " to be a transaction"));
+            throw new Error(`expected event ${event.id} to be a transaction`);
         if (event.transaction.status === 'commit')
             return;
-        var creationEvents = event.transaction.events.filter(function (_a) {
-            var labels = _a.labels;
-            return labels.has(wellKnownLabels_1.default.JobCreate);
-        });
-        var cancellationEvents = event.transaction.events.filter(function (_a) {
-            var labels = _a.labels;
-            return labels.has(wellKnownLabels_1.default.JobCancel);
-        });
-        var missing = creationEvents.length - cancellationEvents.length;
+        const creationEvents = event.transaction.events.filter(({ labels }) => labels.has(wellKnownLabels_1.default.JobCreate));
+        const cancellationEvents = event.transaction.events.filter(({ labels }) => labels.has(wellKnownLabels_1.default.JobCancel));
+        const missing = creationEvents.length - cancellationEvents.length;
         if (missing === 0)
             return;
-        var result = {
+        const result = {
             event: event,
-            message: "".concat(missing, " jobs created but not cancelled in this rolled back transaction"),
+            message: `${missing} jobs created but not cancelled in this rolled back transaction`,
             // if there's a mismatch and there are cancellations we can't tell
             // for sure which creations they match, so return everything
-            relatedEvents: __spreadArray(__spreadArray([], __read(creationEvents), false), __read(cancellationEvents), false),
+            relatedEvents: [...creationEvents, ...cancellationEvents],
         };
         return [result];
     }
     return {
-        matcher: matcher,
+        matcher,
     };
 }
 exports.default = {
@@ -74,6 +43,5 @@ exports.default = {
     },
     description: (0, parseRuleDescription_1.default)('jobNotCancelled'),
     url: 'https://appland.com/docs/analysis/rules-reference.html#job-not-cancelled',
-    build: build,
+    build,
 };
-//# sourceMappingURL=jobNotCancelled.js.map

package/built/rules/lib/hasParameterOrReceiver.js

@@ -2,10 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 // Builds a function that returns true if the provided event argument has the specified
 // objectId as the receiver or as a parameter value.
-exports.default = (function (objectId) {
-    return function (event) {
-        return (!!event.receiver && event.receiver.object_id === objectId) ||
-            (!!event.parameters && event.parameters.some(function (param) { return param.object_id === objectId; }));
-    };
-});
-//# sourceMappingURL=hasParameterOrReceiver.js.map
+exports.default = (objectId) => {
+    return (event) => (!!event.receiver && event.receiver.object_id === objectId) ||
+        (!!event.parameters && event.parameters.some((param) => param.object_id === objectId));
+};

package/built/rules/lib/matchEvent.js

@@ -1,22 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildFilters = exports.buildFilter = void 0;
-var matchPattern_1 = require("./matchPattern");
+const matchPattern_1 = require("./matchPattern");
 function buildFilter(pattern) {
-    var testFn = (0, matchPattern_1.buildFilter)(pattern.test);
-    var propertyFn = {
-        id: function (e) { return e.codeObject.id; },
-        type: function (e) { return e.codeObject.type; },
-        fqid: function (e) { return e.codeObject.fqid; },
-        query: function (e, appMapIndex) { return (e.sql ? appMapIndex.sqlNormalized(e) : null); },
-        route: function (e) { return e.route; },
+    const testFn = (0, matchPattern_1.buildFilter)(pattern.test);
+    const propertyFn = {
+        id: (e) => e.codeObject.id,
+        type: (e) => e.codeObject.type,
+        fqid: (e) => e.codeObject.fqid,
+        query: (e, appMapIndex) => (e.sql ? appMapIndex.sqlNormalized(e) : null),
+        route: (e) => e.route,
     };
-    return function (event, appMapIndex) {
-        var fn = propertyFn[pattern.property];
+    return (event, appMapIndex) => {
+        const fn = propertyFn[pattern.property];
         if (!fn) {
-            throw new Error("Unrecognized Event filter property: ".concat(pattern.property));
+            throw new Error(`Unrecognized Event filter property: ${pattern.property}`);
         }
-        var value = fn(event, appMapIndex);
+        const value = fn(event, appMapIndex);
         if (!value) {
             return false;
         }
@@ -28,4 +28,3 @@ function buildFilters(patterns) {
     return patterns.map(buildFilter);
 }
 exports.buildFilters = buildFilters;
-//# sourceMappingURL=matchEvent.js.map

package/built/rules/lib/matchPattern.js

@@ -6,18 +6,18 @@ function buildFilter(pattern) {
         return pattern.ignoreCase ? value.toLocaleLowerCase() : value;
     }
     if (pattern.equal) {
-        var testStr_1 = respectIgnoreCaseFlag(pattern.equal);
-        return function (value) { return respectIgnoreCaseFlag(value) === testStr_1; };
+        const testStr = respectIgnoreCaseFlag(pattern.equal);
+        return (value) => respectIgnoreCaseFlag(value) === testStr;
     }
     else if (pattern.include) {
-        var testStr_2 = respectIgnoreCaseFlag(pattern.include);
-        return function (value) { return respectIgnoreCaseFlag(value).includes(testStr_2); };
+        const testStr = respectIgnoreCaseFlag(pattern.include);
+        return (value) => respectIgnoreCaseFlag(value).includes(testStr);
     }
     else {
-        var regexp_1 = pattern.match instanceof RegExp
+        const regexp = pattern.match instanceof RegExp
             ? pattern.match
             : new RegExp(pattern.match, pattern.ignoreCase ? 'i' : undefined);
-        return function (value) { return regexp_1.test(value); };
+        return (value) => regexp.test(value);
     }
 }
 exports.buildFilter = buildFilter;
@@ -25,4 +25,3 @@ function buildFilters(patterns) {
     return patterns.map(buildFilter);
 }
 exports.buildFilters = buildFilters;
-//# sourceMappingURL=matchPattern.js.map

package/built/rules/lib/metadata.js

@@ -1,3 +1,2 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=metadata.js.map

package/built/rules/lib/parseRuleDescription.js

@@ -3,12 +3,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-var fs_1 = __importDefault(require("fs"));
-var path_1 = require("path");
-var util_1 = require("./util");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = require("path");
+const util_1 = require("./util");
 function parseRuleDescription(id) {
-    var content = fs_1.default.readFileSync((0, path_1.join)(__dirname, "../../../doc/rules/".concat((0, util_1.dasherize)(id), ".md")), 'utf-8');
-    var propertiesContent = content.match(/---\n((?:.*\n)+)---\n((?:.*\n)+?)##?#?/);
+    const content = fs_1.default.readFileSync((0, path_1.join)(__dirname, `../../../doc/rules/${(0, util_1.dasherize)(id)}.md`), 'utf-8');
+    const propertiesContent = content.match(/---\n((?:.*\n)+)---\n((?:.*\n)+?)##?#?/);
     if (!propertiesContent) {
         // This is probably a new doc that doesn't have front matter yet.
         // It's all description.
@@ -17,4 +17,3 @@ function parseRuleDescription(id) {
     return propertiesContent[2].replace(/\n/g, ' ').trim();
 }
 exports.default = parseRuleDescription;
-//# sourceMappingURL=parseRuleDescription.js.map

package/built/rules/lib/precedingEvents.js

@@ -1,80 +1,12 @@
 "use strict";
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (_) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-var __values = (this && this.__values) || function(o) {
-    var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
-    if (m) return m.call(o);
-    if (o && typeof o.length === "number") return {
-        next: function () {
-            if (o && i >= o.length) o = void 0;
-            return { value: o && o[i++], done: !o };
-        }
-    };
-    throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
-};
 Object.defineProperty(exports, "__esModule", { value: true });
-var models_1 = require("@appland/models");
-function precedingEvents(rootEvent, target) {
-    var _a, _b, event, e_1_1;
-    var e_1, _c;
-    return __generator(this, function (_d) {
-        switch (_d.label) {
-            case 0:
-                _d.trys.push([0, 5, 6, 7]);
-                _a = __values(new models_1.EventNavigator(rootEvent).descendants()), _b = _a.next();
-                _d.label = 1;
-            case 1:
-                if (!!_b.done) return [3 /*break*/, 4];
-                event = _b.value;
-                if (event.event === target) {
-                    return [3 /*break*/, 4];
-                }
-                return [4 /*yield*/, event];
-            case 2:
-                _d.sent();
-                _d.label = 3;
-            case 3:
-                _b = _a.next();
-                return [3 /*break*/, 1];
-            case 4: return [3 /*break*/, 7];
-            case 5:
-                e_1_1 = _d.sent();
-                e_1 = { error: e_1_1 };
-                return [3 /*break*/, 7];
-            case 6:
-                try {
-                    if (_b && !_b.done && (_c = _a.return)) _c.call(_a);
-                }
-                finally { if (e_1) throw e_1.error; }
-                return [7 /*endfinally*/];
-            case 7: return [2 /*return*/];
+const models_1 = require("@appland/models");
+function* precedingEvents(rootEvent, target) {
+    for (const event of new models_1.EventNavigator(rootEvent).descendants()) {
+        if (event.event === target) {
+            break;
         }
-    });
+        yield event;
+    }
 }
 exports.default = precedingEvents;
-//# sourceMappingURL=precedingEvents.js.map

package/built/rules/lib/rpcWithoutProtection.js

@@ -1,40 +1,17 @@
 "use strict";
-var __values = (this && this.__values) || function(o) {
-    var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
-    if (m) return m.call(o);
-    if (o && typeof o.length === "number") return {
-        next: function () {
-            if (o && i >= o.length) o = void 0;
-            return { value: o && o[i++], done: !o };
-        }
-    };
-    throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.rpcWithoutProtection = void 0;
 function rpcWithoutProtection(candidateGenerator, options) {
     return {
-        matcher: function (httpClientRequest) {
-            var e_1, _a;
-            try {
-                for (var _b = __values(candidateGenerator(httpClientRequest)), _c = _b.next(); !_c.done; _c = _b.next()) {
-                    var candidate = _c.value;
-                    if (candidate.codeObject.labels.has(options.expectedLabel)) {
-                        return false;
-                    }
-                }
-            }
-            catch (e_1_1) { e_1 = { error: e_1_1 }; }
-            finally {
-                try {
-                    if (_c && !_c.done && (_a = _b.return)) _a.call(_b);
+        matcher: (httpClientRequest) => {
+            for (const candidate of candidateGenerator(httpClientRequest)) {
+                if (candidate.codeObject.labels.has(options.expectedLabel)) {
+                    return false;
                 }
-                finally { if (e_1) throw e_1.error; }
             }
             return true;
         },
-        where: function (e) { return !!e.httpClientRequest; },
+        where: (e) => !!e.httpClientRequest,
     };
 }
 exports.rpcWithoutProtection = rpcWithoutProtection;
-//# sourceMappingURL=rpcWithoutProtection.js.map

package/built/rules/lib/sanitizesData.js

@@ -7,4 +7,3 @@ function sanitizesData(event, objectId, label) {
         event.returnValue.object_id === objectId);
 }
 exports.default = sanitizesData;
-//# sourceMappingURL=sanitizesData.js.map