@ball-lang/cli 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+# MIT License
+
+Copyright (c) 2026 Ball Language Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,81 @@
+[![npm version](https://img.shields.io/npm/v/@ball-lang/cli.svg)](https://www.npmjs.com/package/@ball-lang/cli)
+
+# @ball-lang/cli
+
+Command-line interface for the [Ball programming language](https://github.com/ball-lang/ball). Runs Ball programs and performs static capability analysis, powered by [`@ball-lang/engine`](https://www.npmjs.com/package/@ball-lang/engine).
+
+## Install
+
+```bash
+npm install -g @ball-lang/cli
+```
+
+Or run it without installing:
+
+```bash
+npx @ball-lang/cli run my_program.ball.json
+```
+
+## Commands
+
+### `ball run <program.ball.json>`
+
+Execute a Ball program. Writes `std.print` output to stdout.
+
+```bash
+ball run examples/hello_world/hello_world.ball.json
+```
+
+### `ball audit <program.ball.json>`
+
+Static capability analysis. Walks the expression tree of every user-defined function and reports which side-effect categories are used. Because every side effect in Ball flows through a named base function, this analysis is provably complete -- not heuristic.
+
+```bash
+ball audit my_program.ball.json
+```
+
+Example output:
+
+```
+Ball Capability Audit: path v1.9.1
+============================================================
+
+Capabilities:
+  ✓ pure (pure computation)
+  ⚠ io (2 call sites: main.main → std.print, main.main → std.print)
+  ✗ NONE: filesystem, network, process, memory, concurrency, random
+
+Summary: LOW RISK
+  1 functions: 0 pure, 1 effectful
+```
+
+#### Audit flags
+
+| Flag | Description |
+|------|-------------|
+| `--output <path>` | Write the structured JSON report to `<path>`. |
+| `--deny <caps>` | Comma-separated capabilities to deny. Exits with code 1 on any violation (e.g. `--deny fs,network`). |
+| `--reachable-only` | Only analyze functions transitively reachable from the entry function. |
+| `--json` | Emit the JSON report to stdout instead of the text report. |
+
+Capability categories: `pure`, `io`, `fs`, `process`, `time`, `random`, `memory`, `concurrency`, `network`, `async`.
+
+### `ball --version`
+
+Prints the CLI version.
+
+### `ball --help`
+
+Prints usage information.
+
+## Policy enforcement in CI
+
+Fail a CI job if a Ball program gains filesystem or network access:
+
+```bash
+ball audit my_program.ball.json --deny fs,network
+```
+
+## License
+
+MIT

package/dist/capability_analyzer.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Static capability analysis for Ball programs.
+ *
+ * Walks the expression tree of every function in a Program and reports
+ * which base functions are called, categorized by side-effect capability.
+ * Since every side effect in Ball flows through a named base function,
+ * this analysis is provably complete — not heuristic.
+ *
+ * Ported from `dart/shared/lib/capability_analyzer.dart`.
+ */
+import type { Capability } from './capability_table.ts';
+export interface Program {
+    name?: string;
+    version?: string;
+    modules: Module[];
+    entryModule: string;
+    entryFunction: string;
+}
+export interface Module {
+    name: string;
+    functions: FunctionDef[];
+}
+export interface FunctionDef {
+    name: string;
+    isBase?: boolean;
+    body?: Expression;
+}
+export interface Expression {
+    call?: FunctionCall;
+    literal?: Literal;
+    reference?: {
+        name: string;
+    };
+    fieldAccess?: {
+        object?: Expression;
+        field: string;
+    };
+    messageCreation?: {
+        fields: FieldValuePair[];
+    };
+    block?: Block;
+    lambda?: Lambda;
+}
+export interface FunctionCall {
+    module?: string;
+    function: string;
+    input?: Expression;
+}
+export interface Literal {
+    listValue?: {
+        elements: Expression[];
+    };
+}
+export interface FieldValuePair {
+    name: string;
+    value: Expression;
+}
+export interface Block {
+    statements: Statement[];
+    result?: Expression;
+}
+export interface Statement {
+    let?: {
+        name: string;
+        value: Expression;
+    };
+    expression?: Expression;
+}
+export interface Lambda {
+    body: Expression;
+}
+export interface CallSite {
+    module: string;
+    function: string;
+    calleeModule: string;
+    calleeFunction: string;
+}
+export interface FunctionCapability {
+    module: string;
+    function: string;
+    capabilities: Capability[];
+}
+export interface CapabilityEntry {
+    capability: Capability;
+    riskLevel: string;
+    callSites: CallSite[];
+}
+export interface CapabilitySummary {
+    isPure: boolean;
+    readsFilesystem: boolean;
+    writesFilesystem: boolean;
+    readsStdin: boolean;
+    writesStdout: boolean;
+    writesStderr: boolean;
+    readsEnvironment: boolean;
+    controlsProcess: boolean;
+    usesMemory: boolean;
+    usesTime: boolean;
+    usesRandom: boolean;
+    usesConcurrency: boolean;
+    usesNetwork: boolean;
+    totalFunctions: number;
+    pureFunctions: number;
+    effectfulFunctions: number;
+}
+export interface BallCapabilityReport {
+    programName: string;
+    programVersion: string;
+    capabilities: CapabilityEntry[];
+    functions: FunctionCapability[];
+    summary: CapabilitySummary;
+}
+export interface AnalyzeOptions {
+    /** If true, only analyze functions transitively reachable from the entry. */
+    reachableOnly?: boolean;
+}
+/** Analyze a Ball program and return a structured capability report. */
+export declare function analyzeCapabilities(program: Program, options?: AnalyzeOptions): BallCapabilityReport;
+/** Format a capability report as human-readable text. */
+export declare function formatCapabilityReport(report: BallCapabilityReport): string;
+/** Check a report against a deny list. Returns list of violations (empty = pass). */
+export declare function checkPolicy(report: BallCapabilityReport, deny: ReadonlySet<string>): string[];
+//# sourceMappingURL=capability_analyzer.d.ts.map

package/dist/capability_analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability_analyzer.d.ts","sourceRoot":"","sources":["../src/capability_analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAOxD,MAAM,WAAW,OAAO;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,WAAW,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,WAAW,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,eAAe,CAAC,EAAE;QAAE,MAAM,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC;IAC/C,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;KAAE,CAAC;CAExC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,KAAK;IACpB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IAC1C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,UAAU,CAAC;CAClB;AAID,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,UAAU,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,QAAQ,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAID,MAAM,WAAW,cAAc;IAC7B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,cAAmB,GAC3B,oBAAoB,CAEtB;AAsPD,yDAAyD;AACzD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CA2D3E;AAED,qFAAqF;AACrF,wBAAgB,WAAW,CACzB,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,GACxB,MAAM,EAAE,CAWV"}

package/dist/capability_analyzer.js

@@ -0,0 +1,311 @@
+/**
+ * Static capability analysis for Ball programs.
+ *
+ * Walks the expression tree of every function in a Program and reports
+ * which base functions are called, categorized by side-effect capability.
+ * Since every side effect in Ball flows through a named base function,
+ * this analysis is provably complete — not heuristic.
+ *
+ * Ported from `dart/shared/lib/capability_analyzer.dart`.
+ */
+import { ALL_CAPABILITIES, capabilityRiskLevel, lookupCapability, } from "./capability_table.js";
+/** Analyze a Ball program and return a structured capability report. */
+export function analyzeCapabilities(program, options = {}) {
+    return new Analyzer(program, options.reachableOnly ?? false).analyze();
+}
+class Analyzer {
+    program;
+    reachableOnly;
+    fnCaps = new Map();
+    capCallSites = new Map();
+    baseModules = new Set();
+    constructor(program, reachableOnly) {
+        this.program = program;
+        this.reachableOnly = reachableOnly;
+    }
+    analyze() {
+        this.identifyBaseModules();
+        if (this.reachableOnly) {
+            this.analyzeReachable();
+        }
+        else {
+            this.analyzeAll();
+        }
+        return this.buildReport();
+    }
+    identifyBaseModules() {
+        for (const mod of this.program.modules) {
+            if (mod.functions.length === 0)
+                continue;
+            const allBase = mod.functions.every((f) => f.isBase === true);
+            if (allBase)
+                this.baseModules.add(mod.name);
+        }
+    }
+    analyzeAll() {
+        for (const mod of this.program.modules) {
+            if (this.baseModules.has(mod.name))
+                continue;
+            for (const fn of mod.functions) {
+                if (fn.isBase)
+                    continue;
+                const caps = new Set();
+                if (fn.body)
+                    this.walkExpression(fn.body, mod.name, fn.name, caps);
+                this.fnCaps.set(`${mod.name}.${fn.name}`, caps);
+            }
+        }
+    }
+    analyzeReachable() {
+        const visited = new Set();
+        const entryKey = `${this.program.entryModule}.${this.program.entryFunction}`;
+        this.analyzeFunction(entryKey, visited);
+    }
+    analyzeFunction(key, visited) {
+        if (visited.has(key))
+            return;
+        visited.add(key);
+        const parts = key.split('.');
+        if (parts.length < 2)
+            return;
+        const moduleName = parts[0];
+        const fnName = parts.slice(1).join('.');
+        if (this.baseModules.has(moduleName))
+            return;
+        for (const mod of this.program.modules) {
+            if (mod.name !== moduleName)
+                continue;
+            for (const fn of mod.functions) {
+                if (fn.name !== fnName)
+                    continue;
+                if (fn.isBase)
+                    return;
+                const caps = new Set();
+                const callees = new Set();
+                if (fn.body) {
+                    this.walkExpression(fn.body, moduleName, fnName, caps, callees);
+                }
+                this.fnCaps.set(key, caps);
+                for (const callee of callees) {
+                    this.analyzeFunction(callee, visited);
+                    const calleeCaps = this.fnCaps.get(callee);
+                    if (calleeCaps)
+                        for (const c of calleeCaps)
+                            caps.add(c);
+                }
+                return;
+            }
+        }
+    }
+    walkExpression(expr, ctxModule, ctxFunction, caps, callees) {
+        if (expr.call) {
+            this.walkCall(expr.call, ctxModule, ctxFunction, caps, callees);
+            return;
+        }
+        if (expr.literal) {
+            if (expr.literal.listValue) {
+                for (const elem of expr.literal.listValue.elements) {
+                    this.walkExpression(elem, ctxModule, ctxFunction, caps, callees);
+                }
+            }
+            return;
+        }
+        if (expr.block) {
+            for (const stmt of expr.block.statements) {
+                if (stmt.let) {
+                    this.walkExpression(stmt.let.value, ctxModule, ctxFunction, caps, callees);
+                }
+                if (stmt.expression) {
+                    this.walkExpression(stmt.expression, ctxModule, ctxFunction, caps, callees);
+                }
+            }
+            if (expr.block.result) {
+                this.walkExpression(expr.block.result, ctxModule, ctxFunction, caps, callees);
+            }
+            return;
+        }
+        if (expr.lambda) {
+            this.walkExpression(expr.lambda.body, ctxModule, ctxFunction, caps, callees);
+            return;
+        }
+        if (expr.messageCreation) {
+            for (const field of expr.messageCreation.fields) {
+                this.walkExpression(field.value, ctxModule, ctxFunction, caps, callees);
+            }
+            return;
+        }
+        if (expr.fieldAccess?.object) {
+            this.walkExpression(expr.fieldAccess.object, ctxModule, ctxFunction, caps, callees);
+            return;
+        }
+        // reference or unset: nothing to walk
+    }
+    walkCall(call, ctxModule, ctxFunction, caps, callees) {
+        const moduleName = call.module && call.module.length > 0 ? call.module : ctxModule;
+        const fnName = call.function;
+        const cap = lookupCapability(moduleName, fnName);
+        if (cap !== undefined) {
+            caps.add(cap);
+            if (cap !== 'pure') {
+                const list = this.capCallSites.get(cap) ?? [];
+                list.push({
+                    module: ctxModule,
+                    function: ctxFunction,
+                    calleeModule: moduleName,
+                    calleeFunction: fnName,
+                });
+                this.capCallSites.set(cap, list);
+            }
+        }
+        else {
+            callees?.add(`${moduleName}.${fnName}`);
+        }
+        if (call.input) {
+            this.walkExpression(call.input, ctxModule, ctxFunction, caps, callees);
+        }
+    }
+    buildReport() {
+        const allCaps = new Set();
+        let totalFns = 0;
+        let pureFns = 0;
+        let effectfulFns = 0;
+        const functions = [];
+        for (const [key, caps] of this.fnCaps) {
+            const dot = key.indexOf('.');
+            const mod = key.substring(0, dot);
+            const fn = key.substring(dot + 1);
+            functions.push({
+                module: mod,
+                function: fn,
+                capabilities: Array.from(caps),
+            });
+            for (const c of caps)
+                allCaps.add(c);
+            totalFns++;
+            const onlyPure = Array.from(caps).every((c) => c === 'pure');
+            if (onlyPure)
+                pureFns++;
+            else
+                effectfulFns++;
+        }
+        const capabilities = [];
+        for (const cap of ALL_CAPABILITIES) {
+            if (!allCaps.has(cap) && cap !== 'pure')
+                continue;
+            const sites = this.capCallSites.get(cap) ?? [];
+            if (cap === 'pure' && sites.length === 0 && allCaps.has(cap)) {
+                capabilities.push({
+                    capability: cap,
+                    riskLevel: capabilityRiskLevel[cap],
+                    callSites: [],
+                });
+                continue;
+            }
+            if (sites.length > 0) {
+                capabilities.push({
+                    capability: cap,
+                    riskLevel: capabilityRiskLevel[cap],
+                    callSites: sites.slice(),
+                });
+            }
+        }
+        const ioSites = this.capCallSites.get('io') ?? [];
+        const summary = {
+            isPure: Array.from(allCaps).every((c) => c === 'pure'),
+            readsFilesystem: allCaps.has('fs'),
+            writesFilesystem: allCaps.has('fs'),
+            readsStdin: ioSites.some((s) => s.calleeFunction === 'read_line'),
+            writesStdout: ioSites.some((s) => s.calleeFunction === 'print' || s.calleeFunction === 'print_error'),
+            writesStderr: ioSites.some((s) => s.calleeFunction === 'print_error'),
+            readsEnvironment: ioSites.some((s) => s.calleeFunction === 'env_get' || s.calleeFunction === 'args_get'),
+            controlsProcess: allCaps.has('process'),
+            usesMemory: allCaps.has('memory'),
+            usesTime: allCaps.has('time'),
+            usesRandom: allCaps.has('random'),
+            usesConcurrency: allCaps.has('concurrency'),
+            usesNetwork: allCaps.has('network'),
+            totalFunctions: totalFns,
+            pureFunctions: pureFns,
+            effectfulFunctions: effectfulFns,
+        };
+        return {
+            programName: this.program.name ?? '',
+            programVersion: this.program.version ?? '',
+            capabilities,
+            functions,
+            summary,
+        };
+    }
+}
+// ── Formatting & policy helpers ─────────────────────────────────────────────
+/** Format a capability report as human-readable text. */
+export function formatCapabilityReport(report) {
+    const lines = [];
+    const name = report.programName || '<unnamed>';
+    const version = report.programVersion || '0.0.0';
+    lines.push(`Ball Capability Audit: ${name} v${version}`);
+    lines.push('='.repeat(60));
+    lines.push('');
+    lines.push('Capabilities:');
+    for (const entry of report.capabilities) {
+        const icon = entry.riskLevel === 'none' ? '\u2713' : '\u26A0';
+        const siteCount = entry.callSites.length;
+        if (siteCount === 0) {
+            lines.push(`  ${icon} ${entry.capability} (pure computation)`);
+        }
+        else {
+            const sites = entry.callSites
+                .map((s) => `${s.module}.${s.function} \u2192 ${s.calleeModule}.${s.calleeFunction}`)
+                .join(', ');
+            lines.push(`  ${icon} ${entry.capability} (${siteCount} call sites: ${sites})`);
+        }
+    }
+    const absent = [];
+    const s = report.summary;
+    if (!s.readsFilesystem && !s.writesFilesystem)
+        absent.push('filesystem');
+    if (!s.usesNetwork)
+        absent.push('network');
+    if (!s.controlsProcess)
+        absent.push('process');
+    if (!s.usesMemory)
+        absent.push('memory');
+    if (!s.usesConcurrency)
+        absent.push('concurrency');
+    if (!s.usesRandom)
+        absent.push('random');
+    if (absent.length > 0) {
+        lines.push(`  \u2717 NONE: ${absent.join(', ')}`);
+    }
+    lines.push('');
+    const risk = s.isPure
+        ? 'NO RISK \u2014 pure computation only'
+        : s.controlsProcess || s.usesMemory || s.usesNetwork
+            ? 'HIGH RISK'
+            : s.readsFilesystem || s.writesFilesystem || s.usesConcurrency
+                ? 'MEDIUM RISK'
+                : 'LOW RISK';
+    lines.push(`Summary: ${risk}`);
+    lines.push(`  ${s.totalFunctions} functions: ${s.pureFunctions} pure, ${s.effectfulFunctions} effectful`);
+    lines.push('');
+    lines.push('Per-function breakdown:');
+    for (const fn of report.functions) {
+        const caps = fn.capabilities.filter((c) => c !== 'pure');
+        const label = caps.length === 0 ? 'pure' : caps.join(', ');
+        lines.push(`  ${fn.module}.${fn.function} \u2192 ${label}`);
+    }
+    return lines.join('\n') + '\n';
+}
+/** Check a report against a deny list. Returns list of violations (empty = pass). */
+export function checkPolicy(report, deny) {
+    const violations = [];
+    for (const entry of report.capabilities) {
+        if (!deny.has(entry.capability))
+            continue;
+        for (const site of entry.callSites) {
+            violations.push(`${entry.capability}: ${site.module}.${site.function} calls ${site.calleeModule}.${site.calleeFunction}`);
+        }
+    }
+    return violations;
+}
+//# sourceMappingURL=capability_analyzer.js.map

package/dist/capability_analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability_analyzer.js","sourceRoot":"","sources":["../src/capability_analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AA0H/B,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CACjC,OAAgB,EAChB,UAA0B,EAAE;IAE5B,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,QAAQ;IACK,OAAO,CAAU;IACjB,aAAa,CAAU;IACvB,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5C,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjD,YAAY,OAAgB,EAAE,aAAsB;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,OAAO;QACL,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAEO,mBAAmB;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACzC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;YAC9D,IAAI,OAAO;gBAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7C,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC/B,IAAI,EAAE,CAAC,MAAM;oBAAE,SAAS;gBACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAc,CAAC;gBACnC,IAAI,EAAE,CAAC,IAAI;oBAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACnE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,gBAAgB;QACtB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC7E,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAEO,eAAe,CAAC,GAAW,EAAE,OAAoB;QACvD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO;QAC7B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAExC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO;QAE7C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YACtC,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC/B,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBACjC,IAAI,EAAE,CAAC,MAAM;oBAAE,OAAO;gBACtB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAc,CAAC;gBACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;gBAClC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;oBACZ,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClE,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBACtC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC3C,IAAI,UAAU;wBAAE,KAAK,MAAM,CAAC,IAAI,UAAU;4BAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC1D,CAAC;gBACD,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAEO,cAAc,CACpB,IAAgB,EAChB,SAAiB,EACjB,WAAmB,EACnB,IAAqB,EACrB,OAAqB;QAErB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;oBACnD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBACzC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC7E,CAAC;gBACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAChF,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;gBAChD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QACD,sCAAsC;IACxC,CAAC;IAEO,QAAQ,CACd,IAAkB,EAClB,SAAiB,EACjB,WAAmB,EACnB,IAAqB,EACrB,OAAqB;QAErB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE7B,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9C,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,WAAW;oBACrB,YAAY,EAAE,UAAU;oBACxB,cAAc,EAAE,MAAM;iBACvB,CAAC,CAAC;gBACH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,GAAG,CAAC,GAAG,UAAU,IAAI,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;QACtC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,MAAM,SAAS,GAAyB,EAAE,CAAC;QAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClC,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAClC,SAAS,CAAC,IAAI,CAAC;gBACb,MAAM,EAAE,GAAG;gBACX,QAAQ,EAAE,EAAE;gBACZ,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;aAC/B,CAAC,CAAC;YAEH,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrC,QAAQ,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;YAC7D,IAAI,QAAQ;gBAAE,OAAO,EAAE,CAAC;;gBACnB,YAAY,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,YAAY,GAAsB,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,MAAM;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7D,YAAY,CAAC,IAAI,CAAC;oBAChB,UAAU,EAAE,GAAG;oBACf,SAAS,EAAE,mBAAmB,CAAC,GAAG,CAAC;oBACnC,SAAS,EAAE,EAAE;iBACd,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,YAAY,CAAC,IAAI,CAAC;oBAChB,UAAU,EAAE,GAAG;oBACf,SAAS,EAAE,mBAAmB,CAAC,GAAG,CAAC;oBACnC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,OAAO,GAAsB;YACjC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;YACtD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAClC,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YACnC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,WAAW,CAAC;YACjE,YAAY,EAAE,OAAO,CAAC,IAAI,CACxB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,OAAO,IAAI,CAAC,CAAC,cAAc,KAAK,aAAa,CAC1E;YACD,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,aAAa,CAAC;YACrE,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,cAAc,KAAK,UAAU,CACzE;YACD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YACvC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YACjC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;YAC3C,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YACnC,cAAc,EAAE,QAAQ;YACxB,aAAa,EAAE,OAAO;YACtB,kBAAkB,EAAE,YAAY;SACjC,CAAC;QAEF,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;YACpC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;YAC1C,YAAY;YACZ,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAE/E,yDAAyD;AACzD,MAAM,UAAU,sBAAsB,CAAC,MAA4B;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,IAAI,WAAW,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,0BAA0B,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;QACzC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,qBAAqB,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS;iBAC1B,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,cAAc,EAAE,CAC3E;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,gBAAgB,KAAK,GAAG,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,gBAAgB;QAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,CAAC,WAAW;QAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,CAAC,eAAe;QAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,CAAC,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,CAAC,eAAe;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC,CAAC,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM;QACnB,CAAC,CAAC,sCAAsC;QACxC,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW;YACpD,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,eAAe;gBAC9D,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,UAAU,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,CAAC,cAAc,eAAe,CAAC,CAAC,aAAa,UAAU,CAAC,CAAC,kBAAkB,YAAY,CAC9F,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,QAAQ,WAAW,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,WAAW,CACzB,MAA4B,EAC5B,IAAyB;IAEzB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,SAAS;QAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,CACb,GAAG,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,UAAU,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,EAAE,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/capability_table.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Static mapping of every Ball base function to its capability category.
+ *
+ * Since every side effect in Ball flows through a named base function in a
+ * known module, this table is provably complete. No function can perform I/O,
+ * access the filesystem, or spawn threads without appearing here.
+ *
+ * Ported from `dart/shared/lib/capability_table.dart`.
+ */
+/** Capability categories for Ball base functions. */
+export type Capability = 'pure' | 'io' | 'fs' | 'process' | 'time' | 'random' | 'memory' | 'concurrency' | 'network' | 'async';
+/** Canonical ordering of capabilities (matches the Dart enum order). */
+export declare const ALL_CAPABILITIES: readonly Capability[];
+/** Risk level associated with each capability. */
+export declare const capabilityRiskLevel: Record<Capability, string>;
+/**
+ * Lookup the capability of a base function call.
+ *
+ * Returns `undefined` for non-base / user-defined functions (which are pure
+ * by construction — they can only call other functions in this table).
+ */
+export declare function lookupCapability(module: string, fn: string): Capability | undefined;
+export declare const CAPABILITY_TABLE: Readonly<Record<string, Capability>>;
+//# sourceMappingURL=capability_table.d.ts.map

package/dist/capability_table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability_table.d.ts","sourceRoot":"","sources":["../src/capability_table.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,qDAAqD;AACrD,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,IAAI,GACJ,IAAI,GACJ,SAAS,GACT,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,aAAa,GACb,SAAS,GACT,OAAO,CAAC;AAEZ,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,EAAE,SAAS,UAAU,EAWjD,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAW1D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,GACT,UAAU,GAAG,SAAS,CAExB;AAED,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CA6TjE,CAAC"}