@contrast/rewriter 1.37.0 → 1.37.2

package/LICENSE

@@ -1,4 +1,4 @@
-Copyright: 2025 Contrast Security, Inc
+Copyright: 2026 Contrast Security, Inc
 Contact: support@contrastsecurity.com
 License: Commercial
 

package/lib/cache.js

@@ -1,5 +1,5 @@
 /*
- * Copyright: 2025 Contrast Security, Inc
+ * Copyright: 2026 Contrast Security, Inc
  * Contact: support@contrastsecurity.com
  * License: Commercial
 
@@ -142,7 +142,7 @@ module.exports.Cache = class Cache {
   }
 
   /**
-   * Looks up and returns the source map for a previously rewritten file.
+   * Asynchronously looks up and returns the source map for a previously rewritten file.
    * @param {string} filename
    * @returns {Promise<string | undefined>}
    */
@@ -164,6 +164,29 @@ module.exports.Cache = class Cache {
     }
   }
 
+
+  /**
+   * Synchronously looks up and returns the source map for a previously rewritten file.
+   * @param {string} filename
+   * @returns {string | undefined}
+   */
+  readMapSync(filename) {
+    const filenameCached = this.getCachedFilename(filename);
+    const sourceMap = `${filenameCached}.map`;
+    try {
+      return fs.readFileSync(sourceMap, 'utf8');
+    } catch (err) {
+      // @ts-expect-error ts treats errors poorly.
+      if (err.code !== 'ENOENT') {
+        this.logger.warn(
+          { err, filename, filenameCached, sourceMap },
+          'An unexpected error occurred finding source map.'
+        );
+      }
+      return undefined;
+    }
+  }
+
   /**
    * Looks up and returns the string content of a previously rewritten file
    * synchronously. Used when we need to block on cache lookups.

package/lib/index.js

@@ -1,5 +1,5 @@
 /*
- * Copyright: 2025 Contrast Security, Inc
+ * Copyright: 2026 Contrast Security, Inc
  * Contact: support@contrastsecurity.com
  * License: Commercial
 
@@ -14,12 +14,18 @@
  */
 // @ts-check
 'use strict';
-
 const { arch, platform } = require('node:os');
-const path = require('node:path');
+// @ts-expect-error
+const { SourceMapConsumer: SourceMapConsumerSync } = require('@contrast/synchronous-source-maps');
 const { parseSync, transform, transformSync } = require('@swc/core');
+// @ts-expect-error `@contrast/agent-swc-plugin` .d.ts file doesn't exist.
+const { defaultRewriter, defaultUnwriter } = require('@contrast/agent-swc-plugin');
+const { funcInfo } = require('@contrast/fn-inspect');
+const { primordials } = require('@contrast/common');
 const { Cache } = require('./cache');
 
+const MAGIC_COMMENT_PREFIX = '//# sourceMappingURL=';
+
 /**
  * @typedef {Object} Core
  * @prop {import('@contrast/common').AppInfo} appInfo
@@ -35,10 +41,6 @@ const { Cache } = require('./cache');
  * @prop {boolean=} inject if true, injects ContrastMethods on the global object
  * @prop {boolean=} minify if true, minifies the output when source maps are enabled
  */
-
-// @ts-expect-error `@contrast/agent-swc-plugin` .d.ts file doesn't exist.
-const { defaultRewriter, defaultUnwriter } = require('@contrast/agent-swc-plugin');
-
 class Rewriter {
   /**
    * @param {Core} core
@@ -66,11 +68,10 @@ class Rewriter {
    * @param {RewriteOpts} opts
    * @returns {import('@swc/core').Options}
    */
-  rewriteConfig(opts) {
+  swcOptions(opts) {
     const nodeCfg = this.core.config.agent.node;
     const sourceMaps = nodeCfg.source_maps.enable;
     const minify = opts.minify && nodeCfg.source_maps.enable && nodeCfg.rewrite.minify;
-
     return {
       swcrc: false,
       filename: opts.filename,
@@ -85,7 +86,7 @@ class Rewriter {
             assess: this.modes.has('assess'),
             inject: opts.inject,
           }]],
-          cacheRoot: path.join(nodeCfg.rewrite.cache.path, '.swc'),
+          cacheRoot: primordials.PathJoin(nodeCfg.rewrite.cache.path, '.swc'),
         },
         parser: {
           syntax: 'ecmascript',
@@ -101,6 +102,45 @@ class Rewriter {
     };
   }
 
+  /**
+   * Make all of the source map paths absolute.
+   * Mutates Output result:
+   * - magic sourceMappingURL comment in result.code
+   * - result.map.sources array
+   * @param {RewriteOpts} rewriteOpts
+   * @param {import('@swc/core').Output} result
+   */
+  adjustMap(rewriteOpts, result) {
+    if (rewriteOpts.filename && result.map) {
+      const map = JSON.parse(result.map);
+      const cachedFilename = this.cache.getCachedFilename(rewriteOpts.filename);
+      const absoluteCachedMapName = `${cachedFilename}.map`;
+      const origMapURL = `${primordials.PathBasename(rewriteOpts.filename)}.map`;
+      const comment = `${MAGIC_COMMENT_PREFIX}${origMapURL}`;
+
+      // 1) magic comment
+      // https://github.com/nodejs/node/blob/main/lib/internal/source_map/source_map_cache.js#L134-L136
+      const i = result.code.lastIndexOf(comment);
+      if (i >= 0) {
+        let code = primordials.StringPrototypeSubstr.call(result.code, 0, i);
+        code += `${MAGIC_COMMENT_PREFIX}${absoluteCachedMapName}`;
+        result.code = code;
+      }
+      // 2) map.sources array
+      for (let i = 0; i < map.sources?.length; i++) {
+        const resolved = primordials.PathResolve(rewriteOpts.filename, '..', map.sources[i]);
+        map.sources[i] = resolved;
+      }
+      // 3) map.file
+      if (map.file) {
+        map.file = cachedFilename;
+      }
+
+      // reasign modified map
+      result.map = primordials.JSONStringify(map);
+    }
+  }
+
   /**
    * Rewrites the provided source code string asynchronously. this is used in an ESM
    * context. CJS cannot use this because `require` is synchronous.
@@ -111,7 +151,10 @@ class Rewriter {
    */
   async rewrite(content, opts = {}) {
     this.logger.trace({ opts }, 'rewriting %s', opts.filename);
-    return transform(content, this.rewriteConfig(opts));
+    const rewriteOpts = this.swcOptions(opts);
+    const ret = await transform(content, rewriteOpts);
+    this.adjustMap(rewriteOpts, ret);
+    return ret;
   }
 
   /**
@@ -125,7 +168,10 @@ class Rewriter {
    */
   rewriteSync(content, opts = {}) {
     this.logger.trace({ opts }, 'rewriting %s', opts.filename);
-    return transformSync(content, this.rewriteConfig(opts));
+    const rewriteOpts = this.swcOptions(opts);
+    const result = transformSync(content, rewriteOpts);
+    this.adjustMap(rewriteOpts, result);
+    return result;
   }
 
   /**
@@ -149,6 +195,44 @@ class Rewriter {
       sourceMaps: false,
     }).code;
   }
+
+  /**
+   * TODO implement for async scenarios using newer versions of source-map
+   * @param {function} func
+   */
+  async funcInfo(func) {
+    throw new Error('funcInfo is not implemented');
+  }
+
+  /**
+   * @param {function} func
+   */
+  funcInfoSync(func) {
+    /** @type any */
+    const fnInfo = funcInfo(func);
+
+    if (
+      !fnInfo?.file ||
+      !Number.isFinite(fnInfo.lineNumber) ||
+      !Number.isFinite(fnInfo.column) ||
+      !this.core.config.agent.node.source_maps.enable
+    ) return fnInfo;
+
+    const map = this.cache.readMapSync(fnInfo.file);
+    if (!map) return fnInfo;
+
+    const orig = new SourceMapConsumerSync(map).originalPositionFor({
+      line: fnInfo.lineNumber + 1,
+      column: fnInfo.column,
+    });
+    if (orig) {
+      fnInfo.file = orig.source ? primordials.PathResolve(fnInfo.file, '..', orig.source) : fnInfo.file;
+      fnInfo.lineNumber = orig.line;
+      fnInfo.column = orig.column;
+    }
+
+    return fnInfo;
+  }
 }
 
 /**

package/lib/rewrite-is-deadzoned.js

@@ -1,5 +1,5 @@
 /*
- * Copyright: 2025 Contrast Security, Inc
+ * Copyright: 2026 Contrast Security, Inc
  * Contact: support@contrastsecurity.com
  * License: Commercial
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/rewriter",
-  "version": "1.37.0",
+  "version": "1.37.2",
   "description": "A transpilation tool mainly used for instrumentation",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -21,10 +21,12 @@
   },
   "dependencies": {
     "@contrast/agent-swc-plugin": "3.2.0",
-    "@contrast/common": "1.39.0",
-    "@contrast/config": "1.55.0",
-    "@contrast/core": "1.60.0",
-    "@contrast/logger": "1.33.0",
+    "@contrast/common": "1.39.1",
+    "@contrast/config": "1.55.1",
+    "@contrast/core": "1.60.1",
+    "@contrast/fn-inspect": "^5.0.2",
+    "@contrast/logger": "1.33.1",
+    "@contrast/synchronous-source-maps": "^1.1.5",
     "@swc/core": "1.13.3"
   }
 }