@dataparade/cli 0.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +674 -0
- package/README.md +592 -0
- package/dist/bin/cli.d.ts +2 -0
- package/dist/bin/cli.js +7 -0
- package/dist/bin/load-env.d.ts +2 -0
- package/dist/bin/load-env.js +4 -0
- package/dist/src/ai-enrichment/agent-orchestrator.d.ts +28 -0
- package/dist/src/ai-enrichment/agent-orchestrator.js +476 -0
- package/dist/src/ai-enrichment/agents/index.d.ts +4 -0
- package/dist/src/ai-enrichment/agents/index.js +50 -0
- package/dist/src/ai-enrichment/candidate-selector.d.ts +10 -0
- package/dist/src/ai-enrichment/candidate-selector.js +158 -0
- package/dist/src/ai-enrichment/fallbacks.d.ts +6 -0
- package/dist/src/ai-enrichment/fallbacks.js +762 -0
- package/dist/src/ai-enrichment/index.d.ts +15 -0
- package/dist/src/ai-enrichment/index.js +31 -0
- package/dist/src/ai-enrichment/merge-rules.d.ts +12 -0
- package/dist/src/ai-enrichment/merge-rules.js +321 -0
- package/dist/src/ai-enrichment/non-pii-signal-rules.d.ts +10 -0
- package/dist/src/ai-enrichment/non-pii-signal-rules.js +72 -0
- package/dist/src/ai-enrichment/openai-proposals-response.schema.d.ts +94 -0
- package/dist/src/ai-enrichment/openai-proposals-response.schema.js +82 -0
- package/dist/src/ai-enrichment/pii-signal-rules.d.ts +8 -0
- package/dist/src/ai-enrichment/pii-signal-rules.js +68 -0
- package/dist/src/ai-enrichment/pipeline.d.ts +2 -0
- package/dist/src/ai-enrichment/pipeline.js +48 -0
- package/dist/src/ai-enrichment/planner.d.ts +2 -0
- package/dist/src/ai-enrichment/planner.js +60 -0
- package/dist/src/ai-enrichment/prompts/provider-enrichment-prompts.d.ts +12 -0
- package/dist/src/ai-enrichment/prompts/provider-enrichment-prompts.js +45 -0
- package/dist/src/ai-enrichment/provider-prompt.d.ts +32 -0
- package/dist/src/ai-enrichment/provider-prompt.js +222 -0
- package/dist/src/ai-enrichment/provider-topology-rules.d.ts +52 -0
- package/dist/src/ai-enrichment/provider-topology-rules.js +190 -0
- package/dist/src/ai-enrichment/provider-topology-shared.d.ts +48 -0
- package/dist/src/ai-enrichment/provider-topology-shared.js +329 -0
- package/dist/src/ai-enrichment/providers/endpoint-resolution.d.ts +13 -0
- package/dist/src/ai-enrichment/providers/endpoint-resolution.js +41 -0
- package/dist/src/ai-enrichment/providers/families/chat-completions-family.d.ts +13 -0
- package/dist/src/ai-enrichment/providers/families/chat-completions-family.js +181 -0
- package/dist/src/ai-enrichment/providers/families/generate-content-family.d.ts +10 -0
- package/dist/src/ai-enrichment/providers/families/generate-content-family.js +93 -0
- package/dist/src/ai-enrichment/providers/families/messages-family.d.ts +10 -0
- package/dist/src/ai-enrichment/providers/families/messages-family.js +86 -0
- package/dist/src/ai-enrichment/providers/families/ollama-generate-family.d.ts +10 -0
- package/dist/src/ai-enrichment/providers/families/ollama-generate-family.js +69 -0
- package/dist/src/ai-enrichment/providers/fetch-with-timeout.d.ts +2 -0
- package/dist/src/ai-enrichment/providers/fetch-with-timeout.js +22 -0
- package/dist/src/ai-enrichment/providers/index.d.ts +16 -0
- package/dist/src/ai-enrichment/providers/index.js +40 -0
- package/dist/src/ai-enrichment/providers/mock.d.ts +5 -0
- package/dist/src/ai-enrichment/providers/mock.js +12 -0
- package/dist/src/ai-enrichment/providers/platform-proxy-provider.d.ts +20 -0
- package/dist/src/ai-enrichment/providers/platform-proxy-provider.js +116 -0
- package/dist/src/ai-enrichment/providers/presets.d.ts +14 -0
- package/dist/src/ai-enrichment/providers/presets.js +50 -0
- package/dist/src/ai-enrichment/providers/provider-contract.d.ts +20 -0
- package/dist/src/ai-enrichment/providers/provider-contract.js +703 -0
- package/dist/src/ai-enrichment/providers/provider-json-parse.d.ts +23 -0
- package/dist/src/ai-enrichment/providers/provider-json-parse.js +96 -0
- package/dist/src/ai-enrichment/providers/provider-output-token-budget.d.ts +5 -0
- package/dist/src/ai-enrichment/providers/provider-output-token-budget.js +11 -0
- package/dist/src/ai-enrichment/providers/provider-pricing.d.ts +7 -0
- package/dist/src/ai-enrichment/providers/provider-pricing.js +32 -0
- package/dist/src/ai-enrichment/providers/provider-runtime.d.ts +9 -0
- package/dist/src/ai-enrichment/providers/provider-runtime.js +54 -0
- package/dist/src/ai-enrichment/providers/resolve-provider.d.ts +27 -0
- package/dist/src/ai-enrichment/providers/resolve-provider.js +41 -0
- package/dist/src/ai-enrichment/providers/types.d.ts +24 -0
- package/dist/src/ai-enrichment/providers/types.js +2 -0
- package/dist/src/ai-enrichment/scan-paths.d.ts +9 -0
- package/dist/src/ai-enrichment/scan-paths.js +28 -0
- package/dist/src/ai-enrichment/sensitive-paths.d.ts +5 -0
- package/dist/src/ai-enrichment/sensitive-paths.js +10 -0
- package/dist/src/ai-enrichment/third-party-data-flow.d.ts +27 -0
- package/dist/src/ai-enrichment/third-party-data-flow.js +518 -0
- package/dist/src/ai-enrichment/third-party-evidence.d.ts +14 -0
- package/dist/src/ai-enrichment/third-party-evidence.js +426 -0
- package/dist/src/ai-enrichment/third-party-property-matrix.d.ts +14 -0
- package/dist/src/ai-enrichment/third-party-property-matrix.js +52 -0
- package/dist/src/ai-enrichment/third-party-subtype.d.ts +14 -0
- package/dist/src/ai-enrichment/third-party-subtype.js +166 -0
- package/dist/src/ai-enrichment/tools/index.d.ts +39 -0
- package/dist/src/ai-enrichment/tools/index.js +121 -0
- package/dist/src/ai-enrichment/types.d.ts +170 -0
- package/dist/src/ai-enrichment/types.js +12 -0
- package/dist/src/analyzers/python/dependency-manifests.d.ts +8 -0
- package/dist/src/analyzers/python/dependency-manifests.js +131 -0
- package/dist/src/analyzers/python/detector.d.ts +3 -0
- package/dist/src/analyzers/python/detector.js +22 -0
- package/dist/src/analyzers/python/index.d.ts +2 -0
- package/dist/src/analyzers/python/index.js +11 -0
- package/dist/src/analyzers/python/manifest-parsers.d.ts +3 -0
- package/dist/src/analyzers/python/manifest-parsers.js +134 -0
- package/dist/src/analyzers/python/parser.d.ts +26 -0
- package/dist/src/analyzers/python/parser.js +187 -0
- package/dist/src/analyzers/python/patterns.d.ts +7 -0
- package/dist/src/analyzers/python/patterns.js +106 -0
- package/dist/src/analyzers/python/python-detection-config.d.ts +75 -0
- package/dist/src/analyzers/python/python-detection-config.js +148 -0
- package/dist/src/analyzers/registry.d.ts +13 -0
- package/dist/src/analyzers/registry.js +60 -0
- package/dist/src/analyzers/shared/manifest-budgets.d.ts +19 -0
- package/dist/src/analyzers/shared/manifest-budgets.js +21 -0
- package/dist/src/analyzers/shared/manifest-fs.d.ts +13 -0
- package/dist/src/analyzers/shared/manifest-fs.js +138 -0
- package/dist/src/analyzers/shared/property-inference.d.ts +8 -0
- package/dist/src/analyzers/shared/property-inference.js +165 -0
- package/dist/src/analyzers/terraform/detector.d.ts +10 -0
- package/dist/src/analyzers/terraform/detector.js +198 -0
- package/dist/src/analyzers/terraform/index.d.ts +2 -0
- package/dist/src/analyzers/terraform/index.js +13 -0
- package/dist/src/analyzers/terraform/parser.d.ts +29 -0
- package/dist/src/analyzers/terraform/parser.js +202 -0
- package/dist/src/analyzers/terraform/terraform-detection-config.d.ts +48 -0
- package/dist/src/analyzers/terraform/terraform-detection-config.js +218 -0
- package/dist/src/analyzers/terraform/terraform-exec.d.ts +11 -0
- package/dist/src/analyzers/terraform/terraform-exec.js +35 -0
- package/dist/src/analyzers/terraform/terraform-module-manifest.d.ts +19 -0
- package/dist/src/analyzers/terraform/terraform-module-manifest.js +75 -0
- package/dist/src/analyzers/terraform/terraform-show-json.d.ts +15 -0
- package/dist/src/analyzers/terraform/terraform-show-json.js +188 -0
- package/dist/src/analyzers/terraform/terraform-utility-resource.d.ts +12 -0
- package/dist/src/analyzers/terraform/terraform-utility-resource.js +30 -0
- package/dist/src/analyzers/types.d.ts +5 -0
- package/dist/src/analyzers/types.js +2 -0
- package/dist/src/analyzers/typescript/actor-detection.d.ts +4 -0
- package/dist/src/analyzers/typescript/actor-detection.js +15 -0
- package/dist/src/analyzers/typescript/dependency-manifests.d.ts +9 -0
- package/dist/src/analyzers/typescript/dependency-manifests.js +131 -0
- package/dist/src/analyzers/typescript/detector.d.ts +3 -0
- package/dist/src/analyzers/typescript/detector.js +23 -0
- package/dist/src/analyzers/typescript/index.d.ts +2 -0
- package/dist/src/analyzers/typescript/index.js +11 -0
- package/dist/src/analyzers/typescript/manifest-parsers.d.ts +1 -0
- package/dist/src/analyzers/typescript/manifest-parsers.js +30 -0
- package/dist/src/analyzers/typescript/parser.d.ts +44 -0
- package/dist/src/analyzers/typescript/parser.js +287 -0
- package/dist/src/analyzers/typescript/third-party-detection.d.ts +4 -0
- package/dist/src/analyzers/typescript/third-party-detection.js +16 -0
- package/dist/src/analyzers/typescript/typescript-detection-config.d.ts +68 -0
- package/dist/src/analyzers/typescript/typescript-detection-config.js +171 -0
- package/dist/src/analyzers/typescript/typescript-detection.d.ts +10 -0
- package/dist/src/analyzers/typescript/typescript-detection.js +57 -0
- package/dist/src/classifier/application-injection.d.ts +12 -0
- package/dist/src/classifier/application-injection.js +335 -0
- package/dist/src/classifier/classify.d.ts +3 -0
- package/dist/src/classifier/classify.js +15 -0
- package/dist/src/classifier/component-factory.d.ts +3 -0
- package/dist/src/classifier/component-factory.js +488 -0
- package/dist/src/classifier/config.d.ts +38 -0
- package/dist/src/classifier/config.js +260 -0
- package/dist/src/classifier/enhance-defaults.d.ts +28 -0
- package/dist/src/classifier/enhance-defaults.js +369 -0
- package/dist/src/classifier/enhance.d.ts +13 -0
- package/dist/src/classifier/enhance.js +295 -0
- package/dist/src/classifier/external-url-third-party.d.ts +26 -0
- package/dist/src/classifier/external-url-third-party.js +195 -0
- package/dist/src/classifier/grouping.d.ts +1 -0
- package/dist/src/classifier/grouping.js +2 -0
- package/dist/src/classifier/main-application-selection.d.ts +41 -0
- package/dist/src/classifier/main-application-selection.js +222 -0
- package/dist/src/classifier/naming.d.ts +4 -0
- package/dist/src/classifier/naming.js +78 -0
- package/dist/src/classifier/postprocessing.d.ts +12 -0
- package/dist/src/classifier/postprocessing.js +510 -0
- package/dist/src/classifier/sectioning.d.ts +5 -0
- package/dist/src/classifier/sectioning.js +60 -0
- package/dist/src/classifier/terraform-provider-hub.d.ts +6 -0
- package/dist/src/classifier/terraform-provider-hub.js +38 -0
- package/dist/src/cli.d.ts +2 -0
- package/dist/src/cli.js +498 -0
- package/dist/src/config/actor-detection-config.d.ts +21 -0
- package/dist/src/config/actor-detection-config.js +97 -0
- package/dist/src/config/env.d.ts +2 -0
- package/dist/src/config/env.js +75 -0
- package/dist/src/config/file.d.ts +6 -0
- package/dist/src/config/file.js +74 -0
- package/dist/src/config/inference-scope.d.ts +2 -0
- package/dist/src/config/inference-scope.js +15 -0
- package/dist/src/config/load-cli-env.d.ts +1 -0
- package/dist/src/config/load-cli-env.js +54 -0
- package/dist/src/config/normalize-ai-provider.d.ts +5 -0
- package/dist/src/config/normalize-ai-provider.js +18 -0
- package/dist/src/config/property-detection-config.d.ts +27 -0
- package/dist/src/config/property-detection-config.js +355 -0
- package/dist/src/config/redact.d.ts +3 -0
- package/dist/src/config/redact.js +14 -0
- package/dist/src/config/resolve.d.ts +15 -0
- package/dist/src/config/resolve.js +361 -0
- package/dist/src/config/scan-env.d.ts +7 -0
- package/dist/src/config/scan-env.js +38 -0
- package/dist/src/config/third-party-detection-config.d.ts +25 -0
- package/dist/src/config/third-party-detection-config.js +97 -0
- package/dist/src/config/types.d.ts +106 -0
- package/dist/src/config/types.js +2 -0
- package/dist/src/config/validate-scan-ai.d.ts +3 -0
- package/dist/src/config/validate-scan-ai.js +33 -0
- package/dist/src/core/pipeline/ai-orchestrator-options.d.ts +6 -0
- package/dist/src/core/pipeline/ai-orchestrator-options.js +46 -0
- package/dist/src/core/pipeline/classifier-phase.d.ts +7 -0
- package/dist/src/core/pipeline/classifier-phase.js +78 -0
- package/dist/src/core/pipeline/dataflow-phase.d.ts +7 -0
- package/dist/src/core/pipeline/dataflow-phase.js +10 -0
- package/dist/src/core/pipeline/diagram-layout/app-section-layout.d.ts +7 -0
- package/dist/src/core/pipeline/diagram-layout/app-section-layout.js +74 -0
- package/dist/src/core/pipeline/diagram-layout/constants.d.ts +11 -0
- package/dist/src/core/pipeline/diagram-layout/constants.js +14 -0
- package/dist/src/core/pipeline/diagram-layout/edge-handles.d.ts +3 -0
- package/dist/src/core/pipeline/diagram-layout/edge-handles.js +26 -0
- package/dist/src/core/pipeline/diagram-layout/managed-provider-layout.d.ts +3 -0
- package/dist/src/core/pipeline/diagram-layout/managed-provider-layout.js +40 -0
- package/dist/src/core/pipeline/diagram-layout/minimal-terraform-layout.d.ts +6 -0
- package/dist/src/core/pipeline/diagram-layout/minimal-terraform-layout.js +53 -0
- package/dist/src/core/pipeline/diagram-layout/section-helpers.d.ts +30 -0
- package/dist/src/core/pipeline/diagram-layout/section-helpers.js +62 -0
- package/dist/src/core/pipeline/diagram-layout/terraform-lane-layout.d.ts +3 -0
- package/dist/src/core/pipeline/diagram-layout/terraform-lane-layout.js +109 -0
- package/dist/src/core/pipeline/diagram-layout/types.d.ts +2 -0
- package/dist/src/core/pipeline/diagram-layout/types.js +2 -0
- package/dist/src/core/pipeline/graph-mapping.d.ts +6 -0
- package/dist/src/core/pipeline/graph-mapping.js +308 -0
- package/dist/src/core/pipeline/mixed-app-terraform-scan.d.ts +13 -0
- package/dist/src/core/pipeline/mixed-app-terraform-scan.js +81 -0
- package/dist/src/core/pipeline/orchestrator-result.d.ts +6 -0
- package/dist/src/core/pipeline/orchestrator-result.js +2 -0
- package/dist/src/core/pipeline/orchestrator.d.ts +26 -0
- package/dist/src/core/pipeline/orchestrator.js +79 -0
- package/dist/src/core/pipeline/resolve-path-under-scan-root.d.ts +7 -0
- package/dist/src/core/pipeline/resolve-path-under-scan-root.js +55 -0
- package/dist/src/core/pipeline/scan-pipeline.d.ts +6 -0
- package/dist/src/core/pipeline/scan-pipeline.js +364 -0
- package/dist/src/core/pipeline/sorting.d.ts +3 -0
- package/dist/src/core/pipeline/sorting.js +48 -0
- package/dist/src/core/pipeline/stable-component-ids.d.ts +15 -0
- package/dist/src/core/pipeline/stable-component-ids.js +68 -0
- package/dist/src/core/pipeline/structural-scan.d.ts +19 -0
- package/dist/src/core/pipeline/structural-scan.js +304 -0
- package/dist/src/core/pipeline/terraform-flow-utils.d.ts +6 -0
- package/dist/src/core/pipeline/terraform-flow-utils.js +32 -0
- package/dist/src/core/pipeline/terraform-minimal-services.d.ts +31 -0
- package/dist/src/core/pipeline/terraform-minimal-services.js +225 -0
- package/dist/src/core/schema/dataflow-wrapper.schema.d.ts +83 -0
- package/dist/src/core/schema/dataflow-wrapper.schema.js +40 -0
- package/dist/src/core/schema/diagram-graph.schema.d.ts +93 -0
- package/dist/src/core/schema/diagram-graph.schema.js +55 -0
- package/dist/src/core/schema/index.d.ts +4 -0
- package/dist/src/core/schema/index.js +20 -0
- package/dist/src/core/schema/scan-config.schema.d.ts +66 -0
- package/dist/src/core/schema/scan-config.schema.js +67 -0
- package/dist/src/core/schema/scan-result.schema.d.ts +450 -0
- package/dist/src/core/schema/scan-result.schema.js +236 -0
- package/dist/src/core/sectioning/discover-service-sections.d.ts +80 -0
- package/dist/src/core/sectioning/discover-service-sections.js +468 -0
- package/dist/src/core/sectioning/section-runtime.d.ts +21 -0
- package/dist/src/core/sectioning/section-runtime.js +148 -0
- package/dist/src/core/terraform/component-predicates.d.ts +13 -0
- package/dist/src/core/terraform/component-predicates.js +71 -0
- package/dist/src/core/types/component.d.ts +18 -0
- package/dist/src/core/types/component.js +2 -0
- package/dist/src/core/types/config.d.ts +57 -0
- package/dist/src/core/types/config.js +2 -0
- package/dist/src/core/types/data-flow.d.ts +24 -0
- package/dist/src/core/types/data-flow.js +2 -0
- package/dist/src/core/types/detection.d.ts +12 -0
- package/dist/src/core/types/detection.js +19 -0
- package/dist/src/core/types/file.d.ts +14 -0
- package/dist/src/core/types/file.js +2 -0
- package/dist/src/core/types/index.d.ts +7 -0
- package/dist/src/core/types/index.js +23 -0
- package/dist/src/core/types/progress.d.ts +9 -0
- package/dist/src/core/types/progress.js +2 -0
- package/dist/src/core/types/result.d.ts +140 -0
- package/dist/src/core/types/result.js +2 -0
- package/dist/src/data-flow/application-hub.d.ts +7 -0
- package/dist/src/data-flow/application-hub.js +88 -0
- package/dist/src/data-flow/dedupe.d.ts +7 -0
- package/dist/src/data-flow/dedupe.js +92 -0
- package/dist/src/data-flow/detect.d.ts +16 -0
- package/dist/src/data-flow/detect.js +203 -0
- package/dist/src/data-flow/detector.d.ts +15 -0
- package/dist/src/data-flow/detector.js +18 -0
- package/dist/src/data-flow/drop-cross-section-flows.d.ts +8 -0
- package/dist/src/data-flow/drop-cross-section-flows.js +32 -0
- package/dist/src/data-flow/ensure-actor-flow.d.ts +16 -0
- package/dist/src/data-flow/ensure-actor-flow.js +101 -0
- package/dist/src/data-flow/ensure-manifest-declared-flows.d.ts +14 -0
- package/dist/src/data-flow/ensure-manifest-declared-flows.js +76 -0
- package/dist/src/data-flow/ensure-section-api-flows.d.ts +6 -0
- package/dist/src/data-flow/ensure-section-api-flows.js +57 -0
- package/dist/src/data-flow/flow-builder.d.ts +5 -0
- package/dist/src/data-flow/flow-builder.js +80 -0
- package/dist/src/data-flow/import-graph.d.ts +10 -0
- package/dist/src/data-flow/import-graph.js +147 -0
- package/dist/src/data-flow/index.d.ts +8 -0
- package/dist/src/data-flow/index.js +20 -0
- package/dist/src/data-flow/internal-fetch.d.ts +8 -0
- package/dist/src/data-flow/internal-fetch.js +209 -0
- package/dist/src/data-flow/postprocess.d.ts +9 -0
- package/dist/src/data-flow/postprocess.js +63 -0
- package/dist/src/data-flow/rewire.d.ts +10 -0
- package/dist/src/data-flow/rewire.js +93 -0
- package/dist/src/data-flow/source-attribution.d.ts +8 -0
- package/dist/src/data-flow/source-attribution.js +131 -0
- package/dist/src/data-flow/source-resolution.d.ts +13 -0
- package/dist/src/data-flow/source-resolution.js +61 -0
- package/dist/src/data-flow/target-matching.d.ts +21 -0
- package/dist/src/data-flow/target-matching.js +253 -0
- package/dist/src/data-flow/terraform-flows.d.ts +32 -0
- package/dist/src/data-flow/terraform-flows.js +170 -0
- package/dist/src/evals/metrics.d.ts +18 -0
- package/dist/src/evals/metrics.js +58 -0
- package/dist/src/evals/run-model-matrix.d.ts +1 -0
- package/dist/src/evals/run-model-matrix.js +68 -0
- package/dist/src/index.d.ts +2 -0
- package/dist/src/index.js +20 -0
- package/dist/src/ingest/file-system.d.ts +17 -0
- package/dist/src/ingest/file-system.js +239 -0
- package/dist/src/ingest/gitignore.d.ts +12 -0
- package/dist/src/ingest/gitignore.js +127 -0
- package/dist/src/ingest/sensitive-paths.d.ts +2 -0
- package/dist/src/ingest/sensitive-paths.js +8 -0
- package/dist/src/observability/scan-sentry.d.ts +20 -0
- package/dist/src/observability/scan-sentry.js +133 -0
- package/dist/src/output/json.d.ts +51 -0
- package/dist/src/output/json.js +59 -0
- package/dist/src/patterns/config.d.ts +22 -0
- package/dist/src/patterns/config.js +119 -0
- package/dist/src/patterns/detectors/helpers.d.ts +19 -0
- package/dist/src/patterns/detectors/helpers.js +68 -0
- package/dist/src/patterns/detectors/python.d.ts +8 -0
- package/dist/src/patterns/detectors/python.js +412 -0
- package/dist/src/patterns/detectors/typescript.d.ts +8 -0
- package/dist/src/patterns/detectors/typescript.js +328 -0
- package/dist/src/patterns/engine.d.ts +40 -0
- package/dist/src/patterns/engine.js +111 -0
- package/dist/src/patterns/flow-source-patterns.d.ts +6 -0
- package/dist/src/patterns/flow-source-patterns.js +39 -0
- package/dist/src/patterns/frontend-frameworks.d.ts +4 -0
- package/dist/src/patterns/frontend-frameworks.js +25 -0
- package/dist/src/patterns/scan-exclusions.d.ts +14 -0
- package/dist/src/patterns/scan-exclusions.js +76 -0
- package/dist/src/platform-api/dataparade-api-base-url.d.ts +8 -0
- package/dist/src/platform-api/dataparade-api-base-url.js +17 -0
- package/dist/src/platform-api/estimate-scan-footprint.d.ts +8 -0
- package/dist/src/platform-api/estimate-scan-footprint.js +120 -0
- package/dist/src/platform-api/scan-quota-client.d.ts +28 -0
- package/dist/src/platform-api/scan-quota-client.js +79 -0
- package/dist/src/tracing/langsmith-tracing.d.ts +37 -0
- package/dist/src/tracing/langsmith-tracing.js +171 -0
- package/dist/tests/cli/cli.spec.d.ts +1 -0
- package/dist/tests/cli/cli.spec.js +87 -0
- package/dist/tests/fixtures/e2e-ts-sample/db-client-import.d.ts +2 -0
- package/dist/tests/fixtures/e2e-ts-sample/db-client-import.js +8 -0
- package/dist/tests/fixtures/e2e-ts-sample/db.d.ts +3 -0
- package/dist/tests/fixtures/e2e-ts-sample/db.js +7 -0
- package/dist/tests/fixtures/e2e-ts-sample/external-api.d.ts +1 -0
- package/dist/tests/fixtures/e2e-ts-sample/external-api.js +18 -0
- package/dist/tests/fixtures/e2e-ts-sample/pg-client.d.ts +3 -0
- package/dist/tests/fixtures/e2e-ts-sample/pg-client.js +7 -0
- package/dist/tests/fixtures/e2e-ts-sample/server.d.ts +14 -0
- package/dist/tests/fixtures/e2e-ts-sample/server.js +4 -0
- package/dist/tests/fixtures/e2e-ts-sentry-route-env/server.d.ts +1 -0
- package/dist/tests/fixtures/e2e-ts-sentry-route-env/server.js +24 -0
- package/dist/tests/fixtures/ingest-basic/src/index.d.ts +1 -0
- package/dist/tests/fixtures/ingest-basic/src/index.js +6 -0
- package/dist/tests/fixtures/mixed-language-basic/api.d.ts +2 -0
- package/dist/tests/fixtures/mixed-language-basic/api.js +12 -0
- package/dist/tests/fixtures/monorepo-app-plus-terraform/packages/app/app/route.d.ts +1 -0
- package/dist/tests/fixtures/monorepo-app-plus-terraform/packages/app/app/route.js +6 -0
- package/dist/tests/fixtures/monorepo-front-back-sections/backend/app/route.d.ts +1 -0
- package/dist/tests/fixtures/monorepo-front-back-sections/backend/app/route.js +6 -0
- package/dist/tests/fixtures/monorepo-front-back-sections/frontend/app/route.d.ts +1 -0
- package/dist/tests/fixtures/monorepo-front-back-sections/frontend/app/route.js +7 -0
- package/dist/tests/fixtures/typescript-basic/app/route.d.ts +1 -0
- package/dist/tests/fixtures/typescript-basic/app/route.js +7 -0
- package/dist/tests/fixtures/typescript-basic/db-client-import.d.ts +2 -0
- package/dist/tests/fixtures/typescript-basic/db-client-import.js +8 -0
- package/dist/tests/fixtures/typescript-basic/db.d.ts +3 -0
- package/dist/tests/fixtures/typescript-basic/db.js +7 -0
- package/dist/tests/fixtures/typescript-basic/external-api.d.ts +1 -0
- package/dist/tests/fixtures/typescript-basic/external-api.js +18 -0
- package/dist/tests/fixtures/typescript-basic/pg-client.d.ts +3 -0
- package/dist/tests/fixtures/typescript-basic/pg-client.js +7 -0
- package/dist/tests/fixtures/typescript-basic/server.d.ts +14 -0
- package/dist/tests/fixtures/typescript-basic/server.js +4 -0
- package/dist/tests/fixtures/typescript-dependency-manifests-basic/src/index.d.ts +0 -0
- package/dist/tests/fixtures/typescript-dependency-manifests-basic/src/index.js +2 -0
- package/dist/tests/helpers/scan-result-builders.d.ts +2 -0
- package/dist/tests/helpers/scan-result-builders.js +15 -0
- package/dist/tests/schema/dataflow-wrapper.schema.spec.d.ts +1 -0
- package/dist/tests/schema/dataflow-wrapper.schema.spec.js +89 -0
- package/dist/tests/schema/diagram-graph.schema.spec.d.ts +1 -0
- package/dist/tests/schema/diagram-graph.schema.spec.js +48 -0
- package/dist/tests/schema/scan-config.schema.spec.d.ts +1 -0
- package/dist/tests/schema/scan-config.schema.spec.js +135 -0
- package/dist/tests/schema/scan-result.schema.spec.d.ts +1 -0
- package/dist/tests/schema/scan-result.schema.spec.js +177 -0
- package/dist/tests/unit/ai-enrichment/agent-orchestrator.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/agent-orchestrator.spec.js +483 -0
- package/dist/tests/unit/ai-enrichment/candidate-selector.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/candidate-selector.spec.js +106 -0
- package/dist/tests/unit/ai-enrichment/create-ai-provider.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/create-ai-provider.spec.js +32 -0
- package/dist/tests/unit/ai-enrichment/endpoint-resolution.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/endpoint-resolution.spec.js +47 -0
- package/dist/tests/unit/ai-enrichment/fallbacks.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/fallbacks.spec.js +1304 -0
- package/dist/tests/unit/ai-enrichment/families/chat-completions-family.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/families/chat-completions-family.spec.js +219 -0
- package/dist/tests/unit/ai-enrichment/families/generate-content-family.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/families/generate-content-family.spec.js +119 -0
- package/dist/tests/unit/ai-enrichment/families/messages-family.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/families/messages-family.spec.js +129 -0
- package/dist/tests/unit/ai-enrichment/families/ollama-generate-family.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/families/ollama-generate-family.spec.js +69 -0
- package/dist/tests/unit/ai-enrichment/merge-rules.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/merge-rules.spec.js +422 -0
- package/dist/tests/unit/ai-enrichment/openai-proposals-response.schema.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/openai-proposals-response.schema.spec.js +30 -0
- package/dist/tests/unit/ai-enrichment/pipeline.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/pipeline.spec.js +120 -0
- package/dist/tests/unit/ai-enrichment/planner.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/planner.spec.js +106 -0
- package/dist/tests/unit/ai-enrichment/platform-proxy-provider.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/platform-proxy-provider.spec.js +51 -0
- package/dist/tests/unit/ai-enrichment/provider-contract.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/provider-contract.spec.js +244 -0
- package/dist/tests/unit/ai-enrichment/provider-json-parse.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/provider-json-parse.spec.js +24 -0
- package/dist/tests/unit/ai-enrichment/provider-output-token-budget.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/provider-output-token-budget.spec.js +15 -0
- package/dist/tests/unit/ai-enrichment/provider-prompt-env.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/provider-prompt-env.spec.js +54 -0
- package/dist/tests/unit/ai-enrichment/provider-prompt.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/provider-prompt.spec.js +206 -0
- package/dist/tests/unit/ai-enrichment/provider-topology-terraform-aws.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/provider-topology-terraform-aws.spec.js +43 -0
- package/dist/tests/unit/ai-enrichment/provider-topology-terraform-kubernetes.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/provider-topology-terraform-kubernetes.spec.js +40 -0
- package/dist/tests/unit/ai-enrichment/providers/fetch-with-timeout.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/providers/fetch-with-timeout.spec.js +22 -0
- package/dist/tests/unit/ai-enrichment/resolve-provider.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/resolve-provider.spec.js +67 -0
- package/dist/tests/unit/ai-enrichment/scan-paths-exact.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/scan-paths-exact.spec.js +35 -0
- package/dist/tests/unit/ai-enrichment/scan-paths.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/scan-paths.spec.js +21 -0
- package/dist/tests/unit/ai-enrichment/sensitive-paths.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/sensitive-paths.spec.js +20 -0
- package/dist/tests/unit/ai-enrichment/third-party-data-flow.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/third-party-data-flow.spec.js +963 -0
- package/dist/tests/unit/ai-enrichment/third-party-evidence.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/third-party-evidence.spec.js +117 -0
- package/dist/tests/unit/ai-enrichment/third-party-subtype.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/third-party-subtype.spec.js +45 -0
- package/dist/tests/unit/ai-enrichment/tools-validation.spec.d.ts +1 -0
- package/dist/tests/unit/ai-enrichment/tools-validation.spec.js +66 -0
- package/dist/tests/unit/analyzers/python/parser.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/python/parser.spec.js +104 -0
- package/dist/tests/unit/analyzers/python/patterns.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/python/patterns.spec.js +289 -0
- package/dist/tests/unit/analyzers/registry.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/registry.spec.js +234 -0
- package/dist/tests/unit/analyzers/terraform/classifier-subtype-parity.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/terraform/classifier-subtype-parity.spec.js +87 -0
- package/dist/tests/unit/analyzers/terraform/detector.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/terraform/detector.spec.js +110 -0
- package/dist/tests/unit/analyzers/terraform/generated-provider-hints.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/terraform/generated-provider-hints.spec.js +53 -0
- package/dist/tests/unit/analyzers/terraform/parser.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/terraform/parser.spec.js +56 -0
- package/dist/tests/unit/analyzers/terraform/terraform-module-manifest.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/terraform/terraform-module-manifest.spec.js +63 -0
- package/dist/tests/unit/analyzers/terraform/terraform-utility-resource.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/terraform/terraform-utility-resource.spec.js +19 -0
- package/dist/tests/unit/analyzers/terraform-exec.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/terraform-exec.spec.js +27 -0
- package/dist/tests/unit/analyzers/terraform-show-json.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/terraform-show-json.spec.js +77 -0
- package/dist/tests/unit/analyzers/typescript/dependency-manifests.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/typescript/dependency-manifests.spec.js +61 -0
- package/dist/tests/unit/analyzers/typescript/detector.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/typescript/detector.spec.js +225 -0
- package/dist/tests/unit/analyzers/typescript/external-apis-auth0.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/typescript/external-apis-auth0.spec.js +49 -0
- package/dist/tests/unit/analyzers/typescript/external-apis-sentry.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/typescript/external-apis-sentry.spec.js +27 -0
- package/dist/tests/unit/analyzers/typescript/fixture-integration.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/typescript/fixture-integration.spec.js +64 -0
- package/dist/tests/unit/analyzers/typescript/parser.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/typescript/parser.spec.js +99 -0
- package/dist/tests/unit/analyzers/typescript/pattern-config.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/typescript/pattern-config.spec.js +24 -0
- package/dist/tests/unit/analyzers/typescript/property-detection.spec.d.ts +1 -0
- package/dist/tests/unit/analyzers/typescript/property-detection.spec.js +138 -0
- package/dist/tests/unit/classifier/classify.spec.d.ts +1 -0
- package/dist/tests/unit/classifier/classify.spec.js +1453 -0
- package/dist/tests/unit/classifier/enhance.spec.d.ts +1 -0
- package/dist/tests/unit/classifier/enhance.spec.js +400 -0
- package/dist/tests/unit/classifier/external-url-third-party.spec.d.ts +1 -0
- package/dist/tests/unit/classifier/external-url-third-party.spec.js +83 -0
- package/dist/tests/unit/classifier/frontend-framework-grouping.spec.d.ts +1 -0
- package/dist/tests/unit/classifier/frontend-framework-grouping.spec.js +44 -0
- package/dist/tests/unit/classifier/terraform-grouping.spec.d.ts +1 -0
- package/dist/tests/unit/classifier/terraform-grouping.spec.js +96 -0
- package/dist/tests/unit/cli/config-command.spec.d.ts +1 -0
- package/dist/tests/unit/cli/config-command.spec.js +51 -0
- package/dist/tests/unit/cli/scan-command-ai-flags.spec.d.ts +0 -0
- package/dist/tests/unit/cli/scan-command-ai-flags.spec.js +149 -0
- package/dist/tests/unit/cli/scan-command-diagram-graph.spec.d.ts +1 -0
- package/dist/tests/unit/cli/scan-command-diagram-graph.spec.js +26 -0
- package/dist/tests/unit/cli/scan-command-e2e-monorepo-app-plus-terraform.spec.d.ts +1 -0
- package/dist/tests/unit/cli/scan-command-e2e-monorepo-app-plus-terraform.spec.js +107 -0
- package/dist/tests/unit/cli/scan-command-e2e-monorepo-front-back-sections.spec.d.ts +1 -0
- package/dist/tests/unit/cli/scan-command-e2e-monorepo-front-back-sections.spec.js +74 -0
- package/dist/tests/unit/cli/scan-command-e2e-python-basic.spec.d.ts +1 -0
- package/dist/tests/unit/cli/scan-command-e2e-python-basic.spec.js +43 -0
- package/dist/tests/unit/cli/scan-command-e2e-terraform-basic.spec.d.ts +1 -0
- package/dist/tests/unit/cli/scan-command-e2e-terraform-basic.spec.js +62 -0
- package/dist/tests/unit/cli/scan-command-e2e-ts-sample.spec.d.ts +1 -0
- package/dist/tests/unit/cli/scan-command-e2e-ts-sample.spec.js +41 -0
- package/dist/tests/unit/cli/scan-command-e2e-ts-sentry-route-env.spec.d.ts +1 -0
- package/dist/tests/unit/cli/scan-command-e2e-ts-sentry-route-env.spec.js +85 -0
- package/dist/tests/unit/cli/scan-command-exit-code.spec.d.ts +1 -0
- package/dist/tests/unit/cli/scan-command-exit-code.spec.js +131 -0
- package/dist/tests/unit/cli/scan-quota-flow.spec.d.ts +1 -0
- package/dist/tests/unit/cli/scan-quota-flow.spec.js +76 -0
- package/dist/tests/unit/config/property-detection-config.spec.d.ts +1 -0
- package/dist/tests/unit/config/property-detection-config.spec.js +38 -0
- package/dist/tests/unit/config/redact.spec.d.ts +1 -0
- package/dist/tests/unit/config/redact.spec.js +19 -0
- package/dist/tests/unit/config/resolve-config.spec.d.ts +1 -0
- package/dist/tests/unit/config/resolve-config.spec.js +172 -0
- package/dist/tests/unit/config/scan-env-debug.spec.d.ts +1 -0
- package/dist/tests/unit/config/scan-env-debug.spec.js +17 -0
- package/dist/tests/unit/config/validate-scan-ai.spec.d.ts +1 -0
- package/dist/tests/unit/config/validate-scan-ai.spec.js +53 -0
- package/dist/tests/unit/core/classifier-phase-regressions.spec.d.ts +1 -0
- package/dist/tests/unit/core/classifier-phase-regressions.spec.js +68 -0
- package/dist/tests/unit/core/dependency-manifest-performance-budgets.spec.d.ts +1 -0
- package/dist/tests/unit/core/dependency-manifest-performance-budgets.spec.js +66 -0
- package/dist/tests/unit/core/dependency-manifest-toggles-confidence.spec.d.ts +1 -0
- package/dist/tests/unit/core/dependency-manifest-toggles-confidence.spec.js +132 -0
- package/dist/tests/unit/core/discover-service-sections.spec.d.ts +1 -0
- package/dist/tests/unit/core/discover-service-sections.spec.js +204 -0
- package/dist/tests/unit/core/graph-mapping.spec.d.ts +1 -0
- package/dist/tests/unit/core/graph-mapping.spec.js +779 -0
- package/dist/tests/unit/core/invariant-tests-dedupe-determinism.spec.d.ts +1 -0
- package/dist/tests/unit/core/invariant-tests-dedupe-determinism.spec.js +64 -0
- package/dist/tests/unit/core/manifest-package-hub.spec.d.ts +1 -0
- package/dist/tests/unit/core/manifest-package-hub.spec.js +53 -0
- package/dist/tests/unit/core/monorepo-package-sections.spec.d.ts +1 -0
- package/dist/tests/unit/core/monorepo-package-sections.spec.js +121 -0
- package/dist/tests/unit/core/no-source-code-leakage.spec.d.ts +1 -0
- package/dist/tests/unit/core/no-source-code-leakage.spec.js +48 -0
- package/dist/tests/unit/core/orchestrator.spec.d.ts +1 -0
- package/dist/tests/unit/core/orchestrator.spec.js +252 -0
- package/dist/tests/unit/core/output-json.spec.d.ts +1 -0
- package/dist/tests/unit/core/output-json.spec.js +65 -0
- package/dist/tests/unit/core/parsing-error-handling-nonfatal.spec.d.ts +1 -0
- package/dist/tests/unit/core/parsing-error-handling-nonfatal.spec.js +42 -0
- package/dist/tests/unit/core/resolve-path-under-scan-root.spec.d.ts +1 -0
- package/dist/tests/unit/core/resolve-path-under-scan-root.spec.js +54 -0
- package/dist/tests/unit/core/scan-result-language-stats.spec.d.ts +1 -0
- package/dist/tests/unit/core/scan-result-language-stats.spec.js +15 -0
- package/dist/tests/unit/core/section-discovery-excludes.spec.d.ts +1 -0
- package/dist/tests/unit/core/section-discovery-excludes.spec.js +49 -0
- package/dist/tests/unit/core/section-runtime.spec.d.ts +1 -0
- package/dist/tests/unit/core/section-runtime.spec.js +166 -0
- package/dist/tests/unit/core/stable-component-ids.spec.d.ts +1 -0
- package/dist/tests/unit/core/stable-component-ids.spec.js +112 -0
- package/dist/tests/unit/core/structural-scan.spec.d.ts +1 -0
- package/dist/tests/unit/core/structural-scan.spec.js +83 -0
- package/dist/tests/unit/core/terraform-json-overlay.spec.d.ts +1 -0
- package/dist/tests/unit/core/terraform-json-overlay.spec.js +36 -0
- package/dist/tests/unit/core/terraform-minimal-services.spec.d.ts +1 -0
- package/dist/tests/unit/core/terraform-minimal-services.spec.js +378 -0
- package/dist/tests/unit/data-flow/application-hub.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/application-hub.spec.js +48 -0
- package/dist/tests/unit/data-flow/cross-section-terraform-bridge.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/cross-section-terraform-bridge.spec.js +95 -0
- package/dist/tests/unit/data-flow/dedupe.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/dedupe.spec.js +134 -0
- package/dist/tests/unit/data-flow/detector.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/detector.spec.js +1254 -0
- package/dist/tests/unit/data-flow/drop-cross-section-flows.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/drop-cross-section-flows.spec.js +132 -0
- package/dist/tests/unit/data-flow/ensure-actor-flow.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/ensure-actor-flow.spec.js +233 -0
- package/dist/tests/unit/data-flow/ensure-manifest-declared-flows.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/ensure-manifest-declared-flows.spec.js +125 -0
- package/dist/tests/unit/data-flow/ensure-section-api-flows.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/ensure-section-api-flows.spec.js +40 -0
- package/dist/tests/unit/data-flow/postprocess.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/postprocess.spec.js +78 -0
- package/dist/tests/unit/data-flow/rewire.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/rewire.spec.js +194 -0
- package/dist/tests/unit/data-flow/terraform-flows.spec.d.ts +1 -0
- package/dist/tests/unit/data-flow/terraform-flows.spec.js +199 -0
- package/dist/tests/unit/evals/metrics.spec.d.ts +1 -0
- package/dist/tests/unit/evals/metrics.spec.js +54 -0
- package/dist/tests/unit/ingest/env-exclusion.spec.d.ts +1 -0
- package/dist/tests/unit/ingest/env-exclusion.spec.js +43 -0
- package/dist/tests/unit/ingest/file-system.spec.d.ts +1 -0
- package/dist/tests/unit/ingest/file-system.spec.js +180 -0
- package/dist/tests/unit/ingest/gitignore.spec.d.ts +1 -0
- package/dist/tests/unit/ingest/gitignore.spec.js +30 -0
- package/dist/tests/unit/observability/scan-sentry.spec.d.ts +1 -0
- package/dist/tests/unit/observability/scan-sentry.spec.js +60 -0
- package/dist/tests/unit/patterns/scan-exclusions.spec.d.ts +1 -0
- package/dist/tests/unit/patterns/scan-exclusions.spec.js +58 -0
- package/dist/tests/unit/pipeline/ai-orchestrator-options.spec.d.ts +1 -0
- package/dist/tests/unit/pipeline/ai-orchestrator-options.spec.js +19 -0
- package/dist/tests/unit/platform-api/dataparade-api-base-url.spec.d.ts +1 -0
- package/dist/tests/unit/platform-api/dataparade-api-base-url.spec.js +19 -0
- package/dist/tests/unit/platform-api/estimate-scan-footprint.spec.d.ts +1 -0
- package/dist/tests/unit/platform-api/estimate-scan-footprint.spec.js +50 -0
- package/dist/tests/unit/tracing/langsmith-tracing.spec.d.ts +1 -0
- package/dist/tests/unit/tracing/langsmith-tracing.spec.js +118 -0
- package/package.json +84 -0
|
@@ -0,0 +1,287 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.normalizePath = normalizePath;
|
|
37
|
+
exports.buildCodeModel = buildCodeModel;
|
|
38
|
+
const nodePath = __importStar(require("path"));
|
|
39
|
+
const ts = __importStar(require("typescript"));
|
|
40
|
+
/**
|
|
41
|
+
* Normalize a file system path to a POSIX-style string (forward slashes).
|
|
42
|
+
* This keeps path handling consistent across platforms.
|
|
43
|
+
*/
|
|
44
|
+
function normalizePath(p) {
|
|
45
|
+
if (!p)
|
|
46
|
+
return "";
|
|
47
|
+
return p.split("\\").join("/");
|
|
48
|
+
}
|
|
49
|
+
/**
|
|
50
|
+
* Build a lightweight code model for a TypeScript/JavaScript file.
|
|
51
|
+
*
|
|
52
|
+
* - Ensures the language is correctly inferred for TS/JS files.
|
|
53
|
+
* - Indexes import statements and simple require() calls.
|
|
54
|
+
* - Indexes top-level function declarations, exported functions, and basic
|
|
55
|
+
* arrow/function expressions assigned to exported variables.
|
|
56
|
+
* - Surfaces parser/diagnostic issues as warnings instead of throwing.
|
|
57
|
+
*/
|
|
58
|
+
function buildCodeModel(file) {
|
|
59
|
+
const warnings = [];
|
|
60
|
+
const normalizedPath = normalizePath(file.path);
|
|
61
|
+
const language = ensureParserLanguage(file, warnings);
|
|
62
|
+
if (!language) {
|
|
63
|
+
warnings.push(`Unsupported language '${file.language}' for TS/JS parser in file '${file.path}'.`);
|
|
64
|
+
// Return a minimal, non-fatal result so callers can safely continue.
|
|
65
|
+
return {
|
|
66
|
+
file,
|
|
67
|
+
normalizedPath,
|
|
68
|
+
// Fallback language is arbitrary here; callers should rely on file.language
|
|
69
|
+
// and the warning above rather than this value when language is unsupported.
|
|
70
|
+
language: "javascript",
|
|
71
|
+
imports: [],
|
|
72
|
+
functions: [],
|
|
73
|
+
warnings,
|
|
74
|
+
};
|
|
75
|
+
}
|
|
76
|
+
let sourceFile;
|
|
77
|
+
try {
|
|
78
|
+
sourceFile = ts.createSourceFile(file.path, file.content ?? "", ts.ScriptTarget.Latest,
|
|
79
|
+
/*setParentNodes*/ true, language === "typescript"
|
|
80
|
+
? ts.ScriptKind.TSX // covers .ts and .tsx
|
|
81
|
+
: ts.ScriptKind.JSX);
|
|
82
|
+
}
|
|
83
|
+
catch (err) {
|
|
84
|
+
const message = err instanceof Error ? err.message : "Unknown parser error creating SourceFile";
|
|
85
|
+
warnings.push(`Failed to parse '${file.path}' as ${language}: ${message}`);
|
|
86
|
+
return {
|
|
87
|
+
file,
|
|
88
|
+
normalizedPath,
|
|
89
|
+
language,
|
|
90
|
+
imports: [],
|
|
91
|
+
functions: [],
|
|
92
|
+
warnings,
|
|
93
|
+
};
|
|
94
|
+
}
|
|
95
|
+
const diagnostics = sourceFile.parseDiagnostics;
|
|
96
|
+
if (diagnostics && diagnostics.length > 0) {
|
|
97
|
+
const first = diagnostics[0];
|
|
98
|
+
const msg = ts.flattenDiagnosticMessageText(first.messageText, " ");
|
|
99
|
+
warnings.push(`Parse diagnostics in '${file.path}': ${msg}`);
|
|
100
|
+
}
|
|
101
|
+
const imports = [];
|
|
102
|
+
const functions = [];
|
|
103
|
+
const toLocation = (node) => {
|
|
104
|
+
const start = sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile));
|
|
105
|
+
const end = sourceFile.getLineAndCharacterOfPosition(node.getEnd());
|
|
106
|
+
return {
|
|
107
|
+
filePath: file.path,
|
|
108
|
+
startLine: start.line + 1,
|
|
109
|
+
endLine: end.line + 1,
|
|
110
|
+
};
|
|
111
|
+
};
|
|
112
|
+
const resolveRelativeImport = (moduleSpecifier) => {
|
|
113
|
+
if (!moduleSpecifier.startsWith("."))
|
|
114
|
+
return undefined;
|
|
115
|
+
const baseDir = normalizePath(nodePath.dirname(file.path));
|
|
116
|
+
const joined = normalizePath(nodePath.join(baseDir, moduleSpecifier));
|
|
117
|
+
return joined;
|
|
118
|
+
};
|
|
119
|
+
const collectImport = (node) => {
|
|
120
|
+
const moduleSpecifier = node.moduleSpecifier.text;
|
|
121
|
+
const importedNames = [];
|
|
122
|
+
const clause = node.importClause;
|
|
123
|
+
const isTypeOnly = !!clause?.isTypeOnly;
|
|
124
|
+
if (clause) {
|
|
125
|
+
if (clause.name) {
|
|
126
|
+
importedNames.push(clause.name.text);
|
|
127
|
+
}
|
|
128
|
+
if (clause.namedBindings) {
|
|
129
|
+
if (ts.isNamespaceImport(clause.namedBindings)) {
|
|
130
|
+
importedNames.push(clause.namedBindings.name.text);
|
|
131
|
+
}
|
|
132
|
+
else if (ts.isNamedImports(clause.namedBindings)) {
|
|
133
|
+
for (const spec of clause.namedBindings.elements) {
|
|
134
|
+
importedNames.push(spec.name.text);
|
|
135
|
+
}
|
|
136
|
+
}
|
|
137
|
+
}
|
|
138
|
+
}
|
|
139
|
+
imports.push({
|
|
140
|
+
moduleSpecifier,
|
|
141
|
+
importedNames,
|
|
142
|
+
isTypeOnly,
|
|
143
|
+
resolvedPath: resolveRelativeImport(moduleSpecifier),
|
|
144
|
+
location: toLocation(node),
|
|
145
|
+
});
|
|
146
|
+
};
|
|
147
|
+
const collectRequireCall = (node) => {
|
|
148
|
+
const expression = node.expression;
|
|
149
|
+
if (!ts.isIdentifier(expression) || expression.text !== "require")
|
|
150
|
+
return;
|
|
151
|
+
if (node.arguments.length === 0)
|
|
152
|
+
return;
|
|
153
|
+
const arg = node.arguments[0];
|
|
154
|
+
if (!ts.isStringLiteral(arg))
|
|
155
|
+
return;
|
|
156
|
+
const moduleSpecifier = arg.text;
|
|
157
|
+
const importedNames = [];
|
|
158
|
+
// Try to infer the bound identifier from a simple `const x = require("y")` pattern.
|
|
159
|
+
if (ts.isVariableDeclaration(node.parent) &&
|
|
160
|
+
ts.isIdentifier(node.parent.name)) {
|
|
161
|
+
importedNames.push(node.parent.name.text);
|
|
162
|
+
}
|
|
163
|
+
imports.push({
|
|
164
|
+
moduleSpecifier,
|
|
165
|
+
importedNames,
|
|
166
|
+
isTypeOnly: false,
|
|
167
|
+
resolvedPath: resolveRelativeImport(moduleSpecifier),
|
|
168
|
+
location: toLocation(node),
|
|
169
|
+
});
|
|
170
|
+
};
|
|
171
|
+
const hasExportModifier = (modifiers) => !!modifiers?.some((m) => m.kind === ts.SyntaxKind.ExportKeyword ||
|
|
172
|
+
m.kind === ts.SyntaxKind.DefaultKeyword);
|
|
173
|
+
const collectFunctionDeclaration = (node) => {
|
|
174
|
+
const name = node.name?.text ?? "<anonymous>";
|
|
175
|
+
const isExported = !!node.modifiers?.some((m) => m.kind === ts.SyntaxKind.ExportKeyword);
|
|
176
|
+
const exportKind = node.modifiers?.some((m) => m.kind === ts.SyntaxKind.DefaultKeyword)
|
|
177
|
+
? "default"
|
|
178
|
+
: isExported
|
|
179
|
+
? "named"
|
|
180
|
+
: undefined;
|
|
181
|
+
functions.push({
|
|
182
|
+
name,
|
|
183
|
+
isExported,
|
|
184
|
+
exportKind,
|
|
185
|
+
location: toLocation(node),
|
|
186
|
+
});
|
|
187
|
+
};
|
|
188
|
+
const collectVariableFunctions = (node) => {
|
|
189
|
+
const isExported = hasExportModifier(node.modifiers);
|
|
190
|
+
for (const decl of node.declarationList.declarations) {
|
|
191
|
+
const init = decl.initializer;
|
|
192
|
+
if (!init ||
|
|
193
|
+
(!ts.isArrowFunction(init) && !ts.isFunctionExpression(init))) {
|
|
194
|
+
continue;
|
|
195
|
+
}
|
|
196
|
+
let name = "<anonymous>";
|
|
197
|
+
if (ts.isIdentifier(decl.name)) {
|
|
198
|
+
name = decl.name.text;
|
|
199
|
+
}
|
|
200
|
+
functions.push({
|
|
201
|
+
name,
|
|
202
|
+
isExported,
|
|
203
|
+
exportKind: isExported ? "named" : undefined,
|
|
204
|
+
location: toLocation(init),
|
|
205
|
+
});
|
|
206
|
+
}
|
|
207
|
+
};
|
|
208
|
+
const collectMethodDeclaration = (node) => {
|
|
209
|
+
let name = "<anonymous>";
|
|
210
|
+
if (ts.isIdentifier(node.name)) {
|
|
211
|
+
name = node.name.text;
|
|
212
|
+
}
|
|
213
|
+
const parent = node.parent;
|
|
214
|
+
const parentIsExported = ts.isClassDeclaration(parent) && hasExportModifier(parent.modifiers);
|
|
215
|
+
functions.push({
|
|
216
|
+
name,
|
|
217
|
+
isExported: parentIsExported,
|
|
218
|
+
exportKind: parentIsExported ? "named" : undefined,
|
|
219
|
+
location: toLocation(node),
|
|
220
|
+
});
|
|
221
|
+
};
|
|
222
|
+
const collectExportAssignment = (node) => {
|
|
223
|
+
const expr = node.expression;
|
|
224
|
+
if (!ts.isFunctionExpression(expr) && !ts.isArrowFunction(expr))
|
|
225
|
+
return;
|
|
226
|
+
const name = "<anonymous>";
|
|
227
|
+
functions.push({
|
|
228
|
+
name,
|
|
229
|
+
isExported: true,
|
|
230
|
+
exportKind: "default",
|
|
231
|
+
location: toLocation(expr),
|
|
232
|
+
});
|
|
233
|
+
};
|
|
234
|
+
const visit = (node) => {
|
|
235
|
+
if (ts.isImportDeclaration(node)) {
|
|
236
|
+
collectImport(node);
|
|
237
|
+
}
|
|
238
|
+
else if (ts.isCallExpression(node)) {
|
|
239
|
+
collectRequireCall(node);
|
|
240
|
+
}
|
|
241
|
+
else if (ts.isFunctionDeclaration(node)) {
|
|
242
|
+
collectFunctionDeclaration(node);
|
|
243
|
+
}
|
|
244
|
+
else if (ts.isVariableStatement(node)) {
|
|
245
|
+
collectVariableFunctions(node);
|
|
246
|
+
}
|
|
247
|
+
else if (ts.isMethodDeclaration(node)) {
|
|
248
|
+
collectMethodDeclaration(node);
|
|
249
|
+
}
|
|
250
|
+
else if (ts.isExportAssignment(node)) {
|
|
251
|
+
collectExportAssignment(node);
|
|
252
|
+
}
|
|
253
|
+
ts.forEachChild(node, visit);
|
|
254
|
+
};
|
|
255
|
+
visit(sourceFile);
|
|
256
|
+
return {
|
|
257
|
+
file,
|
|
258
|
+
normalizedPath,
|
|
259
|
+
language,
|
|
260
|
+
imports,
|
|
261
|
+
functions,
|
|
262
|
+
warnings,
|
|
263
|
+
};
|
|
264
|
+
}
|
|
265
|
+
function ensureParserLanguage(file, warnings) {
|
|
266
|
+
const ext = nodePath.extname(file.name || file.path).toLowerCase();
|
|
267
|
+
let fromExtension;
|
|
268
|
+
if (ext === ".ts" || ext === ".tsx") {
|
|
269
|
+
fromExtension = "typescript";
|
|
270
|
+
}
|
|
271
|
+
else if (ext === ".js" ||
|
|
272
|
+
ext === ".jsx" ||
|
|
273
|
+
ext === ".mjs" ||
|
|
274
|
+
ext === ".cjs") {
|
|
275
|
+
fromExtension = "javascript";
|
|
276
|
+
}
|
|
277
|
+
if (!fromExtension) {
|
|
278
|
+
if (file.language === "typescript" || file.language === "javascript") {
|
|
279
|
+
return file.language;
|
|
280
|
+
}
|
|
281
|
+
return undefined;
|
|
282
|
+
}
|
|
283
|
+
if (file.language !== fromExtension) {
|
|
284
|
+
warnings.push(`File language '${file.language}' adjusted to '${fromExtension}' based on extension '${ext}' for '${file.path}'.`);
|
|
285
|
+
}
|
|
286
|
+
return fromExtension;
|
|
287
|
+
}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.detectExternalApiCalls = detectExternalApiCalls;
|
|
4
|
+
const engine_1 = require("../../patterns/engine");
|
|
5
|
+
function detectExternalApiCalls(file, model) {
|
|
6
|
+
const importsForEngine = model.imports.map((imp) => ({
|
|
7
|
+
module: imp.moduleSpecifier,
|
|
8
|
+
names: imp.importedNames,
|
|
9
|
+
}));
|
|
10
|
+
return (0, engine_1.matchPatterns)({
|
|
11
|
+
language: model.language,
|
|
12
|
+
file,
|
|
13
|
+
imports: importsForEngine,
|
|
14
|
+
includeThirdPartyHttpLinePatterns: true,
|
|
15
|
+
}).filter((f) => f.pattern === "external_api_call");
|
|
16
|
+
}
|
|
@@ -0,0 +1,68 @@
|
|
|
1
|
+
import { type PatternId } from "../../core/types/detection";
|
|
2
|
+
/** Normalized config entries (after validation); patternId is guaranteed valid. */
|
|
3
|
+
export interface WithPatternId {
|
|
4
|
+
patternId: PatternId;
|
|
5
|
+
}
|
|
6
|
+
export interface RouteFrameworkConfig extends WithPatternId {
|
|
7
|
+
id: string;
|
|
8
|
+
imports: string[];
|
|
9
|
+
routeCallRegexes: RegExp[];
|
|
10
|
+
controllerDecoratorRegexes: RegExp[];
|
|
11
|
+
routeDecoratorRegexes: RegExp[];
|
|
12
|
+
confidence: number;
|
|
13
|
+
}
|
|
14
|
+
export interface DbClientConfig extends WithPatternId {
|
|
15
|
+
id: string;
|
|
16
|
+
databaseType: string;
|
|
17
|
+
importModules: string[];
|
|
18
|
+
creationRegexes: RegExp[];
|
|
19
|
+
/** Confidence when a creation regex matches; import-only uses confidence - 0.2 (min 0.5). */
|
|
20
|
+
confidence: number;
|
|
21
|
+
}
|
|
22
|
+
export interface AuthLibraryConfig extends WithPatternId {
|
|
23
|
+
id: string;
|
|
24
|
+
importFragments: string[];
|
|
25
|
+
callRegexes: RegExp[];
|
|
26
|
+
confidence: number;
|
|
27
|
+
}
|
|
28
|
+
export interface ConfigKeyConfig extends WithPatternId {
|
|
29
|
+
name: string;
|
|
30
|
+
confidence: number;
|
|
31
|
+
}
|
|
32
|
+
export interface HeuristicsConfig {
|
|
33
|
+
processEnv: {
|
|
34
|
+
regex: RegExp;
|
|
35
|
+
confidence: number;
|
|
36
|
+
};
|
|
37
|
+
sqlKeyword: {
|
|
38
|
+
regex: RegExp;
|
|
39
|
+
patternId: PatternId;
|
|
40
|
+
confidence: number;
|
|
41
|
+
};
|
|
42
|
+
nextRouteHandler: {
|
|
43
|
+
regex: RegExp;
|
|
44
|
+
confidence: number;
|
|
45
|
+
};
|
|
46
|
+
configKeyAccess: {
|
|
47
|
+
regex: RegExp;
|
|
48
|
+
};
|
|
49
|
+
}
|
|
50
|
+
export interface TypeScriptPatternConfig {
|
|
51
|
+
routes: {
|
|
52
|
+
frameworks: RouteFrameworkConfig[];
|
|
53
|
+
};
|
|
54
|
+
dbClients: DbClientConfig[];
|
|
55
|
+
auth: {
|
|
56
|
+
libraries: AuthLibraryConfig[];
|
|
57
|
+
};
|
|
58
|
+
heuristics: HeuristicsConfig;
|
|
59
|
+
envVariables: {
|
|
60
|
+
importantKeys: string[];
|
|
61
|
+
};
|
|
62
|
+
configKeys: {
|
|
63
|
+
keys: ConfigKeyConfig[];
|
|
64
|
+
};
|
|
65
|
+
}
|
|
66
|
+
/** Clears the config cache (for tests). */
|
|
67
|
+
export declare function clearTypeScriptPatternConfigCache(): void;
|
|
68
|
+
export declare function loadTypeScriptPatternConfig(): TypeScriptPatternConfig;
|
|
@@ -0,0 +1,171 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.clearTypeScriptPatternConfigCache = clearTypeScriptPatternConfigCache;
|
|
7
|
+
exports.loadTypeScriptPatternConfig = loadTypeScriptPatternConfig;
|
|
8
|
+
const fs_1 = __importDefault(require("fs"));
|
|
9
|
+
const path_1 = __importDefault(require("path"));
|
|
10
|
+
const yaml_1 = __importDefault(require("yaml"));
|
|
11
|
+
const detection_1 = require("../../core/types/detection");
|
|
12
|
+
/** Default confidence when not specified in YAML. */
|
|
13
|
+
const DEFAULT_CONFIDENCE = 0.8;
|
|
14
|
+
function validatePatternId(rawValue, context) {
|
|
15
|
+
const id = String(rawValue);
|
|
16
|
+
if (!detection_1.PATTERN_IDS.includes(id)) {
|
|
17
|
+
throw new Error(`Invalid patternId '${rawValue}' in ${context}`);
|
|
18
|
+
}
|
|
19
|
+
return id;
|
|
20
|
+
}
|
|
21
|
+
function compileRegex(pattern, flags) {
|
|
22
|
+
try {
|
|
23
|
+
return new RegExp(pattern, flags ?? "");
|
|
24
|
+
}
|
|
25
|
+
catch (err) {
|
|
26
|
+
const message = err instanceof Error ? err.message : "Unknown regex compilation error";
|
|
27
|
+
throw new Error(`Invalid regex pattern '${pattern}': ${message}`);
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
function compileRegexList(patterns) {
|
|
31
|
+
if (!patterns || patterns.length === 0) {
|
|
32
|
+
return [];
|
|
33
|
+
}
|
|
34
|
+
return patterns.map((p) => compileRegex(p));
|
|
35
|
+
}
|
|
36
|
+
function normalizeRawConfig(raw) {
|
|
37
|
+
const frameworks = raw.routes?.frameworks?.map((fw) => {
|
|
38
|
+
const patternId = validatePatternId(fw.patternId, `routes.frameworks entry '${fw.id}'`);
|
|
39
|
+
return {
|
|
40
|
+
id: fw.id,
|
|
41
|
+
patternId,
|
|
42
|
+
imports: fw.imports ?? [],
|
|
43
|
+
routeCallRegexes: compileRegexList(fw.routeCallRegexes),
|
|
44
|
+
controllerDecoratorRegexes: compileRegexList(fw.controllerDecoratorRegexes),
|
|
45
|
+
routeDecoratorRegexes: compileRegexList(fw.routeDecoratorRegexes),
|
|
46
|
+
confidence: fw.confidence ?? DEFAULT_CONFIDENCE,
|
|
47
|
+
};
|
|
48
|
+
}) ?? [];
|
|
49
|
+
const dbClients = raw.db_clients?.map((c) => {
|
|
50
|
+
const patternId = validatePatternId(c.patternId, `db_clients entry '${c.id}'`);
|
|
51
|
+
return {
|
|
52
|
+
id: c.id,
|
|
53
|
+
patternId,
|
|
54
|
+
databaseType: c.databaseType,
|
|
55
|
+
importModules: c.importModules ?? [],
|
|
56
|
+
creationRegexes: compileRegexList(c.regexes),
|
|
57
|
+
confidence: c.confidence ?? DEFAULT_CONFIDENCE,
|
|
58
|
+
};
|
|
59
|
+
}) ?? [];
|
|
60
|
+
const authLibraries = raw.auth?.libraries?.map((lib) => {
|
|
61
|
+
const patternId = validatePatternId(lib.patternId, `auth.libraries entry '${lib.id}'`);
|
|
62
|
+
return {
|
|
63
|
+
id: lib.id,
|
|
64
|
+
patternId,
|
|
65
|
+
importFragments: lib.importFragments ?? [],
|
|
66
|
+
callRegexes: compileRegexList(lib.regexes),
|
|
67
|
+
confidence: lib.confidence ?? DEFAULT_CONFIDENCE,
|
|
68
|
+
};
|
|
69
|
+
}) ?? [];
|
|
70
|
+
const configKeys = raw.config_keys?.keys?.map((k) => {
|
|
71
|
+
const patternId = validatePatternId(k.patternId, `config_keys.keys entry '${k.name}'`);
|
|
72
|
+
return {
|
|
73
|
+
name: k.name,
|
|
74
|
+
patternId,
|
|
75
|
+
confidence: k.confidence ?? DEFAULT_CONFIDENCE,
|
|
76
|
+
};
|
|
77
|
+
}) ?? [];
|
|
78
|
+
const importantKeys = raw.env_variables?.importantKeys?.slice() ?? [];
|
|
79
|
+
const h = raw.heuristics;
|
|
80
|
+
if (!h?.processEnv?.regex || !h?.sqlKeyword?.regex || !h?.nextRouteHandler?.regex || !h?.configKeyAccess?.regex) {
|
|
81
|
+
throw new Error("TypeScript pattern config requires heuristics.processEnv.regex, heuristics.sqlKeyword.regex, heuristics.nextRouteHandler.regex, and heuristics.configKeyAccess.regex in the YAML file.");
|
|
82
|
+
}
|
|
83
|
+
const processEnvRegex = compileRegex(h.processEnv.regex);
|
|
84
|
+
const sqlKeywordRegex = compileRegex(h.sqlKeyword.regex, "i");
|
|
85
|
+
const nextRouteHandlerRegex = compileRegex(h.nextRouteHandler.regex);
|
|
86
|
+
const configKeyAccessRegex = compileRegex(h.configKeyAccess.regex);
|
|
87
|
+
const sqlKeywordPatternId = h.sqlKeyword.patternId
|
|
88
|
+
? validatePatternId(h.sqlKeyword.patternId, "heuristics.sqlKeyword")
|
|
89
|
+
: "database_connection";
|
|
90
|
+
const heuristics = {
|
|
91
|
+
processEnv: {
|
|
92
|
+
regex: processEnvRegex,
|
|
93
|
+
confidence: h.processEnv.confidence ?? 0.95,
|
|
94
|
+
},
|
|
95
|
+
sqlKeyword: {
|
|
96
|
+
regex: sqlKeywordRegex,
|
|
97
|
+
patternId: sqlKeywordPatternId,
|
|
98
|
+
confidence: h.sqlKeyword.confidence ?? 0.6,
|
|
99
|
+
},
|
|
100
|
+
nextRouteHandler: {
|
|
101
|
+
regex: nextRouteHandlerRegex,
|
|
102
|
+
confidence: h.nextRouteHandler.confidence ?? 0.75,
|
|
103
|
+
},
|
|
104
|
+
configKeyAccess: { regex: configKeyAccessRegex },
|
|
105
|
+
};
|
|
106
|
+
return {
|
|
107
|
+
routes: {
|
|
108
|
+
frameworks,
|
|
109
|
+
},
|
|
110
|
+
dbClients,
|
|
111
|
+
auth: {
|
|
112
|
+
libraries: authLibraries,
|
|
113
|
+
},
|
|
114
|
+
heuristics,
|
|
115
|
+
envVariables: {
|
|
116
|
+
importantKeys,
|
|
117
|
+
},
|
|
118
|
+
configKeys: {
|
|
119
|
+
keys: configKeys,
|
|
120
|
+
},
|
|
121
|
+
};
|
|
122
|
+
}
|
|
123
|
+
let cachedConfig;
|
|
124
|
+
/** Clears the config cache (for tests). */
|
|
125
|
+
function clearTypeScriptPatternConfigCache() {
|
|
126
|
+
cachedConfig = undefined;
|
|
127
|
+
}
|
|
128
|
+
function getPatternsFilePath() {
|
|
129
|
+
// During tests, this module runs from src/analyzers/typescript.
|
|
130
|
+
// In the built package, it runs from dist/src/analyzers/typescript.
|
|
131
|
+
// We want the CLI package root that contains the `patterns/` directory.
|
|
132
|
+
const parts = __dirname.split(path_1.default.sep);
|
|
133
|
+
const distIndex = parts.lastIndexOf("dist");
|
|
134
|
+
let cliRoot;
|
|
135
|
+
if (distIndex !== -1) {
|
|
136
|
+
// e.g. /path/to/cli/dist/src/analyzers/typescript -> /path/to/cli
|
|
137
|
+
cliRoot = parts.slice(0, distIndex).join(path_1.default.sep);
|
|
138
|
+
}
|
|
139
|
+
else {
|
|
140
|
+
// e.g. /path/to/cli/src/analyzers/typescript -> /path/to/cli
|
|
141
|
+
cliRoot = path_1.default.resolve(__dirname, "../../..");
|
|
142
|
+
}
|
|
143
|
+
return path_1.default.join(cliRoot, "patterns", "typescript.patterns.yaml");
|
|
144
|
+
}
|
|
145
|
+
function loadTypeScriptPatternConfig() {
|
|
146
|
+
if (cachedConfig) {
|
|
147
|
+
return cachedConfig;
|
|
148
|
+
}
|
|
149
|
+
const patternsPath = getPatternsFilePath();
|
|
150
|
+
let raw;
|
|
151
|
+
try {
|
|
152
|
+
raw = fs_1.default.readFileSync(patternsPath, "utf8");
|
|
153
|
+
}
|
|
154
|
+
catch (err) {
|
|
155
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
156
|
+
throw new Error(`TypeScript pattern config is required but could not be read from '${patternsPath}': ${message}`);
|
|
157
|
+
}
|
|
158
|
+
const parsed = yaml_1.default.parse(raw);
|
|
159
|
+
if (!parsed || typeof parsed !== "object") {
|
|
160
|
+
throw new Error(`TypeScript pattern config at '${patternsPath}' did not parse to an object.`);
|
|
161
|
+
}
|
|
162
|
+
try {
|
|
163
|
+
const normalized = normalizeRawConfig(parsed);
|
|
164
|
+
cachedConfig = normalized;
|
|
165
|
+
return normalized;
|
|
166
|
+
}
|
|
167
|
+
catch (err) {
|
|
168
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
169
|
+
throw new Error(`Invalid TypeScript pattern config at '${patternsPath}': ${message}`);
|
|
170
|
+
}
|
|
171
|
+
}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import type { FileInfo } from "../../core/types/file";
|
|
2
|
+
import type { RawFinding } from "../../core/types/detection";
|
|
3
|
+
import type { ParserResult } from "./parser";
|
|
4
|
+
type TsPatternDetector = (file: FileInfo, model: ParserResult) => RawFinding[];
|
|
5
|
+
export declare const detectRoutePatterns: TsPatternDetector;
|
|
6
|
+
export declare const detectDatabaseConnections: TsPatternDetector;
|
|
7
|
+
export declare const detectExternalApiCalls: TsPatternDetector;
|
|
8
|
+
export declare const detectAuthMiddleware: TsPatternDetector;
|
|
9
|
+
export declare const detectConfigAndEnvUsage: TsPatternDetector;
|
|
10
|
+
export {};
|
|
@@ -0,0 +1,57 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.detectConfigAndEnvUsage = exports.detectAuthMiddleware = exports.detectExternalApiCalls = exports.detectDatabaseConnections = exports.detectRoutePatterns = void 0;
|
|
4
|
+
const third_party_detection_1 = require("./third-party-detection");
|
|
5
|
+
const engine_1 = require("../../patterns/engine");
|
|
6
|
+
function toImportLikes(model) {
|
|
7
|
+
return model.imports.map((imp) => ({
|
|
8
|
+
module: imp.moduleSpecifier,
|
|
9
|
+
names: imp.importedNames,
|
|
10
|
+
}));
|
|
11
|
+
}
|
|
12
|
+
const detectRoutePatterns = (file, model) => {
|
|
13
|
+
const importsForEngine = toImportLikes(model);
|
|
14
|
+
const allFindings = (0, engine_1.matchPatterns)({
|
|
15
|
+
language: model.language,
|
|
16
|
+
file,
|
|
17
|
+
imports: importsForEngine,
|
|
18
|
+
normalizedPath: model.normalizedPath,
|
|
19
|
+
});
|
|
20
|
+
return allFindings.filter((f) => f.pattern === "express_route");
|
|
21
|
+
};
|
|
22
|
+
exports.detectRoutePatterns = detectRoutePatterns;
|
|
23
|
+
const detectDatabaseConnections = (file, model) => {
|
|
24
|
+
const importsForEngine = toImportLikes(model);
|
|
25
|
+
const allFindings = (0, engine_1.matchPatterns)({
|
|
26
|
+
language: model.language,
|
|
27
|
+
file,
|
|
28
|
+
imports: importsForEngine,
|
|
29
|
+
normalizedPath: model.normalizedPath,
|
|
30
|
+
});
|
|
31
|
+
return allFindings.filter((f) => f.pattern === "database_connection");
|
|
32
|
+
};
|
|
33
|
+
exports.detectDatabaseConnections = detectDatabaseConnections;
|
|
34
|
+
const detectExternalApiCalls = (file, model) => (0, third_party_detection_1.detectExternalApiCalls)(file, model);
|
|
35
|
+
exports.detectExternalApiCalls = detectExternalApiCalls;
|
|
36
|
+
const detectAuthMiddleware = (file, model) => {
|
|
37
|
+
const importsForEngine = toImportLikes(model);
|
|
38
|
+
const allFindings = (0, engine_1.matchPatterns)({
|
|
39
|
+
language: model.language,
|
|
40
|
+
file,
|
|
41
|
+
imports: importsForEngine,
|
|
42
|
+
normalizedPath: model.normalizedPath,
|
|
43
|
+
});
|
|
44
|
+
return allFindings.filter((f) => f.pattern === "auth_middleware");
|
|
45
|
+
};
|
|
46
|
+
exports.detectAuthMiddleware = detectAuthMiddleware;
|
|
47
|
+
const detectConfigAndEnvUsage = (file, model) => {
|
|
48
|
+
const importsForEngine = toImportLikes(model);
|
|
49
|
+
const allFindings = (0, engine_1.matchPatterns)({
|
|
50
|
+
language: model.language,
|
|
51
|
+
file,
|
|
52
|
+
imports: importsForEngine,
|
|
53
|
+
normalizedPath: model.normalizedPath,
|
|
54
|
+
});
|
|
55
|
+
return allFindings.filter((f) => f.pattern === "env_variable" || f.pattern === "config_file");
|
|
56
|
+
};
|
|
57
|
+
exports.detectConfigAndEnvUsage = detectConfigAndEnvUsage;
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import type { DetectedComponent } from "../core/types/component";
|
|
2
|
+
import type { ServiceSection } from "../core/sectioning/discover-service-sections";
|
|
3
|
+
/** Synthetic main app created when no code hub exists (e.g. IaC-only scan). */
|
|
4
|
+
export declare const INJECTED_PROJECT_PLACEHOLDER_SOURCE_CONTEXT: "injected_project_placeholder";
|
|
5
|
+
export declare function injectApplicationAssetsPerSectionIfMissing(components: DetectedComponent[], sections: ServiceSection[], opts?: {
|
|
6
|
+
projectName?: string;
|
|
7
|
+
}): DetectedComponent[];
|
|
8
|
+
export declare function injectApplicationAssetIfMissing(components: DetectedComponent[], opts?: {
|
|
9
|
+
projectName?: string;
|
|
10
|
+
}): DetectedComponent[];
|
|
11
|
+
export declare function injectActorIfMissing(components: DetectedComponent[]): DetectedComponent[];
|
|
12
|
+
export declare function synthesizeSectionApiNodes(components: DetectedComponent[]): DetectedComponent[];
|